last executing test programs: 1m14.163413536s ago: executing program 4 (id=241): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000009c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r2, @ANYBLOB="83db32959126a60288df283d"], 0x28}}, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xff, 0x1ff, 0x7ff, 0x1, 0x1, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x0, 0x3}, 0x48) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, r3}, 0x48) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$qrtr(0x2a, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800020000001f0000000008000c"], 0x0, 0x0, 0xffffffffffffff8e, 0x0, 0x0, 0x0, '\x00', r5}, 0x90) (async) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '-.,$\'\''}, {0x20, 'nl80211\x00'}, {0x20, '\x00\'b\xbd\r\x00\x94\x87\x8b\xeb\xef\xf2\x88a\xb8\x1e\x1d\xfe\xc2\xb7.\x1di\f\xb2\x80\x18\x14\x87\xc0\xbb\xc8S\x9e\xc9\xfa|\x15U\x99\xbba\x0e\xeb\x05\xd34\v\x12\x83\xc7f\xb0a\xe4\xce\xba?O\x1f\x91\xcf\x93\xc0r5, 0x40, 0x7, 0x4, 0x6, {{0x9, 0x4, 0x1, 0x29, 0x24, 0x67, 0x0, 0xff, 0x29, 0x0, @local, @local, {[@ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @noop]}}}}}) setsockopt$MRT_ADD_VIF(r11, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x4, 0x81, 0x6, @vifc_lcl_ifindex=r12, @multicast2}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 1m2.636070587s ago: executing program 4 (id=241): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000009c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r2, @ANYBLOB="83db32959126a60288df283d"], 0x28}}, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xff, 0x1ff, 0x7ff, 0x1, 0x1, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x0, 0x3}, 0x48) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, r3}, 0x48) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$qrtr(0x2a, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800020000001f0000000008000c"], 0x0, 0x0, 0xffffffffffffff8e, 0x0, 0x0, 0x0, '\x00', r5}, 0x90) (async) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '-.,$\'\''}, {0x20, 'nl80211\x00'}, {0x20, '\x00\'b\xbd\r\x00\x94\x87\x8b\xeb\xef\xf2\x88a\xb8\x1e\x1d\xfe\xc2\xb7.\x1di\f\xb2\x80\x18\x14\x87\xc0\xbb\xc8S\x9e\xc9\xfa|\x15U\x99\xbba\x0e\xeb\x05\xd34\v\x12\x83\xc7f\xb0a\xe4\xce\xba?O\x1f\x91\xcf\x93\xc0r5, 0x40, 0x7, 0x4, 0x6, {{0x9, 0x4, 0x1, 0x29, 0x24, 0x67, 0x0, 0xff, 0x29, 0x0, @local, @local, {[@ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @noop]}}}}}) setsockopt$MRT_ADD_VIF(r11, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x4, 0x81, 0x6, @vifc_lcl_ifindex=r12, @multicast2}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 50.68285327s ago: executing program 4 (id=241): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000009c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r2, @ANYBLOB="83db32959126a60288df283d"], 0x28}}, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xff, 0x1ff, 0x7ff, 0x1, 0x1, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x0, 0x3}, 0x48) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, r3}, 0x48) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$qrtr(0x2a, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800020000001f0000000008000c"], 0x0, 0x0, 0xffffffffffffff8e, 0x0, 0x0, 0x0, '\x00', r5}, 0x90) (async) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '-.,$\'\''}, {0x20, 'nl80211\x00'}, {0x20, '\x00\'b\xbd\r\x00\x94\x87\x8b\xeb\xef\xf2\x88a\xb8\x1e\x1d\xfe\xc2\xb7.\x1di\f\xb2\x80\x18\x14\x87\xc0\xbb\xc8S\x9e\xc9\xfa|\x15U\x99\xbba\x0e\xeb\x05\xd34\v\x12\x83\xc7f\xb0a\xe4\xce\xba?O\x1f\x91\xcf\x93\xc0r5, 0x40, 0x7, 0x4, 0x6, {{0x9, 0x4, 0x1, 0x29, 0x24, 0x67, 0x0, 0xff, 0x29, 0x0, @local, @local, {[@ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @noop]}}}}}) setsockopt$MRT_ADD_VIF(r11, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x4, 0x81, 0x6, @vifc_lcl_ifindex=r12, @multicast2}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 37.227500929s ago: executing program 4 (id=241): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000009c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r2, @ANYBLOB="83db32959126a60288df283d"], 0x28}}, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xff, 0x1ff, 0x7ff, 0x1, 0x1, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x0, 0x3}, 0x48) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, r3}, 0x48) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$qrtr(0x2a, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800020000001f0000000008000c"], 0x0, 0x0, 0xffffffffffffff8e, 0x0, 0x0, 0x0, '\x00', r5}, 0x90) (async) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '-.,$\'\''}, {0x20, 'nl80211\x00'}, {0x20, '\x00\'b\xbd\r\x00\x94\x87\x8b\xeb\xef\xf2\x88a\xb8\x1e\x1d\xfe\xc2\xb7.\x1di\f\xb2\x80\x18\x14\x87\xc0\xbb\xc8S\x9e\xc9\xfa|\x15U\x99\xbba\x0e\xeb\x05\xd34\v\x12\x83\xc7f\xb0a\xe4\xce\xba?O\x1f\x91\xcf\x93\xc0r5, 0x40, 0x7, 0x4, 0x6, {{0x9, 0x4, 0x1, 0x29, 0x24, 0x67, 0x0, 0xff, 0x29, 0x0, @local, @local, {[@ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @noop]}}}}}) setsockopt$MRT_ADD_VIF(r11, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x4, 0x81, 0x6, @vifc_lcl_ifindex=r12, @multicast2}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 21.842752004s ago: executing program 4 (id=241): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000009c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r2, @ANYBLOB="83db32959126a60288df283d"], 0x28}}, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xff, 0x1ff, 0x7ff, 0x1, 0x1, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x0, 0x3}, 0x48) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, r3}, 0x48) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$qrtr(0x2a, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800020000001f0000000008000c"], 0x0, 0x0, 0xffffffffffffff8e, 0x0, 0x0, 0x0, '\x00', r5}, 0x90) (async) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '-.,$\'\''}, {0x20, 'nl80211\x00'}, {0x20, '\x00\'b\xbd\r\x00\x94\x87\x8b\xeb\xef\xf2\x88a\xb8\x1e\x1d\xfe\xc2\xb7.\x1di\f\xb2\x80\x18\x14\x87\xc0\xbb\xc8S\x9e\xc9\xfa|\x15U\x99\xbba\x0e\xeb\x05\xd34\v\x12\x83\xc7f\xb0a\xe4\xce\xba?O\x1f\x91\xcf\x93\xc0r5, 0x40, 0x7, 0x4, 0x6, {{0x9, 0x4, 0x1, 0x29, 0x24, 0x67, 0x0, 0xff, 0x29, 0x0, @local, @local, {[@ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @noop]}}}}}) setsockopt$MRT_ADD_VIF(r11, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x4, 0x81, 0x6, @vifc_lcl_ifindex=r12, @multicast2}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 9.069775881s ago: executing program 4 (id=241): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000009c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000000900000008000300", @ANYRES32=r2, @ANYBLOB="83db32959126a60288df283d"], 0x28}}, 0x0) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xff, 0x1ff, 0x7ff, 0x1, 0x1, 0xfffffff9, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x0, 0x3}, 0x48) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, r3}, 0x48) (async) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$qrtr(0x2a, 0x2, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800020000001f0000000008000c"], 0x0, 0x0, 0xffffffffffffff8e, 0x0, 0x0, 0x0, '\x00', r5}, 0x90) (async) r8 = socket$inet6_mptcp(0xa, 0x1, 0x106) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f00000003c0)={'#! ', './file0', [{0x20, '-.,$\'\''}, {0x20, 'nl80211\x00'}, {0x20, '\x00\'b\xbd\r\x00\x94\x87\x8b\xeb\xef\xf2\x88a\xb8\x1e\x1d\xfe\xc2\xb7.\x1di\f\xb2\x80\x18\x14\x87\xc0\xbb\xc8S\x9e\xc9\xfa|\x15U\x99\xbba\x0e\xeb\x05\xd34\v\x12\x83\xc7f\xb0a\xe4\xce\xba?O\x1f\x91\xcf\x93\xc0r5, 0x40, 0x7, 0x4, 0x6, {{0x9, 0x4, 0x1, 0x29, 0x24, 0x67, 0x0, 0xff, 0x29, 0x0, @local, @local, {[@ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @noop]}}}}}) setsockopt$MRT_ADD_VIF(r11, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x4, 0x81, 0x6, @vifc_lcl_ifindex=r12, @multicast2}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) 2.491439825s ago: executing program 2 (id=1464): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r1}, 0x10) ppoll(&(0x7f0000000180)=[{0xffffffffffffffff, 0xd3}, {r0}], 0x2, 0x0, 0x0, 0x0) 1.839902977s ago: executing program 0 (id=1474): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000100000000000000009500"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) (async) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000100000000000000009500"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00', r0}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000700)={0xffffffffffffffff, 0xe0, &(0x7f0000000600)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x3, 0x2, &(0x7f0000000340)=[0x0, 0x0, 0x0], &(0x7f0000000380)=[0x0, 0x0], 0x0, 0x46, &(0x7f00000003c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f00000004c0), &(0x7f0000000540), 0x8, 0xd7, 0x8, 0x8, &(0x7f00000005c0)}}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x9, 0x7465, 0x6, 0x2c, 0xffffffffffffffff, 0x7, '\x00', r3, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x5}, 0x48) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@bloom_filter={0x1e, 0x9, 0x7465, 0x6, 0x2c, 0xffffffffffffffff, 0x7, '\x00', r3, 0xffffffffffffffff, 0x3, 0x3, 0x0, 0x5}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_user\x00', 0x275a, 0x0) setsockopt$sock_attach_bpf(r4, 0x1, 0x2a, &(0x7f0000000100)=r6, 0x4) (async) setsockopt$sock_attach_bpf(r4, 0x1, 0x2a, &(0x7f0000000100)=r6, 0x4) sendmsg$inet(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="dde1b7928622", 0x6}], 0x1}, 0x0) sendmsg$unix(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000540)="8b", 0x1}], 0x1}, 0x0) (async) sendmsg$unix(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000540)="8b", 0x1}], 0x1}, 0x0) recvmsg(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) (async) recvmsg(r4, &(0x7f0000000500)={0x0, 0x0, 0x0}, 0x2) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000100000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) (async) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f00000000c0)={'pimreg1\x00', 0x2002}) ioctl$TUNSETCARRIER(r9, 0x400454e2, &(0x7f0000000040)) ioctl$TUNSETCARRIER(r9, 0x400454e2, &(0x7f0000000080)=0x1) close(r9) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r8}, &(0x7f0000000b00), &(0x7f0000000b40)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b80)={{r8}, &(0x7f0000000b00), &(0x7f0000000b40)}, 0x20) close(r7) r10 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000500)='syzkaller\x00', 0x30, 0xfffffe9c, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000400)='global_dirty_state\x00', r10}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r11, &(0x7f0000000180), 0x40001) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x14, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7020000000000018500000086000000b7080000000000007baaf8ff00000000b5080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000000000b70500000800000085000000b300000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.633334964s ago: executing program 0 (id=1477): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f00000016c0)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000000c0)="8252", 0x2}, {&(0x7f0000000140)="06", 0x1}], 0x2}}, {{0x0, 0x0, &(0x7f0000001540)=[{&(0x7f0000000280)="01a5d5", 0x3}], 0x1}}], 0x2, 0x6400c000) sendto$inet6(r0, &(0x7f0000000300), 0x2, 0x0, 0x0, 0xfffffffffffffdfd) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f00000002c0)={'veth1_vlan\x00', &(0x7f0000000280)=@ethtool_channels={0x3d}}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x0, 0xf, &(0x7f0000000940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}}, 0x0}, 0x90) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r3}, 0x10) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) r4 = socket(0x0, 0x2, 0x3a) connect$inet6(r4, 0x0, 0x0) sendmsg$NL80211_CMD_SET_STATION(r4, &(0x7f0000000240)={&(0x7f0000000000)={0xa}, 0xc, 0x0}, 0x0) socket(0x2, 0x0, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000240), 0xfecc) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r6, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) 1.50718054s ago: executing program 2 (id=1480): bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000500)={0xffffffffffffffff, 0xe0, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000000)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x3, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0], 0x0, 0xc4, &(0x7f00000002c0)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f0000000340), &(0x7f0000000380), 0x8, 0xa, 0x8, 0x8, &(0x7f00000003c0)}}, 0x10) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', r0}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000640)={0x6, 0x2000000000000054, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x2}, 0x8}, 0x90) r3 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r3, 0x29, 0x1b, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_RTOINFO(r3, 0x84, 0x0, &(0x7f0000000540)={0x0, 0x2, 0x8, 0x28eb}, &(0x7f0000000580)=0x10) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r2}, 0x57) 1.325654687s ago: executing program 0 (id=1482): socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) socket$inet_udp(0x2, 0x2, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_emit_ethernet(0x7e, &(0x7f0000000440)={@local, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "e90e5b", 0x9, 0x11, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @empty, {[], {0x0, 0x0, 0x48, 0x0, @wg=@cookie={0x3, 0x0, "c3782372d14ed68f51f7ffffffffffffffe6730c1a37e9ca", "be37c3b90bd4384ca6d1f28f62f4ea4038379bd30212638851220306e6e42ebb"}}}}}}}, 0x0) 1.319167002s ago: executing program 3 (id=1483): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={0x0, 0x7e}, 0x1, 0x8000a0ffffffff, 0x0, 0x40}, 0x40000080) socket(0x10, 0x80002, 0x0) (async) r1 = socket(0x10, 0x80002, 0x0) sendmmsg$alg(r1, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="5c0000001000000100"/20, @ANYRES32=0x0, @ANYBLOB="000000005a1760481235bc980cf7f5006d6163766c616e002c000280060002000140"], 0x5c}, 0x1, 0x0, 0x0, 0x4000}, 0x4004810) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), 0xffffffffffffffff) r2 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)={0xffffffffffffffff}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000440)='jbd2_submit_inode_data\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000440)='jbd2_submit_inode_data\x00', r4}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[], 0x24}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x12, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8}, @NFTA_SET_EXPR={0x8, 0x9, 0x0, 0x1, @counter={{0xc}, @void}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x74}}, 0x0) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg$unix(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r10 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYRES8, @ANYRES8], 0x20}, 0x1, 0xc00000000000000, 0x0, 0x17407b1904b30852}, 0x48800) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) (async) bind$bt_hci(0xffffffffffffffff, 0x0, 0x0) write$binfmt_misc(r10, &(0x7f0000000640)=ANY=[@ANYRES32=r2, @ANYRESHEX=r3], 0xd) (async) write$binfmt_misc(r10, &(0x7f0000000640)=ANY=[@ANYRES32=r2, @ANYRESHEX=r3], 0xd) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) 1.312473385s ago: executing program 2 (id=1484): connect$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000011c0)={'vxcan0\x00'}) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, 0x0, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000240)={'vxcan0\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0xf00, &(0x7f0000000000)={&(0x7f0000000500)=@ipv4_newroute={0x1c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}, 0x1c}}, 0x0) 1.220352519s ago: executing program 0 (id=1485): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x8, 0xc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000", @ANYRES32=r0, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket(0x2000000000000021, 0x2, 0x10000000000002) connect$rxrpc(r3, &(0x7f0000000140)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x24) sendmmsg(r3, 0x0, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f0000001880)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffd2d}}], 0xf000, 0x10002, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_CREATE(r4, 0x0, 0x10) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$sock_int(r5, 0x1, 0xf, 0x0, &(0x7f00000020c0)) socket$vsock_stream(0x28, 0x1, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) socket$inet6_sctp(0xa, 0x1, 0x84) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) mmap(&(0x7f000007e000/0x2000)=nil, 0x2000, 0x1, 0x10, r6, 0x0) r7 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25DELUID(r7, 0x89e2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x12, 0x8, &(0x7f0000000740)=@framed={{}, [@tail_call={{}, {}, {0x85, 0x0, 0x0, 0x31}}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x34, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r8, &(0x7f0000000100)={0x0, 0x6000000, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r9, 0xb0b}, 0x14}}, 0x0) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r3, &(0x7f0000000480)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x24004000}, 0x80000) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x54}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.empty_time\x00', 0x275a, 0x0) 1.18111488s ago: executing program 1 (id=1486): unshare(0x22020400) r0 = accept$netrom(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @bcast}, [@null, @default, @remote, @remote, @default, @netrom, @netrom, @rose]}, &(0x7f0000000080)=0x48) getpeername$netrom(r0, &(0x7f00000000c0)={{0x3, @bcast}, [@bcast, @rose, @remote, @netrom, @netrom, @bcast, @bcast]}, &(0x7f0000000140)=0x48) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000009c0)={0x28, r2, 0x1, 0x0, 0x0, {{0x9}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f00000009c0)={0x28, r2, 0x1, 0x0, 0x0, {{0x9}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x28}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xff, 0x1ff, 0x7ff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x0, 0xe}, 0x48) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0xff, 0x1ff, 0x7ff, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x4, 0x0, 0xe}, 0x48) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, r4}, 0x48) (async) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000240)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, r4}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6gre0\x00'}) (async) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'ip6gre0\x00', 0x0}) r7 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) r9 = socket$inet(0x2, 0x4, 0x101) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r7, 0x89f3, &(0x7f0000000200)={'syztnl1\x00', &(0x7f00000002c0)={'gre0\x00', r6, 0x40, 0x7, 0x4, 0x6, {{0x9, 0x4, 0x1, 0x29, 0x24, 0x67, 0x0, 0xff, 0x29, 0x0, @local, @local, {[@ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @ra={0x94, 0x4}, @noop]}}}}}) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x4, 0x81, 0x6, @vifc_lcl_ifindex=r10, @multicast2}, 0x10) (async) setsockopt$MRT_ADD_VIF(r9, 0x0, 0xca, &(0x7f0000000340)={0x0, 0x4, 0x81, 0x6, @vifc_lcl_ifindex=r10, @multicast2}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) recvfrom$inet(0xffffffffffffffff, &(0x7f0000000840)=""/4096, 0x1000, 0x2000, &(0x7f0000000140)={0x2, 0x0, @rand_addr=0x64010102}, 0x10) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES32=0xee01], 0xb8}}, 0x0) (async) sendmsg$nl_xfrm(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYRES32=0x0, @ANYRES32=0xee01], 0xb8}}, 0x0) r11 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_IPV6_PKTINFO(r11, 0x29, 0x8, 0x0, 0x0) 1.019036684s ago: executing program 2 (id=1487): socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4a, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x28, 0x1, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r2, 0x6, 0x7, 0x0, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0x1c, 0x0, &(0x7f00000000c0)) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) connect$packet(r1, &(0x7f0000000100)={0x28, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) connect$packet(r1, &(0x7f0000000000)={0x28, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = socket(0x0, 0x0, 0x0) close(0xffffffffffffffff) socket$vsock_stream(0x28, 0x1, 0x0) recvmmsg(r2, 0x0, 0x0, 0x40002062, 0x0) accept$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) socket$inet(0x2, 0x4, 0x8003) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x10160, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) writev(r4, &(0x7f0000000400)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f31000000170a001700000000040037000900030001372564b758b9a64411f6bb744dc48f57", 0x39}], 0x1) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0x7, 0x9, 0x2, 0x9, 0x42, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x4, &(0x7f0000000240)={{r5}, &(0x7f0000000180), &(0x7f00000001c0)}, 0x20) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=ANY=[@ANYRES64=0x0, @ANYRESOCT=r2], 0xac}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r3, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00'}) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'bridge0\x00'}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 965.198144ms ago: executing program 0 (id=1488): socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff}) sendmmsg$unix(r0, &(0x7f00000bd000), 