last executing test programs: 35.173020896s ago: executing program 2: r0 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r5 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r5, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) bind$inet6(r5, &(0x7f0000000100)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000040)={0x0, 0xdd8ec, &(0x7f0000000fc0)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c009985f2330fd547793c000800a0003a0900080500390104000000080026"], 0x40}}, 0x0) sendmmsg(r0, &(0x7f0000000480), 0x2e9, 0x0) getsockopt$inet6_opts(r0, 0x29, 0x3b, 0x0, &(0x7f0000000040)) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) sendmsg(0xffffffffffffffff, &(0x7f0000001c00)={0x0, 0x0, &(0x7f0000001940)=[{&(0x7f0000000200)="f9", 0x1}], 0x1}, 0x0) close(0xffffffffffffffff) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001e000100000000000000000007000000", @ANYRES32=0x0, @ANYBLOB="0000000008000f0040"], 0x24}}, 0x0) r7 = socket$kcm(0x2, 0x1000000000000002, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000002540)=ANY=[@ANYBLOB="b702000003000000bfa30000000000000703000000feffff7a0af0ff0100000079a4f0ff00000000b7060000ffffffff2d6405000000000065040400010000000404000001007d60b7030000000000006a0a00fe00000000850000000d000000b70000000000000095000000000000005ecefab8f2e85c6c1ca711fcd0cdfa146ec561750379585e5a076d839240d29c034055b67dafe6c8dc3d5d78c07fa1f7e655ced4fbd44e24eb0d34e4d5b3185fec0e07004e60c08dc8b8dbf11e6e94d75938321a3aa502cd2424a66e6d2ef831ab7ea0c34f07e3946ef3bb622003b538dfd8e012e79578e51bc53099e90f4580d760551b5b341a29f31e3a06d1ddd6152f7cbdb9cd38bdb2209c67deca8eeb9c15ab3a14817ac61e4dd11183a13477bf7e860e3670ef0e789f65f1328d6704902cbe7bc04b82d2789cb132b8667c2147661df28d9961b63e1a9cf6c2a660a1fe3c184b751c51160fb20b1c581e7be6ba0dc001c4110555850915148ba532e6ea09c346dfebd38608b3280080005d9a9500000000000000334d83239dd27080851dcac3c12233f9a1fb9c2aec61ce63a38d2fd50117b89a9ab359b4eea0c6e95767d42b4e54861d0227dbfd2e6d7f715a7f3deadd7130856f756436303767d2e24f29e5dad9796edb697aeea0182babd18cac1bd4f4390af9a9ceafd0002cab154ad029a1090000002780870014f51c3c975d5aec84222fff0d7216fdb0d3a0ec4be3e563112f0b39501aafe234870072858dc06e7c337642d3e5a815232f5e16c1b30c3a6a71bc85018e5ff2c91018afc9ffc2cc788bee1b47683db01a4693685211dfbbae3e2ed0a50e7313bff5d4c391ddece00fc772dd6b4d4de2a41990f05ca3bdfc92c88c5b8dcd36e7487afa447e2edfae4f390a8337841cef386e22cc22ee17476d738952229682e24b92533ac2a9f5a699593f084419cae0b4532bcc97d3ae486aca54183fb01c73f979ca9857399537f5dc2acb72e7ead0509d380578673f8b6e74ce23877a6b24db0e067345560942ea629fbef2461c96a088a22e8b15c3e233db7ab22e30d46a9d24d37cef099ece729aa218f9f44a3210223fdae7ed04935c3c90941576aebc8619d73415cda2130f5011e4845505008000000000004f50adab988dd8e12baf5cc9398fff00404d5d99f82e20ee6a8c88e18c2977aab37d9ac4cfc1c7b400000000000007ff57c39495d5e41ff868f7ca1664fe2f3ced846891180604b6dd2499d16d7d9158ffffffff00000000ef069dc42749a89f854797f29d0000002d8c38a967c1bbe09315c298d9a331bcc80000000008141bdee5d27874b2f663ddeef0005b3d96c7aabf4df517d90bdc01e73835d5a3e1a90800c66ee2b1ad76dff9f9000071414c99d4894ee7f8249dc1e3428d2129369ee1b85af6eb2eea0d0df414b315f651c8412392191fa83ee830548f11e1036a8debd64cbe359454a3f2239cfe35f81b7a490f167e6d5c1109000000000000000042b8ff8c21ad702ccacad5b39eef213d1ca296d2a27798c8ce2a305c040035cf4b22549a4bd92052188bd1f285f653b621491dc6aaee0200e2ff08644fb94c06006eff1be2f633c1d987591ec3db58a7bb3042ec3f771f7a1338a5c3dd35e926049fe86e09c58e273cd905deb28c13c1ed1c0d9cae846bcbfa8cce7b893e578af7dc7d5e87d44ff828de453f34c2b18660b080efc707e676e1fb4d5825c0ca177a4c7fbb4e62b445c00f576b2b5cc7f819abd0f885cc4806f40300966fcf1e54f5a2d38708194cd6f496e509e734fe7da3770845cf442d488afdc0e1700000000000000000000000000000000000000000000000000000520500002952a93466ae595c6a8cda690d192a070886df42b27098773b45198b4a34ac977ebd4450e121d01342703f5bf030e935878a6d169c80aa4252d4ea6b8f6216ff202b5b5a182cb5e838b307632d03a7ca6f6d0339f9953c3093c3690d10ecb65dc5b47481edbf1f000000000000004d16d29c28eb5167e9936ed327fb237a62415f78000000005f0dec1b3ccd35364600000000000000000000000000000000000000000000000000000000000026ded4dd6fe1518cc7802043ecfe69f743f1213bf8179ecd9e5a225d67521dc728eac7d80a5656ac2cbde21d3ebfbf69ff861f4394836ddf128d6d19079e64336e7c676505c78ad67548f4b192be1827fcd95cf107753cb0a6a979d3db0c81c6281e2d8429a863903ca75f4c7df3ea8fc2018d07af1491ef060cd4403a099f32468f65bd06b40824095135861b5cc03f1a1561f0589e0d12969bc982ff5d8e9b986c0c6c747d9a1cc500bb892c3a16ff10feea20bdac0000000000000000ca06f256c8028e0f9b65f037b21f3289f86a6826c69fa35ba5cbc3f2db1516ffc5c6e3fa618b24a6ce16d6c7010bb37b61fa0a2d8974e69115d33394e86e5dd921a5eadd4b838297ba20f96936b7e4746e92dea6c5d1d33d84d96b50fb000000ae07c65b71088dd7d5d1e1bab9000000000000000000000000b5ace293bec833c13e3229432ad71d646218b5229dd88137fc7c59aa242af3bb4efb82055a3b61227ad40f52c9f2500579aca11033ecff079cc16bd83a00840e602c28ec78e116ae46c4897e2795b6ff020000004b0b855c02f2b7add58ffb25f339297729a7a51810134d3dfbf71f6516737be55c06d9cdcfb1e29b10b50000eb4acff90756dba1ecf9f58afd3c19b5c455c9c022e8d03fe28bc358684492aa771dbfe8e4cd14dc5c1eb98b63198f6f830745fe89ad349ffaad76ff9dd643796caffdf67af5dd476c37e7e9a84e2e5da2696e285a59b51c34a5384f2cf51180c159ce40c14089c82759106f422582b42e3e8484ea5a6ad9aa52106eafe0e0caea1ad4cb23f3c2b8a0f455ba69ea284c268d54b43158a8b1d128d02af243b3dc1cab794c9ac57a2a7332f4d8764c302ccd5aac114482b619fc575aa0dd2777e881e29a854380ecf1e49db5a1517ec40bb3fa44f9959bad67ccaba76408da35c9f1534c8bd48bbd61627a2e0a74b5e6aefb7eee403502734a37ff47257f164391c673b6079e65d7295eed164ca63e4ea26dce0fb3ce0f6591d80dfb8f386bb79f558982d57c556ca1427b5960b7999054df5fb6410bc3cdc8517d817367565ca2a20996fcba472213744d3a156979651596afde2b0089f023fcfccd0712ebd1f7682bd6ea8445fc787390d71ec61d5b7b0f05f6931914bf49d66f07dd646bfbdea1cf021a88aa0d66eff294271a93e32f54f281068514a4cd2d0700a43df59e9924e4affdbd22405e675e9d7cdc10546571131831d4dc8c8363077a908d9ae4f27ff095f5b07667f93a3573d3fabfca58ee0a6b6a691102bb3c7be4dc5b816853275e7ae8c13ec341bad15353fad794b46c4fd73e1b4cc78de2156cb158870d5b8446dae9ba5f7f244e6cf8f6791671057347208a313ebbcb72b04706005670f2b0055e440d72c7c3316982c6ebe8675459cf6bb393b007f5cedb7bc411834600000000000000000000000000a20071b07d568a8150ed646b4999d878d0226d9651647a5999ae7c7c85322a215fcdb1adbad63499518fe0d10145d430422c78367dfa941f74b63f3884565ac89c673da2c2b1172be5f2cd1f3f453ebddc432bd24c73fa773b739e20fcec29a821230654a383ac1868495f67d942c772ca75e09073dbe9307ff5cac7c2c411149a4d989a8a019e068da218d4bc34e4102fd2f97397331e4cd70b49155831635f07ca87f00dc929f902540f565c20add8675b79e005cf0277d954697317b907b77fa5d6b7feaebaf676a2a37de8aa70748fee4bc198ffd3e2de11eb0eff896fd94de0805ba6b1054a7b3e300d4581e9af62a1ecaee96d2819b3d192e5b9561eb622da25450f586be14017a1cf74f89a1dd18af004decfe266134c3d036ae7996931fe6008a73ed34c35f0da4ffee1fe63bc1af6ef1b4731d50b8ceb582a1e9c6e8d97f8290cc105754f592d16ccdb1df8636d7ca5e372cea97dd0f005cc7092b126dd46758917fb0d94b8483d403bd451429cc1660f0b5a529d8134dc2702f6d8e2f943d98fbe50a3ba653f13f98a00fcbf311f9758ade8e4eb87b4b9fb2d09005d8c4bdcab2fff9ed8c9de961fd831a070381c8020352fea7c334b2959ddd956701a7ea415e224a81c9fa1ebbabe74f7743e09b6c8b72650b51d5c2000ef3679c039b3604374fc1af7ab354204afbd24f0e701bc08a98452ce2668617e85e0d876f5a8b6d9b777f1c384d8a9883e30ede126fc485972eca6ad5b8d324262defb6b9aab8d5b76bc91ca50f87966797da2499ca0ac76707c0408a7b6d8708fe7714988babdc11f00008ca6907624ceaa181126d0925c8e98f73496c90758ce3f8c2a596450dcf6333c1b361084a7ebd71dff6733cc460de5d23738a3bf37023df054b2a8db0d8d6d34754b9d71c2ee75f50a2b9770586466803918fa9bb8af8c0caffb2b5df6ed657a0cc609e9cd20c7a82d0cf1cfb455c1f3439989d722ea2f843eff50ec162b21db3f35555d0e85e3bdfafd08913fd6cedc3cafde55fec7b6fb9aa5823bedd57cf4b638547b5744133dbe9521fb2dc979f5b299dbf74ebbe1c7dcf814406f65d373c35e0bd3f8971c704e60b03c47cb828fc3da6cbcb0fe377b50d62f0029a1c76dcfc676f44da4009929c51d5a66763d3f723fa5e7d915e80744"], &(0x7f0000000340)='syzkaller\x00'}, 0x48) setsockopt$sock_attach_bpf(r7, 0x88, 0x67, &(0x7f00000002c0)=r8, 0x4) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x2, 0x1, 0x88}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) sendmsg$NL80211_CMD_TRIGGER_SCAN(r9, &(0x7f0000000340)={0x0, 0x1d, &(0x7f0000000300)={&(0x7f0000001940)={0x28, r10, 0x5, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x28}, 0x1, 0x0, 0x0, 0x40000}, 0x0) accept4$bt_l2cap(r6, &(0x7f0000000040)={0x1f, 0x0, @fixed}, &(0x7f00000000c0)=0xe, 0x80000) 35.090599574s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000001000000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r1}, 0x10) r2 = socket$inet(0x2, 0x3, 0x5) sendmsg$inet(r2, &(0x7f0000000600)={&(0x7f0000000140)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f00000000c0)=ANY=[], 0xf}, 0x0) r3 = epoll_create1(0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000000100)={0xa, 0x4e22}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000021c0)={@local, @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "0400", 0x18, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x0, 0x0, 0x0, {[@generic={0x13, 0x2}]}}}}}}}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f000057eff8)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f00000bd000), 0x318, 0x0) recvmmsg(r5, &(0x7f00000000c0), 0x10106, 0x2, 0x0) r7 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r6, &(0x7f0000000100)={0x20000014}) epoll_ctl$EPOLL_CTL_ADD(r7, 0x1, r3, &(0x7f0000000000)={0xa0000001}) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, 0x0}, 0x0) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c00000052000100000000000000000002000000080001"], 0x1c}}, 0x40) epoll_wait(r7, &(0x7f0000000380)=[{}], 0x2, 0x1000) 33.341989231s ago: executing program 2: socket(0x0, 0x0, 0x0) connect$inet6(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$inet(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000040)={0x0, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x2, 0x1800}, {0x2, 0x0, @dev}, 0x305}) 31.969931705s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000080)=0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000140)={&(0x7f0000000100)={0x1d, r4}, 0x10, &(0x7f0000000180)={0x0}, 0x2}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000006ec0)={&(0x7f0000006dc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000006e80)={&(0x7f0000006e00)=ANY=[@ANYRES32=r4, @ANYBLOB="080001000100000008000100010000000800010080000000080001000000000008000100000000000800010000000000"], 0x58}, 0x1, 0x0, 0x0, 0x2000c010}, 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000800), 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000480), 0xc, &(0x7f0000000880)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="ffff29030000b91bfa397232c0bd0f1702740181bd18f792a120c44d", @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=r6, @ANYBLOB], 0xa4}}, 0x4064005) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x88, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x50483, 0x1}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x54, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_IKEY={0x8, 0x4, 0x20000}]}}}]}, 0x88}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001940)={0x114, 0x2b, 0x9f2d3d3f99cf9fb9, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1800000066002501"], 0x18}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) 31.957337714s ago: executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="68000000150001000000000000000000ff020000000000000000000000000001e000000100"/64, @ANYRES32=0x0, @ANYBLOB="7bd866958a0336bd842b7d3fb6bc7cb9b720e9f3f91f78d493e16e7d7b9051cc92094244e30ef69254239ad213190b060c6cd3b593c875e648e4804092725c8eeed1222cf1601daecd0e2d91f3567469efcad5570f116b984629e8225f9ad6dfcd0c563c2e7c4c4af0f901253a417bf61d4975de01abdd22cee650311e3af43991083b18fe3d827696fda18de02b7a54d4a30070c3a3ad2250424d5a92e677c7f5bf6ca25ee2a0986143e4ba451cf2234ab27d9eeae3e3053b6582a00d41e5cfda68e85a34e24c97967ecb3ec62ff72b3f5d40010a060dd201acd54fd6e88c7527544742e23ecf42d6a8c35b2ae46ee59d347c", @ANYBLOB="0000e882db8900000c00080008000800000000000a0010"], 0x68}}, 0x0) 31.945565819s ago: executing program 3: r0 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r0, &(0x7f00000004c0)={&(0x7f0000000140)={0x2, 0x0, @local}, 0x10, &(0x7f0000000200)=[{&(0x7f0000000180)="ba", 0x1}], 0x1}, 0x4008804) sendmsg$inet(r0, &(0x7f0000000a00)={&(0x7f0000000040)={0x2, 0x0, @dev}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000000)="c109000d00000000001d1e080e7126", 0xf}], 0x1}, 0x0) 31.801428013s ago: executing program 3: unshare(0x20000400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000800000000000000000000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r1, 0x5}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r0, r1, 0x5, 0x0, 0x0, @prog_id}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x88100, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c"], 0xffdd) 31.791185101s ago: executing program 4: socket$kcm(0xa, 0x0, 0x11) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000300)={'ipvlan0\x00', {0x2, 0x0, @private}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x2c, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x30, 0x1, {0x0, 0x81000000}}]]}, {0x10}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa, 0x8}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x204}, 0x1, 0x0, 0x0, 0x40041}, 0x800) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2a8, 0x20a, 0x278, 0x2a8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'erspan0\x00'}, 0x0, 0x168, 0x1d0, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@dev, [], @ipv6=@local, [], @ipv4=@dev, [], @ipv4=@multicast1}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) r5 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffd18}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) bpf$BPF_PROG_QUERY(0x21, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x804) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x1c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r8, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r8, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r8, 0x400454cb, 0x1) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r9, &(0x7f00000006c0)=ANY=[], 0x25533) 31.756950413s ago: executing program 0: bind$inet(0xffffffffffffffff, &(0x7f0000000000)={0x2, 0x0, @local}, 0x10) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000000c0)={r2, @in={{0x2, 0x0, @empty}}}, 0x9c) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}, {}, {0x85, 0x0, 0x0, 0xba}}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x401, 0x70bd2d, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_GENEVE_PORT={0x6, 0x4, 0x4e20}, @IFLA_GENEVE_COLLECT_METADATA={0x4}]}}}]}, 0x40}}, 0x0) socket$netlink(0x10, 0x3, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r5, &(0x7f0000000380)={0x1f, 0x0, @none, 0x0, 0x3}, 0xe) r6 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r6, 0x11, 0x67, &(0x7f0000000180)=0x7f, 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000540)='rxrpc_rtt_rx\x00'}, 0x10) r7 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r7, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r0, 0x84, 0xc, &(0x7f00000001c0)=0x4, 0x4) openat$cgroup_int(0xffffffffffffffff, &(0x7f00000003c0)='cpu.weight.nice\x00', 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r7, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) r8 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r8, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x1, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r8, 0x10f, 0x87, &(0x7f0000000240)={0x42, 0x1}, 0x10) getsockopt$inet6_tcp_int(r6, 0x6, 0x11, &(0x7f0000000200), &(0x7f0000000280)=0x4) close(r7) connect$inet6(r6, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) connect$inet6(r6, &(0x7f0000000000)={0xa, 0x4e25, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) write(r6, &(0x7f0000000440)="89ba41c97928dec7cec15a160d3dba257872aed129d4b5247c9834550448a4f46c37425b873ec95db3d757e8b2333a64d9abf416fd83f942661c47bcdf71f7d07ba2b2f051829a7f6e952e57962614db0d03474a4a4bce636ea8d2b882b2b49ef18e76edbec7302a96e40eda2769c56e6d5e3d541ce9a21c3ce5cb5f57ab9fec1f1e39e84181934874583a256a6574cf226aa6475332796d3ae726bc2e65400d6d0758fc1e37d29c", 0xa8) getsockopt$IP_VS_SO_GET_SERVICES(r5, 0x0, 0x482, &(0x7f0000000300)=""/168, &(0x7f0000000040)=0xa8) socket$nl_rdma(0x10, 0x3, 0x14) 31.587668275s ago: executing program 1: r0 = socket(0x20000000000000a, 0x0, 0x0) unshare(0x600) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$FICLONE(r1, 0x40049409, 0xffffffffffffffff) (async) ioctl$FICLONE(r1, 0x40049409, 0xffffffffffffffff) getsockopt$sock_buf(r2, 0x1, 0x1c, &(0x7f0000000740)=""/10, &(0x7f0000000000)=0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x48) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@bloom_filter={0x1e, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0xfffffffc}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='GPL\x00'}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0xffff0000, 0xe, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0x0, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xf, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x8}, @exit={0x95, 0x0, 0x700}], {0x95, 0x0, 0x5a5}}, 0x0, 0x0, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) close(0xffffffffffffffff) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_SET_COALESCE(r4, &(0x7f00000002c0)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={0x0}}, 0x4048411) socket$inet6_udp(0xa, 0x2, 0x0) (async) socket$inet6_udp(0xa, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x4000) sendmsg$NFT_MSG_GETRULE(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x14, 0x7, 0xa, 0x201, 0x0, 0x0, {0x2}}, 0x14}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x8, 0x3, &(0x7f0000000000)=@framed={{0x7a, 0xa, 0x0, 0xff00, 0x0, 0x71, 0x10, 0x5d}}, &(0x7f0000000480)='syzkaller\x00'}, 0x80) unshare(0x0) (async) unshare(0x0) ioctl$SIOCSIFHWADDR(r5, 0x89f1, &(0x7f0000000900)={'ip6tnl0\x00', @random="0600002000"}) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r3, &(0x7f0000000140)="a896aafa3b32f0ea282723d87afbc23397ebcbe8f05d0edce4611b7e1d43ba", &(0x7f0000000300)=""/48}, 0x20) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3400000010000100"/20, @ANYRES32=r8, @ANYBLOB="000000000000000014001a80100002800c"], 0x34}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB="3400000010000100"/20, @ANYRES32=r8, @ANYBLOB="000000000000000014001a80100002800c"], 0x34}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) r9 = socket$rds(0x15, 0x5, 0x0) read$alg(r0, &(0x7f0000000400)=""/57, 0x39) (async) read$alg(r0, &(0x7f0000000400)=""/57, 0x39) ioctl$sock_SIOCETHTOOL(r9, 0x89f0, &(0x7f0000000040)={'bond0\x00', 0x0}) 31.569463312s ago: executing program 3: socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000006000000000000000000008500000041000000850000007d00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000001200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}, @TCA_STAB={0x4}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8}]}}]}, 0x3c}}, 0x0) r4 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_OVERHEAD={0x8}, @TCA_CAKE_ATM={0x8}]}}]}, 0x44}}, 0x0) r7 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r7, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) close(0x3) r8 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_DEL(r8, 0x2, r5) 31.528962031s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b70300000000001785000000720000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e20}, 0x1c) listen(r0, 0x80080400) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x95, &(0x7f0000000000), &(0x7f0000000240)=0x4) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x6f, 0x7fdf, 0x1}, 0x48) r2 = socket$alg(0x26, 0x5, 0x0) ioctl$FAT_IOCTL_SET_ATTRIBUTES(0xffffffffffffffff, 0x40047211, &(0x7f00000002c0)=0x4) bind$alg(r2, &(0x7f0000000300)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$kcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="ae77965af8b4", 0x6}], 0x1}, 0x0) sendmsg$AUDIT_SET(r3, &(0x7f0000000280)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x3c, 0x3e9, 0x800, 0x70bd2c, 0x25dfdbfb, {0x518ef845eaa9c776, 0x1, 0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1, 0x5, 0x0, 0x3, 0x9}, ["", "", "", "", "", ""]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x2000c804) r4 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r4, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x0, &(0x7f0000000180)={0x2, 0x0, 0x0, @loopback}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f0000000500)={'syztnl1\x00', &(0x7f0000000400)={'syztnl1\x00', r6, 0x2f, 0xff, 0x1, 0x5, 0x6c, @empty, @private1, 0x80, 0x1, 0x3, 0x8}}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000480)=@newqdisc={0x60, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r7, {0x0, 0x2}, {0xffe0, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @qdisc_kind_options=@q_rr={{0x7}, {0x18, 0x2, {0xb, "76df46f3b3485fba24913d79cebff17c"}}}, @TCA_RATE={0x6}, @qdisc_kind_options=@q_mq={0x7}]}, 0x60}}, 0x0) 31.415423727s ago: executing program 3: r0 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r0, &(0x7f0000000040)={&(0x7f0000000100)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c) recvmsg$kcm(r0, &(0x7f0000000440)={0x0, 0x0, 0x0}, 0x0) close(r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020001000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_QUEUE_FLAGS={0x6}, @NFTA_QUEUE_NUM={0x6}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x4}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) ioctl$sock_SIOCGSKNS(r1, 