last executing test programs: 52.676041028s ago: executing program 1: socket(0x1a, 0x5, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@deltfilter={0x44, 0x2d, 0x100, 0x70bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {0x9, 0xfff2}, {0xa, 0x3}, {0xc, 0x7}}, [@TCA_RATE={0x6, 0x5, {0x6, 0x3}}, @TCA_RATE={0x6, 0x5, {0x7, 0x1f}}, @TCA_CHAIN={0x8, 0xb, 0x7fffffff}, @TCA_CHAIN={0x8, 0xb, 0x1000200}]}, 0x44}}, 0x4005) r2 = socket$inet(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000002700)=@raw={'raw\x00', 0x8, 0x3, 0x218, 0xc8, 0x8, 0xfa04, 0xc8, 0x6c02, 0x180, 0x194, 0x194, 0x180, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00', {}, {}, 0x6}, 0x0, 0xa0, 0xc8, 0x0, {0x0, 0x74020000}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x7a}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@multicast2, @dev, 0x0, 0x0, '\x00', 'tunl0\x00'}, 0x0, 0x70, 0xb8}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'snmp\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x278) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'ipvlan0\x00'}) socket$nl_generic(0x10, 0x3, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000400)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00', 0x80}, 0x90) r5 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r5, 0x0, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB], 0xd8}}, 0x0) ioctl$sock_SIOCINQ(r5, 0x541b, &(0x7f00000002c0)) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@cgroup, r4, 0x9}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r3}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000640)='U', 0x1080}], 0x1}, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) socketpair$unix(0x1, 0x5, 0x0, 0x0) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f00000000c0)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x10001, 0xce0251}, 0x9c) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000f4751f2100000000002020207b1af8ff00000000bfa1", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000030000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) gettid() 52.056209602s ago: executing program 1: bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3}, 0x48) r0 = socket(0x10, 0x3, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=@newqdisc={0x6c, 0x14, 0xf0b, 0x0, 0x0, {0x2}, [@TCA_STAB={0x48, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}, {0x8, 0x2, [0x0, 0x0]}}, {{0x1c, 0x1, {0x7, 0x0, 0x0, 0x2}}, {0x4}}]}]}, 0x6c}}, 0x0) ioctl$sock_rose_SIOCADDRT(r0, 0x890b, &(0x7f0000000100)={@remote={0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0xa3b, @bcast, @bpq0, 0x0, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null]}) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) setsockopt$inet_udp_encap(r1, 0x11, 0x64, &(0x7f0000000000)=0x2, 0x4) syz_emit_ethernet(0x3d, &(0x7f00000015c0)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2f, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @broadcast}, {0x0, 0x4e20, 0x1b, 0x0, @opaque="0398dae4bc27e62a34164dfba27a41451d47b2"}}}}}, 0x0) 51.837949642s ago: executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="1800000000e8ff0000000000ff000000850000000e000000850000005000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010b697036ba7ef9497d7c58b2000000008006000200"], 0x3c}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f00000000c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000140)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) write$binfmt_script(r4, 0x0, 0x0) sendfile(r3, r4, 0x0, 0x8000002b) sendmsg$SMC_PNETID_GET(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000180)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes256\x00'}, 0x58) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'xxhash64-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, 0x0, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512-generic\x00'}, 0x58) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000004540)=ANY=[@ANYBLOB="7c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000540012800e00010069703667726574617000000040000280060011004e240000060010004e22000006000300810000000600030001000000140007"], 0x7c}}, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0x80, &(0x7f0000000380)=[{&(0x7f0000000140)=""/110, 0x6e}, {&(0x7f0000000280)=""/85, 0x55}, {0x0}], 0x3}}], 0x1, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r7 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r7, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r8 = socket$netlink(0x10, 0x3, 0x0) writev(r8, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025000000190004000400000007fd17e5ffff0800040000000000000000", 0x39}], 0x1) writev(r8, &(0x7f0000000100)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000040)=@newtaction={0x48, 0x32, 0x871a15abc695fa3d, 0x0, 0x0, {}, [{0x34, 0x1, [@m_ctinfo={0x30, 0x1, 0x0, 0x0, {{0xb, 0x2}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) socket$inet(0x2, 0x2, 0x0) 50.984127597s ago: executing program 1: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010473ca7501003fc400925e4a44", @ANYRES32, @ANYBLOB="0d01140016000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700f205000000e72adf000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000800)={0x0}}, 0x0) 50.546307425s ago: executing program 1: socket$igmp(0x2, 0x3, 0x2) r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r0, 0x29, 0x2, &(0x7f0000000000), 0x4) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x18) recvmmsg(r0, &(0x7f0000002880), 0x0, 0x2, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz1\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_freezer_state(r1, &(0x7f0000000140), 0x2, 0x0) write$cgroup_freezer_state(r2, &(0x7f0000000040)='FROZEN\x00', 0x7) syz_init_net_socket$llc(0x1a, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$cgroup_procs(r1, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f00000001c0), 0x12) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 32.407829869s ago: executing program 2: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010473ca7501003fc400925e4a44", @ANYRES32, @ANYBLOB="0d01140016000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700f205000000e72adf000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000300)={0x60, r4, 0x601, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) 32.236774742s ago: executing program 2: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r2 = socket(0x10, 0x3, 0x0) clock_gettime(0x0, &(0x7f0000004a00)) bind$bt_hci(0xffffffffffffffff, &(0x7f0000000100)={0x1f, 0xffff, 0x4}, 0x5) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0xd) write$binfmt_misc(0xffffffffffffffff, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00'], 0xd) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000500)=@base={0x5, 0x6, 0x8, 0xf}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2c0000002000010000000000000000000a0000000000fc000000000008000f003f0000000500130001000000"], 0x2c}}, 0x0) recvmmsg(r2, &(0x7f0000004840)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) write(r2, &(0x7f00000000c0)="240000001e005f0214fffffffffffff8070000001d00000000000000050009000d000000", 0x24) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xa, 0x4, 0x8, 0xa}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c250000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00', r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_subtree(r8, &(0x7f0000000040)=ANY=[], 0x8) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r9, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x6, 0x2, {0x0, "00000000000000000400004f00"}}}]}, 0x48}}, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x450, 0x248, 0xc8, 0x8, 0x248, 0x5803, 0x3b0, 0x2e8, 0x2e8, 0x3b0, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @local, [], [], 'veth1_to_hsr\x00', 'geneve1\x00'}, 0x0, 0x220, 0x248, 0x0, {0x0, 0x2000000000000}, [@inet=@rpfilter={{0x28}}, @common=@inet=@hashlimit2={{0x150}, {'lo\x00', {0x0, 0x0, 0x0, 0xfffffffe, 0x0, 0x1f, 0x1f}}}]}, @common=@unspec=@NFQUEUE1={0x28}}, {{@uncond, 0x0, 0xd0, 0x138, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "4edc"}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4b0) ioctl$SIOCGSTAMPNS(r2, 0x8907, &(0x7f0000000000)) sendmsg$ETHTOOL_MSG_COALESCE_GET(r0, &(0x7f0000001140)={0x0, 0x0, &(0x7f0000001100)={&(0x7f0000000f00)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="01f3ffffff00000000001300000018000180140002"], 0x2c}}, 0x0) 32.112145204s ago: executing program 4: socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000, 0x0, 0x1}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e1a76cd7665cc6200008000040000000000000063000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x2a, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) r1 = socket$xdp(0x2c, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000500)={r1, 0x5, 0xf14b, 0x7}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x800, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x4000, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000280), 0x0) 32.033678276s ago: executing program 4: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x40, 0x0, &(0x7f0000000180)=0x54) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000007d00000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ITER_CREATE(0xb, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x9, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xd2}}}, &(0x7f0000000040)='GPL\x00'}, 0x90) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000380)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) connect$can_j1939(r3, &(0x7f0000001740)={0x2}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x6a73184ab3e77683, 0x0) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000001780)=ANY=[@ANYBLOB="1800000000000000000000000000000061111c0000000000950000000000000081ebf0df5009e3bfa7a5815e32a186f99ca3a7753fa66ebff0a93261763f00a57df35f3161c97af107333124d5d2ca1dcddc758e006662acf0543fda23cf60ab5aa1b4c0b97f7bfc5b9fcf6618002005c1255c41740c016975b770d32e66d2fa58d102b966770412ccb30587d465c8412466bcafafc86901a426c5ceb0e9858d272a3027e6d37bcdf397ac81b7e6652130846c9fd2d67904c1496945dcf86ca5227d43d096361ca0c6d0fbffffff9130832777731adf59acaa2d04ff7fec29770270dac8d11e7f651b9f8868c29c87dde04d359ff2d1c7300d2401a0a1288de96fb49863dcb2f6681a6a5409811484ca56e6ec7e95b8f6862df3eca8a2e8fd8aa5069d2013483297c0eaa3e9c2dd6542c37d9ee235a0b5deec3c366177ac8ba9d84cd2cfa180c1bed940a51cae53389cca056a79b985abb1ac77d8ce5c240aecea67e5cd37befbdc42534a502c3fa1e45c56ca750ed570ff0343ff057e737d8b2b22486389ac853fee470c932b6a36316ff0b7459a82f69fd74ba75c97dc42b504162bf6fa7933d0a36d97090ed1b70d176b75b816667356030799897eedf1c7035d4b572c762c01b4f1869de8dc91d555fa0300c506dc3e8dabdd8824ffbde06620a1a1bcef3eb73a7171859a85e29bc3940055719718184121ff4080d6551fbd195516e3974ed3689fbae9c27684ed61aa0781c53ebc6689ef1b25959b1f52f04cd6626e0300b88e2dd1b52d070ec194d5b33f6310c91f07988098de9bbd931e47b8a389508924cf14e32aaca3710eb9915a200ed6452b2764447bd7a729bf4df5a327c54edd015fdf2bd9808fb5f846be969fb8f71abf87395c48cedf9960f612c2e8bc828b96d003035702218f8c32c0bf8aa28157d37940861b83934f270ba263feac6347e35c1e4e0d967323964ff0e295db0226419a2a821d58c9c284fa827746dd2430dea41b86bb4e7f4a8c87b71c3356dde2be6805b00603ea915bf82884de32eea2f1a3a8b5c7fa9df4329a35c9c216d8f6a80c656faca2f777888bca1901a4517b1910d14d319d2dfa320796d1b256707e84ec09fa2dd6b4da53f312eefb999ce52aa26818c87a8c957fd36dffa5606d155ccc478cc798a6616f51b1374405001b6bd3b03a9b92c5cc7b90ddb2fc9b841ce7b2970236c56204244201b757bf129cdc7f5bafc30c0e27d438184f84ed05db34cbf65bb09c7ca25a6171b77048dfdbe770e2c6417ee6939a59d66634e767e1557f190ce1afce1d6096f7f441a91e0b4b543a59d94724927a0c1610e292345200e5e10406e24c3acb02f7d31db8cd97f5897aaf5cabbdbfe6e60e48a4525716205f895e0faa5e976b1441394034046daa6c0bf7bd90893afedfbe858864deb2ba51dfbd78753bc3ad4da2fcc955bf28c0cbc7d9b18e1d1a1ebf2d759561fe432bc7b793dd3e9275c8a90a4d7a9dc056aafc9bc3ac3ed5b1d1993332cedd756c"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x15}, 0x90) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) recvmmsg(r5, &(0x7f0000002640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000003c0)=""/237, 0xed}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000009200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000048000000060a010400000000000000000100000008000b4000000000200004801c0001800900010068617368000000000c000280080007400000000195bd7b6473797a3000000000140000001100010000000000000000000000000a"], 0xbc}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000e080005400000000f2c0000000b0a01080000000000000000010000000900020073797a32000000000900010073797a300000000014000000020a0300000000000000000000000000140000001000010000000000000000000000000a"], 0xc4}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) 32.010712122s ago: executing program 0: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x97}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x9b}}]}, &(0x7f0000000bc0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket(0x0, 0x800, 0xfffffffc) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x0, 0xe, &(0x7f0000000b80)=ANY=[@ANYBLOB="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"], &(0x7f0000000440)='syzkaller\x00', 0xfffffffd, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000)={0x5, 0xb, 0x0, 0x2}, 0x10}, 0x90) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000006c0), 0x709ac0, 0x0) ioctl$TUNGETFILTER(r1, 0x801054db, &(0x7f0000000700)=""/116) r2 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000005c0), 0x2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x4000)=nil, 0x4000, 0x0, 0x10012, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x0, 0x5, &(0x7f0000000240)=ANY=[@ANYBLOB="180200000000000000000000000000008500000022000000850000007d0000009500000000000000a2f39935fb4fb28700001c985195b991a422283489da00744c48fb56d9f1abec13aec58e7b9155b83cbfa68b783b083abb56c5a65e4a944d4f5baccda85c6c3d28ec84d9c68541472bd52f807f6734375041b10ce01e768d9ec946a40a9e5f2d8273db83e53b00db"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x18000000000002a0, 0xe, 0x0, &(0x7f00000002c0)="b9ff03076003008cb89e08f086dd", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETRULE(r4, &(0x7f0000000580)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000380)={0xa4, 0x7, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x8}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}, @NFTA_RULE_EXPRESSIONS={0x64, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x4}]}}}, {0x14, 0x1, 0x0, 0x1, @synproxy={{0xd}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x14, 0x1, 0x0, 0x1, @notrack={{0xc}, @val={0x4, 0x2, 0x0, 0x1, ["", "", "", "", ""]}}}]}, @NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x2}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x2}]}, 0xa4}, 0x1, 0x0, 0x0, 0x800}, 0x4) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x3, 0x5, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x61}, @call={0x85, 0x0, 0x0, 0x2a}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$netlink(0x10, 0x3, 0x8000000004) getsockopt$sock_buf(0xffffffffffffffff, 0x1, 0x0, 0x0, &(0x7f00000000c0)) writev(r6, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0258ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090810000000000000040000", 0x58}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r5, 0x0, 0xe40, 0xe40, &(0x7f00000002c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x7ce40c88adf4940c, 0xf, &(0x7f0000000180)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x10000000}, {}, {0x4, 0x0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}}}, &(0x7f0000000240)='syzkaller\x00', 0x5, 0x1003, &(0x7f0000001e40)=""/4099, 0x0, 0x6b}, 0x90) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={&(0x7f0000000040), 0xc, &(0x7f0000000180)={&(0x7f0000000080)=@ipv4_delroute={0x3c, 0x19, 0x1, 0x0, 0x0, {}, [@RTA_IP_PROTO={0x5}, @RTA_METRICS={0x8, 0x8, 0x0, 0x1, "cb9c96f0"}, @RTA_SRC={0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}, @RTA_GATEWAY={0x8, 0x5, @empty}]}, 0x3c}}, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r2, 0xc020f509, &(0x7f0000000000)={0xffffffffffffffff, 0x959400000, 0x17, 0xfff}) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0}, 0x90) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000003f80)={'team0\x00', &(0x7f0000003f40)=@ethtool_channels={0x1}}) 31.928511046s ago: executing program 2: r0 = socket(0x2, 0x2, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r0, 0x89f3, &(0x7f0000000000)={'syztnl1\x00', &(0x7f0000000180)={'tunl0\x00', r1, 0x0, 0x40, 0x0, 0x40000000, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x80, 0x0, 0x0, 0x0, 0x0, @rand_addr=0xfffffffd, @remote}}}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x12, 0xc, 0x4, 0x2}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000000c0)={r2, &(0x7f0000000100)}, 0x20) socket$inet6_udp(0xa, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000680)={0x6, 0x16, &(0x7f0000000240)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x6}, [@map_idx={0x18, 0xb, 0x5, 0x0, 0xe}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8000}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @initr0={0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x4}, @func={0x85, 0x0, 0x1, 0x0, 0x7}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000300)='GPL\x00', 0x0, 0x16, &(0x7f0000000340)=""/22, 0x41100, 0x52, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f0000000580)={0x3, 0x5}, 0x8, 0x10, &(0x7f00000005c0)={0x4, 0x4, 0x401, 0x5}, 0x10, 0x0, 0x0, 0x7, 0x0, &(0x7f0000000600)=[{0x0, 0x3, 0x4, 0xb}, {0x4, 0x2, 0x4, 0x9}, {0x2, 0x1, 0x5}, {0x7, 0x1, 0xb, 0x4}, {0x5, 0x4, 0xf, 0x7}, {0x3, 0x2, 0x10, 0x6}, {0x2, 0x3, 0x8}], 0x10, 0x9}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_SWAP(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x8005}, 0x0) 31.769395189s ago: executing program 2: socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r1, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r0, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) unshare(0x2c060000) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x2, 0x1, 0x1a}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe}, 0x90) unshare(0x24020400) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x5, 0xfffffffe) setsockopt$inet_int(r3, 0x0, 0x13, &(0x7f0000000000)=0xfffffbfa, 0x4) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f0000000180)=[@in6={0xa, 0x4e20, 0x0, @loopback={0xfec0ffff00000000}}, @in6={0xa, 0x4e20, 0x0, @private0}], 