0xb7f5b3415ab51da5, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x3, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x80}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x278, 0x98, 0x8, 0xfa04, 0x98, 0x6c02, 0x1e0, 0x194, 0x194, 0x1e0, 0x194, 0x3, 0x0, {[{{@ip={@broadcast, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'batadv_slave_0\x00'}, 0x0, 0xe0, 0x148, 0x0, {}, [@common=@unspec=@helper={{0x48}, {0x0, 'amanda\x00'}}, @common=@unspec=@connlabel={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) sendmsg$rds(r2, &(0x7f0000001e40)={&(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10, 0x0, 0x0, &(0x7f0000001cc0)=[@rdma_args={0x48, 0x114, 0x1, {{}, {&(0x7f00000014c0)=""/40, 0x28}, &(0x7f0000004500)=[{&(0x7f0000000c40)=""/194, 0xc2}, {&(0x7f0000000d40)=""/134, 0x86}, {&(0x7f0000000e00)=""/227, 0xe3}, {&(0x7f0000000580)=""/94, 0x5e}, {&(0x7f0000000f00)=""/192, 0xc0}, {&(0x7f0000000fc0)=""/64, 0x40}, {&(0x7f0000001000)=""/91, 0x5b}, {&(0x7f0000001100)=""/90, 0x5a}, {&(0x7f0000001180)=""/193, 0xc1}, {&(0x7f0000001280)=""/90, 0x5a}, {&(0x7f0000002440)=""/4096, 0x1000}, {&(0x7f0000003440)=""/4096, 0x1000}, {&(0x7f0000001300)=""/19, 0x13}], 0xd, 0x20}}], 0x48, 0x80000}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000a40)=ANY=[@ANYBLOB="50000000020601080000000000000000000000000c0007800800000005000400000000000900020073797a31000000000900020073797a3000000000"], 0x50}}, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$inet6(0xa, 0x3, 0x1) setsockopt$inet6_IPV6_HOPOPTS(r4, 0x29, 0x6, 0x0, 0x1000000) 897.296239ms ago: executing program 3 (id=1489): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socket$packet(0x11, 0x2, 0x300) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001880)=ANY=[@ANYBLOB="10020000", @ANYRES16=0x0, @ANYBLOB="210300000000000000003b00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x210}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000680)=ANY=[@ANYRES32, @ANYRES16=r3, @ANYBLOB="011228057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x0) setsockopt$SO_VM_SOCKETS_CONNECT_TIMEOUT_OLD(0xffffffffffffffff, 0x28, 0x6, &(0x7f0000000080)={0x0, 0xea60}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000200)={0x28, 0x0, 0x0, @host}, 0x10) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000000)={0x28, 0x0, 0x0, @my=0x0}, 0x10) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @host}, 0x10) getsockopt$packet_int(0xffffffffffffffff, 0x107, 0xb, &(0x7f0000000000), &(0x7f0000000040)=0x4) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000003100)={@ifindex, 0xffffffffffffffff, 0x11, 0x10, 0xffffffffffffffff, @prog_fd}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000240)={'syztnl1\x00', &(0x7f00000001c0)={'syztnl0\x00', 0x0, 0x2f, 0x6e, 0x1, 0x2fb, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x15}}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x80, 0x800, 0xe5b}}) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="b700000081780000bfa30000000000000703000000feffff720af0fff8ffffff71a4f0ff0000000071103b00000000001d400500000000004704000001ed00000f030000000000001d440000000000006b0a00fe000000007203000000000000b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f1a864a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afc0513466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea01d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a07f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a126a1bdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccdd9069bd50b994fda7a9de44028d6112a0d5d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f10bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad2a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c8785fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca48568325b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec86a4555d89fe0120f64c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d00b07862c4fbba468df3e1b393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52c094016406cdd32abf77fea373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515dca8811922929e08538fab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00000000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd5e59c84f4ab279b1b99c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f57cbc05cd897f40693ec427ea71578130cde48de3b4dda0c7b615b57ccd4f8ac729a80f891d91a89d967948b9d95b1f22480ab48969e86b854a8c17f3e264ce11f9f63552364e759eec94572f2f7b0e2f293573d0b80709815f4344f908c00"/2646], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x20, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18cedec4287b0040000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000001500)=ANY=[@ANYBLOB="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"], &(0x7f0000000740)=""/105, 0x42, 0x69, 0x1}, 0x20) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000008c0)={r5, 0x0, 0x14, 0x0, &(0x7f00000006c0)="f6f4e9a1d78ad62ceef1884366a578bb3fb7dbfc", 0x0, 0x0, 0x0, 0x9, 0x0, &(0x7f0000000240)="482eadffffffffffff", 0x0}, 0x50) setsockopt$packet_add_memb(0xffffffffffffffff, 0x107, 0x1, &(0x7f0000000000)={0x0, 0x1, 0x6, @multicast}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x6e, &(0x7f0000001640)=ANY=[@ANYRESHEX], 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="00e7ff0000000000140003007465616d5f736c6176655f300000000008000a"], 0x3c}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0xd, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bf8100000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018210000", @ANYRES32=r0, @ANYBLOB="0000000002000000b70500000800000085000000aa00000095"], &(0x7f0000000300)='GPL\x00', 0x9, 0x1002, &(0x7f00000004c0)=""/4098}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) 760.149251ms ago: executing program 1 (id=1490): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x20, 0x1, 0x170, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200006c0], 0x0, 0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"]}, 0x17d) write$binfmt_script(r0, &(0x7f0000000000), 0xfea7) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x40000080806, 0x0) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, 0x0}, 0x0) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000080)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x3c, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_ECN={0x8}]}}]}, 0x3c}}, 0x0) r2 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000200)=@newqdisc={0x44, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x14, 0x2, [@TCA_CAKE_OVERHEAD={0x8}, @TCA_CAKE_ATM={0x8}]}}]}, 0x44}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r5, 0x0, 0x80, &(0x7f0000000640)=@broute={'broute\x00', 0x7001, 0x1, 0x170, [], 0x0, 0x0, 0x0}, 0x1e8) 655.104988ms ago: executing program 3 (id=1491): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x19, 0xc, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000a6cd0000756c6c25000000000020580346e8297eec2f11a6921c4b81ac20207b1af8ff00000000bfa100000000000007010000f8ffffffb7020000080000700000008500000007000000950000000000000000000000a1"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001b40)={&(0x7f0000000100)='jbd2_handle_stats\x00', r0}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000001740)=ANY=[@ANYBLOB="b702000000000000bfa300000000000007030000ffffffff7a0af0fff8ffff5979a4f0ff00000000b7060000ffffffff2d6405000000000065040400014741001404000001007d60b7030000000000006a0a00fe40000900850000001f000000b70000000004000095000000000000006623848adf1dc9a764ab51a064e0ff0c9b27a26293fddf0180000071ff31f1622271d5518193e09483c5a020c334f8c76334d8ce8303b01ddaa52e8756ad60a07d6f27c125e16e024098f755d8583da60f27c162dbba0700002ac9170f50f2568836077b7f711a18ebf608d87b885297b6a79819782748b376358c33c9f53bfd989b1ca58949a54d5827df14feecea46408a05d572077f1252fbb72c3d099c501bc4ded6fca17a3447222c95edb47b77aafa63b9dd5fa5c53e9c37251709f1ff7f0000067cf7f53ce129a9ecd3b4dd15100f2b450f98526a0d8cac7c97fc2f64015306a1bd7e43fe1ca8345710fb6379b4c53cf55eefb4c0974486a8d25a363adbd83b49e13fbd1777b27020bd9b8cff3f48c9411670c34f23ab8caf7851b290feb3045a1b622f20c4383a0280f040de7667f8b1d08428353b1c358ebe73af41e5b5b9242754b1749289b44e9728e7a73f148ac8206afe120c1437490d99000000110000fdffffffffffffffaf580278e1342aabd1b623f6c4f128858e4eb6b42f2173184c2b99b645f6ec0e14e5d7c95a0008000000f30f6c0000000000ff0000b8f5001a1d2a34dc0973ec302bc23211d3e3b6e6dad65a51e5497a3419cecec38126247b27113ad4c7915c8f82c333a7b350802f0311807010d1ed50c18411aa6900daccc02f4ba4b078f07e41f781eee222c7d071d5a94d82ca9a0846c1af59cee16639b4970f8f0a82c6a712fd5722d637d406160ffaffffffb4e0bde6749aa52c408b74251914c5d3255fd88a42e7ebb69ebcd8eee623e51dbb1f1b548c91a6825c0686fdc16be1cbb72c217fda18bd746253ca66093daf35923300b600000013887ad6d2d440fedce51a3aa57b00ac376e0a4649a8a84e1d293a6b109c5e59b466bca5cc3d936c53d4a48c05099e6fc36d5aa23bff8cce0600fcff00000300a568a8532623d12b40b50ac26f2e8255470a04bfbe7acb581b90991d965a01d1f84cb6b973558e1e3f8118c77ccf0b3c6eb6443870004da10c75723b65f83769ad1f0e4ef6b9ef1cec23264fd8fdac6264af1cb467020bdc12b797b6c156c439105829d2ae1c45f7cfa40df68fd36a03353a55e68ec7c01bd5a2028a8fc107007f3deb1f200abe1f753754678dae8b4e3ba3d086d4b95dfc5817e3dafae2d38b522f942cc750399d90296171fdb1e05882f8a4b8fbd219ccac3a895828b4f22b6527ce31ceb02b7b2b44925129677b7b3d2f8e7792c7827862eae80134552f0b076b168394f8417f25cc82ae04007193cbe60900bf35e4bebd15412426b2e20ab1f05fc44ae9ae094c1b81d3ef947692b44d2afb09c7498d357836f03e8a7c392e535694a3ead2de11e6b1781e2a018c0ada7bc7f0eb2d678f23c07ac341fda2e563ee95085742f5fee9f95f4741b226e428d20b00bc140000e4b2f5efd0a0b1ceba000830ba8634b5aa26bdbe91614e92fae3c7349531df9bf4c01ebf5d8eb7d53e5f30647661623fbdb3f60033fc32f68ea86a2df1e76fe27dfdff1cf9194849c4cc0da9533e5983693e526a7dc0d8728f3b573ca4427bdb44df9341e9b8050e896598a156c935c800436a312e7ae3c011e46851ac599f0427729ab9c55ae0ab4c000000000000c1eaf0f34cb05ab03943510000000000000000c87bcc2ac5aed9247b51d92e0993af4beaf1f3f47dcdfab9165f98155d93e383d6b85158b54675c1585037508c1e9461a1c3d1a6e2402045cae150a7016f1a90716eebbdf6afc4414d900be0bdf19f4a273f44f4357380b4387f1c8b104f0e406b2f04e5ed88631be6411f9927fe9f83412b7c5a676ceec8b454ebf6481c98e86b6933a02daea0b4ec0be5b3d916bd70208b4588626c277648475002e2c62681bd07331422a6e47bbd40857d52c4894944fae5c500000000000000ff00000000de784314b8fd419216b48d0f353c11ae185749fa9ac7dfa16bc5c23a23f74b17a7f1b2d799480f33faa3537a910d6ca02f48b0e69beb1119f106ea59195dbc72e17a5dc8c3d131d82f067e29dc39665dff39fb6347b374aaaf6e65efde3fc6202bf29ccfcb08caf18d668a462493aa82e76affba9c9af31d1c23237aa6eccfadfaf794bb1004c07b21ac36f8859c7d5444c12bd05fea3561b86b2838a8de5b4f91d6aba95dc9f4464a024be4d0d8d04f5023e7e19e503624d39a43c7b310de519b40738ff9a623065c06d69d16d4a46ff300022fee47803989b7e916254e0fb9e1c8b07d8a4b8b692a75a32e6ed2caeaa7c258c47fe6143cd9e90b801eff78cd4e402374e0e4ca07b7f17254e3d2f0a2a1bac6fde8a15e3ef3588065524d41966fb3915e804c53201efee7417ef02684d23d9008bdf046f55c030ab941a0b8723412127efb3eac0ccf68133c76770d5e7dabcc48d4768540c540535ed70df75c24660d85f9c9a245185c7da217d1c3743db85db67b9b8a8f00af02367429f6f0b53c169c4356751bf68745dbde055e1722ae256ae53ae637a1431855d16dfa91d82a021a4b2dbb50bf6d59fdd0c9bc84cd7d544de2523b6ce8aaeb94bfba75079f7455204ccca03bd389d8409b2effe9b88e301ac4fe28752386a0678a3f54b2bdf56f927ddd6b0ac98b2b505f668597455ada51ba95ab852b49373a11ff31dcd82474b51498f65e0601bcdd23acb4c01bcd2f3e1ad378d14c07d923087d3518369710b70ffb0b523dc4f00f275c381fe1c091e478b04d5e4a9f75b4072acb005a83c25625ab7a351a68977177e27a1bf112114eb10250c2b9dca234f8967f0439696a2345e747b5f1d8c4bec86d8e8f2eb121ea0159615e7d475d45837921c2c0c3f9e683ac8000214a657c9f0a000000000000009e0b1a8c8f55f30e7c25275ed49b71828b375be03ef903cc8244b1269376d01b674cff9cb82eef0fe55c8b751053004ca601008d9a52c3771e9c73d03fdf74f48306560fb6cd86658afa895efa47f3a43e686df5b727ba4ec99620270334fce56c9f86b8a2c8aaede5a48a29b75734fbe1f59e43dc5a39b083848b0ebb14d845df7606e4d58f1a03f2dd337c3a10f3b15d388e43059aa88b42d26d4ccda6d60f996ed444d7f40e0cdbf69e11252a6c0e2d882d93b4f22dc95a191b1e6ff59d7880b4ce587f7ef05c46088268805cf089c4b3cd60cd3fc0c6d81fb2f961abcb0133f3f7a594b8475d6853b2e4fafc52a6851e8cfe1aebe3a4539634a535f8ac496793001c1a4b26216d1cd382c1e6a15697ef0a9b26474e1dbfa422e952b0f742ef52388584673f6333299042099aa073c152e1b61851a4519fe67e47f1446bb7b80b804b1b4503df784c8604bf26578b1fa7dce5313ecdf297cc63bf2b472f8f56bebeec16dc5fa22ee9c3c304d6629db7215eebfbd480c4ac6be1093ee5789f44b13e22b7ec0bede71caa71702a8bd83f31dcea1579ea730fd55098cade134d39652c42279c451edbb4eaae1e094ec599eeb275760e36fdd52ea3eece13af08227ba090dc3333749f3d580157f8b06efb793db962c9ff49c6c75a9524cef6b912"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000300)={r3, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x48, 0x0, 0x0, 0x0, 0xffffffffffffff37, 0x0, 0x8, 0x0, 0x0}}, 0x10) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r4}, 0x4) mmap$xdp(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x4, 0x80138, r2, 0x100000000) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) r6 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r6, &(0x7f0000000100)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x2c, 0x68, 0x1, 0x0, 0x0, {}, [@NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8, 0xc001}}, @NHA_OIF={0x8, 0x5, r7}]}, 0x2c}}, 0x0) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r5, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x940e, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r8}, 0x48) unshare(0x4000400) pipe(&(0x7f0000000040)={0xffffffffffffffff}) sendfile(r10, r9, 0x0, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000001c0)={r9, &(0x7f0000000080), &(0x7f0000000180)=""/35, 0x2}, 0x20) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$EXT4_IOC_GROUP_ADD(r12, 0x40286608, &(0x7f0000000000)={0x7ffc0003}) socket$nl_generic(0x10, 0x3, 0x10) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0xe4, 0x16, 0xa, 0x5, 0x0, 0x0, {0x3}, [@NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK={0x8c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x68, 0x3, 0x0, 0x1, [{0x14, 0x1, 'macsec0\x00'}, {0x14, 0x1, 'ipvlan0\x00'}, {0x14, 0x1, 'ip6tnl0\x00'}, {0x14, 0x1, 'bond0\x00'}, {0x14, 0x1, 'xfrm0\x00'}]}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x9}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x10000}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_FLOWTABLE_HANDLE={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x10c}, 0x1, 0xe00}, 0xc000) r14 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000c00), 0xffffffffffffffff) ioctl$sock_inet_SIOCSIFBRDADDR(r11, 0x891a, &(0x7f00000003c0)={'vxcan1\x00', {0x2, 0x4e23, @rand_addr=0x64010102}}) ioctl$sock_SIOCGIFINDEX_80211(r14, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000140)={r11, 0x0, 0x4, 0x3c80000000000}) 643.971524ms ago: executing program 2 (id=1492): r0 = socket(0x10, 0x803, 0x0) getsockname$netlink(r0, &(0x7f0000000000), &(0x7f0000000040)=0xc) r1 = socket$inet(0x2, 0x0, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x10000000013, &(0x7f0000d06000)=0x1, 0x4) setsockopt$inet_opts(r1, 0x0, 0x4, 0x0, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x0, @dev}, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2e, &(0x7f0000000100)={0x9, {{0x2, 0x4, @multicast2}}, {{0x2, 0x0, @private=0xa010100}}}, 0x108) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x2, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000016020500001b48013d030100000000009500000000000000bc26000000000000bf67000000000000070200000f4741006702000003000000360600000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a83683d58719d72183f2cb7f43dd55788be820b236dcb695dbfd73"], &(0x7f0000000100)='GPL\x00'}, 0x90) setsockopt$inet_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f0000000040), 0x7e59cc905af7f3f8) r4 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r4, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000118110000", @ANYRES16=r4, @ANYRESOCT=r3], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000180), 0xd000) sendfile(r5, r6, &(0x7f0000000240), 0x700) setsockopt$inet_MCAST_MSFILTER(r4, 0x0, 0x30, &(0x7f00000012c0)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000100000002"], 0x110) setsockopt$inet_group_source_req(r4, 0x0, 0x2e, &(0x7f00000004c0)={0x2, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @broadcast}}}, 0x108) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) accept4$llc(r7, 0x0, &(0x7f00000001c0), 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x12, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000001000000000000000000352600"/30], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000780)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00}, 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b}, 0x48) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) ioctl$BTRFS_IOC_DEFRAG_RANGE(0xffffffffffffffff, 0x40309410, 0x0) sendmsg$xdp(0xffffffffffffffff, &(0x7f0000000a80)={&(0x7f0000000340), 0x10, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x0) 540.030471ms ago: executing program 1 (id=1493): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff), 0x0, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0xd, &(0x7f0000000140), &(0x7f0000000180)=0x8) 440.050143ms ago: executing program 3 (id=1494): r0 = socket$inet(0x2, 0x0, 0x4) setsockopt$SO_TIMESTAMP(r0, 0x1, 0x3f, &(0x7f0000000080)=0x1, 0x4) (async) bind$inet(r0, &(0x7f0000000480)={0x2, 0x4e23, @multicast1}, 0x10) (async) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000000000)={0x2, 0x24e23, @loopback}, 0x10) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x15, &(0x7f00000003c0)=@raw={'raw\x00', 0x4001, 0x3, 0x208, 0x180, 0x0, 0x148, 0x0, 0x148, 0x218, 0x240, 0x240, 0x218, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) (async) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x400000000010, 0x90f480666821ced4, 0x0) (async) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r1, &(0x7f0000000040), 0x10) (async) sendmsg$can_bcm(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x1, 0x0, 0x0, 0x4040000}, 0x20000001) (async) sendmsg$can_bcm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000a00)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x58) (async) r4 = accept(r3, 0x0, 0x0) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=ANY=[], 0x14}}, 0x0) accept$alg(0xffffffffffffffff, 0x0, 0x0) (async) r5 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) ioctl$SIOCAX25DELUID(r5, 0x89e2, &(0x7f0000000180)={0x3, @default}) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x4045) (async) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x16, 0xb, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000700000000000000000000001801000020786c2500000000002000207b1af8ff00000000bfa100000000000007010000f8ffff7fb702000008000000b703000000000000850000008a0000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async) r7 = socket$qrtr(0x2a, 0x2, 0x0) bind$qrtr(r7, &(0x7f0000000040)={0x2a, 0x1, 0xfffffffe}, 0xc) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r6, 0x8933, &(0x7f0000000340)) 372.924031ms ago: executing program 1 (id=1495): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0, 0x0, 0x0, 0x0, 0x8}}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0xff7, &(0x7f0000001e00)=""/4087}, 0x90) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r1, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000040)={0xa}, 0x1) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r1, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r1, 0x84, 0x15, &(0x7f0000000080), 0x1) sendto$inet6(r1, &(0x7f0000000500)="a4", 0xffe0, 0x4c, &(0x7f0000000100)={0xa, 0x4e23, 0xfc, @loopback}, 0x1c) pipe(0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000180)={'vxcan0\x00', 0x0}) sendmsg$can_raw(0xffffffffffffffff, &(0x7f0000000540)={&(0x7f00000001c0)={0x1d, r2}, 0x10, &(0x7f00000004c0)={&(0x7f00000003c0)=@can={{0x20, 0x0, 0x1, 0x1}, 0x0, 0x0, 0x0, 0x0, "d1a0398a6be02a7a"}, 0x10}}, 0x20000000) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$TIPC_NL_BEARER_ENABLE(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000200)={0x68, r4, 0x1, 0x0, 0x0, {}, [@TIPC_NLA_BEARER={0x14, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xe, 0x1, @l2={'eth', 0x3a, 'vlan0\x00'}}]}, @TIPC_NLA_SOCK={0x40, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_REF={0x8}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x7fff}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0xd128}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x100}, @TIPC_NLA_CON_NODE={0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x3}]}, @TIPC_NLA_SOCK_REF={0x8}]}]}, 0x68}}, 0x0) 263.514999ms ago: executing program 1 (id=1496): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], 0x0}, 0x90) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f00000002c0)='bdi_dirty_ratelimit\x00'}, 0x10) r1 = gettid() r2 = socket$kcm(0xa, 0x2, 0x88) sendmsg$kcm(r2, &(0x7f0000000280)={&(0x7f00000001c0)=@in={0x2, 0x4e23}, 0x80, 0x0, 0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0400"/16], 0x10}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000380)={r1, r0, 0x0, 0x1, 0xfffffffffffffffe}, 0x42) socket$alg(0x26, 0x5, 0x0) socket$inet(0x2, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x77) r5 = accept$alg(r4, 0x0, 0x0) sendmmsg$alg(r5, &(0x7f0000001140), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='freezer.parent_freezing\x00', 0x7a05, 0x1700) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x1, 