0x894c, &(0x7f0000000180)=0x5) socket$unix(0x1, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x2, &(0x7f0000000440)=0x82, 0x49) setsockopt$sock_int(r2, 0x1, 0x21, &(0x7f0000000080), 0x4) bind$inet(r2, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r2, 0x6, 0x12, &(0x7f0000000240)=0x7, 0x4) connect$inet(r2, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r2, &(0x7f0000001c80)="fbbf0b5044e308cb7bd572aa2b42e9678bcf30eff9f3aed14dc94a114bd2b45956aebe2b10ff3ee8655d1a5f9e0383611afdd3f8bac3d5cfd7772a3ab48d0ba4b600731e357e38716c449fae7c28548a642105f44bafd08ef8c064db041f1a405e3f650fc3b0926d481c364fca00000000000000006d3a3ede9fc738b8d86209c060161d5ddb5fcf3d09001117cdb9d055aa2d89fe3458720724853a876448d4a1fe9ef0569ad98a05ab5df763923b4e2c576e00000000000000000000000000000000002090666159e3075f7244cf4ec3d78193ec097245fa260e16ded4fb615647414c0c934f44e200219e6dd7bc23397d5f2f2c76a5baddd0fd8c340362691ef226f7a0ac51b74b6b05000000948514cd466943d08eeb3895b80499da2b209da4f3ec5e3744ce3e863b0e04d0ec2f39edf50b6e08c4b47e448a35414763d687fbe3792ee15c5b9791310a346472723c100bf77a310b0ced8004b5ac6d48c40439f512e8ef34a53d65f55563f68136a577736ca5f6f66e01ef4ec2cdc8db34f6de50713adaa3f70189958263fddc1314f8a28ccdef6e1390c5fbaeadc3035d019f0dc75de307de6c0d010000000000000027083d1d5b4b013c503b863b560688d94de886b6dc73d5da2dfeff4bed49a975a6c8dbb480e4415ddca5657a5a8e3b8a151015499e952bb5e8d8f60de3d688df7802c6e8b27b31fac4e199038b79a3999920e634a5af162a958130e6647e410700246548234acacf9cb43a", 0x21d, 0x0, 0x0, 0x0) sendto$inet(r2, &(0x7f0000001c00)='h', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0)=@ccm_128={{}, "c10449f31985d8a5", "c4474e7db1bf15fbabcc0b4fd7e5780c", "8561a3dd", "e51a280443bb1e8f"}, 0x28) recvmsg(r2, &(0x7f00000033c0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004440)=""/4119, 0x1017}], 0x1}, 0x0) recvfrom(r2, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x2b}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) 31.414596229s ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x1500, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="640000000406030004000000000000000000000005000100070000000900020073797a300000000014000780050015000400000008001240000000000500050002000000050004000000000015000300686173683a69702c706f"], 0x64}}, 0x0) 31.342436406s ago: executing program 4: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000000)=0x7, 0x4) sendto$unix(r0, &(0x7f0000000080)="008e", 0x2, 0xd1, 0x0, 0x0) recvmmsg(r1, &(0x7f0000003280)=[{{0x0, 0x0, &(0x7f0000002d00)=[{&(0x7f00000013c0)=""/119, 0x77}], 0x1}}], 0x1, 0x0, 0x0) write$binfmt_elf32(r0, &(0x7f0000000200)=ANY=[], 0x1) recvmsg(r1, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x200000000000000) 31.290729919s ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) socket(0xa, 0x2, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(0xffffffffffffffff, 0x84, 0x78, &(0x7f0000004380)=r2, 0x4) sendmsg$nl_xfrm(r1, 0x0, 0x0) sendmsg$NFT_BATCH(r0, 0x0, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000180)) setsockopt$SO_ATTACH_FILTER(0xffffffffffffffff, 0x1, 0x1a, 0x0, 0x0) socket$inet6(0xa, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x20000000}, 0x5}}, @TCA_MPLS_LABEL={0x8}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000068000000090a010400000000000000000100000008000a4000000000200011800e000100636f6e6e6c696d69740000000c00028008000140000000000900010073797a30000000000900020073797a3200000000080005400000001f0c000980080001400001"], 0xb0}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x0) sendmmsg$sock(r5, &(0x7f00000017c0)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000004c0)="8eb8a6bee165ce6b91dfcf6a49a6d713", 0x200f2}], 0x1}}], 0x1, 0x0) 31.220625997s ago: executing program 4: r0 = socket$inet6_sctp(0xa, 0x801, 0x84) pselect6(0x40, &(0x7f0000000a80), 0x0, &(0x7f0000000b00)={0x8}, 0x0, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) sendto$inet6(r0, &(0x7f0000000400)="96", 0x1, 0x0, &(0x7f0000000500)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$sock_int(r0, 0x1, 0x7, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000600)={'wg0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000200)=@ipv4_deladdr={0x2c, 0x15, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r4}, [@IFA_LABEL={0x14, 0x3, 'wg1\x00'}]}, 0x2c}}, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r9, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x3c, r10, 0x300, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_DURATION={0x8, 0x57, 0x7}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @chandef_params=[@NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x1000}], @NL80211_ATTR_DURATION={0x8, 0x57, 0x6}, @NL80211_ATTR_DURATION={0x8, 0x57, 0x9600}]}, 0x3c}, 0x1, 0x0, 0x0, 0x81}, 0x90) sendmsg$ETHTOOL_MSG_STRSET_GET(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000b00)={0x28, r8, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x14}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0) write$cgroup_subtree(r5, &(0x7f0000000180)=ANY=[], 0x9) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000000)={0x0, 0x0, 0x8000, 0x10001}) 31.208652587s ago: executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000340)="0322f1fde6d84309e82f6c5b4d986037", 0x10}], 0x1, &(0x7f0000002200)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) recvmmsg(r1, &(0x7f00000051c0)=[{{0x0, 0x5, &(0x7f0000001c00)=[{&(0x7f0000000b40)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) sendmsg$nl_netfilter(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000002d00)={0x19b8, 0x0, 0x0, 0x0, 0x0, 0x0, {}, [@generic="131aa75c2f1b908f05ae14dfc9df1a9ade97769d00af71b299763e315175e56275d3d6518e4b7fab9e1ad6fa97142ded590ce4fe2a0bb8eacf0f67a0b8b6268c502ce1432a7bbc6beb9ade4be449f9f48bff34204f9e8a7c0fad78ab33098bb74aa9c4c615a6393a39c2ea29a7404df74c4ca1369c8bb783f374ab3a954274370462", @nested={0x4}, @typed={0xc, 0x0, 0x0, 0x0, @u64=0x1}, @nested={0x1216, 0x0, 0x0, 0x1, [@typed={0x8, 0x93, 0x0, 0x0, @pid}, @generic="3698f4d22931f9f8bc921cff368658838f3904b6ef8c78", @typed={0x8, 0x0, 0x0, 0x0, @fd}, @generic="84d527b4dbb1c89ca34de5f4a5bbd09bdbb1af1e99c8c256d1b27fb64142545cea467a765058caa694d19ec7da2afba727c52ed038ed19b203f75895d190bc8f6d7993c75f69668c19a089c066c534a21848e715", @generic="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", @generic="e8db827972a823f98fbb2cbda18e00edaebe5254a26149d857b36f1e9d02d4c2894e715ce921090ea1c1797d95fe13aaf43ffb24699bfc24057899f72e375b49fb8cc1147244a574d87a3a5a24360f77c861e82118eff31b0050abdb7cddcccde909bab59eaa769cf02ac496cd0c3004ea84156fbebc4cfb766f6dc1f47bfaa3a09ac1c6354084cb5d8ae4937995cd4fddc291972e584fd37cf5cd0e485478d6933de4d8a58fb4489fd53e7cea933d99b69eab21ec0640b64e87e0349d57ebd0cc0d41ef6de46cbafa51fcb1a2d8f44027d4731f296f49b477fb19963928a9293f51b198b1f81782b2", @generic="1131d65985d34539aff0120b46d1fc2e945008d1ba710a14d747a92579fb307889329addcef0915b00206d39fbcaa7c01a6932884e69b01747e58a43e92524d70a76d9e50e1057832e266375128b1fedd0e457c20b328dfd439cfdeebb55bc94389225eca0c070976df38b687ca8919cc5f479607338ec4d94fba04098d9b6782871181d7fe5bc5c6bd6bd9b70abdbe0899cf592c341d70e764fd3b0bc7ef6efbc003e23d3521387e8f94d667517"]}, @generic="83f8088620aa2016d69d043b43a8d6af68df48c7e10e349291a8b8c45f7d191174c9c7137cc2f86a0d84b558a957a813c19074cdaed9e4b56b79b3bc74ff914c060b5fe204c1a6708a8f38365354a8bbf8e536cec9a28d6eca4eb57ebb4e2a8f15d58ba1c129df9abf8466038887fcb45f71c28dd0eaa8cb6965a2e49dd4268662ebbdafdbb28e91062981f64b3d2f0a3ad7adabbedd026d0ced67e1ebb3b6965e96427cf2df7cd9cd500d60bf3da33e8782d65a621eeb381120207b0dc8233ae24091ec1b23a966332ac5e1281fc58d8eafded4f8f307f8537bfc33a26bf041a57e75e45f5ce92970de9d47ead1be6640aa7274d92856752426184939b0956686cb8d6e26e0af71b174d8dfe15ab646c572ec23877055fc93b36ad2254d638c4d1256e5b80cd2ca609ed8bdafe39388d03116c28aeb2fb95f897e59f943186f4802143f2b38bd782e014702993691287b5f5a325ffa8fb4b9de080ec991398161879a7e6e9ee00a585d8c4e355afa4c7b1c1542ef49091338167036cf95c8eb2143de7c8822e7596d4159e30c724746b0d2347127d7cc24cb2fd3ab369deec7bc32ef305d7be0b47e3dc3c167bef9f0464ea84dc3c4dcab6d1e59de1b3048b816ce2bfcd45e4e64c243bafd49fe5a7e3a02aecbe8e5cb69809c5c4e3092cfddd5743921be1d18df02ca54e142b2c37370cce2ebf7ea7cd7f955365f521c5fbcaadda7602f2fe5eaadb64c04eafa202dd47957f5eacf724c37a5ed3952194704dbc0132cbc6026ce2504cc87510a09c0f723d0f15663e7b354fc946b80f1bba1fe2004c67f08e21f765fc8a22d4c57a05742507bb542c5fb41961a40d1bee3142083e67bdd7f106552be1a4cb7a040a160aa4e7c8ca23172b21122ebcc4e6c6f15432f9204e8b41798ed6f1a8d77a88a7c95118c566dd753d321fdcde29dbf4e520fb43933ce4857b4036527ffde59e6adf201b8d2ebe9aa0233bc7f0f924e0fc5d1f06a77a25f9b30d321e16517e4a729d95cfce67c29b7c9652758d27085bc6af7b28a7d7676d1930293a88c5f9d09b48220f8ffc18b24cc6aab3f95f949220ab249d5ca74c3492806b6f59cf65be63e81370a7f1b68f70bce315acd0e34036e666672199335a576fd87165818a7d5b3b9950b1fc3587a4922386ef3424cae3e6d082f4e3f8c5892f1447e3d3f57fb4c7195deefd57e07458ea90153c2b2de6ce5b0765b65b4766f1a75fc9a8804a8870ca76dec337ca419bc903f991a2c8db4b69006885f6d91118bced1cf5fd73da02c06b97d34a213a11747685ea6e7f18c91d53cc414e506541a24960473c63aaeac421333c2820135bd112fb8395fba6e47706f57b3f642088e82f1da0adec92bdb14dfb480b697b2a009f1772e0306eb0855e41fcdd697f8224833cb1ab6358e9e69da614a9b420066adc9457a27593ca4b37d74df750a62902b13fe8fea8f70b2000c99a71f316782e4d225e4ae71b56a7d0c68ce7f2a3ac6cc7b58278c6f061c314e57e4fdb641d34bb7a928f57c4aecdb532938a25b459e047b21b7b5bc7a2158ff19cb1785aec851969a9cfb02d9f4d2c40dd5c02bbd929393fc73f08757c3da9a46ceb1ec1c5d53c816e18cdf699a3963ce1201a1a8e543e149a2da24b184a7e66a7013c28ea5f64fc28a00d55da5f285c26054187369b974b4b5463e33dc0c8a7f8a0f279c6f5af554e888e6be94281f934327d4bf4f09c9d0f8dac065bdc3fd128826a8532a794e404679f40c5a6d19c768984f8421ba976920b87f9cfc94ab52f621a9b8f6f02bd18a68084443d79ca8a9a15045668dada89e61d44b3e5d86695e8a773e1e0f3ba54c9eaf60601d77aff8424f0489644aea0a8cd74a126763899285498f621e9eebdde4f667b9a7afc4ceb691b9d57bd7174632aaff6ae5db14b45d6fc5f1dd99746ad9c06fc3f62373dc143f8c64beed8cf5833a8311ff51e076cccbfaefec61a131775eedbe35f42e7c7327e9a474ace0bdb74099fea55927278d4bc3e153372395511991b9b3f626f6c9a5b3d223348e1a864d47f283e25b40679aa71c6b0c366794b223e45368f033017f41126bf57d59900ff3650214520fe74090508ea2e4fc858f76f5c34c5d7f1a373322fc49ad178319201314eb4e697c3966cc8a183d50114411713959bf37fd75c4dc8cf59f97c417b586560b5e2babd70d579645e60859d01cbcadb4395fa09205c010e9458315c98b7540d1f86590f5f00e7adb79ed1077e0a0f686315f297e6bd896eab8a1137395d09408f96010b6f7669fc0523e9f6f4eb2e859bb89bfbffff104db285ff94a726fcf90ca920d7cc17136e3d13b6739a4001d681f60a00792c66b45882ea07d7a1e0c8cd92c33b5fa355c1dd4d539012d7551cf91ca82d2e9c75c74efd952cb3be9b8ccc13d7c776e0469bed1891c5f421ab791b71b6c252c3aaf678027efeb76fe7f9936a1201ddc95db81d70a38faa92dc9d02754b19025d432d845be2036141edc2dbd7041a8dc"]}, 0x19b8}}, 0x0) 31.098337667s ago: executing program 1: ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'batadv_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'syz_tun\x00'}) select(0xff42, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x700}, 0x0, &(0x7f0000000100), &(0x7f0000000140)={0x77359400}) socket$nl_route(0x10, 0x3, 0x0) connect$can_bcm(0xffffffffffffffff, &(0x7f0000000080), 0x10) sendmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'dummy0\x00', 0x0}) r1 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000340)=ANY=[@ANYBLOB="44000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010041800400140012800b0001006d616373656300000400028008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r2, @ANYBLOB="521db25f798c0a11dcb34489b28baa98650de380d272cf81feb653171901d50e9766aebe8ce5e11d19f55f069e61d795e91cd3cbe3194801bdff101ecdf01fda4bec3907162195d7cad05c7a332b68bfd1202f48c5a71b0efed076d4daebae582679f37c429cda818660313c1a3a78905f0352679fda11892ca6d17e286fb0687b0daedc"], 0x44}}, 0x0) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000002c0), 0x4) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000540)={r3, 0x20, &(0x7f0000000500)={&(0x7f0000000440)=""/35, 0x23, 0x0, &(0x7f0000000480)=""/127, 0x7f}}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000640)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0x4, [@func={0x4, 0x0, 0x0, 0xc, 0x4}, @restrict, @func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{}]}, @func_proto]}, {0x0, [0x0, 0x0]}}, 0x0, 0x54}, 0x20) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={0x0}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c00000028002702000000000000000007000002040003000c00018008ffffff", @ANYRES32=0x0, @ANYBLOB="040002"], 0x2c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x9}, 0x48) ioctl$sock_inet6_SIOCDIFADDR(0xffffffffffffffff, 0x8936, &(0x7f00000000c0)={@empty, 0x6c}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x14, 0x2, [@TCA_HHF_HH_FLOWS_LIMIT={0x8}, @TCA_HHF_RESET_TIMEOUT={0x8}]}}]}, 0x40}}, 0x0) 31.028468326s ago: executing program 2: r0 = socket$l2tp(0x2, 0x2, 0x73) bind$inet(r0, &(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_mtu(r0, 0x0, 0xa, 0x0, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000040)='dctcp\x00', 0x6) socket$inet6_sctp(0xa, 0x0, 0x84) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 30.982040943s ago: executing program 1: unshare(0x20000400) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000800000000000000000000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r0, r1, 0x5}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r0, r1, 0x5, 0x0, 0x0, @prog_id}, 0x20) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x88100, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket$nl_generic(0x10, 0x3, 0x10) write$cgroup_devices(r2, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c"], 0xffdd) 30.458639323s ago: executing program 3: socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000300)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000280)="8ec1cc54649640be1983f79c5bfe88cd6a6afd5570ab59578db363f4892559f334d436138406b699de69db13fd73", 0x2e}, {&(0x7f0000000640)="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", 0x253}, {&(0x7f0000000f00)="1b3b351333f3a3b13679144b7cd8a483d6dbc75ded5829aceff163e19496e9ba6875841285b877fac97b183e950017761d4433127df4ffeab47d3545970ac2571b8775e05a2ec30dbc2154f17ddb1de319411d093471a30c", 0x58}], 0x3}, 0x0) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) unshare(0x22020400) setsockopt$netrom_NETROM_T1(r2, 0x103, 0x1, &(0x7f0000000100)=0x2, 0x4) recvmsg(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000000)=""/233, 0xe9}], 0x1, &(0x7f0000001d00)=""/4080, 0xff0}, 0x0) close(r0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r3, 0x8922, &(0x7f0000000380)={'vxcan1\x00'}) 30.324706276s ago: executing program 0: bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="560a0000000000006119b000000000001800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000780)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000003000000850000008200000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x7) sendmsg$netlink(r3, &(0x7f00000047c0)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000040)=ANY=[@ANYBLOB="180000007a000107000000000000000007"], 0x18}], 0x1}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) r5 = socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000071120b000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bind$alg(r5, &(0x7f0000000180)={0x26, 'hash\x00', 0x0, 0x0, 'cmac(aes-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000000)="9f90875a73ad17dee9ebece02db2103d", 0x10) sendmsg$IPCTNL_MSG_EXP_DELETE(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0xe4, 0x2, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0xa}, [@CTA_EXPECT_CLASS={0x8, 0x9, 0x1, 0x0, 0x1}, @CTA_EXPECT_ID={0x8, 0x5, 0x1, 0x0, 0x9}, @CTA_EXPECT_TUPLE={0xb0, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, {0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast1}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @mcast2}}}]}, @CTA_EXPECT_ZONE={0x6}, @CTA_EXPECT_TIMEOUT={0x8, 0x4, 0x1, 0x0, 0x80000001}]}, 0xe4}, 0x1, 0x0, 0x0, 0x804}, 0x80) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x801, 0x0, 0x0, {0x2, 0x0, 0x4}, [@NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x400}, @NFTA_CHAIN_TYPE={0xb, 0x7, 'filter\x00'}]}, @NFT_MSG_DELOBJ={0x2c, 0x14, 0xa, 0x206, 0x0, 0x0, {0x1, 0x0, 0x2}, [@NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWSET={0x28, 0x9, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x6}, [@NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x3}, @NFTA_SET_FLAGS={0x8}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x3, 0x0, 0x0, {0x5, 0x0, 0xa}}, @NFT_MSG_DELOBJ={0x14, 0x14, 0xa, 0x401, 0x0, 0x0, {0x3, 0x0, 0xa}}], {0x14}}, 0xec}, 0x1, 0x0, 0x0, 0xc0}, 0x1) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0xa00, &(0x7f0000000200)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x48, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8}, @NFTA_HOOK_PRIORITY={0x8}]}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x801}], {0x14}}, 0xa4}}, 0x0) r8 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_proto_private(r8, 0x0, &(0x7f0000000080)="0ebc9744361c3192353a") r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x11, &(0x7f0000000580)=ANY=[@ANYBLOB="180000000000000000000000000000008500000007000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000b600000095"], &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000280)='jbd2_handle_stats\x00', r9}, 0x10) r10 = accept4$unix(r3, &(0x7f0000000400)=@abs, &(0x7f0000000800)=0x6e, 0x100800) r11 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$NS_GET_USERNS(r11, 0xb701, 0x0) recvmmsg$unix(r10, &(0x7f0000001ac0)=[{{&(0x7f0000000840)=@abs, 0x6e, &(0x7f00000009c0)=[{&(0x7f00000008c0)=""/222, 0xde}], 0x1, &(0x7f0000000a00)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}], 0x38}}, {{&(0x7f0000000a40)=@abs, 0x6e, &(0x7f0000000c00)=[{&(0x7f0000000ac0)=""/20, 0x14}, {&(0x7f0000000b00)=""/210, 0xd2}], 0x2, &(0x7f0000000c40)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x50}}, {{&(0x7f0000000cc0)=@abs, 0x6e, &(0x7f0000000e00)=[{&(0x7f0000000d40)=""/150, 0x96}], 0x1, &(0x7f0000000e40)=[@cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}], 0x98}}, {{&(0x7f0000000f00)=@abs, 0x6e, &(0x7f00000010c0)=[{&(0x7f0000000f80)=""/225, 0xe1}, {&(0x7f0000001080)=""/3, 0x3}], 0x2}}, {{&(0x7f0000001100), 0x6e, &(0x7f00000015c0)=[{&(0x7f0000001180)=""/232, 0xe8}, {&(0x7f0000001280)=""/224, 0xe0}, {&(0x7f0000001380)=""/121, 0x79}, {&(0x7f0000001400)=""/23, 0x17}, {&(0x7f0000001440)=""/97, 0x61}], 0x5}}, {{&(0x7f0000001640)=@abs, 0x6e, &(0x7f00000018c0)=[{&(0x7f00000016c0)=""/113, 0x71}, {&(0x7f0000001740)=""/113, 0x71}, {&(0x7f00000017c0)=""/144, 0x90}, {&(0x7f0000001880)=""/26, 0x1a}], 0x4, &(0x7f0000001900)=[@rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x70}}, {{&(0x7f0000001980), 0x6e, &(0x7f0000001a00), 0x0, &(0x7f0000001a40)=[@rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}, @rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x58}}], 0x7, 0x40012000, 0x0) 30.299866475s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'ipvlan0\x00'}) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x14, &(0x7f00000000c0)={@ipv4={""/10, ""/2, @empty}, 0x0}, &(0x7f0000000100)=0x14) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xcf2}, @NFTA_QUEUE_NUM={0x6}]}}}]}]}], {0x14}}, 0xc4}}, 0x0) getsockname$packet(r6, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000050403eeffffffffffff02000000", @ANYRES32=r8, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000007c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=@newqdisc={0x6c, 0x24, 0xe0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}, [@TCA_STAB={0x24, 0x8, 0x0, 0x1, [{{0x1c}, {0x4}}]}, @qdisc_kind_options=@q_fq_codel={{0xd}, {0x14, 0x2, [@TCA_FQ_CODEL_DROP_BATCH_SIZE={0x8}, @TCA_FQ_CODEL_QUANTUM={0x8}]}}]}, 0x6c}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000180)=[0x0, 0x0, 0x0], &(0x7f00000001c0)=[0x0, 0x0], 0x0, 0xce, &(0x7f0000000200)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000240), &(0x7f00000002c0), 0x8, 0x9e, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) sendmsg$ETHTOOL_MSG_LINKSTATE_GET(0xffffffffffffffff, &(0x7f00000005c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000580)={&(0x7f0000000480)={0xec, r2, 0x100, 0x70bd26, 0x25dfdbfc, {}, [@HEADER={0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'dummy0\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_macvtap\x00'}]}, @HEADER={0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'lo\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gretap0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}]}]}, 0xec}, 0x1, 0x0, 0x0, 0x8000}, 0x44000010) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x2, 0x400000000000003, 0x0, 0x0, 0x16, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3, 0x0, 0x0, 0x0, 0x4}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}, @sadb_lifetime={0x4, 0x4}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x56}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}]}, 0xb0}}, 0x0) socket$inet_udp(0x2, 0x2, 0x0) close(0xffffffffffffffff) r11 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r11, 0x1, 0x25, &(0x7f0000000080)=0x474c, 0x4) r12 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000f00)=@newlink={0x58, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x20, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x1, 