0x38) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r4, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, r5, 0x1, 0x0, 0x0, {{0x69}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_GET_DAEMON(r7, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000002c0)={0x14, r6, 0x30d, 0x0, 0x0, {0x4}}, 0x14}}, 0x0) r8 = socket$netlink(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000100)='./cgroup/syz0\x00', 0x200002, 0x0) r11 = openat$cgroup_ro(r10, &(0x7f00000001c0)='cgroup.freeze\x00', 0x275a, 0x0) read(r11, &(0x7f0000000080)=""/21, 0x15) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r8, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="1506000000000000004c0700000024000180060005004e22000008000300ffffffff0600010002"], 0x38}}, 0x0) recvmsg$unix(r2, &(0x7f00000005c0)={&(0x7f0000000040)=@abs, 0x6e, &(0x7f0000000540)=[{&(0x7f00000000c0)=""/162, 0xa2}, {&(0x7f0000000180)=""/55, 0x37}, {&(0x7f0000000200)=""/234, 0xea}, {&(0x7f0000000300)=""/230, 0xe6}, {&(0x7f00000006c0)=""/4096, 0x1000}, {&(0x7f0000000400)=""/89, 0x59}, {&(0x7f0000000500)=""/39, 0x27}], 0x7}, 0x40002000) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x3c, 0x4, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, @byteorder={{0xe}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BYTEORDER_SIZE={0x8}, @NFTA_BYTEORDER_LEN={0x8}, @NFTA_BYTEORDER_DREG={0x8}, @NFTA_BYTEORDER_SREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0xd8}}, 0x0) 31.316129341s ago: executing program 4: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x40, 0x0, &(0x7f0000000180)=0x54) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000007d00000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ITER_CREATE(0xb, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x9, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xd2}}}, &(0x7f0000000040)='GPL\x00'}, 0x90) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000380)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) connect$can_j1939(r3, &(0x7f0000001740)={0x2}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x6a73184ab3e77683, 0x0) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000001780)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x15}, 0x90) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) recvmmsg(r5, &(0x7f0000002640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f00000003c0)=""/237, 0xed}, {0x0}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000009200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000048000000060a010400000000000000000100000008000b4000000000200004801c0001800900010068617368000000000c000280080007400000000195bd7b6473797a3000000000140000001100010000000000000000000000000a"], 0xbc}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000e080005400000000f2c0000000b0a01080000000000000000010000000900020073797a32000000000900010073797a300000000014000000020a0300000000000000000000000000140000001000010000000000000000000000000a"], 0xc4}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) 31.303452906s ago: executing program 0: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x0, 0x8, 0x2}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000040)={0xffffffffffffffff, &(0x7f0000000d40), 0x0}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={0x1}, 0x4) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000001300), 0x4) pipe(&(0x7f0000000240)) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000001340)=@ccm_128={{0x304}, "46f43a78642c5c26", "ef883bc78a38b0cae66066a355130be8", "cb125933", "db736cc6cf0a94d9"}, 0x28) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4) sendto$inet6(r1, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001380)={0x87, 0x0, '\x00', [@pad1]}, 0x10) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r1, 0x1) 31.21571422s ago: executing program 3: ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f00000002c0)) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="440000001000010473ca7501003fc400925e4a44", @ANYRES32, @ANYBLOB="0d01140016000000240012000c00040062720064676500000c0002f60800000001080000080001"], 0x44}}, 0x0) r0 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0xa) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001000050700f205000000e72adf000002", @ANYRES32=r1], 0x48}}, 0x0) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$team(&(0x7f00000003c0), 0xffffffffffffffff) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000300)={0x60, r4, 0x601, 0x0, 0x0, {}, [{{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}]}}]}, 0x60}}, 0x0) 31.154550078s ago: executing program 0: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_newvlan={0x24, 0x56, 0x1, 0x0, 0x0, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6}}]}, 0x24}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x18, 0x76, 0x709, 0x0, 0x0, {0x7, 0x2, 0x300}}, 0x18}, 0x1, 0x5502000000000000}, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) r5 = socket(0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, 0x0) r6 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef], 0x0, [0x8, 0x4], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x3e8, 0x400, 0x0, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x8850) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c00000000e5ff8b0000000000000004e8000000121d4875", @ANYRES32=0x0], 0x30}], 0x1, 0x0) r9 = socket$packet(0x11, 0x0, 0x300) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff024}, {0x80000006}]}, 0x10) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x20, 0x7, 0x9, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x20, 0x0, 0x2}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@loopback, @initdev, 0x0}, &(0x7f0000000080)=0xc) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f00000000c0)={r11, 0x1, 0x6, @multicast}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000400)}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) 31.124665552s ago: executing program 3: socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000, 0x0, 0x1}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e1a76cd7665cc6200008000040000000000000063000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x2a, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) r1 = socket$xdp(0x2c, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000500)={r1, 0x5, 0xf14b, 0x7}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x800, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x4000, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000280)=[{0x0}], 0x1) 31.060986663s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADD6RD(r1, 0x89f9, &(0x7f0000000200)={'sit0\x00', &(0x7f00000001c0)={@loopback, @multicast2, 0x17}}) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="85000000070000006a0a00ff000000220c00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x2, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000080"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000029c0)={0xffffffffffffffff, 0xffffffffffffffff}) r6 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0xf, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r6, 0x26}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r7}, &(0x7f0000000000), &(0x7f0000000080)=r3}, 0x20) recvmsg$unix(r4, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000800)=[{&(0x7f00000002c0)=""/139, 0x8b}, {0x0, 0x3}], 0x2, &(0x7f0000000880)}, 0x0) sendmsg$inet(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000001740)=[{&(0x7f0000001080)="3e26cca5654ec15949e45af8b1159d592e49690b9f6c637472b128e2b445f281f35b794162cb429c47dca66837d2a9544b07d3f068c0072dde7325a5386fe8c27b83e9e41c7b7bc6060c4fed7f9ae8a4870cfccbc862ebfce7794091afccee06954ce44ea262ff002aba2b247865327723ddb0e09419a4ae239bf3c4b31f9211e49d6954645c885b9bd37b06", 0x8c}], 0x1}, 0x0) recvmmsg(r0, &(0x7f0000004140)=[{{&(0x7f0000000340)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @mcast2}}}, 0x80, &(0x7f00000006c0)=[{&(0x7f00000003c0)=""/252, 0xfc}, {&(0x7f00000004c0)=""/177, 0xb1}, {&(0x7f0000000580)=""/174, 0xae}, {&(0x7f0000000a40)=""/4096, 0x1000}], 0x4, &(0x7f0000000700)=""/183, 0xb7}, 0x9}, {{&(0x7f00000007c0)=@vsock={0x28, 0x0, 0x0, @host}, 0x80, &(0x7f0000002c00)=[{&(0x7f0000000840)=""/56, 0x38}, {&(0x7f0000000880)=""/218, 0xda}, {&(0x7f0000001a40)=""/190, 0xbe}, {&(0x7f0000001b00)=""/128, 0x80}, {&(0x7f0000004240)=""/93, 0x5d}, {&(0x7f0000001c00)=""/4096, 0x1000}], 0x6, &(0x7f0000002c80)=""/159, 0x9f}, 0x4}, {{&(0x7f0000002d40)=@rc={0x1f, @fixed}, 0x80, &(0x7f00000040c0)=[{&(0x7f0000002dc0)=""/4096, 0x1000}, {&(0x7f0000000980)=""/60, 0x3c}, {&(0x7f0000003dc0)=""/10, 0xa}, {&(0x7f0000003e00)=""/242, 0xf2}, {&(0x7f0000003f00)=""/199, 0xc7}, {&(0x7f0000004000)=""/167, 0xa7}], 0x6}, 0x3}], 0x3, 0x400001a2, &(0x7f0000004200)={0x77359400}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000000)=ANY=[@ANYRESOCT=r1, @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000407b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 30.985842365s ago: executing program 4: getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@local, 0x0, 0x2}, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c8, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x8, 0x0, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0x0}, 0x48) socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x6}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001980), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000240)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000020000001400018008000200060000000600050000000000"], 0x28}}, 0x0) 30.969217937s ago: executing program 0: bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x12, 0x0, 0x8, 0x2}, 0x48) socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r0, &(0x7f0000000000), 0x0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, 0x0, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={0x1}, 0x4) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb4, 0x7f}, 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000001300), 0x4) pipe(&(0x7f0000000240)) setsockopt$inet6_tcp_TLS_TX(r1, 0x6, 0x1, &(0x7f0000001340)=@ccm_128={{0x304}, "46f43a78642c5c26", "ef883bc78a38b0cae66066a355130be8", "cb125933", "db736cc6cf0a94d9"}, 0x28) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x8000002}, 0x1c) setsockopt$sock_int(r1, 0x1, 0x12, &(0x7f0000000180)=0x4000000, 0x4) sendto$inet6(r1, 0x0, 0x1e, 0x2200c851, &(0x7f0000b63fe4)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f0000001380)={0x87, 0x0, '\x00', [@pad1]}, 0x10) sendto$inet6(r1, &(0x7f0000000080)="44f9b108b1cdc885c9c533d21f474bec8bfef1df1e2da71e578dc6b91d09f7ab15378571d8e27546090011006e75436914ab717528ee4b7a9beaf908d11137c11903064e83b4951f4d433a5404970c85d92d7083fd38844cbb0c6c5eb508ddc2dc7a590aa7941b1e9eeb5a688138dea09b776cbfa784cbf550bf3074fb0d775da4df5a3f48bbdf452eeb6b923da9d0e25b80f76a873664b5753444fe05f33e5f91045540836c3cd6af10f0cd018f0c6f57f926ac959a5628c45088fbe0c87fbe6cbcda4662d2a12f6d00"/215, 0xd0d0c2ac, 0x1, 0x0, 0x0) shutdown(r1, 0x1) 30.905821982s ago: executing program 4: r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000040)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xa, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0x41}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0xc, 0x2}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfff0}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x6, 0xa, 0x9, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r3}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_xfrm(r2, &(0x7f0000000140)={0xffffffffffffffff, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@newsa={0x140, 0x10, 0x1, 0x0, 0x0, {{@in=@multicast1, @in6=@dev}, {@in=@multicast1, 0x0, 0x6c}, @in=@loopback, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x21}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @tfcpad={0x8}]}, 0x140}}, 0x40) 30.845457121s ago: executing program 2: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000002c0)={'macvlan1\x00'}) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r1, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @private}, 0xc) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) r3 = socket(0x2, 0x3, 0x100000001) bind$inet(r3, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f00000000c0)={0x2, 0x0, @multicast2}, 0x10) 30.839137267s ago: executing program 0: socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000000)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="0a000600080211000001000030005080110001004abee339084eeef16f168864f40000000800070000000000050002"], 0x58}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000800)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}]}, @NFT_MSG_NEWSETELEM={0xc8, 0xc, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x9c, 0x3, 0x0, 0x1, [{0x98, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x8c, 0xb, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x5}, @NFTA_LIMIT_UNIT={0xc}]}}}, {0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x12}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0x14c}}, 0x0) 30.183916099s ago: executing program 3: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket(0x2, 0x2, 0x0) getsockopt$inet_mreqn(r0, 0x0, 0x40, 0x0, &(0x7f0000000180)=0x54) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xd, &(0x7f0000000fc0)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b5af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000001e000000850000007d00000095"], &(0x7f0000000840)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ITER_CREATE(0xb, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x9, 0xf, &(0x7f0000000180)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0xd2}}}, &(0x7f0000000040)='GPL\x00'}, 0x90) r3 = socket$can_j1939(0x1d, 0x2, 0x7) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000380)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x400, 0x0, 0x32}, 0x9c) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000200)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0x8a}, 0x9c) bind$inet6(r4, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r4, 0x2) connect$can_j1939(r3, &(0x7f0000001740)={0x2}, 0x18) r5 = socket$nl_generic(0x10, 0x3, 0x10) clock_gettime(0x6a73184ab3e77683, 0x0) sendmsg$nl_generic(r5, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x19, 0x4, &(0x7f0000001780)=ANY=[@ANYBLOB="1800000000000000000000000000000061111c0000000000950000000000000081ebf0df5009e3bfa7a5815e32a186f99ca3a7753fa66ebff0a93261763f00a57df35f3161c97af107333124d5d2ca1dcddc758e006662acf0543fda23cf60ab5aa1b4c0b97f7bfc5b9fcf6618002005c1255c41740c016975b770d32e66d2fa58d102b966770412ccb30587d465c8412466bcafafc86901a426c5ceb0e9858d272a3027e6d37bcdf397ac81b7e6652130846c9fd2d67904c1496945dcf86ca5227d43d096361ca0c6d0fbffffff9130832777731adf59acaa2d04ff7fec29770270dac8d11e7f651b9f8868c29c87dde04d359ff2d1c7300d2401a0a1288de96fb49863dcb2f6681a6a5409811484ca56e6ec7e95b8f6862df3eca8a2e8fd8aa5069d2013483297c0eaa3e9c2dd6542c37d9ee235a0b5deec3c366177ac8ba9d84cd2cfa180c1bed940a51cae53389cca056a79b985abb1ac77d8ce5c240aecea67e5cd37befbdc42534a502c3fa1e45c56ca750ed570ff0343ff057e737d8b2b22486389ac853fee470c932b6a36316ff0b7459a82f69fd74ba75c97dc42b504162bf6fa7933d0a36d97090ed1b70d176b75b816667356030799897eedf1c7035d4b572c762c01b4f1869de8dc91d555fa0300c506dc3e8dabdd8824ffbde06620a1a1bcef3eb73a7171859a85e29bc3940055719718184121ff4080d6551fbd195516e3974ed3689fbae9c27684ed61aa0781c53ebc6689ef1b25959b1f52f04cd6626e0300b88e2dd1b52d070ec194d5b33f6310c91f07988098de9bbd931e47b8a389508924cf14e32aaca3710eb9915a200ed6452b2764447bd7a729bf4df5a327c54edd015fdf2bd9808fb5f846be969fb8f71abf87395c48cedf9960f612c2e8bc828b96d003035702218f8c32c0bf8aa28157d37940861b83934f270ba263feac6347e35c1e4e0d967323964ff0e295db0226419a2a821d58c9c284fa827746dd2430dea41b86bb4e7f4a8c87b71c3356dde2be6805b00603ea915bf82884de32eea2f1a3a8b5c7fa9df4329a35c9c216d8f6a80c656faca2f777888bca1901a4517b1910d14d319d2dfa320796d1b256707e84ec09fa2dd6b4da53f312eefb999ce52aa26818c87a8c957fd36dffa5606d155ccc478cc798a6616f51b1374405001b6bd3b03a9b92c5cc7b90ddb2fc9b841ce7b2970236c56204244201b757bf129cdc7f5bafc30c0e27d438184f84ed05db34cbf65bb09c7ca25a6171b77048dfdbe770e2c6417ee6939a59d66634e767e1557f190ce1afce1d6096f7f441a91e0b4b543a59d94724927a0c1610e292345200e5e10406e24c3acb02f7d31db8cd97f5897aaf5cabbdbfe6e60e48a4525716205f895e0faa5e976b1441394034046daa6c0bf7bd90893afedfbe858864deb2ba51dfbd78753bc3ad4da2fcc955bf28c0cbc7d9b18e1d1a1ebf2d759561fe432bc7b793dd3e9275c8a90a4d7a9dc056aafc9bc3ac3ed5b1d1993332cedd756c"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x1000, &(0x7f0000000200)=""/4096, 0x0, 0x0, '\x00', 0x0, 0x15}, 0x90) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x0) recvmmsg(r5, &(0x7f0000002640)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000500)=""/4096, 0x1000}], 0x1}}, {{0x0, 0x0, 0x0}}], 0x3, 0x0, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000009200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01080000000000000000010000000900010073797a30000000002c000000030a01020000000000000000010000000900010073797a30000000000900030073797a320000000048000000060a010400000000000000000100000008000b4000000000200004801c0001800900010068617368000000000c000280080007400000000195bd7b6473797a3000000000140000001100010000000000000000000000000a"], 0xbc}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000e080005400000000f2c0000000b0a01080000000000000000010000000900020073797a32000000000900010073797a300000000014000000020a0300000000000000000000000000140000001000010000000000000000000000000a"], 0xc4}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r7, 0x8933, &(0x7f0000000040)={'vcan0\x00'}) 30.019492728s ago: executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='cpuacct.stat\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) socketpair(0x0, 0x0, 0x0, &(0x7f0000000100)) socket$nl_sock_diag(0x10, 0x3, 0x4) openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) close(r0) openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=@framed={{0x56, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@initr0]}, &(0x7f0000000000)='GPL\x00'}, 0x80) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, 0x0) close(0xffffffffffffffff) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000000)={r2}, 0xfffffffffffffda7) ioctl$SIOCSIFHWADDR(r1, 0x89f0, &(0x7f0000000900)={'bridge0\x00', @random='\x00\x00\x00 \x00'}) 20.528984642s ago: executing program 1: r0 = socket(0x40000000015, 0x5, 0x0) connect$inet(r0, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) bind$inet(r0, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) r1 = socket(0x15, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x0, 0x0, 0x0) getsockopt(r1, 0x200000000114, 0x2715, 0x0, &(0x7f0000000040)) 886.03815ms ago: executing program 4: r0 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e20}, 0x1c) listen(r0, 0x20200007) r1 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r1, &(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10) getsockopt$inet_int(r1, 0x10d, 0x85, 0x0, &(0x7f0000000000)) 810.298993ms ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) socket$kcm(0x29, 0x0, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="180200000000000000000000009b0000850000009b000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) r4 = accept4(r2, &(0x7f00000003c0)=@generic, &(0x7f0000000040)=0x80, 0x80000) sendmsg$IPSET_CMD_SWAP(r4, &(0x7f0000000540)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000140)={&(0x7f00000004c0)={0x58, 0x6, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x8}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x58}, 0x1, 0x0, 0x0, 0x4008814}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$tun(r1, &(0x7f0000000740)={@val={0x0, 0x800}, @val={0x0, 0x80, 0x6b, 0x4, 0x2, 0x8}, @llc={@llc={0xe, 0xff, "8e", "74fb8cd3ddb0d511c7845bca2018bb2bba3fd2ccc6af366b7c028f"}}}, 0x2c) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000006d00000095"], 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r6}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r5}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) 802.874455ms ago: executing program 0: socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/5, 0x200000, 0x1000, 0x0, 0x1}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000002c0)) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bond_slave_1\x00'}) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) bpf$MAP_DELETE_ELEM(0x3, 0x0, 0x0) socket$xdp(0x2c, 0x3, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000900)={0x2, 0x5, &(0x7f00000000c0)=ANY=[@ANYBLOB="180000002e1a76cd7665cc6200008000040000000000000063000000000000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x4, 0x2a, &(0x7f0000000100)=""/147, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x17, 0x10, 0x0, 0x0, 0x61e5cc96}, 0x22) r1 = socket$xdp(0x2c, 0x3, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000500)={r1, 0x5, 0xf14b, 0x7}) setsockopt$XDP_TX_RING(r1, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) setsockopt$XDP_UMEM_COMPLETION_RING(r1, 0x11b, 0x6, &(0x7f0000000180)=0x800, 0x4) setsockopt$XDP_UMEM_FILL_RING(r1, 0x11b, 0x5, &(0x7f0000000200)=0x4000, 0x4) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00'}) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet6(0xa, 0x2, 0x0) r3 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r3, &(0x7f0000000280)=[{0x0}], 0x1) 0s ago: executing program 3: ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000280)={'syztnl0\x00', &(0x7f0000000200)={'syztnl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, @rand_addr=0x64010101, @initdev={0xac, 0x1e, 0x0, 0x0}}}}}) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket(0x2, 0x80805, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)=@bridge_newvlan={0x24, 0x56, 0x1, 0x0, 0x0, {}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_RANGE={0x6}}]}, 0x24}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}]}, 0x60}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@bridge_newvlan={0x18, 0x76, 0x709, 0x0, 0x0, {0x7, 0x2, 0x300}}, 0x18}, 0x1, 0x5502000000000000}, 0x0) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) r5 = socket(0x11, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, 0x0) r6 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r6, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x8c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r7, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x5c, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xef], 0x0, [0x8, 0x4], [0x0, 0x8]}}]}}]}, 0x8c}}, 0x0) sendmsg$AUDIT_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000140), 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x3e8, 0x400, 0x0, 0x25dfdbfd, "", ["", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000}, 0x8850) sendmmsg$inet_sctp(r1, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c00000000e5ff8b0000000000000004e8000000121d4875", @ANYRES32=0x0], 0x30}], 0x1, 0x0) r9 = socket$packet(0x11, 0x0, 0x300) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000100)=[{0x30, 0x0, 0x0, 0xfffff024}, {0x80000006}]}, 0x10) r10 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000c80)={'lo\x00'}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r10, 0x89f1, &(0x7f0000000600)={'ip6tnl0\x00', &(0x7f0000000580)={'syztnl0\x00', 0x0, 0x2f, 0x0, 0x20, 0x7, 0x9, @empty, @private2={0xfc, 0x2, '\x00', 0x1}, 0x8, 0x20, 0x0, 0x2}}) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000040)={@loopback, @initdev, 0x0}, &(0x7f0000000080)=0xc) setsockopt$packet_add_memb(r9, 0x107, 0x1, &(0x7f00000000c0)={r11, 0x1, 0x6, @multicast}, 0x10) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000001c0)={0xffffffffffffffff, 0x58, &(0x7f0000000400)}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) kernel console output (not intermixed with test programs): ave_0): Enslaving as an active interface with an up link [ 166.799325][ T8711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 166.890970][ T8711] team0: Port device team_slave_0 added [ 166.911448][ T8711] team0: Port device team_slave_1 added [ 167.023123][ T8711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 167.037036][ T8711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.077861][ T8753] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 167.096460][ T8711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 167.124292][ T8711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 167.147420][ T8711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 167.182743][ T8711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 167.469814][ T8711] hsr_slave_0: entered promiscuous mode [ 167.485949][ T8711] hsr_slave_1: entered promiscuous mode [ 167.504785][ T8711] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 167.525404][ T8711] Cannot create hsr debugfs directory [ 167.724532][ T53] Bluetooth: hci3: command tx timeout [ 167.850606][ T8746] chnl_net:caif_netlink_parms(): no params data found [ 168.097335][ T8711] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.391541][ T8711] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.465516][ T8746] bridge0: port 1(bridge_slave_0) entered blocking state [ 168.472671][ T8746] bridge0: port 1(bridge_slave_0) entered disabled state [ 168.489184][ T8746] bridge_slave_0: entered allmulticast mode [ 168.505929][ T8746] bridge_slave_0: entered promiscuous mode [ 168.578547][ T8711] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.646785][ T8746] bridge0: port 2(bridge_slave_1) entered blocking state [ 168.664689][ T8746] bridge0: port 2(bridge_slave_1) entered disabled state [ 168.682428][ T8746] bridge_slave_1: entered allmulticast mode [ 168.689092][ T53] Bluetooth: hci2: command tx timeout [ 168.702782][ T8746] bridge_slave_1: entered promiscuous mode [ 168.870314][ T8711] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 168.980283][ T8746] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.025612][ T8746] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.135495][ T8829] Bluetooth: MGMT ver 1.22 [ 169.190947][ T8746] team0: Port device team_slave_0 added [ 169.228433][ T8746] team0: Port device team_slave_1 added [ 169.358784][ T8746] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.374760][ T8746] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.412509][ T8746] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.443193][ T8746] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 169.453381][ T8746] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.496584][ T8746] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 169.527130][ T8711] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 169.603076][ T8711] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 169.608765][ T8840] xt_hashlimit: size too large, truncated to 1048576 [ 169.623335][ T8840] xt_hashlimit: overflow, try lower: 0/0 [ 169.623939][ T8837] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 169.687184][ T8746] hsr_slave_0: entered promiscuous mode [ 169.745103][ T8746] hsr_slave_1: entered promiscuous mode [ 169.752852][ T8746] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 169.782590][ T8746] Cannot create hsr debugfs directory [ 169.803682][ T8711] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 169.804779][ T53] Bluetooth: hci3: command tx timeout [ 169.891526][ T8711] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 169.958469][ T8849] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 170.174318][ T8850] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 170.267143][ T8746] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.316314][ T8711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 170.369132][ T8746] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.418418][ T8711] 8021q: adding VLAN 0 to HW filter on device team0 [ 170.431695][ T5157] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.438894][ T5157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 170.470300][ T5157] bridge0: port 2(bridge_slave_1) entered blocking state [ 170.477496][ T5157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 170.567470][ T8746] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.669118][ T8711] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 170.765979][ T53] Bluetooth: hci2: command tx timeout [ 171.019019][ T8746] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 171.115246][ T8877] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 171.145731][ T8876] netlink: 2060 bytes leftover after parsing attributes in process `syz-executor.1'. [ 171.149159][ T8877] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 171.158833][ T8876] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 171.173123][ T8876] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.1'. [ 171.396225][ T8746] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 171.430922][ T8746] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 171.468308][ T8746] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 171.487257][ T8746] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 171.515128][ T8711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 171.644089][ T8893] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 171.779323][ T8746] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.832992][ T8746] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.863048][ T6138] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.870233][ T6138] bridge0: port 1(bridge_slave_0) entered forwarding state [ 171.884464][ T53] Bluetooth: hci3: command tx timeout [ 171.926472][ T6154] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.933658][ T6154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.111313][ T8711] veth0_vlan: entered promiscuous mode [ 172.142140][ T8711] veth1_vlan: entered promiscuous mode [ 172.221611][ T8711] veth0_macvtap: entered promiscuous mode [ 172.252584][ T8711] veth1_macvtap: entered promiscuous mode [ 172.294065][ T8711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.331231][ T8711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.366005][ T8711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.389488][ T8711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.411181][ T8711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.422144][ T8711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.433414][ T8711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.447159][ T8711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.457766][ T8711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.468632][ T8711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.478990][ T8711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.489758][ T8711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.501879][ T8711] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.514781][ T8711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.526300][ T8711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.537498][ T8711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.548259][ T8711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.560399][ T8711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.571276][ T8711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.591681][ T8711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.609383][ T8711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.620529][ T8711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.635611][ T8711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.648400][ T8711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.659436][ T8711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.671460][ T8711] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.682052][ T8711] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.727839][ T8711] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 172.806730][ T8711] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.816055][ T8711] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.825967][ T8711] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.835665][ T8711] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 172.846920][ T53] Bluetooth: hci2: command tx timeout [ 172.897615][ T8746] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 173.054007][ T8746] veth0_vlan: entered promiscuous mode [ 173.111010][ T5737] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.116467][ T8746] veth1_vlan: entered promiscuous mode [ 173.133402][ T5737] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.193739][ T5737] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.202913][ T5737] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.273567][ T8746] veth0_macvtap: entered promiscuous mode [ 173.300291][ T8746] veth1_macvtap: entered promiscuous mode [ 173.358915][ T8746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.370245][ T8746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.380692][ T8746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.391865][ T8746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.403081][ T8746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.417624][ T8746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.427670][ T8746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.438183][ T8746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.448048][ T8746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.460491][ T8746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.471758][ T8746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.473094][ T8935] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 173.482198][ T8746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.482217][ T8746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 173.482233][ T8746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.483909][ T8746] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 173.534705][ T8936] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 173.553704][ T8936] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 173.563282][ T8936] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 173.589204][ T8746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.600268][ T8746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.610298][ T8746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.623238][ T8746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.633467][ T8746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.646066][ T8746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.656119][ T8746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.667999][ T8746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.678430][ T8746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.690891][ T8746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.700872][ T8746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.711338][ T8746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.721257][ T8746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.732162][ T8746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.742004][ T8746] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.752788][ T8746] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.768262][ T8746] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.784323][ T8746] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.793195][ T8746] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.804453][ T8746] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.826155][ T8746] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.966319][ T53] Bluetooth: hci3: command tx timeout [ 174.087555][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.097111][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.196469][ T2839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 174.225137][ T2839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 174.821565][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 174.935995][ T53] Bluetooth: hci2: command tx timeout [ 175.130529][ T8994] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 175.342321][ T8994] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 175.366810][ T8994] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 175.430776][ T8994] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 175.518562][ T29] audit: type=1804 audit(1718174894.292:67): pid=9003 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir735369984/syzkaller.u47sdW/294/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 175.562147][ T8994] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 175.592629][ T9007] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 175.606380][ T29] audit: type=1804 audit(1718174894.332:68): pid=8999 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir735369984/syzkaller.u47sdW/294/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 175.632407][ T9007] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 175.651563][ T8994] tc_dump_action: action bad kind [ 175.847426][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 175.871109][ T9021] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 176.363760][ T29] audit: type=1804 audit(1718174895.132:69): pid=9051 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3304214146/syzkaller.bFwBsZ/291/cgroup.controllers" dev="sda1" ino=1944 res=1 errno=0 [ 176.435686][ T29] audit: type=1804 audit(1718174895.182:70): pid=9046 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3304214146/syzkaller.bFwBsZ/291/cgroup.controllers" dev="sda1" ino=1944 res=1 errno=0 [ 176.701099][ T9060] __nla_validate_parse: 2 callbacks suppressed [ 176.701121][ T9060] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.3'. [ 176.727928][ T9052] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 176.805348][ T9063] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 177.142768][ T9068] netlink: 2060 bytes leftover after parsing attributes in process `syz-executor.1'. [ 177.181110][ T9068] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 177.212397][ T9068] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.1'. [ 177.296456][ T9077] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 177.709626][ T9099] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 177.869803][ T9106] netlink: 2060 bytes leftover after parsing attributes in process `syz-executor.2'. [ 177.907133][ T9106] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 177.970763][ T9109] netlink: 2060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 178.000924][ T9109] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 178.018889][ T9109] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.0'. [ 178.151964][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 178.336447][ T29] audit: type=1804 audit(1718174897.112:71): pid=9128 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2242237884/syzkaller.Zgk6z3/11/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 178.426372][ T29] audit: type=1804 audit(1718174897.162:72): pid=9125 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2242237884/syzkaller.Zgk6z3/11/cgroup.controllers" dev="sda1" ino=1966 res=1 errno=0 [ 178.471938][ T9134] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 178.635820][ T9141] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 178.694076][ T9134] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 178.778068][ T9134] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 178.818380][ T9134] tc_dump_action: action bad kind [ 178.912963][ T9148] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 178.978765][ T9152] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 179.428002][ T29] audit: type=1804 audit(1718174898.202:73): pid=9162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3619878309/syzkaller.XStPRd/16/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 179.492414][ T29] audit: type=1804 audit(1718174898.212:74): pid=9160 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir3619878309/syzkaller.XStPRd/16/cgroup.controllers" dev="sda1" ino=1956 res=1 errno=0 [ 179.681339][ T9180] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 179.743696][ T9177] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 179.814261][ T9177] tc_dump_action: action bad kind [ 180.502332][ T9212] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1029 (only 8 groups) [ 180.699918][ T9212] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 6 (only 8 groups) [ 181.244641][ T5114] Bluetooth: hci1: command 0x0406 tx timeout [ 181.250747][ T5119] Bluetooth: hci4: command 0x0406 tx timeout [ 181.276983][ T9228] tc_dump_action: action bad kind [ 181.845466][ T9263] __nla_validate_parse: 17 callbacks suppressed [ 181.845487][ T9263] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 181.912039][ T9263] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 182.215161][ T9275] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 182.408739][ T9275] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 182.420756][ T9275] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 182.442519][ T9284] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 182.467588][ T9275] validate_nla: 6 callbacks suppressed [ 182.467605][ T9275] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 182.521924][ T9288] netlink: 2060 bytes leftover after parsing attributes in process `syz-executor.4'. [ 182.538668][ T9275] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 182.561478][ T9275] tc_dump_action: action bad kind [ 182.584914][ T9288] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.4'. [ 182.776836][ T9303] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 182.824604][ T9297] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 182.861076][ T9297] xt_hashlimit: size too large, truncated to 1048576 [ 182.897204][ T9297] xt_hashlimit: overflow, try lower: 0/0 [ 183.039356][ T9314] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 183.864635][ T9335] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 1029 (only 8 groups) [ 184.004688][ T9335] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 6 (only 8 groups) [ 184.553583][ T2839] bridge_slave_1: left allmulticast mode [ 184.565235][ T2839] bridge_slave_1: left promiscuous mode [ 184.577062][ T2839] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.655802][ T2839] bridge_slave_0: left allmulticast mode [ 184.671765][ T2839] bridge_slave_0: left promiscuous mode [ 184.697223][ T2839] bridge0: port 1(bridge_slave_0) entered disabled state [ 185.319239][ T2839] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 185.343244][ T2839] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.365456][ T2839] bond0 (unregistering): Released all slaves [ 185.390888][ T9387] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 185.464702][ T9388] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 185.623834][ T9389] tc_dump_action: action bad kind [ 186.070996][ T2839] hsr_slave_0: left promiscuous mode [ 186.210370][ T2839] hsr_slave_1: left promiscuous mode [ 186.862982][ T2839] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.904646][ T2839] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.919472][ T2839] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.944544][ T2839] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.989835][ T2839] veth1_macvtap: left promiscuous mode [ 186.996947][ T2839] veth0_macvtap: left promiscuous mode [ 187.002519][ T2839] veth1_vlan: left promiscuous mode [ 187.008467][ T2839] veth0_vlan: left promiscuous mode [ 187.413639][ T2839] team0 (unregistering): Port device team_slave_1 removed [ 187.450794][ T2839] team0 (unregistering): Port device team_slave_0 removed [ 187.828512][ T9439] __nla_validate_parse: 9 callbacks suppressed [ 187.828534][ T9439] netlink: 288 bytes leftover after parsing attributes in process `syz-executor.0'. [ 187.871426][ T9449] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 187.908486][ T9450] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 187.938533][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 188.545754][ T9478] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 188.998076][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 189.116187][ T9506] netlink: 268 bytes leftover after parsing attributes in process `syz-executor.4'. [ 189.150382][ T9510] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 189.151777][ T9506] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 189.192800][ T9512] IPVS: set_ctl: invalid protocol: 0 172.20.20.187:0 [ 189.271015][ T9510] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 189.343938][ T9513] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 189.359549][ T9513] xt_hashlimit: size too large, truncated to 1048576 [ 189.370869][ T9513] xt_hashlimit: overflow, try lower: 0/0 [ 189.534617][ T9522] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 189.617199][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 189.629912][ T9522] team0: Port device wlan1 added [ 189.690708][ T9522] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 189.769091][ T9529] Cannot find set identified by id 0 to match [ 190.060333][ T9535] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 190.080516][ T9544] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 190.099486][ T9544] xt_hashlimit: size too large, truncated to 1048576 [ 190.110732][ T9544] xt_hashlimit: overflow, try lower: 0/0 [ 190.234339][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 190.388733][ T9568] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 190.668115][ T9586] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 190.708869][ T9584] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 190.729133][ T9586] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 190.772511][ T9584] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 190.787627][ T9589] tc_dump_action: action bad kind [ 190.811542][ T9584] tc_dump_action: action bad kind [ 191.893458][ T9644] xt_CT: You must specify a L4 protocol and not use inversions on it [ 192.586154][ T9669] xt_CT: You must specify a L4 protocol and not use inversions on it [ 192.823999][ T9680] syz-executor.1[9680] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 192.824229][ T9680] syz-executor.1[9680] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 193.237692][ T9694] __nla_validate_parse: 15 callbacks suppressed [ 193.237713][ T9694] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 193.413508][ T9696] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 193.645830][ T9703] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 193.825889][ T9719] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 193.833596][ T9719] IPv6: NLM_F_CREATE should be set when creating new route [ 193.840878][ T9719] IPv6: NLM_F_CREATE should be set when creating new route [ 193.888248][ T9722] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 194.260789][ T9743] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 194.332060][ T9743] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 194.344186][ T9743] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 194.376739][ T9743] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 194.416782][ T9743] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 194.452156][ T9743] tc_dump_action: action bad kind [ 194.478185][ T9750] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 194.535518][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.703401][ T9760] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 194.729924][ T9760] xt_hashlimit: size too large, truncated to 1048576 [ 194.751495][ T9760] xt_hashlimit: overflow, try lower: 0/0 [ 195.222143][ T9786] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 195.378415][ T9786] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 195.432603][ T9786] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 195.536799][ T9790] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 195.599615][ T9786] tc_dump_action: action bad kind [ 196.076623][ T9813] xt_hashlimit: size too large, truncated to 1048576 [ 196.094515][ T9813] xt_hashlimit: overflow, try lower: 0/0 [ 196.537533][ T9824] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 196.599085][ T9825] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 196.654151][ T9824] tc_dump_action: action bad kind [ 197.451274][ T9866] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 197.802903][ T9891] tipc: Enabling of bearer rejected, failed to enable media [ 197.893594][ T9889] xt_hashlimit: size too large, truncated to 1048576 [ 197.906503][ T9889] xt_hashlimit: overflow, try lower: 0/0 [ 198.023223][ T9899] bond_slave_0: entered promiscuous mode [ 198.029312][ T9899] bond_slave_1: entered promiscuous mode [ 198.047579][ T9899] bond0: entered promiscuous mode [ 198.499024][ T9899] bond0 (unregistering): left promiscuous mode [ 198.508544][ T9899] bond_slave_0: left promiscuous mode [ 198.532124][ T9899] bond_slave_1: left promiscuous mode [ 198.546009][ T9899] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 198.566247][ T9899] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 198.581660][ T9899] bond0 (unregistering): Released all slaves [ 198.782968][ T9916] __nla_validate_parse: 12 callbacks suppressed [ 198.783001][ T9916] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 198.811026][ T9916] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 198.822383][ T9916] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 199.520083][ T9944] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 199.604778][ T9944] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 199.626614][ T9944] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 199.696836][ T9944] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 199.777291][ T9947] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 199.913963][ T9944] tc_dump_action: action bad kind [ 200.338153][ T9974] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 200.352821][ T9977] netlink: 892 bytes leftover after parsing attributes in process `syz-executor.0'. [ 200.389378][ T9978] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 200.507005][ T9978] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 200.527686][ T9978] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 200.567775][ T9978] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 200.624326][ T9978] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 200.646805][ T9990] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 200.656900][ T9978] tc_dump_action: action bad kind [ 200.906418][ T9994] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 201.131091][ T9994] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 201.177080][ T9997] tc_dump_action: action bad kind [ 201.260550][T10020] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 201.375780][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 201.702263][T10033] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 201.744267][T10033] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 201.782195][T10033] tc_dump_action: action bad kind [ 202.283681][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 202.417827][T10068] Bluetooth: MGMT ver 1.22 [ 202.474189][T10069] geneve2: entered promiscuous mode [ 202.497520][T10069] geneve2: entered allmulticast mode [ 202.595469][T10073] tc_dump_action: action bad kind [ 203.785330][T10117] tc_dump_action: action bad kind [ 203.932138][T10125] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 203.939483][T10125] IPv6: NLM_F_CREATE should be set when creating new route [ 204.319432][T10150] pim6reg: entered allmulticast mode [ 204.347346][T10148] pim6reg: left allmulticast mode [ 204.444688][ T53] Bluetooth: hci3: command 0x1407 tx timeout [ 204.450886][ T5111] Bluetooth: hci3: Opcode 0x1407 failed: -110 [ 204.566948][T10161] __nla_validate_parse: 21 callbacks suppressed [ 204.566966][T10161] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 204.669783][T10164] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 204.677115][T10164] IPv6: NLM_F_CREATE should be set when creating new route [ 204.802835][T10161] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 204.843454][T10161] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 204.937255][T10161] validate_nla: 8 callbacks suppressed [ 204.937273][T10161] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 204.966993][T10181] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 205.019413][T10166] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 205.114558][T10161] tc_dump_action: action bad kind [ 205.191090][T10191] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 205.463942][T10206] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 205.487641][T10206] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 205.902852][T10232] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 205.981120][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 206.417291][T10260] xt_CT: You must specify a L4 protocol and not use inversions on it [ 206.821339][T10275] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 207.063194][T10283] x_tables: duplicate underflow at hook 3 [ 207.220022][T10290] tipc: Enabling of bearer rejected, failed to enable media [ 207.416562][T10302] netlink: 116 bytes leftover after parsing attributes in process `syz-executor.3'. [ 207.459941][T10307] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 207.752258][T10325] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 207.759104][T10327] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 207.823373][T10307] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 207.962719][T10307] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 207.980282][T10322] tc_dump_action: action bad kind [ 208.235122][T10339] pim6reg: entered allmulticast mode [ 208.306043][T10339] pim6reg: left allmulticast mode [ 208.536987][T10358] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 208.974059][T10386] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 209.043781][T10386] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 209.737634][T10426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 209.807124][T10431] __nla_validate_parse: 4 callbacks suppressed [ 209.807143][T10431] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 209.910095][T10426] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 210.169662][ T1094] bridge_slave_1: left allmulticast mode [ 210.191502][ T1094] bridge_slave_1: left promiscuous mode [ 210.204239][ T1094] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.232914][ T1094] bridge_slave_0: left allmulticast mode [ 210.239908][ T1094] bridge_slave_0: left promiscuous mode [ 210.253931][ T1094] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.720368][ T1094] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.733989][ T1094] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.747584][ T1094] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 210.783981][ T1094] bond0 (unregistering): Released all slaves [ 211.141546][ T29] audit: type=1804 audit(1718174929.902:75): pid=10463 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir735369984/syzkaller.u47sdW/392/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 211.377620][T10473] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 211.523765][T10466] gretap0: entered promiscuous mode [ 211.552187][T10484] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 211.583830][T10484] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 211.934550][ T1094] hsr_slave_0: left