last executing test programs: 35.426887191s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000780), 0xb) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x88, 0x40, &(0x7f0000000480)={'filter\x00'}, &(0x7f00000003c0)=0x54) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000140)={'nat\x00'}, &(0x7f0000000000)=0x54) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x12, 0x0, 0x0, @multicast1}}}}}, 0x0) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd8168", 0x7}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000001e00851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 34.323164145s ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$inet6(0xa, 0x3, 0x2c) socket$kcm(0x2, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 34.080994413s ago: executing program 4: r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="1804000000000000000000000000000018010000696c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f00000003c0)='percpu_alloc_percpu\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x8, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002200000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000000100000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0x42, 0x4, 0x410, 0xffffffff, 0x0, 0x1e0, 0x1e0, 0xffffffff, 0xffffffff, 0x378, 0x378, 0x378, 0xffffffff, 0x5, 0x0, {[{{@ip={@multicast1, @local, 0x0, 0x0, 'xfrm0\x00', 'wg0\x00'}, 0x74000002, 0x70, 0xb8, 0x1ba, {0x46010000, 0x2c000000000000}}, @common=@unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0x287, 0x100, 0x128, 0x0, {}, [@common=@unspec=@connlimit={{0x40}, {[], 0x0, 0x1}}, @common=@osf={{0x50}, {'syz0\x00'}}]}, @REJECT={0x28}}, {{@uncond, 0x0, 0x70, 0x198}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x0, 0x0, 'system_u:object_r:usb_device_t:s0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x470) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000200)={'gre0\x00', &(0x7f0000000140)={'sit0\x00', 0x0, 0x8000, 0x7800, 0x200, 0x2, {{0x20, 0x4, 0x2, 0x3b, 0x80, 0x66, 0x0, 0x0, 0x4, 0x0, @multicast1, @dev={0xac, 0x14, 0x14, 0x30}, {[@end, @timestamp={0x44, 0x24, 0x53, 0x0, 0x2, [0x5, 0x2, 0x2, 0x200, 0x6, 0x5, 0x8, 0x8001]}, @timestamp_prespec={0x44, 0x44, 0xff, 0x3, 0x2, [{@multicast2, 0x81}, {@multicast1, 0x9}, {@remote, 0x1}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x9}, {@local, 0xe8f}, {@multicast1, 0xffffffff}, {@private=0xa010102, 0x2}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0xffffffff}]}]}}}}}) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x8, [@func_proto={0x0, 0x2, 0x0, 0xd, 0x0, [{0x7, 0x2}, {0x2, 0x3}]}, @restrict={0xd}, @fwd={0x5}]}, {0x0, [0x61, 0x0, 0x2e, 0x70, 0x30, 0x5f]}}, &(0x7f00000002c0)=""/59, 0x54, 0x3b}, 0x20) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) ioctl$EXT4_IOC_GROUP_ADD(r6, 0x40286608, &(0x7f0000000140)={0x800}) r7 = socket$kcm(0x29, 0x5, 0x0) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000cc0)={0x0, 0x0, 0x18}, 0xc) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000d80)={{r9, 0xffffffffffffffff}, &(0x7f0000000d00), &(0x7f0000000d40)=r6}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000c00)={0x18, 0x9, &(0x7f0000000a00)=@framed={{0x18, 0x0, 0x0, 0x0, 0xc59}, [@func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffa}, @jmp={0x5, 0x1, 0xa, 0xb, 0x9, 0xffffffffffffffe0, 0x10}, @map_val={0x18, 0x4, 0x2, 0x0, r9, 0x0, 0x0, 0x0, 0xfffffffb}, @initr0={0x18, 0x0, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x88}]}, &(0x7f0000000a80)='GPL\x00', 0xffffff81, 0x4d, &(0x7f0000000ac0)=""/77, 0x41100, 0x24, '\x00', 0x0, 0x0, r8, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000b40)={0x2, 0xd, 0x70e2, 0x3}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000b80)=[r10, r6], &(0x7f0000000bc0)=[{0x0, 0x5, 0x8, 0x3}, {0x4, 0x2, 0xf, 0xc}]}, 0x90) splice(r7, 0x0, r8, 0x0, 0xf3e, 0x0) r11 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000003c0)=@o_path={&(0x7f0000000380)='./file0\x00', 0x0, 0x8, r0}, 0x18) r12 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000400)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x0, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000940)={0x0, 0x13, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000080000000000001f02000018460000020000000000000000000000b70800000000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb7020000080000fff7230000000000000000", @ANYRES32=r3, @ANYBLOB="0000000000000000b70500000800000085000000a500000085200000010000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x10, '\x00', r4, 0x0, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000340)={0x4, 0xa, 0x7f, 0x3}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r6, 0xffffffffffffffff, r8, r11, r12], 0x0, 0x10, 0x3}, 0x90) 33.206941684s ago: executing program 2: r0 = socket$inet_udplite(0x2, 0x2, 0x88) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000010000000000000000000850000002a000000850000002a00000095"], &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x78) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f0000000080)='ext4_allocate_inode\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x2f0, 0xa8, 0x11, 0x148, 0x0, 0x10, 0x258, 0x2a8, 0x2a8, 0x258, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x70, 0xa8}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @broadcast, 0x0, 0x0, 'vlan0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x150, 0x1b0, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@conntrack1={{0xb8}, {{@ipv4=@multicast1, [], @ipv4, [], @ipv6=@dev, [], @ipv6=@dev}}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x350) 33.060317934s ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000400)=[{0x20, 0x0, 0x0, 0x8001}, {0x20, 0x0, 0x0, 0xfffff024}, {0x6}]}, 0x10) sendmmsg$inet(r2, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000740)="ceb9adac", 0xb9ce}], 0x1}}], 0x1, 0x0) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000000)=0x2004091) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @empty}, 0x1c) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000014c0)=@newsa={0xf0, 0x10, 0x109, 0x0, 0x0, {{@in6=@private0, @in6=@loopback}, {@in, 0x0, 0x32}, @in=@remote, {}, {}, {}, 0x0, 0x0, 0xa}}, 0xf0}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000140)={'syztnl2\x00', &(0x7f00000000c0)={'syztnl0\x00', 0x0, 0x29, 0x1, 0x80, 0x2000000, 0x1, @private1={0xfc, 0x1, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x43}, 0x1, 0x20, 0x6, 0x9}}) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vxcan0\x00'}) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000240)=0x8000, 0x4) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r7, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={0x14, 0x14, 0x1, 0x0, 0x0, {0x1}}, 0x14}}, 0x0) recvmmsg(r7, &(0x7f0000000480)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) r9 = socket$inet6_udplite(0xa, 0x2, 0x88) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELRULE={0x34, 0x8, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_RULE_ID={0x8}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xa8}}, 0x0) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001240)=ANY=[@ANYBLOB="640000000206010200000e000000000000000000120003006269746d61703a69702c6d616300000005000400000000000000000073797a31000000001800078005000300000000000c00018008000140ac03140005000500020000000500010006000000b8a2ef16b4cf48f38c761cfb6edc8a965b457a90de5ef0e363e37efaff8e23f980ea61320f7309a09258a51957d6db3a0621e109e01c86307cfaa8ba"], 0x64}}, 0x0) r12 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'gretap0\x00'}) setsockopt$packet_int(r12, 0x107, 0xf, &(0x7f0000000180)=0x4, 0x4) 32.771730358s ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000008007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='tlb_flush\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c}, 0x38) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x11, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8db4c6d3916872c4d26e8e39f30e9ce9ab2f204389cf53c6", 0x18) r5 = accept$alg(r4, 0x0, 0x0) sendfile(r5, r3, 0x0, 0x10000a006) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 32.686654675s ago: executing program 1: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b81000085"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r0}, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000300)={'bond0\x00'}) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) recvmmsg(r1, &(0x7f0000000a40)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000180)=""/5, 0x5}}], 0x1, 0x0, 0x0) 32.31969916s ago: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_pid(r0, &(0x7f0000000400), 0xffc00) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b70300000f0a9c80850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000f00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='block_bio_remap\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x29) 32.07523065s ago: executing program 3: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f00000002c0)='veth1_to_bridge\x00', 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000240)={0x0, 0x20, &(0x7f0000000180)=[@in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000280)=0x10) r2 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000340)=@base={0x12, 0x2, 0x8, 0x2}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r2, r0, 0x7}, 0x10) close(r0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000029c0)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f00000006c0), &(0x7f0000000700)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001540)={{r2}, &(0x7f00000014c0), &(0x7f0000001500)=r0}, 0x20) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000027c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x381, 0x0, 0x0, {}, [@NFTA_FLOWTABLE_HOOK={0x4}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}], {0x14}}, 0x78}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x30, r6, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0x14, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_CONNECTED_TO_AS={0x5}, @NL80211_MESHCONF_HT_OPMODE={0x6}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_SET_MCAST_RATE(r4, &(0x7f00000002c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000240)={0x28, r6, 0x10, 0x70bd26, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x9, 0x34}}}}, [@NL80211_ATTR_MCAST_RATE={0x8, 0x6b, 0x78}]}, 0x28}, 0x1, 0x0, 0x0, 0x24008000}, 0x4044041) r8 = socket$inet6_sctp(0xa, 0x801, 0x84) ioctl$sock_TIOCOUTQ(r3, 0x5411, &(0x7f0000000100)) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) connect$inet6(r8, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r8, 0x1) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r8, 0x84, 0x85, &(0x7f0000000180)={0x0, @in6={{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x0, 0x8}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x3, 0x2000000000000099, &(0x7f0000000400), &(0x7f0000000000)='syzkaller\x00'}, 0x90) 32.063284941s ago: executing program 0: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$inet6(0xa, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) write$tun(r0, &(0x7f0000000140)={@val={0x1400, 0x800}, @val, @ipv4=@icmp={{0x5, 0x4, 0x0, 0x0, 0x8016, 0x0, 0x0, 0x0, 0x1, 0x0, @private, @local}, @dest_unreach={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @local, @loopback}}}}, 0xfdef) 31.929089632s ago: executing program 3: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$inet6(0xa, 0x3, 0x2c) socket$kcm(0x2, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 31.805928067s ago: executing program 3: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00), 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000200)=ANY=[@ANYRES32=r4], 0xf) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) r6 = socket$inet(0x2, 0x3, 0x6) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000180)=0x207f, 0x4) shutdown(r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000440)='syzkaller\x00'}, 0x90) recvmmsg(r6, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000040)={0x1, 'vlan0\x00'}) 31.766300369s ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r0}, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffd46, &(0x7f0000000080)={&(0x7f0000000400)={0x20, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0xc, 0x3, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f0000000100)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, 0xd, 0x6, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8}]}, 0x1c}}, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg$unix(r5, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb8db018000000000000002800b3a2458c"], &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x0, 0x3, 0x0, 0x0}, 0x90) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000008"], 0x24d8}], 0x1}, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', r1}, 0x18) 31.616828937s ago: executing program 3: bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8923, &(0x7f0000000180)={'dummy0\x00'}) 31.60286706s ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018010000646c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b701000000000000850000006d00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000500)='jbd2_handle_stats\x00', r2}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r4, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSPASS(r4, 0x40107447, &(0x7f0000000180)={0x2, &(0x7f0000000000)=[{0x50, 0x0, 0x0, 0xc}, {0x6}]}) ioctl$PPPIOCSDEBUG(r4, 0x40047440, &(0x7f0000000080)=0x9) write$ppp(r4, &(0x7f0000000300)="5af9", 0x2) accept4(r1, 0x0, 0x0, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) r5 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000780), 0xb) socket$packet(0x11, 0x2, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r6, 0x0) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000540), 0x4) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000001e00851000000600000018000000", @ANYRES32=r5, @ANYBLOB="0000000000000000660a000000000000180000000000000000000000000000109500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xde, &(0x7f0000000340)=""/222}, 0x90) r8 = socket$inet_tcp(0x2, 0x1, 0x0) shutdown(r8, 0x3) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r6, 0xffffffffffffffff}, &(0x7f0000000200), &(0x7f00000002c0)=r7}, 0x20) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000940)={r6, 0x20, &(0x7f00000007c0)={&(0x7f0000002280)=""/4096, 0x1000, 0x0, &(0x7f0000000680)=""/244, 0xf4}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000a40)={0x20, 0xb, &(0x7f0000000b00)=ANY=[@ANYBLOB="1800000001000000000000008100000058a018000400000018110000", @ANYRES32=r9, @ANYBLOB="7a609002000000000000000000000007b7080000000004000086000000851000000000210018200000000073dcb3b9903be3fbb871ab05b624b1458caf250259adb7a5eb9ffe3ea4", @ANYRES32=r5, @ANYBLOB="00000000080000009500000000000000"], &(0x7f00000005c0)='GPL\x00', 0x5, 0x1000, &(0x7f0000001280)=""/4096, 0x41000, 0xae43a633bbb03d2d, '\x00', 0x0, 0xf10ffff5ed2f5e5d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x5, 0x9, 0x4, 0x1ff}, 0x10, r10, r3, 0x8, &(0x7f0000000980)=[r0, r0, r5, r5], &(0x7f00000009c0)=[{0x0, 0x1, 0xd, 0x3}, {0x4, 0x5, 0x9, 0x4}, {0x4, 0x3, 0xb, 0xb}, {0x3, 0x5, 0x1, 0x8}, {0x4, 0x5, 0xb, 0x4}, {0x3, 0x3, 0x1, 0x5}, {0x1, 0x2, 0x3, 0x9}, {0x5, 0x5, 0x10, 0x3}], 0x10, 0x20}, 0x90) close(r0) 31.56843338s ago: executing program 2: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r0, 0x84, 0x7, &(0x7f0000000000), 0xe) 31.515985293s ago: executing program 0: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000140)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000002c0)={0x0, 0xc000000, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r2, @ANYBLOB="04006c0038003300a0000000ffffffffffff0802110000013abc2a963985000000008c180000046c391d5c38ba7c821e46db2f01336e2468f24baa36080057008e0200eb"], 0x60}}, 0x0) 31.486512445s ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.current\x00', 0x275a, 0x0) write$binfmt_script(r0, &(0x7f0000000780), 0xb) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x88, 0x40, &(0x7f0000000480)={'filter\x00'}, &(0x7f00000003c0)=0x54) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000140)={'nat\x00'}, &(0x7f0000000000)=0x54) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r0, 0x0) socketpair$unix(0x1, 0x0, 0x0, 0x0) r2 = socket$nl_generic(0x11, 0x3, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@link_local, @dev, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @multicast1}, {0x12, 0x0, 0x0, @multicast1}}}}}, 0x0) sendmsg(r2, &(0x7f0000000640)={&(0x7f00000000c0)=@caif=@dgm={0x25, 0xd}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd8168", 0x7}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000001e00851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222}, 0x78) 31.447608986s ago: executing program 2: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00), 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, &(0x7f0000000200)=ANY=[@ANYRES32=r4], 0xf) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) r6 = socket$inet(0x2, 0x3, 0x6) setsockopt$sock_int(r6, 