0x10}, @IFLA_MACVLAN_MACADDR_MODE={0x8, 0x3, 0x1}, @IFLA_MACVLAN_MACADDR={0xa, 0x4, @remote}]}}}, @IFLA_LINK={0x8, 0x5, r13}]}, 0x58}}, 0x0) 30.029938531s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0xc8) r3 = socket$inet_udp(0x2, 0x2, 0x0) close(r3) sendto$netrom(0xffffffffffffffff, 0x0, 0x34000, 0x0, &(0x7f0000000180)={{0x6, @rose}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null]}, 0x48) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000003180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000e0030000000e02000000090001007300803000000000080002400000000214000000110001"], 0x50}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01031008e6ff000000000200a8140900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_MSG_GETTABLE(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="20000000010a050000000000000000000000000009000100"], 0x20}}, 0x0) close(0xffffffffffffffff) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_INITMSG(r6, 0x84, 0x2, &(0x7f0000000900)={0x0, 0xfff, 0xef1b}, 0x8) r7 = socket$inet_udplite(0x2, 0x2, 0x88) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r2) sendmsg$TIPC_CMD_DISABLE_BEARER(r1, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x8000020}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x2c, r8, 0x10, 0x70bd2a, 0x25dfdbfb, {{}, {}, {0x10, 0x13, @udp='udp:syz1\x00'}}, ["", ""]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x4045) sendto$inet(r7, 0x0, 0x0, 0x8004, &(0x7f0000000080)={0x2, 0x4e20, @remote}, 0x10) splice(r1, 0x0, r3, 0x0, 0x8003, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@getnexthop={0x20, 0x76, 0xb0d, 0x0, 0x0, {0x3, 0x0, 0x2}, [@NHA_MASTER={0x8}]}, 0x20}}, 0x0) 999.244618ms ago: executing program 2: socket$kcm(0xa, 0x0, 0x11) r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_inet_SIOCSIFNETMASK(r0, 0x891c, &(0x7f0000000300)={'ipvlan0\x00', {0x2, 0x0, @private}}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x2c, &(0x7f00000002c0)={&(0x7f00000004c0)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x5c, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x30, 0x1, {0x0, 0x81000000}}]]}, {0x10}, {0xc, 0xb}, {0xc, 0xa}}}]}]}, 0x84}}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x3, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0xf, &(0x7f0000000040)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa, 0x8}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0xfffffffe, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f00000000c0)={&(0x7f0000000040), 0xc, &(0x7f0000000080)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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"], 0x204}, 0x1, 0x0, 0x0, 0x40041}, 0x800) r4 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r4, 0x29, 0x40, &(0x7f00000003c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0x111, 0x4b4, 0x0, 0xd4feffff, 0x2a8, 0x20a, 0x278, 0x2a8, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00'}, 0x0, 0xa8, 0xd8}, @common=@unspec=@CONNMARK={0x30}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'erspan0\x00'}, 0x0, 0x168, 0x1d0, 0x0, {}, [@common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@dev, [], @ipv6=@local, [], @ipv4=@dev, [], @ipv4=@multicast1}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) r5 = socket(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xfffffd18}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, 0x0, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) bpf$BPF_PROG_QUERY(0x21, 0x0, 0x0) setsockopt$netlink_NETLINK_TX_RING(r5, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r5, &(0x7f00000007c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, 0x0, 0x8, 0x70bd2c, 0x25dfdbfd, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x8}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8001}, 0x804) sendmsg$nl_route(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB], 0x1c}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000000)={'\x00', 0x5}) ioctl$TUNSETPERSIST(r8, 0x400454c9, 0x1) ioctl$TUNSETPERSIST(r8, 0x400454cb, 0x1) ioctl$TUNSETPERSIST(r8, 0x400454cb, 0x1) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r9, &(0x7f00000006c0)=ANY=[], 0x25533) 954.939265ms ago: executing program 1: ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8b28, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0), 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008009776b7040000000000008500000033"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680), 0xa) setsockopt$inet6_tcp_TCP_QUEUE_SEQ(0xffffffffffffffff, 0x6, 0x15, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x900, &(0x7f00000000c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=r2, @ANYBLOB="0000000000800200380012800b0001006272696467650000280002800c002300fbffffffffffffff05002400000000010500240001000000060027"], 0x58}}, 0x0) 434.294838ms ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r3) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004380)=@ipv4_newrule={0x1c}, 0x1c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x300, &(0x7f0000000180)={&(0x7f0000000680)=@newtfilter={0x54, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {}, {0xd}}, [@filter_kind_options=@f_flower={{0xb}, {0x24, 0x2, [@TCA_FLOWER_KEY_IPV4_SRC_MASK={0x8, 0xb, 0xff}, @TCA_FLOWER_KEY_IP_PROTO={0x5, 0x9, 0x62}, @TCA_FLOWER_KEY_SCTP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE_MASK={0x5}]}}]}, 0x54}}, 0x0) syz_genetlink_get_family_id$fou(&(0x7f0000000080), r1) 278.623882ms ago: executing program 4: r0 = socket$igmp(0x2, 0x3, 0x2) setsockopt$inet_group_source_req(r0, 0x0, 0x2f, &(0x7f0000000000)={0x0, {{0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {{0x2, 0x4e24, @broadcast}}}, 0x108) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000140)=0x400, 0x4) r1 = socket$inet6_icmp(0xa, 0x2, 0x3a) write$binfmt_elf64(r1, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x2, 0x6, 0x2, 0xff, 0xa22f, 0x3, 0x6, 0x1, 0x26c, 0x40, 0x1d9, 0x3, 0x5, 0x38, 0x2, 0x9, 0xd9e6, 0x2}, [{0x70000000, 0xff, 0x8107, 0x6, 0x8000, 0x36d, 0x5a, 0x1bb}], "b6fd8464aea57f21ee410c908620b2b0e5cf4b7d0cb679f3373417679e7cf324715ae2d941d47b85a49a0634d7fcf51924b3ac57e3ff351b613fb8196be562890e2c2b474868a6ede603ab90fce52fd1269876373def568c76d25c8db37f7880c4f997ded5e3935b2f01935160f1a886cac38b99d178e72b188e1dc6e0381efbebfc491d25986ee998ad3271e85a845878b5b2d78c85bc102f552be06889bc51948247068ad277e75b2df4f43160f0f7b5795a0cf4aab82f7d1d0343ed1005b0fabda34c8d4f913f", ['\x00']}, 0x240) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=@base={0x7, 0x9, 0xd8b, 0x3, 0x1806, 0xffffffffffffffff, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x5, 0x5}, 0x48) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000440)={'batadv_slave_0\x00', 0x0}) pipe(&(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x1d, 0xffffffff, 0x5, 0x1c22, 0x4608, r2, 0xd7a, '\x00', r3, r4, 0x4, 0x0, 0x1}, 0x48) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt$sock_cred(r4, 0x1, 0x11, &(0x7f0000000540)={0x0, 0x0}, &(0x7f0000000580)=0xc) setsockopt$inet6_IPV6_IPSEC_POLICY(r5, 0x29, 0x22, &(0x7f00000005c0)={{{@in6=@ipv4={'\x00', '\xff\xff', @broadcast}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x4e20, 0x7fff, 0x4e20, 0x80, 0xa, 0x0, 0x0, 0x6, 0x0, r6}, {0x7ff, 0x100, 0x8, 0x6, 0x4, 0x4, 0x5, 0x6d}, {0x7fff, 0x2, 0x20, 0x8000000000000000}, 0x0, 0x6e6bb2, 0x2, 0x0, 0x2}, {{@in6=@rand_addr=' \x01\x00', 0x4d3, 0xff}, 0xa, @in=@initdev={0xac, 0x1e, 0x88, 0x0}, 0x0, 0x2, 0x3, 0x6, 0x5, 0x7ff, 0x174}}, 0xe8) sendmsg$inet_sctp(r4, &(0x7f0000001880)={&(0x7f00000006c0)=@in={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000001800)=[{&(0x7f0000000700)="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", 0x1000}, {&(0x7f0000001700)="50b324e6c1f1387bb1c409f0e6df09675bac39acad64af9f1d", 0x19}, {&(0x7f0000001740)="80a8792e0a0474ebf2f0d08ac2c6c8ae8ed98c8a71acce0c006016680be3ca4ec663cefab583be720024c02616e8abeee02092a3e484ca07c91551ecaa12e4e42359eaa51d398b3805f8f838126c8cea0545664eb93e3611edf45336f9fa799fb7547a1c8ba45780285a218d0b5859e003110c55612d449ff290431c033386fabe4b0924ec2d54c09451335ca35b7aad9d16026bb8fa29c8ba29887cde8834818b929ad6f2c9c90266982d", 0xab}], 0x3, &(0x7f0000001840)=[@dstaddrv4={0x18, 0x84, 0x7, @multicast1}, @dstaddrv6={0x20, 0x84, 0x8, @remote}], 0x38, 0x8000}, 0x10) setsockopt$packet_int(r5, 0x107, 0x0, &(0x7f00000018c0)=0x9, 0x4) r7 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000001900)={0x16, @empty, 0x4e20, 0x0, 'wrr\x00', 0xe, 0x5, 0x5f}, 0x2c) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001940), r5) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_SET_PMK(r4, &(0x7f0000001a80)={&(0x7f0000001980)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x68, r8, 0x800, 0x70bd28, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x9, 0x44}}}}, [@NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "88ea6e1278096707fbf121ef86c0a2a5"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_PMK={0x14, 0xfe, "260b9b1e4773303a2027cb09ecffb9b2"}, @NL80211_ATTR_PMKR0_NAME={0x14, 0x102, "0f0dd7bdf10229d237c2eb32fd0f1500"}]}, 0x68}, 0x1, 0x0, 0x0, 0x40050}, 0x20804) epoll_ctl$EPOLL_CTL_ADD(r5, 0x1, r9, &(0x7f0000001ac0)={0x2002}) r10 = syz_genetlink_get_family_id$net_dm(&(0x7f0000001b40), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f0000001c00)={&(0x7f0000001b00)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000001bc0)={&(0x7f0000001b80)={0x14, r10, 0x100, 0x70bd2a, 0x25dfdbfc, {}, ["", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0xc051}, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) ioctl$F2FS_IOC_RESIZE_FS(r2, 0x4008f510, &(0x7f0000001c40)=0x2) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000001c80)={0x1d, @rand_addr=0x64010100, 0x4e24, 0x1, 'sed\x00', 0x2, 0x1, 0x4e}, 0x2c) getsockopt$inet_sctp_SCTP_STATUS(r5, 0x84, 0xe, &(0x7f0000001cc0)={0x0, 0x7525, 0x8001, 0x382, 0x6, 0x1, 0x200, 0x0, {0x0, @in6={{0xa, 0x4e23, 0xe333, @remote, 0x80000000}}, 0x7fff, 0x8, 0x6c2, 0x401, 0x7}}, &(0x7f0000001d80)=0xb0) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000001dc0)={0x81, 0x8202, 0xff, 0x800, r11}, &(0x7f0000001e00)=0x10) tee(r7, r0, 0x5, 0x7) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000002100)={&(0x7f0000001e40), 0xc, &(0x7f00000020c0)={&(0x7f0000001e80)={0x218, 0x4, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFTA_CHAIN_HOOK={0x58, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x357af6b7}, @NFTA_HOOK_DEV={0x14, 0x3, 'macvlan1\x00'}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x5c87a5e2}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x6abc01d8}, @NFTA_HOOK_DEV={0x14, 0x3, 'netdevsim0\x00'}]}, @NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x800}]}, @NFTA_CHAIN_HOOK={0x30, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4b74a2ad}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x34dec154}, @NFTA_HOOK_DEV={0x14, 0x3, 'pim6reg0\x00'}]}, @NFTA_CHAIN_USERDATA={0x46, 0xc, "a93bded84ce74e1c38f749ca30c87706f613794bd97e3740546c9fb51c7ab68a7d0559b40752834b259f463a19c6983644faff05e153c5f8198161bcb923d1218af9"}, @NFTA_CHAIN_USERDATA={0xf9, 0xc, "9092d40908019d3adaeb7e9b968796be46a7731bbd6cef39d1e959b896fc4b320782b49337bbb1faa3fc6c536f09349b68816e818b1abdf3eee92ddb8b7493824a470cbfc00272378c398226dbf4ccc23135bd95ef3154ab0f810bd6fb5ca668c110ccca2ad52581ddb1940c91855c40315a213b7102d67577eafdb8cc5facb393c224f637b404cd9cd04a4e3c28f78c6e2c69ffef412cd5bcfcac737c966c4854554bf919eadfacdd14455d7e9683b8b3b2e48823319b28408ae2a7dd9d1f52756b6b75a583b8089e887f7ec365e7c4908ea193e99ba57491cb17ebaf8e102697310b11322b5f9bba345a623857c00b3492372337"}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x1}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4e351fb6}]}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, 0x218}}, 0x1000c000) 0s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) getsockopt$IP_VS_SO_GET_VERSION(0xffffffffffffffff, 0x0, 0x480, &(0x7f0000000000), &(0x7f0000000080)=0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = socket$inet_sctp(0x2, 0x5, 0x84) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @loopback}, 0x10) r3 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r3, 0x65, 0x7, &(0x7f00000001c0)=0x44, 0x4) socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$can_raw(r3, &(0x7f0000000140)={&(0x7f0000000100)={0x1d, r4}, 0x10, &(0x7f0000000180)={0x0}, 0x2}, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000006ec0)={&(0x7f0000006dc0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000006e80)={&(0x7f0000006e00)=ANY=[@ANYRES32=r4, @ANYBLOB="080001000100000008000100010000000800010080000000080001000000000008000100000000000800010000000000"], 0x58}, 0x1, 0x0, 0x0, 0x2000c010}, 0x1) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000800), 0x8) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f0000000480), 0xc, &(0x7f0000000880)={&(0x7f00000005c0)=ANY=[@ANYBLOB, @ANYRES32=0x0, @ANYBLOB, @ANYRES32=0x0, @ANYBLOB="ffff29030000b91bfa397232c0bd0f1702740181bd18f792a120c44d", @ANYBLOB, @ANYRES32, @ANYBLOB, @ANYRES32=r6, @ANYBLOB], 0xa4}}, 0x4064005) getsockname$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000003c0)=@newlink={0x88, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, r7, 0x50483, 0x1}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x54, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @IFLA_GRE_ERSPAN_VER={0x5, 0x16, 0x1}, @IFLA_GRE_FLAGS={0x8, 0xd, 0x3}, @IFLA_GRE_REMOTE={0x14, 0x7, @private2}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_LINK={0x8}, @IFLA_GRE_IKEY={0x8, 0x4, 0x20000}]}}}]}, 0x88}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001940)={0x114, 0x2b, 0x9f2d3d3f99cf9fb9, 0x0, 0x0, "", [@nested={0x101, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x0, 0x0, 0x0, @ipv6=@mcast2}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000400)=ANY=[@ANYBLOB="1800000066002501"], 0x18}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cgroup.controllers\x00', 0x275a, 0x0) kernel console output (not intermixed with test programs): tor.2" name=11 dev="sda1" ino=1966 res=0 errno=0 [ 88.740363][ T29] audit: type=1800 audit(1717840823.247:7): pid=5976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name=11 dev="sda1" ino=1966 res=0 errno=0 [ 88.792221][ T29] audit: type=1800 audit(1717840823.247:8): pid=5976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name=11 dev="sda1" ino=1966 res=0 errno=0 [ 88.821514][ T29] audit: type=1800 audit(1717840823.257:9): pid=5976 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name=11 dev="sda1" ino=1966 res=0 errno=0 [ 89.079824][ T5989] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 89.108681][ T5992] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 89.224233][ T5991] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 89.233583][ T5991] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 89.345357][ T5991] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 89.531784][ T6002] vlan2: entered promiscuous mode [ 89.566913][ T6002] dummy0: entered promiscuous mode [ 89.643059][ T6005] geneve2: entered promiscuous mode [ 89.648671][ T6005] geneve2: entered allmulticast mode [ 89.786069][ T6009] team0: Device macvtap1 is already an upper device of the team interface [ 89.874275][ T6013] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 90.132983][ T6030] xt_NFQUEUE: number of total queues is 0 [ 90.430450][ T6035] IPVS: length: 222 != 24 [ 90.623024][ T6053] Bluetooth: MGMT ver 1.22 [ 90.664748][ T6053] Bluetooth: hci3: invalid length 0, exp 2 for type 24 [ 91.428335][ T6073] __nla_validate_parse: 5 callbacks suppressed [ 91.428354][ T6073] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 91.461302][ T6073] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 91.473279][ T6073] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 91.529648][ T6061] team0: Device macvtap1 is already an upper device of the team interface [ 91.930436][ T6089] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1025 (only 8 groups) [ 92.371574][ T6098] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 92.448461][ T6101] IPVS: length: 222 != 24 [ 92.626199][ T6105] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 92.735001][ T6108] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 92.751621][ T6108] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 92.802181][ T6110] bridge0: port 3(macsec0) entered blocking state [ 92.814562][ T6110] bridge0: port 3(macsec0) entered disabled state [ 92.822003][ T6110] macsec0: entered allmulticast mode [ 92.907036][ T6110] veth1_macvtap: entered allmulticast mode [ 92.926290][ T6110] macsec0: entered promiscuous mode [ 92.935305][ T6110] bridge0: port 3(macsec0) entered blocking state [ 92.942304][ T6110] bridge0: port 3(macsec0) entered forwarding state [ 92.955185][ T6113] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 93.778926][ T29] audit: type=1804 audit(1717840828.487:10): pid=6136 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir876371098/syzkaller.Xq2sij/58/memory.events" dev="sda1" ino=1955 res=1 errno=0 [ 94.592555][ T6163] bridge0: port 3(macsec0) entered blocking state [ 94.603770][ T6159] IPVS: length: 222 != 24 [ 94.609419][ T6163] bridge0: port 3(macsec0) entered disabled state [ 94.621280][ T6163] macsec0: entered allmulticast mode [ 94.635853][ T6163] veth1_macvtap: entered allmulticast mode [ 94.644952][ T6163] macsec0: entered promiscuous mode [ 94.653459][ T6163] bridge0: port 3(macsec0) entered blocking state [ 94.660802][ T6163] bridge0: port 3(macsec0) entered forwarding state [ 95.119839][ T433] tipc: Subscription rejected, illegal request [ 95.451227][ T6180] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 95.486891][ T6180] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 95.881775][ T6197] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 95.926441][ T6197] team0: Device veth1_vlan failed to register rx_handler [ 96.789060][ T6209] IPVS: length: 222 != 24 [ 96.809342][ T6216] bridge0: port 3(macsec0) entered blocking state [ 96.826481][ T6216] bridge0: port 3(macsec0) entered disabled state [ 96.849927][ T6216] macsec0: entered allmulticast mode [ 96.859023][ T6216] veth1_macvtap: entered allmulticast mode [ 96.881360][ T6216] macsec0: entered promiscuous mode [ 96.899258][ T6216] bridge0: port 3(macsec0) entered blocking state [ 96.905943][ T6216] bridge0: port 3(macsec0) entered forwarding state [ 97.153419][ T6233] xt_NFQUEUE: number of total queues is 0 [ 97.357334][ T6239] __nla_validate_parse: 1 callbacks suppressed [ 97.357353][ T6239] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 97.619606][ T6244] netlink: 'syz-executor.0': attribute type 9 has an invalid length. [ 97.661845][ T6244] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 97.675723][ T6247] trusted_key: syz-executor.0 sent an empty control message without MSG_MORE. [ 97.711284][ T6244] netlink: 'syz-executor.0': attribute type 8 has an invalid length. [ 97.759847][ T6249] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 97.828580][ T6247] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 98.113774][ T6254] syzkaller1: entered promiscuous mode [ 98.134279][ T6254] syzkaller1: entered allmulticast mode [ 98.242727][ T6263] Bluetooth: MGMT ver 1.22 [ 98.430977][ T6270] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 98.538946][ T6275] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 98.817108][ T6279] IPVS: length: 222 != 24 [ 99.177156][ T6294] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 99.612400][ T6308] team0: entered promiscuous mode [ 99.624294][ T6308] team_slave_0: entered promiscuous mode [ 99.632263][ T6308] team_slave_1: entered promiscuous mode [ 99.720684][ T6308] team0: left promiscuous mode [ 99.734874][ T6308] team_slave_0: left promiscuous mode [ 99.770826][ T6308] team_slave_1: left promiscuous mode [ 99.885770][ T25] IPVS: starting estimator thread 0... [ 99.994453][ T6318] IPVS: using max 19 ests per chain, 45600 per kthread [ 100.477166][ T6342] IPVS: length: 222 != 24 [ 100.631723][ T6349] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 101.166261][ T6376] pim6reg: entered allmulticast mode [ 101.411264][ T6386] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 101.517209][ T6390] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 101.665898][ T6392] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 102.122950][ T6413] FAULT_INJECTION: forcing a failure. [ 102.122950][ T6413] name failslab, interval 1, probability 0, space 0, times 0 [ 102.176350][ T6413] CPU: 1 PID: 6413 Comm: syz-executor.4 Not tainted 6.10.0-rc2-syzkaller-00440-ga99997323654 #0 [ 102.186817][ T6413] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 102.196901][ T6413] Call Trace: [ 102.200194][ T6413] [ 102.203133][ T6413] dump_stack_lvl+0x241/0x360 [ 102.207840][ T6413] ? __pfx_dump_stack_lvl+0x10/0x10 [ 102.213059][ T6413] ? __pfx__printk+0x10/0x10 [ 102.217669][ T6413] ? __pfx___might_resched+0x10/0x10 [ 102.222977][ T6413] ? obj_cgroup_charge+0x3e2/0x630 [ 102.228120][ T6413] should_fail_ex+0x3b0/0x4e0 [ 102.232818][ T6413] should_failslab+0x9/0x20 [ 102.237343][ T6413] __kmalloc_node_noprof+0xdf/0x440 [ 102.242569][ T6413] ? alloc_slab_obj_exts+0x3a/0xa0 [ 102.247709][ T6413] alloc_slab_obj_exts+0x3a/0xa0 [ 102.252668][ T6413] __memcg_slab_post_alloc_hook+0x31c/0x7e0 [ 102.258586][ T6413] ? kasan_unpoison+0x46/0x70 [ 102.263280][ T6413] __kmalloc_node_noprof+0x2a5/0x440 [ 102.268586][ T6413] ? kvmalloc_node_noprof+0x72/0x190 [ 102.273887][ T6413] ? __pfx_vlan_setup+0x10/0x10 [ 102.275024][ T6415] IPVS: length: 222 != 24 [ 102.278738][ T6413] kvmalloc_node_noprof+0x72/0x190 [ 102.278766][ T6413] alloc_netdev_mqs+0x9d/0xf80 [ 102.292951][ T6413] ? bpf_lsm_capable+0x9/0x10 [ 102.297650][ T6413] ? security_capable+0x90/0xb0 [ 102.302585][ T6413] rtnl_create_link+0x2f9/0xc20 [ 102.307459][ T6413] rtnl_newlink+0x1421/0x20a0 [ 102.312152][ T6413] ? __kernel_text_address+0xd/0x40 [ 102.317376][ T6413] ? rtnl_newlink+0xb21/0x20a0 [ 102.322180][ T6413] ? __pfx_rtnl_newlink+0x10/0x10 [ 102.327310][ T6413] ? __pfx___mutex_trylock_common+0x10/0x10 [ 102.333227][ T6413] ? rcu_is_watching+0x15/0xb0 [ 102.338019][ T6413] ? trace_contention_end+0x3c/0x120 [ 102.343322][ T6413] ? __mutex_lock+0x2ef/0xd70 [ 102.348031][ T6413] ? __pfx_lock_release+0x10/0x10 [ 102.353083][ T6413] ? __pfx_rtnl_newlink+0x10/0x10 [ 102.358116][ T6413] rtnetlink_rcv_msg+0x89b/0x1180 [ 102.363245][ T6413] ? rtnetlink_rcv_msg+0x208/0x1180 [ 102.368469][ T6413] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 102.373942][ T6413] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 102.379935][ T6413] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 102.386282][ T6413] ? __local_bh_enable_ip+0x168/0x200 [ 102.391666][ T6413] ? lockdep_hardirqs_on+0x99/0x150 [ 102.396882][ T6413] ? __local_bh_enable_ip+0x168/0x200 [ 102.402268][ T6413] ? dev_hard_start_xmit+0x773/0x7e0 [ 102.407575][ T6413] ? __dev_queue_xmit+0x2d2/0x3d30 [ 102.412709][ T6413] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 102.418453][ T6413] ? __dev_queue_xmit+0x2d2/0x3d30 [ 102.423580][ T6413] ? __dev_queue_xmit+0x16c9/0x3d30 [ 102.428810][ T6413] ? __dev_queue_xmit+0x2d2/0x3d30 [ 102.433956][ T6413] ? ref_tracker_free+0x643/0x7e0 [ 102.439021][ T6413] netlink_rcv_skb+0x1e3/0x430 [ 102.443800][ T6413] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 102.449278][ T6413] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 102.454604][ T6413] ? netlink_deliver_tap+0x2e/0x1b0 [ 102.459822][ T6413] netlink_unicast+0x7ea/0x980 [ 102.464616][ T6413] ? __pfx_netlink_unicast+0x10/0x10 [ 102.469917][ T6413] ? __virt_addr_valid+0x183/0x520 [ 102.475047][ T6413] ? __check_object_size+0x49c/0x900 [ 102.480351][ T6413] ? bpf_lsm_netlink_send+0x9/0x10 [ 102.485485][ T6413] netlink_sendmsg+0x8db/0xcb0 [ 102.490270][ T6413] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.495559][ T6413] ? __import_iovec+0x536/0x820 [ 102.500403][ T6413] ? aa_sock_msg_perm+0x91/0x160 [ 102.505336][ T6413] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 102.510617][ T6413] ? security_socket_sendmsg+0x87/0xb0 [ 102.516091][ T6413] ? __pfx_netlink_sendmsg+0x10/0x10 [ 102.521378][ T6413] __sock_sendmsg+0x221/0x270 [ 102.526061][ T6413] ____sys_sendmsg+0x525/0x7d0 [ 102.530831][ T6413] ? __pfx_____sys_sendmsg+0x10/0x10 [ 102.536127][ T6413] __sys_sendmsg+0x2b0/0x3a0 [ 102.540716][ T6413] ? __pfx___sys_sendmsg+0x10/0x10 [ 102.545818][ T6413] ? vfs_write+0x7c4/0xc90 [ 102.550262][ T6413] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 102.556582][ T6413] ? do_syscall_64+0x100/0x230 [ 102.561342][ T6413] ? do_syscall_64+0xb6/0x230 [ 102.566016][ T6413] do_syscall_64+0xf3/0x230 [ 102.570511][ T6413] ? clear_bhb_loop+0x35/0x90 [ 102.575182][ T6413] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 102.581088][ T6413] RIP: 0033:0x7fe360e7cf69 [ 102.585516][ T6413] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 102.605212][ T6413] RSP: 002b:00007fe3609ff0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 102.613623][ T6413] RAX: ffffffffffffffda RBX: 00007fe360fb3f80 RCX: 00007fe360e7cf69 [ 102.621595][ T6413] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 102.629564][ T6413] RBP: 00007fe3609ff120 R08: 0000000000000000 R09: 0000000000000000 [ 102.637534][ T6413] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 102.645504][ T6413] R13: 000000000000000b R14: 00007fe360fb3f80 R15: 00007ffca2829308 [ 102.653482][ T6413] [ 102.750570][ T6420] bridge0: port 3(macsec0) entered disabled state [ 102.758399][ T6420] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.760029][ T6422] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 102.766368][ T6420] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.181984][ T6441] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 103.218321][ T6441] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 103.518605][ T6451] syzkaller0: entered promiscuous mode [ 103.524436][ T6451] syzkaller0: entered allmulticast mode [ 103.533833][ T6453] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 103.985458][ T6466] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 104.201174][ T6471] IPVS: length: 222 != 24 [ 105.209735][ T6479] FAULT_INJECTION: forcing a failure. [ 105.209735][ T6479] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 105.237045][ T6479] CPU: 0 PID: 6479 Comm: syz-executor.0 Not tainted 6.10.0-rc2-syzkaller-00440-ga99997323654 #0 [ 105.247601][ T6479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 105.257760][ T6479] Call Trace: [ 105.261059][ T6479] [ 105.264007][ T6479] dump_stack_lvl+0x241/0x360 [ 105.268728][ T6479] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.273957][ T6479] ? __pfx__printk+0x10/0x10 [ 105.278568][ T6479] ? __pfx_lock_release+0x10/0x10 [ 105.283625][ T6479] should_fail_ex+0x3b0/0x4e0 [ 105.288337][ T6479] _copy_from_user+0x2f/0xe0 [ 105.292968][ T6479] __sys_bpf+0x1a4/0x810 [ 105.297236][ T6479] ? __pfx___sys_bpf+0x10/0x10 [ 105.302030][ T6479] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 105.308030][ T6479] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 105.314387][ T6479] __x64_sys_bpf+0x7c/0x90 [ 105.315273][ T6482] ip6tnl1: entered promiscuous mode [ 105.318810][ T6479] do_syscall_64+0xf3/0x230 [ 105.318839][ T6479] ? clear_bhb_loop+0x35/0x90 [ 105.318864][ T6479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.330911][ T6482] ip6tnl1: entered allmulticast mode [ 105.333182][ T6479] RIP: 0033:0x7f166527cf69 [ 105.333210][ T6479] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 105.333225][ T6479] RSP: 002b:00007f1665f940c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 105.333246][ T6479] RAX: ffffffffffffffda RBX: 00007f16653b3f80 RCX: 00007f166527cf69 [ 105.384843][ T6479] RDX: 0000000000000050 RSI: 0000000020000600 RDI: 000000000000000a [ 105.392813][ T6479] RBP: 00007f1665f94120 R08: 0000000000000000 R09: 0000000000000000 [ 105.400775][ T6479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.408741][ T6479] R13: 000000000000000b R14: 00007f16653b3f80 R15: 00007ffc07f1ecc8 [ 105.416719][ T6479] [ 105.690597][ T6500] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 105.910079][ T6515] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 106.008347][ T6517] IPVS: length: 222 != 24 [ 106.093586][ T6521] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 106.147998][ T6528] x_tables: ip_tables: REDIRECT target: used from hooks POSTROUTING, but only usable from PREROUTING/OUTPUT [ 106.481713][ T6550] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 106.581147][ T6554] xt_TCPMSS: Only works on TCP SYN packets [ 106.641223][ T6560] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 106.672396][ T6553] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 106.701265][ T6560] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 106.741998][ T6553] geneve0: entered promiscuous mode [ 106.869738][ T6553] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 107.668784][ T6619] IPVS: length: 222 != 24 [ 108.183505][ T6627] __nla_validate_parse: 2 callbacks suppressed [ 108.183524][ T6627] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 108.193264][ T6630] IPv6: addrconf: prefix option has invalid lifetime [ 108.227782][ T6627] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 108.313247][ T6634] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 108.356378][ T6634] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 108.457227][ T6639] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 108.599737][ T6656] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 108.827185][ T6677] batadv0: entered promiscuous mode [ 109.041706][ T6690] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 109.134415][ T6691] IPVS: length: 222 != 24 [ 109.171547][ T6695] netlink: 288 bytes leftover after parsing attributes in process `syz-executor.1'. [ 109.663241][ T6719] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 110.148249][ T6737] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 110.408685][ T6748] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 110.541771][ T6753] IPVS: length: 222 != 24 [ 111.053723][ T6777] FAULT_INJECTION: forcing a failure. [ 111.053723][ T6777] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 111.071606][ T6777] CPU: 1 PID: 6777 Comm: syz-executor.2 Not tainted 6.10.0-rc2-syzkaller-00440-ga99997323654 #0 [ 111.082083][ T6777] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 111.092148][ T6777] Call Trace: [ 111.095429][ T6777] [ 111.098364][ T6777] dump_stack_lvl+0x241/0x360 [ 111.103054][ T6777] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.108266][ T6777] ? __pfx__printk+0x10/0x10 [ 111.112862][ T6777] should_fail_ex+0x3b0/0x4e0 [ 111.117566][ T6777] _copy_from_user+0x2f/0xe0 [ 111.122192][ T6777] vmemdup_user+0x149/0x1c0 [ 111.126684][ T6777] map_lookup_elem+0x28e/0x7c0 [ 111.131447][ T6777] ? bpf_lsm_bpf+0x9/0x10 [ 111.135787][ T6777] __sys_bpf+0x429/0x810 [ 111.140023][ T6777] ? __pfx___sys_bpf+0x10/0x10 [ 111.144784][ T6777] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 111.150788][ T6777] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 111.157166][ T6777] ? do_syscall_64+0x100/0x230 [ 111.161953][ T6777] __x64_sys_bpf+0x7c/0x90 [ 111.166393][ T6777] do_syscall_64+0xf3/0x230 [ 111.170915][ T6777] ? clear_bhb_loop+0x35/0x90 [ 111.175603][ T6777] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.181496][ T6777] RIP: 0033:0x7fc0c847cf69 [ 111.185922][ T6777] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 111.205560][ T6777] RSP: 002b:00007fc0c92ab0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 111.213999][ T6777] RAX: ffffffffffffffda RBX: 00007fc0c85b3f80 RCX: 00007fc0c847cf69 [ 111.221992][ T6777] RDX: 0000000000000020 RSI: 0000000020000340 RDI: 0000000000000001 [ 111.229982][ T6777] RBP: 00007fc0c92ab120 R08: 0000000000000000 R09: 0000000000000000 [ 111.237973][ T6777] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 111.245960][ T6777] R13: 000000000000000b R14: 00007fc0c85b3f80 R15: 00007ffdc633ed08 [ 111.253960][ T6777] [ 111.351156][ T6783] IPVS: set_ctl: invalid protocol: 55 10.1.1.2:20001 [ 111.453352][ T6797] xt_NFQUEUE: number of total queues is 0 [ 113.104232][ T29] audit: type=1804 audit(1717840847.817:11): pid=6840 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4052746306/syzkaller.Hb6aIZ/68/cgroup.controllers" dev="sda1" ino=1942 res=1 errno=0 [ 113.697426][ T6836] __nla_validate_parse: 2 callbacks suppressed [ 113.697447][ T6836] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 113.717795][ T6859] IPVS: length: 222 != 24 [ 114.129686][ T6871] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 114.203148][ T6873] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 114.550313][ T6883] FAULT_INJECTION: forcing a failure. [ 114.550313][ T6883] name failslab, interval 1, probability 0, space 0, times 0 [ 114.590092][ T6883] CPU: 1 PID: 6883 Comm: syz-executor.1 Not tainted 6.10.0-rc2-syzkaller-00440-ga99997323654 #0 [ 114.600561][ T6883] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 114.610632][ T6883] Call Trace: [ 114.613926][ T6883] [ 114.616869][ T6883] dump_stack_lvl+0x241/0x360 [ 114.621570][ T6883] ? __pfx_dump_stack_lvl+0x10/0x10 [ 114.626795][ T6883] ? __pfx__printk+0x10/0x10 [ 114.631415][ T6883] should_fail_ex+0x3b0/0x4e0 [ 114.636115][ T6883] ? security_file_alloc+0x28/0x130 [ 114.641332][ T6883] should_failslab+0x9/0x20 [ 114.645862][ T6883] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 114.651259][ T6883] security_file_alloc+0x28/0x130 [ 114.656300][ T6883] init_file+0x99/0x200 [ 114.660477][ T6883] alloc_empty_file+0xb8/0x1d0 [ 114.665257][ T6883] alloc_file_pseudo+0x1da/0x290 [ 114.670250][ T6883] ? __pfx_alloc_file_pseudo+0x10/0x10 [ 114.675731][ T6883] ? alloc_fd+0x59d/0x640 [ 114.680089][ T6883] anon_inode_getfd+0xce/0x1e0 [ 114.684936][ T6883] map_create+0xe5b/0x1200 [ 114.689375][ T6883] ? security_bpf+0x87/0xb0 [ 114.693987][ T6883] __sys_bpf+0x6d1/0x810 [ 114.698248][ T6883] ? __pfx___sys_bpf+0x10/0x10 [ 114.703045][ T6883] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 114.709046][ T6883] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 114.715393][ T6883] ? do_syscall_64+0x100/0x230 [ 114.720264][ T6883] __x64_sys_bpf+0x7c/0x90 [ 114.724699][ T6883] do_syscall_64+0xf3/0x230 [ 114.729222][ T6883] ? clear_bhb_loop+0x35/0x90 [ 114.733917][ T6883] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 114.739830][ T6883] RIP: 0033:0x7f20ebe7cf69 [ 114.744260][ T6883] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 114.763881][ T6883] RSP: 002b:00007f20ecc7e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 114.772309][ T6883] RAX: ffffffffffffffda RBX: 00007f20ebfb3f80 RCX: 00007f20ebe7cf69 [ 114.780276][ T6883] RDX: 0000000000000048 RSI: 0000000020000140 RDI: 0100000000000000 [ 114.788238][ T6883] RBP: 00007f20ecc7e120 R08: 0000000000000000 R09: 0000000000000000 [ 114.796206][ T6883] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 114.804186][ T6883] R13: 000000000000004d R14: 00007f20ebfb3f80 R15: 00007ffd140cbc58 [ 114.812170][ T6883] [ 114.982160][ T6896] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 115.218188][ T6904] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 115.527664][ T6917] IPVS: length: 222 != 24 [ 116.340110][ T6953] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 116.540793][ T6960] netlink: 208 bytes leftover after parsing attributes in process `syz-executor.4'. [ 116.579917][ T6960] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 116.831089][ T6981] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 116.901724][ T6982] IPVS: length: 222 != 24 [ 117.060635][ T6998] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 117.108325][ T7000] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.0'. [ 117.213607][ T7007] tipc: Started in network mode [ 117.223541][ T7007] tipc: Node identity 080211, cluster identity 4711 [ 117.233333][ T7007] tipc: Enabled bearer , priority 0 [ 117.244817][ T7007] mac80211_hwsim hwsim2 €: renamed from wlan0 (while UP) [ 117.258831][ T7007] tipc: Disabling bearer [ 117.918016][ T7049] batadv_slave_0: entered allmulticast mode [ 117.941418][ T7049] pim6reg: entered allmulticast mode [ 117.964789][ T7049] batadv_slave_0: left allmulticast mode [ 117.986236][ T7048] pim6reg: left allmulticast mode [ 118.487300][ T7085] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 118.704395][ T7098] __nla_validate_parse: 6 callbacks suppressed [ 118.704415][ T7098] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 118.757528][ T7101] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 118.768281][ T7101] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 118.862902][ T7096] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 118.919266][ T7111] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.3'. [ 118.940010][ T7111] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 119.165818][ T7130] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 119.323343][ T7139] Bluetooth: MGMT ver 1.22 [ 119.335412][ T7139] FAULT_INJECTION: forcing a failure. [ 119.335412][ T7139] name failslab, interval 1, probability 0, space 0, times 0 [ 119.379575][ T7139] CPU: 0 PID: 7139 Comm: syz-executor.1 Not tainted 6.10.0-rc2-syzkaller-00440-ga99997323654 #0 [ 119.390041][ T7139] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 119.400117][ T7139] Call Trace: [ 119.403411][ T7139] [ 119.406358][ T7139] dump_stack_lvl+0x241/0x360 [ 119.411061][ T7139] ? __pfx_dump_stack_lvl+0x10/0x10 [ 119.416286][ T7139] ? __pfx__printk+0x10/0x10 [ 119.420911][ T7139] should_fail_ex+0x3b0/0x4e0 [ 119.424686][ T7147] IPVS: length: 222 != 24 [ 119.425592][ T7139] ? __alloc_skb+0x1c3/0x440 [ 119.425657][ T7139] should_failslab+0x9/0x20 [ 119.439066][ T7139] kmem_cache_alloc_node_noprof+0x71/0x320 [ 119.444903][ T7139] __alloc_skb+0x1c3/0x440 [ 119.449344][ T7139] ? __pfx___alloc_skb+0x10/0x10 [ 119.454308][ T7139] ? __pfx___alloc_skb+0x10/0x10 [ 119.459271][ T7139] create_monitor_ctrl_event+0x35/0x4d0 [ 119.464835][ T7139] ? mgmt_cmd_complete+0x1b5/0x580 [ 119.469971][ T7139] mgmt_cmd_complete+0x220/0x580 [ 119.474943][ T7139] send_settings_rsp+0xce/0x150 [ 119.479815][ T7139] ? __pfx_send_settings_rsp+0x10/0x10 [ 119.485290][ T7139] ? __asan_memset+0x23/0x50 [ 119.489895][ T7139] ? lockdep_init_map_type+0xa1/0x910 [ 119.495283][ T7139] ? mgmt_pending_find+0x109/0x130 [ 119.500415][ T7139] set_link_security+0x5a8/0x820 [ 119.505379][ T7139] ? __pfx_set_link_security+0x10/0x10 [ 119.510857][ T7139] ? __pfx_delayed_work_timer_fn+0x10/0x10 [ 119.516689][ T7139] ? init_timer_key+0xd0/0x310 [ 119.521563][ T7139] ? mgmt_init_hdev+0x444/0x470 [ 119.526434][ T7139] hci_mgmt_cmd+0xc45/0x11d0 [ 119.531150][ T7139] hci_sock_sendmsg+0x7a5/0x11c0 [ 119.536124][ T7139] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 119.541624][ T7139] ? aa_sock_msg_perm+0x91/0x160 [ 119.546588][ T7139] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 119.551892][ T7139] ? security_socket_sendmsg+0x87/0xb0 [ 119.557381][ T7139] ? __pfx_hci_sock_sendmsg+0x10/0x10 [ 119.562774][ T7139] __sock_sendmsg+0x221/0x270 [ 119.567479][ T7139] sock_write_iter+0x2dd/0x400 [ 119.572277][ T7139] ? __pfx_sock_write_iter+0x10/0x10 [ 119.577594][ T7139] ? bpf_lsm_file_permission+0x9/0x10 [ 119.582986][ T7139] ? security_file_permission+0x7f/0xa0 [ 119.588561][ T7139] vfs_write+0xa72/0xc90 [ 119.592827][ T7139] ? __pfx_sock_write_iter+0x10/0x10 [ 119.598139][ T7139] ? __pfx_vfs_write+0x10/0x10 [ 119.602962][ T7139] ksys_write+0x1a0/0x2c0 [ 119.607318][ T7139] ? __pfx_ksys_write+0x10/0x10 [ 119.612203][ T7139] ? do_syscall_64+0x100/0x230 [ 119.616997][ T7139] ? do_syscall_64+0xb6/0x230 [ 119.621696][ T7139] do_syscall_64+0xf3/0x230 [ 119.626221][ T7139] ? clear_bhb_loop+0x35/0x90 [ 119.630931][ T7139] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 119.636845][ T7139] RIP: 0033:0x7f20ebe7cf69 [ 119.641286][ T7139] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 119.660929][ T7139] RSP: 002b:00007f20ecc7e0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 119.669374][ T7139] RAX: ffffffffffffffda RBX: 00007f20ebfb3f80 RCX: 00007f20ebe7cf69 [ 119.677369][ T7139] RDX: 0000000000000007 RSI: 0000000020000000 RDI: 0000000000000006 [ 119.685364][ T7139] RBP: 00007f20ecc7e120 R08: 0000000000000000 R09: 0000000000000000 [ 119.693361][ T7139] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 119.701351][ T7139] R13: 000000000000004d R14: 00007f20ebfb3f80 R15: 00007ffd140cbc58 [ 119.709367][ T7139] [ 120.197692][ T7168] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 120.265493][ T7172] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 120.336719][ T29] audit: type=1804 audit(1717840855.047:12): pid=7171 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir330829019/syzkaller.L7ygPi/108/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 120.390289][ T7171] netlink: 4076 bytes leftover after parsing attributes in process `syz-executor.0'. [ 120.501020][ T7182] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 120.855086][ T7210] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 120.880811][ T5161] IPVS: starting estimator thread 0... [ 120.943112][ T7215] IPVS: length: 222 != 24 [ 121.004273][ T7213] IPVS: using max 23 ests per chain, 55200 per kthread [ 132.540848][ T7238] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.2'. [ 132.605055][ T7238] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 132.698176][ T7250] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 132.851552][ T7252] IPVS: length: 222 != 24 [ 132.870807][ T7260] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 132.925139][ T7260] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 132.941153][ T7260] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 132.963730][ T7260] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 132.991319][ T7260] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 133.001369][ T7272] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 133.011002][ T7271] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 133.028969][ T7269] syzkaller1: entered promiscuous mode [ 133.038661][ T7269] syzkaller1: entered allmulticast mode [ 133.049241][ T7271] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 133.070692][ T7271] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 133.116446][ T7271] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 133.128292][ T7271] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.1'. [ 133.200637][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.208363][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.774967][ T7326] FAULT_INJECTION: forcing a failure. [ 133.774967][ T7326] name failslab, interval 1, probability 0, space 0, times 0 [ 133.828541][ T7326] CPU: 0 PID: 7326 Comm: syz-executor.2 Not tainted 6.10.0-rc2-syzkaller-00440-ga99997323654 #0 [ 133.839006][ T7326] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 133.849082][ T7326] Call Trace: [ 133.852380][ T7326] [ 133.855320][ T7326] dump_stack_lvl+0x241/0x360 [ 133.860024][ T7326] ? __pfx_dump_stack_lvl+0x10/0x10 [ 133.865241][ T7326] ? __pfx__printk+0x10/0x10 [ 133.869860][ T7326] should_fail_ex+0x3b0/0x4e0 [ 133.874553][ T7326] ? __xdp_reg_mem_model+0x1e0/0x650 [ 133.879859][ T7326] should_failslab+0x9/0x20 [ 133.884390][ T7326] kmalloc_trace_noprof+0x6c/0x2c0 [ 133.889517][ T7326] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 133.895524][ T7326] __xdp_reg_mem_model+0x1e0/0x650 [ 133.900654][ T7326] ? __pfx___xdp_reg_mem_model+0x10/0x10 [ 133.906304][ T7326] ? page_pool_list+0x232/0x280 [ 133.911185][ T7326] xdp_reg_mem_model+0x22/0x40 [ 133.915970][ T7326] bpf_test_run_xdp_live+0x33b/0x1e60 [ 133.921363][ T7326] ? __pfx___might_resched+0x10/0x10 [ 133.926667][ T7326] ? __mutex_unlock_slowpath+0x21d/0x750 [ 133.932322][ T7326] ? __pfx_autoremove_wake_function+0x10/0x10 [ 133.938410][ T7326] ? __mutex_unlock_slowpath+0x21d/0x750 [ 133.944069][ T7326] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 133.950073][ T7326] ? __pfx___static_call_update+0x10/0x10 [ 133.955818][ T7326] ? __pfx_bpf_test_run_xdp_live+0x10/0x10 [ 133.961639][ T7326] ? 