last executing test programs: 19.960671674s ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000280)={0x24, 0x3, 0x1, 0x101, 0x0, 0x0, {}, [@CTA_TUPLE_REPLY={0x4}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8}]}]}, 0x24}}, 0x0) write$binfmt_script(r3, &(0x7f0000000040)={'#! ', './file0', [{0x20, '&!}'}, {0x20, 'sit0\x00'}]}, 0x15) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c0"], 0x398}}, 0x0) 19.393850182s ago: executing program 1: socket$inet_mptcp(0x2, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800009500"/18], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @local}, 0x10) (async) setsockopt$sock_int(r0, 0x1, 0x800000000f, &(0x7f0000000080)=0x7, 0x4) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r1, 0x1, 0xf, &(0x7f0000000000)=0x2, 0x4) bind$inet6(r1, &(0x7f0000000240)={0xa, 0x4e22, 0x0, @ipv4={'\x00', '\xff\xff', @multicast2}}, 0x1c) (async) listen(r0, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x0) (async) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)) (async) openat$tun(0xffffffffffffff9c, &(0x7f00000002c0), 0x191200, 0x0) (async) ioctl$SIOCSIFHWADDR(r2, 0x89f1, &(0x7f0000000900)={'veth0_virt_wifi\x00', @random="048800"}) (async) listen(r1, 0x0) (async, rerun: 64) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) (async, rerun: 64) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0xf000) (async, rerun: 32) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) (async, rerun: 32) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x20001400) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) sendfile(r4, r3, 0x0, 0x7fffffff) socket$l2tp6(0xa, 0x2, 0x73) unshare(0x6020400) socket$kcm(0x29, 0x5, 0x0) (async, rerun: 64) socket$packet(0x11, 0x2, 0x300) (rerun: 64) 19.138654566s ago: executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes192\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'rng\x00', 0xc, 0x0, 'drbg_pr_ctr_aes128\x00'}, 0x58) 18.865547568s ago: executing program 1: r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=ANY=[@ANYBLOB="380000006c0015000000d9fece23b82000000000", @ANYRES32=r1, @ANYBLOB="000000000000000018003480050035"], 0x38}, 0x1, 0x300}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB='8\x00\x00\x00'], 0x38}, 0x1, 0x300}, 0x0) 18.717690697s ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$sock_inet_sctp_SIOCINQ(0xffffffffffffffff, 0x541b, 0x0) r1 = getpid() r2 = getgid() bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x3, &(0x7f00000002c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) gettid() r3 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_STARTDAEMON(r3, 0x0, 0x48b, &(0x7f0000000200)={0x0, 'dummy0\x00'}, 0x18) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cgroup.controllers\x00', 0xb00000000065808, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000740)={0x6, 0x0, 0x0, 0x0, 0x0, 0x1000, &(0x7f0000000c00)=""/4096, 0x0, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000480)={0x5, 0x8, 0x6, 0xbf43}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000600)=[r4, 0xffffffffffffffff]}, 0x90) getsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x4, &(0x7f0000000040)={{{@in=@multicast1, @in=@initdev}}, {{@in=@remote}, 0x0, @in6=@private1}}, &(0x7f0000000140)=0xe8) syz_init_net_socket$rose(0xb, 0x5, 0x0) accept4$bt_l2cap(0xffffffffffffffff, 0x0, &(0x7f0000000300), 0x1000) sendmsg$unix(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)=@file={0x0, './file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}, 0x6e, 0x0, 0x0, &(0x7f0000000340)=[@cred={{0x1c, 0x1, 0x2, {r1, 0xffffffffffffffff, r2}}}, @rights={{0x10}}], 0x30, 0x20000000}, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000005180)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000004700)=[@cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0x0, 0xffffffffffffffff}}}, @cred={{0x1c}}], 0x60, 0x40000}}], 0x2, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) 18.600224286s ago: executing program 1: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r0, &(0x7f0000003700)={0x0, 0x6, &(0x7f0000000080)={&(0x7f0000000440)={0x33fe0, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac, @device_b, @broadcast}, @a_msdu}}]}, 0x4c}}, 0x0) 15.044446098s ago: executing program 0: r0 = socket$l2tp6(0xa, 0x2, 0x73) bind$alg(0xffffffffffffffff, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r1 = epoll_create1(0x0) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) r3 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x148, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_red={{0x8}, {0x11c, 0x2, [@TCA_RED_PARMS={0x14, 0x1, {0x0, 0x2}}, @TCA_RED_STAB={0x104, 0x2, "15e9daac277fa7ad9366493b96b6bec8e3e8db8d252c6e888a7d00cee4dbb20199eefab6eb231e0443bbe9e4395afe6c3c44f88c68088481caff63e8f2c60b5337852a5a445692619a911e724544bae857c3d6d13390cc05cf987caaae4c87d625263c8fa3e921e5be1292080d851ae4cdc8ea88bc949e152d4ec58033c35552d75d8243a6f61d3fb8478494da9eb29bf7a015b62a925ee515b2a5467b28b4e468c7bcf0fdd961e3ee27280b654551c0cdc759dd0da914d472cd61a10663971194c7e1bc14cb4b78463c50199b79be6ffae8c72b6919f650c6efa738125a88445a3e9f6dd55a622b517aa240483daf25ceee399013453dabd0c4da5482209a38"}]}}]}, 0x148}}, 0x0) shutdown(r2, 0x0) recvmmsg(r2, &(0x7f0000000080), 0x72a, 0x0, 0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000780)={0x90000008}) sendmmsg$inet6(r0, &(0x7f0000003180)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c, 0x0}}, {{&(0x7f00000002c0)={0xa, 0x0, 0x0, @private2, 0x6}, 0x1c, 0x0, 0x0, &(0x7f0000000880)=ANY=[], 0x18}}], 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0xffffffff, 0x1, 0x1}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x5, r6}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_GET_PROG_INFO(0xa, &(0x7f0000000740)={r7, 0x0, 0x0}, 0x10) syz_emit_ethernet(0x6e, &(0x7f0000000340)={@multicast, @random="fd137b07daa7", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "02adf7", 0x38, 0x3a, 0x0, @ipv4={'\x00', '\xff\xff', @private}, @mcast2, {[], @time_exceed={0x3, 0x2, 0x0, 0x0, '\x00', {0x0, 0x6, "fd9063", 0x0, 0x2f, 0x0, @mcast1, @loopback={0x0, 0xffffac1414aa}, [], '\x00\x00\x00\x00\x00\x00\x00\x00'}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x5, &(0x7f0000000300)=ANY=[@ANYBLOB="050000000000000063115a0000000000850000000000000095000000000000009500a505000000001b5e0653402dc833ab58339e96"], &(0x7f0000000080)='GPL\x00', 0xa, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x90) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r8, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x4c, r9, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x1c, 0x33, @data_frame={@msdu=@type10={{}, {}, @from_mac, @device_b, @broadcast}, @a_msdu}}]}, 0x4c}}, 0x0) r11 = socket$inet6(0xa, 0x2, 0x0) r12 = socket$inet6(0xa, 0x3, 0x6) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x0, 0x0, 0x2000000000903, 0x1}, 0x20) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000000)={@dev, 0x0, 0x0, 0x3, 0x1}, 0x20) getsockopt$inet6_IPV6_FLOWLABEL_MGR(r12, 0x29, 0x20, &(0x7f0000000000)={@private2}, &(0x7f0000000080)=0x20) sendmmsg$inet6(r11, &(0x7f0000002ec0)=[{{&(0x7f0000000440)={0x2, 0x4e20, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="12000000000000001100000067"], 0x18}}], 0x1, 0x0) 14.86608663s ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x0, 0x80a, 0xfffffffe) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000010c0)=ANY=[@ANYBLOB="3c0000684cea56b7001000100003000000000000", @ANYRES32=r3, @ANYBLOB="000000000d0400001c00128009000100626f6e64000000000c0002800800070000000000"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=@deltclass={0x48, 0x29, 0x400, 0x70bd2c, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0xffe0, 0xfff3}, {0xc}, {0x7, 0xf}}, [@TCA_RATE={0x6, 0x5, {0x2, 0x82}}, @TCA_RATE={0x6, 0x5, {0xb8, 0x7f}}, @tclass_kind_options=@c_qfq={{0x8}, {0xc, 0x2, [@TCA_QFQ_WEIGHT={0x8, 0x1, 0x99ca}]}}]}, 0x48}}, 0x0) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000100)={'macsec0\x00', &(0x7f0000001cc0)=@ethtool_channels={0x0, 0xfffffffd, 0x0, 0x40}}) r4 = socket$can_bcm(0x1d, 0x2, 0x2) recvmmsg(r4, &(0x7f0000007ec0)=[{{0x0, 0x0, &(0x7f0000003e00)=[{&(0x7f0000001a80)=""/18, 0x12}], 0x1}}], 0x1, 0x0, 0x0) setsockopt$SO_TIMESTAMP(r4, 0x1, 0x3f, &(0x7f0000000000), 0x4) connect$can_bcm(r4, &(0x7f00000000c0), 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) socket(0xf, 0x800, 0x401) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0xf000) sendfile(r6, r5, 0x0, 0xf03a0005) ioctl$FS_IOC_GETFSMAP(r0, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000002"]) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="b40000000000000061116c0000000000060000000000000095000000000000004e3c5dde3fed56866bc2aa9c049cec33456c8d07099a186fc35eb6dfe1b55f28e065ede11168e594125e8329dacd55f4fc6eeec1b8bb299d509f9f"], &(0x7f0000000080)='GPL\x00', 0x4, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76}, 0x48) 13.928514063s ago: executing program 0: r0 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r0, 0x8914, &(0x7f0000000080)={'vxcan1\x00'}) r1 = socket$kcm(0x10, 0x3, 0x10) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000390009000000000000000010010000000400008010000180c9b6c6a33047435477018d00080002"], 0x30}}, 0x0) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) sendmsg$rds(r2, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) r4 = syz_genetlink_get_family_id$devlink(&(0x7f00000003c0), r3) sendmsg$DEVLINK_CMD_PORT_UNSPLIT(r3, &(0x7f0000000500)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000400)={0x60, r4, 0x400, 0x70bd29, 0x25dfdbfe, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}}]}, 0x60}, 0x1, 0x0, 0x0, 0x1}, 0x0) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=@newqdisc={0x90, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x60, 0x2, {{0x10, [0x10, 0xd, 0xf, 0x0, 0x10, 0x10, 0x9, 0x6, 0xf, 0x8, 0xb, 0x2, 0xb, 0xc, 0xd, 0xc], 0x1, [0x4, 0x4, 0xfffe, 0x367c, 0xef, 0xff80, 0x1f, 0x5, 0x2, 0x54e, 0xffad, 0xca, 0x3, 0x7fff, 0xc8de, 0x4], [0x6, 0x211, 0x9, 0x3f, 0x7, 0x8000, 0x79, 0x2, 0xffc0, 0x6e, 0x6, 0x0, 0x3, 0x7, 0x4ce, 0x7]}, [@TCA_MQPRIO_SHAPER={0x6}]}}}]}, 0x90}}, 0x0) syz_emit_ethernet(0x7a, &(0x7f0000000980)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd6092c01f00442f00fef500000000000000000000000000bb00000000000000000000ff"], 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x2, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="30000000390009000000000000000010010000000400008010000180c9b6c6a3304743a602000000080002"], 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000ac0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$RDS_CANCEL_SENT_TO(0xffffffffffffffff, 0x114, 0x1, &(0x7f0000000100)={0x2, 0x0, @initdev={0xac, 0x1e, 0x4, 0x0}}, 0x10) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0x13, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000072000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r8, 0x4) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000), 0xc, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="13000000430011050000000000000000000000000800040000000000080002000000000066468fe48118fe1331158afacbd9c95eb311d74c8054589ad494bc41114afec56fd97250ec9275d840075b13456d9a461d7ec8e57f1fd068378b0e45d972ec183e14070ddfda41ace93766ca332af1bea82016ae99795b880e52d50881a3e5593c4f55c5a3dae439"], 0x24}}, 0x0) 11.788485828s ago: executing program 0: r0 = socket$kcm(0x2, 0x1000000000000002, 0x0) sendmsg$inet(r0, &(0x7f0000007940)={&(0x7f0000000100)={0x2, 0x4e0e, @loopback=0x7f00000c}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_retopts={{0x18, 0x0, 0x7, {[@cipso={0x86, 0x8, 0xffffffffffffffff, [{0x0, 0x2}]}]}}}], 0x18}, 0x0) 11.730962831s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=@newlink={0x6c, 0x10, 0x403, 0x70bd2a, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINKINFO={0x4c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x3c, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5}, @IFLA_BR_NF_CALL_IPTABLES={0x5}, @IFLA_BR_MCAST_MLD_VERSION={0x5, 0x2c, 0x6}, @IFLA_BR_STP_STATE={0x8}, @IFLA_BR_VLAN_STATS_ENABLED={0x5, 0x29, 0x1}, @IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x4}, @IFLA_BR_NF_CALL_ARPTABLES={0x5}]}}}]}, 0x6c}}, 0x0) 11.012574159s ago: executing program 0: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x16, 0x4, &(0x7f00000010c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x99, &(0x7f0000000180)=""/148, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0xffffffffffffff79}, 0x16) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xf000, 0x0, &(0x7f00000000c0)="61df712bc884fed5722780b6c2a7", 0x0, 0xf000, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000012c0)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x15, 0x5, 0x0) (async) r3 = socket(0x15, 0x5, 0x0) getsockopt(r3, 0x200000000114, 0x2717, 0x0, &(0x7f0000000040)) sendmsg$inet(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000900)=[{&(0x7f00000013c0)="d080", 0x2}], 0x1}, 0x20000801) setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f0000000080)=0x20000, 0x4) (async) setsockopt$packet_int(r3, 0x107, 0x7, &(0x7f0000000080)=0x20000, 0x4) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x12, &(0x7f0000000400)=0x9, 0x4) recvmsg(r2, &(0x7f0000000000)={0x0, 0xd000000, 0x0}, 0x40002002) (async) recvmsg(r2, &(0x7f0000000000)={0x0, 0xd000000, 0x0}, 0x40002002) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) (async) sendto$inet6(r4, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback={0x0, 0x1c9ae7fffe9a6f34}}, 0x1c) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000540)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000000001300000008000300", @ANYRES32=0x0, @ANYBLOB="0000000000ea0000000000000000000067baecb363d83be29b69fa6b122977db754e61ef559c8f9ea3a682324f571df55a3f23502f6e859f4bd090bad0430ac3219308db85ad613344b95614e6ee05aad01f48fc78d8367bdc5472aacd6d7cdd5eef4ec4ef450e347589f7fe4b6f14a18b023b50"], 0x2c}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) r5 = socket$inet_udplite(0x2, 0x2, 0x88) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x3, 0x5, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x0, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000000500)={'#! ', './file0'}, 0xb) (async) write$binfmt_script(r7, &(0x7f0000000500)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r7, 0x0) setsockopt$IPT_SO_SET_REPLACE(r5, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x210, 0x180, 0x0, 0x148, 0x0, 0x148, 0x220, 0x240, 0x240, 0x220, 0x240, 0x7fffffe, 0x0, {[{{@ip={@rand_addr, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x270) shutdown(0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) (async) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x8000) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x8}, 0x0) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(0xffffffffffffffff, 0x84, 0xa, &(0x7f0000000140)={0x0, 0x0, 