0x1, 0x2e, &(0x7f0000000180)=0x207f, 0x4) shutdown(r6, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000440)='syzkaller\x00'}, 0x90) recvmmsg(r6, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000040)={0x1, 'vlan0\x00'}) 31.397199214s ago: executing program 0: r0 = bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{0x1}, 0x0, &(0x7f0000000440)='%-5lx \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001880)={{}, &(0x7f0000001800), 0x0}, 0x20) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x32600) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000040)=@o_path={&(0x7f0000000000)='./file0\x00', 0x0, 0x18, r0}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000940)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) accept$packet(0xffffffffffffffff, 0x0, &(0x7f0000000080)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x2, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) 31.315370075s ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) socket$alg(0x26, 0x5, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000008007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='tlb_flush\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c}, 0x38) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x11, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8db4c6d3916872c4d26e8e39f30e9ce9ab2f204389cf53c6", 0x18) r5 = accept$alg(r4, 0x0, 0x0) sendfile(r5, r3, 0x0, 0x10000a006) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 31.00453787s ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$inet6(0xa, 0x3, 0x2c) socket$kcm(0x2, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, 0x0, &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x3b, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 30.727216201s ago: executing program 4: sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000001c0)=ANY=[], 0x54}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB='t\x00\x00\x00VQ/>\x00\x00\x00\x00\x00\x00\x00\x00\a\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="000000000000000008000c00040007004c001a804800048014000700ff01040000000000000000000000000114000700fc01000000000000000000000000000014000700fe80000000000000060000000000000005000f"], 0x74}}, 0x0) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_TYPE(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x54, 0xd, 0x6, 0x101, 0x0, 0x0, {0x7, 0x0, 0x4}, [@IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'list:set\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}]}, 0x54}, 0x1, 0x0, 0x0, 0x10}, 0x40000c0) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x630}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) sendmsg$nl_route_sched_retired(r2, &(0x7f000001be80)={0x0, 0x0, &(0x7f000001be40)={&(0x7f000000af00)=@newtfilter={0x630, 0x2c, 0x0, 0x0, 0x25dfdbfd, {}, [@f_rsvp={{0x9}, {0x14, 0x2, [@TCA_RSVP_CLASSID={0x8}, @TCA_RSVP_DST={0x8, 0x2, @multicast1}]}}, @f_rsvp={{0x9}, {0x5e0, 0x2, [@TCA_RSVP_ACT={0x5dc, 0x6, [@m_nat={0x5d8, 0x0, 0x0, 0x0, {{0x8}, {0x4}, {0x5ad, 0x6, "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"}, {0xc}, {0xc}}}]}]}}]}, 0x630}}, 0x1547e029393dfc47) recvmsg(r2, &(0x7f000000a8c0)={0x0, 0x0, &(0x7f000000a780)=[{&(0x7f0000009700)=""/4096, 0x1000}], 0x1}, 0x40002003) accept4(r0, &(0x7f0000000200)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @empty}}}, &(0x7f00000002c0)=0x80, 0x800) socket$inet6(0xa, 0x2, 0x0) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x800) setsockopt$SO_TIMESTAMPING(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r3, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x7}, 0x48) r4 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_INIT(r4, 0x29, 0xc8, &(0x7f0000000340), 0x4) setsockopt$MRT6_ADD_MIF(r4, 0x29, 0xca, &(0x7f0000000000)={0x4, 0x1}, 0xc) 30.343996912s ago: executing program 1: socket$kcm(0x10, 0x2, 0x4) ioctl$BTRFS_IOC_BALANCE_V2(0xffffffffffffffff, 0xc4009420, 0x0) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000280), 0xfea7) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x3000004, 0x42073, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @dev, 0xffffffff}, 0x1c) write$binfmt_script(r0, &(0x7f0000000380), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x402e053, r0, 0x0) preadv(r0, &(0x7f00000015c0)=[{&(0x7f0000000080)=""/124, 0x7ffff000}], 0x5, 0x0, 0x0) 30.018256824s ago: executing program 1: r0 = socket$inet_udp(0x2, 0x2, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000280)={'vlan0\x00', 0x0}) sendmmsg$inet_sctp(0xffffffffffffffff, &(0x7f0000001f00), 0x0, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_AUTH_KEY(0xffffffffffffffff, 0x84, 0x17, 0x0, 0xf) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) r5 = socket$inet(0x2, 0x3, 0x6) setsockopt$sock_int(r5, 0x1, 0x2e, &(0x7f0000000180)=0x207f, 0x4) shutdown(r5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000440)='syzkaller\x00'}, 0x90) recvmmsg(r5, &(0x7f00000066c0), 0xa0d, 0x0, 0x0) bind$packet(r1, &(0x7f0000000040)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @dev}, 0x14) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000040)={0x1, 'vlan0\x00'}) 1.434540563s ago: executing program 3: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000400)={&(0x7f0000000280), 0xc, &(0x7f0000000380)={&(0x7f0000000840)={0x1190, 0x3c, 0x100, 0x70bd27, 0x7f, {0x13}, [@nested={0x1171, 0x1b, 0x0, 0x1, [@typed={0x60, 0x6f, 0x0, 0x0, @binary="818da7a9e949406c9e69b40913bd4b830b71bdad355b8df3743323e40f588def6b843efcccf4aba73ba0048af01880e51d93b5cf04faab1109dff79a28f9b2e810debc99ac552d582c94addad937a357e997dbebe2c5aae032bad8de"}, @typed={0x8, 0x80, 0x0, 0x0, @fd}, @generic="66300480c65326de1fdc43039114a77b546534c804b46f8fbc61f33d35f303b97911f15d0f85543e57fded899abed77896dbff780e578abb60f247ca464da3e2704c10fb487d11d6de81cac00883947ed804cf7726", @generic="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", @typed={0x7f, 0x149, 0x0, 0x0, @binary="18002cbfd1ddaeab6b5b301f8a81f55dc7c528d930d4bb8021a4cc2f93ad7573317f26acc3154017c84ff74148488bfa0f1ee6a9a0d2e6bd849ae01a16deb560e79dd397b3fc6d9291b538a547d3bd1613a34351321b9cafe6ffbd797d2d5c2560cdd2f5052de504d20ee27f67c97ac64e58f126c8050f4fdfc2ea"}, @typed={0x4, 0x131}, @generic="e3990fbadcbe994f933273d3d91ec68bac7a4c13f234a371971d28df717e0c9fa39f518d4cd97590906c5b41"]}, @typed={0x7, 0xb8, 0x0, 0x0, @str='^:\x00'}]}, 0x1190}, 0x1, 0x0, 0x0, 0x20040000}, 0x240008c4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000008007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000000f00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000240)='tlb_flush\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0}, 0x10) bpf$MAP_LOOKUP_BATCH(0x19, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000680), &(0x7f0000000540), 0x6c}, 0x38) write$binfmt_script(r0, &(0x7f0000000040), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000b, 0x11, r0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0xb00000000065808, 0x0) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000000)="8db4c6d3916872c4d26e8e39f30e9ce9ab2f204389cf53c6", 0x18) r5 = accept$alg(r4, 0x0, 0x0) sendfile(r5, r3, 0x0, 0x10000a006) ioctl$EXT4_IOC_SWAP_BOOT(r0, 0x6611) 1.427372925s ago: executing program 2: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000850000000700000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000000)='ext4_es_lookup_extent_enter\x00', r0}, 0x10) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0xfffffffffffffd46, &(0x7f0000000080)={&(0x7f0000000400)={0x20, 0x52, 0x1, 0x0, 0x0, {0x1c}, [@typed={0xc, 0x3, 0x0, 0x0, @u64}]}, 0x20}}, 0x0) ioctl$sock_qrtr_TIOCINQ(r2, 0x541b, &(0x7f0000000100)) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r3, &(0x7f0000001240)={0x0, 0x0, &(0x7f0000001200)={&(0x7f00000011c0)={0x1c, 0xd, 0x6, 0x201, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8}]}, 0x1c}}, 0x0) r4 = socket$xdp(0x2c, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000ab9ff0)={0x3, &(0x7f0000000000)=[{0x20, 0x0, 0x0, 0xfffff010}, {0x20, 0x0, 0x0, 0xfffff00c}, {0x6}]}, 0x10) sendmmsg$unix(r5, &(0x7f0000002d00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x11, r4, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000640)=ANY=[@ANYBLOB="9feb8db018000000000000002800b3a2458c"], &(0x7f0000001f80)=""/226, 0x26, 0xe2, 0x2}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x0, 0x3, 0x0, 0x0}, 0x90) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_smc(0x2b, 0x1, 0x0) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000100)={0x0, 0x3, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a31000000001400078005001500070000000800124000000000050005000200000005000400000000000d000300686173683a6e6574"], 0x5c}}, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="d824000028000100020000080000000008"], 0x24d8}], 0x1}, 0x0) bpf$OBJ_PIN_PROG(0x6, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', r1}, 0x18) 1.37511536s ago: executing program 0: setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001a00014716c01f000000fff080000000000000000030"], 0x1c}}, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETCHAIN(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="20000000040a01040000000000000000000900010073797a3100000000"], 0x20}}, 0x0) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000000)=[{0x2d, 0x0, 0x3}, {}, {}, {}, {0x6}]}) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x1a, &(0x7f0000000000)={0x3, &(0x7f0000000040)=[{0x20, 0x0, 0x0, 0xfffff00c}, {0x30, 0x0, 0x0, 0xfffbf038}, {0x6}]}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r7) splice(r3, 0x0, r6, 0x0, 0xf3a, 0x0) write$binfmt_misc(r6, &(0x7f00000001c0)=ANY=[], 0xfdef) write(r1, &(0x7f0000001100)="94", 0x1) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) pipe(&(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3563], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000003000000010000000000000e0300000000000000000000000000000105002d1a40b100000000000000000003000000000100000002000000000000000061"], 0x0, 0x53}, 0x20) tee(r0, r6, 0x81, 0x0) write$binfmt_misc(r2, &(0x7f0000000140)=ANY=[], 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYRES32], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='ext4_writepages_result\x00', r11}, 0x10) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r12, &(0x7f0000000180), 0x2000) 682.963847ms ago: executing program 4: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000800)=ANY=[@ANYBLOB="00020201"], 0x18) sendmmsg$inet6(r0, &(0x7f00000007c0)=[{{&(0x7f00000002c0)={0xa, 0x0, 0xc0fe, @dev, 0x9}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000300)='Y', 0x1}], 0x1}}], 0x1, 0x40) 0s ago: executing program 1: r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) setsockopt$inet6_tcp_TCP_MD5SIG(0xffffffffffffffff, 0x6, 0xe, &(0x7f00000001c0)={@in, 0x0, 0x0, 0x0, 0x0, "aeb867eea9e5bdf2247481041a5b9cddbc936efc471c56ae3d5f69c1347298858582891a3b4e7bff572ef69992da867f406182d70f36773434b8349435f2ad628d62a3b45bb98800"}, 0xd8) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000240)=ANY=[@ANYBLOB="034886dd05410a000000000000006000000001002100fe880001000000000000060000007d01ff0200000000000000000000000000010000eca140"], 0xfdef) kernel console output (not intermixed with test programs): 7.995878][T30979] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 818.041357][T30979] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.4'. [ 818.064797][T30986] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 818.085233][T30979] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 818.156903][T31002] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 818.223882][T31004] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 819.046001][T31044] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 819.160113][T31050] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 819.174136][T31053] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.2'. [ 819.493038][T31073] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 820.921723][T31074] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 820.930993][T31074] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 820.962160][T31080] pimreg: entered allmulticast mode [ 821.072142][T31088] bond_slave_0: entered promiscuous mode [ 821.077907][T31088] bond_slave_1: entered promiscuous mode [ 821.104452][T31088] macvtap1: entered promiscuous mode [ 821.115374][T31088] bond0: entered promiscuous mode [ 821.120905][T31088] macvtap1: entered allmulticast mode [ 821.148288][T31088] bond0: entered allmulticast mode [ 821.153634][T31088] bond_slave_0: entered allmulticast mode [ 821.170347][T31088] bond_slave_1: entered allmulticast mode [ 821.187978][T31088] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 821.209343][T31094] bond0: left allmulticast mode [ 821.233039][T31094] bond_slave_0: left allmulticast mode [ 821.249614][T31094] bond_slave_1: left allmulticast mode [ 821.255818][T31094] bond0: left promiscuous mode [ 821.261399][T31094] bond_slave_0: left promiscuous mode [ 821.268124][T31094] bond_slave_1: left promiscuous mode [ 821.286847][T31094] macvtap1: left promiscuous mode [ 821.292430][T31094] macvtap1: left allmulticast mode [ 823.557259][T31161] __nla_validate_parse: 8 callbacks suppressed [ 823.557278][T31161] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 823.581954][T31161] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 823.673515][T31163] batadv0: entered allmulticast mode [ 823.847374][T31183] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 823.937575][T31190] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 824.039324][T31195] batadv_slave_1: entered promiscuous mode [ 824.074246][T31197] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 824.086305][T31197] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 824.097630][T31198] netlink: 'syz-executor.3': attribute type 33 has an invalid length. [ 824.156105][T31198] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 824.177116][T31198] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 824.696610][T31180] batadv_slave_1: left promiscuous mode [ 824.702842][T31228] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 824.803890][ T29] audit: type=1804 audit(1718502486.667:47): pid=31231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1319647934/syzkaller.8tkPcX/16/cgroup.controllers" dev="sda1" ino=1945 res=1 errno=0 [ 824.847844][T31233] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 826.575661][T31251] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 826.583785][T31251] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.2'. [ 826.799759][T31286] IPVS: set_ctl: invalid protocol: 33 100.1.1.2:20004 [ 827.047216][T31306] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 829.441504][T31367] __nla_validate_parse: 6 callbacks suppressed [ 829.441524][T31367] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 829.470227][T31371] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 829.835405][T31407] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 829.886106][T31412] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 829.915720][T31412] openvswitch: netlink: Tunnel attr 0 has unexpected len 13 expected 8 [ 829.941725][T31414] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 831.705168][T19713] Bluetooth: hci1: command tx timeout [ 831.710889][ T5130] Bluetooth: hci4: command 0x0c1a tx timeout [ 832.450327][T31446] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 832.464345][T31446] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 832.478130][T31446] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 832.488881][T31474] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 832.558811][T31522] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 832.918067][T31545] syzkaller1: entered promiscuous mode [ 832.923584][T31545] syzkaller1: entered allmulticast mode [ 832.993310][T31551] tipc: Started in network mode [ 833.000495][T31551] tipc: Node identity , cluster identity 4711 [ 833.006944][T31551] tipc: Failed to set node id, please configure manually [ 833.014294][T31551] tipc: Enabling of bearer rejected, failed to enable media [ 834.665108][ T5130] Bluetooth: hci4: command 0x0c1a tx timeout [ 835.331596][T31612] __nla_validate_parse: 3 callbacks suppressed [ 835.331617][T31612] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 835.901441][T31654] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 835.998712][T31651] syzkaller1: entered promiscuous mode [ 836.046748][T31651] syzkaller1: entered allmulticast mode [ 836.245754][T31665] syzkaller1: entered promiscuous mode [ 836.251379][T31665] syzkaller1: entered allmulticast mode [ 836.259917][T31667] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (18446744073709551613) [ 837.945099][T31673] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 838.418613][T31719] tipc: Started in network mode [ 838.423590][T31719] tipc: Node identity 1a7b29eca457, cluster identity 4711 [ 838.431192][T31719] tipc: Enabled bearer , priority 0 [ 838.440796][T31725] syzkaller1: entered promiscuous mode [ 838.449265][T31725] syzkaller1: entered allmulticast mode [ 838.463449][T31718] tipc: Disabling bearer [ 839.176036][T31763] ip6gretap0: entered promiscuous mode [ 839.204897][T31763] ip6gretap0: left promiscuous mode [ 840.966398][T31765] syzkaller1: entered promiscuous mode [ 840.972055][T31765] syzkaller1: entered allmulticast mode [ 841.364764][T31805] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 841.395324][T31805] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 841.634694][ T29] audit: type=1800 audit(1718502503.497:48): pid=31816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1957 res=0 errno=0 [ 841.676529][ T29] audit: type=1804 audit(1718502503.537:49): pid=31816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1778012081/syzkaller.D1AIN8/1036/memory.events" dev="sda1" ino=1957 res=1 errno=0 [ 841.748723][ T29] audit: type=1804 audit(1718502503.607:50): pid=31816 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1778012081/syzkaller.D1AIN8/1036/memory.events" dev="sda1" ino=1957 res=1 errno=0 [ 841.999940][T19713] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 842.014452][ T2888] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 842.028914][ T2888] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.041157][T19713] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 842.093292][T19713] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 842.103397][T19713] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 842.112708][T31825] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 842.168808][T19713] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 842.201779][T19713] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 842.260167][T31825] bond2: entered promiscuous mode [ 842.340718][T31829] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 842.363360][ T2888] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 842.383304][ T2888] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 842.431993][T31825] 8021q: adding VLAN 0 to HW filter on device bond3 [ 842.442647][T31825] bond3: entered promiscuous mode [ 842.449032][T31825] bond2: (slave bond3): Enslaving as an active interface with an up link [ 842.469008][T31829] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 842.501704][T31829] bond2 (unregistering): (slave bond3): Releasing backup interface [ 842.513348][T31829] bond3: left promiscuous mode [ 842.541490][T31829] bond2 (unregistering): Released all slaves [ 842.659696][ T2888] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 842.688213][ T2888] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 843.033594][T31859] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 843.043835][T31859] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 843.311017][ T29] audit: type=1804 audit(1718502505.177:51): pid=31865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1778012081/syzkaller.D1AIN8/1041/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 843.339786][ T29] audit: type=1804 audit(1718502505.187:52): pid=31865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1778012081/syzkaller.D1AIN8/1041/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 843.384827][ T29] audit: type=1804 audit(1718502505.247:53): pid=31866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1778012081/syzkaller.D1AIN8/1041/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 843.482743][ T29] audit: type=1804 audit(1718502505.347:54): pid=31866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1778012081/syzkaller.D1AIN8/1041/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 843.509972][ T29] audit: type=1804 audit(1718502505.347:55): pid=31866 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1778012081/syzkaller.D1AIN8/1041/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 844.259468][ T5130] Bluetooth: hci4: command tx timeout [ 844.558970][ T2888] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 844.571058][ T2888] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 844.754793][T31875] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 844.942486][ T2888] bridge_slave_1: left allmulticast mode [ 844.969084][ T2888] bridge_slave_1: left promiscuous mode [ 844.989993][ T2888] bridge0: port 2(bridge_slave_1) entered disabled state [ 845.012280][ T2888] bridge_slave_0: left promiscuous mode [ 845.027062][ T2888] bridge0: port 1(bridge_slave_0) entered disabled state [ 845.051008][T31887] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 845.307778][T31885] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.0'. [ 845.430880][T31897] syz-executor.4[31897] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 845.431729][T31897] syz-executor.4[31897] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 845.708515][ T2888] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 845.731810][ T2888] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 845.742705][ T2888] bond0 (unregistering): Released all slaves [ 845.756394][ T2888] bond1 (unregistering): Released all slaves [ 845.906808][ T2888] IPVS: stopping backup sync thread 30459 ... [ 845.919144][T31822] chnl_net:caif_netlink_parms(): no params data found [ 845.991957][T31911] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 846.035142][T31911] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 846.335126][ T5130] Bluetooth: hci4: command tx timeout [ 846.860201][T31934] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 846.963622][T31938] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.0'. [ 848.293552][T31940] batadv_slave_0: entered allmulticast mode [ 848.316190][T31940] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 848.399801][T31822] bridge0: port 1(bridge_slave_0) entered blocking state [ 848.416004][ T5130] Bluetooth: hci4: command tx timeout [ 848.421776][T31822] bridge0: port 1(bridge_slave_0) entered disabled state [ 848.455278][T31822] bridge_slave_0: entered allmulticast mode [ 848.480496][T31822] bridge_slave_0: entered promiscuous mode [ 848.524797][ T2888] hsr_slave_0: left promiscuous mode [ 848.534422][ T2888] hsr_slave_1: left promiscuous mode [ 848.542110][ T2888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 848.556355][ T2888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 848.564397][ T2888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 848.572382][ T2888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 848.593602][ T2888] veth1_macvtap: left promiscuous mode [ 848.599292][ T2888] veth0_macvtap: left promiscuous mode [ 848.604855][ T2888] veth1_vlan: left promiscuous mode [ 848.610895][ T2888] veth0_vlan: left promiscuous mode [ 849.043475][ T2888] team0 (unregistering): Port device team_slave_1 removed [ 849.078810][ T2888] team0 (unregistering): Port device team_slave_0 removed [ 849.462533][T31822] bridge0: port 2(bridge_slave_1) entered blocking state [ 849.481255][T31822] bridge0: port 2(bridge_slave_1) entered disabled state [ 849.495227][T31822] bridge_slave_1: entered allmulticast mode [ 849.502680][T31822] bridge_slave_1: entered promiscuous mode [ 849.510168][T31958] bond_slave_0: entered promiscuous mode [ 849.515981][T31958] bond_slave_1: entered promiscuous mode [ 849.525640][T31958] bond_slave_0: left promiscuous mode [ 849.531106][T31958] bond_slave_1: left promiscuous mode [ 849.558954][T31971] : renamed from bond0 [ 849.706168][T31822] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 849.750262][T31822] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 849.808634][T31977] syz-executor.1[31977] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 849.892553][T31822] team0: Port device team_slave_0 added [ 849.923521][T31822] team0: Port device team_slave_1 added [ 850.013001][T31822] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 850.032139][T31822] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 850.067499][T31822] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 850.147847][T31822] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 850.188824][T31822] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 850.218337][T31822] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 850.241157][T31991] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.4'. [ 850.410521][T31822] hsr_slave_0: entered promiscuous mode [ 850.422225][T31822] hsr_slave_1: entered promiscuous mode [ 850.431764][T31822] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 850.441631][T31822] Cannot create hsr debugfs directory [ 850.495137][ T5130] Bluetooth: hci4: command tx timeout [ 850.592725][T32014] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 850.716312][T32016] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 850.752477][T32019] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 850.852554][T32022] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 850.870958][T32024] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 850.877927][T32022] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 850.888703][T32022] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.1'. [ 851.179812][ T5168] IPVS: starting estimator thread 0... [ 851.265412][T31822] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 851.287793][T31822] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 851.295336][T32042] IPVS: using max 20 ests per chain, 48000 per kthread [ 851.318888][T32041] bond0: (slave bond_slave_0): Releasing backup interface [ 851.337320][T31822] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 851.369853][T31822] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 851.485226][T32059] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 851.502981][T32059] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 851.555420][T32060] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 851.580088][T32060] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.4'. [ 851.596931][T31822] 8021q: adding VLAN 0 to HW filter on device bond0 [ 851.649852][T31822] 8021q: adding VLAN 0 to HW filter on device team0 [ 851.664204][ T931] bridge0: port 1(bridge_slave_0) entered blocking state [ 851.671542][ T931] bridge0: port 1(bridge_slave_0) entered forwarding state [ 851.693291][ T5168] bridge0: port 2(bridge_slave_1) entered blocking state [ 851.700484][ T5168] bridge0: port 2(bridge_slave_1) entered forwarding state [ 851.732345][T32068] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 851.765597][T32068] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 851.882499][T32071] veth0_macvtap: left promiscuous mode [ 851.890283][T32071] macvtap0: entered allmulticast mode [ 852.029427][T31822] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 852.101682][T31822] veth0_vlan: entered promiscuous mode [ 852.124853][T31822] veth1_vlan: entered promiscuous mode [ 852.187092][T31822] veth0_macvtap: entered promiscuous mode [ 852.199065][T31822] veth1_macvtap: entered promiscuous mode [ 852.221958][T31822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 852.239208][T31822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 852.251738][T31822] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 852.272509][T31822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 852.283519][T31822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 852.293592][T31822] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 852.310250][T31822] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 852.321258][T31822] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 852.338372][T31822] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.351979][T31822] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.361720][T31822] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.370753][T31822] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 852.485323][T31490] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 852.505071][T31490] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.574658][T31517] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 852.598788][T31517] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 852.707877][T32100] raw_sendmsg: syz-executor.3 forgot to set AF_INET. Fix it! [ 853.520690][T32132] __nla_validate_parse: 1 callbacks suppressed [ 853.520711][T32132] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 853.757078][T32139] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 855.406226][T32169] syz-executor.0[32169] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 855.406379][T32169] syz-executor.0[32169] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 855.603716][T32187] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 856.477616][T32235] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 856.509500][T32237] bridge0: port 3(gretap0) entered blocking state [ 856.527602][T32237] bridge0: port 3(gretap0) entered disabled state [ 856.542578][T32237] gretap0: entered allmulticast mode [ 856.556938][T32237] gretap0: entered promiscuous mode [ 856.563921][T32237] bridge0: port 3(gretap0) entered blocking state [ 856.570529][T32237] bridge0: port 3(gretap0) entered forwarding state [ 856.588919][T32240] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.4'. [ 857.202589][T32261] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 857.217907][T32264] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 857.262660][T32267] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 857.276436][T32267] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.340113][T32267] bridge_slave_1 (unregistering): left allmulticast mode [ 857.348079][T32267] bridge_slave_1 (unregistering): left promiscuous mode [ 857.355599][T32267] bridge0: port 2(bridge_slave_1) entered disabled state [ 857.658961][T32286] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 857.761957][ T29] audit: type=1804 audit(1718502519.627:56): pid=32297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1778012081/syzkaller.D1AIN8/1070/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 857.800983][ T29] audit: type=1804 audit(1718502519.647:57): pid=32296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1778012081/syzkaller.D1AIN8/1070/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 857.809007][T32292] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 857.838538][T32294] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 857.849445][ T29] audit: type=1800 audit(1718502519.647:58): pid=32297 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1965 res=0 errno=0 [ 857.887642][T32294] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 857.901148][ T29] audit: type=1804 audit(1718502519.677:59): pid=32296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1778012081/syzkaller.D1AIN8/1070/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 857.962472][ T29] audit: type=1804 audit(1718502519.677:60): pid=32296 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1778012081/syzkaller.D1AIN8/1070/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 858.022205][T32292] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 860.131736][T32347] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 860.305975][T32359] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 860.320299][T32359] netlink: 127340 bytes leftover after parsing attributes in process `syz-executor.3'. [ 860.564589][T32373] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.1'. [ 860.998550][T32379] netdevsim netdevsim1 netdevsim1: Unsupported IPsec algorithm [ 860.998811][ C0] TCP: request_sock_TCPv6: Possible SYN flooding on port [::1]:20002. Sending cookies. [ 861.099009][T32385] ieee802154 phy1 wpan1: encryption failed: -22 [ 861.613597][T32380] netlink: 'syz-executor.4': attribute type 17 has an invalid length. [ 861.635501][T32380] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 861.807061][T32407] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 861.829389][T32407] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 862.207226][T32417] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 862.475809][T32425] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 864.203176][T32435] bond0: entered promiscuous mode [ 864.208587][T32435] bond_slave_0: entered promiscuous mode [ 864.214356][T32435] bond_slave_1: entered promiscuous mode [ 864.220532][T32435] team0: entered promiscuous mode [ 864.225678][T32435] team_slave_0: entered promiscuous mode [ 864.231630][T32435] team_slave_1: entered promiscuous mode [ 864.318614][T32443] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 864.395943][T32462] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 864.428374][T32462] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 864.534341][T32468] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 864.558791][ T29] audit: type=1804 audit(1718502526.427:61): pid=32478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir60035832/syzkaller.zEv2Qb/304/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 864.600569][ T29] audit: type=1804 audit(1718502526.427:62): pid=32478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir60035832/syzkaller.zEv2Qb/304/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 864.643170][ T29] audit: type=1804 audit(1718502526.427:63): pid=32478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir60035832/syzkaller.zEv2Qb/304/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 864.913483][T32501] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 864.939957][T32498] bridge1: port 1(veth1_to_bond) entered blocking state [ 864.947597][T32498] bridge1: port 1(veth1_to_bond) entered disabled state [ 864.961624][T32498] veth1_to_bond: entered allmulticast mode [ 864.971111][T32498] veth1_to_bond: entered promiscuous mode [ 864.982152][T32498] bridge1: port 1(veth1_to_bond) entered blocking state [ 864.989287][T32498] bridge1: port 1(veth1_to_bond) entered forwarding state [ 865.847982][T32542] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 865.976087][T32549] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 866.012782][T32554] netlink: 232 bytes leftover after parsing attributes in process `syz-executor.1'. [ 866.046598][T32554] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.1'. [ 866.109173][T32561] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 866.119503][T32559] netlink: 'syz-executor.0': attribute type 15 has an invalid length. [ 866.151972][T32554] gretap0: entered promiscuous mode [ 866.199168][T32561] hsr0: entered promiscuous mode [ 866.612024][T32593] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 867.010312][T32617] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 867.147173][T32627] tipc: Started in network mode [ 867.160305][T32627] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 867.169546][T32627] tipc: Enabled bearer , priority 0 [ 867.392731][T32635] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 867.407748][T32637] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 867.516661][T32642] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 867.749899][T32653] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 867.787153][T32653] hsr0: entered promiscuous mode [ 867.986739][ T29] audit: type=1804 audit(1718502529.847:64): pid=32658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir376826474/syzkaller.VScyrr/36/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 868.054185][ T29] audit: type=1804 audit(1718502529.847:65): pid=32658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir376826474/syzkaller.VScyrr/36/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 868.108137][ T29] audit: type=1804 audit(1718502529.857:66): pid=32658 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir376826474/syzkaller.VScyrr/36/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 868.286004][T16575] tipc: Node number set to 15444650 [ 868.760684][T32702] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 869.277969][ T29] audit: type=1804 audit(1718502531.147:67): pid=32720 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir682758933/syzkaller.1Hhhy6/1174/cgroup.controllers" dev="sda1" ino=1952 res=1 errno=0 [ 869.678981][T32739] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 869.689401][T32739] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 869.847993][ T29] audit: type=1804 audit(1718502531.717:68): pid=32743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir60035832/syzkaller.zEv2Qb/321/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 869.901994][ T29] audit: type=1804 audit(1718502531.747:69): pid=32743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir60035832/syzkaller.zEv2Qb/321/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 869.955107][ T29] audit: type=1804 audit(1718502531.757:70): pid=32743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir60035832/syzkaller.zEv2Qb/321/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 870.427659][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 871.403535][T32745] : renamed from bond0 [ 871.410157][T32748] bridge0: port 3(bond0) entered blocking state [ 871.425312][T32748] bridge0: port 3(bond0) entered disabled state [ 871.447687][T32748] bond0: entered allmulticast mode [ 871.453957][T32748] bond_slave_1: entered allmulticast mode [ 871.463513][T32748] bond0: left allmulticast mode [ 871.471137][T32748] bond_slave_1: left allmulticast mode [ 871.731795][ T314] __nla_validate_parse: 5 callbacks suppressed [ 871.731815][ T314] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 871.780512][ T314] vlan4: entered allmulticast mode [ 872.507093][T19713] Bluetooth: hci2: command 0x0406 tx timeout [ 873.281125][ T319] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 873.432610][ T333] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 873.476191][ T332] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 873.692498][ T29] audit: type=1804 audit(1718502535.557:71): pid=337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir682758933/syzkaller.1Hhhy6/1176/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 873.777454][ T29] audit: type=1804 audit(1718502535.597:72): pid=337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir682758933/syzkaller.1Hhhy6/1176/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 873.858189][ T29] audit: type=1804 audit(1718502535.597:73): pid=337 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir682758933/syzkaller.1Hhhy6/1176/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 874.261071][ T368] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 874.272739][ T366] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 874.553500][ T366] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 874.648373][ T374] syzkaller1: entered promiscuous mode [ 874.655898][ T374] syzkaller1: entered allmulticast mode [ 874.681049][ T381] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 874.936651][ T29] audit: type=1804 audit(1718502536.797:74): pid=383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1319647934/syzkaller.8tkPcX/104/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 875.287934][ T29] audit: type=1804 audit(1718502537.147:75): pid=408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir682758933/syzkaller.1Hhhy6/1180/memory.events" dev="sda1" ino=1936 res=1 errno=0 [ 875.330471][ T29] audit: type=1804 audit(1718502537.157:76): pid=408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir682758933/syzkaller.1Hhhy6/1180/memory.events" dev="sda1" ino=1936 res=1 errno=0 [ 875.363549][ T29] audit: type=1804 audit(1718502537.157:77): pid=408 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir682758933/syzkaller.1Hhhy6/1180/memory.events" dev="sda1" ino=1936 res=1 errno=0 [ 875.370226][ T410] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 875.486397][ T414] lo speed is unknown, defaulting to 1000 [ 875.496547][ T414] lo speed is unknown, defaulting to 1000 [ 875.518834][ T414] lo speed is unknown, defaulting to 1000 [ 875.567601][ T415] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 875.590282][ T414] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 875.601773][ T415] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 875.933257][ T414] lo speed is unknown, defaulting to 1000 [ 875.950016][ T414] lo speed is unknown, defaulting to 1000 [ 876.006366][ T414] lo speed is unknown, defaulting to 1000 [ 876.013605][ T414] lo speed is unknown, defaulting to 1000 [ 876.041625][ T414] lo speed is unknown, defaulting to 1000 [ 876.091154][ T429] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 876.590223][ T29] audit: type=1804 audit(1718502538.457:78): pid=454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir60035832/syzkaller.zEv2Qb/336/memory.events" dev="sda1" ino=1941 res=1 errno=0 [ 876.650908][ T29] audit: type=1804 audit(1718502538.457:79): pid=454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir60035832/syzkaller.zEv2Qb/336/memory.events" dev="sda1" ino=1941 res=1 errno=0 [ 876.706156][ T29] audit: type=1804 audit(1718502538.457:80): pid=454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir60035832/syzkaller.zEv2Qb/336/memory.events" dev="sda1" ino=1941 res=1 errno=0 [ 876.803048][ T477] __nla_validate_parse: 4 callbacks suppressed [ 876.803067][ T477] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 876.814694][ T479] xt_policy: neither incoming nor outgoing policy selected [ 876.835346][ T477] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 876.968346][ T488] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 877.104302][ T495] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.4'. [ 877.207763][ T499] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 877.430705][ T512] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 877.457491][ T512] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 878.117227][ T542] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 878.126894][ T542] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 878.136483][ T542] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 878.145699][ T542] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 878.198221][ T542] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 878.230983][ T555] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 878.262072][ T555] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 878.281902][ T556] dccp_invalid_packet: P.type (RESPONSE) not Data || [Data]Ack, while P.X == 0 [ 878.538953][ T571] netlink: 'syz-executor.4': attribute type 23 has an invalid length. [ 881.004719][ T610] sch_tbf: burst 0 is lower than device veth1_to_bridge mtu (1514) ! [ 881.113646][ T617] netlink: 'syz-executor.0': attribute type 23 has an invalid length. [ 881.893323][ T645] __nla_validate_parse: 8 callbacks suppressed [ 881.893343][ T645] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 881.923302][ T646] sch_tbf: burst 0 is lower than device veth1_to_bridge mtu (1514) ! [ 882.442683][ T673] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.0'. [ 882.524622][ T679] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 882.550756][ T679] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 882.688795][ T687] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 883.689110][ T722] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 883.701279][ T722] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 885.310504][ T748] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 885.324467][ T746] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 885.552294][ T758] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 885.562224][ T758] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 887.731987][ T772] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 887.751013][ T773] hsr0: entered promiscuous mode [ 887.828926][ T788] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 888.006594][ T797] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 888.027697][ T797] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 888.035555][ T800] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 888.692729][ T829] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 889.307716][ T845] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 889.344065][ T845] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 889.709040][ T860] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 889.731889][ T856] bridge0: port 1(bridge_slave_0) entered disabled state [ 889.734738][ T866] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 889.835623][ T856] bridge0: port 1(bridge_slave_0) entered blocking state [ 889.843400][ T856] bridge0: port 1(bridge_slave_0) entered forwarding state [ 889.865468][ T856] bridge0: entered promiscuous mode [ 889.871160][ T856] bridge0: entered allmulticast mode [ 889.878273][ T874] netlink: 'syz-executor.0': attribute type 39 has an invalid length. [ 892.510522][ T29] audit: type=1804 audit(1718502554.377:81): pid=921 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir682758933/syzkaller.1Hhhy6/1202/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 893.082261][ T928] __nla_validate_parse: 2 callbacks suppressed [ 893.082275][ T928] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 893.109993][ T928] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 893.967852][ T916] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 894.096204][ T935] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 894.838565][ T974] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 894.870142][ T974] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 896.514478][ T1001] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 896.527348][ T1001] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.2'. [ 896.553171][ T1001] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 898.000317][ T988] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 898.144407][ T1026] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 898.163886][ T1026] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 898.722443][ T1060] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.2'. [ 898.932627][ T1072] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 898.949730][ T1072] vlan0: entered promiscuous mode [ 898.955343][ T1072] bond0: entered promiscuous mode [ 898.960578][ T1072] bond_slave_1: entered promiscuous mode [ 898.973752][ T1072] bond0: left promiscuous mode [ 898.979008][ T1072] bond_slave_1: left promiscuous mode [ 899.277498][ T1082] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 899.287309][ T1082] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 899.671260][ T1088] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 899.679835][ T1088] netlink: 636 bytes leftover after parsing attributes in process `syz-executor.1'. [ 900.918290][ T1094] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 901.071576][ T1104] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 901.095180][ T1107] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 901.569481][ T1134] syzkaller1: entered promiscuous mode [ 901.627906][ T1134] syzkaller1: entered allmulticast mode [ 903.576192][ T1158] __nla_validate_parse: 9 callbacks suppressed [ 903.576213][ T1158] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 903.669209][ T1166] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 903.697170][ T1166] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 903.707816][ T1166] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 903.777410][ T1170] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 903.928583][ T1180] syzkaller1: entered promiscuous mode [ 903.950071][ T1180] syzkaller1: entered allmulticast mode [ 904.084438][ T1189] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 904.120601][ T1189] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 904.162120][ T1191] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 904.190035][ T1191] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.2'. [ 904.270238][ T1193] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 904.316462][ T1193] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 904.378146][ T29] audit: type=1804 audit(1718502566.247:82): pid=1200 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir376826474/syzkaller.VScyrr/91/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 904.417597][ T1204] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de [ 906.479367][ T1229] syzkaller1: entered promiscuous mode [ 906.484869][ T1229] syzkaller1: entered allmulticast mode [ 908.223348][ T1261] ax25_connect(): syz-executor.4 uses autobind, please contact jreuter@yaina.de [ 908.480510][ T29] audit: type=1804 audit(1718502570.347:83): pid=1276 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir682758933/syzkaller.1Hhhy6/1227/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 908.667237][ T1289] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 909.059792][ T1298] syzkaller1: entered promiscuous mode [ 909.075022][ T1298] syzkaller1: entered allmulticast mode [ 909.392411][ T1317] __nla_validate_parse: 12 callbacks suppressed [ 909.392433][ T1317] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 909.433357][ T1317] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 911.034295][ T1318] net veth1_virt_wifi ÿÿÿÿÿÿÿ: renamed from virt_wifi0 [ 912.922334][ T1352] syzkaller1: entered promiscuous mode [ 912.938693][ T1352] syzkaller1: entered allmulticast mode [ 913.343821][ T1378] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 913.893855][ T1409] syzkaller1: entered promiscuous mode [ 913.900903][ T1409] syzkaller1: entered allmulticast mode [ 913.931494][ T1411] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 913.964171][ T1411] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 914.115875][ T1424] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 916.125526][ T1461] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 916.181723][ T1463] syzkaller1: entered promiscuous mode [ 916.191869][ T1461] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 916.193095][ T1463] syzkaller1: entered allmulticast mode [ 916.261413][ T1467] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 916.654711][ T1490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 916.680360][ T1490] bond1: (slave batadv0): Enslaving as a backup interface with an up link [ 