0xffffffffa0003b40 [ 133.965807][ T7326] ? 0xffffffffa0003b40 [ 133.970007][ T7326] ? __pfx_xdp_test_run_init_page+0x10/0x10 [ 133.976037][ T7326] ? _copy_from_user+0xa6/0xe0 [ 133.980824][ T7326] ? bpf_test_init+0x15a/0x180 [ 133.985602][ T7326] ? xdp_convert_md_to_buff+0x5b/0x330 [ 133.991084][ T7326] bpf_prog_test_run_xdp+0x80e/0x11b0 [ 133.996474][ T7326] ? __pfx_lock_release+0x10/0x10 [ 134.001506][ T7326] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 134.007306][ T7326] ? __fget_files+0x29/0x470 [ 134.011902][ T7326] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 134.017709][ T7326] bpf_prog_test_run+0x33a/0x3b0 [ 134.022650][ T7326] __sys_bpf+0x48d/0x810 [ 134.026884][ T7326] ? __pfx___sys_bpf+0x10/0x10 [ 134.031647][ T7326] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 134.037619][ T7326] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 134.043941][ T7326] ? do_syscall_64+0x100/0x230 [ 134.048791][ T7326] __x64_sys_bpf+0x7c/0x90 [ 134.053204][ T7326] do_syscall_64+0xf3/0x230 [ 134.057716][ T7326] ? clear_bhb_loop+0x35/0x90 [ 134.062390][ T7326] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 134.068272][ T7326] RIP: 0033:0x7fc0c847cf69 [ 134.072677][ T7326] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 134.092273][ T7326] RSP: 002b:00007fc0c92ab0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 134.100676][ T7326] RAX: ffffffffffffffda RBX: 00007fc0c85b3f80 RCX: 00007fc0c847cf69 [ 134.108636][ T7326] RDX: 0000000000000048 RSI: 0000000020000600 RDI: 000000000000000a [ 134.116592][ T7326] RBP: 00007fc0c92ab120 R08: 0000000000000000 R09: 0000000000000000 [ 134.124548][ T7326] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 134.132502][ T7326] R13: 000000000000000b R14: 00007fc0c85b3f80 R15: 00007ffdc633ed08 [ 134.140471][ T7326] [ 134.181157][ T7339] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 134.192941][ T7337] syzkaller1: entered promiscuous mode [ 134.210170][ T7337] syzkaller1: entered allmulticast mode [ 134.239404][ T7335] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 134.470620][ T7352] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 134.673079][ T7369] hsr_slave_0: left promiscuous mode [ 134.687427][ T7369] hsr_slave_1: left promiscuous mode [ 135.051172][ T7381] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.182897][ T7381] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.200719][ T7384] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 135.233646][ T7384] bridge2: entered promiscuous mode [ 135.243195][ T7384] bridge2: entered allmulticast mode [ 135.299347][ T7381] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.433018][ T7381] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.578398][ T7381] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.633342][ T7381] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.689143][ T7381] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.742827][ T7381] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 136.111430][ T7430] bond0: entered promiscuous mode [ 137.258645][ T7459] bridge_slave_1: left allmulticast mode [ 137.269498][ T7459] bridge_slave_1: left promiscuous mode [ 137.287622][ T7459] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.342046][ T7459] bridge2: port 1(bridge_slave_1) entered blocking state [ 137.384124][ T7459] bridge2: port 1(bridge_slave_1) entered disabled state [ 137.391382][ T7459] bridge_slave_1: entered allmulticast mode [ 137.452983][ T7459] bridge_slave_1: entered promiscuous mode [ 137.473856][ T7459] bridge2: port 1(bridge_slave_1) entered blocking state [ 137.481107][ T7459] bridge2: port 1(bridge_slave_1) entered forwarding state [ 137.801100][ T7500] pim6reg1: entered promiscuous mode [ 137.808859][ T7500] pim6reg1: entered allmulticast mode [ 137.830756][ T7500] syzkaller0: entered allmulticast mode [ 137.840938][ T7502] IPVS: lblc: SCTP 127.0.0.1:0 - no destination available [ 138.285385][ T7519] __nla_validate_parse: 4 callbacks suppressed [ 138.285406][ T7519] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 138.301957][ T7519] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 138.382265][ T7521] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.4'. [ 138.414199][ T7521] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 139.120251][ T7550] tipc: Enabling of bearer rejected, failed to enable media [ 139.147084][ T7550] bridge0: port 3(macsec0) entered blocking state [ 139.153680][ T7550] bridge0: port 3(macsec0) entered forwarding state [ 139.161740][ T7550] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.168949][ T7550] bridge0: port 2(bridge_slave_1) entered forwarding state [ 139.176432][ T7550] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.183613][ T7550] bridge0: port 1(bridge_slave_0) entered forwarding state [ 139.200652][ T7558] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 139.225683][ T7550] bridge0: entered promiscuous mode [ 139.246286][ T7550] bridge0: entered allmulticast mode [ 139.296980][ T7528] FAULT_INJECTION: forcing a failure. [ 139.296980][ T7528] name fail_futex, interval 1, probability 0, space 0, times 1 [ 139.345836][ T7528] CPU: 1 PID: 7528 Comm: syz-executor.2 Not tainted 6.10.0-rc2-syzkaller-00440-ga99997323654 #0 [ 139.356299][ T7528] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 139.366380][ T7528] Call Trace: [ 139.369674][ T7528] [ 139.372621][ T7528] dump_stack_lvl+0x241/0x360 [ 139.377333][ T7528] ? __pfx_dump_stack_lvl+0x10/0x10 [ 139.382552][ T7528] ? __pfx__printk+0x10/0x10 [ 139.387157][ T7528] ? register_lock_class+0x102/0x980 [ 139.392463][ T7528] ? __pfx_register_lock_class+0x10/0x10 [ 139.398119][ T7528] should_fail_ex+0x3b0/0x4e0 [ 139.402811][ T7528] get_futex_key+0x17c/0x1050 [ 139.407521][ T7528] ? __pfx_get_futex_key+0x10/0x10 [ 139.412653][ T7528] ? __lock_acquire+0x1346/0x1fd0 [ 139.417699][ T7528] futex_wake+0x12a/0x5c0 [ 139.422056][ T7528] ? __pfx_futex_wake+0x10/0x10 [ 139.426936][ T7528] do_futex+0x392/0x560 [ 139.431104][ T7528] ? __pfx_do_futex+0x10/0x10 [ 139.435796][ T7528] ? __might_fault+0xaa/0x120 [ 139.440488][ T7528] mm_release+0x193/0x430 [ 139.444816][ T7528] ? exit_robust_list+0x2cf/0x2f0 [ 139.449836][ T7528] ? __pfx_mm_release+0x10/0x10 [ 139.454675][ T7528] ? _raw_spin_unlock_irq+0x23/0x50 [ 139.459880][ T7528] ? lockdep_hardirqs_on+0x99/0x150 [ 139.465096][ T7528] exit_mm+0xb0/0x310 [ 139.469083][ T7528] ? __pfx_exit_mm+0x10/0x10 [ 139.473661][ T7528] ? taskstats_exit+0x348/0xa70 [ 139.478504][ T7528] ? lockdep_hardirqs_on+0x99/0x150 [ 139.483697][ T7528] do_exit+0x9aa/0x27e0 [ 139.487856][ T7528] ? __pfx_do_exit+0x10/0x10 [ 139.492438][ T7528] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 139.497807][ T7528] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 139.503801][ T7528] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 139.510224][ T7528] ? _raw_spin_lock_irq+0xdf/0x120 [ 139.515355][ T7528] do_group_exit+0x207/0x2c0 [ 139.519944][ T7528] ? _raw_spin_unlock_irq+0x23/0x50 [ 139.525224][ T7528] ? lockdep_hardirqs_on+0x99/0x150 [ 139.530414][ T7528] get_signal+0x16a1/0x1740 [ 139.534924][ T7528] ? __pfx_get_signal+0x10/0x10 [ 139.539777][ T7528] arch_do_signal_or_restart+0x96/0x860 [ 139.545321][ T7528] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 139.551466][ T7528] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 139.557456][ T7528] ? syscall_exit_to_user_mode+0xa3/0x370 [ 139.563261][ T7528] syscall_exit_to_user_mode+0xc9/0x370 [ 139.568804][ T7528] do_syscall_64+0x100/0x230 [ 139.573386][ T7528] ? clear_bhb_loop+0x35/0x90 [ 139.578062][ T7528] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 139.584039][ T7528] RIP: 0033:0x7fc0c847cf69 [ 139.588455][ T7528] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 139.608143][ T7528] RSP: 002b:00007fc0c928a0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 139.616551][ T7528] RAX: fffffffffffffe00 RBX: 00007fc0c85b4050 RCX: 00007fc0c847cf69 [ 139.624513][ T7528] RDX: 0000000000000000 RSI: 0000000020000b00 RDI: 0000000000000003 [ 139.632472][ T7528] RBP: 00007fc0c928a120 R08: 0000000000000000 R09: 0000000000000000 [ 139.640436][ T7528] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 139.648393][ T7528] R13: 000000000000006e R14: 00007fc0c85b4050 R15: 00007ffdc633ed08 [ 139.656366][ T7528] [ 139.927099][ T7586] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 140.175060][ T7603] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode balance-xor(2) [ 140.655901][ T7633] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 140.675847][ T7633] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 140.710583][ T7633] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'. [ 140.721256][ T7641] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 140.779484][ T7645] netlink: 'syz-executor.2': attribute type 49 has an invalid length. [ 140.797064][ T7645] netlink: 'syz-executor.2': attribute type 49 has an invalid length. [ 140.928636][ T7649] ieee802154 phy0 wpan0: encryption failed: -22 [ 140.956110][ T7656] IPVS: lblc: SCTP 127.0.0.1:0 - no destination available [ 141.017439][ T7658] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 141.025678][ T7658] netlink: 209324 bytes leftover after parsing attributes in process `syz-executor.2'. [ 141.229023][ T7669] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 141.455796][ T7684] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 141.466387][ T7684] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 141.478514][ T7684] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'. [ 141.554920][ T7688] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 141.565708][ T7688] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 141.720731][ T7700] tap0: tun_chr_ioctl cmd 1074025677 [ 141.728249][ T7700] tap0: linktype set to 769 [ 142.114225][ T7726] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 142.156860][ T7732] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 142.166759][ T7726] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 142.207124][ T7726] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 142.221408][ T7726] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 142.244851][ T7726] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 142.261273][ T7732] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.270752][ T7732] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.279895][ T7732] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.288724][ T7732] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.303165][ T7726] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 142.310939][ T7726] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 142.321591][ T7732] vxlan0: entered promiscuous mode [ 142.328825][ T7726] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 142.337398][ T7726] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 142.352113][ T7726] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 142.360332][ T7726] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 142.378469][ T7726] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 142.387437][ T7726] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 142.394854][ T7726] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 142.411479][ T7726] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 142.431164][ T7726] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 142.450669][ T7726] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 142.466030][ T7726] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 142.483394][ T7726] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 142.509783][ T7726] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 142.534294][ T7726] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 142.551686][ T7726] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 142.572570][ T7726] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 142.591934][ T7726] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 142.609494][ T7726] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 142.625770][ T7726] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 142.635445][ T7726] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 142.642708][ T7726] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 142.651681][ T7726] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 142.669991][ T7726] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 142.682691][ T7726] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 142.692601][ T7726] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 142.708485][ T7726] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 142.720827][ T7726] vcan0: tx drop: invalid sa for name 0x0000000000000002 [ 142.831166][ T7769] vcan0: Master is either lo or non-ether device [ 143.157611][ T7786] team0: entered promiscuous mode [ 143.165299][ T7786] team_slave_0: entered promiscuous mode [ 143.178937][ T7786] team_slave_1: entered promiscuous mode [ 143.197496][ T7786] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 143.249743][ T7786] team0: left promiscuous mode [ 143.299537][ T7786] team_slave_0: left promiscuous mode [ 143.324466][ T7786] team_slave_1: left promiscuous mode [ 143.630458][ T7818] validate_nla: 1 callbacks suppressed [ 143.630476][ T7818] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 143.713484][ T7818] team0: Device veth1_macvtap failed to register rx_handler [ 143.959947][ T7843] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 143.990143][ T7843] __nla_validate_parse: 2 callbacks suppressed [ 143.990162][ T7843] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.0'. [ 144.044928][ T7843] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 144.175639][ T7855] vcan0: Master is either lo or non-ether device [ 144.187393][ T7857] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 144.586237][ T7885] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 144.840014][ T7896] syzkaller0: entered promiscuous mode [ 144.845850][ T7896] syzkaller0: entered allmulticast mode [ 144.992164][ T7905] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 145.001028][ T7905] netlink: 17 bytes leftover after parsing attributes in process `syz-executor.2'. [ 145.386655][ T7925] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 145.418163][ T7928] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 145.534703][ T7929] netlink: 1760 bytes leftover after parsing attributes in process `syz-executor.3'. [ 145.544524][ T7929] netlink: 1760 bytes leftover after parsing attributes in process `syz-executor.3'. [ 145.565295][ T7936] syzkaller1: entered promiscuous mode [ 145.579335][ T7936] syzkaller1: entered allmulticast mode [ 145.614345][ T7929] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 145.652230][ T7929] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 145.666311][ T7939] dccp_invalid_packet: P.Data Offset(0) too small [ 145.679989][ T7949] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 145.997996][ T7963] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 146.084513][ T7963] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 146.125521][ C0] vxcan0: j1939_tp_txtimer: 0xffff88802e71b000: tx aborted with unknown reason: -2 [ 146.224853][ T7986] ieee802154 phy0 wpan0: encryption failed: -22 [ 146.503436][ T7992] bond_slave_0: entered promiscuous mode [ 146.509518][ T7992] bond_slave_1: entered promiscuous mode [ 146.524728][ T7992] vlan5: entered promiscuous mode [ 146.534803][ T7992] bond0: entered promiscuous mode [ 146.551272][ T7992] bond0: left promiscuous mode [ 146.557111][ T7992] bond_slave_0: left promiscuous mode [ 146.562619][ T7992] bond_slave_1: left promiscuous mode [ 147.017674][ T8024] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 147.022526][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 147.031638][ T8024] dccp_invalid_packet: P.Data Offset(0) too small [ 147.809409][ T8073] bond0: option ad_select: unable to set because the bond device is up [ 148.024752][ T8087] IPVS: length: 222 != 24 [ 148.431482][ T8109] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 148.581979][ T8118] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 148.599536][ T8118] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 148.624070][ T8118] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 149.599742][ T8176] IPVS: length: 222 != 24 [ 149.982038][ T8197] __nla_validate_parse: 17 callbacks suppressed [ 149.982058][ T8197] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 150.013547][ T8197] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 150.106612][ T8199] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 150.121027][ T8199] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 150.241888][ T8207] siw: device registration error -23 [ 150.406190][ C0] vxcan0: j1939_tp_txtimer: 0xffff88802ced0400: tx aborted with unknown reason: -2 [ 150.416312][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff8880110aac00: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 150.435706][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88802ced0400: 0x00000: (250) Any other reason (if a Connection Abort reason is identified that is not listed in the table use code 250) [ 150.440865][ T8215] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 150.919303][ T8245] IPVS: length: 222 != 24 [ 150.965927][ T8250] team_slave_0: entered promiscuous mode [ 150.971962][ T8250] team_slave_1: entered promiscuous mode [ 150.984230][ T8250] vlan2: entered promiscuous mode [ 150.989696][ T8250] team0: entered promiscuous mode [ 151.006837][ T8250] team0: left promiscuous mode [ 151.011939][ T8250] team_slave_0: left promiscuous mode [ 151.017385][ T8250] team_slave_1: left promiscuous mode [ 153.138086][ T8364] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 153.148955][ T8365] TCP segment has incorrect auth options set for [fe80::bb].0->[ff02::1].20002 [P] [ 153.315124][ T8372] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.322780][ T8372] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.330003][ T8372] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.416964][ T8375] macvlan2: entered allmulticast mode [ 153.428166][ T8375] team_slave_0: entered promiscuous mode [ 153.433985][ T8375] team_slave_1: entered promiscuous mode [ 153.446753][ T8375] team0: entered allmulticast mode [ 153.457541][ T8375] team_slave_0: entered allmulticast mode [ 153.465213][ T8382] sctp: [Deprecated]: syz-executor.2 (pid 8382) Use of struct sctp_assoc_value in delayed_ack socket option. [ 153.465213][ T8382] Use struct sctp_sack_info instead [ 153.468261][ T8375] team_slave_1: entered allmulticast mode [ 153.488529][ T8375] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 153.529476][ T8375] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 153.764493][ T8398] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 153.860825][ T8405] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 153.870485][ T8405] batadv_slave_1: entered allmulticast mode [ 153.878327][ T8405] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.885944][ T8405] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 153.901573][ T8405] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 153.931303][ T8403] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 154.640600][ T8444] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 154.705251][ T8449] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 154.797126][ T8449] ip6gretap0: entered promiscuous mode [ 154.808932][ T8449] batadv_slave_0: entered promiscuous mode [ 154.831538][ T8449] batadv_slave_0: left promiscuous mode [ 154.872449][ T8449] ip6gretap0: left promiscuous mode [ 155.458230][ T8488] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 155.485138][ T8488] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 155.809203][ T8506] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 155.813551][ T8505] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 156.392369][ T8531] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 