0x10, r5, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x12) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_COALESCE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000004c0)={0x24, r7, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x24}, 0x1, 0x6c00}, 0x0) r10 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r10, 0x0, 0x8, &(0x7f00000002c0)={0x0, @empty, @multicast2}, &(0x7f0000000280)=0xc) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x1a, 0x5, &(0x7f00000000c0)=@framed={{}, [@ldst, @ldst]}, &(0x7f0000000000)='syzkaller\x00', 0x4, 0x1e, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="280000000203010400000000fffffff4d49078000800010001"], 0x28}}, 0x0) 177.57542ms ago: executing program 3 (id=1497): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x10, &(0x7f0000000440), 0x4) connect$inet6(r0, &(0x7f0000000600)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x16}, 0x5}, 0x1c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f0000001180)=[{{0x0, 0x0, 0x0}}], 0x1, 0x2000c800) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x11, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000050000000000000072b9682618110000", @ANYRES32, @ANYBLOB="0000010000000000b702000014000000b7030000000000008500000083000000bf0900000000000055c3c900000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x5}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000a00)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r2, 0x400448ca, 0x0) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0x0, 0x4}, 0x6) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@loopback, @in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {0x0, 0x0, 0x5}}, {{@in, 0x0, 0x6c}, 0x0, @in6=@local}}, 0xe8) close(r3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x0, 0x3, 0x0, &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000140)='sched_switch\x00', r5}, 0x10) r6 = openat$cgroup_procs(r4, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f00000000c0), 0x12) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000400)='FROZEN\x00', 0x7) write$cgroup_freezer_state(0xffffffffffffffff, &(0x7f0000000080)='THAWED\x00', 0x7) pselect6(0x40, &(0x7f0000000080)={0x5, 0x5, 0xff, 0x9, 0x0, 0x934, 0xfffffffffffffffd, 0x100000001}, &(0x7f00000000c0)={0x6, 0x7, 0x800, 0x7ff, 0x0, 0x3, 0x7, 0x7}, &(0x7f0000000140)={0x2, 0x1, 0x8000000000403, 0xdf7, 0x6, 0x3, 0x0, 0x800000000}, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)={[0x4]}, 0x8}) bpf$PROG_LOAD(0x5, 0x0, 0x0) 140.566522ms ago: executing program 2 (id=1498): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x4, 0x1, 0x80}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001440)={r0}, 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001440)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x18, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @printk={@d, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x200, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x0, 0x3}, 0x48) write$binfmt_script(r2, 0x0, 0x0) (async) write$binfmt_script(r2, 0x0, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f0000000400), r3) (async) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000400), r3) sendmsg$NBD_CMD_CONNECT(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000280)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000c00050000000000000000000c0004000000000000000000040007800c0002000000001d00000000"], 0x3c}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x4) (async) sendmsg$NL802154_CMD_NEW_INTERFACE(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000100)={&(0x7f0000000180)=ANY=[@ANYBLOB, @ANYBLOB, @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x4) syz_init_net_socket$llc(0x1a, 0x0, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) connect$llc(0xffffffffffffffff, 0x0, 0x0) r5 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000540)=@filter={'filter\x00', 0x2, 0x4, 0x3b8, 0xffffffff, 0x0, 0x2e8, 0x218, 0xfeffffff, 0xffffffff, 0x2e8, 0x2e8, 0x2e8, 0xffffffff, 0x4, 0x0, {[{{@ipv6={@dev, @mcast1, [], [], 'macsec0\x00', 'bond_slave_0\x00', {}, {}, 0x0, 0x0, 0x3}, 0x2f2, 0xa8, 0xd0}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x6}}}, {{@ipv6={@private0, @empty, [], [], 'sit0\x00', 'vxcan1\x00'}, 0x0, 0xd8, 0x148, 0x0, {}, [@common=@ah={{0x30}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, "ddabf53d9b1435965491f65318776d8001e770b667f173dfa40b58c10327e3121114449fd20ba2be6e45cae72a972f25170163232ed996b4789b9d00"}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE3={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x418) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x13, &(0x7f0000000000)=0x800, 0x4) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b40)={0x11, 0x8, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000000), 0x10}, 0x90) r8 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000), 0x4) (async) setsockopt$sock_int(r8, 0x1, 0x8, &(0x7f0000000000), 0x4) socket$nl_route(0x10, 0x3, 0x0) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) (async) sendmsg$nl_route_sched(r9, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newtaction={0x18, 0x31, 0x3d, 0x0, 0x0, {}, [{0x4}]}, 0x18}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000700)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x30, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r11}, [@IFLA_VFINFO_LIST={0x8, 0x16, 0x0, 0x1, [{0x4}]}, @IFLA_MTU={0x8}]}, 0x30}}, 0x0) socket$inet6(0xa, 0x3, 0x3c) (async) r12 = socket$inet6(0xa, 0x3, 0x3c) connect$inet6(r12, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) (async) connect$inet6(r12, &(0x7f0000000080)={0xa, 0x0, 0x0, @remote, 0x9}, 0x1c) sendmmsg$inet(r12, &(0x7f0000000000)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000800)="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", 0x2de}, {&(0x7f0000000bc0)="ab29d92826349952eb8f7a2a74f535bc9739c1df57144c51a3391625b8b5354134b06ef1355506aeae96e3f097503998f375a054cf3d7de4fe53ea51518955349cdbadca60e1c65cc18dbe99369be03e492fb55fc9067bb6f7f7c3ee1720000000054a63ac58225ed0502f5ac8999e0c74a5dbb320bd54ec813e8bee6bfa5cbfb0726ac1b6ad97d802d5fae186f0769421fb965c7396854e2a3ac844a3769f8449901ba5e2b2da1ff6119aeb26ac204cfc6b54be73b6f195491ae2c0cb26b0cba61dae7a17740e8112ff188919c6e2e31a2a074863edba4a0e58b61faec4a42c29d7f9e48a43b8cb7d3c5a1e5aa67f87538140f8d633a54bceb8b1dda2397ea147d3b26e903f608b6ab1844ea7cf630d828118bba0f0f85e2e6316ae1ed9a2a7d08a05c170cb76bf111930df0cf760f7768571afdefe82a95296cee7c010f748a97046efcc774e7d85edbd5058104fef4942fb4430da89f67d1fea33bf2acfb793a610b3738b393eed8633fc8e8f6309", 0x170}, {&(0x7f00000000c0)="05437c98b91b1455046f57b5fc913814bde2bbeac2104eaea9c9d01a7838d859207067c10aa7352abbdf98e9bf033a3184a11e84639d3b9164d9c5d729f3dd409d39ff6d5cf367cd939f790732e8d2310e876fcb299cd44b72bda697035b7b475bc35afbb483db39ac864dbee0c9760c22a1d32d83588afd7c994652413b22db76874ca052ef2013317eb7fcc5677e9d", 0x90}, {&(0x7f0000000200)="f610e61fc81cc3edc86f0500194d27a5a443f15fab0dfd1ecda0fd0ed9a444b7fbb161860c18ff851923b530208f", 0x2e}], 0x4, 0x0, 0x0, 0x900}}], 0x2, 0x0) 66.688431ms ago: executing program 3 (id=1499): socket$inet6_udplite(0xa, 0x2, 0x88) socket$netlink(0x10, 0x3, 0x0) pipe(&(0x7f0000000100)) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1, 0x803, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000000)={&(0x7f0000000040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x13, 0x0, 0x2}]}}, &(0x7f0000000080)=""/233, 0x26, 0x31, 0x1}, 0x20) r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000100)={0x2, 'veth1_to_team\x00'}, 0x18) setsockopt$IP_VS_SO_SET_STOPDAEMON(r3, 0x0, 0x48c, &(0x7f0000000040)={0x2, 'ip_vti0\x00'}, 0x18) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x50, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffad}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x18, 0x2, 0x0, 0x1, [@IFLA_VLAN_FLAGS={0xc, 0x2, {0xe, 0xa}}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x50}}, 0x0) 8.159736ms ago: executing program 1 (id=1500): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = socket$inet(0xa, 0x801, 0x84) listen(r1, 0x8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000640)={'ip6_vti0\x00', &(0x7f00000005c0)={'ip6gre0\x00', 0x0, 0x29, 0x84, 0x2, 0xab7000, 0x4, @loopback, @local, 0x10, 0x8000, 0x1bdd, 0x7fff}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000700)={'syztnl2\x00', &(0x7f0000000680)={'syztnl2\x00', 0x0, 0x4, 0x5, 0x43, 0x1f, 0x10, @remote, @local, 0x45, 0x7808, 0x7f, 0x5}}) sendmmsg$inet(r1, &(0x7f00000009c0)=[{{&(0x7f0000000040)={0x2, 0x4e24, @dev}, 0x10, &(0x7f0000000540)=[{&(0x7f0000000080)="55a4605cce930b621f14e56f6de132a2a1366831d6ed38e7ab41f360cfec67d4fe32e857918e23ec4fcbbc59eefd27aac868d51ec936640f5d102bc437c8e4010f49c3d2bd9e57e00e67efb15ba3ee774d06ed3dc2e19596954856000601bf85", 0x60}, {&(0x7f0000000200)="a022446e93eedba120ab1004dfdcdc1d3a289e1eab917bae1c4bf15cd7127abf326846b1a65f483af6dd6c2016d56b22a6ed054e46870d31ce47809e29a5ff6f2e432e91b7f10b629aa43e5e37d91d45d2bb161acc4ad0", 0x57}, {&(0x7f0000000280)="b1ac8f41dfb841e94086f1ec08b5ee36642d2706c5411c1242237f3b0b18eab9d4202618927ece298a641653a70a36c650400a4ed690001ce801ae6dcf7a5b280b0ceb0ac395e71bfe0b5742a34f4fa3154522914e171d3a4b2666485b0ce6e958b2cde5592eb10b590ab8b69082e39a9310a9abb05e250f66cf4b9ca5816d2aff9308f783113e278643863ee23f69945fdb0c5474440d3611f7f00581e6a95f62c0193ac7c34400b853f924e24ef07e02c29f1d40efd982c715406fe0e38da1fc6e92ee80cddb54ccd62d69f2487cea631464ae91640fcd280ef4", 0xdb}, {&(0x7f0000000380)="7e17e2515c2d45356d29bea7cb07d8f5929d1435c2a176320fec3af31719d908e4f48294bf0788be6e7372eb50cec0e87c54485cb7af6210e7a997632256739a6d1eb24c64b90844653bf61741a1c9446f951a2806ff87cdc1762b2ebe2691810394ba4c17d2361222fdb90efb87dfe9a82fdd8ea28e7dfc39807ed1ca58620319b7034e902ece61851f6521264fb317f4680df07ab53a3ce1fb595d9c6069da982272dedcea5458233c63a50093eb52dedd34833f29ecea9cf8ac6f4eddc033238814c031b0b5d112a141731704ebf0548a9104614fa3f99932389f", 0xdc}, {&(0x7f0000000100)="421edce5d6c0d205978068a6b4650b2c39d28ac9a736fac4", 0x18}, {&(0x7f0000000480)="b8dc333d94b68044ce6524ad726422ad24", 0x11}, {&(0x7f00000004c0)}, {&(0x7f0000000500)="21055a9e621a83f84ebf553c145dd9fc945c99b9c6f91655545acee1f2bbf9b3f4f961719c24c2e70c911d7dcb7cdd346eb0206f31", 0x35}], 0x8, &(0x7f0000000740)=[@ip_ttl={{0x14, 0x0, 0x2, 0x70}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r2, @broadcast, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @multicast2, @remote}}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x28}}], 0x70}}, {{&(0x7f00000007c0)={0x2, 0x4e21, @empty}, 0x10, &(0x7f0000000980)=[{0x0}], 0x1}}], 0x2, 0x48050) socket$inet(0xa, 0x801, 0x84) socket$inet6_sctp(0xa, 0x5, 0x84) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x3}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4, 0xffffffffffffffff}, 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7020000000000008500000086000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r5, @ANYBLOB="0000000000000000b705000008100000850000000400000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x11, 0x3, &(0x7f0000000580)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x101, 0xffffffffffffff4f, 0x0, 0x0, 0x45}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r7}, 0x10) socket$inet6_sctp(0xa, 0x1, 0x84) socket$inet_udplite(0x2, 0x2, 0x88) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) r8 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xffffff2d, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e020023000b02d25a806f8c6394f95e24fc60040f030047000000053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 0s ago: executing program 0 (id=1501): r0 = socket(0x11, 0x800000003, 0x0) syz_emit_ethernet(0xbe, &(0x7f0000000800)=ANY=[@ANYBLOB="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"], 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x40, 0x6, 0x6, 0x301, 0x0, 0x0, {0x5, 0x0, 0xa}, [@IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x40}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r2, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_bt_hci(0xffffffffffffffff, 0x800448d2, &(0x7f0000000000)="c2a5") r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x14, 0x10, 0x701, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r4 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r4, &(0x7f0000000100)={0xa, 0x0, 0x0, @empty}, 0x65) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0100000000000000000001000500050007000000000008000900000000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x900, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000000000002eeed88696", @ANYRES32=r1], 0x20}}, 0x0) kernel console output (not intermixed with test programs): confined op=invalid_pcr cause=ToMToU comm="syz.0.410" name="/root/syzkaller.CrwWoA/84/memory.events" dev="sda1" ino=1969 res=1 errno=0 [ 97.528488][ T6395] veth0_vlan: entered promiscuous mode [ 97.578801][ T6526] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 97.621761][ T6526] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 97.660415][ T6526] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 97.700872][ T6395] veth1_vlan: entered promiscuous mode [ 97.772818][ T6419] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 97.838447][ T6395] veth0_macvtap: entered promiscuous mode [ 97.872230][ T6395] veth1_macvtap: entered promiscuous mode [ 97.957447][ T6395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.971483][ T6395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 97.984177][ T6395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 97.995491][ T6395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.009438][ T6395] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.029136][ T6395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.040492][ T6395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.052329][ T6395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.063733][ T6395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.074576][ T6395] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.086764][ T6395] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.098864][ T6395] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 98.133292][ T6395] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.154309][ T6395] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.163640][ T6395] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.172487][ T6395] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 98.191795][ T6526] 8021q: adding VLAN 0 to HW filter on device bond0 [ 98.271307][ T6733] netlink: 'syz.2.413': attribute type 3 has an invalid length. [ 98.302047][ T6733] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.413'. [ 98.333307][ T6419] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.367301][ T6526] 8021q: adding VLAN 0 to HW filter on device team0 [ 98.409551][ T56] bridge0: port 1(bridge_slave_0) entered blocking state [ 98.417574][ T56] bridge0: port 1(bridge_slave_0) entered forwarding state [ 98.511699][ T5141] bridge0: port 2(bridge_slave_1) entered blocking state [ 98.518903][ T5141] bridge0: port 2(bridge_slave_1) entered forwarding state [ 98.595180][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.603041][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.625397][ T5090] Bluetooth: hci5: command tx timeout [ 98.781098][ T2415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.814955][ T2415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.907845][ T6755] netlink: 4 bytes leftover after parsing attributes in process `syz.0.417'. [ 99.080860][ T6419] veth0_vlan: entered promiscuous mode [ 99.163826][ T6769] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.177017][ T6769] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.178601][ T29] audit: type=1800 audit(1719343294.468:5): pid=6771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.420" name="memory.events" dev="sda1" ino=1975 res=0 errno=0 [ 99.206773][ T6769] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 99.240420][ T29] audit: type=1804 audit(1719343294.528:6): pid=6771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.420" name="/root/syzkaller.Mup6yG/122/memory.events" dev="sda1" ino=1975 res=1 errno=0 [ 99.252848][ T6526] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 99.284021][ T6419] veth1_vlan: entered promiscuous mode [ 99.303639][ T29] audit: type=1804 audit(1719343294.558:7): pid=6771 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.420" name="/root/syzkaller.Mup6yG/122/memory.events" dev="sda1" ino=1975 res=1 errno=0 [ 99.418258][ T6774] Illegal XDP return value 4294967274 on prog (id 83) dev N/A, expect packet loss! [ 99.447390][ T6526] veth0_vlan: entered promiscuous mode [ 99.506071][ T6419] veth0_macvtap: entered promiscuous mode [ 99.547839][ T6526] veth1_vlan: entered promiscuous mode [ 99.562147][ T6419] veth1_macvtap: entered promiscuous mode [ 99.636584][ T6419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.648045][ T6419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.661059][ T6419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 99.675086][ T6419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.688305][ T6419] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 99.701835][ T6782] netlink: 'syz.2.423': attribute type 3 has an invalid length. [ 99.718262][ T6782] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.423'. [ 99.739308][ T6419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.753615][ T6419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.764501][ T6419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.780012][ T6419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.791591][ T6419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.802532][ T6419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.812635][ T6419] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 99.823097][ T6419] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.835642][ T6419] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.847874][ T6526] veth0_macvtap: entered promiscuous mode [ 99.882883][ T6526] veth1_macvtap: entered promiscuous mode [ 99.922537][ T6419] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.942797][ T6419] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.960212][ T6419] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.970227][ T6419] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.038593][ T6526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.051906][ T6526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.061920][ T6526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.079617][ T6526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.092574][ T6526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.103101][ T6526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.121539][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 100.154372][ T6526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.171264][ T6798] netlink: 12 bytes leftover after parsing attributes in process `syz.1.429'. [ 100.190216][ T6526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.212033][ T6526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.223307][ T6526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.236296][ T6526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.256299][ T6526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.268011][ T6526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.279503][ T6526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.290328][ T6526] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 100.301676][ T6526] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.313972][ T6526] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 100.333930][ T6806] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 100.352230][ T6807] IPVS: stopping master sync thread 6806 ... [ 100.364539][ T6808] netlink: 96 bytes leftover after parsing attributes in process `syz.1.433'. [ 100.444463][ T6526] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.484882][ T6526] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.504688][ T6526] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.524537][ T6526] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 100.559821][ T6814] netlink: 9 bytes leftover after parsing attributes in process `syz.0.435'. [ 100.569010][ T6814] 0·: renamed from hsr0 (while UP) [ 100.581727][ T6814] 0·: entered allmulticast mode [ 100.587399][ T6814] hsr_slave_0: entered allmulticast mode [ 100.593228][ T6814] hsr_slave_1: entered allmulticast mode [ 100.599738][ T6814] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 100.708089][ T5104] Bluetooth: hci5: command tx timeout [ 100.716123][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.728325][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.776309][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.786905][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.858569][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.873558][ T2415] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.881774][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.895715][ T2415] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 101.205424][ T6822] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 101.251522][ T6836] netlink: 4 bytes leftover after parsing attributes in process `syz.3.363'. [ 101.279059][ T6840] xt_HMARK: proto mask must be zero with L3 mode [ 101.423166][ T6684] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.705398][ T29] audit: type=1800 