promiscuous mode [ 212.036053][ T1094] hsr_slave_1: left promiscuous mode [ 212.135611][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 212.180915][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 212.232495][ T1094] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 212.270582][ T1094] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 212.410632][ T1094] veth1_macvtap: left promiscuous mode [ 212.421183][ T1094] veth0_macvtap: left promiscuous mode [ 212.455172][ T1094] veth1_vlan: left promiscuous mode [ 212.460526][ T1094] veth0_vlan: left promiscuous mode [ 213.030581][ T1094] team0 (unregistering): Port device team_slave_1 removed [ 213.073261][ T1094] team0 (unregistering): Port device team_slave_0 removed [ 213.443058][T10495] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 213.452706][T10496] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 213.516889][T10506] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 213.554540][T10506] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 213.587788][T10504] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 213.626310][T10511] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 213.659230][T10509] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 213.685879][T10509] 0·: renamed from hsr0 (while UP) [ 213.709280][T10509] 0·: entered allmulticast mode [ 213.721918][T10509] hsr_slave_0: entered allmulticast mode [ 213.744038][T10509] hsr_slave_1: entered allmulticast mode [ 213.750122][T10509] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 213.770366][T10515] tc_dump_action: action bad kind [ 213.912106][T10535] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 214.059576][T10535] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 214.129689][T10535] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 214.236826][T10546] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 214.477862][T10535] tc_dump_action: action bad kind [ 214.860324][T10552] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 215.080218][T10554] __nla_validate_parse: 1 callbacks suppressed [ 215.080236][T10554] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 215.265948][T10571] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 215.294858][T10571] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 215.417727][T10578] IPVS: length: 84 != 8 [ 215.876399][T10601] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 216.108676][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 216.403343][T10630] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 216.727698][T10647] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 216.904126][T10652] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 217.100190][T10660] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 217.275203][T10674] netlink: 'syz-executor.2': attribute type 32 has an invalid length. [ 217.302948][T10674] netlink: 'syz-executor.2': attribute type 44 has an invalid length. [ 217.503610][T10686] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 217.524169][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 217.611108][T10696] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 217.820975][T10693] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 217.866674][T10705] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.4'. [ 217.918029][T10705] xt_CT: You must specify a L4 protocol and not use inversions on it [ 218.633351][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 218.832811][T10741] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 218.873633][T10741] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 218.901043][T10741] tc_dump_action: action bad kind [ 219.019141][T10743] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 219.178976][T10753] tipc: Started in network mode [ 219.183977][T10753] tipc: Node identity fffffffd, cluster identity 4711 [ 219.201006][T10753] tipc: Node number set to 4294967293 [ 219.563993][T10779] tipc: Enabled bearer , priority 10 [ 219.613707][T10782] tipc: Started in network mode [ 219.636984][T10782] tipc: Node identity , cluster identity 4711 [ 219.655862][T10782] tipc: Failed to obtain node identity [ 219.661989][T10782] tipc: Enabling of bearer rejected, failed to enable media [ 219.856520][T10788] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.864298][T10788] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.876026][T10788] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 219.884239][T10788] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 220.324331][T10795] __nla_validate_parse: 11 callbacks suppressed [ 220.340120][T10795] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 220.359266][T10795] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 220.499078][T10795] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 220.567190][T10800] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 220.614065][T10795] tc_dump_action: action bad kind [ 221.521647][T10826] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 221.531495][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 221.596862][T10829] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.3'. [ 221.646555][T10829] xt_CT: You must specify a L4 protocol and not use inversions on it [ 221.725841][T10839] netlink: 210620 bytes leftover after parsing attributes in process `syz-executor.2'. [ 221.791182][T10839] openvswitch: netlink: ufid size 2296 bytes exceeds the range (1, 16) [ 222.155261][T10855] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 222.247943][T10860] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 222.332640][T10855] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 222.353987][T10855] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 222.394150][T10855] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 222.457138][T10855] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 222.546348][T10855] tc_dump_action: action bad kind [ 223.224636][T10886] syz-executor.0: vmalloc error: size 17179873280, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 223.263358][T10886] CPU: 1 PID: 10886 Comm: syz-executor.0 Not tainted 6.10.0-rc2-syzkaller-00243-g144ba8580bcb #0 [ 223.274002][T10886] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 223.284083][T10886] Call Trace: [ 223.287367][T10886] [ 223.290308][T10886] dump_stack_lvl+0x241/0x360 [ 223.295030][T10886] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.300244][T10886] ? __pfx__printk+0x10/0x10 [ 223.304862][T10886] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 223.311302][T10886] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 223.317828][T10886] warn_alloc+0x278/0x410 [ 223.322181][T10886] ? stack_depot_save_flags+0x29/0x830 [ 223.327667][T10886] ? __vmalloc_node_range_noprof+0x10b/0x1460 [ 223.333756][T10886] ? __pfx_warn_alloc+0x10/0x10 [ 223.338630][T10886] ? kasan_save_track+0x3f/0x80 [ 223.343496][T10886] ? __kasan_kmalloc+0x98/0xb0 [ 223.348283][T10886] ? xsk_setsockopt+0x598/0x950 [ 223.353141][T10886] ? do_sock_setsockopt+0x3af/0x720 [ 223.358348][T10886] ? __sys_setsockopt+0x1ae/0x250 [ 223.363380][T10886] ? __x64_sys_setsockopt+0xb5/0xd0 [ 223.368592][T10886] ? do_syscall_64+0xf3/0x230 [ 223.373280][T10886] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.379372][T10886] __vmalloc_node_range_noprof+0x130/0x1460 [ 223.385309][T10886] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 223.391660][T10886] ? __kasan_kmalloc+0x98/0xb0 [ 223.396448][T10886] ? xskq_create+0x54/0x170 [ 223.396597][T10895] xt_CT: You must specify a L4 protocol and not use inversions on it [ 223.400954][T10886] vmalloc_user_noprof+0x74/0x80 [ 223.414006][T10886] ? xskq_create+0xb6/0x170 [ 223.418525][T10886] xskq_create+0xb6/0x170 [ 223.422879][T10886] xsk_init_queue+0xa1/0x100 [ 223.427482][T10886] xsk_setsockopt+0x598/0x950 [ 223.432168][T10886] ? __pfx_xsk_setsockopt+0x10/0x10 [ 223.437366][T10886] ? __pfx_lock_acquire+0x10/0x10 [ 223.442383][T10886] ? aa_sock_opt_perm+0x79/0x120 [ 223.447316][T10886] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 223.452852][T10886] ? security_socket_setsockopt+0x87/0xb0 [ 223.458574][T10886] ? __pfx_xsk_setsockopt+0x10/0x10 [ 223.463759][T10886] do_sock_setsockopt+0x3af/0x720 [ 223.468790][T10886] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 223.474332][T10886] ? __fget_files+0x29/0x470 [ 223.478923][T10886] ? __fget_files+0x3f6/0x470 [ 223.483601][T10886] __sys_setsockopt+0x1ae/0x250 [ 223.488445][T10886] __x64_sys_setsockopt+0xb5/0xd0 [ 223.493461][T10886] do_syscall_64+0xf3/0x230 [ 223.497959][T10886] ? clear_bhb_loop+0x35/0x90 [ 223.502630][T10886] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.508531][T10886] RIP: 0033:0x7f2f3187cea9 [ 223.512947][T10886] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 223.532554][T10886] RSP: 002b:00007f2f3268a0c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 223.540965][T10886] RAX: ffffffffffffffda RBX: 00007f2f319b3f80 RCX: 00007f2f3187cea9 [ 223.548935][T10886] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000008 [ 223.556895][T10886] RBP: 00007f2f318ebff4 R08: 0000000000000004 R09: 0000000000000000 [ 223.564862][T10886] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 223.572822][T10886] R13: 000000000000004d R14: 00007f2f319b3f80 R15: 00007ffecf9f4b48 [ 223.580795][T10886] [ 223.634593][T10886] Mem-Info: [ 223.674856][T10886] active_anon:14429 inactive_anon:0 isolated_anon:0 [ 223.674856][T10886] active_file:0 inactive_file:46954 isolated_file:0 [ 223.674856][T10886] unevictable:768 dirty:41 writeback:0 [ 223.674856][T10886] slab_reclaimable:11266 slab_unreclaimable:104076 [ 223.674856][T10886] mapped:18510 shmem:1626 pagetables:605 [ 223.674856][T10886] sec_pagetables:0 bounce:0 [ 223.674856][T10886] kernel_misc_reclaimable:0 [ 223.674856][T10886] free:1369418 free_pcp:2717 free_cma:0 [ 223.764403][T10886] Node 0 active_anon:57716kB inactive_anon:0kB active_file:0kB inactive_file:187748kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:74040kB dirty:160kB writeback:0kB shmem:4968kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11024kB pagetables:2520kB sec_pagetables:0kB all_unreclaimable? no [ 223.811962][T10902] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 223.847390][T10886] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 223.933050][T10886] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 223.994880][T10886] lowmem_reserve[]: 0 2571 2571 0 0 [ 224.000196][T10886] Node 0 DMA32 free:1523488kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:55480kB inactive_anon:0kB active_file:0kB inactive_file:187424kB unevictable:1536kB writepending:160kB present:3129332kB managed:2659884kB mlocked:0kB bounce:0kB free_pcp:4356kB local_pcp:1136kB free_cma:0kB [ 224.069004][T10886] lowmem_reserve[]: 0 0 0 0 0 [ 224.088107][T10886] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:324kB unevictable:0kB writepending:0kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 224.129187][T10908] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 224.143279][T10886] lowmem_reserve[]: 0 0 0 0 0 [ 224.150476][T10886] Node 1 Normal free:3943504kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:68kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:4028kB local_pcp:0kB free_cma:0kB [ 224.182427][T10886] lowmem_reserve[]: 0 0 0 0 0 [ 224.187273][T10886] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 224.200208][T10886] Node 0 DMA32: 288*4kB (ME) 478*8kB (UME) 383*16kB (UME) 174*32kB (UME) 82*64kB (ME) 49*128kB (ME) 24*256kB (UME) 6*512kB (UM) 29*1024kB (UME) 5*2048kB (UME) 353*4096kB (UM) = 1523232kB [ 224.219561][T10886] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 224.234144][T10886] Node 1 Normal: 0*4kB 0*8kB 1*16kB (U) 0*32kB 1*64kB (M) 0*128kB 2*256kB (UM) 1*512kB (M) 0*1024kB 1*2048kB (U) 962*4096kB (M) = 3943504kB [ 224.251298][T10886] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 224.261064][T10886] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 224.270433][T10886] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 224.280130][T10886] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 224.291301][T10886] 48430 total pagecache pages [ 224.298238][T10886] 0 pages in swap cache [ 224.302803][T10886] Free swap = 124996kB [ 224.310216][T10886] Total swap = 124996kB [ 224.318808][T10886] 2097051 pages RAM [ 224.322632][T10886] 0 pages HighMem/MovableOnly [ 224.327463][T10886] 400870 pages reserved [ 224.331623][T10886] 0 pages cma reserved [ 224.872063][T10926] xt_CT: You must specify a L4 protocol and not use inversions on it [ 224.974426][T10930] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 225.008259][T10937] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 225.064590][T10939] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 225.152073][T10939] batman_adv: batadv0: Adding interface: team0 [ 225.203328][T10939] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 225.243208][T10939] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 225.365401][T10955] __nla_validate_parse: 8 callbacks suppressed [ 225.365426][T10955] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.1'. [ 225.399106][T10956] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 225.495022][T10966] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 225.505388][T10964] netlink: 2060 bytes leftover after parsing attributes in process `syz-executor.0'. [ 225.527426][T10964] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 225.536569][T10964] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.0'. [ 225.746527][T10977] netlink: 2060 bytes leftover after parsing attributes in process `syz-executor.4'. [ 225.788922][T10977] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 225.801680][T10977] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.4'. [ 225.853864][T10987] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 225.966901][T10993] netlink: 'syz-executor.1': attribute type 17 has an invalid length. [ 225.994447][T10993] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 226.043859][T10983] veth0_vlan: left promiscuous mode [ 226.162058][T10999] xt_CT: You must specify a L4 protocol and not use inversions on it [ 226.322483][T11007] netlink: 2060 bytes leftover after parsing attributes in process `syz-executor.4'. [ 226.338768][T11007] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 226.582801][T11013] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 226.604539][ T53] Bluetooth: hci2: command 0x0405 tx timeout [ 226.624562][T11013] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 226.653399][T11013] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 226.951120][T11047] xt_CT: You must specify a L4 protocol and not use inversions on it [ 227.593868][T11075] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 227.642520][T11075] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 227.678237][T11075] tc_dump_action: action bad kind [ 228.535583][T11104] xt_CT: You must specify a L4 protocol and not use inversions on it [ 229.529148][ T53] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 229.538476][ T53] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 229.546643][ T53] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 229.565188][ T53] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 229.576697][ T53] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 229.584082][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 230.326520][T11129] netlink: set zone limit has 8 unknown bytes [ 230.335378][T11137] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.342805][T11137] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.407626][T11137] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 230.468239][T11122] chnl_net:caif_netlink_parms(): no params data found [ 230.820120][T11122] bridge0: port 1(bridge_slave_0) entered blocking state [ 230.839343][T11122] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.865223][T11122] bridge_slave_0: entered allmulticast mode [ 230.872020][T11122] bridge_slave_0: entered promiscuous mode [ 230.896997][T11122] bridge0: port 2(bridge_slave_1) entered blocking state [ 230.909642][T11122] bridge0: port 2(bridge_slave_1) entered disabled state [ 230.932653][T11122] bridge_slave_1: entered allmulticast mode [ 230.942288][T11122] bridge_slave_1: entered promiscuous mode [ 231.043398][T11122] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.068158][T11122] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.149312][T11122] team0: Port device team_slave_0 added [ 231.164077][T11122] team0: Port device team_slave_1 added [ 231.185239][T11158] __nla_validate_parse: 10 callbacks suppressed [ 231.185256][T11158] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.0'. [ 231.229354][T11122] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.254602][T11122] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.344252][T11122] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.435175][T11122] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.467070][T11122] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.524160][T11122] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.724532][ T5111] Bluetooth: hci3: command tx timeout [ 232.142793][T11122] hsr_slave_0: entered promiscuous mode [ 232.156159][T11122] hsr_slave_1: entered promiscuous mode [ 232.178080][T11122] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 232.188574][T11122] Cannot create hsr debugfs directory [ 232.623440][T11122] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.784943][T11122] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.960280][T11122] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.097973][T11210] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 233.126574][T11122] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 233.433877][T11122] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 233.488327][T11122] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 233.534047][T11122] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 233.575929][T11122] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 233.804705][ T5111] Bluetooth: hci3: command tx timeout [ 233.824567][T11122] 8021q: adding VLAN 0 to HW filter on device bond0 [ 233.898476][T11122] 8021q: adding VLAN 0 to HW filter on device team0 [ 233.926229][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.933409][ T5229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 234.097080][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 