0x0, 0x0, 0x8}, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000240)={0x0, @private, @dev}, &(0x7f0000000280)=0xc) write$binfmt_elf64(r2, &(0x7f0000001400)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0xce, 0x5, 0x2, 0x8e, 0x1, 0x3e, 0x0, 0x375, 0x40, 0x15, 0xfffffffe, 0x101, 0x38, 0x1, 0x1, 0x5, 0x400}, [{0x70000000, 0x200, 0x8000000000000001, 0x7, 0xba7, 0x40, 0x401, 0x49b4d585}], "355c0b2acebc119d5d671cbee1ae98549f9184821a7d44a9eb3e84db2a76d424eaec9f3c0d0573dbba34af6bf9194664494499211637d7f525c72831e447a51943af17375c2eccc9195e946cea1365a25082c7fa61fdd14d3fb150c14dad4e2ae17d649e26de0a9610ba46e4d081c8a52448913a5e3f007b6464593b6a448bb6bdd7fe23f8d6868dd49fe0a7952a937228e7d8828ab73880760f11aa", ['\x00', '\x00', '\x00', '\x00', '\x00']}, 0x614) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x11, 0xc, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='workqueue_activate_work\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x0, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_xfrm(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000c40)=ANY=[@ANYBLOB="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", @ANYRES32=r8, @ANYRES32=0xee00, @ANYBLOB="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"], 0x2d4}, 0x1, 0x0, 0x0, 0x1}, 0x8000) 3.421159742s ago: executing program 3: r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r0, &(0x7f0000000340)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x40, 0x0, 0x0, 0x70bd27, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x7ff}, @BATADV_ATTR_VLANID={0x6}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0c4}, 0x4) r1 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x600000, 0x1000004, 0x13, r1, 0x0) mmap(&(0x7f0000ffc000/0x3000)=nil, 0x3000, 0x0, 0x12, r1, 0x0) mmap(&(0x7f0000de4000/0x3000)=nil, 0x3000, 0x0, 0x13, r1, 0x0) r2 = socket$inet6(0xa, 0x1, 0x0) mmap(&(0x7f00009ff000/0x600000)=nil, 0x601500, 0x0, 0x13, r2, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) sendmsg$inet6(r3, &(0x7f0000001640)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1400000000000000290000003e000000000000000000000014"], 0x30}, 0x0) r4 = socket(0x10, 0x3, 0x0) write(r4, &(0x7f0000000000)="fc0000001a000700ab092500090007000aab0700a90100001d60369321000100ff1100000005d0000000000000039815fa2c1ec28656aaa79bb94b46fe000000bc0003000500000014000027000089fee1434f1e596534d07302ade0bbc91a3e3280772c05defd5a32e280fc83ab82f605f70c9ddef2fe082038f4f8b29d3ef3d92c83170e5bba4a46d284a710af333ae4f5566f91cf190201800015b2ccd243f295ed94e0ad91bd0734babc7c3f2eeb00d43dd16b17e583df150c3b880f411f46a6b567b4d5715587e658a1ad0a4f01731d05b0350b0041f0d48a99c03f080548deac270e33429fd3000175e63fb8d38a8700"/252, 0xfc) ioctl$sock_ipv6_tunnel_SIOCCHGPRL(r4, 0x89f7, &(0x7f0000000300)={'sit0\x00', &(0x7f00000001c0)={@rand_addr=0x64010101, 0x1}}) r5 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r6 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000001040)={0x0, 0x0, &(0x7f0000001000)={&(0x7f0000000040)=ANY=[@ANYBLOB="d8010000", @ANYRES16=r6, @ANYBLOB="010000000000fbdbdf25010000000800050001000000060006004e220000140002007767320000000000000000000000000024000300a0cb879a47f5bc644c0e693fa6d031c74a1553b6e901b9ff2f518c78042fb5427c010880"], 0x1d8}}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020207025000000002dba513d7b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000002c00)=ANY=[@ANYBLOB="9feb01001800000000000000340000003400000002000000000000000000000300000000020000000200000001000000000000000000000105da73a2400000000000000000000009"], 0x0, 0x4e}, 0x20) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f0000000f40)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=ANY=[@ANYBLOB="3012baf3906d15484872c80278c89c7b5d52df80e4570bd328d1dafe52b90dd53dbbb6d843dfe490a3edfe483dbdea095b0be0bd6a787df8", @ANYRES16=r5, @ANYBLOB="35010000000000000000010000001400020077673200000000000000000000000000060006004e230000"], 0x30}}, 0x8000) 1.8315633s ago: executing program 3: bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000080)}, 0x20) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x8000) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000004080)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)={0x4c, 0x2, 0x6, 0x101, 0x0, 0x0, {}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r5}, 0x10) splice(r1, 0x0, r4, 0x0, 0x7, 0x0) close(r3) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000180)='Y', 0x1}], 0x1) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x3a) setsockopt$ALG_SET_KEY(r7, 0x117, 0x1, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0x6, &(0x7f00000001c0)=@raw=[@tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @alu={0x7, 0x0, 0x5, 0x4, 0xa, 0x4, 0x4}], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x1, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x1, 0x7fe2, 0x2, 0x140}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f0000000400)={r9, &(0x7f0000000380), 0x20000000}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000006c0)={r9, &(0x7f0000000140)="99", &(0x7f0000000440)=""/155}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000180)={r9, &(0x7f0000000140)}, 0x20) ioctl$sock_x25_SIOCDELRT(r4, 0x890c, &(0x7f00000005c0)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}, 0x7, 'dvmrp1\x00'}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000026c0)={&(0x7f0000000180)='track_foreign_dirty\x00', r8}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r10, &(0x7f0000000000), 0x9) 1.802212843s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x26e1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x7, 0x3, 0x5, 0x806, 0xffffffffffffffff, 0x65d, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x205a, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYBLOB="0000000000000000b702000002"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x6, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000740)={&(0x7f00000006c0)='sched_switch\x00'}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x2, 0x4, 0x1, 0x9}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40}, 0x90) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002ac0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc8734c295cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f244a3c307145452ce64dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c65070020d7df0abc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3593], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) listen(r5, 0x8000) socket$kcm(0xa, 0x6, 0x0) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000000)) socket$netlink(0x10, 0x3, 0x13) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_tracing={0x1a, 0x1a, &(0x7f0000001400)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7fffffff, 0x0, 0x0, 0x0, 0x5}, [@cb_func={0x18, 0xa, 0x4, 0x0, 0xfffffffffffffffe}, @alu={0x3, 0x1, 0x8, 0xb, 0x3, 0x80, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @initr0={0x18, 0x0, 0x0, 0x0, 0xafb, 0x0, 0x0, 0x0, 0x7fffffff}, @call={0x85, 0x0, 0x0, 0x64}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}, @func={0x85, 0x0, 0x1, 0x0, 0x4}, @ldst={0x3, 0x1, 0x2, 0x0, 0x9, 0x50, 0x8}]}, &(0x7f0000000580)='syzkaller\x00', 0x2, 0x0, 0x0, 0x41100, 0x1, '\x00', 0x0, 0x1a, r0, 0x8, &(0x7f00000005c0)={0x6, 0x3}, 0x8, 0x10, &(0x7f0000000640)={0x0, 0xf, 0x4, 0x401}, 0x10, 0x1377b, r3, 0x6, &(0x7f0000000680)=[r1, r0, 0xffffffffffffffff, r0, r0, 0xffffffffffffffff, 0xffffffffffffffff, r2, r1], &(0x7f0000001500)=[{0x0, 0x1, 0x7, 0x8}, {0x4, 0x5, 0x4, 0x6}, {0x3, 0x3, 0xa, 0x4}, {0x1, 0x4, 0x1, 0xc}, {0x4, 0x5, 0x9, 0x5}, {0x3, 0x2, 0x5, 0xc}], 0x10, 0x7fffffff}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001ac0)='cpuacct.usage_percpu_user\x00', 0x26e1, 0x0) socket(0x10, 0x2, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000140), 0x208e24b) socket(0x11, 0x800000003, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x4, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="8500000008000000730a00ff000000003d00000000000000950000000000000018100000", @ANYRES32, @ANYBLOB="1000000000ffff2505000000000000009500000000000000"], &(0x7f0000000140)='GPL\x00', 0xa, 0xffa0, &(0x7f0000000180)=""/149, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x1e, 0x10, 0x0, 0x1e}, 0x2d) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000002, 0x2a012, r6, 0x0) 1.503356915s ago: executing program 2: syz_emit_ethernet(0x7a, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffaaaaaaaaaa008100000086dd602e5cea00403c0020010000000000000000000000000002ff0200000000000000000000000000010004000000000000dd"], 0x0) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket(0x10, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000000c0)={'ip6gre0\x00', &(0x7f00000009c0)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@ipv6_newroute={0x3c, 0x18, 0x1, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r3}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x8}, @RTA_ENCAP={0x10, 0x16, 0x0, 0x1, @SEG6_LOCAL_SRH={0xc}}]}, 0x3c}}, 0x0) (async) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000080)={'syztnl1\x00', &(0x7f0000000180)={'ip6_vti0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @empty}}) (async) vmsplice(r0, &(0x7f0000002300)=[{&(0x7f0000000000)='\x00', 0x1}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}, {0x0}], 0x9, 0x0) 1.130993593s ago: executing program 4: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1801000021000000000000000000000085"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000001cc0)='memory.events\x00', 0x275a, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x82}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) write$binfmt_script(r1, &(0x7f0000000140), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) bpf$OBJ_GET_PROG(0x1c, &(0x7f0000000080)=@o_path={0x0}, 0x18) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000340)=ANY=[@ANYBLOB="18020000000000800000000000090000850000002000000018010000786c6c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b80)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a2c000000060a01040000000000000000020000000900010073797a30000000000900020073797a320000f60030000000050a01030000000000000000020000000900010073797a3000000000090003"], 0x84}}, 0x0) 1.09191977s ago: executing program 2: ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(0xffffffffffffffff, 0x8982, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) socket$alg(0x26, 0x5, 0x0) (async) socket$alg(0x26, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, 0x0}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.idle_time\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='blkio.bfq.idle_time\x00', 0x275a, 0x0) socket$nl_route(0x10, 0x3, 0x0) setsockopt$IPT_SO_SET_REPLACE(r2, 0x0, 0x40, &(0x7f00000004c0)=@filter={'filter\x00', 0xe, 0x4, 0x2d0, 0xffffffff, 0x1a0, 0x98, 0x1a0, 0xffffffff, 0xffffffff, 0x268, 0x268, 0x268, 0xffffffff, 0x4, &(0x7f00000001c0), {[{{@ip={@dev={0xac, 0x14, 0x14, 0xd}, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'bond_slave_0\x00', 'syzkaller0\x00', {}, {}, 0x89}, 0x0, 0x70, 0x98}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x2735961c8497eeae}}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0xffffffff, 'veth1_virt_wifi\x00', 'macvtap0\x00'}, 0x0, 0xb0, 0xd8, 0x0, {}, [@common=@set={{0x40}, {{0x0, [], 0x3}}}]}, @REJECT={0x28}}, {{@ip={@remote, @dev={0xac, 0x14, 0x14, 0x21}, 0x0, 0x0, 'wlan1\x00', 'gretap0\x00', {}, {0xff}, 0x4, 0x2, 0x30}, 0x0, 0xa0, 0xc8, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@link_local}}]}, @REJECT={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x0, 0x0, 0x0, &(0x7f0000000200)='syzkaller\x00'}, 0x90) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000140)={'ip6gre0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001240)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000007001a"], 0x34}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x69, 0x11, 0xa0}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x6}, 0x70) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000007e3a90019f33e1000000000000000000050001000700acd90900020073797a310000000004000780100003006269746d61703a706f727400"], 0x3c}, 0x1, 0x0, 0x0, 0x8840}, 0x0) (async) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3c0000007e3a90019f33e1000000000000000000050001000700acd90900020073797a310000000004000780100003006269746d61703a706f727400"], 0x3c}, 0x1, 0x0, 0x0, 0x8840}, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a000000060001003a"], 0x1c}}, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(0xffffffffffffffff, 0x84, 0x6e, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x0, @remote, 0x400}], 0x1c) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x18000) (async) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0x18000) r7 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$pppl2tp_PPPOL2TP_SO_DEBUG(r7, 0x111, 0x1, 0x0, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r8 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) (async) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, 0x0, 0x0) 942.658628ms ago: executing program 3: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007d00000095000000000000002b072aea7293758d7f1bf7f2863be2cba8c430c456f884e96ebc9ec9354abacf3bc9eb805298759c23dbee4be50b6fbb1f9df347ed8f700e7df642ccfd5f939fa919df534827fae5357d14acf3e2d0224466a2158d4073f89cd60a7e121d5506a9215dadac33d6f4ac436c4ae572cf5b7c55c5ca142bd792f3ebdda656f3c98fbb6f9bd4d59f1ebe880bca532bed1e91637432a1b23e61dd297c4ddc1c004d152d5bcfbbcefa6eb42cfd7353ffd5d13285988a0669b439603f8539eab20f677e995f6f43956d96af8db9d288e0"], 0x0, 0x4}, 0x90) unshare(0x400) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) tee(r0, 0xffffffffffffffff, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000400)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_TIMER_SLACK={0x8}, @TCA_FQ_CE_THRESHOLD={0x8}]}}]}, 0x40}}, 0x0) setsockopt$inet6_udp_encap(0xffffffffffffffff, 0x11, 0x68, &(0x7f0000000000)=0x5, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket$inet_mptcp(0x2, 0x1, 0x106) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x6, 0x7, &(0x7f0000000180)=@framed={{}, [@func={0x85, 0x0, 0x1, 0x0, 0x3}, @map_val, @exit]}, &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0xfffffffffffffef7}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="05000000000000000000532db6df08000300", @ANYRES32=r6], 0x38}, 0x1, 0x0, 0x0, 0x8004}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000100), 0x4) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=@newtaction={0x64, 0x30, 0x9, 0x0, 0x0, {}, [{0x50, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x5}}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 931.76861ms ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) 741.488633ms ago: executing program 4: socket$unix(0x1, 0x5, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) socketpair$unix(0x1, 0x0, 0x0, 