917.247779][ T1490] 8021q: adding VLAN 0 to HW filter on device bond1 [ 917.247955][ T2888] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 917.491869][ T1517] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 917.530330][ T1517] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. [ 917.609452][ T1494] bond1 (unregistering): (slave batadv0): Removing an active aggregator [ 917.623814][ T1494] bond1 (unregistering): (slave batadv0): Releasing backup interface [ 917.653584][ T1494] bond1 (unregistering): Released all slaves [ 919.464485][ T1534] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 919.488999][ T1534] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 920.011902][ T1562] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 920.054129][ T1562] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. [ 920.319415][ T1582] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 920.360308][ T1582] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 920.774315][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88801bbeb800: rx timeout, send abort [ 920.782725][ C0] vxcan0: j1939_tp_rxtimer: 0xffff888021fe9c00: rx timeout, send abort [ 920.791319][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff88801bbeb800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 920.805780][ C0] vxcan0: j1939_xtp_rx_abort_one: 0xffff888021fe9c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 921.112779][ T1613] xt_CT: You must specify a L4 protocol and not use inversions on it [ 921.538503][ T1618] __nla_validate_parse: 1 callbacks suppressed [ 921.538525][ T1618] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 921.569196][ T1618] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 921.846090][ T1622] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 921.863720][ T1622] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. [ 923.074093][ T1642] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 924.726004][ T1649] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 924.824427][ T1652] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 924.836843][ T1652] bond0: (slave batadv0): Enslaving as a backup interface with an up link [ 924.854864][ T62] bond0: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 924.871572][ T1653] 8021q: adding VLAN 0 to HW filter on device bond0 [ 925.252146][ T1654] bond0 (unregistering): (slave batadv0): Removing an active aggregator [ 925.261111][ T1654] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 925.275529][ T1654] bond0 (unregistering): Released all slaves [ 925.318551][ T1668] dummy0: entered promiscuous mode [ 925.323736][ T1668] macsec1: entered allmulticast mode [ 925.329241][ T1668] dummy0: entered allmulticast mode [ 925.372164][ T1668] dummy0: left allmulticast mode [ 925.380372][ T1668] dummy0: left promiscuous mode [ 925.483904][ T1683] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 925.495711][ T1683] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 926.002286][ T1702] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 927.540730][ T1687] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 927.557307][ T1685] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 927.568485][ T1697] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.0'. [ 927.713445][ T1709] xt_connbytes: Forcing CT accounting to be enabled [ 927.729666][ T1711] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 927.740228][ T1709] xt_CT: You must specify a L4 protocol and not use inversions on it [ 927.917810][ T1721] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 927.958385][ T1721] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 928.146152][ T1736] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 928.231291][ T1740] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 928.275965][ T1744] xt_bpf: check failed: parse error [ 928.294434][ T1744] xt_l2tp: v2 tid > 0xffff: 150994944 [ 928.444323][ T1754] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 928.660908][ T1771] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 928.671381][ T1771] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 928.682045][ T1767] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 928.716269][ T1767] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:0 [ 929.880139][ T1838] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 931.052507][ T1897] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 931.087230][ T1897] gretap1: entered promiscuous mode [ 931.105149][ T1897] gretap1: entered allmulticast mode [ 931.392133][ T931] IPVS: starting estimator thread 0... [ 931.495225][ T1921] IPVS: using max 21 ests per chain, 50400 per kthread [ 931.859880][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 932.064349][ T1958] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 932.091492][ T1958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 932.099472][ T1958] : (slave batadv0): Enslaving as an active interface with an up link [ 932.153688][ T1958] netem: change failed [ 932.562046][ T1983] __nla_validate_parse: 30 callbacks suppressed [ 932.562067][ T1983] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 932.693062][ T1986] bond0: option arp_interval: invalid value (18446744073366943235) [ 932.702812][ T1986] bond0: option arp_interval: allowed values 0 - 2147483647 [ 932.717831][ T1989] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 932.918347][ T29] audit: type=1804 audit(1718502594.787:84): pid=1996 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir60035832/syzkaller.zEv2Qb/428/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 933.031375][ T29] audit: type=1804 audit(1718502594.897:85): pid=2003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1319647934/syzkaller.8tkPcX/218/cgroup.controllers" dev="sda1" ino=1941 res=1 errno=0 [ 933.063834][ T2000] netlink: 4068 bytes leftover after parsing attributes in process `syz-executor.4'. [ 933.191206][ T2009] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 933.201975][ T2011] x_tables: ip6_tables: rpfilter match: used from hooks POSTROUTING, but only valid from PREROUTING [ 933.220574][ T2009] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 933.675642][ T2038] sctp: [Deprecated]: syz-executor.1 (pid 2038) Use of int in max_burst socket option deprecated. [ 933.675642][ T2038] Use struct sctp_assoc_value instead [ 933.732939][ T2047] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 933.824636][ T2047] ieee802154 phy1 wpan1: encryption failed: -22 [ 933.929404][ T2063] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 933.952497][ T2064] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 933.977966][ T2066] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 934.191462][ T2085] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 934.221478][ T2085] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 934.267998][ T2085] sctp: [Deprecated]: syz-executor.2 (pid 2085) Use of int in max_burst socket option deprecated. [ 934.267998][ T2085] Use struct sctp_assoc_value instead [ 934.440187][ T2098] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 934.530312][ T29] audit: type=1804 audit(1718502596.397:86): pid=2101 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1778012081/syzkaller.D1AIN8/1232/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 934.685280][ T2098] ieee802154 phy1 wpan1: encryption failed: -22 [ 934.694446][ T2112] openvswitch: netlink: Missing key (keys=100000040, expected=2000) [ 936.093742][ T2197] vlan1: entered promiscuous mode [ 936.172736][ T2197] vlan1 (unregistering): left promiscuous mode [ 936.857926][ T2249] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 936.872283][ T2249] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 937.212434][ T29] audit: type=1804 audit(1718502599.077:87): pid=2273 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir1319647934/syzkaller.8tkPcX/231/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 937.350527][ T2280] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 937.373298][ T2280] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 937.388291][ T5130] Bluetooth: hci4: link tx timeout [ 937.393831][ T5130] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 937.405065][ T2283] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 937.422051][T19713] Bluetooth: hci4: link tx timeout [ 937.427862][T19713] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 937.436250][ T2280] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 937.438309][T19713] Bluetooth: hci4: link tx timeout [ 937.450114][T19713] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 937.458432][T19713] Bluetooth: hci4: link tx timeout [ 937.462409][ T2280] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 937.463548][T19713] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 937.481719][T19713] Bluetooth: hci4: link tx timeout [ 937.487848][T19713] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 937.498152][T19713] Bluetooth: hci4: link tx timeout [ 937.503293][T19713] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 937.510449][ T2280] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 937.511066][T19713] Bluetooth: hci4: link tx timeout [ 937.524222][T19713] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 937.531241][ T2282] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 937.549083][ T2283] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 937.568543][ T2280] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 937.691316][ T2298] __nla_validate_parse: 10 callbacks suppressed [ 937.691335][ T2298] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 937.764379][ T2300] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 938.201251][ T2321] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 938.215654][ T2321] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 938.292491][ T2319] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 938.310267][ T2319] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 938.414829][ T2327] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 938.500643][ T2327] ieee802154 phy1 wpan1: encryption failed: -22 [ 938.534221][ T2336] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 938.566660][ T2340] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 938.881486][ T2358] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 938.898483][ T2358] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 939.455217][T19713] Bluetooth: hci4: command 0x0406 tx timeout [ 939.576112][ T2378] ieee802154 phy1 wpan1: encryption failed: -22 [ 939.795755][ T29] audit: type=1804 audit(1718502601.657:88): pid=2395 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir682758933/syzkaller.1Hhhy6/1290/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 940.683864][ T2442] syzkaller1: entered promiscuous mode [ 940.691507][ T2442] syzkaller1: entered allmulticast mode [ 940.845045][ T29] audit: type=1804 audit(1718502602.707:89): pid=2451 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1778012081/syzkaller.D1AIN8/1258/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 941.243054][ T29] audit: type=1804 audit(1718502603.107:90): pid=2470 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir376826474/syzkaller.VScyrr/176/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 941.307313][ T29] audit: type=1804 audit(1718502603.107:91): pid=2467 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir376826474/syzkaller.VScyrr/176/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 941.536354][T19713] Bluetooth: hci4: command 0x0406 tx timeout [ 941.844479][ T29] audit: type=1804 audit(1718502603.707:92): pid=2502 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1778012081/syzkaller.D1AIN8/1263/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 942.040069][ T2508] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 942.103941][ T2508] team0: Port device netdevsim0 added [ 942.601945][ T29] audit: type=1804 audit(1718502604.467:93): pid=2516 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir376826474/syzkaller.VScyrr/178/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 942.805957][ T2534] __nla_validate_parse: 24 callbacks suppressed [ 942.805976][ T2534] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 942.854193][ T2534] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 943.205047][ T29] audit: type=1804 audit(1718502605.067:94): pid=2552 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir376826474/syzkaller.VScyrr/179/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 943.542238][ T2561] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 943.841472][ T2577] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 943.859629][ T2577] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 944.484264][ T2601] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 944.653692][ T2614] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 944.666374][ T2613] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 944.678397][ T2613] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 944.775510][ T2623] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 944.895277][ T2629] netlink: 'syz-executor.3': attribute type 13 has an invalid length. [ 944.922591][ T2629] x_tables: ip_tables: ah match: only valid for protocol 51 [ 946.014386][ T29] audit: type=1804 audit(1718502607.867:95): pid=2689 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir60035832/syzkaller.zEv2Qb/475/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 946.510227][ T2715] syzkaller1: entered promiscuous mode [ 946.542689][ T2715] syzkaller1: entered allmulticast mode [ 947.109234][ T2760] bridge2: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 947.139860][ T2760] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 947.201209][ T2760] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 947.241996][ T2768] syzkaller1: entered promiscuous mode [ 947.251915][ T2768] syzkaller1: entered allmulticast mode [ 947.272762][T17987] lo speed is unknown, defaulting to 1000 [ 947.288571][ T5165] lo speed is unknown, defaulting to 1000 [ 947.976462][ T29] audit: type=1804 audit(1718502609.847:96): pid=2810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1778012081/syzkaller.D1AIN8/1281/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 948.196471][ T2819] __nla_validate_parse: 16 callbacks suppressed [ 948.196490][ T2819] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 948.600682][ T2834] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 948.681369][T31510] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.704312][T19713] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 948.715188][T19713] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 948.732372][T19713] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 948.746053][T19713] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 948.766904][T19713] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 948.774853][T19713] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 948.856126][T31510] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 948.905735][ T2834] IPVS: set_ctl: invalid protocol: 48 0.0.4.0:20002 [ 948.959249][T31510] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.097496][T31510] team0: Port device netdevsim0 removed [ 949.124120][T31510] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 949.401435][T31510] gretap0: left allmulticast mode [ 949.412788][T31510] gretap0: left promiscuous mode [ 949.434027][T31510] bridge0: port 3(gretap0) entered disabled state [ 949.471962][T31510] bridge_slave_1: left allmulticast mode [ 949.482615][T31510] bridge_slave_1: left promiscuous mode [ 949.493196][T31510] bridge0: port 2(bridge_slave_1) entered disabled state [ 949.512864][T31510] bridge_slave_0: left allmulticast mode [ 949.527554][T31510] bridge_slave_0: left promiscuous mode [ 949.553663][T31510] bridge0: port 1(bridge_slave_0) entered disabled state [ 949.658382][T19713] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 949.676599][T19713] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 949.687460][T19713] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 949.698766][ T2879] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 949.707082][ T2879] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 949.714634][ T2879] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 949.831743][ T2886] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 950.470811][T31510]  (unregistering): (slave bond_slave_0): Releasing backup interface [ 950.501377][T31510]  (unregistering): (slave bond_slave_1): Releasing backup interface [ 950.517445][T31510]  (unregistering): Released all slaves [ 950.531583][ T2869] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 950.575059][ T2895] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 950.625228][T31510] tipc: Left network mode [ 950.838386][ T2876] lo speed is unknown, defaulting to 1000 [ 951.041386][T31510] hsr_slave_0: left promiscuous mode [ 951.056726][T31510] hsr_slave_1: left promiscuous mode [ 951.064821][ T29] audit: type=1804 audit(1718502612.927:97): pid=2922 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir60035832/syzkaller.zEv2Qb/485/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 951.114236][T31510] veth1_macvtap: left promiscuous mode [ 951.121129][T31510] veth1_vlan: left promiscuous mode [ 951.126586][T31510] veth0_vlan: left promiscuous mode [ 951.520340][ T2940] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 951.779631][ T2879] Bluetooth: hci1: command tx timeout [ 951.835294][T31510] team0 (unregistering): Port device team_slave_1 removed [ 951.891338][T31510] team0 (unregistering): Port device team_slave_0 removed [ 952.224755][ T2931] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 952.262353][ T2949] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 952.431594][ T2960] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 952.569976][ T29] audit: type=1804 audit(1718502614.437:98): pid=2964 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir60035832/syzkaller.zEv2Qb/488/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 952.666003][ T2876] chnl_net:caif_netlink_parms(): no params data found [ 952.950029][ T2876] bridge0: port 1(bridge_slave_0) entered blocking state [ 952.969733][ T2876] bridge0: port 1(bridge_slave_0) entered disabled state [ 952.993381][ T2876] bridge_slave_0: entered allmulticast mode [ 953.010067][ T2876] bridge_slave_0: entered promiscuous mode [ 953.032878][ T2983] bridge7: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 953.054770][ T2876] bridge0: port 2(bridge_slave_1) entered blocking state [ 953.063340][ T2876] bridge0: port 2(bridge_slave_1) entered disabled state [ 953.078630][ T2876] bridge_slave_1: entered allmulticast mode [ 953.088875][ T2876] bridge_slave_1: entered promiscuous mode [ 953.128537][ T29] audit: type=1804 audit(1718502614.997:99): pid=2985 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1778012081/syzkaller.D1AIN8/1296/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 953.169587][ T2876] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 953.192062][ T2876] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 953.219852][ T2988] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 953.319252][ T2988] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 953.355473][ T2990] netlink: 196 bytes leftover after parsing attributes in process `syz-executor.0'. [ 953.397742][ T2988] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 953.412177][ T2876] team0: Port device team_slave_0 added [ 953.423637][ T2876] team0: Port device team_slave_1 added [ 953.479562][ T2876] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 953.486999][ T2876] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 953.536487][ T2876] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 953.550462][ T2876] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 953.557915][ T2876] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 953.603321][ T2876] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 953.740108][ T2876] hsr_slave_0: entered promiscuous mode [ 953.749794][ T2876] hsr_slave_1: entered promiscuous mode [ 953.759158][ T2876] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 953.772482][ T2876] Cannot create hsr debugfs directory [ 953.782618][ T3001] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 953.856025][ T2879] Bluetooth: hci1: command tx timeout [ 954.015239][ T3016] warn_alloc: 1 callbacks suppressed [ 954.015256][ T3016] syz-executor.2: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 954.054812][ T3016] CPU: 1 PID: 3016 Comm: syz-executor.2 Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 954.065280][ T3016] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 954.075360][ T3016] Call Trace: [ 954.078660][ T3016] [ 954.081612][ T3016] dump_stack_lvl+0x241/0x360 [ 954.086319][ T3016] ? __pfx_dump_stack_lvl+0x10/0x10 [ 954.091538][ T3016] ? __pfx__printk+0x10/0x10 [ 954.096162][ T3016] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 954.102620][ T3016] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 954.109155][ T3016] warn_alloc+0x278/0x410 [ 954.113522][ T3016] ? stack_depot_save_flags+0x29/0x830 [ 954.119005][ T3016] ? __vmalloc_node_range_noprof+0x10b/0x1460 [ 954.125190][ T3016] ? __pfx_warn_alloc+0x10/0x10 [ 954.130068][ T3016] ? kasan_save_track+0x3f/0x80 [ 954.134925][ T3016] ? __kasan_kmalloc+0x98/0xb0 [ 954.139697][ T3016] ? xsk_setsockopt+0x598/0x950 [ 954.144548][ T3016] ? do_sock_setsockopt+0x3af/0x720 [ 954.149746][ T3016] ? __sys_setsockopt+0x1ae/0x250 [ 954.154780][ T3016] ? __x64_sys_setsockopt+0xb5/0xd0 [ 954.159999][ T3016] ? do_syscall_64+0xf3/0x230 [ 954.164678][ T3016] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.170742][ T3016] __vmalloc_node_range_noprof+0x130/0x1460 [ 954.176655][ T3016] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 954.182997][ T3016] ? __kasan_kmalloc+0x98/0xb0 [ 954.187752][ T3016] ? xskq_create+0x54/0x170 [ 954.192259][ T3016] vmalloc_user_noprof+0x74/0x80 [ 954.197192][ T3016] ? xskq_create+0xb6/0x170 [ 954.201692][ T3016] xskq_create+0xb6/0x170 [ 954.206030][ T3016] xsk_init_queue+0xa1/0x100 [ 954.210619][ T3016] xsk_setsockopt+0x598/0x950 [ 954.215552][ T3016] ? __pfx_xsk_setsockopt+0x10/0x10 [ 954.220745][ T3016] ? __pfx_lock_acquire+0x10/0x10 [ 954.225770][ T3016] ? aa_sock_opt_perm+0x79/0x120 [ 954.230702][ T3016] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 954.236545][ T3016] ? security_socket_setsockopt+0x87/0xb0 [ 954.242307][ T3016] ? __pfx_xsk_setsockopt+0x10/0x10 [ 954.247528][ T3016] do_sock_setsockopt+0x3af/0x720 [ 954.252580][ T3016] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 954.258225][ T3016] ? __fget_files+0x29/0x470 [ 954.262844][ T3016] ? __fget_files+0x3f6/0x470 [ 954.267526][ T3016] __sys_setsockopt+0x1ae/0x250 [ 954.272396][ T3016] __x64_sys_setsockopt+0xb5/0xd0 [ 954.277452][ T3016] do_syscall_64+0xf3/0x230 [ 954.282046][ T3016] ? clear_bhb_loop+0x35/0x90 [ 954.286725][ T3016] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 954.292614][ T3016] RIP: 0033:0x7f4b0e87cea9 [ 954.297034][ T3016] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 954.316723][ T3016] RSP: 002b:00007f4b0f5a70c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 954.325147][ T3016] RAX: ffffffffffffffda RBX: 00007f4b0e9b4050 RCX: 00007f4b0e87cea9 [ 954.333107][ T3016] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 954.341187][ T3016] RBP: 00007f4b0e8ebff4 R08: 0000000000000020 R09: 0000000000000000 [ 954.349175][ T3016] R10: 00000000200033c0 R11: 0000000000000246 R12: 0000000000000000 [ 954.357322][ T3016] R13: 000000000000006e R14: 00007f4b0e9b4050 R15: 00007ffd038aa8a8 [ 954.365302][ T3016] [ 954.388782][ T3016] Mem-Info: [ 954.393003][ T3016] active_anon:17881 inactive_anon:0 isolated_anon:0 [ 954.393003][ T3016] active_file:4 inactive_file:46789 isolated_file:0 [ 954.393003][ T3016] unevictable:768 dirty:171 writeback:0 [ 954.393003][ T3016] slab_reclaimable:11573 slab_unreclaimable:97381 [ 954.393003][ T3016] mapped:18528 shmem:2098 pagetables:611 [ 954.393003][ T3016] sec_pagetables:0 bounce:0 [ 954.393003][ T3016] kernel_misc_reclaimable:0 [ 954.393003][ T3016] free:1381159 free_pcp:431 free_cma:0 [ 954.439166][ T3016] Node 0 active_anon:71524kB inactive_anon:0kB active_file:16kB inactive_file:188588kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:74112kB dirty:2380kB writeback:0kB shmem:6856kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10988kB pagetables:2444kB sec_pagetables:0kB all_unreclaimable? no [ 954.476409][ T3016] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 954.520097][ T29] audit: type=1804 audit(1718502616.377:100): pid=3025 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir376826474/syzkaller.VScyrr/220/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 [ 954.553721][ T3016] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 954.591943][ T3016] lowmem_reserve[]: 0 2571 2571 0 0 [ 954.602897][ T3016] Node 0 DMA32 free:1559272kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:71376kB inactive_anon:0kB active_file:16kB inactive_file:188676kB unevictable:1536kB writepending:2572kB present:3129332kB managed:2659872kB mlocked:0kB bounce:0kB free_pcp:2192kB local_pcp:668kB free_cma:0kB [ 954.638749][ T3016] lowmem_reserve[]: 0 0 0 0 0 [ 954.649622][ T3016] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:312kB unevictable:0kB writepending:8kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 954.677237][ T3016] lowmem_reserve[]: 0 0 0 0 0 [ 954.682703][ T3016] Node 1 Normal free:3947608kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:64kB local_pcp:0kB free_cma:0kB [ 954.735574][ T3016] lowmem_reserve[]: 0 0 0 0 0 [ 954.740832][ T3016] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 954.760256][ T3016] Node 0 DMA32: 901*4kB (UME) 470*8kB (UME) 261*16kB (UME) 746*32kB (UME) 414*64kB (UME) 358*128kB (UME) 177*256kB (UM) 85*512kB (UME) 70*1024kB (UME) 9*2048kB (UME) 311*4096kB (UM) = 1560532kB [ 954.780596][ T3016] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 954.794017][ T3016] Node 1 Normal: 2*4kB (U) 6*8kB (U) 10*16kB (U) 12*32kB (U) 12*64kB (UM) 4*128kB (U) 3*256kB (UM) 1*512kB (M) 2*1024kB (U) 3*2048kB (U) 961*4096kB (M) = 3947608kB [ 954.813190][ T3016] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 954.827804][ T3016] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 954.837764][ T3016] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 954.852386][ T3016] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 954.865241][ T3016] 48785 total pagecache pages [ 954.870180][ T3016] 0 pages in swap cache [ 954.874443][ T3016] Free swap = 124728kB [ 954.887279][ T3016] Total swap = 124996kB [ 954.891469][ T3016] 2097051 pages RAM [ 954.902546][ T3016] 0 pages HighMem/MovableOnly [ 954.908679][ T3016] 400873 pages reserved [ 954.912862][ T3016] 0 pages cma reserved [ 955.219468][ T2876] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 955.294357][ T2876] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 955.333157][ T2876] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 955.420866][ T2876] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 955.469066][ T3050] xt_TCPMSS: Only works on TCP SYN packets [ 955.507809][ T3052] xt_TCPMSS: Only works on TCP SYN packets [ 955.935222][ T2879] Bluetooth: hci1: command tx timeout [ 956.001225][ T3065] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 956.267563][ T3068] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.3'. [ 956.278373][ T3068] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 956.415622][ T3070] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 957.373857][ T3061] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 957.394695][ T3062] netlink: 'syz-executor.0': attribute type 14 has an invalid length. [ 957.563700][ T3076] Â: renamed from pim6reg1 [ 957.590963][ T2876] 8021q: adding VLAN 0 to HW filter on device bond0 [ 957.641954][ T29] audit: type=1804 audit(1718502619.507:101): pid=3081 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir376826474/syzkaller.VScyrr/225/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 957.700488][ T2876] 8021q: adding VLAN 0 to HW filter on device team0 [ 957.753353][ T5243] bridge0: port 1(bridge_slave_0) entered blocking state [ 957.760658][ T5243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 957.776149][ T5243] bridge0: port 2(bridge_slave_1) entered blocking state [ 957.783328][ T5243] bridge0: port 2(bridge_slave_1) entered forwarding state [ 958.015471][ T2879] Bluetooth: hci1: command tx timeout [ 958.037973][ T2876] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 958.425834][ T2876] veth0_vlan: entered promiscuous mode [ 958.450097][ T2876] veth1_vlan: entered promiscuous mode [ 958.481800][ T3112] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.3'. [ 958.499258][ T3112] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 958.540062][ T2876] veth0_macvtap: entered promiscuous mode [ 958.562839][ T2876] veth1_macvtap: entered promiscuous mode [ 958.595486][ T3113] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 958.609928][ T2876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 958.629548][ T2876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 958.652199][ T2876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 958.681567][ T3115] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 958.681810][ T2876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 958.691575][ T3115] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 958.717645][ T2876] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 958.746966][ T2876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 958.758560][ T2876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 958.792464][ T2876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 958.812004][ T2876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 958.822317][ T2876] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 958.833886][ T2876] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 958.846682][ T2876] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 958.863380][ T2876] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.873796][ T2876] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.882847][ T2876] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.894200][ T2876] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 958.909138][ T3122] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 958.993668][ T3122] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 959.076106][ T3124] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 959.156137][ T3132] Â: renamed from pim6reg1 [ 959.222697][ T29] audit: type=1804 audit(1718502621.087:102): pid=3138 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir60035832/syzkaller.zEv2Qb/506/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 959.302920][T31517] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 959.327263][T31517] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 959.507243][ T29] audit: type=1804 audit(1718502621.377:103): pid=3146 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir682758933/syzkaller.1Hhhy6/1339/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 959.520305][T31510] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 959.589260][T31510] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 960.342720][ T3165] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 960.390476][ T3165] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 961.876630][ T3190] ebt_among: dst integrity fail: 100 [ 962.433169][ T3215] xt_l2tp: missing protocol rule (udp|l2tpip) [ 962.741080][ T3234] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.3'. [ 962.779785][ T3234] openvswitch: netlink: Tunnel attr 0 has unexpected len 3060 expected 8 [ 962.821551][ T3235] netlink: 'syz-executor.1': attribute type 13 has an invalid length. [ 962.988098][ T3235] veth0_macvtap: left promiscuous mode [ 963.056528][ T3235] macvtap0: entered promiscuous mode [ 963.098066][ T3235] macvtap0: refused to change device tx_queue_len [ 963.411565][ T3256] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 964.068893][ T5130] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 964.092729][ T5130] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 964.110851][ T5130] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 964.134021][ T5130] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 964.153103][ T5130] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 964.166032][ T5130] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 965.468014][ T3266] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 965.490270][ T3268] bridge2: port 1(veth1_to_bond) entered blocking state [ 965.497988][ T3268] bridge2: port 1(veth1_to_bond) entered disabled state [ 965.518692][ T3268] veth1_to_bond: entered allmulticast mode [ 965.535913][ T3268] veth1_to_bond: entered promiscuous mode [ 965.542533][ T3268] bridge2: port 1(veth1_to_bond) entered blocking state [ 965.549583][ T3268] bridge2: port 1(veth1_to_bond) entered forwarding state [ 965.639962][ T3275] lo speed is unknown, defaulting to 1000 [ 965.780450][ T3289] tipc: Failed to remove unknown binding: 66,1,1/0:185370558/185370560 [ 965.864729][ T3289] 8021q: adding VLAN 0 to HW filter on device bond0 [ 965.904011][ T3289] team0: Port device bond0 added [ 965.989340][ T3302] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.3'. [ 966.039844][ T3275] chnl_net:caif_netlink_parms(): no params data found [ 966.083102][ T3306] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 966.160923][ T3311] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 966.176496][ T3311] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 966.257405][ T5130] Bluetooth: hci3: command tx timeout [ 966.340727][ T3275] bridge0: port 1(bridge_slave_0) entered blocking state [ 966.356009][ T3275] bridge0: port 1(bridge_slave_0) entered disabled state [ 966.363365][ T3275] bridge_slave_0: entered allmulticast