234.104228][ T5229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.173891][T11122] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 234.204406][T11122] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 234.461700][T11238] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.3'. [ 234.573058][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 234.624607][T11122] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.577798][T11122] veth0_vlan: entered promiscuous mode [ 235.606261][T11122] veth1_vlan: entered promiscuous mode [ 235.733316][T11122] veth0_macvtap: entered promiscuous mode [ 235.807964][T11122] veth1_macvtap: entered promiscuous mode [ 235.824109][T11290] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 235.886494][ T5111] Bluetooth: hci3: command tx timeout [ 235.906663][T11122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.953026][T11122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.964126][T11122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 235.984485][T11122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 235.997418][ T29] audit: type=1804 audit(1718174954.762:76): pid=11300 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir3304214146/syzkaller.bFwBsZ/465/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 236.026645][T11122] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.050174][T11300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.073436][T11122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.074752][T11300] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 236.099521][T11122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.137263][T11122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.178642][T11122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.194566][T11122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.218383][T11122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.239963][T11122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.264687][T11122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.282837][T11122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.334537][T11122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.364730][T11122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.377334][T11122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.387274][T11122] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 236.398156][T11122] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 236.411467][T11122] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.420881][T11309] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 236.459137][T11122] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.483093][T11122] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.513123][T11122] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.524026][T11122] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.704502][ T5742] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.730829][ T5742] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.784512][ T2839] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.792444][ T2839] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.934663][T11340] veth1_macvtap: left promiscuous mode [ 236.969312][T11340] macsec0: entered promiscuous mode [ 237.017147][T11345] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 237.059198][T11345] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 237.074334][T11345] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 237.146002][T11345] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 237.187473][T11352] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 237.386271][T11360] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 237.449850][T11348] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 237.495150][T11357] tc_dump_action: action bad kind [ 237.619247][T11366] sctp: [Deprecated]: syz-executor.2 (pid 11366) Use of int in maxseg socket option. [ 237.619247][T11366] Use struct sctp_assoc_value instead [ 237.658895][T11370] syz_tun: entered promiscuous mode [ 237.665376][T11370] macvtap1: entered promiscuous mode [ 237.670986][T11370] macvtap1: entered allmulticast mode [ 237.676999][T11370] syz_tun: entered allmulticast mode [ 237.680395][T11373] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 237.700586][T11370] syz_tun: left allmulticast mode [ 237.706191][T11370] syz_tun: left promiscuous mode [ 237.856998][T11385] xt_l2tp: v2 tid > 0xffff: 100794368 [ 237.964916][ T5111] Bluetooth: hci3: command tx timeout [ 238.090076][T11401] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 238.128762][T11398] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 238.326442][T11409] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.2'. [ 239.017505][T11426] xt_l2tp: v2 tid > 0xffff: 100794368 [ 239.349256][T11437] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.0'. [ 239.487205][T11449] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 239.583884][T11449] syz_tun: entered promiscuous mode [ 239.693882][T11449] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 239.913086][T11465] xt_l2tp: v2 tid > 0xffff: 100794368 [ 240.135062][T11472] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 240.160976][ T29] audit: type=1804 audit(1718174958.932:77): pid=11472 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1550117259/syzkaller.Gb5LfV/256/memory.events" dev="sda1" ino=1961 res=1 errno=0 [ 240.453093][T11478] €Â: renamed from vlan0 (while UP) [ 240.738958][T11507] netlink: 830 bytes leftover after parsing attributes in process `syz-executor.4'. [ 240.969710][T11517] xt_l2tp: v2 tid > 0xffff: 100794368 [ 241.357343][T11535] TCP: MD5 Hash mismatch for [fe80::bb].0->[ff02::1].20002 []L3 index 0 [ 241.458414][T11534] __nla_validate_parse: 3 callbacks suppressed [ 241.458434][T11534] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 241.474211][T11534] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 241.490059][T11534] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 241.572691][T11534] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 241.633115][T11534] tc_dump_action: action bad kind [ 241.742282][T11549] xt_l2tp: v2 tid > 0xffff: 100794368 [ 242.215771][T11568] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.2'. [ 242.268755][T11570] TCP: MD5 Hash mismatch for [fe80::bb].0->[ff02::1].20002 []L3 index 0 [ 242.552025][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 242.655450][T11577] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 242.749319][ T29] audit: type=1804 audit(1718174961.522:78): pid=11579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir735369984/syzkaller.u47sdW/469/cgroup.controllers" dev="sda1" ino=1941 res=1 errno=0 [ 242.854645][ T29] audit: type=1804 audit(1718174961.522:79): pid=11579 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir735369984/syzkaller.u47sdW/469/cgroup.controllers" dev="sda1" ino=1941 res=1 errno=0 [ 242.946869][T11585] xt_l2tp: v2 tid > 0xffff: 100794368 [ 243.212352][T11598] Bluetooth: MGMT ver 1.22 [ 243.326052][T11605] veth0_macvtap: entered promiscuous mode [ 243.353267][T11605] veth0_macvtap: entered allmulticast mode [ 243.364510][T11605] macvtap0: entered promiscuous mode [ 243.817746][T11642] vlan0: entered promiscuous mode [ 243.832713][T11642] syz_tun: entered promiscuous mode [ 243.860622][T11642] team0: Port device vlan0 added [ 243.930536][T11647] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 244.038736][T11647] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 244.049218][T11647] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 244.077514][T11647] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 244.116678][T11647] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 244.136921][T11647] tc_dump_action: action bad kind [ 244.371136][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 244.409101][T11668] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 244.706011][T11687] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 244.723867][T11685] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 244.762347][T11687] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.3'. [ 244.779498][T11685] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 245.617119][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 246.135784][T11748] vlan2: entered allmulticast mode [ 246.203617][T11750] ip6t_srh: unknown srh invflags A757 [ 246.294944][T11751] tipc: Enabling of bearer rejected, media not registered [ 246.500019][T11762] __nla_validate_parse: 1 callbacks suppressed [ 246.500038][T11762] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 247.511064][T11809] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 247.962168][T11839] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 248.247432][T11860] veth0_to_hsr: entered promiscuous mode [ 248.319509][T11858] veth0_to_hsr: left promiscuous mode [ 248.402751][T11872] syz_tun: entered promiscuous mode [ 248.410939][T11872] macvtap1: entered promiscuous mode [ 248.425334][T11872] macvtap1: entered allmulticast mode [ 248.430835][T11872] syz_tun: entered allmulticast mode [ 248.807996][T11889] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 249.329540][T11906] wg2: entered promiscuous mode [ 249.348721][T11906] wg2: entered allmulticast mode [ 249.417238][T11916] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 249.425721][T11918] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 249.978367][T11948] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 250.053300][T11948] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 250.104496][T11948] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 250.129344][T11948] tc_dump_action: action bad kind [ 250.236042][T11955] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.0'. [ 250.247080][T11958] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 250.296069][T11958] team0: Device ip6gre0 is of different type [ 250.577265][T11965] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.0'. [ 250.599662][T11965] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 250.641369][T11969] IPv6: sit1: Disabled Multicast RS [ 250.750795][T11975] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 250.784884][T11975] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 250.807462][T11980] xt_l2tp: v2 tid > 0xffff: 100794368 [ 250.906143][T11982] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 250.964081][T11982] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 250.996443][T11982] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 251.016455][T11982] tc_dump_action: action bad kind [ 251.155478][T11990] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 251.417421][T12002] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.432703][T12002] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.445672][T12002] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 251.533208][T12015] __nla_validate_parse: 1 callbacks suppressed [ 251.533226][T12015] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 251.806537][T12009] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 251.839433][T12024] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 251.879369][T12028] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 251.900132][T12015] tc_dump_action: action bad kind [ 252.280575][T12049] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 252.335076][T12055] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 252.499717][T12057] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 252.734511][T12074] netlink: 148 bytes leftover after parsing attributes in process `syz-executor.2'. [ 252.935253][T12086] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 253.207126][T12097] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 253.306300][T12086] tc_dump_action: action bad kind [ 253.334705][T12104] bridge0: entered allmulticast mode [ 253.698594][T12097] tc_dump_action: action bad kind [ 253.851840][T12118] xt_CT: You must specify a L4 protocol and not use inversions on it [ 254.038039][T12127] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 254.207254][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 254.352492][T12146] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 254.773008][T12164] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 254.982758][ T29] audit: type=1804 audit(1718174973.752:80): pid=12165 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2951832559/syzkaller.DFVOOp/51/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 255.137183][ T29] audit: type=1804 audit(1718174973.902:81): pid=12162 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2951832559/syzkaller.DFVOOp/51/cgroup.controllers" dev="sda1" ino=1967 res=1 errno=0 [ 255.242585][ T29] audit: type=1804 audit(1718174974.012:82): pid=12176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir735369984/syzkaller.u47sdW/519/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 255.275819][ T29] audit: type=1804 audit(1718174974.012:83): pid=12176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir735369984/syzkaller.u47sdW/519/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 255.302721][ T29] audit: type=1804 audit(1718174974.012:84): pid=12176 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir735369984/syzkaller.u47sdW/519/cgroup.controllers" dev="sda1" ino=1968 res=1 errno=0 [ 255.618817][T12193] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 255.801571][T12201] bridge1: entered promiscuous mode [ 255.971881][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.865138][T12250] xt_l2tp: v2 tid > 0xffff: 100794368 [ 257.154227][T12268] __nla_validate_parse: 5 callbacks suppressed [ 257.154246][T12268] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.1'. [ 257.199578][T12272] validate_nla: 7 callbacks suppressed [ 257.199594][T12272] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 257.237259][T12272] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 257.498262][T12287] xt_CT: You must specify a L4 protocol and not use inversions on it [ 257.519227][T12289] netlink: 144 bytes leftover after parsing attributes in process `syz-executor.4'. [ 258.724515][T12344] batadv0: entered promiscuous mode [ 258.730393][T12344] macsec2: entered promiscuous mode [ 258.754866][T12344] macsec2: entered allmulticast mode [ 258.794784][T12344] batadv0: entered allmulticast mode [ 258.839395][T12344] batadv0: left allmulticast mode [ 258.859859][T12344] batadv0: left promiscuous mode [ 259.471836][T12371] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 259.489277][T12371] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 260.235119][T12405] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 260.850927][T12427] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.3'. [ 261.098917][T12448] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 261.167147][T12451] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 261.194338][T12451] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 261.205178][T12451] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 261.304870][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 261.343668][T12456] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 261.353569][T12456] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 261.958418][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 261.973927][T12489] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 262.770554][T12509] vlan2: entered promiscuous mode [ 263.220405][T12520] __nla_validate_parse: 1 callbacks suppressed [ 263.220425][T12520] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 263.275536][T12520] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 263.586375][T12536] x_tables: ip_tables: ah match: only valid for protocol 51 [ 263.720574][T12539] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 263.825589][T12546] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 264.036599][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 264.064989][T12564] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 264.072434][T12566] vlan2: entered promiscuous mode [ 264.096971][T12564] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 264.573489][T12582] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 264.768724][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 264.898204][T12598] xt_CT: You must specify a L4 protocol and not use inversions on it [ 264.936960][T12589] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 265.226998][T12614] A link change request failed with some changes committed already. Interface wg0 may have been left with an inconsistent configuration, please check. [ 265.232937][T12612] netdevsim netdevsim2 netdevsim1: Unsupported IPsec algorithm [ 265.471428][T12631] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 265.566602][T12634] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 265.763245][T12644] xt_CT: You must specify a L4 protocol and not use inversions on it [ 266.583286][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 266.637403][T12686] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 266.672369][T12686] batman_adv: batadv0: Adding interface: team0 [ 266.684050][T12686] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 266.711970][T12686] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 266.725129][T12689] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 266.733663][T12689] team0: entered promiscuous mode [ 266.742815][T12689] team_slave_1: entered promiscuous mode [ 266.749062][T12689] mac80211_hwsim hwsim5 wlan1: entered promiscuous mode [ 266.766039][T12689] 8021q: adding VLAN 0 to HW filter on device team0 [ 266.774426][T12689] batman_adv: batadv0: Interface activated: team0 [ 266.781926][T12689] batman_adv: batadv0: Interface deactivated: team0 [ 266.789251][T12689] batman_adv: batadv0: Removing interface: team0 [ 266.797891][T12689] bridge0: port 3(team0) entered blocking state [ 266.810557][T12689] bridge0: port 3(team0) entered disabled state [ 266.822901][T12689] team0: entered allmulticast mode [ 266.838168][T12689] team_slave_1: entered allmulticast mode [ 266.852363][T12689] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 266.863775][T12689] bridge0: port 3(team0) entered blocking state [ 266.870186][T12689] bridge0: port 3(team0) entered forwarding state [ 267.463608][T12686] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 267.737325][T12713] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 