156.403236][ T8523] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 156.403656][ T8531] ipvlan1: entered promiscuous mode [ 156.462985][ T8531] team0: Device ipvlan1 failed to register rx_handler [ 156.496750][ T8524] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 156.519407][ T8524] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 156.859180][ T8544] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 157.107566][ T8559] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 157.246490][ T8566] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 157.400028][ T8570] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 158.131482][ T8619] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.1'. [ 158.403311][ T8629] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 158.591581][ T8631] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 158.638700][ T8631] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.031822][ T8631] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.075624][ T8631] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.241503][ T8631] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.264121][ T8631] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.349159][ T8631] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 159.359985][ T8631] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 159.482201][ T8631] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.493121][ T8631] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.517550][ T8631] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.526306][ T8631] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.561270][ T8631] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.581590][ T8631] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.612536][ T8631] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 159.628563][ T8631] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.672697][ T8685] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 159.694688][ T8685] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 159.718161][ T8685] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for erspan1 [ 160.297556][ T8728] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 160.378352][ T8733] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.0'. [ 160.414105][ T8733] openvswitch: netlink: Key type 29 is not supported [ 160.768140][ T8756] xt_CT: You must specify a L4 protocol and not use inversions on it [ 160.769120][ T8759] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 160.806196][ T8756] netlink: 'syz-executor.3': attribute type 17 has an invalid length. [ 160.849671][ T8761] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 160.874463][ T8761] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 160.925748][ T8763] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 161.169490][ T8775] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 161.407540][ T8786] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 161.525175][ T8795] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 161.663419][ T8800] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 161.794225][ T8806] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 162.006510][ T8821] raw_sendmsg: syz-executor.0 forgot to set AF_INET. Fix it! [ 162.089252][ T8823] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 162.297280][ T8837] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 162.359111][ T8836] syzkaller0: entered promiscuous mode [ 162.370798][ T8836] syzkaller0: entered allmulticast mode [ 162.378490][ T8842] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 162.396076][ T8842] bridge0: port 3(macsec0) entered disabled state [ 162.402711][ T8842] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.422217][ T8842] bridge0: port 3(macsec0) entered blocking state [ 162.428871][ T8842] bridge0: port 3(macsec0) entered forwarding state [ 162.435721][ T8842] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.442838][ T8842] bridge0: port 1(bridge_slave_0) entered forwarding state [ 162.464832][ T8842] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 162.604732][ T8852] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 162.613398][ T8852] NCSI netlink: No device for ifindex 0 [ 163.100743][ T8865] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 164.316430][ T8848] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 164.324398][ T8846] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 164.464995][ T8883] IPVS: length: 110 != 24 [ 164.742105][ T8890] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 164.824098][ T8897] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 165.192134][ T8927] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 165.230201][ T29] audit: type=1800 audit(1717840899.937:13): pid=8927 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1956 res=0 errno=0 [ 165.658675][ T8949] netlink: 'syz-executor.1': attribute type 8 has an invalid length. [ 165.735981][ T8951] netpci0: tun_chr_ioctl cmd 2148553947 [ 165.749754][ T8953] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 165.793660][ T8951] veth1_macvtap: left allmulticast mode [ 165.811668][ T8951] veth1_macvtap: left promiscuous mode [ 165.861912][ T8961] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 165.864555][ T8951] bridge0: port 3(macsec0) entered disabled state [ 165.910940][ T5161] IPVS: starting estimator thread 0... [ 165.943045][ T8951] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 166.014655][ T8965] IPVS: using max 18 ests per chain, 43200 per kthread [ 166.104313][ T8977] __nla_validate_parse: 3 callbacks suppressed [ 166.104331][ T8977] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 166.199442][ T8980] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 167.461627][ T9001] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 167.468180][ T9000] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 167.516264][ T9001] 8021q: adding VLAN 0 to HW filter on device team0 [ 167.556079][ T9001] bond0: (slave team0): Enslaving as an active interface with an up link [ 167.565978][ T9003] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 167.660620][ T9000] sch_fq: defrate 2 ignored. [ 167.827703][ T9021] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 168.006563][ T9028] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 168.120013][ T9040] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 168.178019][ T9045] IPVS: lblc: TCP 172.20.20.170:0 - no destination available [ 168.274886][ T9051] syzkaller0: entered allmulticast mode [ 168.398479][ T9062] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 168.639708][ T9077] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 168.691624][ T9080] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 168.703989][ T9080] xt_socket: unknown flags 0x4 [ 169.075528][ T9086] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 169.333797][ T9099] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 169.806830][ T9132] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 169.834884][ T9128] IPVS: length: 222 != 24 [ 170.030011][ T9142] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 170.082582][ T9142] team0: Port device wlan1 added [ 170.452651][ T9162] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 170.842496][ T9184] vlan3: entered promiscuous mode [ 171.003403][ T9196] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 171.074762][ T9196] bond2: entered promiscuous mode [ 171.090944][ T9196] bond0: (slave bond_slave_0): Releasing backup interface [ 171.121926][ T9204] __nla_validate_parse: 9 callbacks suppressed [ 171.121945][ T9204] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 171.124697][ T9196] bond2: (slave bond_slave_0): making interface the new active one [ 171.148342][ T9196] bond_slave_0: entered promiscuous mode [ 171.155935][ T9196] bond2: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.413766][ T9220] netlink: 'syz-executor.2': attribute type 15 has an invalid length. [ 171.481689][ T9226] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 171.699123][ T9238] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 171.907618][ T9246] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes [ 172.046586][ T9264] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.1'. [ 172.089622][ T9271] IPVS: set_ctl: invalid protocol: 115 172.20.20.170:20002 [ 172.171353][ T9278] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 172.193289][ T9278] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 172.258510][ T9279] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 172.294653][ T9279] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 172.388372][ T9293] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 172.588884][ T9304] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 173.822852][ T9371] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 173.916502][ T9377] bridge0: entered allmulticast mode [ 173.955172][ T9377] pimreg: entered allmulticast mode [ 173.976313][ T9377] pimreg: left allmulticast mode [ 173.990097][ T9377] bridge0: left allmulticast mode [ 174.117671][ T9385] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 174.134091][ T9390] IPVS: length: 222 != 24 [ 174.140257][ T9385] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 174.303738][ T9406] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 174.617041][ T9420] openvswitch: netlink: Key type 1960 is out of range max 32 [ 174.629913][ T9423] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 175.358753][ T9473] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 175.379482][ T9473] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 175.413702][ T9475] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 175.581981][ T9487] xt_CT: You must specify a L4 protocol and not use inversions on it [ 176.362678][ T9516] vlan3: entered promiscuous mode [ 176.372114][ T9516] macvtap0: entered promiscuous mode [ 176.378285][ T9516] vlan3: entered allmulticast mode [ 176.383429][ T9516] macvtap0: entered allmulticast mode [ 176.389056][ T9516] veth0_macvtap: entered allmulticast mode [ 176.538855][ T9526] __nla_validate_parse: 12 callbacks suppressed [ 176.538881][ T9526] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 176.839632][ T9541] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 176.867787][ T9541] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 176.888795][ T9541] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 177.057056][ T9555] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 177.057657][ T9558] netlink: 'syz-executor.3': attribute type 63 has an invalid length. [ 177.140857][ T9558] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 177.149387][ T9560] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 177.184538][ T9561] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 177.243610][ T9567] IPVS: lblc: SCTP 127.0.0.1:0 - no destination available [ 177.707059][ T9593] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 177.940030][ T9604] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 177.960461][ T9604] x_tables: ip_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 178.338430][ T9614] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 178.358554][ T9614] openvswitch: netlink: Geneve option length err (len 3060, max 255). [ 178.373253][ T9614] EXT4-fs warning (device sda1): __ext4_ioctl:1258: Setting inode version is not supported with metadata_csum enabled. [ 178.714696][ T9635] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 179.136720][ T9653] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 179.351664][ T9664] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 179.494256][ T9675] syzkaller1: entered promiscuous mode [ 179.499786][ T9675] syzkaller1: entered allmulticast mode [ 179.863463][ T9696] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 179.999752][ T9701] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 180.036907][ T9710] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 180.119941][ T9719] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 180.194325][ T9726] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.2'. [ 180.240291][ T9728] team_slave_1: mtu greater than device maximum [ 180.258804][ T9728] team0: Device team_slave_1 failed to change mtu [ 180.326523][ T9734] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 180.840776][ T9766] block nbd0: not configured, cannot reconfigure [ 181.097987][ T9788] Bluetooth: MGMT ver 1.22 [ 181.354010][ T5123] Bluetooth: hci1: command 0x0406 tx timeout [ 181.360473][ T5123] Bluetooth: hci2: command 0x0406 tx timeout [ 181.368008][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 182.084884][ T35] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.242568][ T35] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.320798][ T9829] sctp: [Deprecated]: syz-executor.4 (pid 9829) Use of struct sctp_assoc_value in delayed_ack socket option. [ 182.320798][ T9829] Use struct sctp_sack_info instead [ 182.406441][ T35] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.481440][ T9830] : renamed from veth0_vlan (while UP) [ 182.558156][ T35] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 182.774866][ T35] bridge_slave_1: left allmulticast mode [ 182.788399][ T35] bridge_slave_1: left promiscuous mode [ 182.804903][ T4491] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 182.814764][ T4491] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 182.818568][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.830018][ T4491] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 182.840210][ T4491] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 182.848209][ T35] bridge_slave_0: left allmulticast mode [ 182.854632][ T4491] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 182.859445][ T35] bridge_slave_0: left promiscuous mode [ 182.867978][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.868483][ T4491] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 183.345383][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 183.360891][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 183.371300][ T35] bond0 (unregistering): Released all slaves [ 183.386196][ T9848] __nla_validate_parse: 9 callbacks suppressed [ 183.386211][ T9848] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 183.800364][ T9879] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.0'. [ 183.826624][ T9880] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. [ 183.956584][ T9886] syz-executor.3[9886] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 183.956814][ T9886] syz-executor.3[9886] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 184.011119][ T9888] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 184.035484][ T9888] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.4'. [ 184.098203][ T9896] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 184.121509][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 184.130323][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 184.139405][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 184.147876][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 184.180359][ T35] veth1_macvtap: left promiscuous mode [ 184.186875][ T35] veth0_macvtap: left promiscuous mode [ 184.192875][ T35] veth1_vlan: left promiscuous mode [ 184.200831][ T35] veth0_vlan: left promiscuous mode [ 184.856744][ T35] team0 (unregistering): Port device team_slave_1 removed [ 184.902122][ T35] team0 (unregistering): Port device team_slave_0 removed [ 184.966306][ T5113] Bluetooth: hci2: command tx timeout [ 185.329672][ T9911] vlan5: entered allmulticast mode [ 185.430963][ T9843] chnl_net:caif_netlink_parms(): no params data found [ 185.468834][ T9918] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 185.548661][ T9921] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 185.562486][ T9921] netlink: 896 bytes leftover after parsing attributes in process `syz-executor.4'. [ 185.573137][ T9921] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 185.587784][ T9921] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 185.597275][ T9921] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 185.693519][ T9843] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.701802][ T9843] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.710257][ T9843] bridge_slave_0: entered allmulticast mode [ 185.719051][ T9843] bridge_slave_0: entered promiscuous mode [ 185.763052][ T9843] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.792456][ T9843] bridge0: port 2(bridge_slave_1) entered disabled state [ 185.801801][ T9843] bridge_slave_1: entered allmulticast mode [ 185.809744][ T9843] bridge_slave_1: entered promiscuous mode [ 185.830049][ T35] IPVS: stop unused estimator thread 0... [ 185.906736][ T9843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.949180][ T9843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 186.056796][ T9843] team0: Port device team_slave_0 added [ 186.085974][ T9843] team0: Port device team_slave_1 added [ 186.125164][ T9939] FAULT_INJECTION: forcing a failure. [ 186.125164][ T9939] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 186.158286][ T9939] CPU: 0 PID: 9939 Comm: syz-executor.4 Not tainted 6.10.0-rc2-syzkaller-00440-ga99997323654 #0 [ 186.168750][ T9939] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 186.178824][ T9939] Call Trace: [ 186.182121][ T9939] [ 186.185067][ T9939] dump_stack_lvl+0x241/0x360 [ 186.189785][ T9939] ? __pfx_dump_stack_lvl+0x10/0x10 [ 186.195004][ T9939] ? __pfx__printk+0x10/0x10 [ 186.199620][ T9939] ? __pfx_lock_release+0x10/0x10 [ 186.204681][ T9939] should_fail_ex+0x3b0/0x4e0 [ 186.209382][ T9939] _copy_to_user+0x2f/0xb0 [ 186.213822][ T9939] bpf_test_finish+0x22c/0x8b0 [ 186.218609][ T9939] ? __might_fault+0xaa/0x120 [ 186.223311][ T9939] ? __pfx_bpf_test_finish+0x10/0x10 [ 186.228612][ T9939] ? _copy_from_user+0xa6/0xe0 [ 186.233400][ T9939] ? bpf_test_init+0x15a/0x180 [ 186.238182][ T9939] bpf_prog_test_run_xdp+0x905/0x11b0 [ 186.243575][ T9939] ? __pfx_lock_release+0x10/0x10 [ 186.248617][ T9939] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 186.254429][ T9939] ? __fget_files+0x29/0x470 [ 186.259032][ T9939] ? __pfx_bpf_prog_test_run_xdp+0x10/0x10 [ 186.264834][ T9939] bpf_prog_test_run+0x33a/0x3b0 [ 186.269763][ T9939] __sys_bpf+0x48d/0x810 [ 186.274005][ T9939] ? __pfx___sys_bpf+0x10/0x10 [ 186.278775][ T9939] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 186.284753][ T9939] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 186.291072][ T9939] ? do_syscall_64+0x100/0x230 [ 186.295833][ T9939] __x64_sys_bpf+0x7c/0x90 [ 186.300246][ T9939] do_syscall_64+0xf3/0x230 [ 186.304745][ T9939] ? clear_bhb_loop+0x35/0x90 [ 186.309420][ T9939] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 186.315307][ T9939] RIP: 0033:0x7fe360e7cf69 [ 186.319723][ T9939] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 186.339324][ T9939] RSP: 002b:00007fe3609ff0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000141 [ 186.347836][ T9939] RAX: ffffffffffffffda RBX: 00007fe360fb3f80 RCX: 00007fe360e7cf69 [ 186.355820][ T9939] RDX: 0000000000000050 RSI: 0000000020000340 RDI: 000000000000000a [ 186.363784][ T9939] RBP: 00007fe3609ff120 R08: 0000000000000000 R09: 0000000000000000 [ 186.371746][ T9939] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 186.379714][ T9939] R13: 000000000000000b R14: 00007fe360fb3f80 R15: 00007ffca2829308 [ 186.387692][ T9939] [ 186.451828][ T9843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 186.475536][ T9843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.558195][ T9843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 186.596205][ T9843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 186.603187][ T9843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 186.664034][ T9843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 186.780410][ T9964] IPVS: lblc: SCTP 127.0.0.1:0 - no destination available [ 186.829375][ T9843] hsr_slave_0: entered promiscuous mode [ 186.841653][ T9843] hsr_slave_1: entered promiscuous mode [ 186.863386][ T9843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 186.878901][ T9843] Cannot create hsr debugfs directory [ 187.035618][ T5113] Bluetooth: hci2: command tx timeout [ 187.476427][ T9985] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 187.613716][ T9994] IPVS: Error joining to the multicast group [ 187.652504][ T9843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 187.680836][ T9995] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 187.711636][ T9843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 187.752688][T10003] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 0, id = 0 [ 187.758185][ T9843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 187.805517][ T9843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 187.848219][T10007] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 187.858103][T10009] IPVS: stopping backup sync thread 10003 ... [ 187.998149][ T9843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.043636][ T9843] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.084289][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.092542][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.109901][T10017] Bluetooth: hci3: unsupported parameter 64512 [ 188.129250][T10017] Bluetooth: hci3: invalid length 