audit(1719343296.978:8): pid=6852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.1.447" name="memory.events" dev="sda1" ino=1978 res=0 errno=0 [ 101.732686][ T6684] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.734332][ T6854] netlink: 96 bytes leftover after parsing attributes in process `syz.3.445'. [ 101.774117][ T29] audit: type=1804 audit(1719343296.988:9): pid=6852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.447" name="/root/syzkaller.xEMFst/6/memory.events" dev="sda1" ino=1978 res=1 errno=0 [ 101.799854][ T29] audit: type=1804 audit(1719343296.998:10): pid=6852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.1.447" name="/root/syzkaller.xEMFst/6/memory.events" dev="sda1" ino=1978 res=1 errno=0 [ 101.988589][ T6684] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.020394][ T52] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 102.030300][ T52] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 102.041759][ T52] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 102.053043][ T52] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 102.062144][ T52] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 102.070549][ T52] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 102.116115][ T6867] netlink: 9 bytes leftover after parsing attributes in process `syz.0.448'. [ 102.177430][ T6867] 1·: renamed from 70· (while UP) [ 102.221655][ T6867] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 102.294458][ T6684] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.304444][ T29] audit: type=1804 audit(1719343297.588:11): pid=6871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.451" name="/root/syzkaller.rkiRRV/5/cgroup.controllers" dev="sda1" ino=1979 res=1 errno=0 [ 102.388474][ T6880] netlink: 'syz.2.452': attribute type 21 has an invalid length. [ 102.472845][ T6882] xt_HMARK: proto mask must be zero with L3 mode [ 102.612655][ T6886] netlink: 4 bytes leftover after parsing attributes in process `syz.2.457'. [ 102.713583][ T6893] netlink: 96 bytes leftover after parsing attributes in process `syz.3.459'. [ 102.787005][ T52] Bluetooth: hci5: command 0x0405 tx timeout [ 102.823977][ T6901] netlink: 96 bytes leftover after parsing attributes in process `syz.1.460'. [ 102.842170][ T6684] bridge_slave_1: left allmulticast mode [ 102.870608][ T6684] bridge_slave_1: left promiscuous mode [ 102.882142][ T6684] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.946607][ T6684] bridge_slave_0: left allmulticast mode [ 102.974415][ T6684] bridge_slave_0: left promiscuous mode [ 102.980501][ T6684] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.044291][ T6913] netlink: 4 bytes leftover after parsing attributes in process `syz.1.466'. [ 103.112884][ T6918] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1025 (only 8 groups) [ 103.443118][ T6684] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.456627][ T6684] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.467629][ T6684] bond0 (unregistering): Released all slaves [ 103.502813][ T6910] netlink: 9 bytes leftover after parsing attributes in process `syz.2.464'. [ 103.534447][ T6910] 0·: renamed from hsr0 (while UP) [ 103.562479][ T6910] 0·: entered allmulticast mode [ 103.580146][ T6910] hsr_slave_0: entered allmulticast mode [ 103.591989][ T6910] hsr_slave_1: entered allmulticast mode [ 103.604150][ T6910] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 103.686067][ T6861] chnl_net:caif_netlink_parms(): no params data found [ 103.768583][ T6928] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 103.776168][ T6928] IPv6: NLM_F_CREATE should be set when creating new route [ 103.783459][ T6928] IPv6: NLM_F_CREATE should be set when creating new route [ 103.790759][ T6928] IPv6: NLM_F_CREATE should be set when creating new route [ 103.826249][ T6937] netlink: 96 bytes leftover after parsing attributes in process `syz.2.471'. [ 104.093886][ T6944] netlink: 4 bytes leftover after parsing attributes in process `syz.3.474'. [ 104.142262][ T6960] x_tables: duplicate underflow at hook 2 [ 104.151875][ T5090] Bluetooth: hci4: command tx timeout [ 104.179344][ T6861] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.192689][ T6861] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.202039][ T6861] bridge_slave_0: entered allmulticast mode [ 104.209772][ T6861] bridge_slave_0: entered promiscuous mode [ 104.252588][ T6684] hsr_slave_0: left promiscuous mode [ 104.293826][ T6684] hsr_slave_1: left promiscuous mode [ 104.313129][ T6684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.342188][ T6684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.350821][ T6684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.362592][ T6684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.370852][ T6975] xt_HMARK: proto mask must be zero with L3 mode [ 104.409281][ T6684] veth1_macvtap: left promiscuous mode [ 104.419526][ T6684] veth0_macvtap: left promiscuous mode [ 104.428333][ T6684] veth1_vlan: left promiscuous mode [ 104.433766][ T6684] veth0_vlan: left promiscuous mode [ 104.871213][ T6684] team0 (unregistering): Port device team_slave_1 removed [ 104.904616][ T6684] team0 (unregistering): Port device team_slave_0 removed [ 105.262143][ T6861] bridge0: port 2(bridge_slave_1) entered blocking state [ 105.269743][ T6861] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.277378][ T6861] bridge_slave_1: entered allmulticast mode [ 105.285047][ T6861] bridge_slave_1: entered promiscuous mode [ 105.292161][ T6974] 0·: renamed from hsr0 (while UP) [ 105.300438][ T6974] 0·: entered allmulticast mode [ 105.305781][ T6974] hsr_slave_0: entered allmulticast mode [ 105.311510][ T6974] hsr_slave_1: entered allmulticast mode [ 105.320031][ T6974] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 105.545733][ T6861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.578553][ T6861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.678620][ T6861] team0: Port device team_slave_0 added [ 105.900788][ T7015] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 106.098922][ T6861] team0: Port device team_slave_1 added [ 106.225038][ T5090] Bluetooth: hci4: command tx timeout [ 106.266915][ T7022] xt_HMARK: proto mask must be zero with L3 mode [ 106.361881][ T6861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 106.374594][ T6861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.421282][ T7025] __nla_validate_parse: 7 callbacks suppressed [ 106.421301][ T7025] netlink: 8 bytes leftover after parsing attributes in process `syz.2.493'. [ 106.449085][ T6861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 106.480058][ T7030] netlink: 9 bytes leftover after parsing attributes in process `syz.0.494'. [ 106.480974][ T7031] netlink: 96 bytes leftover after parsing attributes in process `syz.3.495'. [ 106.489266][ T7030] 0·: renamed from 71· (while UP) [ 106.515646][ T7030] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 106.538050][ T6861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 106.569256][ T6861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 106.626153][ T6861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 106.676406][ T7041] x_tables: unsorted underflow at hook 4 [ 106.819320][ T6861] hsr_slave_0: entered promiscuous mode [ 106.855877][ T6861] hsr_slave_1: entered promiscuous mode [ 106.880648][ T7051] netlink: 96 bytes leftover after parsing attributes in process `syz.3.500'. [ 107.023065][ T29] audit: type=1804 audit(1719343302.308:12): pid=7058 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.502" name="/root/syzkaller.xEMFst/19/cgroup.controllers" dev="sda1" ino=1978 res=1 errno=0 [ 107.102715][ T7066] netlink: 4 bytes leftover after parsing attributes in process `syz.3.505'. [ 107.457286][ T7085] netlink: 96 bytes leftover after parsing attributes in process `syz.1.513'. [ 107.483480][ T7087] netlink: 'syz.2.515': attribute type 4 has an invalid length. [ 107.530650][ T7089] netlink: 36 bytes leftover after parsing attributes in process `syz.1.516'. [ 107.543833][ T7087] netlink: 'syz.2.515': attribute type 4 has an invalid length. [ 107.558268][ T7090] netlink: 36 bytes leftover after parsing attributes in process `syz.1.516'. [ 107.626919][ T7091] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 107.703525][ T6861] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 107.721316][ T6861] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 107.736006][ T6861] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 107.759681][ T6861] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 107.792275][ T7095] netlink: 4 bytes leftover after parsing attributes in process `syz.1.517'. [ 107.900421][ T7087] syz.2.515 (7087) used greatest stack depth: 18960 bytes left [ 107.939624][ T6861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 107.980937][ T6861] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.013455][ T5195] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.013864][ T7099] netlink: 'syz.1.518': attribute type 3 has an invalid length. [ 108.020655][ T5195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.057327][ T7099] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.518'. [ 108.064005][ T5195] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.073737][ T5195] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.152952][ T29] audit: type=1804 audit(1719343303.438:13): pid=7104 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.519" name="/root/syzkaller.Mup6yG/146/cgroup.controllers" dev="sda1" ino=1979 res=1 errno=0 [ 108.203111][ T6861] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 108.224147][ T6861] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 108.306375][ T5090] Bluetooth: hci4: command tx timeout [ 108.500654][ T7116] nbd: must specify at least one socket [ 108.563219][ T6861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 108.569090][ T7122] xt_HMARK: proto mask must be zero with L3 mode [ 108.740366][ T29] audit: type=1800 audit(1719343304.018:14): pid=7129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.527" name="memory.events" dev="sda1" ino=1964 res=0 errno=0 [ 108.768180][ T7134] netlink: 'syz.1.529': attribute type 4 has an invalid length. [ 108.826141][ T29] audit: type=1800 audit(1719343304.048:15): pid=7129 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.527" name="memory.events" dev="sda1" ino=1964 res=0 errno=0 [ 108.941447][ T7140] netlink: 'syz.3.531': attribute type 3 has an invalid length. [ 108.994080][ T7134] netlink: 'syz.1.529': attribute type 4 has an invalid length. [ 109.142175][ T7152] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 0 (only 8 groups) [ 109.290515][ T6861] veth0_vlan: entered promiscuous mode [ 109.334082][ T6861] veth1_vlan: entered promiscuous mode [ 109.458753][ T6861] veth0_macvtap: entered promiscuous mode [ 109.497027][ T6861] veth1_macvtap: entered promiscuous mode [ 109.551778][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.576039][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.587215][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.610704][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.623694][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 109.641254][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.653466][ T6861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 109.693598][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.738843][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.776086][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.792421][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.807671][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.820573][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.842314][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.865241][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.881582][ T6861] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 109.892572][ T6861] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 109.908112][ T6861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 109.961433][ T7186] netlink: 'syz.2.544': attribute type 3 has an invalid length. [ 109.966244][ T6861] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.001203][ T6861] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.010432][ T6861] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.028684][ T6861] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.177923][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.198268][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.246951][ T6691] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.269091][ T6691] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 110.341167][ T29] audit: type=1804 audit(1719343305.628:16): pid=7198 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.550" name="/root/syzkaller.Mup6yG/155/cgroup.controllers" dev="sda1" ino=1979 res=1 errno=0 [ 110.526858][ T7200] bond2: entered promiscuous mode [ 110.608720][ T7200] bond3: entered promiscuous mode [ 110.617113][ T7200] bond3: entered allmulticast mode [ 110.637828][ T7200] 8021q: adding VLAN 0 to HW filter on device bond3 [ 110.658518][ T7200] bond2: (slave bond3): Enslaving as an active interface with an up link [ 110.683638][ T7203] bond2 (unregistering): (slave bond3): Releasing backup interface [ 110.698207][ T7203] bond2 (unregistering): Released all slaves [ 110.743231][ T7221] IPVS: length: 86 != 8 [ 110.834918][ T7226] netlink: 'syz.1.560': attribute type 7 has an invalid length. [ 110.846604][ T7226] netlink: 'syz.1.560': attribute type 8 has an invalid length. [ 110.868750][ T7226] syz.1.560[7226] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 110.869128][ T7226] syz.1.560[7226] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.169658][ T7245] xt_HMARK: proto mask must be zero with L3 mode [ 111.283305][ T7251] netlink: 'syz.3.568': attribute type 3 has an invalid length. [ 111.440665][ T7244] team0 (unregistering): Port device team_slave_0 removed [ 111.476937][ T7244] team0 (unregistering): Port device team_slave_1 removed [ 111.522773][ T7257] __nla_validate_parse: 19 callbacks suppressed [ 111.522786][ T7257] netlink: 9 bytes leftover after parsing attributes in process `syz.0.570'. [ 111.538835][ T7257] 1·: renamed from 70· (while UP) [ 111.547820][ T7257] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 111.795382][ T6691] bridge_slave_1: left allmulticast mode [ 111.801738][ T6691] bridge_slave_1: left promiscuous mode [ 111.821396][ T6691] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.837169][ T6691] bridge_slave_0: left allmulticast mode [ 111.843584][ T6691] bridge_slave_0: left promiscuous mode [ 111.850770][ T6691] bridge0: port 1(bridge_slave_0) entered disabled state [ 111.887451][ T7270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.901698][ T7270] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.241386][ T6691] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 112.253641][ T6691] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 112.265642][ T6691] bond0 (unregistering): Released all slaves [ 112.347237][ T7282] x_tables: duplicate underflow at hook 2 [ 112.401773][ T7284] netlink: 96 bytes leftover after parsing attributes in process `syz.2.578'. [ 112.529758][ T7291] xt_HMARK: proto mask must be zero with L3 mode [ 112.792157][ T6691] hsr_slave_0: left promiscuous mode [ 112.802385][ T6691] hsr_slave_1: left promiscuous mode [ 112.835161][ T6691] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.842646][ T6691] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 112.869098][ T6691] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 112.883166][ T6691] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 112.913787][ T6691] veth1_macvtap: left promiscuous mode [ 112.927048][ T6691] veth0_macvtap: left promiscuous mode [ 112.934676][ T6691] veth1_vlan: left promiscuous mode [ 112.943633][ T6691] veth0_vlan: left promiscuous mode [ 113.770773][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 113.779586][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 113.789780][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 113.801007][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 113.810112][ T52] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 113.818912][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 113.883036][ T7313] team_slave_0: entered promiscuous mode [ 113.916436][ T7313] team_slave_0: entered allmulticast mode [ 113.965891][ T7323] x_tables: duplicate underflow at hook 2 [ 114.001496][ T7322] netlink: 96 bytes leftover after parsing attributes in process `syz.3.591'. [ 114.162985][ T7329] ebt_among: src integrity fail: 30a [ 114.215532][ T7336] netlink: 8 bytes leftover after parsing attributes in process `syz.3.597'. [ 114.248746][ T7334] netlink: 'syz.1.595': attribute type 3 has an invalid length. [ 114.265059][ T7339] netlink: 12 bytes leftover after parsing attributes in process `syz.2.596'. [ 114.284859][ T7334] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.595'. [ 114.411410][ T7317] chnl_net:caif_netlink_parms(): no params data found [ 114.737433][ T7367] netlink: 8 bytes leftover after parsing attributes in process `syz.1.605'. [ 114.760690][ T7317] bridge0: port 1(bridge_slave_0) entered blocking state [ 114.768556][ T7317] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.778869][ T7317] bridge_slave_0: entered allmulticast mode [ 114.787771][ T7317] bridge_slave_0: entered promiscuous mode [ 114.804993][ T7317] bridge0: port 2(bridge_slave_1) entered blocking state [ 114.812211][ T7317] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.831130][ T7317] bridge_slave_1: entered allmulticast mode [ 114.846832][ T7317] bridge_slave_1: entered promiscuous mode [ 114.910662][ T7376] netlink: 'syz.3.610': attribute type 3 has an invalid length. [ 114.927810][ T7376] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.610'. [ 114.935152][ T6691] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 114.940161][ T7378] netlink: 96 bytes leftover after parsing attributes in process `syz.1.608'. [ 115.004306][ T7381] netlink: 8 bytes leftover after parsing attributes in process `syz.2.611'. [ 115.052591][ T7317] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.177187][ T6691] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.217511][ T7317] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.341182][ T6691] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.400596][ T7317] team0: Port device team_slave_0 added [ 115.431156][ T7317] team0: Port device team_slave_1 added [ 115.500140][ T6691] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.527826][ T7408] netlink: 'syz.0.618': attribute type 11 has an invalid length. [ 115.604229][ T7317] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.619463][ T7317] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.652894][ T7317] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.679709][ T7317] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.693661][ T7317] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.732703][ T7317] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 115.859005][ T7426] xt_TCPMSS: Only works on TCP SYN packets [ 115.872779][ T7426] rdma_op ffff88807b3839f0 conn xmit_rdma 0000000000000000 [ 115.879980][ T7317] hsr_slave_0: entered promiscuous mode [ 115.886559][ T7425] netlink: 'syz.2.626': attribute type 3 has an invalid length. [ 115.892356][ T7317] hsr_slave_1: entered promiscuous mode [ 115.901334][ T7317] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 115.905056][ T52] Bluetooth: hci3: command tx timeout [ 115.915165][ T7317] Cannot create hsr debugfs directory [ 115.976924][ T7426] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 116.176995][ T6691] bridge_slave_1: left allmulticast mode [ 116.183128][ T6691] bridge_slave_1: left promiscuous mode [ 116.194321][ T6691] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.245867][ T6691] bridge_slave_0: left allmulticast mode [ 116.263811][ T6691] bridge_slave_0: left promiscuous mode [ 116.284346][ T6691] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.424259][ T7453] netlink: 'syz.0.634': attribute type 11 has an invalid length. [ 116.695632][ T6691] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 116.711999][ T6691] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 116.722754][ T6691] bond0 (unregistering): Released all slaves [ 116.744487][ T7447] __nla_validate_parse: 6 callbacks suppressed [ 116.744536][ T7447] netlink: 12 bytes leftover after parsing attributes in process `syz.2.632'. [ 116.902335][ T7460] netlink: 12 bytes leftover after parsing attributes in process `syz.3.637'. [ 116.925224][ T7459] netlink: 12 bytes leftover after parsing attributes in process `syz.3.637'. [ 116.946086][ T7457] netlink: 96 bytes leftover after parsing attributes in process `syz.1.636'. [ 117.010674][ T7465] netlink: 12 bytes leftover after parsing attributes in process `syz.0.638'. [ 117.133989][ T7470] Β: renamed from pim6reg1 [ 117.168970][ T7477] x_tables: duplicate underflow at hook 2 [ 117.183863][ T7473] ip6tnl1: entered promiscuous mode [ 117.193000][ T7473] ip6tnl1: entered allmulticast mode [ 117.266914][ T6691] hsr_slave_0: left promiscuous mode [ 117.274045][ T6691] hsr_slave_1: left promiscuous mode [ 117.291976][ T6691] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.304272][ T6691] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.321406][ T6691] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.337542][ T6691] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.394563][ T6691] veth1_macvtap: left promiscuous mode [ 117.401307][ T6691] veth0_macvtap: left promiscuous mode [ 117.410443][ T6691] veth1_vlan: left promiscuous mode [ 117.411269][ T7486] netlink: 8 bytes leftover after parsing attributes in process `syz.2.646'. [ 117.419944][ T6691] veth0_vlan: left promiscuous mode [ 117.907403][ T6691] team0 (unregistering): Port device team_slave_1 removed [ 117.951141][ T6691] team0 (unregistering): Port device team_slave_0 removed [ 117.978300][ T7495] netlink: 'syz.1.648': attribute type 11 has an invalid length. [ 117.986515][ T52] Bluetooth: hci3: command tx timeout [ 118.002485][ T7495] netlink: 8 bytes leftover after parsing attributes in process `syz.1.648'. [ 118.313294][ T7482] netlink: 9 bytes leftover after parsing attributes in process `syz.3.645'. [ 118.323261][ T7482] 0·: renamed from hsr0 (while UP) [ 118.341938][ T7482] 0·: entered allmulticast mode [ 118.347182][ T7482] hsr_slave_0: entered allmulticast mode [ 118.352840][ T7482] hsr_slave_1: entered allmulticast mode [ 118.372243][ T7482] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 118.511656][ T7504] netlink: 12 bytes leftover after parsing attributes in process `syz.1.653'. [ 118.560775][ T7506] netlink: 96 bytes leftover after parsing attributes in process `syz.3.652'. [ 118.630593][ T7508] x_tables: duplicate underflow at hook 2 [ 118.738486][ T7317] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 118.779884][ T7317] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 118.812499][ T7317] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 118.846596][ T7317] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 118.950420][ T7526] netlink: 'syz.2.661': attribute type 19 has an invalid length. [ 119.075442][ T7317] 8021q: adding VLAN 0 to HW filter on device bond0 [ 119.243464][ T7533] team0 (unregistering): Port device team_slave_0 removed [ 119.263366][ T7533] team0 (unregistering): Port device team_slave_1 removed [ 119.292672][ T7534] 1·: renamed from 70· (while UP) [ 119.301016][ T7534] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 119.343275][ T7317] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.380927][ T5134] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.388139][ T5134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.407932][ T5134] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.415138][ T5134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.501098][ T7317] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 119.515438][ T7543] x_tables: duplicate underflow at hook 2 [ 119.838067][ T7553] bond0: entered promiscuous mode [ 119.870098][ T7553] bond_slave_0: entered promiscuous mode [ 119.892464][ T7553] bond_slave_1: entered promiscuous mode [ 120.104660][ T52] Bluetooth: hci3: command tx timeout [ 120.165503][ T7317] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.198832][ T29] audit: type=1800 audit(1719343315.488:17): pid=7564 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.675" name="memory.events" dev="sda1" ino=1964 res=0 errno=0 [ 120.744821][ T7581] x_tables: duplicate underflow at hook 2 [ 121.243683][ T7317] veth0_vlan: entered promiscuous mode [ 121.330051][ T7317] veth1_vlan: entered promiscuous mode [ 121.427568][ T7600] netlink: 'syz.3.685': attribute type 10 has an invalid length. [ 121.519912][ T7317] veth0_macvtap: entered promiscuous mode [ 121.545794][ T7317] veth1_macvtap: entered promiscuous mode [ 121.623137][ T7317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.649627][ T7317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.661660][ T7317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 121.662239][ T7609] netlink: 'syz.0.689': attribute type 3 has an invalid length. [ 121.677688][ T7317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.699800][ T7317] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.711093][ T7610] 0·: renamed from 71· (while UP) [ 121.720442][ T7610] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 121.747623][ T7614] __nla_validate_parse: 9 callbacks suppressed [ 121.747642][ T7614] netlink: 72 bytes leftover after parsing attributes in process `syz.3.691'. [ 121.748366][ T7613] netlink: 12 bytes leftover after parsing attributes in process `syz.1.690'. [ 121.755785][ T7317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.792375][ T7317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.808382][ T7317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.835949][ T7317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.857237][ T7317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.870036][ T7317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.881741][ T7317] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 121.892412][ T7317] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 121.912606][ T7317] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.961660][ T7317] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.974285][ T7621] xt_HMARK: proto mask must be zero with L3 mode [ 121.990956][ T7317] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.012294][ T7317] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.044100][ T7317] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 122.145724][ T52] Bluetooth: hci3: command tx timeout [ 122.222501][ T7635] netlink: 'syz.1.699': attribute type 2 has an invalid length. [ 122.234401][ T7635] netlink: 8 bytes leftover after parsing attributes in process `syz.1.699'. [ 122.234641][ T7636] netlink: 'syz.2.701': attribute type 3 has an invalid length. [ 122.256666][ T7636] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.701'. [ 122.272817][ T7637] x_tables: duplicate underflow at hook 2 [ 122.299502][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.336657][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.411345][ T7641] netlink: 16 bytes leftover after parsing attributes in process `syz.0.698'. [ 122.441428][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.478551][ T7635] netlink: 12 bytes leftover after parsing attributes in process `syz.1.699'. [ 122.479357][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.504286][ T7653] netlink: 9 bytes leftover after parsing attributes in process `syz.2.702'. [ 122.532868][ T7653] 1·: renamed from 70· (while UP) [ 122.547803][ T7653] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 122.797043][ T7666] xt_HMARK: proto mask must be zero with L3 mode [ 122.968027][ T7675] netlink: 'syz.2.712': attribute type 3 has an invalid length. [ 122.985651][ T7675] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.712'. [ 123.093818][ T7680] netlink: 12 bytes leftover after parsing attributes in process `syz.1.714'. [ 123.178072][ T7690] netlink: 9 bytes leftover after parsing attributes in process `syz.2.716'. [ 123.195774][ T7690] 0·: renamed from 71· (while UP) [ 123.219884][ T7690] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 123.402570][ T7703] xt_HMARK: proto mask must be zero with L3 mode [ 123.416484][ T7702] xt_HMARK: proto mask must be zero with L3 mode [ 123.578559][ T7717] netlink: 'syz.1.726': attribute type 3 has an invalid length. [ 123.788415][ T7727] 0·: renamed from 71· (while UP) [ 123.806730][ T7727] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 123.849005][ T7735] pimreg: entered allmulticast mode [ 124.212417][ T6687] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.859290][ T7747] xt_HMARK: proto mask must be zero with L3 mode [ 124.912727][ T7750] netlink: 'syz.3.737': attribute type 3 has an invalid length. [ 125.170069][ T7766] netlink: 'syz.1.738': attribute type 10 has an invalid length. [ 125.236513][ T7766] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.245934][ T7766] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.351066][ T7766] bridge0: port 2(bridge_slave_1) entered blocking state [ 125.356550][ T5090] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 125.358309][ T7766] bridge0: port 2(bridge_slave_1) entered forwarding state [ 125.372845][ T5090] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 125.372866][ T7766] bridge0: port 1(bridge_slave_0) entered blocking state [ 125.380947][ T5090] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 125.387012][ T7766] bridge0: port 1(bridge_slave_0) entered forwarding state [ 125.424493][ T5090] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 125.439526][ T5090] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 125.447187][ T5090] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 125.447842][ T7779] openvswitch: netlink: Flow actions attr not present in new flow. [ 125.484433][ T7766] bridge0: port 2(bridge_slave_1) entered disabled state [ 125.491800][ T7766] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.644292][ T6687] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.702699][ T7782] pimreg: entered allmulticast mode [ 125.739169][ T6687] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.837075][ T6687] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 125.873302][ T7784] xt_HMARK: proto mask must be zero with L3 mode [ 126.044428][ T7791] netlink: 'syz.2.751': attribute type 3 has an invalid length. [ 126.148286][ T6687] bridge_slave_1: left allmulticast mode [ 126.153996][ T6687] bridge_slave_1: left promiscuous mode [ 126.180519][ T6687] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.222710][ T6687] bridge_slave_0: left allmulticast mode [ 126.245716][ T6687] bridge_slave_0: left promiscuous mode [ 126.251523][ T6687] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.665208][ T6687] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 126.677290][ T6687] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 126.690340][ T6687] bond0 (unregistering): Released all slaves [ 126.873877][ T7819] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:0 [ 126.951099][ T7773] chnl_net:caif_netlink_parms(): no params data found [ 127.066577][ T7825] ΙΆΖ£0GCTw: entered promiscuous mode [ 127.304261][ T6687] hsr_slave_0: left promiscuous mode [ 127.333990][ T6687] hsr_slave_1: left promiscuous mode [ 127.340445][ T7844] netlink: 'syz.3.765': attribute type 3 has an invalid length. [ 127.372887][ T7844] __nla_validate_parse: 11 callbacks suppressed [ 127.372908][ T7844] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.765'. [ 127.389367][ T6687] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.398423][ T6687] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.410889][ T6687] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.420471][ T6687] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 127.455700][ T6687] veth1_macvtap: left promiscuous mode [ 127.461496][ T6687] veth0_macvtap: left promiscuous mode [ 127.467446][ T6687] veth1_vlan: left promiscuous mode [ 127.473008][ T6687] veth0_vlan: left promiscuous mode [ 127.508569][ T5090] Bluetooth: hci3: command tx timeout [ 127.959217][ T6687] team0 (unregistering): Port device team_slave_1 removed [ 127.999605][ T6687] team0 (unregistering): Port device team_slave_0 removed [ 128.403319][ T7773] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.417175][ T7773] bridge0: port 1(bridge_slave_0) entered disabled state [ 128.424529][ T7773] bridge_slave_0: entered allmulticast mode [ 128.432219][ T7773] bridge_slave_0: entered promiscuous mode [ 128.457364][ T7773] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.480943][ T7859] netlink: 4 bytes leftover after parsing attributes in process `syz.0.769'. [ 128.495208][ T7773] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.502465][ T7773] bridge_slave_1: entered allmulticast mode [ 128.537446][ T7773] bridge_slave_1: entered promiscuous mode [ 128.678753][ T7773] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.690140][ T7871] netlink: 12 bytes leftover after parsing attributes in process `syz.3.771'. [ 128.719992][ T7773] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.841984][ T7773] team0: Port device team_slave_0 added [ 128.874230][ T7773] team0: Port device team_slave_1 added [ 128.981354][ T7773] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 129.008397][ T7773] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.012746][ T7885] netlink: 4 bytes leftover after parsing attributes in process `syz.0.777'. [ 129.078337][ T7773] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.107200][ T7773] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.126494][ T7773] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.157748][ T7773] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.421160][ T7773] hsr_slave_0: entered promiscuous mode [ 129.432945][ T7773] hsr_slave_1: entered promiscuous mode [ 129.585013][ T5090] Bluetooth: hci3: command tx timeout [ 129.688106][ T7910] macsec1: entered promiscuous mode [ 129.705446][ T7910] macvlan1: entered promiscuous mode [ 129.727497][ T7910] macsec1: entered allmulticast mode [ 129.743128][ T7910] macvlan1: entered allmulticast mode [ 129.760713][ T7933] netlink: 12 bytes leftover after parsing attributes in process `syz.1.792'. [ 129.770620][ T7910] veth1_vlan: entered allmulticast mode [ 129.783466][ T7910] macvlan1: left allmulticast mode [ 129.789092][ T7910] veth1_vlan: left allmulticast mode [ 129.794553][ T7910] macvlan1: left promiscuous mode [ 129.830199][ T7930] veth0_vlan: entered allmulticast mode [ 130.050950][ T7936] netlink: 9 bytes leftover after parsing attributes in process `syz.3.794'. [ 130.101685][ T7936] 1·: renamed from 70· (while UP) [ 130.118582][ T7936] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 130.148850][ T7945] netlink: 12 bytes leftover after parsing attributes in process `syz.1.795'. [ 130.150385][ T7949] netlink: 8 bytes leftover after parsing attributes in process `syz.2.798'. [ 130.209023][ T7952] netlink: 24 bytes leftover after parsing attributes in process `syz.0.799'. [ 130.212735][ T7949] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.798'. [ 130.379209][ T7961] syzkaller1: entered promiscuous mode [ 130.394292][ T7961] syzkaller1: entered allmulticast mode [ 130.486291][ T7971] No such timeout policy "syz0" [ 130.533382][ T7773] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 130.559843][ T7773] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 130.570595][ T7773] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 130.586036][ T7773] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 130.853296][ T7773] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.908374][ T7773] 8021q: adding VLAN 0 to HW filter on device team0 [ 130.926869][ T5195] bridge0: port 1(bridge_slave_0) entered blocking state [ 130.934065][ T5195] bridge0: port 1(bridge_slave_0) entered forwarding state [ 130.963778][ T5137] bridge0: port 2(bridge_slave_1) entered blocking state [ 130.971001][ T5137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.436128][ T8015] netlink: 'syz.2.813': attribute type 3 has an invalid length. [ 131.460899][ T7773] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 131.664950][ T5090] Bluetooth: hci3: command tx timeout [ 131.962540][ T7773] veth0_vlan: entered promiscuous mode [ 131.993596][ T7773] veth1_vlan: entered promiscuous mode [ 132.071479][ T7773] veth0_macvtap: entered promiscuous mode [ 132.108345][ T8057] 1·: renamed from 70· (while UP) [ 132.154577][ T8057] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 132.176684][ T7773] veth1_macvtap: entered promiscuous mode [ 132.218042][ T7773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.229970][ T7773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.245227][ T7773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 132.256607][ T7773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.269381][ T7773] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 132.289341][ T7773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.300409][ T7773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.320093][ T7773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.335157][ T7773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.345660][ T7773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.357774][ T7773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.372618][ T7773] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 132.383625][ T7773] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 132.397355][ T7773] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 132.431185][ T8066] netlink: 'syz.2.828': attribute type 3 has an invalid length. [ 132.438716][ T7773] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.448215][ T8066] __nla_validate_parse: 3 callbacks suppressed [ 132.448232][ T8066] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.828'. [ 132.454019][ T7773] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.481573][ T7773] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.490820][ T7773] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.506554][ T8069] netlink: 96 bytes leftover after parsing attributes in process `syz.1.830'. [ 132.682506][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.697667][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 132.758489][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 132.777955][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.013131][ T8087] netlink: 9 bytes leftover after parsing attributes in process `syz.3.835'. [ 133.038035][ T8087] 0·: renamed from 71· (while UP) [ 133.061094][ T8087] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 133.203234][ T8097] netlink: 12 bytes leftover after parsing attributes in process `syz.3.837'. [ 133.269507][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.279370][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.661211][ T8111] netlink: 8 bytes leftover after parsing attributes in process `syz.1.841'. [ 134.261965][ T8122] can: request_module (can-proto-0) failed. [ 134.752279][ T8139] netlink: 12 bytes leftover after parsing attributes in process `syz.1.849'. [ 134.912420][ T56] bridge0: port 2(bridge_slave_1) entered disabled state [ 135.077700][ T8146] netlink: 4 bytes leftover after parsing attributes in process `syz.1.852'. [ 135.163823][ T8149] xt_HMARK: proto mask must be zero with L3 mode [ 135.274517][ T8153] netlink: 9 bytes leftover after parsing attributes in process `syz.2.854'. [ 135.314661][ T8153] 0·: renamed from 71· (while UP) [ 135.359632][ T8153] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 135.757804][ T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.553063][ T8172] netlink: 96 bytes leftover after parsing attributes in process `syz.3.864'. [ 136.619879][ T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.660045][ T8182] xt_HMARK: proto mask must be zero with L3 mode [ 136.677605][ T8183] netlink: 12 bytes leftover after parsing attributes in process `syz.1.862'. [ 136.776681][ T8185] x_tables: duplicate underflow at hook 2 [ 136.779604][ T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.937271][ T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.988540][ T8187] 1·: renamed from 70· (while UP) [ 137.001963][ T8187] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 137.084875][ T8198] netlink: 'syz.1.868': attribute type 10 has an invalid length. [ 137.213706][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 137.226793][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 137.235605][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 137.245778][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 137.254924][ T52] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 137.265967][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 137.726534][ T8215] __nla_validate_parse: 1 callbacks suppressed [ 137.726554][ T8215] netlink: 4 bytes leftover after parsing attributes in process `syz.1.872'. [ 138.052205][ T50] bridge_slave_1: left allmulticast mode [ 138.078006][ T50] bridge_slave_1: left promiscuous mode [ 138.109469][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 138.190019][ T50] bridge_slave_0: left allmulticast mode [ 138.220691][ T50] bridge_slave_0: left promiscuous mode [ 138.238034][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.808144][ T8237] netlink: 12 bytes leftover after parsing attributes in process `syz.1.878'. [ 138.972980][ T8246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.881'. [ 138.994905][ T8246] netlink: 8 bytes leftover after parsing attributes in process `syz.3.881'. [ 139.083998][ T8246] sctp: [Deprecated]: syz.3.881 (pid 8246) Use of int in maxseg socket option. [ 139.083998][ T8246] Use struct sctp_assoc_value instead [ 139.356006][ T5090] Bluetooth: hci3: command tx timeout [ 139.390015][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 139.411219][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 139.431732][ T50] bond0 (unregistering): Released all slaves [ 139.455264][ T8240] netlink: 40 bytes leftover after parsing attributes in process `syz.0.879'. [ 139.509850][ T8202] chnl_net:caif_netlink_parms(): no params data found [ 139.541704][ T8254] x_tables: duplicate underflow at hook 2 [ 139.783623][ T8266] netlink: 4 bytes leftover after parsing attributes in process `syz.0.888'. [ 139.845457][ T8202] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.858407][ T8202] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.867152][ T56] IPVS: starting estimator thread 0... [ 139.869341][ T8202] bridge_slave_0: entered allmulticast mode [ 139.898341][ T8202] bridge_slave_0: entered