0x0) r0 = socket$igmp6(0xa, 0x3, 0x2) socketpair(0x27, 0x6, 0x4, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$SIOCX25SENDCALLACCPT(r1, 0x89e9) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x72, &(0x7f0000001900)={@link_local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53aff", 0x3c, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [@srh={0x2f}], "71f97658"}}}}}}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000380)) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$devlink(0x0, 0xffffffffffffffff) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) socket(0x1d, 0x2, 0x6) socket$caif_stream(0x25, 0x1, 0x0) pipe(&(0x7f0000000100)) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000002c00)={'ip6gretap0\x00', 0x0}) getuid() r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x3, &(0x7f0000000000)={&(0x7f0000000580)=@newlink={0x44, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1e8f7}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) 700.619556ms ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route_sched(r1, &(0x7f0000005840)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000001240)=@newqdisc={0x78, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{}, 0x4}}}]}, 0x78}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000012c0)=@newtfilter={0x10e0, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {}, {0x8}}, [@filter_kind_options=@f_fw={{0x7}, {0x10b4, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x0, 0x2}}, @TCA_FW_INDEV={0x14, 0x3, 'sit0\x00'}, @TCA_FW_CLASSID={0x8, 0x1, {0xf, 0x7}}, @TCA_FW_POLICE={0x107c, 0x2, [@TCA_POLICE_AVRATE={0x8, 0x4, 0x3}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfff, 0x2, 0x7, 0xed, 0x104a, 0x200, 0x400, 0xffff, 0x3, 0xa72, 0x8000, 0xfffffa19, 0xff, 0x7fff, 0x8, 0x6, 0x7, 0x9, 0x1ff, 0x0, 0x800000, 0xfff, 0x2, 0x2, 0x7, 0x6, 0x3, 0xfff00000, 0x4, 0x415, 0x0, 0x4f1, 0x2, 0x2, 0x3ff, 0x894, 0x8, 0x3f, 0x9, 0x9, 0x8, 0x1, 0x7, 0x0, 0x4, 0x80, 0x1, 0x8000, 0x7, 0x2, 0x1, 0x1, 0x1, 0x3f, 0x1b10e7e9, 0x3, 0x8, 0x4, 0xfffffff9, 0xb2, 0xb, 0x1, 0x2, 0x9, 0x400, 0x1, 0x1, 0x5, 0x3, 0xcb71, 0xfffffff9, 0x8, 0x5, 0x9, 0x7, 0x401, 0xbff80, 0x4, 0x5, 0x80000000, 0x0, 0x8, 0x8001, 0x7, 0xf9ff, 0x4, 0x7fffffff, 0xffffffff, 0x823, 0xfffffff7, 0x1f, 0x2, 0x3, 0xffff7fff, 0xffffffff, 0x3, 0xfffffffb, 0x200, 0x8, 0x2, 0xfc, 0xff, 0x8, 0x2d, 0x1, 0x1, 0x0, 0x31e2, 0x7, 0x1f, 0x200, 0x8, 0x1f, 0xffffffe1, 0xacd9, 0xffffffff, 0xce4, 0x8, 0x5, 0x80, 0x5, 0xff, 0xaf8, 0x8000, 0x7, 0x1, 0x7bba, 0x3, 0x2, 0x0, 0x1, 0x80000001, 0x9, 0x3, 0x10001, 0x3, 0x2, 0x2000c6a7, 0x1ff, 0x1000, 0x6, 0x8000, 0x5, 0x6, 0x6, 0x1, 0x9, 0x88b, 0x4, 0x8, 0x7, 0x12, 0x100, 0x9, 0x7fff, 0x45d, 0x0, 0x101, 0xf56, 0x9, 0x80000000, 0x80000001, 0x0, 0x1f, 0xc774, 0x10000, 0x1f, 0x9, 0x879, 0x9, 0x8001, 0x6, 0x1, 0x6, 0x9, 0x4, 0xfffffffe, 0x100, 0x6bc, 0x2, 0x7, 0x5, 0x5, 0x7, 0x9, 0x5, 0x1, 0x63, 0x3, 0x5, 0x6, 0x1, 0xffff0001, 0x3, 0xd7, 0x1, 0x80, 0x5, 0x3ff, 0x1, 0xd75, 0x7, 0xfffffff8, 0xffffff80, 0x8, 0x3, 0x771, 0x2, 0x2, 0x1f, 0x6, 0x6, 0x9, 0x3ff, 0x5, 0x0, 0x100, 0x10001, 0x548, 0x3, 0x80, 0xe394277, 0x3, 0x3, 0x101, 0xfff, 0x1, 0x1, 0x7f, 0x0, 0x3, 0x1, 0x7, 0xffffffff, 0x9, 0x7f, 0x756bb075, 0x101, 0x6, 0x3, 0x7, 0x5, 0x1, 0x8, 0x7fff, 0x1000, 0x956c, 0x7fff, 0x5, 0x80, 0x6, 0x79, 0x3, 0x3, 0x3, 0x8]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x6, 0x8, 0x2, 0x9df3, 0x401, 0x3, 0x0, 0x8, 0x10000, 0x40, 0x4d, 0xc072, 0x6, 0x6, 0x5, 0x80000000, 0x7fff, 0x5, 0xffffff80, 0x7fff, 0x0, 0x4, 0xf696, 0x7, 0x7fff, 0x8, 0x9, 0x3f, 0x1, 0x800, 0x101, 0x1, 0x0, 0x1, 0x1, 0x2, 0xac, 0x40, 0x6, 0x1, 0x3ff, 0x9, 0x8, 0x3, 0x8, 0x2, 0x101, 0x7, 0x2, 0xfffffffb, 0x1f, 0x1, 0x4, 0x4, 0x9a84, 0x3, 0x6, 0x40, 0x5, 0x80, 0x7, 0x7ff, 0x87, 0x3, 0x6, 0xfc8, 0x2, 0x5, 0x0, 0x8, 0x9, 0xb2, 0x5, 0x80000001, 0x9, 0x6, 0x8, 0x4, 0x20f7, 0x3f, 0x935, 0x1, 0x1, 0x7, 0x2, 0x9, 0xffffffff, 0x1, 0x7, 0x0, 0x3, 0x7, 0x9, 0xfffffff9, 0xfff, 0x5b6, 0x2, 0xff, 0xffff, 0x9, 0x0, 0x968, 0x0, 0x9, 0x7fff, 0x3f, 0x2, 0x7ff, 0x7fffffff, 0x5e0b48e9, 0x1, 0x2, 0x7, 0x1, 0x8, 0x8, 0x101, 0x5, 0x1f, 0x8, 0x4, 0x93b, 0x1, 0x7fff, 0x40000, 0x8, 0x917, 0x2, 0x6, 0x7, 0x4, 0x7ff, 0x2, 0x9, 0x0, 0x1f, 0x8001, 0x0, 0xffff, 0x2, 0x8001, 0x6d1, 0x1f, 0x3d78, 0x3, 0x100, 0x1, 0x101, 0x9, 0x1ff, 0x3, 0x7, 0x3, 0x62, 0x6, 0x8000, 0x1f, 0x40, 0x4, 0x0, 0x7, 0x7f, 0x7f, 0xffffff7f, 0x7f, 0x6, 0x4, 0x200, 0x9, 0x8b, 0x6, 0x2, 0x10000, 0x6, 0x3, 0xb1, 0x29, 0x200, 0x7, 0x6, 0x3b, 0x0, 0x4, 0x1000, 0x8001, 0x9bf, 0x80000009, 0x6, 0x3, 0x7ff, 0x1, 0x100, 0xffffffff, 0x3, 0xd8, 0x0, 0x8, 0x0, 0x80000001, 0x200, 0x1, 0x7, 0x6, 0x81, 0x1, 0xffffffff, 0x5, 0x81, 0xfffffffc, 0x8, 0x9, 0x0, 0x7f, 0x9, 0x5, 0x2, 0x8000, 0x4, 0x1ff, 0x0, 0x78, 0x0, 0x5, 0x10000, 0xccc8, 0x1, 0x0, 0x6, 0x8000, 0x3, 0x9e0, 0x17, 0x80, 0x3, 0x6, 0x8, 0x6, 0x7, 0x1, 0x8000, 0x9f, 0x2, 0x2, 0x2, 0x1ff, 0x5, 0x7, 0x6, 0x9, 0x69, 0x0, 0x8, 0xff, 0x400, 0x1ff, 0x7]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x400, 0xffffffffffffffff, 0x7, 0x674, 0x5a73, {0x5, 0x2, 0xff, 0x7, 0x0, 0x100000}, {0x8, 0x1, 0x2, 0x2, 0xbc1c, 0x6}, 0x6, 0x1000, 0x3f}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x10000}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x10001, 0xd7f, 0x8001, 0x1, 0x4, 0xffff, 0x6be, 0x8, 0x8, 0x7ff, 0x2, 0x6, 0x5, 0x58151448, 0x0, 0x1, 0x8, 0x6, 0x0, 0x6, 0x3, 0x80000001, 0x7, 0x5, 0xfffff001, 0x8, 0x6, 0x2, 0x2, 0x446f, 0xf8e5, 0x80000001, 0x9, 0x7, 0xfa0, 0x8, 0x200, 0x0, 0x80000001, 0x81e, 0x9, 0x0, 0x101, 0xff, 0x7fffffff, 0x3f, 0x7, 0x9a2c, 0x3, 0x2, 0xf2d, 0x2, 0x1, 0x97b, 0x1f, 0xfff, 0x38, 0x8, 0x3, 0x8, 0x67f8603d, 0x5, 0x6, 0x3f, 0x357, 0x100, 0x10001, 0x1, 0x208bb1e2, 0xea, 0x96f, 0xc3c0, 0x2, 0x120, 0x0, 0x9, 0x26f, 0x3, 0x10001, 0x4, 0x20, 0x3, 0x800, 0xc4, 0x6, 0x1f, 0x963, 0x4, 0x40, 0x4, 0x1, 0xdd, 0x8, 0x9, 0x12e3, 0x6, 0x816, 0x40, 0x7, 0x3, 0x6a, 0x2, 0x6, 0x0, 0x3, 0x1, 0x7, 0x80, 0x20, 0x0, 0x0, 0xfffffffc, 0x0, 0x3, 0x4, 0x1, 0x800, 0x1, 0x80000000, 0x3, 0xffff, 0x35, 0x9, 0x8, 0x2, 0x0, 0x3, 0x7, 0x92, 0xb2, 0x80000001, 0x32fe, 0xffffff0f, 0xffffff6a, 0x4, 0x401, 0x7, 0x9, 0x7f, 0x8, 0x2, 0x6, 0x20, 0x80000000, 0x1, 0x800, 0x5, 0x8, 0x7d727649, 0x9, 0xa834, 0x6, 0x4, 0x1, 0x1, 0x247, 0x8, 0x4, 0x7, 0x7, 0xfffffff9, 0x0, 0x5, 0x10000, 0x400, 0xc4f, 0x0, 0xffffffff, 0x4, 0x4, 0x800, 0x2, 0x9, 0x1f, 0x8, 0x8f9b, 0x1, 0x5b2, 0x0, 0x0, 0x0, 0x7, 0x10001, 0x4a5f, 0x9, 0x1, 0xed3, 0x5, 0x5, 0x7, 0xe3fd, 0x1, 0x10000, 0x8, 0x1ff, 0x6, 0xfffffff8, 0x7, 0xffff, 0x5, 0x80000001, 0x5987, 0xffffffff, 0xffff8001, 0x2, 0x8001, 0x0, 0x7fff, 0x4, 0x4, 0x80000001, 0x8, 0x9, 0x4, 0x100, 0x200, 0x8, 0x1ff, 0x5ba, 0x967b, 0xc05, 0x7, 0x9, 0x53bf, 0x3ff, 0x4, 0x6, 0x8, 0x1, 0x20, 0x5, 0x0, 0x7fff, 0x5, 0xff, 0x9, 0xb62, 0x200, 0x609ef6b6, 0x6f71e422, 0x4, 0x3, 0x2, 0x4, 0x1, 0xffffffff, 0x10000, 0x0, 0xf86, 0x6, 0xfffffff7, 0x0, 0x80000000, 0xff, 0xffff]}, @TCA_POLICE_RATE64={0xc, 0x8, 0x2}, @TCA_POLICE_RATE={0x404, 0x2, [0x8, 0x1, 0x101, 0x400, 0x400, 0x0, 0x8, 0x0, 0x2, 0x6, 0x2, 0x40, 0x2, 0x9, 0x5, 0x7, 0x1, 0x7fff, 0xfffff030, 0x1, 0x6, 0x1, 0x5, 0x1, 0x10000, 0x8000, 0x6, 0x9, 0xc727, 0x3, 0x101, 0xff, 0x6, 0x0, 0x3f, 0x3, 0x8000, 0x1, 0x0, 0x8, 0x2, 0x217, 0xfffffff8, 0x4, 0xfff, 0x581, 0x8, 0x0, 0x5010338c, 0xffffa8e7, 0x5, 0x2, 0x80000001, 0x7, 0x7fffffff, 0x9, 0x7ff, 0x5, 0x81, 0x80, 0x7c, 0x10000, 0xf02, 0x8001, 0x7, 0x0, 0xffffffff, 0xb7d0, 0x7, 0x0, 0xdf, 0x0, 0x2, 0x7fff, 0x1e66, 0x5d, 0x400, 0x40, 0x0, 0x0, 0xd8, 0x8001, 0x4, 0x3ff, 0xe5, 0xfffffffa, 0x9, 0x4, 0x7fff, 0x400, 0x0, 0x0, 0xfffff000, 0x0, 0x1200000, 0x1, 0x1, 0x6, 0x2, 0xf2e, 0x3, 0x6, 0x3, 0x1, 0x2, 0x1, 0x0, 0x81, 0x8, 0x1, 0xef, 0x7054d283, 0x6, 0x10001, 0x8, 0x4, 0x80000001, 0x3f, 0x9, 0x8, 0xff, 0xfff, 0x9, 0x3, 0x3ff, 0xf9f, 0x9, 0x40, 0x3, 0xeb, 0x6, 0x9c, 0x6b2f, 0x9, 0x1, 0xb737, 0x2, 0xf366, 0xffffffff, 0x0, 0x93c, 0x4, 0x401, 0x5, 0x47, 0x401, 0x8000, 0x6, 0xafd, 0xff, 0x7ff, 0x1, 0x2, 0xce, 0x0, 0xffff, 0xffff, 0x5, 0x2, 0x800, 0x100, 0x9, 0x0, 0x0, 0x0, 0x3f, 0x0, 0x20, 0x4, 0x2, 0x1, 0x0, 0x0, 0x2, 0x7, 0x0, 0x0, 0x7, 0x3, 0x7f, 0x6b2, 0x5, 0x3, 0x5, 0x5, 0x0, 0x398, 0x72e6, 0x80000000, 0x4, 0x6, 0x2, 0x0, 0x8, 0x7ff, 0x80, 0x3, 0x5f, 0x100, 0x9, 0xd85, 0x0, 0x804, 0x80, 0x7f, 0x2, 0xfffffff9, 0x9, 0x0, 0xffff, 0x6, 0x6, 0x5, 0x0, 0x8, 0x8000, 0x670e, 0x0, 0x401, 0xff6, 0x0, 0x0, 0xa95e, 0x3, 0x9, 0x3, 0x9, 0x0, 0x800, 0x7, 0xfff, 0x2471, 0x8001, 0x0, 0x2, 0x0, 0x8, 0x8001, 0x0, 0x76, 0x6, 0x2, 0x8, 0x8000, 0x0, 0x0, 0x6, 0x0, 0x1, 0x8, 0xc9, 0x1, 0x7ffffffd, 0x0, 0x163c, 0xffff]}]}, @TCA_FW_CLASSID={0x8, 0x1, {0xe, 0xb}}, @TCA_FW_MASK={0x8, 0x5, 0xe5}]}}]}, 0x10e0}}, 0x0) 549.846547ms ago: executing program 3: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002ac0)=@delchain={0x270, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x1f0, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x6c, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x170, 0x6, [@m_ctinfo={0xb8, 0x0, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6}]}, {0x81, 0x6, "55eb88be72ea2bba577976ef9b5ab407e07afa05e4594285326849c2ec806d7b79f86d10adeb18245c150ce2b9eaeb2380aa7104a6df31aefd38f6b7bb0a45721ccbc5daab03190ea553ce464d09642e4ff5eeaf1f2e6171c16bc9ed3d7f4e1d714b45e839ac2719fe34dbba607211f211a9b5b79c050373b7bea3b552"}, {0xc}, {0xc}}}, @m_connmark={0x6c, 0x3ffe, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x48, 0x0, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{}, {}]}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x270}}, 0x0) r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002ac0)=@delchain={0x270, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x2c, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x1f0, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x6c, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_ACT={0x170, 0x6, [@m_ctinfo={0xb8, 0x0, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6}]}, {0x81, 0x6, "55eb88be72ea2bba577976ef9b5ab407e07afa05e4594285326849c2ec806d7b79f86d10adeb18245c150ce2b9eaeb2380aa7104a6df31aefd38f6b7bb0a45721ccbc5daab03190ea553ce464d09642e4ff5eeaf1f2e6171c16bc9ed3d7f4e1d714b45e839ac2719fe34dbba607211f211a9b5b79c050373b7bea3b552"}, {0xc}, {0xc}}}, @m_connmark={0x6c, 0x3ffe, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_bpf={0x48, 0x0, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS={0x14, 0x4, [{}, {}]}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x270}}, 0x0) (async) socket(0x10, 0x803, 0x0) (async) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) 313.357054ms ago: executing program 2: r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f00000000c0)=0x9, 0x4) recvmmsg(r0, &(0x7f00000045c0)=[{{0x0, 0x0, 0x0, 0xa}}], 0x1, 0x0, 0x0) 289.629839ms ago: executing program 4: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='blkio.bfq.dequeue\x00', 0x275a, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) socket$inet6(0xa, 0x800000000000002, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_generic(0x10, 0x3, 0x10) socket$igmp6(0xa, 0x3, 0x2) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f00000008c0)=ANY=[@ANYBLOB="6c0000001000010400d201000072f60000020000", @ANYRES32=r0, @ANYBLOB="0524060000000000300012800b0001006272696467650000200002800c002e00fffff6ffffffffff050007001f0000000600"], 0x6c}}, 0x0) 252.689321ms ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=@newlink={0x3c, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, 0x0, 0x400}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACVLAN_MODE={0x8, 0x9, 0x81000000}]}}}]}, 0x3c}}, 0x0) r3 = socket$inet6(0xa, 0x5, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)='%pK \x00'}, 0x20) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r4}, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x10, &(0x7f0000000200)=ANY=[@ANYBLOB="18020000ff0f00000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa40000000000000704f4ffefffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000000)="e0ff0800000053fe023af1000000", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @remote}, @in6={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}], 0xd) r6 = socket(0x2, 0x3, 0xff) setsockopt$sock_int(r6, 0x1, 0x29, &(0x7f0000000000)=0x97b, 0x4) r7 = socket$inet6(0xa, 0x3, 0x7) connect$inet6(r7, &(0x7f00000000c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r8, 0x8946, &(0x7f0000000000)={'syz_tun\x00', &(0x7f0000002fc0)=@ethtool_gstrings={0xe}}) sendmmsg(r7, &(0x7f0000000480), 0x2e9, 0x0) setsockopt$inet6_MCAST_LEAVE_GROUP(r7, 0x29, 0x14, 0x0, 0x0) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) connect$inet(r6, &(0x7f00000000c0)={0x2, 0x0, @multicast1}, 0x10) setsockopt$SO_TIMESTAMPING(r6, 0x1, 0x41, &(0x7f0000000100)=0xac0, 0x4) sendmmsg$unix(r6, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000200)="643c87cf2bd21d995e613d73613b1e78334efea0", 0x14}], 0x1}}], 0x1, 0x0) 205.975815ms ago: executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0x14, &(0x7f0000000400)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) write$binfmt_script(0xffffffffffffffff, &(0x7f000000e0c0), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, 0xffffffffffffffff, 0x0) ioctl$FS_IOC_GETFSMAP(0xffffffffffffffff, 0x40305839, &(0x7f0000000000)=ANY=[@ANYBLOB]) syz_init_net_socket$llc(0x1a, 0x1, 0x0) sendto$llc(0xffffffffffffffff, &(0x7f0000000d80), 0x0, 0x0, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000900)=@get={0x6, &(0x7f0000002740)=""/4096, 0x3f}) 127.310677ms ago: executing program 4: r0 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'pimreg\x00', 0x0}) r2 = socket(0x1, 0x1, 0x7) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), r2) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) sendmsg$MPTCP_PM_CMD_REMOVE(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x2c, r3, 0x900, 0x70bd26, 0x25dfdbff, {}, [@MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x1}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7b}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x3}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x1) r4 = socket$inet(0x2, 0x2, 0x79) setsockopt$IPT_SO_SET_ADD_COUNTERS(r4, 0x0, 0x41, &(0x7f00000001c0)={'security\x00', 0x5, [{}, {}, {}, {}, {}]}, 0x78) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x9, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x7}, [@ringbuf_query, @map_fd={0x18, 0x4}]}, &(0x7f0000000300)='syzkaller\x00', 0x100, 0x37, &(0x7f0000000340)=""/55, 0x40f00, 0x10, '\x00', r1, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000380)={0x9, 0x5}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f00000003c0)=[0x1, 0x1, r0], &(0x7f0000000400)=[{0x2, 0x4, 0x3, 0x8}, {0x2, 0x5, 0xf, 0x7}, {0x0, 0x4, 0xd, 0x8}, {0x2, 0x5, 0x10, 0x7}, {0x5, 0x3, 0x2, 0x1}], 0x10, 0x3}, 0x90) r6 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000240)='ext4_writepages\x00', r5}, 0x10) socketpair(0x2, 0x2, 