0, exp 2 for type 16 [ 188.129758][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.143294][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.193698][T10021] mac80211_hwsim hwsim18 ÿÿÿÿÿÿ: renamed from wlan1 [ 188.543761][ T9843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.611579][T10044] __nla_validate_parse: 11 callbacks suppressed [ 188.611599][T10044] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 188.646849][T10044] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 188.654138][T10044] IPv6: NLM_F_CREATE should be set when creating new route [ 188.661379][T10044] IPv6: NLM_F_CREATE should be set when creating new route [ 188.672501][ T9843] veth0_vlan: entered promiscuous mode [ 188.708943][ T9843] veth1_vlan: entered promiscuous mode [ 188.818757][ T9843] veth0_macvtap: entered promiscuous mode [ 188.850658][ T9843] veth1_macvtap: entered promiscuous mode [ 188.892134][ T9843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.911490][ T9843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.923044][ T9843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.942076][ T9843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 188.953219][ T9843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 188.970723][T10052] nbd: must specify at least one socket [ 188.986129][ T9843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.013644][ T9843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.037171][T10048] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 189.056374][T10048] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 189.082879][ T9843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.096319][ T9843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.108417][ T9843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.119649][ T9843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.119932][T10059] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 189.129738][ T9843] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.146232][ T5113] Bluetooth: hci2: command tx timeout [ 189.159066][ T9843] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.172021][ T9843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.183592][T10059] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.4'. [ 189.235221][ T9843] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.250679][ T9843] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.260287][ T9843] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.269136][ T9843] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.418890][T10066] sit0: entered promiscuous mode [ 189.447067][T10066] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 189.460993][T10066] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. [ 189.503060][T10072] sctp: [Deprecated]: syz-executor.3 (pid 10072) Use of struct sctp_assoc_value in delayed_ack socket option. [ 189.503060][T10072] Use struct sctp_sack_info instead [ 189.583396][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.602067][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.669245][ T2466] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.690833][ T2466] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 190.107839][T10102] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 190.120722][T10102] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 190.422062][T10121] syzkaller1: entered promiscuous mode [ 190.444092][T10121] syzkaller1: entered allmulticast mode [ 190.747203][T10147] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 190.865652][T10157] vlan2: entered promiscuous mode [ 190.887284][T10157] macvlan1: entered promiscuous mode [ 190.944875][T10157] vlan2: entered allmulticast mode [ 190.982224][T10157] macvlan1: entered allmulticast mode [ 191.016178][T10157] veth1_vlan: entered allmulticast mode [ 191.076819][T10157] macvlan1: left allmulticast mode [ 191.094392][T10157] veth1_vlan: left allmulticast mode [ 191.107259][T10157] macvlan1: left promiscuous mode [ 191.195555][ T5113] Bluetooth: hci2: command tx timeout [ 191.384914][T10187] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 191.682840][T10208] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.2'. [ 191.719344][T10207] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 192.016360][T10218] bridge0: entered promiscuous mode [ 192.575317][T10240] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 193.812185][T10218] bridge0: left promiscuous mode [ 194.026121][T10253] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 194.063778][T10244] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:0) [ 194.094460][T10244] bridge0: received packet on bridge_slave_0 with own address as source address (addr:aa:aa:aa:aa:aa:0c, vlan:1) [ 194.131690][T10258] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 194.179562][T10260] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 194.212347][T10258] bond1: (slave vcan2): The slave device specified does not support setting the MAC address [ 194.226490][T10258] bond1: (slave vcan2): Setting fail_over_mac to active for active-backup mode [ 194.240254][T10258] bond1: (slave vcan2): making interface the new active one [ 194.248951][T10258] bond1: (slave vcan2): Enslaving as an active interface with an up link [ 194.643526][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.650101][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.182846][T10318] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 195.980176][T10320] IPVS: lblc: SCTP 127.0.0.1:0 - no destination available [ 198.096996][T10325] macsec1: entered promiscuous mode [ 198.102248][T10325] macvlan1: entered promiscuous mode [ 198.109784][T10325] macsec1: entered allmulticast mode [ 198.115201][T10325] macvlan1: entered allmulticast mode [ 198.120581][T10325] veth1_vlan: entered allmulticast mode [ 198.137583][T10325] macvlan1: left allmulticast mode [ 198.142711][T10325] veth1_vlan: left allmulticast mode [ 198.151101][T10325] macvlan1: left promiscuous mode [ 198.209202][T10327] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 198.221562][T10327] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 198.386267][T10353] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 198.417450][T10353] openvswitch: netlink: ERSPAN option length err (len 3060, max 255). [ 198.438497][T10358] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 198.567646][T10364] FAULT_INJECTION: forcing a failure. [ 198.567646][T10364] name failslab, interval 1, probability 0, space 0, times 0 [ 198.590285][T10366] x_tables: duplicate underflow at hook 2 [ 198.613164][T10364] CPU: 0 PID: 10364 Comm: syz-executor.4 Not tainted 6.10.0-rc2-syzkaller-00440-ga99997323654 #0 [ 198.623701][T10364] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 198.633863][T10364] Call Trace: [ 198.637158][T10364] [ 198.640102][T10364] dump_stack_lvl+0x241/0x360 [ 198.644894][T10364] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.650122][T10364] ? __pfx__printk+0x10/0x10 [ 198.654736][T10364] ? __pfx___might_resched+0x10/0x10 [ 198.660051][T10364] should_fail_ex+0x3b0/0x4e0 [ 198.664755][T10364] ? __kernfs_new_node+0xd8/0x870 [ 198.669798][T10364] should_failslab+0x9/0x20 [ 198.674327][T10364] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 198.679734][T10364] __kernfs_new_node+0xd8/0x870 [ 198.684608][T10364] ? __pfx_lock_acquire+0x10/0x10 [ 198.689657][T10364] ? up_write+0x1a9/0x590 [ 198.694011][T10364] ? __pfx___kernfs_new_node+0x10/0x10 [ 198.699497][T10364] ? __pfx_up_write+0x10/0x10 [ 198.704221][T10364] kernfs_new_node+0x137/0x240 [ 198.709014][T10364] __kernfs_create_file+0x49/0x2e0 [ 198.714154][T10364] sysfs_add_file_mode_ns+0x24a/0x310 [ 198.719562][T10364] internal_create_group+0x7a7/0x11d0 [ 198.724972][T10364] ? __pfx_internal_create_group+0x10/0x10 [ 198.730818][T10364] sysfs_create_groups+0x56/0x120 [ 198.735872][T10364] device_add_attrs+0xe5/0x600 [ 198.740661][T10364] ? __pfx_device_add_attrs+0x10/0x10 [ 198.746050][T10364] device_add+0x576/0xbf0 [ 198.750384][T10364] ? device_initialize+0x266/0x460 [ 198.755554][T10364] netdev_register_kobject+0x17e/0x320 [ 198.761011][T10364] register_netdevice+0x11d5/0x19e0 [ 198.766244][T10364] ? __pfx_register_netdevice+0x10/0x10 [ 198.771883][T10364] ? dev_addr_mod+0xbd/0x330 [ 198.776494][T10364] ipip6_tunnel_create+0x142/0x320 [ 198.781615][T10364] ipip6_newlink+0x288/0x940 [ 198.786221][T10364] ? __pfx_ipip6_newlink+0x10/0x10 [ 198.791327][T10364] ? validate_linkmsg+0x71e/0x900 [ 198.796344][T10364] ? rtnl_create_link+0x91c/0xc20 [ 198.801365][T10364] ? __pfx_ipip6_newlink+0x10/0x10 [ 198.806487][T10364] rtnl_newlink+0x158f/0x20a0 [ 198.811191][T10364] ? __pfx_rtnl_newlink+0x10/0x10 [ 198.816219][T10364] ? do_raw_spin_unlock+0x13c/0x8b0 [ 198.821437][T10364] ? __mutex_lock+0x9a5/0xd70 [ 198.826110][T10364] ? __mutex_lock+0x527/0xd70 [ 198.830793][T10364] ? __pfx_rtnl_newlink+0x10/0x10 [ 198.835817][T10364] rtnetlink_rcv_msg+0x89b/0x1180 [ 198.840861][T10364] ? rtnetlink_rcv_msg+0x208/0x1180 [ 198.846052][T10364] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 198.851517][T10364] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 198.857511][T10364] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 198.863862][T10364] ? __local_bh_enable_ip+0x168/0x200 [ 198.869248][T10364] ? lockdep_hardirqs_on+0x99/0x150 [ 198.874468][T10364] ? __local_bh_enable_ip+0x168/0x200 [ 198.879855][T10364] ? dev_hard_start_xmit+0x773/0x7e0 [ 198.885154][T10364] ? __dev_queue_xmit+0x2d2/0x3d30 [ 198.890284][T10364] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 198.896026][T10364] ? __dev_queue_xmit+0x2d2/0x3d30 [ 198.901157][T10364] ? __dev_queue_xmit+0x16c9/0x3d30 [ 198.906388][T10364] ? __dev_queue_xmit+0x2d2/0x3d30 [ 198.911528][T10364] ? ref_tracker_free+0x643/0x7e0 [ 198.916565][T10364] netlink_rcv_skb+0x1e3/0x430 [ 198.921335][T10364] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 198.926817][T10364] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 198.932114][T10364] ? netlink_deliver_tap+0x2e/0x1b0 [ 198.937307][T10364] netlink_unicast+0x7ea/0x980 [ 198.942071][T10364] ? __pfx_netlink_unicast+0x10/0x10 [ 198.947347][T10364] ? __virt_addr_valid+0x183/0x520 [ 198.952458][T10364] ? __check_object_size+0x49c/0x900 [ 198.957743][T10364] ? bpf_lsm_netlink_send+0x9/0x10 [ 198.962854][T10364] netlink_sendmsg+0x8db/0xcb0 [ 198.967622][T10364] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.972904][T10364] ? __import_iovec+0x536/0x820 [ 198.977752][T10364] ? aa_sock_msg_perm+0x91/0x160 [ 198.982685][T10364] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 198.987960][T10364] ? security_socket_sendmsg+0x87/0xb0 [ 198.993420][T10364] ? __pfx_netlink_sendmsg+0x10/0x10 [ 198.998701][T10364] __sock_sendmsg+0x221/0x270 [ 199.003376][T10364] ____sys_sendmsg+0x525/0x7d0 [ 199.008142][T10364] ? __pfx_____sys_sendmsg+0x10/0x10 [ 199.013433][T10364] __sys_sendmsg+0x2b0/0x3a0 [ 199.018017][T10364] ? __pfx___sys_sendmsg+0x10/0x10 [ 199.023115][T10364] ? vfs_write+0x7c4/0xc90 [ 199.027567][T10364] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 199.033895][T10364] ? do_syscall_64+0x100/0x230 [ 199.038663][T10364] ? do_syscall_64+0xb6/0x230 [ 199.043347][T10364] do_syscall_64+0xf3/0x230 [ 199.047843][T10364] ? clear_bhb_loop+0x35/0x90 [ 199.052517][T10364] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.058406][T10364] RIP: 0033:0x7fe360e7cf69 [ 199.062813][T10364] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 199.082441][T10364] RSP: 002b:00007fe3609ff0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 199.090850][T10364] RAX: ffffffffffffffda RBX: 00007fe360fb3f80 RCX: 00007fe360e7cf69 [ 199.098813][T10364] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000004 [ 199.106774][T10364] RBP: 00007fe3609ff120 R08: 0000000000000000 R09: 0000000000000000 [ 199.114746][T10364] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 199.122716][T10364] R13: 000000000000000b R14: 00007fe360fb3f80 R15: 00007ffca2829308 [ 199.130692][T10364] [ 199.409360][T10380] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 201.053288][T10399] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 201.083603][T10403] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 201.173837][T10410] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 201.662830][T10448] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 202.232160][T10474] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 202.292294][T10470] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 202.337315][T10470] bridge0: port 3(team0) entered blocking state [ 202.360572][T10470] bridge0: port 3(team0) entered disabled state [ 202.378592][T10470] team0: entered allmulticast mode [ 202.401524][T10470] team_slave_0: entered allmulticast mode [ 202.410176][T10470] team_slave_1: entered allmulticast mode [ 202.433606][T10470] team0: entered promiscuous mode [ 202.463370][T10470] team_slave_0: entered promiscuous mode [ 202.471818][T10470] team_slave_1: entered promiscuous mode [ 202.487860][T10470] bridge0: port 3(team0) entered blocking state [ 202.493761][T10486] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 202.494305][T10470] bridge0: port 3(team0) entered forwarding state [ 202.720145][T10501] netlink: 16178 bytes leftover after parsing attributes in process `syz-executor.4'. [ 202.785068][T10498] Bluetooth: hci3: invalid length 0, exp 2 for type 12 [ 202.956488][T10518] x_tables: ip6_tables: icmp6 match: only valid for protocol 58 [ 203.069365][T10523] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 203.135312][T10527] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 203.344678][T10544] IPVS: lblc: TCP 172.20.20.170:0 - no destination available [ 203.423545][T10547] netlink: zone id is out of range [ 203.431967][T10547] netlink: zone id is out of range [ 203.439456][T10547] netlink: zone id is out of range [ 203.441603][T10551] vlan2: entered promiscuous mode [ 203.444829][T10547] netlink: zone id is out of range [ 203.444876][T10547] netlink: zone id is out of range [ 203.447842][T10547] netlink: zone id is out of range [ 203.466431][T10547] netlink: zone id is out of range [ 203.472454][T10547] netlink: zone id is out of range [ 203.488212][T10547] netlink: zone id is out of range [ 203.502247][T10552] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 203.514761][T10552] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 203.538413][T10552] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 203.572293][T10552] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.582536][T10552] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.591780][T10552] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.602443][T10552] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 203.616204][T10552] vxlan0: entered promiscuous mode [ 203.646529][T10557] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 203.786196][T10561] netlink: 'syz-executor.3': attribute type 6 has an invalid length. [ 203.795417][T10561] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 204.028780][T10571] IPv6: sit2: Disabled Multicast RS [ 204.207102][T10576] xt_recent: hitcount (4294967295) is larger than allowed maximum (255) [ 204.279328][T10578] FAULT_INJECTION: forcing a failure. [ 204.279328][T10578] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 204.301236][T10578] CPU: 1 PID: 10578 Comm: syz-executor.0 Not tainted 6.10.0-rc2-syzkaller-00440-ga99997323654 #0 [ 204.311788][T10578] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 204.321874][T10578] Call Trace: [ 204.325172][T10578] [ 204.328158][T10578] dump_stack_lvl+0x241/0x360 [ 204.332867][T10578] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.338101][T10578] ? __pfx__printk+0x10/0x10 [ 204.342723][T10578] ? __pfx_lock_release+0x10/0x10 [ 204.347958][T10578] should_fail_ex+0x3b0/0x4e0 [ 204.352669][T10578] _copy_from_iter+0x1f6/0x1960 [ 204.357546][T10578] ? __virt_addr_valid+0x183/0x520 [ 204.362684][T10578] ? __pfx_lock_release+0x10/0x10 [ 204.367737][T10578] ? __alloc_skb+0x28f/0x440 [ 204.372354][T10578] ? __pfx__copy_from_iter+0x10/0x10 [ 204.377664][T10578] ? __virt_addr_valid+0x183/0x520 [ 204.382795][T10578] ? __virt_addr_valid+0x183/0x520 [ 204.387923][T10578] ? __virt_addr_valid+0x44e/0x520 [ 204.393055][T10578] ? __check_object_size+0x49c/0x900 [ 204.398369][T10578] netlink_sendmsg+0x743/0xcb0 [ 204.403165][T10578] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.408472][T10578] ? __import_iovec+0x536/0x820 [ 204.413334][T10578] ? aa_sock_msg_perm+0x91/0x160 [ 204.418293][T10578] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 204.423589][T10578] ? security_socket_sendmsg+0x87/0xb0 [ 204.429070][T10578] ? __pfx_netlink_sendmsg+0x10/0x10 [ 204.434365][T10578] __sock_sendmsg+0x221/0x270 [ 204.439063][T10578] ____sys_sendmsg+0x525/0x7d0 [ 204.443932][T10578] ? __pfx_____sys_sendmsg+0x10/0x10 [ 204.449254][T10578] __sys_sendmsg+0x2b0/0x3a0 [ 204.453865][T10578] ? __pfx___sys_sendmsg+0x10/0x10 [ 204.458993][T10578] ? vfs_write+0x7c4/0xc90 [ 204.463470][T10578] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 204.469817][T10578] ? do_syscall_64+0x100/0x230 [ 204.474598][T10578] ? do_syscall_64+0xb6/0x230 [ 204.479295][T10578] do_syscall_64+0xf3/0x230 [ 204.483814][T10578] ? clear_bhb_loop+0x35/0x90 [ 204.488508][T10578] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 204.494413][T10578] RIP: 0033:0x7f166527cf69 [ 204.498863][T10578] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 204.518513][T10578] RSP: 002b:00007f1665f940c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 204.526959][T10578] RAX: ffffffffffffffda RBX: 00007f16653b3f80 RCX: 00007f166527cf69 [ 204.534952][T10578] RDX: 0000000000000000 RSI: 0000000020000280 RDI: 0000000000000003 [ 204.542949][T10578] RBP: 00007f1665f94120 R08: 0000000000000000 R09: 0000000000000000 [ 204.550942][T10578] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 204.558932][T10578] R13: 000000000000000b R14: 00007f16653b3f80 R15: 00007ffc07f1ecc8 [ 204.566946][T10578] [ 204.901732][T10602] __nla_validate_parse: 3 callbacks suppressed [ 204.901753][T10602] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 205.096848][T10621] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 205.179032][T10626] netlink: 468 bytes leftover after parsing attributes in process `syz-executor.4'. [ 205.488332][T10645] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 205.548902][T10645] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 205.671330][T10650] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 205.683630][T10650] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 205.700066][T10650] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 205.709259][T10650] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 205.778342][T10655] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 205.863526][T10658] FAULT_INJECTION: forcing a failure. [ 205.863526][T10658] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 205.877977][T10658] CPU: 1 PID: 10658 Comm: syz-executor.1 Not tainted 6.10.0-rc2-syzkaller-00440-ga99997323654 #0 [ 205.888511][T10658] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 205.898579][T10658] Call Trace: [ 205.901871][T10658] [ 205.904816][T10658] dump_stack_lvl+0x241/0x360 [ 205.909523][T10658] ? __pfx_dump_stack_lvl+0x10/0x10 [ 205.914746][T10658] ? __pfx__printk+0x10/0x10 [ 205.919357][T10658] ? __pfx_lock_release+0x10/0x10 [ 205.924402][T10658] ? __lock_acquire+0x1346/0x1fd0 [ 205.929450][T10658] should_fail_ex+0x3b0/0x4e0 [ 205.934155][T10658] _copy_from_user+0x2f/0xe0 [ 205.938769][T10658] do_ipv6_setsockopt+0x2f1/0x3630 [ 205.943910][T10658] ? __pfx_do_ipv6_setsockopt+0x10/0x10 [ 205.949461][T10658] ? __pfx___might_resched+0x10/0x10 [ 205.954748][T10658] ? __lock_acquire+0x1346/0x1fd0 [ 205.959811][T10658] ? aa_sk_perm+0x967/0xab0 [ 205.964304][T10658] ? __pfx_aa_sk_perm+0x10/0x10 [ 205.969145][T10658] ? __pfx_lock_acquire+0x10/0x10 [ 205.974187][T10658] ipv6_setsockopt+0x5c/0x1a0 [ 205.978857][T10658] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 205.984752][T10658] do_sock_setsockopt+0x3af/0x720 [ 205.989794][T10658] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 205.995354][T10658] ? __fget_files+0x29/0x470 [ 205.999963][T10658] ? __fget_files+0x3f6/0x470 [ 206.004658][T10658] __sys_setsockopt+0x1ae/0x250 [ 206.009503][T10658] __x64_sys_setsockopt+0xb5/0xd0 [ 206.014549][T10658] do_syscall_64+0xf3/0x230 [ 206.019067][T10658] ? clear_bhb_loop+0x35/0x90 [ 206.023736][T10658] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 206.029724][T10658] RIP: 0033:0x7f4c1187cf69 [ 206.034133][T10658] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 206.053750][T10658] RSP: 002b:00007f4c125600c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 206.062168][T10658] RAX: ffffffffffffffda RBX: 00007f4c119b3f80 RCX: 00007f4c1187cf69 [ 206.070142][T10658] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000003 [ 206.078128][T10658] RBP: 00007f4c12560120 R08: 0000000000000590 R09: 0000000000000000 [ 206.086108][T10658] R10: 00000000200005c0 R11: 0000000000000246 R12: 0000000000000001 [ 206.094101][T10658] R13: 000000000000000b R14: 00007f4c119b3f80 R15: 00007ffcece6be78 [ 206.102101][T10658] [ 206.442832][T10690] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 206.584659][T10694] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 207.756235][ T4491] Bluetooth: hci2: command 0x0405 tx timeout [ 207.877249][T10759] team0: Device vlan2 failed to change mtu [ 208.442297][T10798] netdevsim netdevsim4 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.491184][T10798] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.596670][T10798] netdevsim netdevsim4 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.616044][T10798] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.713705][T10798] netdevsim netdevsim4 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.744637][T10798] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.904688][T10798] netdevsim netdevsim4 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 208.915760][T10798] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.199835][T10798] netdevsim netdevsim4 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.208365][T10798] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.241992][T10798] netdevsim netdevsim4 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.259190][T10798] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.326203][T10798] netdevsim netdevsim4 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.353845][T10798] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.398890][T10798] netdevsim netdevsim4 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 209.449997][T10798] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.670434][T10850] bond_slave_1: entered promiscuous mode [ 209.677800][T10850] batadv_slave_0: entered promiscuous mode [ 209.683797][T10850] bridge0: entered promiscuous mode [ 209.691762][T10850] vlan2: entered promiscuous mode [ 209.701728][T10850] bond0: entered promiscuous mode [ 209.739562][T10850] macvlan2: entered promiscuous mode [ 209.756040][T10850] team0: entered promiscuous mode [ 209.762239][T10850] vlan2: entered allmulticast mode [ 209.768078][T10850] bond0: entered allmulticast mode [ 209.773550][T10850] bond_slave_1: entered allmulticast mode [ 209.780018][T10850] geneve0: entered allmulticast mode [ 209.790173][T10850] batadv_slave_0: entered allmulticast mode [ 209.798315][T10850] bridge0: entered allmulticast mode [ 209.810638][T10850] bond0: left allmulticast mode [ 209.819039][T10850] bond_slave_1: left allmulticast mode [ 209.831228][T10850] geneve0: left allmulticast mode [ 209.842408][T10850] batadv_slave_0: left allmulticast mode [ 209.852164][T10850] bridge0: left allmulticast mode [ 209.862997][T10850] bond0: left promiscuous mode [ 209.870220][T10850] macvlan2: left promiscuous mode [ 209.876387][T10850] team0: left promiscuous mode [ 209.883251][T10850] bond_slave_1: left promiscuous mode [ 209.888849][T10850] batadv_slave_0: left promiscuous mode [ 209.894704][T10850] bridge0: left promiscuous mode [ 210.103674][T10868] __nla_validate_parse: 9 callbacks suppressed [ 210.103693][T10868] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 210.515030][T10879] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 210.523251][T10879] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.3'. [ 210.905652][T10901] bond_slave_1: entered promiscuous mode [ 210.911595][T10901] batadv_slave_0: entered promiscuous mode [ 210.917688][T10901] bridge0: entered promiscuous mode [ 210.930798][T10901] vlan2: entered promiscuous mode [ 210.938224][T10901] bond0: entered promiscuous mode [ 210.951753][T10901] macvlan2: entered promiscuous mode [ 210.971963][T10901] team0: entered promiscuous mode [ 210.990075][T10901] vlan2: entered allmulticast mode [ 210.998255][T10901] bond0: entered allmulticast mode [ 211.003637][T10901] bond_slave_1: entered allmulticast mode [ 211.010983][T10901] geneve0: entered allmulticast mode [ 211.017568][T10901] batadv_slave_0: entered allmulticast mode [ 211.023746][T10901] bridge0: entered allmulticast mode [ 211.035706][T10901] bond0: left allmulticast mode [ 211.040867][T10901] bond_slave_1: left allmulticast mode [ 211.047333][T10901] geneve0: left allmulticast mode [ 211.053521][T10901] batadv_slave_0: left allmulticast mode [ 211.060383][T10901] bridge0: left allmulticast mode [ 211.070730][T10901] bond0: left promiscuous mode [ 211.076902][T10901] macvlan2: left promiscuous mode [ 211.082352][T10901] team0: left promiscuous mode [ 211.095169][T10901] bond_slave_1: left promiscuous mode [ 211.100704][T10901] batadv_slave_0: left promiscuous mode [ 211.106513][T10901] bridge0: left promiscuous mode [ 211.151357][T10904] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 211.169268][T10906] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 211.180647][T10906] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 211.375704][T10916] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.2'. [ 211.425413][T10917] syzkaller1: entered promiscuous mode [ 211.431327][T10917] syzkaller1: entered allmulticast mode [ 211.479730][T10924] sctp: [Deprecated]: syz-executor.0 (pid 10924) Use of int in maxseg socket option. [ 211.479730][T10924] Use struct sctp_assoc_value instead [ 211.743562][T10929] syzkaller0: entered promiscuous mode [ 211.749975][T10929] syzkaller0: entered allmulticast mode [ 213.514873][T10943] net_ratelimit: 6 callbacks suppressed [ 213.514894][T10943] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 213.572447][T10944] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 213.731736][T10955] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 213.750371][T10955] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 213.807473][T10961] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 214.092410][T10974] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 214.228999][T10982] sctp: [Deprecated]: syz-executor.3 (pid 10982) Use of int in maxseg socket option. [ 214.228999][T10982] Use struct sctp_assoc_value instead [ 214.517079][T10987] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 214.535447][T10987] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 215.266292][T11028] __nla_validate_parse: 1 callbacks suppressed [ 215.266313][T11028] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 215.295503][T11028] batman_adv: batadv0: adding TT local entry 4a:c8:93:75:00:00 to non-existent VLAN 2358 [ 215.385475][T11032] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 215.461960][ T29] audit: type=1804 audit(1717840950.167:14): pid=11042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir1202530154/syzkaller.iVTmZM/384/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 215.495213][ T29] audit: type=1804 audit(1717840950.197:15): pid=11042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1202530154/syzkaller.iVTmZM/384/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 215.521688][ T29] audit: type=1804 audit(1717840950.227:16): pid=11042 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir1202530154/syzkaller.iVTmZM/384/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 215.738216][T11061] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 215.831625][T11065] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 215.897866][T11070] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 215.906332][T11070] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.2'. [ 217.716444][T11077] syzkaller1: entered promiscuous mode [ 217.722158][T11077] syzkaller1: entered allmulticast mode [ 217.863506][T11091] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 218.008705][T11102] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 218.043532][T11102] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 218.089132][T11108] netlink: 300 bytes leftover after parsing attributes in process `syz-executor.0'. [ 218.126813][T11109] bridge0: port 2(vlan2) entered blocking state [ 218.145695][T11109] bridge0: port 2(vlan2) entered disabled state [ 218.152189][T11109] vlan2: entered allmulticast mode [ 218.178026][T11109] vlan2: left allmulticast mode [ 218.202839][T11111] wg2: entered promiscuous mode [ 218.229633][T11111] wg2: entered allmulticast mode [ 218.483615][T11124] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 218.570243][T11124] team0: Port device team_slave_0 removed [ 218.595035][T11124] bridge_slave_1: left allmulticast mode [ 218.601052][T11124] bridge_slave_1: left promiscuous mode [ 218.607315][T11124] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.623842][T11124] ip6t_REJECT: ECHOREPLY is not supported [ 219.447549][T11156] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.499284][T11156] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.707870][T11158] bridge0: port 1(bridge_slave_0) entered blocking state [ 219.715096][T11158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 219.735619][T11158] bridge0: port 2(bridge_slave_1) entered blocking state [ 219.742851][T11158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.820293][T11169] bridge0: port 2(vlan3) entered blocking state [ 219.835590][T11169] bridge0: port 2(vlan3) entered disabled state [ 219.849585][T11169] vlan3: entered allmulticast mode [ 219.863084][T11169] vlan3: left allmulticast mode [ 219.899764][T11173] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 220.297911][T11199] ebt_among: dst integrity fail: 200 [ 220.307599][T11199] netlink: 'syz-executor.3': attribute type 33 has an invalid length. [ 220.329981][T11199] __nla_validate_parse: 2 callbacks suppressed [ 220.329999][T11199] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 220.331460][T11201] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 220.364628][T11197] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 220.402814][T11197] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 220.426470][T11203] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.3'. [ 220.447391][T11203] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 220.656802][T11220] pim6reg0: tun_chr_ioctl cmd 1074025681 [ 220.899380][ T29] audit: type=1107 audit(1717840955.597:17): pid=11236 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='4P8ïÛÚ‰ckT`|T_¦{²•€' [ 221.231116][T11245] syzkaller0: entered promiscuous mode [ 221.249463][T11245] syzkaller0: entered allmulticast mode [ 223.175832][T11259] geneve2: entered promiscuous mode [ 223.181054][T11259] geneve2: entered allmulticast mode [ 223.240647][T11271] bond0: entered promiscuous mode [ 223.249652][T11271] bond_slave_0: entered promiscuous mode [ 223.255992][T11271] bond_slave_1: entered promiscuous mode [ 223.262567][T11271] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 223.278597][T11271] bond0: left promiscuous mode [ 223.283403][T11271] bond_slave_0: left promiscuous mode [ 223.292588][T11271] bond_slave_1: left promiscuous mode [ 223.493747][T11289] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 223.669576][T11299] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 223.699730][T11301] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 223.717235][T11299] xt_CT: You must specify a L4 protocol and not use inversions on it [ 223.730780][T11301] tipc: Failed to remove unknown binding: 66,1,1/0:2061779206/2061779208 [ 223.762575][T11301] tipc: Failed to remove unknown binding: 66,1,1/0:2061779206/2061779208 [ 223.800833][T11296] tun0: tun_chr_ioctl cmd 1074025675 [ 223.818729][T11296] tun0: persist enabled [ 223.823305][T11296] tun0: tun_chr_ioctl cmd 1074025675 [ 223.836970][T11296] tun0: persist enabled [ 224.299106][T11342] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 224.323483][T11342] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 254.900294][ T4491] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 254.932161][ T4491] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 254.941577][ T4491] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 254.949931][ T4491] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 255.004591][ T4491] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 255.012038][ T4491] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 255.047252][ T5113] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 255.057329][ T5113] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 255.100524][ T5113] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 255.114116][ T5113] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 255.134695][ T5113] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 255.145299][ T5113] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 255.463509][ T5113] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 255.473068][ T5113] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 255.484192][ T5113] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 255.495587][ T5113] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 255.503291][ T5113] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 255.514179][ T5113] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 255.591710][ T5113] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 255.601916][ T5113] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 255.610866][ T5113] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 255.628165][ T5113] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 255.635908][ T5113] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 255.644738][ T5113] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 255.828183][ T5113] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 255.843635][ T5113] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 255.852414][ T5113] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 255.868090][ T5113] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 255.880301][ T5113] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 255.888410][ T5113] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 256.077851][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.084393][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 257.034703][ T5113] Bluetooth: hci5: command tx timeout [ 257.194146][ T5113] Bluetooth: hci6: command tx timeout [ 257.597019][ T5113] Bluetooth: hci7: command tx timeout [ 257.674620][ T5113] Bluetooth: hci8: command tx timeout [ 257.914065][ T5113] Bluetooth: hci9: command tx timeout [ 259.114705][ T5113] Bluetooth: hci5: command tx timeout [ 259.274807][ T5113] Bluetooth: hci6: command tx timeout [ 259.674254][ T5113] Bluetooth: hci7: command tx timeout [ 259.754797][ T5113] Bluetooth: hci8: command tx timeout [ 259.993972][ T5113] Bluetooth: hci9: command tx timeout [ 261.194316][ T5113] Bluetooth: hci5: command tx timeout [ 261.354248][ T5113] Bluetooth: hci6: command tx timeout [ 261.754109][ T5113] Bluetooth: hci7: command tx timeout [ 261.834245][ T5113] Bluetooth: hci8: command tx timeout [ 262.074041][ T5113] Bluetooth: hci9: command tx timeout [ 263.284440][ T5113] Bluetooth: hci5: command tx timeout [ 263.443975][ T5113] Bluetooth: hci6: command tx timeout [ 263.844808][ T5113] Bluetooth: hci7: command tx timeout [ 263.924380][ T5113] Bluetooth: hci8: command tx timeout [ 264.154026][ T5113] Bluetooth: hci9: command tx timeout [ 299.119309][ T5113] Bluetooth: hci3: command 0x0405 tx timeout [ 317.527602][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.537343][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.505163][ T5113] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 320.518152][ T5113] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 320.526754][ T5113] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 320.545544][ T5113] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 320.550428][ T5117] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 320.561234][ T5117] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 320.561404][ T5113] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 320.568913][ T5117] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 320.586058][ T5117] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 320.597048][ T5113] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 320.631346][ T4491] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 320.644910][ T4491] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 320.736277][ T4491] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 320.746297][ T4491] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 320.756213][ T4491] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 320.767275][ T4491] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 320.767535][ T5113] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 320.783663][ T4491] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 320.785410][ T5113] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 320.798653][ T4491] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 320.806235][ T5113] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 320.847136][ T5113] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 320.855609][ T5113] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 320.863001][ T5113] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 321.045501][ T5113] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 321.062231][ T5113] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 321.071987][ T5113] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 321.087795][ T5113] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 321.100807][ T5113] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 321.109081][ T5113] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 322.637557][ T5113] Bluetooth: hci10: command tx timeout [ 322.714004][ T5113] Bluetooth: hci11: command tx timeout [ 322.873945][ T5113] Bluetooth: hci12: command tx timeout [ 322.953931][ T5113] Bluetooth: hci13: command tx timeout [ 323.194033][ T5113] Bluetooth: hci14: command tx timeout [ 324.724404][ T5113] Bluetooth: hci10: command tx timeout [ 324.807883][ T5113] Bluetooth: hci11: command tx timeout [ 324.954497][ T5113] Bluetooth: hci12: command tx timeout [ 325.044508][ T5113] Bluetooth: hci13: command tx timeout [ 325.277733][ T5113] Bluetooth: hci14: command tx timeout [ 326.794609][ T5113] Bluetooth: hci10: command tx timeout [ 326.874584][ T5113] Bluetooth: hci11: command tx timeout [ 327.034534][ T5113] Bluetooth: hci12: command tx timeout [ 327.115385][ T5113] Bluetooth: hci13: command tx timeout [ 327.354853][ T5113] Bluetooth: hci14: command tx timeout [ 328.874520][ T5113] Bluetooth: hci10: command tx timeout [ 328.954517][ T5113] Bluetooth: hci11: command tx timeout [ 329.114469][ T5113] Bluetooth: hci12: command tx timeout [ 329.194129][ T5113] Bluetooth: hci13: command tx timeout [ 329.437186][ T5113] Bluetooth: hci14: command tx timeout [ 345.204261][ T5117] Bluetooth: hci2: command 0x0405 tx timeout [ 378.995974][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 379.002401][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 381.039979][T11402] Bluetooth: hci9: command 0x0406 tx timeout [ 381.051553][ T9804] Bluetooth: hci8: command 0x0406 tx timeout [ 381.068556][T11402] Bluetooth: hci6: command 0x0406 tx timeout [ 381.075310][ T9804] Bluetooth: hci7: command 0x0406 tx timeout [ 381.081424][ T9804] Bluetooth: hci5: command 0x0406 tx timeout [ 384.074464][ T30] INFO: task syz-executor.1:11350 blocked for more than 143 seconds. [ 384.082577][ T30] Not tainted 6.10.0-rc2-syzkaller-00440-ga99997323654 #0 2024/06/08 10:05:18 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 384.119710][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 384.143839][ T30] task:syz-executor.1 state:D stack:23800 pid:11350 tgid:11348 ppid:9843 flags:0x00000006 [ 384.169384][ T30] Call Trace: [ 384.172693][ T30] [ 384.183965][ T30] __schedule+0x17e8/0x4a20 [ 384.188540][ T30] ? __pfx___schedule+0x10/0x10 [ 384.193408][ T30] ? __pfx_lock_release+0x10/0x10 [ 384.223825][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 384.229358][ T30] ? schedule+0x90/0x320 [ 384.233618][ T30] schedule+0x14b/0x320 [ 384.258445][ T30] schedule_preempt_disabled+0x13/0x30 [ 384.273941][ T30] __mutex_lock+0x6a4/0xd70 [ 384.278500][ T30] ? __mutex_lock+0x527/0xd70 [ 384.283210][ T30] ? __tun_chr_ioctl+0x48f/0x2400 [ 384.308505][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 384.329365][ T30] ? __might_fault+0xc6/0x120 [ 384.343964][ T30] __tun_chr_ioctl+0x48f/0x2400 [ 384.348953][ T30] ? __pfx___tun_chr_ioctl+0x10/0x10 [ 384.363820][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 384.369845][ T30] ? bpf_lsm_file_ioctl+0x9/0x10 [ 384.389225][ T30] ? security_file_ioctl+0x87/0xb0 [ 384.403951][ T30] ? __pfx_tun_chr_ioctl+0x10/0x10 [ 384.409118][ T30] __se_sys_ioctl+0xfc/0x170 [ 384.413727][ T30] do_syscall_64+0xf3/0x230 [ 384.443832][ T30] ? clear_bhb_loop+0x35/0x90 [ 384.448575][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 384.473889][ T30] RIP: 0033:0x7f4c1187cf69 [ 384.478353][ T30] RSP: 002b:00007f4c125600c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 384.507627][ T30] RAX: ffffffffffffffda RBX: 00007f4c119b3f80 RCX: 00007f4c1187cf69 [ 384.531884][ T30] RDX: 0000000020000040 RSI: 00000000400454ca RDI: 0000000000000005 [ 384.564490][ T30] RBP: 00007f4c118da6fe R08: 0000000000000000 R09: 0000000000000000 [ 384.572512][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 384.594358][ T30] R13: 000000000000000b R14: 00007f4c119b3f80 R15: 00007ffcece6be78 [ 384.602403][ T30] [ 384.624454][ T30] INFO: task syz-executor.3:11356 blocked for more than 143 seconds. [ 384.632560][ T30] Not tainted 6.10.0-rc2-syzkaller-00440-ga99997323654 #0 [ 384.654533][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 384.663246][ T30] task:syz-executor.3 state:D stack:28176 pid:11356 tgid:11354 ppid:5120 flags:0x00004006 [