267.844259][ T29] audit: type=1804 audit(1718174986.612:85): pid=12711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir735369984/syzkaller.u47sdW/558/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 268.028213][ T29] audit: type=1804 audit(1718174986.612:86): pid=12711 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir735369984/syzkaller.u47sdW/558/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 268.158187][ T5124] syz_tun (unregistering): left allmulticast mode [ 268.248842][T12726] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 268.277204][T12729] syzkaller0: entered promiscuous mode [ 268.298449][T12729] syzkaller0: entered allmulticast mode [ 268.351774][T12725] __nla_validate_parse: 2 callbacks suppressed [ 268.351792][T12725] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 268.545547][T12735] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 268.561677][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 268.575041][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 268.593209][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 268.602604][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 268.624633][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 268.642293][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 268.930551][T12754] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 268.963169][T12737] chnl_net:caif_netlink_parms(): no params data found [ 269.116233][T12737] bridge0: port 1(bridge_slave_0) entered blocking state [ 269.123398][T12737] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.145240][T12737] bridge_slave_0: entered allmulticast mode [ 269.152062][T12737] bridge_slave_0: entered promiscuous mode [ 269.186592][T12737] bridge0: port 2(bridge_slave_1) entered blocking state [ 269.194881][T12737] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.204071][T12737] bridge_slave_1: entered allmulticast mode [ 269.235921][T12737] bridge_slave_1: entered promiscuous mode [ 269.379475][T12765] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 269.463635][ T29] audit: type=1800 audit(1718174988.232:87): pid=12769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1960 res=0 errno=0 [ 269.514575][ T29] audit: type=1804 audit(1718174988.242:88): pid=12769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1550117259/syzkaller.Gb5LfV/334/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 269.594463][ T29] audit: type=1804 audit(1718174988.242:89): pid=12769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1550117259/syzkaller.Gb5LfV/334/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 269.600084][T12737] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 269.635318][T12772] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 269.667762][T12772] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.1'. [ 269.686858][ T29] audit: type=1804 audit(1718174988.252:90): pid=12769 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1550117259/syzkaller.Gb5LfV/334/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 269.717979][T12737] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 269.877883][T12737] team0: Port device team_slave_0 added [ 269.911711][T12737] team0: Port device team_slave_1 added [ 269.927079][T12781] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 269.941174][T12784] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.4'. [ 269.965043][T12784] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 270.008701][T12784] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.4'. [ 270.050738][T12737] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 270.066840][T12737] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.112825][T12737] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 270.129447][T12737] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 270.136822][T12737] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 270.274727][T12737] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 270.448288][T12737] hsr_slave_0: entered promiscuous mode [ 270.575517][T12737] hsr_slave_1: entered promiscuous mode [ 270.639764][T12737] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 270.669722][T12737] Cannot create hsr debugfs directory [ 270.686023][ T5111] Bluetooth: hci4: command tx timeout [ 271.454228][T12814] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.0'. [ 271.492240][T12737] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.636745][T12737] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.775429][T12737] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.923290][T12737] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.988210][T12835] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 272.007191][T12827] bond0: (slave bond_slave_1): Releasing backup interface [ 272.071057][T12833] bond0: (slave bond_slave_0): Releasing backup interface [ 272.135926][T12835] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 272.148438][T12839] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 272.169681][T12829] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 272.185031][T12843] netlink: 'syz-executor.1': attribute type 29 has an invalid length. [ 272.214902][T12829] unsupported nlmsg_type 40 [ 272.375881][T12737] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 272.397864][T12737] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 272.422424][T12737] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 272.458863][T12737] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 272.764731][ T5111] Bluetooth: hci4: command tx timeout [ 273.008150][T12737] 8021q: adding VLAN 0 to HW filter on device bond0 [ 273.096155][T12737] 8021q: adding VLAN 0 to HW filter on device team0 [ 273.157668][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.164856][ T5229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 273.200364][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.207577][ T5229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 273.849786][T12877] vlan2: entered promiscuous mode [ 274.093914][T12737] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 274.257967][T12737] veth0_vlan: entered promiscuous mode [ 274.310767][T12737] veth1_vlan: entered promiscuous mode [ 274.417702][T12737] veth0_macvtap: entered promiscuous mode [ 274.480678][T12737] veth1_macvtap: entered promiscuous mode [ 274.507149][ T29] audit: type=1804 audit(1718174993.282:91): pid=12891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1550117259/syzkaller.Gb5LfV/345/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 274.544306][T12737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.573930][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 274.602566][T12737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.624653][ T29] audit: type=1804 audit(1718174993.292:92): pid=12891 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1550117259/syzkaller.Gb5LfV/345/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 274.650599][T12737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 274.678545][T12737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.706107][T12737] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 274.730219][T12737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.750935][T12737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.781013][T12737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.797320][T12737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.807590][T12898] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 274.816706][T12898] __nla_validate_parse: 3 callbacks suppressed [ 274.816720][T12898] netlink: 9344 bytes leftover after parsing attributes in process `syz-executor.1'. [ 274.838027][T12737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.845928][ T5111] Bluetooth: hci4: command tx timeout [ 274.868795][T12737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.907075][T12898] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 274.918393][T12737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 274.963705][T12737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 274.985615][T12737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.018938][T12737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.049552][T12737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.070144][T12906] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 275.077254][T12737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.105525][T12737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.130562][T12737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.154211][T12737] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 275.176620][T12737] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 275.203111][T12737] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 275.242021][T12737] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.273879][T12737] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.300833][T12737] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.326356][T12737] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 275.563944][T12924] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 275.588706][ T5727] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.614474][ T5727] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.637613][T12927] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 275.764524][ T5727] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 275.774925][ T5727] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 275.905063][T12933] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 275.929594][T12933] vxcan2: entered promiscuous mode [ 275.944934][T12933] vxcan2: entered allmulticast mode [ 276.283689][T12956] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 276.337655][T12956] netlink: 'syz-executor.3': attribute type 8 has an invalid length. [ 276.413715][T12965] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 276.505168][T12965] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 276.515351][T12965] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 276.533113][T12965] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 276.560769][T12965] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 276.579299][T12965] tc_dump_action: action bad kind [ 276.717486][T12974] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 276.723487][T12972] vlan2: entered promiscuous mode [ 276.754318][T12972] vlan2: entered allmulticast mode [ 276.925071][ T5111] Bluetooth: hci4: command tx timeout [ 276.932213][T12983] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 277.676580][T13005] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 277.812663][T13011] vlan0: entered promiscuous mode [ 277.847439][T13011] vlan0: entered allmulticast mode [ 278.011045][T13016] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 278.238957][T13027] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 278.275169][T13027] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 278.606043][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 279.567633][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 279.715628][T13084] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 279.762048][T13087] xt_CT: You must specify a L4 protocol and not use inversions on it [ 279.967287][T13092] __nla_validate_parse: 8 callbacks suppressed [ 279.967307][T13092] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 280.286748][T13118] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.4'. [ 280.298124][T13118] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.4'. [ 280.308613][T13118] netlink: 'syz-executor.4': attribute type 6 has an invalid length. [ 280.317493][T13118] netlink: 43 bytes leftover after parsing attributes in process `syz-executor.4'. [ 280.771060][T13132] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 280.791104][T13132] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 281.123824][T13142] bond0: (slave syz_tun): Releasing backup interface [ 281.150750][T13145] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 281.219664][T13142] team0: Port device syz_tun added [ 281.530054][T13147] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 281.880146][T13175] syz-executor.3[13175] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 281.880291][T13175] syz-executor.3[13175] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 281.929177][T13172] netdevsim netdevsim1 netdevsim1: Unsupported IPsec algorithm [ 282.688791][ T29] audit: type=1800 audit(1718175001.462:93): pid=13217 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1939 res=0 errno=0 [ 282.839161][T13225] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 282.984179][T13236] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 283.097066][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 283.204951][T13254] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 283.223288][T13254] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 284.422391][T13278] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 284.548397][T13273] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 284.574256][T13283] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 284.704311][T13287] sctp: [Deprecated]: syz-executor.1 (pid 13287) Use of int in max_burst socket option. [ 284.704311][T13287] Use struct sctp_assoc_value instead [ 284.992790][T13307] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 285.127188][T13315] __nla_validate_parse: 5 callbacks suppressed [ 285.127206][T13315] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 285.472949][T13322] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 285.963178][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 286.094115][T13333] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 286.171176][T13342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.200474][T13343] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 286.328767][T13342] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 286.517133][T13357] syz_tun: entered promiscuous mode [ 286.544876][T13357] macvlan2: entered promiscuous mode [ 286.935187][T13368] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 286.961950][T13371] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 287.048820][T13371] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 287.059330][T13371] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 287.073051][T13371] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 287.082425][T13371] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 287.102153][T13371] tc_dump_action: action bad kind [ 287.373776][T13380] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 287.464700][T13382] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 287.682299][T13395] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.1'. [ 287.737046][T13395] 0·: renamed from hsr0 (while UP) [ 287.762392][T13395] 0·: entered allmulticast mode [ 287.777295][T13395] hsr_slave_0: entered allmulticast mode [ 287.786540][T13395] hsr_slave_1: entered allmulticast mode [ 287.792771][T13395] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 287.920539][T13409] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 288.009727][T13411] syz-executor.4[13411] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 288.009870][T13411] syz-executor.4[13411] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 288.124758][T13414] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 288.168343][T13416] xt_CT: You must specify a L4 protocol and not use inversions on it [ 288.266282][T13418] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 288.396431][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 288.772057][T13449] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 289.150102][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 289.273714][T13478] xt_TCPMSS: Only works on TCP SYN packets [ 289.292481][T13479] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 289.891538][T13495] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 289.901190][T13495] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 290.142815][T13501] __nla_validate_parse: 2 callbacks suppressed [ 290.142834][T13501] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 290.158599][T13501] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 290.242251][T13497] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 290.258690][T13497] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 290.282396][T13497] tc_dump_action: action bad kind [ 290.481623][T13520] xt_TCPMSS: Only works on TCP SYN packets [ 290.566243][T13523] batadv1: entered allmulticast mode [ 291.150521][T13545] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 291.663508][T13574] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 291.744722][T13572] vlan2: entered promiscuous mode [ 291.777741][T13574] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 291.787204][T13574] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 291.825608][T13574] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 291.874536][T13574] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 291.899953][T13574] tc_dump_action: action bad kind [ 292.771123][T13625] xt_CT: You must specify a L4 protocol and not use inversions on it [ 292.948912][T13627] vlan2: entered promiscuous mode [ 293.105162][T13635] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 293.234497][T13635] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 293.256151][T13635] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 293.290950][T13635] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 293.347497][T13635] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 293.416447][T13635] tc_dump_action: action bad kind [ 293.882026][T13660] xt_CT: You must specify a L4 protocol and not use inversions on it [ 294.355532][T13672] vlan2: entered promiscuous mode [ 294.555859][T13684] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 294.629798][T13691] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 294.694874][T13688] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 294.874174][T13691] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 294.907599][T13689] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 294.954657][T13689] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 295.073203][T13684] tc_dump_action: action bad kind [ 295.379344][T13705] __nla_validate_parse: 2 callbacks suppressed [ 295.379364][T13705] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 