0x7, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = accept4$rose(r8, &(0x7f00000005c0)=@short={0xb, @dev, @default, 0x1, @rose}, &(0x7f0000000600)=0x1c, 0x800) ioctl$BTRFS_IOC_START_SYNC(r8, 0x80089418, &(0x7f0000000640)=0x0) ioctl$BTRFS_IOC_GET_DEV_STATS(r0, 0xc4089434, &(0x7f0000000680)={0x0, 0x4, 0x0, [0x50, 0x5, 0x1, 0x3f, 0x6], [0xffff, 0x7, 0x0, 0x0, 0x2, 0x401, 0x3, 0x800000000, 0x20, 0x3, 0x8000, 0x697, 0xd539, 0x2, 0x9, 0x4, 0x4c5, 0x5, 0x6, 0xf4, 0x8, 0x4, 0x12ba, 0x400, 0x0, 0x0, 0x2, 0x468bbcde, 0x5, 0x8000000000000001, 0x8001, 0x400000000, 0x2, 0x2d, 0x101, 0xfffffffffffffff7, 0x80000000, 0x8, 0x7fff, 0x3, 0x5, 0x4, 0x81, 0x2, 0x1, 0x4, 0x1dc2, 0x5, 0x401, 0x4, 0xf, 0x1, 0x60a, 0x4, 0xffffffffffff7fff, 0x3, 0x9, 0x1, 0x6, 0x3d68, 0x10000, 0x790, 0x77, 0x7f, 0x6, 0x0, 0x8, 0xe55, 0xfff, 0x6, 0x3, 0x7fffffffffffffff, 0x8, 0x1, 0x8000, 0x5, 0x2, 0x9, 0x5d, 0xfffffffffffffffc, 0x0, 0xffffffffffffffff, 0x8d0, 0x1, 0x80000001, 0x7, 0x8000, 0x6, 0x4, 0xff0, 0x3ff0000000000, 0x6, 0x9, 0x10000, 0xffffffffffffffff, 0x3, 0x8, 0xdec7, 0xffff, 0x6, 0x4, 0x8ee, 0x0, 0x891, 0x40a, 0x8997, 0xff, 0x6d, 0x8000000000000000, 0x8000, 0x7fffffffffffffff, 0x25bc, 0x7, 0x6, 0x0, 0x8000000000000000, 0x1, 0xcd, 0x649008a7, 0x8, 0xffffffff7fffffff]}) ioctl$BTRFS_IOC_SNAP_CREATE_V2(r9, 0x50009417, &(0x7f0000000ac0)={{r6}, r10, 0x0, @unused=[0x9e6b, 0x0, 0x8], @devid=r11}) r12 = accept4$inet6(r2, &(0x7f0000001ac0)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, &(0x7f0000001b00)=0x1c, 0x80800) r13 = accept$inet6(r12, &(0x7f0000001b40)={0xa, 0x0, 0x0, @mcast2}, &(0x7f0000001b80)=0x1c) bind$inet6(r13, &(0x7f0000001bc0)={0xa, 0x4e24, 0xfa5, @empty, 0x6}, 0x1c) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000001c00)={'veth1\x00'}) ioctl$sock_inet_SIOCSIFPFLAGS(r0, 0x8934, &(0x7f0000001c40)={'gre0\x00', 0x2}) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000001c80)=""/168, &(0x7f0000001d40)=0xa8) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r13, 0x84, 0x4, &(0x7f0000001d80)=0x7ff, 0x4) socket(0x2, 0x80000, 0x6) r14 = accept4$packet(r2, &(0x7f0000001dc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000001e00)=0x14, 0x800) setsockopt$packet_rx_ring(r14, 0x107, 0x5, &(0x7f0000001e40)=@req={0x3, 0x400, 0x6, 0x101}, 0x10) connect$inet(r2, &(0x7f0000001e80)={0x2, 0x4e22, @multicast2}, 0x10) sendmsg$key(r7, &(0x7f0000001fc0)={0x0, 0x0, &(0x7f0000001f80)={&(0x7f0000001ec0)={0x2, 0xc, 0x5, 0x1, 0x17, 0x0, 0x70bd25, 0x25dfdbfc, [@sadb_x_policy={0x8, 0x12, 0x2, 0x3, 0x0, 0x6e6bbe, 0x2, {0x6, 0x6c, 0x5, 0x5, 0x0, 0x1, 0x0, @in=@multicast2, @in6=@dev={0xfe, 0x80, '\x00', 0x32}}}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e22, @broadcast}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x44}}}, @sadb_x_nat_t_port={0x1, 0x15, 0x4e24}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e22}, @sadb_address={0x3, 0x5, 0x33, 0x0, 0x0, @in={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x42}}}, @sadb_x_nat_t_type={0x1, 0x14, 0x8}, @sadb_x_sa2={0x2, 0x13, 0x80, 0x0, 0x0, 0x70bd26, 0x3504}]}, 0xb8}}, 0x4004010) r15 = syz_genetlink_get_family_id$tipc(&(0x7f0000002040), r8) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f0000002100)={&(0x7f0000002000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f00000020c0)={&(0x7f0000002080)={0x30, r15, 0x300, 0x70bd26, 0x25dfdbfd, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}, [""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0x40) ioctl$TUNGETIFF(r0, 0x800454d2, &(0x7f0000002140)={'syzkaller1\x00'}) 53.932271ms ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) 0s ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0xd, &(0x7f0000000440)={&(0x7f00000005c0)=ANY=[@ANYBLOB="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"], 0x1b4}}, 0x0) kernel console output (not intermixed with test programs): ][T12544] CPU: 1 PID: 12544 Comm: syz-executor.3 Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 354.989739][T12544] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 354.997077][T12545] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 354.999808][T12544] Call Trace: [ 355.011269][T12544] [ 355.014250][T12544] dump_stack_lvl+0x241/0x360 [ 355.018984][T12544] ? __pfx_dump_stack_lvl+0x10/0x10 [ 355.024238][T12544] ? __pfx__printk+0x10/0x10 [ 355.028905][T12544] ? sysfs_warn_dup+0x51/0xa0 [ 355.033764][T12544] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 355.039181][T12544] sysfs_warn_dup+0x8e/0xa0 [ 355.043722][T12544] sysfs_do_create_link_sd+0xbe/0x110 [ 355.049139][T12544] device_add_class_symlinks+0x1c5/0x250 [ 355.054919][T12544] device_add+0x553/0xbf0 [ 355.059309][T12544] wiphy_register+0x1d3f/0x2b30 [ 355.064243][T12544] ? __pfx_wiphy_register+0x10/0x10 [ 355.069500][T12544] ? minstrel_ht_alloc+0x72b/0x860 [ 355.074712][T12544] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 355.080935][T12544] ieee80211_register_hw+0x3098/0x3d80 [ 355.086479][T12544] ? ieee80211_register_hw+0x1161/0x3d80 [ 355.092172][T12544] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 355.098107][T12544] ? __asan_memset+0x23/0x50 [ 355.102715][T12544] ? __hrtimer_init+0x170/0x250 [ 355.107598][T12544] mac80211_hwsim_new_radio+0x2597/0x44c0 [ 355.113411][T12544] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 355.119497][T12544] ? kmalloc_node_track_caller_noprof+0x242/0x440 [ 355.125927][T12544] ? kstrndup+0x5c/0xb0 [ 355.130097][T12544] ? __asan_memcpy+0x40/0x70 [ 355.134707][T12544] hwsim_new_radio_nl+0xe4c/0x21d0 [ 355.139940][T12544] ? __pfx___nla_validate_parse+0x10/0x10 [ 355.145707][T12544] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 355.151302][T12544] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 355.157687][T12544] genl_rcv_msg+0xb14/0xec0 [ 355.162219][T12544] ? mark_lock+0x9a/0x350 [ 355.166589][T12544] ? __pfx_genl_rcv_msg+0x10/0x10 [ 355.171690][T12544] ? __pfx_lock_acquire+0x10/0x10 [ 355.176741][T12544] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 355.182316][T12544] ? __pfx___might_resched+0x10/0x10 [ 355.187651][T12544] netlink_rcv_skb+0x1e3/0x430 [ 355.192445][T12544] ? __pfx_genl_rcv_msg+0x10/0x10 [ 355.197493][T12544] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 355.202849][T12544] ? __netlink_deliver_tap+0x77e/0x7c0 [ 355.208352][T12544] genl_rcv+0x28/0x40 [ 355.212347][T12544] netlink_unicast+0x7ea/0x980 [ 355.217226][T12544] ? __pfx_netlink_unicast+0x10/0x10 [ 355.222527][T12544] ? __virt_addr_valid+0x183/0x520 [ 355.227666][T12544] ? __check_object_size+0x49c/0x900 [ 355.232991][T12544] ? bpf_lsm_netlink_send+0x9/0x10 [ 355.238136][T12544] netlink_sendmsg+0x8db/0xcb0 [ 355.243034][T12544] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.248343][T12544] ? __import_iovec+0x536/0x820 [ 355.253211][T12544] ? aa_sock_msg_perm+0x91/0x160 [ 355.258171][T12544] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 355.263470][T12544] ? security_socket_sendmsg+0x87/0xb0 [ 355.268953][T12544] ? __pfx_netlink_sendmsg+0x10/0x10 [ 355.274258][T12544] __sock_sendmsg+0x221/0x270 [ 355.278963][T12544] ____sys_sendmsg+0x525/0x7d0 [ 355.283759][T12544] ? __pfx_____sys_sendmsg+0x10/0x10 [ 355.289082][T12544] __sys_sendmsg+0x2b0/0x3a0 [ 355.293693][T12544] ? __pfx___sys_sendmsg+0x10/0x10 [ 355.298867][T12544] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 355.305233][T12544] ? do_syscall_64+0x100/0x230 [ 355.310014][T12544] ? do_syscall_64+0xb6/0x230 [ 355.314707][T12544] do_syscall_64+0xf3/0x230 [ 355.319226][T12544] ? clear_bhb_loop+0x35/0x90 [ 355.323925][T12544] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 355.329849][T12544] RIP: 0033:0x7f179067cf29 [ 355.334280][T12544] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 355.353925][T12544] RSP: 002b:00007f17901ff0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 355.362376][T12544] RAX: ffffffffffffffda RBX: 00007f17907b3f80 RCX: 00007f179067cf29 [ 355.370389][T12544] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 355.378391][T12544] RBP: 00007f17906ec074 R08: 0000000000000000 R09: 0000000000000000 [ 355.386409][T12544] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 355.394396][T12544] R13: 000000000000000b R14: 00007f17907b3f80 R15: 00007ffdc002fcd8 [ 355.402404][T12544] [ 355.879979][ T29] audit: type=1800 audit(1718800514.540:116): pid=12566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1938 res=0 errno=0 [ 355.930430][ T29] audit: type=1804 audit(1718800514.570:117): pid=12566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3036074188/syzkaller.eP8bCE/255/memory.events" dev="sda1" ino=1938 res=1 errno=0 [ 356.006632][ T29] audit: type=1804 audit(1718800514.570:118): pid=12566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3036074188/syzkaller.eP8bCE/255/memory.events" dev="sda1" ino=1938 res=1 errno=0 [ 356.033292][ T29] audit: type=1804 audit(1718800514.580:119): pid=12566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3036074188/syzkaller.eP8bCE/255/memory.events" dev="sda1" ino=1938 res=1 errno=0 [ 356.085253][ T29] audit: type=1804 audit(1718800514.580:120): pid=12566 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir3036074188/syzkaller.eP8bCE/255/memory.events" dev="sda1" ino=1938 res=1 errno=0 [ 356.283190][T12576] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 356.294434][T12576] CPU: 1 PID: 12576 Comm: syz-executor.2 Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 356.305029][T12576] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 356.315132][T12576] Call Trace: [ 356.318449][T12576] [ 356.321414][T12576] dump_stack_lvl+0x241/0x360 [ 356.326243][T12576] ? __pfx_dump_stack_lvl+0x10/0x10 [ 356.331575][T12576] ? __pfx__printk+0x10/0x10 [ 356.336221][T12576] ? sysfs_warn_dup+0x51/0xa0 [ 356.340949][T12576] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 356.346375][T12576] sysfs_warn_dup+0x8e/0xa0 [ 356.350938][T12576] sysfs_do_create_link_sd+0xbe/0x110 [ 356.356370][T12576] device_add_class_symlinks+0x1c5/0x250 [ 356.362055][T12576] device_add+0x553/0xbf0 [ 356.366441][T12576] wiphy_register+0x1d3f/0x2b30 [ 356.371385][T12576] ? __pfx_wiphy_register+0x10/0x10 [ 356.376651][T12576] ? minstrel_ht_alloc+0x72b/0x860 [ 356.381829][T12576] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 356.387949][T12576] ieee80211_register_hw+0x3098/0x3d80 [ 356.393483][T12576] ? ieee80211_register_hw+0x1161/0x3d80 [ 356.399180][T12576] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 356.405054][T12576] ? __asan_memset+0x23/0x50 [ 356.409694][T12576] ? __hrtimer_init+0x170/0x250 [ 356.414606][T12576] mac80211_hwsim_new_radio+0x2597/0x44c0 [ 356.420406][T12576] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 356.426517][T12576] ? kmalloc_node_track_caller_noprof+0x242/0x440 [ 356.432968][T12576] ? kstrndup+0x5c/0xb0 [ 356.437151][T12576] ? __asan_memcpy+0x40/0x70 [ 356.441767][T12576] hwsim_new_radio_nl+0xe4c/0x21d0 [ 356.446931][T12576] ? __pfx___nla_validate_parse+0x10/0x10 [ 356.452687][T12576] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 356.458253][T12576] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 356.464616][T12576] ? irqentry_exit+0x63/0x90 [ 356.469218][T12576] ? lockdep_hardirqs_on+0x99/0x150 [ 356.474452][T12576] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 356.480824][T12576] genl_rcv_msg+0xb14/0xec0 [ 356.485340][T12576] ? mark_lock+0x9a/0x350 [ 356.489693][T12576] ? __pfx_genl_rcv_msg+0x10/0x10 [ 356.494759][T12576] ? __pfx_lock_acquire+0x10/0x10 [ 356.499805][T12576] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 356.505372][T12576] ? __pfx___might_resched+0x10/0x10 [ 356.510690][T12576] netlink_rcv_skb+0x1e3/0x430 [ 356.515482][T12576] ? __pfx_genl_rcv_msg+0x10/0x10 [ 356.520525][T12576] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 356.525840][T12576] ? __netlink_deliver_tap+0x77e/0x7c0 [ 356.531380][T12576] genl_rcv+0x28/0x40 [ 356.535373][T12576] netlink_unicast+0x7ea/0x980 [ 356.540171][T12576] ? __pfx_netlink_unicast+0x10/0x10 [ 356.545506][T12576] ? __virt_addr_valid+0x183/0x520 [ 356.550642][T12576] ? __check_object_size+0x49c/0x900 [ 356.555933][T12576] ? bpf_lsm_netlink_send+0x9/0x10 [ 356.561067][T12576] netlink_sendmsg+0x8db/0xcb0 [ 356.565865][T12576] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.571173][T12576] ? __import_iovec+0x536/0x820 [ 356.576063][T12576] ? aa_sock_msg_perm+0x91/0x160 [ 356.581015][T12576] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 356.586313][T12576] ? security_socket_sendmsg+0x87/0xb0 [ 356.591793][T12576] ? __pfx_netlink_sendmsg+0x10/0x10 [ 356.597133][T12576] __sock_sendmsg+0x221/0x270 [ 356.601833][T12576] ____sys_sendmsg+0x525/0x7d0 [ 356.606615][T12576] ? __pfx_____sys_sendmsg+0x10/0x10 [ 356.611933][T12576] __sys_sendmsg+0x2b0/0x3a0 [ 356.616545][T12576] ? __pfx___sys_sendmsg+0x10/0x10 [ 356.621716][T12576] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 356.628097][T12576] ? do_syscall_64+0x100/0x230 [ 356.632879][T12576] ? do_syscall_64+0xb6/0x230 [ 356.637573][T12576] do_syscall_64+0xf3/0x230 [ 356.642088][T12576] ? clear_bhb_loop+0x35/0x90 [ 356.646788][T12576] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 356.652698][T12576] RIP: 0033:0x7f7dba27cf29 [ 356.657138][T12576] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 356.676795][T12576] RSP: 002b:00007f7dbb0be0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 356.685241][T12576] RAX: ffffffffffffffda RBX: 00007f7dba3b3f80 RCX: 00007f7dba27cf29 [ 356.693229][T12576] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 356.701231][T12576] RBP: 00007f7dba2ec074 R08: 0000000000000000 R09: 0000000000000000 [ 356.709310][T12576] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 356.717304][T12576] R13: 000000000000000b R14: 00007f7dba3b3f80 R15: 00007fff8ec3c208 [ 356.725395][T12576] [ 357.230469][T12596] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 357.358833][T12600] __nla_validate_parse: 6 callbacks suppressed [ 357.358855][T12600] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 357.465243][T12605] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. [ 357.742119][T12611] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 357.767622][T12611] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 357.886309][T12621] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 357.907150][T12621] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 357.923064][T12621] CPU: 1 PID: 12621 Comm: syz-executor.2 Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 357.933639][T12621] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 357.943742][T12621] Call Trace: [ 357.947059][T12621] [ 357.950028][T12621] dump_stack_lvl+0x241/0x360 [ 357.954760][T12621] ? __pfx_dump_stack_lvl+0x10/0x10 [ 357.960010][T12621] ? __pfx__printk+0x10/0x10 [ 357.964658][T12621] ? sysfs_warn_dup+0x51/0xa0 [ 357.969382][T12621] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 357.974809][T12621] sysfs_warn_dup+0x8e/0xa0 [ 357.979374][T12621] sysfs_do_create_link_sd+0xbe/0x110 [ 357.984819][T12621] device_add_class_symlinks+0x1c5/0x250 [ 357.990511][T12621] device_add+0x553/0xbf0 [ 357.994900][T12621] wiphy_register+0x1d3f/0x2b30 [ 357.999832][T12621] ? __pfx_wiphy_register+0x10/0x10 [ 358.005127][T12621] ? minstrel_ht_alloc+0x72b/0x860 [ 358.010299][T12621] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 358.016464][T12621] ieee80211_register_hw+0x3098/0x3d80 [ 358.021991][T12621] ? ieee80211_register_hw+0x1161/0x3d80 [ 358.027675][T12621] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 358.033553][T12621] ? __asan_memset+0x23/0x50 [ 358.038164][T12621] ? __hrtimer_init+0x170/0x250 [ 358.043046][T12621] mac80211_hwsim_new_radio+0x2597/0x44c0 [ 358.048811][T12621] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 358.054919][T12621] ? kmalloc_node_track_caller_noprof+0x242/0x440 [ 358.061395][T12621] ? kstrndup+0x5c/0xb0 [ 358.065573][T12621] ? __asan_memcpy+0x40/0x70 [ 358.070182][T12621] hwsim_new_radio_nl+0xe4c/0x21d0 [ 358.075339][T12621] ? __pfx___nla_validate_parse+0x10/0x10 [ 358.081096][T12621] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 358.086692][T12621] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 358.093043][T12621] genl_rcv_msg+0xb14/0xec0 [ 358.097567][T12621] ? mark_lock+0x9a/0x350 [ 358.101976][T12621] ? __pfx_genl_rcv_msg+0x10/0x10 [ 358.107071][T12621] ? __pfx_lock_acquire+0x10/0x10 [ 358.112151][T12621] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 358.117738][T12621] ? __pfx___might_resched+0x10/0x10 [ 358.123058][T12621] netlink_rcv_skb+0x1e3/0x430 [ 358.127938][T12621] ? __pfx_genl_rcv_msg+0x10/0x10 [ 358.132984][T12621] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 358.138315][T12621] ? __netlink_deliver_tap+0x77e/0x7c0 [ 358.143904][T12621] genl_rcv+0x28/0x40 [ 358.147905][T12621] netlink_unicast+0x7ea/0x980 [ 358.152692][T12621] ? __pfx_netlink_unicast+0x10/0x10 [ 358.158006][T12621] ? __virt_addr_valid+0x183/0x520 [ 358.163142][T12621] ? __check_object_size+0x49c/0x900 [ 358.168484][T12621] ? bpf_lsm_netlink_send+0x9/0x10 [ 358.173643][T12621] netlink_sendmsg+0x8db/0xcb0 [ 358.178448][T12621] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.183763][T12621] ? __import_iovec+0x536/0x820 [ 358.188638][T12621] ? aa_sock_msg_perm+0x91/0x160 [ 358.193601][T12621] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 358.198907][T12621] ? security_socket_sendmsg+0x87/0xb0 [ 358.204393][T12621] ? __pfx_netlink_sendmsg+0x10/0x10 [ 358.209700][T12621] __sock_sendmsg+0x221/0x270 [ 358.214406][T12621] ____sys_sendmsg+0x525/0x7d0 [ 358.219222][T12621] ? __pfx_____sys_sendmsg+0x10/0x10 [ 358.224586][T12621] __sys_sendmsg+0x2b0/0x3a0 [ 358.229241][T12621] ? __pfx___sys_sendmsg+0x10/0x10 [ 358.234520][T12621] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 358.240963][T12621] ? do_syscall_64+0x100/0x230 [ 358.245754][T12621] ? do_syscall_64+0xb6/0x230 [ 358.250455][T12621] do_syscall_64+0xf3/0x230 [ 358.254986][T12621] ? clear_bhb_loop+0x35/0x90 [ 358.259700][T12621] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 358.265612][T12621] RIP: 0033:0x7f7dba27cf29 [ 358.270037][T12621] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 358.289660][T12621] RSP: 002b:00007f7dbb0be0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 358.298112][T12621] RAX: ffffffffffffffda RBX: 00007f7dba3b3f80 RCX: 00007f7dba27cf29 [ 358.306138][T12621] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 358.314135][T12621] RBP: 00007f7dba2ec074 R08: 0000000000000000 R09: 0000000000000000 [ 358.322148][T12621] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 358.330186][T12621] R13: 000000000000000b R14: 00007f7dba3b3f80 R15: 00007fff8ec3c208 [ 358.338197][T12621] [ 358.511520][T12630] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 358.728910][T12642] syzkaller1: entered promiscuous mode [ 358.734697][T12642] syzkaller1: entered allmulticast mode [ 358.988773][T12659] sctp: [Deprecated]: syz-executor.4 (pid 12659) Use of int in maxseg socket option. [ 358.988773][T12659] Use struct sctp_assoc_value instead [ 359.148791][T12668] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 359.167780][T12664] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 359.200063][T12668] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 359.215914][T12668] CPU: 0 PID: 12668 Comm: syz-executor.4 Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 359.226472][T12668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 359.236567][T12668] Call Trace: [ 359.239876][T12668] [ 359.242836][T12668] dump_stack_lvl+0x241/0x360 [ 359.247560][T12668] ? __pfx_dump_stack_lvl+0x10/0x10 [ 359.252793][T12668] ? __pfx__printk+0x10/0x10 [ 359.257447][T12668] ? sysfs_warn_dup+0x51/0xa0 [ 359.262187][T12668] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 359.267638][T12668] sysfs_warn_dup+0x8e/0xa0 [ 359.272186][T12668] sysfs_do_create_link_sd+0xbe/0x110 [ 359.277605][T12668] device_add_class_symlinks+0x1c5/0x250 [ 359.283286][T12668] device_add+0x553/0xbf0 [ 359.287700][T12668] wiphy_register+0x1d3f/0x2b30 [ 359.292619][T12668] ? __pfx_wiphy_register+0x10/0x10 [ 359.297859][T12668] ? minstrel_ht_alloc+0x72b/0x860 [ 359.303029][T12668] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 359.309148][T12668] ieee80211_register_hw+0x3098/0x3d80 [ 359.314694][T12668] ? ieee80211_register_hw+0x1161/0x3d80 [ 359.320401][T12668] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 359.326281][T12668] ? __asan_memset+0x23/0x50 [ 359.330932][T12668] ? __hrtimer_init+0x170/0x250 [ 359.335837][T12668] mac80211_hwsim_new_radio+0x2597/0x44c0 [ 359.341655][T12668] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 359.347770][T12668] ? kmalloc_node_track_caller_noprof+0x242/0x440 [ 359.354251][T12668] ? kstrndup+0x5c/0xb0 [ 359.358450][T12668] ? __asan_memcpy+0x40/0x70 [ 359.363098][T12668] hwsim_new_radio_nl+0xe4c/0x21d0 [ 359.368281][T12668] ? __pfx___nla_validate_parse+0x10/0x10 [ 359.374058][T12668] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 359.379693][T12668] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 359.386076][T12668] genl_rcv_msg+0xb14/0xec0 [ 359.390616][T12668] ? mark_lock+0x9a/0x350 [ 359.394998][T12668] ? __pfx_genl_rcv_msg+0x10/0x10 [ 359.400358][T12668] ? __pfx_lock_acquire+0x10/0x10 [ 359.405426][T12668] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 359.411024][T12668] ? __pfx___might_resched+0x10/0x10 [ 359.416397][T12668] netlink_rcv_skb+0x1e3/0x430 [ 359.421217][T12668] ? __pfx_genl_rcv_msg+0x10/0x10 [ 359.426288][T12668] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 359.431667][T12668] ? __netlink_deliver_tap+0x77e/0x7c0 [ 359.437210][T12668] genl_rcv+0x28/0x40 [ 359.441230][T12668] netlink_unicast+0x7ea/0x980 [ 359.446052][T12668] ? __pfx_netlink_unicast+0x10/0x10 [ 359.451379][T12668] ? __virt_addr_valid+0x183/0x520 [ 359.456551][T12668] ? __check_object_size+0x49c/0x900 [ 359.461863][T12668] ? bpf_lsm_netlink_send+0x9/0x10 [ 359.467020][T12668] netlink_sendmsg+0x8db/0xcb0 [ 359.471932][T12668] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.477261][T12668] ? __import_iovec+0x536/0x820 [ 359.482152][T12668] ? aa_sock_msg_perm+0x91/0x160 [ 359.487126][T12668] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 359.492444][T12668] ? security_socket_sendmsg+0x87/0xb0 [ 359.498046][T12668] ? __pfx_netlink_sendmsg+0x10/0x10 [ 359.503371][T12668] __sock_sendmsg+0x221/0x270 [ 359.508126][T12668] ____sys_sendmsg+0x525/0x7d0 [ 359.512946][T12668] ? __pfx_____sys_sendmsg+0x10/0x10 [ 359.518292][T12668] __sys_sendmsg+0x2b0/0x3a0 [ 359.522925][T12668] ? __pfx___sys_sendmsg+0x10/0x10 [ 359.528127][T12668] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 359.534499][T12668] ? do_syscall_64+0x100/0x230 [ 359.539306][T12668] ? do_syscall_64+0xb6/0x230 [ 359.544199][T12668] do_syscall_64+0xf3/0x230 [ 359.548739][T12668] ? clear_bhb_loop+0x35/0x90 [ 359.553467][T12668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 359.559401][T12668] RIP: 0033:0x7f14c767cf29 [ 359.563941][T12668] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 359.583592][T12668] RSP: 002b:00007f14c843c0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 359.592053][T12668] RAX: ffffffffffffffda RBX: 00007f14c77b3f80 RCX: 00007f14c767cf29 [ 359.600065][T12668] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 359.608168][T12668] RBP: 00007f14c76ec074 R08: 0000000000000000 R09: 0000000000000000 [ 359.616172][T12668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 359.624176][T12668] R13: 000000000000000b R14: 00007f14c77b3f80 R15: 00007fff2adf67e8 [ 359.632297][T12668] [ 360.217157][T12695] syzkaller1: entered promiscuous mode [ 360.222708][T12695] syzkaller1: entered allmulticast mode [ 360.348495][T12706] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 360.366453][T12698] tap0: tun_chr_ioctl cmd 1074025677 [ 360.379045][T12698] tap0: linktype set to 769 [ 360.629795][T12716] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 360.657962][T12716] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 360.669849][T12716] CPU: 0 PID: 12716 Comm: syz-executor.4 Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 360.680515][T12716] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 360.690617][T12716] Call Trace: [ 360.693943][T12716] [ 360.696911][T12716] dump_stack_lvl+0x241/0x360 [ 360.701641][T12716] ? __pfx_dump_stack_lvl+0x10/0x10 [ 360.706889][T12716] ? __pfx__printk+0x10/0x10 [ 360.711544][T12716] ? sysfs_warn_dup+0x51/0xa0 [ 360.716285][T12716] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 360.721725][T12716] sysfs_warn_dup+0x8e/0xa0 [ 360.726298][T12716] sysfs_do_create_link_sd+0xbe/0x110 [ 360.731735][T12716] device_add_class_symlinks+0x1c5/0x250 [ 360.737520][T12716] device_add+0x553/0xbf0 [ 360.742004][T12716] wiphy_register+0x1d3f/0x2b30 [ 360.746963][T12716] ? __pfx_wiphy_register+0x10/0x10 [ 360.752227][T12716] ? minstrel_ht_alloc+0x72b/0x860 [ 360.757416][T12716] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 360.763547][T12716] ieee80211_register_hw+0x3098/0x3d80 [ 360.769085][T12716] ? ieee80211_register_hw+0x1161/0x3d80 [ 360.774779][T12716] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 360.780678][T12716] ? __asan_memset+0x23/0x50 [ 360.785304][T12716] ? __hrtimer_init+0x170/0x250 [ 360.790202][T12716] mac80211_hwsim_new_radio+0x2597/0x44c0 [ 360.795995][T12716] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 360.802201][T12716] ? kmalloc_node_track_caller_noprof+0x242/0x440 [ 360.808662][T12716] ? kstrndup+0x5c/0xb0 [ 360.812868][T12716] ? __asan_memcpy+0x40/0x70 [ 360.817496][T12716] hwsim_new_radio_nl+0xe4c/0x21d0 [ 360.822639][T12716] ? __pfx___nla_validate_parse+0x10/0x10 [ 360.828397][T12716] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 360.834030][T12716] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 360.840465][T12716] genl_rcv_msg+0xb14/0xec0 [ 360.845002][T12716] ? mark_lock+0x9a/0x350 [ 360.849370][T12716] ? __pfx_genl_rcv_msg+0x10/0x10 [ 360.854448][T12716] ? __pfx_lock_acquire+0x10/0x10 [ 360.859520][T12716] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 360.865115][T12716] ? __pfx___might_resched+0x10/0x10 [ 360.870440][T12716] netlink_rcv_skb+0x1e3/0x430 [ 360.875248][T12716] ? __pfx_genl_rcv_msg+0x10/0x10 [ 360.880322][T12716] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 360.885666][T12716] ? __netlink_deliver_tap+0x77e/0x7c0 [ 360.891192][T12716] genl_rcv+0x28/0x40 [ 360.895229][T12716] netlink_unicast+0x7ea/0x980 [ 360.900054][T12716] ? __pfx_netlink_unicast+0x10/0x10 [ 360.905378][T12716] ? __virt_addr_valid+0x183/0x520 [ 360.910610][T12716] ? __check_object_size+0x49c/0x900 [ 360.915940][T12716] ? bpf_lsm_netlink_send+0x9/0x10 [ 360.921109][T12716] netlink_sendmsg+0x8db/0xcb0 [ 360.925934][T12716] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.931271][T12716] ? __import_iovec+0x536/0x820 [ 360.936179][T12716] ? aa_sock_msg_perm+0x91/0x160 [ 360.941170][T12716] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 360.946485][T12716] ? security_socket_sendmsg+0x87/0xb0 [ 360.951986][T12716] ? __pfx_netlink_sendmsg+0x10/0x10 [ 360.957309][T12716] __sock_sendmsg+0x221/0x270 [ 360.962031][T12716] ____sys_sendmsg+0x525/0x7d0 [ 360.966871][T12716] ? __pfx_____sys_sendmsg+0x10/0x10 [ 360.972213][T12716] __sys_sendmsg+0x2b0/0x3a0 [ 360.976844][T12716] ? __pfx___sys_sendmsg+0x10/0x10 [ 360.982052][T12716] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 360.988425][T12716] ? do_syscall_64+0x100/0x230 [ 360.993230][T12716] ? do_syscall_64+0xb6/0x230 [ 360.997951][T12716] do_syscall_64+0xf3/0x230 [ 361.002502][T12716] ? clear_bhb_loop+0x35/0x90 [ 361.007224][T12716] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 361.013161][T12716] RIP: 0033:0x7f14c767cf29 [ 361.017616][T12716] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 361.037264][T12716] RSP: 002b:00007f14c843c0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 361.045699][T12716] RAX: ffffffffffffffda RBX: 00007f14c77b3f80 RCX: 00007f14c767cf29 [ 361.053694][T12716] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 361.061675][T12716] RBP: 00007f14c76ec074 R08: 0000000000000000 R09: 0000000000000000 [ 361.069665][T12716] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 361.077653][T12716] R13: 000000000000000b R14: 00007f14c77b3f80 R15: 00007fff2adf67e8 [ 361.085655][T12716] [ 361.159962][T12720] tipc: Started in network mode [ 361.166885][T12720] tipc: Node identity 52a4d3188d16, cluster identity 4711 [ 361.184766][T12720] tipc: Enabled bearer , priority 0 [ 361.390452][T12720] tipc: Resetting bearer [ 361.460853][T12719] tipc: Resetting bearer [ 362.310587][ T1151] tipc: Node number set to 3753038616 [ 364.320833][T12719] tipc: Disabling bearer [ 364.343435][T12733] macvlan3: entered allmulticast mode [ 364.375180][T12750] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 364.617312][T12756] syzkaller1: entered promiscuous mode [ 364.631211][T12756] syzkaller1: entered allmulticast mode [ 364.640527][T12762] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.2'. [ 364.669625][T12762] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 364.689645][T12762] CPU: 1 PID: 12762 Comm: syz-executor.2 Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 364.700315][T12762] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 364.710412][T12762] Call Trace: [ 364.713742][T12762] [ 364.716699][T12762] dump_stack_lvl+0x241/0x360 [ 364.721424][T12762] ? __pfx_dump_stack_lvl+0x10/0x10 [ 364.726675][T12762] ? __pfx__printk+0x10/0x10 [ 364.731322][T12762] ? sysfs_warn_dup+0x51/0xa0 [ 364.736048][T12762] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 364.741467][T12762] sysfs_warn_dup+0x8e/0xa0 [ 364.746024][T12762] sysfs_do_create_link_sd+0xbe/0x110 [ 364.751455][T12762] device_add_class_symlinks+0x1c5/0x250 [ 364.757141][T12762] device_add+0x553/0xbf0 [ 364.761526][T12762] wiphy_register+0x1d3f/0x2b30 [ 364.766451][T12762] ? __pfx_wiphy_register+0x10/0x10 [ 364.771693][T12762] ? minstrel_ht_alloc+0x72b/0x860 [ 364.776868][T12762] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 364.782997][T12762] ieee80211_register_hw+0x3098/0x3d80 [ 364.788530][T12762] ? ieee80211_register_hw+0x1161/0x3d80 [ 364.794224][T12762] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 364.800103][T12762] ? __asan_memset+0x23/0x50 [ 364.804738][T12762] ? __hrtimer_init+0x170/0x250 [ 364.809648][T12762] mac80211_hwsim_new_radio+0x2597/0x44c0 [ 364.815448][T12762] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 364.821556][T12762] ? kmalloc_node_track_caller_noprof+0x242/0x440 [ 364.828011][T12762] ? kstrndup+0x5c/0xb0 [ 364.832211][T12762] ? __asan_memcpy+0x40/0x70 [ 364.836852][T12762] hwsim_new_radio_nl+0xe4c/0x21d0 [ 364.842023][T12762] ? __pfx___nla_validate_parse+0x10/0x10 [ 364.847793][T12762] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 364.853474][T12762] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 364.859863][T12762] genl_rcv_msg+0xb14/0xec0 [ 364.864430][T12762] ? mark_lock+0x9a/0x350 [ 364.868818][T12762] ? __pfx_genl_rcv_msg+0x10/0x10 [ 364.873929][T12762] ? __pfx_lock_acquire+0x10/0x10 [ 364.879082][T12762] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 364.884672][T12762] ? __pfx___might_resched+0x10/0x10 [ 364.890013][T12762] netlink_rcv_skb+0x1e3/0x430 [ 364.894821][T12762] ? __pfx_genl_rcv_msg+0x10/0x10 [ 364.899897][T12762] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 364.905248][T12762] ? __netlink_deliver_tap+0x77e/0x7c0 [ 364.910775][T12762] genl_rcv+0x28/0x40 [ 364.914796][T12762] netlink_unicast+0x7ea/0x980 [ 364.919735][T12762] ? __pfx_netlink_unicast+0x10/0x10 [ 364.925056][T12762] ? __virt_addr_valid+0x183/0x520 [ 364.930212][T12762] ? __check_object_size+0x49c/0x900 [ 364.935528][T12762] ? bpf_lsm_netlink_send+0x9/0x10 [ 364.940689][T12762] netlink_sendmsg+0x8db/0xcb0 [ 364.945513][T12762] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.950839][T12762] ? __import_iovec+0x536/0x820 [ 364.955733][T12762] ? aa_sock_msg_perm+0x91/0x160 [ 364.960710][T12762] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 364.966046][T12762] ? security_socket_sendmsg+0x87/0xb0 [ 364.971553][T12762] ? __pfx_netlink_sendmsg+0x10/0x10 [ 364.976876][T12762] __sock_sendmsg+0x221/0x270 [ 364.981608][T12762] ____sys_sendmsg+0x525/0x7d0 [ 364.986443][T12762] ? __pfx_____sys_sendmsg+0x10/0x10 [ 364.991806][T12762] __sys_sendmsg+0x2b0/0x3a0 [ 364.996442][T12762] ? __pfx___sys_sendmsg+0x10/0x10 [ 365.001658][T12762] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 365.008033][T12762] ? do_syscall_64+0x100/0x230 [ 365.012833][T12762] ? do_syscall_64+0xb6/0x230 [ 365.017554][T12762] do_syscall_64+0xf3/0x230 [ 365.022094][T12762] ? clear_bhb_loop+0x35/0x90 [ 365.026828][T12762] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 365.032754][T12762] RIP: 0033:0x7f7dba27cf29 [ 365.037230][T12762] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 365.056889][T12762] RSP: 002b:00007f7dbb0be0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 365.065356][T12762] RAX: ffffffffffffffda RBX: 00007f7dba3b3f80 RCX: 00007f7dba27cf29 [ 365.073366][T12762] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 365.081386][T12762] RBP: 00007f7dba2ec074 R08: 0000000000000000 R09: 0000000000000000 [ 365.089393][T12762] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 365.097407][T12762] R13: 000000000000000b R14: 00007f7dba3b3f80 R15: 00007fff8ec3c208 [ 365.105433][T12762] [ 365.287685][T12767] xt_TPROXY: Can be used only with -p tcp or -p udp [ 365.318599][T12775] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 365.355100][T12775] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 365.589848][T12788] macvlan1: entered allmulticast mode [ 365.605297][ T5135] Bluetooth: hci5: command 0x040f tx timeout [ 365.623926][T12787] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 365.643715][T12784] tipc: Enabled bearer , priority 0 [ 365.876374][T12784] tipc: Resetting bearer [ 365.890103][T12783] tipc: Resetting bearer [ 365.989404][T12806] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 368.134299][T12783] tipc: Disabling bearer [ 368.143353][T12799] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 368.207465][T12806] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 368.229354][T12806] CPU: 1 PID: 12806 Comm: syz-executor.1 Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 368.239945][T12806] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 368.250047][T12806] Call Trace: [ 368.253398][T12806] [ 368.256362][T12806] dump_stack_lvl+0x241/0x360 [ 368.261086][T12806] ? __pfx_dump_stack_lvl+0x10/0x10 [ 368.266328][T12806] ? __pfx__printk+0x10/0x10 [ 368.270980][T12806] ? sysfs_warn_dup+0x51/0xa0 [ 368.275724][T12806] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 368.281151][T12806] sysfs_warn_dup+0x8e/0xa0 [ 368.285799][T12806] sysfs_do_create_link_sd+0xbe/0x110 [ 368.291250][T12806] device_add_class_symlinks+0x1c5/0x250 [ 368.296950][T12806] device_add+0x553/0xbf0 [ 368.301340][T12806] wiphy_register+0x1d3f/0x2b30 [ 368.306290][T12806] ? __pfx_wiphy_register+0x10/0x10 [ 368.311560][T12806] ? minstrel_ht_alloc+0x72b/0x860 [ 368.316750][T12806] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 368.322970][T12806] ieee80211_register_hw+0x3098/0x3d80 [ 368.328518][T12806] ? ieee80211_register_hw+0x1161/0x3d80 [ 368.334343][T12806] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 368.340236][T12806] ? __asan_memset+0x23/0x50 [ 368.344854][T12806] ? __hrtimer_init+0x170/0x250 [ 368.349737][T12806] mac80211_hwsim_new_radio+0x2597/0x44c0 [ 368.355498][T12806] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 368.361580][T12806] ? kmalloc_node_track_caller_noprof+0x242/0x440 [ 368.367998][T12806] ? kstrndup+0x5c/0xb0 [ 368.372157][T12806] ? __asan_memcpy+0x40/0x70 [ 368.376779][T12806] hwsim_new_radio_nl+0xe4c/0x21d0 [ 368.381921][T12806] ? __pfx___nla_validate_parse+0x10/0x10 [ 368.387671][T12806] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 368.393288][T12806] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 368.399663][T12806] genl_rcv_msg+0xb14/0xec0 [ 368.404262][T12806] ? mark_lock+0x9a/0x350 [ 368.408612][T12806] ? __pfx_genl_rcv_msg+0x10/0x10 [ 368.413669][T12806] ? __pfx_lock_acquire+0x10/0x10 [ 368.418702][T12806] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 368.424255][T12806] ? __pfx___might_resched+0x10/0x10 [ 368.429574][T12806] netlink_rcv_skb+0x1e3/0x430 [ 368.434352][T12806] ? __pfx_genl_rcv_msg+0x10/0x10 [ 368.439392][T12806] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 368.444708][T12806] ? __netlink_deliver_tap+0x77e/0x7c0 [ 368.450196][T12806] genl_rcv+0x28/0x40 [ 368.454183][T12806] netlink_unicast+0x7ea/0x980 [ 368.458970][T12806] ? __pfx_netlink_unicast+0x10/0x10 [ 368.464262][T12806] ? __virt_addr_valid+0x183/0x520 [ 368.469392][T12806] ? __check_object_size+0x49c/0x900 [ 368.474695][T12806] ? bpf_lsm_netlink_send+0x9/0x10 [ 368.479819][T12806] netlink_sendmsg+0x8db/0xcb0 [ 368.484618][T12806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 368.489930][T12806] ? __import_iovec+0x536/0x820 [ 368.494806][T12806] ? aa_sock_msg_perm+0x91/0x160 [ 368.499842][T12806] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 368.505131][T12806] ? security_socket_sendmsg+0x87/0xb0 [ 368.510621][T12806] ? __pfx_netlink_sendmsg+0x10/0x10 [ 368.515959][T12806] __sock_sendmsg+0x221/0x270 [ 368.520670][T12806] ____sys_sendmsg+0x525/0x7d0 [ 368.525550][T12806] ? __pfx_____sys_sendmsg+0x10/0x10 [ 368.530962][T12806] __sys_sendmsg+0x2b0/0x3a0 [ 368.535575][T12806] ? __pfx___sys_sendmsg+0x10/0x10 [ 368.540743][T12806] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 368.547085][T12806] ? do_syscall_64+0x100/0x230 [ 368.551862][T12806] ? do_syscall_64+0xb6/0x230 [ 368.556564][T12806] do_syscall_64+0xf3/0x230 [ 368.561081][T12806] ? clear_bhb_loop+0x35/0x90 [ 368.565774][T12806] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 368.571679][T12806] RIP: 0033:0x7f479c87cf29 [ 368.576104][T12806] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 368.595762][T12806] RSP: 002b:00007f479d6630c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 368.604199][T12806] RAX: ffffffffffffffda RBX: 00007f479c9b3f80 RCX: 00007f479c87cf29 [ 368.612179][T12806] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 368.620158][T12806] RBP: 00007f479c8ec074 R08: 0000000000000000 R09: 0000000000000000 [ 368.628138][T12806] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 368.636117][T12806] R13: 000000000000004d R14: 00007f479c9b3f80 R15: 00007fffd393e538 [ 368.644115][T12806] [ 368.786021][T12831] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 368.906646][T12835] macvlan3: entered allmulticast mode [ 369.195842][T12850] tipc: Started in network mode [ 369.202494][T12850] tipc: Node identity 7a19d5e57ebf, cluster identity 4711 [ 369.213488][T12850] tipc: Enabled bearer , priority 0 [ 369.418476][T12850] tipc: Resetting bearer [ 369.538636][T12849] tipc: Resetting bearer [ 369.616078][T12870] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 370.284973][ T1151] tipc: Node number set to 78042597 [ 372.249250][T12849] tipc: Disabling bearer [ 372.269206][T12872] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 372.291186][T12870] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 372.301293][T12870] CPU: 0 PID: 12870 Comm: syz-executor.4 Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 372.311850][T12870] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 372.321946][T12870] Call Trace: [ 372.325267][T12870] [ 372.328269][T12870] dump_stack_lvl+0x241/0x360 [ 372.333022][T12870] ? __pfx_dump_stack_lvl+0x10/0x10 [ 372.338271][T12870] ? __pfx__printk+0x10/0x10 [ 372.342919][T12870] ? sysfs_warn_dup+0x51/0xa0 [ 372.347655][T12870] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 372.353070][T12870] sysfs_warn_dup+0x8e/0xa0 [ 372.357668][T12870] sysfs_do_create_link_sd+0xbe/0x110 [ 372.363091][T12870] device_add_class_symlinks+0x1c5/0x250 [ 372.368772][T12870] device_add+0x553/0xbf0 [ 372.373175][T12870] wiphy_register+0x1d3f/0x2b30 [ 372.378193][T12870] ? __pfx_wiphy_register+0x10/0x10 [ 372.383463][T12870] ? minstrel_ht_alloc+0x72b/0x860 [ 372.388638][T12870] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 372.394844][T12870] ieee80211_register_hw+0x3098/0x3d80 [ 372.400365][T12870] ? ieee80211_register_hw+0x1161/0x3d80 [ 372.406077][T12870] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 372.411937][T12870] ? __asan_memset+0x23/0x50 [ 372.416560][T12870] ? __hrtimer_init+0x170/0x250 [ 372.421452][T12870] mac80211_hwsim_new_radio+0x2597/0x44c0 [ 372.427248][T12870] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 372.433353][T12870] ? kmalloc_node_track_caller_noprof+0x242/0x440 [ 372.439805][T12870] ? kstrndup+0x5c/0xb0 [ 372.443993][T12870] ? __asan_memcpy+0x40/0x70 [ 372.448632][T12870] hwsim_new_radio_nl+0xe4c/0x21d0 [ 372.453801][T12870] ? __pfx___nla_validate_parse+0x10/0x10 [ 372.459571][T12870] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 372.465198][T12870] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 372.471576][T12870] genl_rcv_msg+0xb14/0xec0 [ 372.476109][T12870] ? mark_lock+0x9a/0x350 [ 372.480484][T12870] ? __pfx_genl_rcv_msg+0x10/0x10 [ 372.485578][T12870] ? __pfx_lock_acquire+0x10/0x10 [ 372.490639][T12870] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 372.496236][T12870] ? __pfx___might_resched+0x10/0x10 [ 372.501572][T12870] netlink_rcv_skb+0x1e3/0x430 [ 372.506376][T12870] ? __pfx_genl_rcv_msg+0x10/0x10 [ 372.511428][T12870] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 372.516762][T12870] ? __netlink_deliver_tap+0x77e/0x7c0 [ 372.522279][T12870] genl_rcv+0x28/0x40 [ 372.526291][T12870] netlink_unicast+0x7ea/0x980 [ 372.531101][T12870] ? __pfx_netlink_unicast+0x10/0x10 [ 372.536415][T12870] ? __virt_addr_valid+0x183/0x520 [ 372.541566][T12870] ? __check_object_size+0x49c/0x900 [ 372.546873][T12870] ? bpf_lsm_netlink_send+0x9/0x10 [ 372.552024][T12870] netlink_sendmsg+0x8db/0xcb0 [ 372.556840][T12870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.562176][T12870] ? __import_iovec+0x536/0x820 [ 372.567080][T12870] ? aa_sock_msg_perm+0x91/0x160 [ 372.572052][T12870] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 372.577362][T12870] ? security_socket_sendmsg+0x87/0xb0 [ 372.582864][T12870] ? __pfx_netlink_sendmsg+0x10/0x10 [ 372.588184][T12870] __sock_sendmsg+0x221/0x270 [ 372.592944][T12870] ____sys_sendmsg+0x525/0x7d0 [ 372.597753][T12870] ? __pfx_____sys_sendmsg+0x10/0x10 [ 372.603090][T12870] __sys_sendmsg+0x2b0/0x3a0 [ 372.607715][T12870] ? __pfx___sys_sendmsg+0x10/0x10 [ 372.612930][T12870] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 372.619296][T12870] ? do_syscall_64+0x100/0x230 [ 372.624096][T12870] ? do_syscall_64+0xb6/0x230 [ 372.628814][T12870] do_syscall_64+0xf3/0x230 [ 372.633357][T12870] ? clear_bhb_loop+0x35/0x90 [ 372.638074][T12870] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 372.644001][T12870] RIP: 0033:0x7f14c767cf29 [ 372.648449][T12870] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 372.668092][T12870] RSP: 002b:00007f14c843c0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 372.676632][T12870] RAX: ffffffffffffffda RBX: 00007f14c77b3f80 RCX: 00007f14c767cf29 [ 372.684634][T12870] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 372.692647][T12870] RBP: 00007f14c76ec074 R08: 0000000000000000 R09: 0000000000000000 [ 372.700651][T12870] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 372.708649][T12870] R13: 000000000000000b R14: 00007f14c77b3f80 R15: 00007fff2adf67e8 [ 372.716671][T12870] [ 372.737071][T12882] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 372.875436][T12884] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.0'. [ 372.948203][T12884] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 372.953516][T12890] macvlan1: entered allmulticast mode [ 373.089992][T12897] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 373.251632][T12906] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 373.379270][T12910] tipc: Started in network mode [ 373.384214][T12910] tipc: Node identity da7d5480d4ff, cluster identity 4711 [ 373.405398][T12910] tipc: Enabled bearer , priority 0 [ 373.513032][T12910] tipc: Resetting bearer [ 373.536635][T12912] openvswitch: ɶƣ0GCTw: Dropping previously announced user features [ 373.558047][T12915] netlink: 144316 bytes leftover after parsing attributes in process `syz-executor.1'. [ 373.568832][T12909] tipc: Resetting bearer [ 374.425130][ T5169] tipc: Node number set to 243422336 [ 374.709149][T12921] xt_hashlimit: overflow, try lower: 18446465897267724288/2047 [ 375.727925][T12909] tipc: Disabling bearer [ 375.739904][T12913] openvswitch: ɶƣ0GC: Dropping previously