mode [ 966.374886][ T3275] bridge_slave_0: entered promiscuous mode [ 966.407012][ T3314] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 966.420376][ T3322] pim6reg: entered allmulticast mode [ 966.442289][ T3275] bridge0: port 2(bridge_slave_1) entered blocking state [ 966.452731][ T3314] netlink: 209324 bytes leftover after parsing attributes in process `syz-executor.3'. [ 966.465151][ T3275] bridge0: port 2(bridge_slave_1) entered disabled state [ 966.472405][ T3275] bridge_slave_1: entered allmulticast mode [ 966.508240][ T3275] bridge_slave_1: entered promiscuous mode [ 966.757346][ T3275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 966.803615][ T3275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 966.859281][ T3331] netlink: 120 bytes leftover after parsing attributes in process `syz-executor.3'. [ 966.944047][ T3275] team0: Port device team_slave_0 added [ 966.964262][ T3275] team0: Port device team_slave_1 added [ 967.070144][ T3343] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 967.082331][ T3344] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. [ 967.083971][ T3275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 967.102766][ T3275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 967.132466][ T3275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 967.168345][ T3275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 967.176494][ T3275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 967.209802][ T3275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 967.344826][ T3275] hsr_slave_0: entered promiscuous mode [ 967.383776][ T3275] hsr_slave_1: entered promiscuous mode [ 967.396289][ T3275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 967.410069][ T3275] Cannot create hsr debugfs directory [ 967.699259][ T3275] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.814762][ T3275] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 967.929063][ T3275] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.201925][ T3383] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 968.233871][ T3383] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 968.280129][ T3275] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 968.335353][ T5130] Bluetooth: hci3: command tx timeout [ 968.481241][ T3391] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 968.564838][ T3275] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 968.587720][ T3275] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 968.594003][ T3397] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 968.612975][ T3275] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 968.640568][ T3275] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 968.769968][ T3397] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 968.852072][ T3275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 968.918360][ T3275] 8021q: adding VLAN 0 to HW filter on device team0 [ 968.956941][ T5243] bridge0: port 1(bridge_slave_0) entered blocking state [ 968.964127][ T5243] bridge0: port 1(bridge_slave_0) entered forwarding state [ 968.997965][T17740] bridge0: port 2(bridge_slave_1) entered blocking state [ 969.005184][T17740] bridge0: port 2(bridge_slave_1) entered forwarding state [ 969.423955][ T3275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 969.592415][ T3438] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 969.632193][ T3438] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 969.673266][ T3275] veth0_vlan: entered promiscuous mode [ 969.691767][ T3442] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 969.732060][ T3275] veth1_vlan: entered promiscuous mode [ 969.826380][ T3275] veth0_macvtap: entered promiscuous mode [ 969.865930][ T3275] veth1_macvtap: entered promiscuous mode [ 969.927043][ T3275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 969.956066][ T3275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 969.982478][ T3275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 970.007800][ T3275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.038651][ T3275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 970.070288][ T3275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.091082][ T3275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 970.126963][ T3275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 970.163935][ T3275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.185265][ T3275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 970.208337][ T3275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.225140][ T3275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 970.262086][ T3275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.281810][ T3275] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 970.298842][ T3275] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 970.320974][ T3275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 970.354013][ T3275] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.397386][ T3275] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.411224][ T3275] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.421006][ T5130] Bluetooth: hci3: command tx timeout [ 970.439216][ T3275] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 970.601583][T31510] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 970.629047][T31510] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 970.671978][T31494] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 970.686405][T31494] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 971.447982][ T3523] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 971.566705][ T3528] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 971.601458][ T3530] syzkaller1: entered promiscuous mode [ 971.628295][ T3530] syzkaller1: entered allmulticast mode [ 971.881710][ T2879] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 971.892608][ T2879] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 971.916941][ T2879] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 971.926719][ T2879] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 971.940292][ T2879] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 971.948047][ T2879] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 972.021637][ T3546] netlink: 'syz-executor.4': attribute type 298 has an invalid length. [ 972.032646][ T3546] __nla_validate_parse: 8 callbacks suppressed [ 972.032663][ T3546] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 972.178741][ T2888] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.199973][ T3536] lo speed is unknown, defaulting to 1000 [ 972.340988][ T2888] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.454174][ T2888] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.487157][ T3568] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 972.495977][ T2879] Bluetooth: hci3: command tx timeout [ 972.541435][ T3568] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 972.590098][ T2888] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 972.797668][ T3583] syzkaller1: entered promiscuous mode [ 972.821230][ T3583] syzkaller1: entered allmulticast mode [ 972.952707][ T3536] chnl_net:caif_netlink_parms(): no params data found [ 973.000285][ T2888] bridge_slave_1: left allmulticast mode [ 973.010313][ T2888] bridge_slave_1: left promiscuous mode [ 973.019776][ T2888] bridge0: port 2(bridge_slave_1) entered disabled state [ 973.032507][ T2888] bridge_slave_0: left allmulticast mode [ 973.039040][ T2888] bridge_slave_0: left promiscuous mode [ 973.044804][ T2888] bridge0: port 1(bridge_slave_0) entered disabled state [ 973.060338][ T2888] veth1_to_bond: left allmulticast mode [ 973.067112][ T2888] veth1_to_bond: left promiscuous mode [ 973.072844][ T2888] bridge2: port 1(veth1_to_bond) entered disabled state [ 973.090355][ T2888] tipc: Resetting bearer [ 973.362249][ T2888] tipc: Disabling bearer [ 973.629815][ T2888] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 973.638955][ T2888] bond_slave_0: left promiscuous mode [ 973.650913][ T2888] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 973.660560][ T2888] bond_slave_1: left promiscuous mode [ 973.668571][ T2888] bond0 (unregistering): (slave team0): Releasing backup interface [ 973.678812][ T2888] team0: left promiscuous mode [ 973.683607][ T2888] team_slave_0: left promiscuous mode [ 973.689872][ T2888] team_slave_1: left promiscuous mode [ 973.700038][ T2888] bond0 (unregistering): Released all slaves [ 973.714624][ T2888] bond1 (unregistering): Released all slaves [ 973.727064][ T2888] bond2 (unregistering): Released all slaves [ 973.805688][ T3596] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 973.831154][ T2888] tipc: Left network mode [ 973.982621][ T3609] sctp: [Deprecated]: syz-executor.2 (pid 3609) Use of int in max_burst socket option. [ 973.982621][ T3609] Use struct sctp_assoc_value instead [ 974.016245][ T2879] Bluetooth: hci2: command tx timeout [ 974.064748][ T3536] bridge0: port 1(bridge_slave_0) entered blocking state [ 974.073372][ T3536] bridge0: port 1(bridge_slave_0) entered disabled state [ 974.080847][ T3536] bridge_slave_0: entered allmulticast mode [ 974.089734][ T3536] bridge_slave_0: entered promiscuous mode [ 974.116298][ T3536] bridge0: port 2(bridge_slave_1) entered blocking state [ 974.123488][ T3536] bridge0: port 2(bridge_slave_1) entered disabled state [ 974.160957][ T3536] bridge_slave_1: entered allmulticast mode [ 974.181159][ T3536] bridge_slave_1: entered promiscuous mode [ 974.328669][ T3624] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 974.369025][ T3536] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 974.414136][ T3536] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 974.621749][ T3536] team0: Port device team_slave_0 added [ 974.644850][ T3627] syzkaller1: entered promiscuous mode [ 974.653029][ T3627] syzkaller1: entered allmulticast mode [ 974.693773][ T2888] hsr_slave_0: left promiscuous mode [ 974.701510][ T2888] hsr_slave_1: left promiscuous mode [ 974.711401][ T2888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 974.721465][ T2888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 974.729759][ T2888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 974.738183][ T2888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 974.773449][ T2888] veth1_macvtap: left promiscuous mode [ 974.780289][ T2888] veth0_macvtap: left promiscuous mode [ 974.786358][ T2888] veth1_vlan: left promiscuous mode [ 974.791863][ T2888] veth0_vlan: left promiscuous mode [ 975.408466][ T2888] team0 (unregistering): Port device team_slave_1 removed [ 975.451874][ T2888] team0 (unregistering): Port device team_slave_0 removed [ 975.859657][ T3536] team0: Port device team_slave_1 added [ 976.061008][ T3659] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 976.095218][ T2879] Bluetooth: hci2: command tx timeout [ 976.101481][ T3536] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 976.126595][ T3536] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 976.210128][ T3536] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 976.285070][ T3536] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 976.292110][ T3536] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 976.317744][ T3676] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 976.326561][ T29] audit: type=1804 audit(1718502638.157:104): pid=3674 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir376826474/syzkaller.VScyrr/267/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 976.368065][ T3536] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 976.398439][ T3676] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 976.417250][ T3676] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 976.444126][ T3673] geneve2: entered promiscuous mode [ 976.453516][ T3673] geneve2: entered allmulticast mode [ 976.606638][ T3676] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 976.728043][ T3536] hsr_slave_0: entered promiscuous mode [ 976.741763][ T3536] hsr_slave_1: entered promiscuous mode [ 976.770631][ T3536] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 976.781392][ T3536] Cannot create hsr debugfs directory [ 976.787497][ T3686] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 976.798117][ T3688] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 976.835568][ T3676] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 976.933637][ T2888] IPVS: stop unused estimator thread 0... [ 977.000245][ T3702] syzkaller1: entered promiscuous mode [ 977.010171][ T3702] syzkaller1: entered allmulticast mode [ 977.028365][ T3706] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 977.477312][ T3734] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 977.500304][ T3734] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 977.528555][ T3734] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 977.551479][ T3734] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 977.583326][ T3734] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 977.650882][ T3734] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 977.822458][ T3536] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 977.831469][ T3746] Bluetooth: MGMT ver 1.22 [ 977.853977][ T3536] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 977.898451][ T3536] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 977.956367][ T3536] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 978.001326][ T3760] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 978.017049][ T3761] syzkaller1: entered promiscuous mode [ 978.041435][ T3761] syzkaller1: entered allmulticast mode [ 978.175144][ T2879] Bluetooth: hci2: command tx timeout [ 978.358954][ T3536] 8021q: adding VLAN 0 to HW filter on device bond0 [ 978.380361][ T3780] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 978.459644][ T3536] 8021q: adding VLAN 0 to HW filter on device team0 [ 978.543357][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 978.550605][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 978.625439][T17987] bridge0: port 2(bridge_slave_1) entered blocking state [ 978.633175][T17987] bridge0: port 2(bridge_slave_1) entered forwarding state [ 978.836244][ T3802] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 978.850846][ T3804] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 979.197896][ T3536] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 979.273032][ T3818] syzkaller1: entered promiscuous mode [ 979.280558][ T3818] syzkaller1: entered allmulticast mode [ 979.411031][ T3536] veth0_vlan: entered promiscuous mode [ 979.431950][ T3536] veth1_vlan: entered promiscuous mode [ 979.501556][ T3536] veth0_macvtap: entered promiscuous mode [ 979.528611][ T3536] veth1_macvtap: entered promiscuous mode [ 979.592301][ T3536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 979.635370][ T3536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 979.654847][ T3536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 979.680164][ T3536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 979.692103][ T3536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 979.705040][ T3536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 979.717718][ T3536] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 979.728529][ T3536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 979.739126][ T3536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 979.749019][ T3536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 979.762708][ T3536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 979.772614][ T3536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 979.805002][ T3536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 979.820739][ T3536] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 979.831649][ T3536] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 979.861152][ T3536] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 979.907513][ T3536] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.920336][ T3536] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.930211][ T3536] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 979.941067][ T3536] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 980.256487][ T2879] Bluetooth: hci2: command tx timeout [ 980.379161][ T3869] syzkaller1: entered promiscuous mode [ 980.393409][ T3869] syzkaller1: entered allmulticast mode [ 980.501791][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 980.531985][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 980.694394][T31509] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 980.738917][T31509] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 980.772103][ T3900] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 980.954430][ T3908] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 980.980482][ T3908] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 981.003159][ T3913] tipc: Started in network mode [ 981.008673][ T3913] tipc: Node identity aaaaaaaaaa2a, cluster identity 4711 [ 981.016625][ T3913] tipc: Enabled bearer , priority 0 [ 982.015417][ T5166] tipc: Node number set to 