promiscuous mode [ 139.928250][ T8202] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.943790][ T8202] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.960583][ T8202] bridge_slave_1: entered allmulticast mode [ 139.985028][ T8272] IPVS: using max 20 ests per chain, 48000 per kthread [ 139.985267][ T8202] bridge_slave_1: entered promiscuous mode [ 140.079254][ T8290] netlink: 8 bytes leftover after parsing attributes in process `syz.3.894'. [ 140.123071][ T8285] netlink: 104 bytes leftover after parsing attributes in process `syz.2.887'. [ 140.178457][ T8202] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.233224][ T8202] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.270098][ T8297] netlink: 12 bytes leftover after parsing attributes in process `syz.1.895'. [ 140.292422][ T50] hsr_slave_0: left promiscuous mode [ 140.307999][ T50] hsr_slave_1: left promiscuous mode [ 140.314640][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 140.322589][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 140.331061][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 140.338965][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 140.347737][ T8300] x_tables: duplicate underflow at hook 2 [ 140.377474][ T50] veth1_macvtap: left promiscuous mode [ 140.383163][ T50] veth0_macvtap: left promiscuous mode [ 140.389355][ T50] veth1_vlan: left promiscuous mode [ 140.394797][ T50] veth0_vlan: left promiscuous mode [ 140.936106][ T50] team0 (unregistering): Port device team_slave_1 removed [ 140.982536][ T50] team0 (unregistering): Port device team_slave_0 removed [ 141.342653][ T8301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.897'. [ 141.356508][ T8305] netlink: 'syz.0.897': attribute type 33 has an invalid length. [ 141.364935][ T8312] netlink: 'syz.2.899': attribute type 1 has an invalid length. [ 141.372617][ T8312] netlink: 'syz.2.899': attribute type 1 has an invalid length. [ 141.424849][ T5090] Bluetooth: hci3: command tx timeout [ 141.488181][ T8202] team0: Port device team_slave_0 added [ 141.508652][ T8202] team0: Port device team_slave_1 added [ 141.607677][ T8202] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.630086][ T8202] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.684532][ T8202] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.710566][ T8202] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.724309][ T8202] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.756600][ T8202] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.897942][ T8202] hsr_slave_0: entered promiscuous mode [ 141.911852][ T8202] hsr_slave_1: entered promiscuous mode [ 142.231585][ T8344] x_tables: duplicate underflow at hook 2 [ 142.442387][ T8202] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 142.482934][ T8202] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 142.501215][ T8202] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 142.523424][ T8202] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 142.534317][ T8349] syz.0.913 uses old SIOCAX25GETINFO [ 142.659823][ T8366] bridge0: port 1(bridge_slave_0) entered disabled state [ 142.759453][ T8373] __nla_validate_parse: 6 callbacks suppressed [ 142.759471][ T8373] netlink: 8 bytes leftover after parsing attributes in process `syz.1.919'. [ 142.892710][ T8202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 142.922545][ T8378] netlink: 12 bytes leftover after parsing attributes in process `syz.2.920'. [ 142.946758][ T8383] netlink: 4 bytes leftover after parsing attributes in process `syz.0.921'. [ 142.971767][ T8383] bridge_slave_1: left allmulticast mode [ 142.978858][ T8383] bridge_slave_1: left promiscuous mode [ 142.984670][ T8383] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.007090][ T8383] bridge_slave_0: left allmulticast mode [ 143.012788][ T8383] bridge_slave_0: left promiscuous mode [ 143.026622][ T8383] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.121842][ T8385] netlink: 44 bytes leftover after parsing attributes in process `syz.1.923'. [ 143.149599][ T8389] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 143.232798][ T8202] 8021q: adding VLAN 0 to HW filter on device team0 [ 143.285285][ T8395] xt_HMARK: proto mask must be zero with L3 mode [ 143.301185][ T5134] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.308396][ T5134] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.333027][ T5134] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.340275][ T5134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.506814][ T5090] Bluetooth: hci3: command tx timeout [ 143.698074][ T8424] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 2147221507 (only 8 groups) [ 143.817749][ T8202] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 144.072606][ T8444] netlink: 8 bytes leftover after parsing attributes in process `syz.3.936'. [ 144.355984][ T8202] veth0_vlan: entered promiscuous mode [ 144.375978][ T8461] netlink: 9 bytes leftover after parsing attributes in process `syz.3.941'. [ 144.399663][ T8461] 0·: renamed from 71· (while UP) [ 144.406546][ T8471] xt_HMARK: proto mask must be zero with L3 mode [ 144.415060][ T8461] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 144.466268][ T8202] veth1_vlan: entered promiscuous mode [ 144.569475][ T8202] veth0_macvtap: entered promiscuous mode [ 144.605964][ T8202] veth1_macvtap: entered promiscuous mode [ 144.683383][ T8202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.720931][ T8202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.722473][ T8486] RDS: rds_bind could not find a transport for ::ffff:172.30.0.1, load rds_tcp or rds_rdma? [ 144.753469][ T8202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 144.777542][ T8202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.809165][ T8202] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 144.862877][ T8202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.897081][ T8495] netlink: 'syz.1.954': attribute type 2 has an invalid length. [ 144.906283][ T8202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.917338][ T8495] netlink: 'syz.1.954': attribute type 1 has an invalid length. [ 144.927428][ T8202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 144.954991][ T8202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 144.976469][ T8500] xt_HMARK: proto mask must be zero with L3 mode [ 144.984867][ T8202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.004805][ T8202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.015146][ T8202] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 145.034344][ T8202] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 145.046698][ T8202] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.058580][ T8202] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.076160][ T8202] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.085948][ T8202] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.096994][ T8202] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.176808][ T8510] netlink: 9 bytes leftover after parsing attributes in process `syz.2.958'. [ 145.203837][ T8510] 1·: renamed from 70· (while UP) [ 145.218426][ T8510] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 145.252752][ T8511] netlink: 12 bytes leftover after parsing attributes in process `syz.0.960'. [ 145.335272][ T1110] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.367342][ T1110] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.418869][ T6684] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 145.442249][ T6684] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 145.598146][ T8526] netlink: 12 bytes leftover after parsing attributes in process `syz.3.967'. [ 145.617263][ T8526] : entered promiscuous mode [ 145.626211][ T8526] netlink: 116 bytes leftover after parsing attributes in process `syz.3.967'. [ 145.637145][ T8526] bridge_slave_1: left allmulticast mode [ 145.642829][ T8526] bridge_slave_1: left promiscuous mode [ 145.648985][ T8526] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.661704][ T8526] bridge_slave_0: left allmulticast mode [ 145.672639][ T8526] bridge_slave_0: left promiscuous mode [ 145.680863][ T8526] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.079546][ T8547] netlink: 'syz.3.975': attribute type 29 has an invalid length. [ 146.369368][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88806af5a000: rx timeout, send abort [ 146.624343][ T8587] xt_CT: You must specify a L4 protocol and not use inversions on it [ 146.643455][ T8588] xt_HMARK: proto mask must be zero with L3 mode [ 146.853160][ T8596] netlink: 'syz.3.991': attribute type 13 has an invalid length. [ 146.879059][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88806af5a000: abort rx timeout. Force session deactivation [ 147.043762][ T29] audit: type=1804 audit(1719343342.328:18): pid=8613 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.997" name="/root/syzkaller.rkiRRV/141/cgroup.controllers" dev="sda1" ino=1971 res=1 errno=0 [ 147.206570][ T8627] netlink: 'syz.1.999': attribute type 10 has an invalid length. [ 147.311344][ T8631] 1·: renamed from 70· (while UP) [ 147.319316][ T8631] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 147.547865][ T8648] x_tables: ip_tables: ah match: only valid for protocol 51 [ 147.703061][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.690752][ T8669] __nla_validate_parse: 7 callbacks suppressed [ 148.690772][ T8669] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1015'. [ 148.708503][ T8668] xt_CT: You must specify a L4 protocol and not use inversions on it [ 148.725050][ T8669] 1·: renamed from 70· (while UP) [ 148.739634][ T8669] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 148.753298][ T8668] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1017'. [ 148.890724][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.049256][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.157741][ T8690] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1022'. [ 149.202460][ T8696] sctp: [Deprecated]: syz.3.1023 (pid 8696) Use of struct sctp_assoc_value in delayed_ack socket option. [ 149.202460][ T8696] Use struct sctp_sack_info instead [ 149.237195][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.250158][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 149.256134][ T8704] x_tables: ip_tables: ah match: only valid for protocol 51 [ 149.272247][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 149.281019][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 149.289605][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 149.297726][ T52] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 149.305310][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 149.392359][ T8705] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1024'. [ 149.692126][ T12] bridge_slave_1: left allmulticast mode [ 149.708009][ T12] bridge_slave_1: left promiscuous mode [ 149.713823][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 149.756216][ T12] bridge_slave_0: left allmulticast mode [ 149.771956][ T12] bridge_slave_0: left promiscuous mode [ 149.785126][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.200020][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 150.212761][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 150.224021][ T12] bond0 (unregistering): Released all slaves [ 150.258733][ T8741] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1033'. [ 150.270064][ T8741] 0·: renamed from 71· (while UP) [ 150.279818][ T8741] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 150.508204][ T8758] netlink: 'syz.2.1038': attribute type 1 has an invalid length. [ 150.513064][ T8699] chnl_net:caif_netlink_parms(): no params data found [ 150.823793][ T12] hsr_slave_0: left promiscuous mode [ 150.864420][ T12] hsr_slave_1: left promiscuous mode [ 150.875670][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.886791][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.905248][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.922164][ T8788] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1047'. [ 150.932726][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.946938][ T8788] openvswitch: netlink: Flow key attribute not present in set flow. [ 150.978074][ T12] veth1_macvtap: left promiscuous mode [ 150.983974][ T12] veth0_macvtap: left promiscuous mode [ 150.989808][ T12] veth1_vlan: left promiscuous mode [ 150.995220][ T12] veth0_vlan: left promiscuous mode [ 151.022898][ T8790] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1046'. [ 151.344925][ T52] Bluetooth: hci3: command tx timeout [ 151.685892][ T12] team0 (unregistering): Port device team_slave_1 removed [ 151.783032][ T12] team0 (unregistering): Port device team_slave_0 removed [ 152.150136][ T8801] xt_TCPMSS: Only works on TCP SYN packets [ 152.213929][ T8699] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.221255][ T8699] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.232863][ T8699] bridge_slave_0: entered allmulticast mode [ 152.242562][ T8699] bridge_slave_0: entered promiscuous mode [ 152.262846][ T8794] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1048'. [ 152.284364][ T8699] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.292217][ T8699] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.310125][ T8699] bridge_slave_1: entered allmulticast mode [ 152.321507][ T8699] bridge_slave_1: entered promiscuous mode [ 152.453957][ T8699] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.510457][ T8809] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1054'. [ 152.530259][ T8699] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.671841][ T8699] team0: Port device team_slave_0 added [ 152.684131][ T8699] team0: Port device team_slave_1 added [ 153.023836][ T8699] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 153.047601][ T8699] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.114669][ T8699] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 153.140167][ T8699] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 153.166108][ T8699] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 153.286027][ T8699] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 153.497138][ T52] Bluetooth: hci3: command 0x041b tx timeout [ 153.812624][ T29] audit: type=1804 audit(1719343349.098:19): pid=8855 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.1.1068" name="/root/syzkaller.xEMFst/152/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 154.559643][ T8699] hsr_slave_0: entered promiscuous mode [ 154.567238][ T8699] hsr_slave_1: entered promiscuous mode [ 154.821834][ T8880] syzkaller1: entered promiscuous mode [ 154.862943][ T8880] syzkaller1: entered allmulticast mode [ 154.878715][ T8892] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1079'. [ 155.005687][ T8896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1081'. [ 155.083663][ T8899] syzkaller1: entered promiscuous mode [ 155.090469][ T8899] syzkaller1: entered allmulticast mode [ 155.259361][ T8910] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1086'. [ 155.288097][ T8910] dummy0: entered promiscuous mode [ 155.305481][ T8910] macvtap1: entered promiscuous mode [ 155.312197][ T8910] macvtap1: entered allmulticast mode [ 155.322891][ T8910] dummy0: entered allmulticast mode [ 155.442274][ T8910] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1086'. [ 155.474359][ T8910] dummy0: left allmulticast mode [ 155.481408][ T8910] dummy0: left promiscuous mode [ 155.505530][ T5090] Bluetooth: hci3: command 0x041b tx timeout [ 155.511831][ T8910] macvtap1: left promiscuous mode [ 155.519588][ T8910] macvtap1: left allmulticast mode [ 155.722366][ T8922] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1090'. [ 156.140164][ T8699] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 156.260798][ T8699] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 156.295928][ T8699] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 156.362897][ T8699] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 156.689440][ T8699] 8021q: adding VLAN 0 to HW filter on device bond0 [ 156.767053][ T8699] 8021q: adding VLAN 0 to HW filter on device team0 [ 156.838439][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.845640][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.884926][ T8941] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1095'. [ 156.929948][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.937161][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.073652][ T8699] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 157.105789][ T8699] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 157.224087][ T8950] nlmon0: entered promiscuous mode [ 157.283551][ T8950] vlan2: entered promiscuous mode [ 157.303381][ T8950] nlmon0: left promiscuous mode [ 157.381846][ T8962] x_tables: duplicate underflow at hook 2 [ 157.498390][ T8970] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1105'. [ 157.540371][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 157.579471][ T8699] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.596469][ T5090] Bluetooth: hci3: command 0x041b tx timeout [ 157.636636][ T8982] netlink: 9 bytes leftover after parsing attributes in process `syz.3.1106'. [ 157.660766][ T8982] 1·: renamed from 70· (while UP) [ 157.673308][ T8982] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 158.067519][ T8699] veth0_vlan: entered promiscuous mode [ 158.098001][ T8699] veth1_vlan: entered promiscuous mode [ 158.142005][ T8699] veth0_macvtap: entered promiscuous mode [ 158.154060][ T8699] veth1_macvtap: entered promiscuous mode [ 158.184446][ T8699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.196367][ T8699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.207000][ T8699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.217908][ T8699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.232007][ T8699] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.253231][ T8699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.265857][ T8699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.276221][ T8699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.289128][ T8699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.299426][ T8699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.311535][ T8699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.321412][ T8699] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.331965][ T8699] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.347008][ T8699] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.366502][ T8699] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.375462][ T8699] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.384265][ T8699] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.393160][ T8699] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.478741][ T6687] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.490939][ T6687] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.530423][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.540148][ T9009] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1116'. [ 158.540834][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.751363][ T9016] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1118'. [ 158.829490][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802532d400: rx timeout, send abort [ 159.134051][ T9038] dummy0: entered promiscuous mode [ 159.140942][ T9038] macvtap1: entered promiscuous mode [ 159.147730][ T9038] macvtap1: entered allmulticast mode [ 159.153166][ T9038] dummy0: entered allmulticast mode [ 159.169411][ T9038] dummy0: left allmulticast mode [ 159.174603][ T9038] dummy0: left promiscuous mode [ 159.187853][ T9038] macvtap1: left promiscuous mode [ 159.192932][ T9038] macvtap1: left allmulticast mode [ 159.319598][ C0] vxcan1: j1939_tp_rxtimer: 0xffff88804e661c00: rx timeout, send abort [ 159.328676][ C0] vxcan1: j1939_xtp_rx_abort_one: 0xffff88804e661c00: 0x40000: (3) A timeout occurred and this is the connection abort to close the session. [ 159.345247][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88802532d400: abort rx timeout. Force session deactivation [ 159.644148][ T9072] 8021q: adding VLAN 0 to HW filter on device bond1 [ 159.672319][ T9072] bond0: (slave bond1): Enslaving as an active interface with an up link [ 159.876355][ T9091] netlink: 'syz.0.1143': attribute type 3 has an invalid length. [ 159.878092][ T9076] syzkaller0: entered promiscuous mode [ 159.889865][ T9076] syzkaller0: entered allmulticast mode [ 160.356808][ T9105] __nla_validate_parse: 9 callbacks suppressed [ 160.356829][ T9105] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1147'. [ 160.694480][ T9111] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1149'. [ 162.674349][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 162.684244][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 162.692651][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 162.703807][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 162.718629][ T52] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 162.728156][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 162.803002][ T9114] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1150'. [ 162.908192][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.099576][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.121565][ T9137] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1155'. [ 163.293388][ T9147] netlink: 'syz.1.1160': attribute