295.756135][T13711] xt_CT: You must specify a L4 protocol and not use inversions on it [ 295.814162][T13714] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 296.436171][T13721] vlan0: entered promiscuous mode [ 297.419670][T13751] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 297.431630][T13753] xt_CT: You must specify a L4 protocol and not use inversions on it [ 297.573311][T13755] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 297.704673][T13757] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 297.712797][T13757] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.2'. [ 297.764552][T13757] netlink: 1 bytes leftover after parsing attributes in process `syz-executor.2'. [ 297.770040][T13755] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 297.779360][T13759] IPVS: length: 4096 != 8 [ 297.798176][T13764] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 297.829408][T13761] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 297.877988][T13755] tc_dump_action: action bad kind [ 298.033375][T13776] vlan0: entered promiscuous mode [ 298.339283][T13787] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 298.380884][T13787] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 298.592217][T13789] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 298.879034][T13800] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 298.954714][T13800] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 299.019079][T13803] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 299.072690][T13800] tc_dump_action: action bad kind [ 299.176033][T13808] ax25_connect(): syz-executor.3 uses autobind, please contact jreuter@yaina.de [ 299.270122][T13814] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 299.316939][T13813] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 299.539464][T13828] vlan0: entered promiscuous mode [ 299.726641][T13841] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 299.781576][T13846] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 299.819976][T13846] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.927281][T13848] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 299.943221][T13853] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 300.911511][T13896] __nla_validate_parse: 3 callbacks suppressed [ 300.911530][T13896] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 301.095230][T13904] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 301.169241][T13904] tc_dump_action: action bad kind [ 301.278640][T13910] xt_CT: You must specify a L4 protocol and not use inversions on it [ 301.865627][T13931] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 301.881596][T13931] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 301.922751][T13926] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 302.277227][T13938] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 302.390519][T13950] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 302.431996][T13938] tc_dump_action: action bad kind [ 302.540227][T13953] xt_CT: You must specify a L4 protocol and not use inversions on it [ 303.440246][T13978] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 303.508825][T13974] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 303.526234][T13981] xt_CT: You must specify a L4 protocol and not use inversions on it [ 303.540916][T13978] validate_nla: 5 callbacks suppressed [ 303.540932][T13978] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 303.592400][T13985] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 303.609648][T13978] tc_dump_action: action bad kind [ 303.720052][T13992] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 303.732626][T13988] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 304.124572][ T53] Bluetooth: hci2: command 0x0405 tx timeout [ 304.936698][T14024] xt_CT: You must specify a L4 protocol and not use inversions on it [ 304.987840][T14021] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 305.097478][T14035] vlan2: entered promiscuous mode [ 305.832356][T14047] sch_tbf: burst 0 is lower than device lo mtu (11337746) ! [ 305.956227][T14050] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 305.984632][T14050] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 306.316528][T14060] netlink: 'syz-executor.3': attribute type 32 has an invalid length. [ 306.333145][T14060] netlink: 'syz-executor.3': attribute type 44 has an invalid length. [ 306.439267][T14052] __nla_validate_parse: 1 callbacks suppressed [ 306.439285][T14052] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 306.536151][T14068] xt_CT: You must specify a L4 protocol and not use inversions on it [ 306.902847][T14072] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 307.224931][T14079] vlan2: entered promiscuous mode [ 307.440596][T14085] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 307.448949][T14085] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 307.783218][T14096] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 308.314249][T14101] xt_CT: You must specify a L4 protocol and not use inversions on it [ 308.581247][T14103] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 308.775322][T14105] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 308.944249][T14122] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 309.051203][T14122] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 309.083924][T14122] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 309.102498][T14122] tc_dump_action: action bad kind [ 309.158711][T14136] xt_CT: You must specify a L4 protocol and not use inversions on it [ 309.226892][T14140] xt_CT: You must specify a L4 protocol and not use inversions on it [ 309.456835][T14146] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 309.494171][T14150] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 309.805026][T14158] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 310.010773][T14172] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 310.311090][ T5729] tipc: Subscription rejected, illegal request [ 310.378311][T14181] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 312.202198][T14234] __nla_validate_parse: 2 callbacks suppressed [ 312.202217][T14234] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 312.276869][T14240] xt_CT: You must specify a L4 protocol and not use inversions on it [ 312.349351][ T5737] tipc: Subscription rejected, illegal request [ 312.418378][T14245] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 312.426713][T14245] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 312.666734][T14251] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 313.001197][T14266] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 313.026890][T14264] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 313.034467][T14266] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 313.212451][T14275] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 313.220791][T14275] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 313.571491][T14283] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 313.840383][T14294] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 313.991678][T14299] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 314.000644][T14299] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 314.097541][T14306] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 314.115477][T14306] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 314.187197][T14302] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 314.505874][T14314] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 314.707927][T14325] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 315.270790][T14346] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 315.281041][T14346] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 317.418304][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 326.061824][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 326.075078][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 326.094102][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 326.114497][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 326.122686][ T53] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 326.133435][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 328.205076][ T5111] Bluetooth: hci5: command tx timeout [ 330.284870][ T5111] Bluetooth: hci5: command tx timeout [ 332.374852][ T5111] Bluetooth: hci5: command tx timeout [ 334.444956][ T5111] Bluetooth: hci5: command tx timeout [ 345.948973][ T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 345.965543][ T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 345.973347][ T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 345.983417][ T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 345.991269][ T53] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 346.009743][ T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 346.174986][ T5111] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 346.184132][ T5111] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 346.195413][ T5111] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 346.216181][ T5111] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 346.218341][ T5114] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 346.230770][ T5111] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 346.248572][ T5111] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 346.248681][ T5114] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 346.263167][ T5111] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 346.275309][ T53] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 346.282985][ T5114] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 346.291137][ T5114] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 346.559524][ T5119] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 346.568097][ T5119] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 346.590287][ T5119] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 346.605456][ T5119] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 346.615751][ T5119] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 346.623088][ T5119] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 348.125292][ T5111] Bluetooth: hci6: command tx timeout [ 348.364681][ T5111] Bluetooth: hci8: command tx timeout [ 348.364709][ T5119] Bluetooth: hci7: command tx timeout [ 348.688072][ T5111] Bluetooth: hci9: command tx timeout [ 350.205021][ T5111] Bluetooth: hci6: command tx timeout [ 350.445503][ T5119] Bluetooth: hci8: command tx timeout [ 350.451502][ T5111] Bluetooth: hci7: command tx timeout [ 350.764797][ T5111] Bluetooth: hci9: command tx timeout [ 352.284682][ T5111] Bluetooth: hci6: command tx timeout [ 352.524671][ T5119] Bluetooth: hci8: command tx timeout [ 352.531445][ T5111] Bluetooth: hci7: command tx timeout [ 352.844793][ T5111] Bluetooth: hci9: command tx timeout [ 354.364599][ T5119] Bluetooth: hci6: command tx timeout [ 354.604675][ T5119] Bluetooth: hci7: command tx timeout [ 354.604688][ T53] Bluetooth: hci8: command tx timeout [ 354.924481][ T53] Bluetooth: hci9: command tx timeout [ 355.328215][ T53] Bluetooth: hci3: command 0x0406 tx timeout [ 378.855123][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 391.104733][ T53] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 391.113111][ T53] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 391.124731][ T53] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 391.136062][ T53] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 391.144301][ T53] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 391.162867][ T53] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 393.244564][ T53] Bluetooth: hci10: command tx timeout [ 395.334580][ T53] Bluetooth: hci10: command tx timeout [ 397.405093][ T5111] Bluetooth: hci10: command tx timeout [ 399.484670][ T53] Bluetooth: hci10: command tx timeout [ 401.414578][ T53] Bluetooth: hci4: command 0x0406 tx timeout [ 410.785286][ T53] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 410.795047][ T53] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 410.803400][ T53] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 410.816582][ T53] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 410.825444][ T53] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 410.832836][ T53] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 410.966837][ T53] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 410.981232][ T53] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 410.989194][ T53] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 410.997942][ T53] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 411.006376][ T53] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 411.013795][ T53] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 411.155360][ T5111] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 411.163575][ T5111] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 411.173656][ T5111] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 411.185803][ T5111] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 411.193620][ T5111] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 411.201185][ T5111] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 411.601092][ T5111] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 411.618339][ T5111] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 411.626228][ T5111] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 411.636291][ T5111] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 411.645058][ T5111] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 411.652487][ T5111] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 412.924800][ T5111] Bluetooth: hci11: command tx timeout [ 413.094609][ T5111] Bluetooth: hci12: command tx timeout [ 413.244652][ T5111] Bluetooth: hci13: command tx timeout [ 413.724859][ T5111] Bluetooth: hci14: command tx timeout [ 415.004643][ T5111] Bluetooth: hci11: command tx timeout [ 415.164555][ T5111] Bluetooth: hci12: command tx timeout [ 415.344524][ T5111] Bluetooth: hci13: command tx timeout [ 415.804651][ T5111] Bluetooth: hci14: command tx timeout [ 417.084521][ T5111] Bluetooth: hci11: command tx timeout [ 417.244547][ T5111] Bluetooth: hci12: command tx timeout [ 417.404558][ T5111] Bluetooth: hci13: command tx timeout [ 417.884655][ T5111] Bluetooth: hci14: command tx timeout [ 419.164826][ T5111] Bluetooth: hci11: command tx timeout [ 419.329773][ T5111] Bluetooth: hci12: command tx timeout [ 419.484761][ T5111] Bluetooth: hci13: command tx timeout [ 419.965607][ T5111] Bluetooth: hci14: command tx timeout [ 440.297374][ T1250] ieee802154 phy1 wpan1: encryption failed: -22 [ 452.604779][ T53] Bluetooth: hci5: command 0x0406 tx timeout [ 456.170436][ T53] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 456.186608][ T53] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 456.195066][ T53] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 456.203248][ T53] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 456.211253][ T53] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 456.219195][ T53] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 458.284781][ T5111] Bluetooth: hci15: command tx timeout [ 460.364635][ T5111] Bluetooth: hci15: command tx timeout [ 461.404959][ T30] INFO: task syz-executor.2:14356 blocked for more than 143 seconds. [ 461.413073][ T30] Not tainted 6.10.0-rc2-syzkaller-00243-g144ba8580bcb #0 [ 461.439557][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. 2024/06/12 06:53:00 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 461.448549][ T30] task:syz-executor.2 state:D stack:26624 pid:14356 tgid:14353 ppid:5109 flags:0x00000006 [ 461.469179][ T30] Call Trace: [ 461.472491][ T30] [ 461.475623][ T30] __schedule+0x17e8/0x4a20 [ 461.480181][ T30] ? __pfx___schedule+0x10/0x10 [ 461.485180][ T30] ? __pfx_lock_release+0x10/0x10 [ 461.490221][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 461.496321][ T30] ? schedule+0x90/0x320 [ 461.500609][ T30] schedule+0x14b/0x320 [ 461.507933][ T30] schedule_preempt_disabled+0x13/0x30 [ 461.513593][ T30] __mutex_lock+0x6a4/0xd70 [ 461.518680][ T30] ? __mutex_lock+0x527/0xd70 [ 461.523380][ T30] ? do_ip_setsockopt+0x127d/0x3cd0 [ 461.534788][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 461.539848][ T30] ? __lock_acquire+0x1346/0x1fd0 [ 461.554586][ T30] do_ip_setsockopt+0x127d/0x3cd0 [ 461.559654][ T30] ? __pfx_do_ip_setsockopt+0x10/0x10 [ 461.574518][ T30] ? aa_sk_perm+0x967/0xab0 [ 461.579056][ T30] ? __pfx_aa_sk_perm+0x10/0x10 [ 461.583925][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 461.604469][ T30] ? aa_sock_opt_perm+0x79/0x120 [ 461.610999][ T30] ip_setsockopt+0x63/0x100 [ 461.624553][ T30] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 461.630492][ T30] do_sock_setsockopt+0x3af/0x720 [ 461.654427][ T30] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 461.660020][ T30] ? __fget_files+0x29/0x470 [ 461.674518][ T30] ? __fget_files+0x3f6/0x470 [ 461.679238][ T30] __sys_setsockopt+0x1ae/0x250 [ 461.684108][ T30] __x64_sys_setsockopt+0xb5/0xd0 [ 461.704553][ T30] do_syscall_64+0xf3/0x230 [ 461.710718][ T30] ? clear_bhb_loop+0x35/0x90 [ 461.724546][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 461.730482][ T30] RIP: 0033:0x7fd61ce7cea9 [ 461.745384][ T30] RSP: 002b:00007fd61db880c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 461.753829][ T30] RAX: ffffffffffffffda RBX: 00007fd61cfb3f80 RCX: 00007fd61ce7cea9 [ 461.774468][ T30] RDX: 0000000000000027 RSI: 0000000000000000 RDI: 0000000000000006 [ 461.782462][ T30] RBP: 00007fd61ceebff4 R08: 000000000000000c R09: 0000000000000000 [ 461.814422][ T30] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 461.822431][ T30] R13: 000000000000000b R14: 00007fd61cfb3f80 R15: 00007fff148d4f48 [ 461.844544][ T30] [ 461.847609][ T30] INFO: task syz-executor.2:14358 blocked for more than 143 seconds. [ 461.864567][ T30] Not tainted 6.10.0-rc2-syzkaller-00243-g144ba8580bcb #0 [ 461.872213][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 461.904708][ T30] task:syz-executor.2 state:D stack:28184 pid:14358 tgid:14353 ppid:5109 flags:0x00000006 [ 461.924462][ T30] Call Trace: [ 461.927768][ T30] [ 461.930711][ T30] __schedule+0x17e8/0x4a20 [ 461.944472][ T30] ? __pfx___schedule+0x10/0x10 [ 461.949356][ T30] ? __pfx_lock_release+0x10/0x10 [ 461.964797][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 461.970301][ T30] ? schedule+0x90/0x320 [