8432298 [ 982.061116][ T29] audit: type=1800 audit(1718502643.917:105): pid=3931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1960 res=0 errno=0 [ 982.081230][ T3932] syzkaller1: entered promiscuous mode [ 982.111507][ T3932] syzkaller1: entered allmulticast mode [ 982.113609][ T29] audit: type=1800 audit(1718502643.917:106): pid=3931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1960 res=0 errno=0 [ 982.174056][ T29] audit: type=1800 audit(1718502643.917:107): pid=3931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1960 res=0 errno=0 [ 982.257986][ T29] audit: type=1800 audit(1718502643.927:108): pid=3931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1960 res=0 errno=0 [ 982.305171][ T29] audit: type=1800 audit(1718502643.927:109): pid=3931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1960 res=0 errno=0 [ 982.333556][ T29] audit: type=1800 audit(1718502643.927:110): pid=3931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1960 res=0 errno=0 [ 982.367705][ T29] audit: type=1800 audit(1718502643.937:111): pid=3931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1960 res=0 errno=0 [ 982.448906][ T29] audit: type=1800 audit(1718502643.937:112): pid=3931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1960 res=0 errno=0 [ 982.483184][ T3941] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 982.513763][ T29] audit: type=1800 audit(1718502643.937:113): pid=3931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1960 res=0 errno=0 [ 982.596503][ T3956] validate_nla: 3 callbacks suppressed [ 982.596521][ T3956] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 982.617294][ T3956] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 982.637871][ T29] audit: type=1800 audit(1718502643.937:114): pid=3931 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1960 res=0 errno=0 [ 982.676837][ T3945] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 982.724127][ T3962] pim6reg: entered allmulticast mode [ 982.757111][ T3962] pim6reg: left allmulticast mode [ 982.824203][ T3967] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 982.847337][ T3968] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 983.092043][ T3983] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 983.116837][ T3989] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 983.186876][ T3993] syzkaller1: entered promiscuous mode [ 983.205119][ T3993] syzkaller1: entered allmulticast mode [ 983.582405][ T4022] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.1'. [ 983.636412][ T4022] dccp_invalid_packet: invalid packet type [ 983.720754][ T4031] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 983.865702][ T4037] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 983.884118][ T4035] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 983.904198][ T4037] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 983.918247][ T4037] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 984.443602][ T4057] syzkaller1: entered promiscuous mode [ 984.464891][ T4057] syzkaller1: entered allmulticast mode [ 984.638473][ T4064] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 984.764705][ T4066] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 985.044237][ T4076] syzkaller1: entered promiscuous mode [ 985.085202][ T4076] syzkaller1: entered allmulticast mode [ 985.774888][ T4120] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 985.871467][ T4124] x_tables: duplicate underflow at hook 2 [ 985.915308][ T4126] x_tables: duplicate underflow at hook 2 [ 985.935509][ T2879] Bluetooth: hci2: command tx timeout [ 985.995488][ T4130] bridge0: port 1(bridge_slave_0) entered disabled state [ 986.116066][ T4130] bridge0: port 1(bridge_slave_0) entered blocking state [ 986.123288][ T4130] bridge0: port 1(bridge_slave_0) entered forwarding state [ 986.446764][ T4160] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 986.492030][ T4160] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 986.510917][ T4160] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 986.931995][ T4188] xt_TPROXY: Can be used only with -p tcp or -p udp [ 987.014818][ T4192] lo speed is unknown, defaulting to 1000 [ 987.832425][ T4226] xt_TPROXY: Can be used only with -p tcp or -p udp [ 987.975083][ T29] kauditd_printk_skb: 24 callbacks suppressed [ 987.975100][ T29] audit: type=1804 audit(1718502649.837:139): pid=4231 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2425742929/syzkaller.xSLoFu/49/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 988.134488][ T4237] bridge0: port 1(bridge_slave_0) entered disabled state [ 988.306045][T17740] bridge0: port 1(bridge_slave_0) entered blocking state [ 988.313214][T17740] bridge0: port 1(bridge_slave_0) entered forwarding state [ 988.329824][ T4247] x_tables: ip_tables: osf match: only valid for protocol 6 [ 988.763333][ T4264] __nla_validate_parse: 2 callbacks suppressed [ 988.763353][ T4264] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 988.864157][ T4272] IPVS: set_ctl: invalid protocol: 43 224.0.0.1:20000 [ 988.908344][ T4271] syzkaller1: entered promiscuous mode [ 988.926530][ T4272] xt_hashlimit: max too large, truncated to 1048576 [ 988.955143][ T4271] syzkaller1: entered allmulticast mode [ 989.024843][ T4273] lo speed is unknown, defaulting to 1000 [ 989.202014][ T4286] Cannot find del_set index 0 as target [ 989.431202][ T4290] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 989.502865][ T4297] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 989.825925][ T4302] xt_TPROXY: Can be used only with -p tcp or -p udp [ 989.972515][ T29] audit: type=1804 audit(1718502651.837:140): pid=4307 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir2425742929/syzkaller.xSLoFu/53/cgroup.controllers" dev="sda1" ino=1965 res=1 errno=0 [ 990.185403][ T4316] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 990.429311][ T4320] syzkaller1: entered promiscuous mode [ 990.434829][ T4320] syzkaller1: entered allmulticast mode [ 990.592536][ T4333] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 990.972887][ T4347] lo speed is unknown, defaulting to 1000 [ 991.184034][ T29] audit: type=1804 audit(1718502653.047:141): pid=4357 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1778012081/syzkaller.D1AIN8/1371/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 993.306815][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 1021.586399][ T5130] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 1021.613821][ T5130] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 1021.631268][ T5130] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 1021.649137][ T5130] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 1021.657032][ T5130] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 1021.664439][ T5130] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 1021.787394][ T5130] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 1021.796673][ T5130] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 1021.804586][ T5130] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 1021.812880][ T5130] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 1021.821820][ T5130] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 1021.830537][ T5130] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 1021.979645][ T2879] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 1021.990182][ T2879] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 1021.998566][ T2879] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 1022.007238][ T2879] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 1022.015722][ T2879] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 1022.023079][ T2879] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 1022.121372][ T2879] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 1022.132938][ T2879] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 1022.141949][ T2879] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 1022.150882][ T2879] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 1022.158544][ T2879] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 1022.165992][ T2879] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 1022.719091][ T5130] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 1022.743048][ T5130] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 1022.756391][ T5130] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 1022.764410][ T5130] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 1022.776045][ T5130] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 1022.783380][ T5130] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 1023.695630][ T5130] Bluetooth: hci5: command tx timeout [ 1023.945195][ T5130] Bluetooth: hci6: command tx timeout [ 1024.095553][ T5130] Bluetooth: hci7: command tx timeout [ 1024.256213][ T5130] Bluetooth: hci8: command tx timeout [ 1024.815169][ T5130] Bluetooth: hci9: command tx timeout [ 1025.775220][ T5130] Bluetooth: hci5: command tx timeout [ 1026.015059][ T5130] Bluetooth: hci6: command tx timeout [ 1026.175351][ T5130] Bluetooth: hci7: command tx timeout [ 1026.335142][ T5130] Bluetooth: hci8: command tx timeout [ 1026.904844][ T5130] Bluetooth: hci9: command tx timeout [ 1027.865068][ T5130] Bluetooth: hci5: command tx timeout [ 1028.105073][ T5130] Bluetooth: hci6: command tx timeout [ 1028.255542][ T5130] Bluetooth: hci7: command tx timeout [ 1028.415081][ T5130] Bluetooth: hci8: command tx timeout [ 1028.981739][ T5130] Bluetooth: hci9: command tx timeout [ 1029.935291][ T5130] Bluetooth: hci5: command tx timeout [ 1030.175101][ T5130] Bluetooth: hci6: command tx timeout [ 1030.345096][ T5130] Bluetooth: hci7: command tx timeout [ 1030.498173][ T5130] Bluetooth: hci8: command tx timeout [ 1031.064207][ T5130] Bluetooth: hci9: command tx timeout [ 1054.743309][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 1061.935324][ T2879] Bluetooth: hci4: command 0x0406 tx timeout [ 1072.175221][ T5130] Bluetooth: hci1: command 0x0406 tx timeout [ 1087.218000][ T2284] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 1087.232128][ T2284] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 1087.248902][T19713] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 1087.265616][ T4402] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 1087.277551][ T4402] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 1087.285867][ T4402] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 1087.293338][ T4402] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 1087.307155][ T4402] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 1087.310182][ T4403] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 1087.317830][ T4402] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 1087.322249][ T4403] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 1087.329592][ T4402] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 1087.345765][ T4402] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 1087.356600][ T4402] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 1087.364207][ T4403] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 1087.364891][ T4402] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 1087.380112][ T4402] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 1087.388004][ T4403] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 1087.538389][ T4403] Bluetooth: hci3: command 0x0406 tx timeout [ 1087.542699][ T4402] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 1087.553801][ T4402] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 1087.562039][ T4402] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 1087.570404][ T4402] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 1087.580133][ T4402] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 1087.587848][ T4402] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 1087.882942][T19713] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 1087.892547][T19713] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 1087.900781][T19713] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 1087.911575][T19713] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 1087.919556][T19713] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 1087.927802][T19713] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 1089.385192][T19713] Bluetooth: hci10: command tx timeout [ 1089.459388][T19713] Bluetooth: hci11: command tx timeout [ 1089.465652][ T4402] Bluetooth: hci12: command tx timeout [ 1089.615117][T19713] Bluetooth: hci13: command tx timeout [ 1090.019218][T19713] Bluetooth: hci14: command tx timeout [ 1091.458468][T19713] Bluetooth: hci10: command tx timeout [ 1091.535462][T19713] Bluetooth: hci11: command tx timeout [ 1091.541000][T19713] Bluetooth: hci12: command tx timeout [ 1091.695125][T19713] Bluetooth: hci13: command tx timeout [ 1092.095239][T19713] Bluetooth: hci14: command tx timeout [ 1093.535042][T19713] Bluetooth: hci10: command tx timeout [ 1093.615940][T19713] Bluetooth: hci12: command tx timeout [ 1093.616002][ T4402] Bluetooth: hci11: command tx timeout [ 1093.775091][ T4402] Bluetooth: hci13: command tx timeout [ 1094.175207][ T4402] Bluetooth: hci14: command tx timeout [ 1095.615130][ T4402] Bluetooth: hci10: command tx timeout [ 1095.700896][ T4402] Bluetooth: hci11: command tx timeout [ 1095.710949][T19713] Bluetooth: hci12: command tx timeout [ 1095.855181][T19713] Bluetooth: hci13: command tx timeout [ 1096.255185][T19713] Bluetooth: hci14: command tx timeout [ 1108.021077][T19713] Bluetooth: hci2: command 0x0406 tx timeout [ 1116.195297][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 1139.855874][ T30] INFO: task syz-executor.3:4347 blocked for more than 143 seconds. [ 1139.863897][ T30] Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 1139.885312][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1139.894024][ T30] task:syz-executor.3 state:D stack:25856 pid:4347 tgid:4345 ppid:31822 flags:0x00004006 2024/06/16 01:53:21 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 1139.904439][ T30] Call Trace: [ 1139.961228][ T30] [ 1139.964218][ T30] __schedule+0x17e8/0x4a20 [ 1139.985135][ T30] ? __pfx___schedule+0x10/0x10 [ 1139.990044][ T30] ? __pfx_lock_release+0x10/0x10 [ 1140.015207][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1140.020824][ T30] ? schedule+0x90/0x320 [ 1140.045129][ T30] schedule+0x14b/0x320 [ 1140.049511][ T30] schedule_preempt_disabled+0x13/0x30 [ 1140.063236][ T30] __mutex_lock+0x6a4/0xd70 [ 1140.075236][ T30] ? __mutex_lock+0x527/0xd70 [ 1140.079951][ T30] ? ip_tunnel_init_net+0x20e/0x710 [ 1140.095047][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 1140.100130][ T30] ip_tunnel_init_net+0x20e/0x710 [ 1140.115023][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 1140.120719][ T30] ops_init+0x359/0x610 [ 1140.134991][ T30] setup_net+0x515/0xca0 [ 1140.139282][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 1140.144845][ T30] ? __pfx_setup_net+0x10/0x10 [ 1140.165025][ T30] copy_net_ns+0x4e2/0x7b0 [ 1140.169512][ T30] create_new_namespaces+0x425/0x7b0 [ 1140.174816][ T30] ? bpf_lsm_capable+0x9/0x10 [ 1140.180049][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 1140.185891][ T30] ksys_unshare+0x619/0xc10 [ 1140.190421][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 1140.195760][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 1140.201860][ T30] ? do_syscall_64+0x100/0x230 [ 1140.214440][ T30] __x64_sys_unshare+0x38/0x40 [ 1140.219452][ T30] do_syscall_64+0xf3/0x230 [ 1140.224192][ T30] ? clear_bhb_loop+0x35/0x90 [ 1140.254283][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1140.260474][ T30] RIP: 0033:0x7fee1387cea9 [ 1140.275021][ T30] RSP: 002b:00007fee133ff0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 1140.283495][ T30] RAX: ffffffffffffffda RBX: 00007fee139b3f80 RCX: 00007fee1387cea9 [ 1140.291588][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068040200 [ 1140.299653][ T30] RBP: 00007fee138ebff4 R08: 0000000000000000 R09: 0000000000000000 [ 1140.307748][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1140.320303][ T30] R13: 000000000000000b R14: 00007fee139b3f80 R15: 00007fff4344a008 [ 1140.332020][ T30] [ 1140.344981][ T30] INFO: task syz-executor.2:4348 blocked for more than 143 seconds. [ 1140.353477][ T30] Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 1140.375142][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 1140.395021][ T30] task:syz-executor.2 state:D stack:28096 pid:4348 tgid:4346 ppid:3275 flags:0x00000006 [ 1140.414970][ T30] Call Trace: [ 1140.418407][ T30] [ 1140.421528][ T30] __schedule+0x17e8/0x4a20 [ 1140.435073][ T30] ? __pfx___schedule+0x10/0x10 [ 1140.439982][ T30] ? __pfx_lock_release+0x10/0x10 [ 1140.464958][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 1140.470483][ T30] ? schedule+0x90/0x320 [ 1140.474748][ T30] schedule+0x14b/0x320 [ 1140.484970][ T30] schedule_preempt_disabled+0x13/0x30 [ 1140.490506][ T30] __mutex_lock+0x6a4/0xd70 [ 1140.513646][ T30] ? __mutex_lock+0x527/0xd70 [ 1140.518516][ T30] ? vlan_ioctl_handler+0x112/0x9d0 [ 1140.523746][ T30] ? __pfx___mutex_lock+0x10/0x10 [