type 3 has an invalid length. [ 163.311835][ T9147] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1160'. [ 163.380135][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 163.819320][ T9164] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1165'. [ 163.845383][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.169441][ T9122] chnl_net:caif_netlink_parms(): no params data found [ 164.426676][ T9179] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1170'. [ 164.468456][ T9179] netlink: 56 bytes leftover after parsing attributes in process `syz.1.1170'. [ 164.791810][ T5090] Bluetooth: hci3: command tx timeout [ 164.960391][ T12] bridge_slave_1: left allmulticast mode [ 164.982996][ T9198] netlink: 'syz.2.1174': attribute type 3 has an invalid length. [ 165.002153][ T12] bridge_slave_1: left promiscuous mode [ 165.024203][ T9198] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1174'. [ 165.034308][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.087469][ T12] bridge_slave_0: left allmulticast mode [ 165.103661][ T9202] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1175'. [ 165.134127][ T12] bridge_slave_0: left promiscuous mode [ 165.152036][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.191809][ T29] audit: type=1804 audit(1719343360.478:20): pid=9202 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.3.1175" name="/root/syzkaller.rkiRRV/195/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 165.468144][ T9207] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 165.574336][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.588057][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.598654][ T9209] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1178'. [ 165.600379][ T12] bond0 (unregistering): Released all slaves [ 165.671425][ T9122] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.704851][ T9122] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.712582][ T9122] bridge_slave_0: entered allmulticast mode [ 165.720133][ T9122] bridge_slave_0: entered promiscuous mode [ 165.731696][ T9122] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.739193][ T9122] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.746590][ T9122] bridge_slave_1: entered allmulticast mode [ 165.754241][ T9122] bridge_slave_1: entered promiscuous mode [ 165.890258][ T9122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 166.167209][ T9122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.199766][ T9232] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1181'. [ 166.349828][ T9122] team0: Port device team_slave_0 added [ 166.410545][ T9250] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1188'. [ 166.438902][ T9122] team0: Port device team_slave_1 added [ 166.501761][ T12] hsr_slave_0: left promiscuous mode [ 166.507868][ T12] hsr_slave_1: left promiscuous mode [ 166.521606][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 166.533005][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 166.542473][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 166.551129][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 166.573716][ T9258] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1188'. [ 166.577349][ T12] veth1_macvtap: left promiscuous mode [ 166.594167][ T12] veth0_macvtap: left promiscuous mode [ 166.600058][ T12] veth1_vlan: left promiscuous mode [ 166.609175][ T12] veth0_vlan: left promiscuous mode [ 166.864875][ T5090] Bluetooth: hci3: command tx timeout [ 167.121036][ T12] team0 (unregistering): Port device team_slave_1 removed [ 167.168487][ T12] team0 (unregistering): Port device team_slave_0 removed [ 167.547403][ T9255] Κό: entered promiscuous mode [ 167.591229][ T9122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.608834][ T9122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.693707][ T9122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.720678][ T9122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.744440][ T9122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.791965][ T9122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.853362][ T9268] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 167.883060][ T9273] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 167.928374][ T9281] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1199'. [ 168.104442][ T9122] hsr_slave_0: entered promiscuous mode [ 168.120814][ T9122] hsr_slave_1: entered promiscuous mode [ 168.141318][ T9291] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (2047) [ 168.159705][ T9291] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 168.167971][ T9297] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1205'. [ 168.472849][ T9313] netlink: 'syz.1.1210': attribute type 11 has an invalid length. [ 168.477982][ T9314] x_tables: duplicate underflow at hook 2 [ 168.600251][ T9320] netlink: 'syz.1.1213': attribute type 29 has an invalid length. [ 168.614291][ T9320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1213'. [ 168.654355][ T9320] netlink: 'syz.1.1213': attribute type 29 has an invalid length. [ 168.672377][ T9320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1213'. [ 168.709799][ T9328] bond0: entered promiscuous mode [ 168.736995][ T9328] bond_slave_0: entered promiscuous mode [ 168.742992][ T9328] bond_slave_1: entered promiscuous mode [ 168.878012][ T9337] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1217'. [ 168.947886][ T5090] Bluetooth: hci3: command tx timeout [ 169.024926][ T9122] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 169.041175][ T9122] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 169.061368][ T9122] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 169.073132][ T9122] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 169.216434][ T9122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 169.250947][ T9122] 8021q: adding VLAN 0 to HW filter on device team0 [ 169.272504][ T5137] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.279735][ T5137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.320018][ T5137] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.327265][ T5137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 169.582938][ T9361] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1225'. [ 169.756298][ T9361] 8021q: adding VLAN 0 to HW filter on device bond2 [ 169.772432][ T9361] bond0: (slave bond2): Enslaving as an active interface with an up link [ 169.833981][ T9378] netlink: 'syz.0.1230': attribute type 11 has an invalid length. [ 169.847739][ T9122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.400151][ T9122] veth0_vlan: entered promiscuous mode [ 170.424008][ T9122] veth1_vlan: entered promiscuous mode [ 170.506508][ T9122] veth0_macvtap: entered promiscuous mode [ 170.524299][ T9122] veth1_macvtap: entered promiscuous mode [ 170.550012][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.572385][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.595448][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 170.605985][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.617678][ T9122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.655821][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.680741][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.697320][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.724801][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.745333][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.772091][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.794249][ T9122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 170.808965][ T9122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 170.827634][ T9122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.840562][ T9434] __nla_validate_parse: 3 callbacks suppressed [ 170.840582][ T9434] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1243'. [ 170.873240][ T9122] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.894475][ T9122] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.914874][ T9122] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.932435][ T9122] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 171.027240][ T5090] Bluetooth: hci3: command tx timeout [ 171.205930][ T50] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.221785][ T50] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.245387][ T9454] netlink: 'syz.1.1249': attribute type 21 has an invalid length. [ 171.262802][ T9455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1250'. [ 171.306679][ T6684] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.322265][ T6684] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 172.052749][ T9483] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1260'. [ 172.492341][ T9501] EXT4-fs warning (device sda1): verify_group_input:162: Bad blocks count 0 [ 173.491668][ T9512] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1271'. [ 173.758784][ T9526] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1275'. [ 173.767467][ T9523] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1273'. [ 173.865259][ T9530] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1277'. [ 173.877806][ T9528] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1276'. [ 173.885915][ T9530] bridge_slave_1: left allmulticast mode [ 173.892930][ T9530] bridge_slave_1: left promiscuous mode [ 173.899425][ T9530] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.911780][ T9530] bridge_slave_0: left allmulticast mode [ 173.920822][ T9530] bridge_slave_0: left promiscuous mode [ 173.927698][ T9530] bridge0: port 1(bridge_slave_0) entered disabled state [ 174.493011][ T9543] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1281'. [ 174.946958][ T9558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1286'. [ 175.853924][ T9586] __nla_validate_parse: 3 callbacks suppressed [ 175.853945][ T9586] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1295'. [ 175.980698][ T9598] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1297'. [ 176.242571][ T9615] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1304'. [ 176.294595][ T9613] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1303'. [ 176.377831][ T52] Bluetooth: hci2: command 0x0406 tx timeout [ 176.759081][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.361795][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.441226][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.510376][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 177.600482][ T12] bridge_slave_1: left allmulticast mode [ 177.607397][ T12] bridge_slave_1: left promiscuous mode [ 177.613840][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 177.623860][ T12] bridge_slave_0: left allmulticast mode [ 177.629821][ T12] bridge_slave_0: left promiscuous mode [ 177.636278][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 177.835327][ T29] audit: type=1804 audit(1719343373.118:21): pid=9640 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1309" name="/root/syzkaller.Mup6yG/367/memory.events" dev="sda1" ino=1969 res=1 errno=0 [ 177.936973][ T9645] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1312'. [ 178.151076][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 178.171516][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 178.181081][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 178.190120][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 178.206677][ T52] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 178.214198][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 178.234793][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88801f949400: rx timeout, send abort [ 178.329615][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 178.341616][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 178.352286][ T12] bond0 (unregistering): Released all slaves [ 178.456755][ T9659] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1315'. [ 178.608989][ T9664] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1316'. [ 178.751731][ C0] vxcan0: j1939_tp_rxtimer: 0xffff88801f949400: abort rx timeout. Force session deactivation [ 179.499026][ T9669] netlink: 'syz.2.1318': attribute type 4 has an invalid length. [ 179.507772][ T29] audit: type=1804 audit(1719343374.778:22): pid=9670 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.2.1318" name="/root/syzkaller.Mup6yG/368/cgroup.controllers" dev="sda1" ino=1980 res=1 errno=0 [ 179.838004][ T9684] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1324'. [ 179.864638][ T12] hsr_slave_0: left promiscuous mode [ 179.895405][ T12] hsr_slave_1: left promiscuous mode [ 179.939911][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 179.971724][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 180.029689][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.059665][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 180.189298][ T12] veth1_macvtap: left promiscuous mode [ 180.203086][ T12] veth0_macvtap: left promiscuous mode [ 180.210362][ T12] veth1_vlan: left promiscuous mode [ 180.222696][ T12] veth0_vlan: left promiscuous mode [ 180.315170][ T5090] Bluetooth: hci3: command tx timeout [ 180.336729][ T9693] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1323'. [ 181.023993][ T12] team0 (unregistering): Port device team_slave_1 removed [ 181.062689][ T12] team0 (unregistering): Port device team_slave_0 removed [ 181.622608][ T9716] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1330'. [ 181.687204][ T9654] chnl_net:caif_netlink_parms(): no params data found [ 181.723234][ T9723] netlink: 'syz.0.1333': attribute type 4 has an invalid length. [ 181.844170][ T9729] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1335'. [ 181.875997][ T9730] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1334'. [ 181.899323][ T9733] Bluetooth: MGMT ver 1.22 [ 181.904390][ T9733] Bluetooth: hci3: service_discovery: too big uuid_count value 12839 [ 182.028256][ T9654] bridge0: port 1(bridge_slave_0) entered blocking state [ 182.057950][ T9654] bridge0: port 1(bridge_slave_0) entered disabled state [ 182.072725][ T9654] bridge_slave_0: entered allmulticast mode [ 182.080330][ T9654] bridge_slave_0: entered promiscuous mode [ 182.089109][ T9654] bridge0: port 2(bridge_slave_1) entered blocking state [ 182.098098][ T9654] bridge0: port 2(bridge_slave_1) entered disabled state [ 182.105521][ T9654] bridge_slave_1: entered allmulticast mode [ 182.129571][ T9654] bridge_slave_1: entered promiscuous mode [ 182.214958][ T9654] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 182.251937][ T9654] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 182.358841][ T9654] team0: Port device team_slave_0 added [ 182.373846][ T9654] team0: Port device team_slave_1 added [ 182.385312][ T5090] Bluetooth: hci3: command tx timeout [ 182.413610][ T9654] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 182.421907][ T9654] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.448512][ T9654] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 182.461785][ T9654] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 182.469509][ T9654] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.497761][ T9654] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 182.571608][ T29] audit: type=1804 audit(1719343377.858:23): pid=9723 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.0.1333" name="/root/syzkaller.CrwWoA/302/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 182.607589][ T9654] hsr_slave_0: entered promiscuous mode [ 182.622473][ T9654] hsr_slave_1: entered promiscuous mode [ 183.114408][ T9654] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 183.166897][ T9654] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 183.184269][ T9654] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 183.197280][ T9654] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 183.222835][ T9769] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 2147221507 (only 8 groups) [ 183.376668][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880684e8400: rx timeout, send abort [ 183.396277][ T9654] 8021q: adding VLAN 0 to HW filter on device bond0 [ 183.463187][ T9654] 8021q: adding VLAN 0 to HW filter on device team0 [ 183.480807][ T9778] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1348'. [ 183.556482][ T5137] bridge0: port 1(bridge_slave_0) entered blocking state [ 183.563709][ T5137] bridge0: port 1(bridge_slave_0) entered forwarding state [ 183.578457][ T5137] bridge0: port 2(bridge_slave_1) entered blocking state [ 183.585718][ T5137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 183.635861][ T9654] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 183.719842][ T9793] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1353'. [ 183.885977][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880684e8400: abort rx timeout. Force session deactivation [ 184.473460][ T5090] Bluetooth: hci3: command tx timeout [ 185.078568][ T9654] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 185.568105][ T9841] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1363'. [ 185.663437][ T9654] veth0_vlan: entered promiscuous mode [ 185.690419][ T9654] veth1_vlan: entered promiscuous mode [ 185.740216][ T9654] veth0_macvtap: entered promiscuous mode [ 185.759908][ T9654] veth1_macvtap: entered promiscuous mode [ 185.817265][ T9654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.834326][ T9654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.844308][ T9654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 185.869048][ T9654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 185.892154][ T9848] can: request_module (can-proto-0) failed. [ 185.898687][ T9654] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 185.969250][ T9858] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1369'. [ 185.988479][ T9858] 0·: renamed from 71· (while UP) [ 186.016616][ T9858] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 186.048295][ T9654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.062960][ T9654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.083678][ T9654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.114594][ T9654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.129447][ T9654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.140536][ T9654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.153483][ T9654] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.165174][ T9654] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.186513][ T9654] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.208761][ T9871] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1373'. [ 186.236879][ T9871] dummy0: entered promiscuous mode [ 186.242255][ T9871] macvtap2: entered promiscuous mode [ 186.248151][ T9871] macvtap2: entered allmulticast mode [ 186.253634][ T9871] dummy0: entered allmulticast mode [ 186.267225][ T9654] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.284183][ T9654] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.294369][ T9654] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.309522][ T9654] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.322631][ T9875] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1373'. [ 186.339786][ T9875] dummy0: left allmulticast mode [ 186.349922][ T9875] dummy0: left promiscuous mode [ 186.359349][ T9875] macvtap2: left promiscuous mode [ 186.364553][ T9875] macvtap2: left allmulticast mode [ 186.542318][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.555576][ T5090] Bluetooth: hci3: command tx timeout [ 186.557875][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.616944][ T50] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.656733][ T50] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.822901][ T9896] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1378'. [ 186.873397][ T9901] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1380'. [ 186.974373][ T9901] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1380'. [ 187.005594][ T9901] tipc: Started in network mode [ 187.024395][ T9901] tipc: Node identity , cluster identity 4711 [ 187.046290][ T9901] tipc: Failed to set node id, please configure manually [ 187.053409][ T9901] tipc: Enabling of bearer rejected, failed to enable media [ 187.065344][ T9902] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1381'. [ 187.291816][ T9920] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1386'. [ 187.309510][ T9920] macvtap1: entered promiscuous mode [ 187.317139][ T9920] dummy0: entered promiscuous mode [ 187.322513][ T9920] macvtap1: entered allmulticast mode [ 187.329379][ T9920] dummy0: entered allmulticast mode [ 187.340050][ T9922] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1387'. [ 187.361751][ T9922] dummy0: entered promiscuous mode [ 187.368367][ T9922] macvtap1: entered promiscuous mode [ 187.374001][ T9922] macvtap1: entered allmulticast mode [ 187.379645][ T9922] dummy0: entered allmulticast mode [ 187.388549][ T9923] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1387'. [ 187.398228][ T9923] dummy0: left allmulticast mode [ 187.403408][ T9923] dummy0: left promiscuous mode [ 187.408741][ T9923] macvtap1: left promiscuous mode [ 187.413931][ T9923] macvtap1: left allmulticast mode [ 187.426475][ T9920] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1386'. [ 187.440821][ T9920] dummy0: left allmulticast mode [ 187.460326][ T9920] dummy0: left promiscuous mode [ 187.465778][ T9920] macvtap1: left promiscuous mode [ 187.471001][ T9920] macvtap1: left allmulticast mode [ 187.513486][ T9925] bridge0: port 3(gretap0) entered blocking state [ 187.522313][ T9925] bridge0: port 3(gretap0) entered disabled state [ 187.534009][ T9925] gretap0: entered allmulticast mode [ 187.550005][ T9925] gretap0: entered promiscuous mode [ 187.942272][ T9940] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1392'. [ 188.021275][ T9941] netlink: 'syz.0.1393': attribute type 3 has an invalid length. [ 188.066032][ T9941] netlink: 130984 bytes leftover after parsing attributes in process `syz.0.1393'. [ 189.012957][ T9962] dummy0: entered promiscuous mode [ 189.026072][ T52] Bluetooth: hci5: command 0x0405 tx timeout [ 189.055527][ T9962] macvtap3: entered promiscuous mode [ 189.097933][ T9962] macvtap3: entered allmulticast mode [ 189.109398][ T9962] dummy0: entered allmulticast mode [ 189.188256][ T9972] dummy0: left allmulticast mode [ 189.193454][ T9972] dummy0: left promiscuous mode [ 189.305366][ T9972] macvtap3: left promiscuous mode [ 189.315794][ T9972] macvtap3: left allmulticast mode [ 189.464047][ T9981] netlink: 'syz.2.1405': attribute type 3 has an invalid length. [ 189.545770][ T50] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.404405][ T50] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.458581][ T50] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.531137][ T50] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 190.685058][ T50] bridge_slave_1: left allmulticast mode [ 190.694938][ T50] bridge_slave_1: left promiscuous mode [ 190.700723][ T50] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.767335][ T50] bridge_slave_0: left allmulticast mode [ 190.795048][ T50] bridge_slave_0: left promiscuous mode [ 190.806745][ T50] bridge0: port 1(bridge_slave_0) entered disabled state [ 191.094267][ T52] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 191.116625][ T52] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 191.128647][ T52] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 191.148007][ T52] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 191.156416][ T52] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 191.169590][ T52] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 191.458319][ T50] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.470045][ T50] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.481957][ T50] bond0 (unregistering): Released all slaves [ 191.506699][T10001] ip6gretap0: entered promiscuous mode [ 191.541928][T10001] vlan2: entered promiscuous mode [ 191.571844][T10001] vlan2: entered allmulticast mode [ 191.591211][T10001] ip6gretap0: entered allmulticast mode [ 191.616763][T10001] ip6gretap0: left allmulticast mode [ 191.623641][T10001] ip6gretap0: left promiscuous mode [ 191.798457][T10023] netlink: 'syz.3.1411': attribute type 11 has an invalid length. [ 191.806656][T10025] dummy0: entered promiscuous mode [ 191.815776][T10025] macvtap4: entered promiscuous mode [ 191.821207][T10025] macvtap4: entered allmulticast mode [ 191.844900][T10025] dummy0: entered allmulticast mode [ 191.882179][T10030] __nla_validate_parse: 9 callbacks suppressed [ 191.882197][T10030] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1413'. [ 191.903631][T10030] dummy0: left allmulticast mode [ 191.949252][T10030] dummy0: left promiscuous mode [ 191.955119][T10030] macvtap4: left promiscuous mode [ 191.960185][T10030] macvtap4: left allmulticast mode [ 191.960398][T10040] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1415'. [ 192.174909][ T50] hsr_slave_0: left promiscuous mode [ 192.191343][ T50] hsr_slave_1: left promiscuous mode [ 192.208009][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.211664][T10048] netlink: 'syz.1.1419': attribute type 3 has an invalid length. [ 192.223541][ T50] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.223689][T10048] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1419'. [ 192.242525][ T50] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.265535][ T50] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.312006][ T50] veth1_macvtap: left promiscuous mode [ 192.326162][ T50] veth0_macvtap: left promiscuous mode [ 192.331860][ T50] veth1_vlan: left promiscuous mode [ 192.338495][ T50] veth0_vlan: left promiscuous mode [ 192.810846][ T50] team0 (unregistering): Port device team_slave_1 removed [ 192.853301][ T50] team0 (unregistering): Port device team_slave_0 removed [ 193.185299][ T52] Bluetooth: hci3: command tx timeout [ 193.397269][T10064] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1425'. [ 193.481818][T10071] netlink: 9 bytes leftover after parsing attributes in process `syz.1.1426'. [ 193.492926][T10071] 1·: renamed from 70· (while UP) [ 193.506045][T10071] A link change request failed with some changes committed already. Interface 71· may have been left with an inconsistent configuration, please check. [ 193.525025][T10069] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1423'. [ 193.547602][T10068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1427'. [ 193.657881][T10012] chnl_net:caif_netlink_parms(): no params data found [ 193.863518][T10085] macvlan0: entered allmulticast mode [ 193.882043][T10085] veth1_vlan: entered allmulticast mode [ 193.901127][T10096] netlink: 'syz.0.1434': attribute type 4 has an invalid length. [ 193.904068][T10012] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.911400][T10096] netlink: 116376 bytes leftover after parsing attributes in process `syz.0.1434'. [ 193.924642][T10012] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.928019][T10096] netlink: 18430 bytes leftover after parsing attributes in process `syz.0.1434'. [ 193.935821][T10012] bridge_slave_0: entered allmulticast mode [ 193.962197][T10012] bridge_slave_0: entered promiscuous mode [ 193.996160][T10012] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.007899][T10012] bridge0: port 2(bridge_slave_1) entered disabled state [ 194.021712][T10012] bridge_slave_1: entered allmulticast mode [ 194.038591][T10012] bridge_slave_1: entered promiscuous mode [ 194.237263][T10012] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 194.243256][T10111] netlink: 'syz.2.1436': attribute type 3 has an invalid length. [ 194.270922][T10111] netlink: 130984 bytes leftover after parsing attributes in process `syz.2.1436'. [ 194.274177][T10012] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 194.392389][T10012] team0: Port device team_slave_0 added [ 194.406712][T10012] team0: Port device team_slave_1 added [ 194.491311][T10012] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 194.517069][T10012] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.568670][T10012] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 194.599355][T10012] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 194.619846][T10012] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 194.653124][T10012] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 194.714111][ T1250] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.720942][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.986306][T10012] hsr_slave_0: entered promiscuous mode [ 195.005087][T10012] hsr_slave_1: entered promiscuous mode [ 195.151344][T10157] netlink: 'syz.0.1449': attribute type 3 has an invalid length. [ 195.264977][ T52] Bluetooth: hci3: command tx timeout [ 195.852818][T10012] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 195.882611][T10012] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 195.904488][T10012] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 195.930787][T10012] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 195.959268][T10205] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 2147221507 (only 8 groups) [ 196.169714][T10012] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.230614][T10012] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.253002][ T5142] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.260201][ T5142] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.293923][ T5134] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.301153][ T5134] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.411348][T10230] 0·: renamed from 71· (while UP) [ 196.434294][T10230] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 196.532054][T10012] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 196.902740][T10012] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.161135][T10272] __nla_validate_parse: 10 callbacks suppressed [ 197.161157][T10272] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1483'. [ 197.345779][ T52] Bluetooth: hci3: command tx timeout [ 197.451829][T10298] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1487'. [ 197.469080][T10298] 0·: renamed from 71· (while UP) [ 197.482217][T10299] xt_TCPMSS: Only works on TCP SYN packets [ 197.491128][T10299] netlink: 48 bytes leftover after parsing attributes in process `syz.0.1488'. [ 197.491708][T10298] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 197.550106][T10296] team_slave_0: entered promiscuous mode [ 197.582684][T10296] team_slave_0: entered allmulticast mode [ 197.652752][T10012] veth0_vlan: entered promiscuous mode [ 197.702704][T10012] veth1_vlan: entered promiscuous mode [ 197.729500][T10306] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 2147221507 (only 8 groups) [ 197.787911][T10012] veth0_macvtap: entered promiscuous mode [ 197.816094][T10012] veth1_macvtap: entered promiscuous mode [ 197.844602][T10012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.861149][T10012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.878801][T10012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 197.891606][T10012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.914102][T10012] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.948529][T10012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 197.990128][T10012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.008043][T10012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.019296][T10012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.029568][T10012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.040663][T10012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.051008][T10012] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.061901][T10012] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.082344][T10012] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.102813][T10012] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.124265][T10012] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.150941][T10012] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.179278][T10012] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.212775][T10325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1496'. [ 198.257061][T10332] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 198.288182][T10335] [ 198.290552][T10335] ====================================================== [ 198.297583][T10335] WARNING: possible circular locking dependency detected [ 198.304619][T10335] 6.10.0-rc4-syzkaller-00909-g73cfd947dbdb #0 Not tainted [ 198.311739][T10335] ------------------------------------------------------ [ 198.318770][T10335] syz.3.1499/10335 is trying to acquire lock: [ 198.324920][T10335] ffffffff8f5e7288 (rtnl_mutex){+.+.}-{3:3}, at: start_sync_thread+0xdc/0x2dc0 [ 198.333901][T10335] [ 198.333901][T10335] but task is already holding lock: [ 198.341264][T10335] ffff8880112a7850 (&smc->clcsock_release_lock){+.+.}-{3:3}, at: smc_setsockopt+0x1c3/0xe50 [ 198.351353][T10335] [ 198.351353][T10335] which lock already depends on the new lock. [ 198.351353][T10335] [ 198.361752][T10335] [ 198.361752][T10335] the existing dependency chain (in reverse order) is: [ 198.370757][T10335] [ 198.370757][T10335] -> #2 (&smc->clcsock_release_lock){+.+.}-{3:3}: [ 198.379355][T10335] lock_acquire+0x1ed/0x550 [ 198.384373][T10335] __mutex_lock+0x136/0xd70 [ 198.389385][T10335] smc_switch_to_fallback+0x35/0xd00 [ 198.395358][T10335] smc_sendmsg+0x11f/0x530 [ 198.400285][T10335] __sock_sendmsg+0x221/0x270 [ 198.405476][T10335] __sys_sendto+0x3a4/0x4f0 [ 198.410493][T10335] __x64_sys_sendto+0xde/0x100 [ 198.415772][T10335] do_syscall_64+0xf3/0x230 [ 198.420885][T10335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.427292][T10335] [ 198.427292][T10335] -> #1 (sk_lock-AF_INET){+.+.}-{0:0}: [ 198.434929][T10335] lock_acquire+0x1ed/0x550 [ 198.439962][T10335] lock_sock_nested+0x48/0x100 [ 198.445235][T10335] do_ip_setsockopt+0x1a2d/0x3cd0 [ 198.450783][T10335] ip_setsockopt+0x63/0x100 [ 198.455802][T10335] do_sock_setsockopt+0x3af/0x720 [ 198.461360][T10335] __sys_setsockopt+0x1ae/0x250 [ 198.466730][T10335] __x64_sys_setsockopt+0xb5/0xd0 [ 198.472294][T10335] do_syscall_64+0xf3/0x230 [ 198.477311][T10335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.483718][T10335] [ 198.483718][T10335] -> #0 (rtnl_mutex){+.+.}-{3:3}: [ 198.490922][T10335] validate_chain+0x18e0/0x5900 [ 198.496327][T10335] __lock_acquire+0x1346/0x1fd0 [ 198.501689][T10335] lock_acquire+0x1ed/0x550 [ 198.506705][T10335] __mutex_lock+0x136/0xd70 [ 198.511718][T10335] start_sync_thread+0xdc/0x2dc0 [ 198.517163][T10335] do_ip_vs_set_ctl+0x442/0x13d0 [ 198.522727][T10335] nf_setsockopt+0x295/0x2c0 [ 198.528026][T10335] smc_setsockopt+0x275/0xe50 [ 198.533307][T10335] do_sock_setsockopt+0x3af/0x720 [ 198.538867][T10335] __sys_setsockopt+0x1ae/0x250 [ 198.544233][T10335] __x64_sys_setsockopt+0xb5/0xd0 [ 198.549776][T10335] do_syscall_64+0xf3/0x230 [ 198.554792][T10335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 198.561282][T10335] [ 198.561282][T10335] other info that might help us debug this: [ 198.561282][T10335] [ 198.571488][T10335] Chain exists of: [ 198.571488][T10335] rtnl_mutex --> sk_lock-AF_INET --> &smc->clcsock_release_lock [ 198.571488][T10335] [ 198.585035][T10335] Possible unsafe locking scenario: [ 198.585035][T10335] [ 198.592470][T10335] CPU0 CPU1 [ 198.597826][T10335] ---- ---- [ 198.603176][T10335] lock(&smc->clcsock_release_lock); [ 198.608544][T10335] lock(sk_lock-AF_INET); [ 198.615474][T10335] lock(&smc->clcsock_release_lock); [ 198.623459][T10335] lock(rtnl_mutex); [ 198.627428][T10335] [ 198.627428][T10335] *** DEADLOCK *** [ 198.627428][T10335] [ 198.635553][T10335] 1 lock held by syz.3.1499/10335: [ 198.640642][T10335] #0: ffff8880112a7850 (&smc->clcsock_release_lock){+.+.}-{3:3}, at: smc_setsockopt+0x1c3/0xe50 [ 198.651164][T10335] [ 198.651164][T10335] stack backtrace: [ 198.657056][T10335] CPU: 1 PID: 10335 Comm: syz.3.1499 Not tainted 6.10.0-rc4-syzkaller-00909-g73cfd947dbdb #0 [ 198.667190][T10335] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 198.677253][T10335] Call Trace: [ 198.680605][T10335] [ 198.683521][T10335] dump_stack_lvl+0x241/0x360 [ 198.688190][T10335] ? __pfx_dump_stack_lvl+0x10/0x10 [ 198.693386][T10335] ? print_circular_bug+0x130/0x1a0 [ 198.698581][T10335] check_noncircular+0x36a/0x4a0 [ 198.703528][T10335] ? __pfx_check_noncircular+0x10/0x10 [ 198.708988][T10335] ? lockdep_lock+0x123/0x2b0 [ 198.713655][T10335] ? _find_first_zero_bit+0xd3/0x100 [ 198.718938][T10335] validate_chain+0x18e0/0x5900 [ 198.723795][T10335] ? validate_chain+0x11e/0x5900 [ 198.728724][T10335] ? __pfx_validate_chain+0x10/0x10 [ 198.733919][T10335] ? validate_chain+0x11e/0x5900 [ 198.738862][T10335] ? validate_chain+0x11e/0x5900 [ 198.743797][T10335] ? __pfx_validate_chain+0x10/0x10 [ 198.748990][T10335] ? __pfx_validate_chain+0x10/0x10 [ 198.754188][T10335] ? __pfx_validate_chain+0x10/0x10 [ 198.759382][T10335] ? mark_lock+0x9a/0x350 [ 198.763701][T10335] ? __pfx_validate_chain+0x10/0x10 [ 198.768889][T10335] __lock_acquire+0x1346/0x1fd0 [ 198.773733][T10335] lock_acquire+0x1ed/0x550 [ 198.778231][T10335] ? start_sync_thread+0xdc/0x2dc0 [ 198.783421][T10335] ? __pfx_lock_acquire+0x10/0x10 [ 198.788433][T10335] ? __pfx___might_resched+0x10/0x10 [ 198.793704][T10335] ? __lock_acquire+0x1346/0x1fd0 [ 198.798721][T10335] ? __pfx_validate_chain+0x10/0x10 [ 198.803914][T10335] ? validate_chain+0x11e/0x5900 [ 198.808846][T10335] __mutex_lock+0x136/0xd70 [ 198.813336][T10335] ? start_sync_thread+0xdc/0x2dc0 [ 198.818435][T10335] ? validate_chain+0x11e/0x5900 [ 198.823372][T10335] ? start_sync_thread+0xdc/0x2dc0 [ 198.828500][T10335] ? __pfx___mutex_lock+0x10/0x10 [ 198.833516][T10335] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 198.839829][T10335] ? try_module_get+0xdd/0x150 [ 198.844677][T10335] start_sync_thread+0xdc/0x2dc0 [ 198.849610][T10335] ? __lock_acquire+0x1346/0x1fd0 [ 198.854632][T10335] ? __pfx_start_sync_thread+0x10/0x10 [ 198.860077][T10335] ? __pfx___might_resched+0x10/0x10 [ 198.865360][T10335] ? __might_fault+0xaa/0x120 [ 198.870076][T10335] ? __pfx_lock_release+0x10/0x10 [ 198.875186][T10335] ? read_word_at_a_time+0xe/0x20 [ 198.880199][T10335] ? sized_strscpy+0x8d/0x220 [ 198.884877][T10335] do_ip_vs_set_ctl+0x442/0x13d0 [ 198.889809][T10335] ? __pfx___might_resched+0x10/0x10 [ 198.895084][T10335] ? __pfx_do_ip_vs_set_ctl+0x10/0x10 [ 198.900447][T10335] ? rcu_is_watching+0x15/0xb0 [ 198.905202][T10335] ? __mutex_unlock_slowpath+0x21d/0x750 [ 198.910824][T10335] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 198.916802][T10335] ? __pfx___mutex_lock+0x10/0x10 [ 198.921814][T10335] ? module_put+0x13a/0x2d0 [ 198.926315][T10335] nf_setsockopt+0x295/0x2c0 [ 198.930903][T10335] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 198.936782][T10335] smc_setsockopt+0x275/0xe50 [ 198.941452][T10335] ? __pfx_smc_setsockopt+0x10/0x10 [ 198.946641][T10335] ? aa_sock_opt_perm+0x79/0x120 [ 198.951578][T10335] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 198.957110][T10335] ? security_socket_setsockopt+0x87/0xb0 [ 198.962819][T10335] ? __pfx_smc_setsockopt+0x10/0x10 [ 198.968187][T10335] do_sock_setsockopt+0x3af/0x720 [ 198.973203][T10335] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 198.978745][T10335] ? __fget_files+0x29/0x470 [ 198.983330][T10335] ? __fget_files+0x3f6/0x470 [ 198.988011][T10335] __sys_setsockopt+0x1ae/0x250 [ 198.992852][T10335] __x64_sys_setsockopt+0xb5/0xd0 [ 198.997866][T10335] do_syscall_64+0xf3/0x230 [ 199.002359][T10335] ? clear_bhb_loop+0x35/0x90 [ 199.007027][T10335] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 199.012922][T10335] RIP: 0033:0x7f5b3a975ae9 [ 199.017331][T10335] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 199.036926][T10335] RSP: 002b:00007f5b3a3ff048 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 199.045333][T10335] RAX: ffffffffffffffda RBX: 00007f5b3ab03fa0 RCX: 00007f5b3a975ae9 [ 199.053292][T10335] RDX: 000000000000048b RSI: 0000000000000000 RDI: 0000000000000009 [ 199.061250][T10335] RBP: 00007f5b3a9f6746 R08: 0000000000000018 R09: 0000000000000000 [ 199.069206][T10335] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000000 [ 199.077162][T10335] R13: 000000000000000b R14: 00007f5b3ab03fa0 R15: 00007ffe00b5c1c8 [ 199.085133][T10335] [ 199.117526][T10339] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 199.125266][T10341] IPVS: stopping backup sync thread 10342 ... [ 199.141856][T10342] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 199.169452][T10012] ieee80211 phy40: Selected rate control algorithm 'minstrel_ht' [ 199.190492][T10344] netlink: 'syz.1.1500': attribute type 3 has an invalid length. [ 199.203447][T10344] netlink: 130984 bytes leftover after parsing attributes in process `syz.1.1500'. [ 199.220813][T10335] vlan2: entered promiscuous mode [ 199.227019][T10335] vlan2: entered allmulticast mode [ 199.248780][ T6684] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.249540][T10012] ieee80211 phy41: Selected rate control algorithm 'minstrel_ht' [ 199.265120][ T6684] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.290282][ T6684] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.301428][ T6684] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 201.762288][ T1110] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.710686][ T1110] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.778651][ T1110] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.832177][ T1110] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.937027][ T1110] bridge_slave_1: left allmulticast mode [ 202.942697][ T1110] bridge_slave_1: left promiscuous mode [ 202.950450][ T1110] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.961068][ T1110] bridge_slave_0: left allmulticast mode [ 202.968316][ T1110] bridge_slave_0: left promiscuous mode [ 202.974035][ T1110] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.142328][ T1110] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.154466][ T1110] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.166807][ T1110] bond0 (unregistering): Released all slaves [ 203.388591][ T1110] hsr_slave_0: left promiscuous mode [ 203.394587][ T1110] hsr_slave_1: left promiscuous mode [ 203.407359][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 203.415918][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 203.423815][ T1110] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 203.435463][ T1110] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.446464][ T1110] veth1_macvtap: left promiscuous mode [ 203.452023][ T1110] veth0_macvtap: left promiscuous mode [ 203.458447][ T1110] veth1_vlan: left promiscuous mode [ 203.463745][ T1110] veth0_vlan: left promiscuous mode [ 203.724151][ T1110] team0 (unregistering): Port device team_slave_1 removed [ 203.761324][ T1110] team0 (unregistering): Port device team_slave_0 removed