announced user features [ 375.745409][T12917] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.4'. [ 375.797732][T12917] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 375.817986][T12917] CPU: 0 PID: 12917 Comm: syz-executor.4 Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 375.828570][T12917] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 375.838764][T12917] Call Trace: [ 375.842086][T12917] [ 375.845057][T12917] dump_stack_lvl+0x241/0x360 [ 375.849778][T12917] ? __pfx_dump_stack_lvl+0x10/0x10 [ 375.855031][T12917] ? __pfx__printk+0x10/0x10 [ 375.859682][T12917] ? sysfs_warn_dup+0x51/0xa0 [ 375.864415][T12917] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 375.869973][T12917] sysfs_warn_dup+0x8e/0xa0 [ 375.874553][T12917] sysfs_do_create_link_sd+0xbe/0x110 [ 375.879983][T12917] device_add_class_symlinks+0x1c5/0x250 [ 375.885672][T12917] device_add+0x553/0xbf0 [ 375.890055][T12917] wiphy_register+0x1d3f/0x2b30 [ 375.894976][T12917] ? __pfx_wiphy_register+0x10/0x10 [ 375.900223][T12917] ? minstrel_ht_alloc+0x72b/0x860 [ 375.905397][T12917] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 375.911514][T12917] ieee80211_register_hw+0x3098/0x3d80 [ 375.917039][T12917] ? ieee80211_register_hw+0x1161/0x3d80 [ 375.922735][T12917] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 375.928618][T12917] ? __asan_memset+0x23/0x50 [ 375.933268][T12917] ? __hrtimer_init+0x170/0x250 [ 375.938355][T12917] mac80211_hwsim_new_radio+0x2597/0x44c0 [ 375.944158][T12917] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 375.950271][T12917] ? kmalloc_node_track_caller_noprof+0x242/0x440 [ 375.957160][T12917] ? kstrndup+0x5c/0xb0 [ 375.961460][T12917] ? __asan_memcpy+0x40/0x70 [ 375.966101][T12917] hwsim_new_radio_nl+0xe4c/0x21d0 [ 375.971277][T12917] ? __pfx___nla_validate_parse+0x10/0x10 [ 375.977050][T12917] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 375.982686][T12917] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 375.989070][T12917] genl_rcv_msg+0xb14/0xec0 [ 375.993611][T12917] ? mark_lock+0x9a/0x350 [ 375.997995][T12917] ? __pfx_genl_rcv_msg+0x10/0x10 [ 376.000823][T12930] delete_channel: no stack [ 376.003072][T12917] ? __pfx_lock_acquire+0x10/0x10 [ 376.012701][T12917] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 376.018291][T12917] ? __pfx___might_resched+0x10/0x10 [ 376.023621][T12917] netlink_rcv_skb+0x1e3/0x430 [ 376.028416][T12917] ? __pfx_genl_rcv_msg+0x10/0x10 [ 376.033574][T12917] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 376.038916][T12917] ? __netlink_deliver_tap+0x77e/0x7c0 [ 376.044448][T12917] genl_rcv+0x28/0x40 [ 376.048526][T12917] netlink_unicast+0x7ea/0x980 [ 376.053348][T12917] ? __pfx_netlink_unicast+0x10/0x10 [ 376.058688][T12917] ? __virt_addr_valid+0x183/0x520 [ 376.063904][T12917] ? __check_object_size+0x49c/0x900 [ 376.069210][T12917] ? bpf_lsm_netlink_send+0x9/0x10 [ 376.074381][T12917] netlink_sendmsg+0x8db/0xcb0 [ 376.079209][T12917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.084517][T12917] ? __import_iovec+0x536/0x820 [ 376.089412][T12917] ? aa_sock_msg_perm+0x91/0x160 [ 376.094393][T12917] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 376.099709][T12917] ? security_socket_sendmsg+0x87/0xb0 [ 376.105206][T12917] ? __pfx_netlink_sendmsg+0x10/0x10 [ 376.110548][T12917] __sock_sendmsg+0x221/0x270 [ 376.115261][T12917] ____sys_sendmsg+0x525/0x7d0 [ 376.120071][T12917] ? __pfx_____sys_sendmsg+0x10/0x10 [ 376.125438][T12917] __sys_sendmsg+0x2b0/0x3a0 [ 376.130064][T12917] ? __pfx___sys_sendmsg+0x10/0x10 [ 376.135240][T12917] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 376.141586][T12917] ? do_syscall_64+0x100/0x230 [ 376.146393][T12917] ? do_syscall_64+0xb6/0x230 [ 376.151130][T12917] do_syscall_64+0xf3/0x230 [ 376.155688][T12917] ? clear_bhb_loop+0x35/0x90 [ 376.160404][T12917] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 376.166327][T12917] RIP: 0033:0x7f14c767cf29 [ 376.170781][T12917] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 376.190442][T12917] RSP: 002b:00007f14c843c0c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 376.198918][T12917] RAX: ffffffffffffffda RBX: 00007f14c77b3f80 RCX: 00007f14c767cf29 [ 376.206939][T12917] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 376.215042][T12917] RBP: 00007f14c76ec074 R08: 0000000000000000 R09: 0000000000000000 [ 376.223049][T12917] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 376.231045][T12917] R13: 000000000000000b R14: 00007f14c77b3f80 R15: 00007fff2adf67e8 [ 376.239055][T12917] [ 376.251018][T12927] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 376.391019][T12944] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 376.764442][T12964] bond_slave_1: entered promiscuous mode [ 376.826027][T12964] 8021q: adding VLAN 0 to HW filter on device macvlan5 [ 376.906452][ T57] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.076301][T12974] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 377.118084][T12974] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 377.138692][T12974] CPU: 0 PID: 12974 Comm: syz-executor.1 Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 377.149269][T12974] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 377.159573][T12974] Call Trace: [ 377.162865][T12974] [ 377.165821][T12974] dump_stack_lvl+0x241/0x360 [ 377.170549][T12974] ? __pfx_dump_stack_lvl+0x10/0x10 [ 377.175787][T12974] ? __pfx__printk+0x10/0x10 [ 377.180427][T12974] ? sysfs_warn_dup+0x51/0xa0 [ 377.185153][T12974] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 377.190578][T12974] sysfs_warn_dup+0x8e/0xa0 [ 377.195143][T12974] sysfs_do_create_link_sd+0xbe/0x110 [ 377.200569][T12974] device_add_class_symlinks+0x1c5/0x250 [ 377.206255][T12974] device_add+0x553/0xbf0 [ 377.210637][T12974] wiphy_register+0x1d3f/0x2b30 [ 377.215562][T12974] ? __pfx_wiphy_register+0x10/0x10 [ 377.220805][T12974] ? minstrel_ht_alloc+0x72b/0x860 [ 377.225975][T12974] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 377.232098][T12974] ieee80211_register_hw+0x3098/0x3d80 [ 377.237628][T12974] ? ieee80211_register_hw+0x1161/0x3d80 [ 377.243325][T12974] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 377.249213][T12974] ? __asan_memset+0x23/0x50 [ 377.253845][T12974] ? __hrtimer_init+0x170/0x250 [ 377.258746][T12974] mac80211_hwsim_new_radio+0x2597/0x44c0 [ 377.264544][T12974] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 377.270666][T12974] ? kmalloc_node_track_caller_noprof+0x242/0x440 [ 377.277118][T12974] ? kstrndup+0x5c/0xb0 [ 377.281310][T12974] ? __asan_memcpy+0x40/0x70 [ 377.285948][T12974] hwsim_new_radio_nl+0xe4c/0x21d0 [ 377.291124][T12974] ? __pfx___nla_validate_parse+0x10/0x10 [ 377.296925][T12974] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 377.302574][T12974] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 377.308956][T12974] genl_rcv_msg+0xb14/0xec0 [ 377.313500][T12974] ? mark_lock+0x9a/0x350 [ 377.317884][T12974] ? __pfx_genl_rcv_msg+0x10/0x10 [ 377.322980][T12974] ? __pfx_lock_acquire+0x10/0x10 [ 377.328041][T12974] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 377.333630][T12974] ? __pfx___might_resched+0x10/0x10 [ 377.338979][T12974] netlink_rcv_skb+0x1e3/0x430 [ 377.343792][T12974] ? __pfx_genl_rcv_msg+0x10/0x10 [ 377.348863][T12974] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 377.354212][T12974] ? __netlink_deliver_tap+0x77e/0x7c0 [ 377.359743][T12974] genl_rcv+0x28/0x40 [ 377.363774][T12974] netlink_unicast+0x7ea/0x980 [ 377.368597][T12974] ? __pfx_netlink_unicast+0x10/0x10 [ 377.373930][T12974] ? __virt_addr_valid+0x183/0x520 [ 377.379180][T12974] ? __check_object_size+0x49c/0x900 [ 377.384498][T12974] ? bpf_lsm_netlink_send+0x9/0x10 [ 377.389673][T12974] netlink_sendmsg+0x8db/0xcb0 [ 377.394513][T12974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.399848][T12974] ? __import_iovec+0x536/0x820 [ 377.404738][T12974] ? aa_sock_msg_perm+0x91/0x160 [ 377.409715][T12974] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 377.415031][T12974] ? security_socket_sendmsg+0x87/0xb0 [ 377.420536][T12974] ? __pfx_netlink_sendmsg+0x10/0x10 [ 377.425868][T12974] __sock_sendmsg+0x221/0x270 [ 377.430586][T12974] ____sys_sendmsg+0x525/0x7d0 [ 377.435399][T12974] ? __pfx_____sys_sendmsg+0x10/0x10 [ 377.440746][T12974] __sys_sendmsg+0x2b0/0x3a0 [ 377.445389][T12974] ? __pfx___sys_sendmsg+0x10/0x10 [ 377.450599][T12974] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 377.456966][T12974] ? do_syscall_64+0x100/0x230 [ 377.461785][T12974] ? do_syscall_64+0xb6/0x230 [ 377.466501][T12974] do_syscall_64+0xf3/0x230 [ 377.471036][T12974] ? clear_bhb_loop+0x35/0x90 [ 377.475753][T12974] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 377.481683][T12974] RIP: 0033:0x7f479c87cf29 [ 377.486133][T12974] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 377.506048][T12974] RSP: 002b:00007f479d6630c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 377.514513][T12974] RAX: ffffffffffffffda RBX: 00007f479c9b3f80 RCX: 00007f479c87cf29 [ 377.522544][T12974] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 377.530560][T12974] RBP: 00007f479c8ec074 R08: 0000000000000000 R09: 0000000000000000 [ 377.538579][T12974] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 377.546601][T12974] R13: 000000000000004d R14: 00007f479c9b3f80 R15: 00007fffd393e538 [ 377.554645][T12974] [ 377.631396][T12979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.655468][T12979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.673428][T12979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.687051][T12979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.740005][T12979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.769055][T12979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.799228][T12979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.851377][T12979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.886163][T12979] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 377.904942][T12979] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.938904][T12986] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 378.086416][T12994] bridge0: port 4(bond0) entered blocking state [ 378.102905][T12994] bridge0: port 4(bond0) entered disabled state [ 378.109930][T12994] bond0: entered allmulticast mode [ 378.122564][T12994] bond_slave_0: entered allmulticast mode [ 378.132941][T12994] bond_slave_1: entered allmulticast mode [ 378.142733][T12994] bridge0: entered allmulticast mode [ 378.190321][T12994] bond0: left allmulticast mode [ 378.201896][T12994] bond_slave_0: left allmulticast mode [ 378.209068][T12994] bond_slave_1: left allmulticast mode [ 378.226609][T12994] bridge0: left allmulticast mode [ 378.232547][T13001] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 378.306256][T13001] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 378.412475][T13008] openvswitch: ɶƣ0GCTw: Dropping previously announced user features [ 378.438581][T13009] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 378.457580][T13008] openvswitch: ɶƣ0GC: Dropping previously announced user features [ 378.497545][T13008] netlink: 144316 bytes leftover after parsing attributes in process `syz-executor.1'. [ 378.648313][T13018] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 378.682578][T13018] sysfs: cannot create duplicate filename '/class/ieee80211/!!' [ 378.704654][T13018] CPU: 0 PID: 13018 Comm: syz-executor.1 Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 378.715233][T13018] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 378.725334][T13018] Call Trace: [ 378.728660][T13018] [ 378.731631][T13018] dump_stack_lvl+0x241/0x360 [ 378.736344][T13018] ? __pfx_dump_stack_lvl+0x10/0x10 [ 378.741563][T13018] ? __pfx__printk+0x10/0x10 [ 378.746180][T13018] ? sysfs_warn_dup+0x51/0xa0 [ 378.750877][T13018] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 378.756353][T13018] sysfs_warn_dup+0x8e/0xa0 [ 378.760876][T13018] sysfs_do_create_link_sd+0xbe/0x110 [ 378.766282][T13018] device_add_class_symlinks+0x1c5/0x250 [ 378.772021][T13018] device_add+0x553/0xbf0 [ 378.776374][T13018] wiphy_register+0x1d3f/0x2b30 [ 378.781268][T13018] ? __pfx_wiphy_register+0x10/0x10 [ 378.786485][T13018] ? minstrel_ht_alloc+0x72b/0x860 [ 378.791629][T13018] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 378.797716][T13018] ieee80211_register_hw+0x3098/0x3d80 [ 378.803209][T13018] ? ieee80211_register_hw+0x1161/0x3d80 [ 378.808874][T13018] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 378.814705][T13018] ? __asan_memset+0x23/0x50 [ 378.819315][T13018] ? __hrtimer_init+0x170/0x250 [ 378.824186][T13018] mac80211_hwsim_new_radio+0x2597/0x44c0 [ 378.829940][T13018] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 378.836028][T13018] ? kmalloc_node_track_caller_noprof+0x242/0x440 [ 378.842465][T13018] ? kstrndup+0x5c/0xb0 [ 378.846636][T13018] ? __asan_memcpy+0x40/0x70 [ 378.851246][T13018] hwsim_new_radio_nl+0xe4c/0x21d0 [ 378.856391][T13018] ? __pfx___nla_validate_parse+0x10/0x10 [ 378.862131][T13018] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 378.867732][T13018] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 378.874165][T13018] genl_rcv_msg+0xb14/0xec0 [ 378.878675][T13018] ? mark_lock+0x9a/0x350 [ 378.883022][T13018] ? __pfx_genl_rcv_msg+0x10/0x10 [ 378.888101][T13018] ? __pfx_lock_acquire+0x10/0x10 [ 378.893141][T13018] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 378.898710][T13018] ? __pfx___might_resched+0x10/0x10 [ 378.904022][T13018] netlink_rcv_skb+0x1e3/0x430 [ 378.908806][T13018] ? __pfx_genl_rcv_msg+0x10/0x10 [ 378.913846][T13018] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 378.919159][T13018] ? __netlink_deliver_tap+0x77e/0x7c0 [ 378.924654][T13018] genl_rcv+0x28/0x40 [ 378.928657][T13018] netlink_unicast+0x7ea/0x980 [ 378.933441][T13018] ? __pfx_netlink_unicast+0x10/0x10 [ 378.938741][T13018] ? __virt_addr_valid+0x183/0x520 [ 378.943893][T13018] ? __check_object_size+0x49c/0x900 [ 378.949184][T13018] ? bpf_lsm_netlink_send+0x9/0x10 [ 378.954315][T13018] netlink_sendmsg+0x8db/0xcb0 [ 378.959110][T13018] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.964417][T13018] ? __import_iovec+0x536/0x820 [ 378.969287][T13018] ? aa_sock_msg_perm+0x91/0x160 [ 378.974242][T13018] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 378.979534][T13018] ? security_socket_sendmsg+0x87/0xb0 [ 378.985017][T13018] ? __pfx_netlink_sendmsg+0x10/0x10 [ 378.990325][T13018] __sock_sendmsg+0x221/0x270 [ 378.995029][T13018] ____sys_sendmsg+0x525/0x7d0 [ 378.999823][T13018] ? __pfx_____sys_sendmsg+0x10/0x10 [ 379.005131][T13018] __sys_sendmsg+0x2b0/0x3a0 [ 379.009740][T13018] ? __pfx___sys_sendmsg+0x10/0x10 [ 379.014906][T13018] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 379.021247][T13018] ? do_syscall_64+0x100/0x230 [ 379.026024][T13018] ? do_syscall_64+0xb6/0x230 [ 379.030710][T13018] do_syscall_64+0xf3/0x230 [ 379.035239][T13018] ? clear_bhb_loop+0x35/0x90 [ 379.039933][T13018] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 379.045846][T13018] RIP: 0033:0x7f479c87cf29 [ 379.050288][T13018] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 379.069914][T13018] RSP: 002b:00007f479d6630c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 379.078363][T13018] RAX: ffffffffffffffda RBX: 00007f479c9b3f80 RCX: 00007f479c87cf29 [ 379.086432][T13018] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 379.094410][T13018] RBP: 00007f479c8ec074 R08: 0000000000000000 R09: 0000000000000000 [ 379.102396][T13018] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 379.110385][T13018] R13: 000000000000004d R14: 00007f479c9b3f80 R15: 00007fffd393e538 [ 379.118386][T13018] [ 379.368132][T13030] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 379.847822][T13053] openvswitch: ɶƣ0GCTw: Dropping previously announced user features [ 379.865777][T13054] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 379.891546][T13053] openvswitch: ɶƣ0GC: Dropping previously announced user features [ 380.126263][T13056] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 380.378605][T13067] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 380.395933][T13067] xt_TCPMSS: Only works on TCP SYN packets [ 380.407901][T13067] rdma_op ffff88802d48d9f0 conn xmit_rdma 0000000000000000 [ 380.439499][T13069] macvlan1: entered allmulticast mode [ 381.205331][ T5135] Bluetooth: hci1: command 0x0405 tx timeout [ 381.225394][T13086] __nla_validate_parse: 5 callbacks suppressed [ 381.225415][T13086] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 381.319677][T13102] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 382.415135][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 382.415157][ T29] audit: type=1804 audit(1718800541.070:126): pid=13122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3227999548/syzkaller.uydorW/342/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 382.515060][ T29] audit: type=1804 audit(1718800541.120:127): pid=13122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3227999548/syzkaller.uydorW/342/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 382.636811][ T29] audit: type=1804 audit(1718800541.130:128): pid=13122 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3227999548/syzkaller.uydorW/342/cgroup.controllers" dev="sda1" ino=1955 res=1 errno=0 [ 382.818303][T13133] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 382.905379][T13134] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 383.755695][T13144] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 383.767170][T13144] netlink: 3657 bytes leftover after parsing attributes in process `syz-executor.2'. [ 384.797073][T13173] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 384.983225][T13179] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 385.055832][T13181] team0: entered promiscuous mode [ 385.119839][T13181] team0: Port device team_slave_0 removed [ 385.174234][T13180] team0: left promiscuous mode [ 386.070507][T13211] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 386.271202][T13220] xt_TCPMSS: Only works on TCP SYN packets [ 387.092474][T13227] netlink: 88 bytes leftover after parsing attributes in process `syz-executor.2'. [ 387.129894][T13227] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 387.249634][T13227] : entered promiscuous mode [ 387.846431][T13245] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 388.050482][T13251] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 388.125376][T13251] bond1: entered promiscuous mode [ 388.169877][T13257] bridge1: entered promiscuous mode [ 388.175979][T13257] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 388.317103][T13251] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 388.367661][T13251] bond1 (unregistering): (slave bridge1): Releasing backup interface [ 388.387151][T13251] bridge1: left promiscuous mode [ 388.409794][T13251] bond1 (unregistering): Released all slaves [ 389.366757][T13274] team0: entered promiscuous mode [ 389.457641][T13274] team0: Port device team_slave_0 removed [ 389.498101][T13273] team0: left promiscuous mode [ 389.577817][T13276] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 389.776947][T13282] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 390.463993][T13294] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 390.476043][T13294] team0: Port device virt_wifi0 added [ 390.714236][T13294] team0 (unregistering): left allmulticast mode [ 390.724281][T13294] team_slave_0: left allmulticast mode [ 390.733883][T13294] team_slave_1: left allmulticast mode [ 390.739792][T13294] macvlan5: left allmulticast mode [ 390.752528][T13294] vlan1: left allmulticast mode [ 390.757745][T13294] veth0_vlan: left allmulticast mode [ 390.763228][T13294] net veth1_virt_wifi virt_wifi0: left allmulticast mode [ 390.809354][T13294] bond0: (slave macvlan2): Releasing backup interface [ 390.873896][T13294] team0 (unregistering): Port device team_slave_0 removed [ 390.907586][T13294] team0 (unregistering): Port device team_slave_1 removed [ 390.935643][T13294] vlan1: left promiscuous mode [ 390.953398][T13294] team0 (unregistering): Port device macvlan5 removed [ 391.003167][T13294] team0 (unregistering): Port device virt_wifi0 removed [ 391.562744][T13313] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 391.720760][T13319] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 391.912960][T13324] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 392.140824][T13332] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 392.161657][T13337] team0: entered promiscuous mode [ 392.182842][T13335] team0: left promiscuous mode [ 392.355637][T13344] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 392.529832][T13358] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 392.658081][T13364] team0: entered promiscuous mode [ 392.664104][T13363] team0: left promiscuous mode [ 392.917973][T13372] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 393.032445][T13374] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 393.186921][T13380] xt_CT: You must specify a L4 protocol and not use inversions on it [ 393.339789][T13385] lo speed is unknown, defaulting to 1000 [ 393.499401][T13389] team_slave_0: entered promiscuous mode [ 393.507055][T13389] team_slave_0: entered allmulticast mode [ 393.711624][T13403] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 393.902013][T13406] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 394.575478][T13419] xt_CT: You must specify a L4 protocol and not use inversions on it [ 394.805918][ T5135] Bluetooth: hci2: command 0x0405 tx timeout [ 395.082133][T13449] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 395.968234][T13493] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 396.184841][T13497] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 396.507417][T13513] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 396.541217][T13513] bond2: entered promiscuous mode [ 396.584474][T13513] bond2: (slave ip6gretap1): making interface the new active one [ 396.593243][T13513] ip6gretap1: entered promiscuous mode [ 396.607737][T13513] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 396.631177][T13513] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 396.643894][T13513] bond2: entered allmulticast mode [ 396.651124][T13513] ip6gretap1: entered allmulticast mode [ 396.658931][T13513] 8021q: adding VLAN 0 to HW filter on device bond2 [ 396.882964][T13530] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 397.032286][T13538] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 397.174931][T13547] __nla_validate_parse: 1 callbacks suppressed [ 397.174957][T13547] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 397.211437][T13547] netlink: 'syz-executor.2': attribute type 6 has an invalid length. [ 397.270650][T13552] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 397.719610][T13568] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 398.012792][T13579] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.3'. [ 398.022936][T13579] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 398.209110][T13588] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 398.813371][T13607] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 398.853694][T13607] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 398.864548][T13607] 8021q: adding VLAN 0 to HW filter on device team1 [ 399.171807][ T29] audit: type=1804 audit(1718800557.830:129): pid=13611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3852686278/syzkaller.uBocOp/167/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 399.213327][T13613] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.3'. [ 399.223814][T13613] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 399.241119][ T29] audit: type=1804 audit(1718800557.880:130): pid=13611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3852686278/syzkaller.uBocOp/167/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 399.296270][ T29] audit: type=1804 audit(1718800557.890:131): pid=13611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3852686278/syzkaller.uBocOp/167/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 399.361738][T13616] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 399.752545][T13626] openvswitch: ɶƣ0GCTw: Dropping previously announced user features [ 399.783130][T13626] openvswitch: ɶƣ0GC: Dropping previously announced user features [ 399.794625][T13626] netlink: 144316 bytes leftover after parsing attributes in process `syz-executor.3'. [ 399.943980][ T29] audit: type=1804 audit(1718800558.580:132): pid=13614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3852686278/syzkaller.uBocOp/167/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 399.993543][ T29] audit: type=1804 audit(1718800558.600:133): pid=13614 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3852686278/syzkaller.uBocOp/167/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 401.025600][T13651] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.1'. [ 401.043489][T13651] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 401.136982][T13661] openvswitch: ɶƣ0GCTw: Dropping previously announced user features [ 401.157922][T13661] openvswitch: ɶƣ0GC: Dropping previously announced user features [ 402.069756][T13693] can: request_module (can-proto-0) failed. [ 402.266389][T13700] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 402.354608][T13703] __nla_validate_parse: 1 callbacks suppressed [ 402.354630][T13703] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.3'. [ 402.380054][T13703] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 403.686349][T13736] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.1'. [ 403.695979][T13736] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 403.940877][T13749] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.1'. [ 403.982240][T13749] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 404.021929][T13745] fscrypt (sda1, inode 8194): Unsupported encryption modes (contents 0, filenames 0) [ 404.272342][T13753] tipc: Enabled bearer , priority 0 [ 404.288938][T13752] tipc: Disabling bearer [ 404.407947][T13755] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 404.422334][T13755] bridge0: port 3(macsec0) entered disabled state [ 404.429024][T13755] bridge0: port 2(bridge_slave_1) entered disabled state [ 404.436625][T13755] bridge0: port 1(bridge_slave_0) entered disabled state [ 404.633003][T13763] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 405.314030][T13784] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.3'. [ 405.324476][T13784] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 405.467333][T13789] ebtables: ebtables: counters copy to user failed while replacing table [ 406.541276][T13817] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 406.571084][T13817] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 406.721001][T13824] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.3'. [ 406.741229][T13824] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 406.812807][T13826] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 406.833850][T13826] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 406.841125][T13826] IPv6: NLM_F_CREATE should be set when creating new route [ 406.903440][T13828] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 406.919207][T13828] macvlan2: entered allmulticast mode [ 407.287939][T13840] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 407.424270][T13846] __nla_validate_parse: 2 callbacks suppressed [ 407.424293][T13846] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.3'. [ 407.441161][T13846] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 407.562425][T13852] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 407.572344][T13851] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 407.589188][T13851] macvlan3: entered allmulticast mode [ 407.938511][T13856] team0: entered promiscuous mode [ 407.950933][T13855] team0: left promiscuous mode [ 408.076788][T13862] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 408.094762][T13862] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 408.350840][T13877] ɶƣ0GCTw: entered promiscuous mode [ 408.374215][T13877] ɶƣ0GC: entered promiscuous mode [ 408.383503][T13877] netlink: 144316 bytes leftover after parsing attributes in process `syz-executor.2'. [ 408.661101][T13885] can: request_module (can-proto-0) failed. [ 408.796363][T13893] team0: entered promiscuous mode [ 408.802511][T13892] team0: left promiscuous mode [ 408.958100][T13900] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 408.968230][T13900] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 409.079173][T13904] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 409.089724][T13904] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 409.345855][T13916] openvswitch: ɶƣ0GCTw: Dropping previously announced user features [ 409.411302][T13916] openvswitch: ɶƣ0GC: Dropping previously announced user features [ 409.455400][T13916] netlink: 144316 bytes leftover after parsing attributes in process `syz-executor.3'. [ 409.534477][T13920] siw: device registration error -23 [ 409.551616][T13920] fscrypt (sda1, inode 1949): Unsupported encryption modes (contents 0, filenames 0) [ 409.598274][T13922] syz-executor.3[13922] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 409.598541][T13922] syz-executor.3[13922] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 409.631181][T13924] team0: entered promiscuous mode [ 409.661352][T13923] team0: left promiscuous mode [ 409.750183][T13926] hsr0: entered promiscuous mode [ 409.930251][T13932] lo speed is unknown, defaulting to 1000 [ 410.477250][T13944] macvlan1: entered allmulticast mode [ 410.533136][T13948] openvswitch: ɶƣ0GCTw: Dropping previously announced user features [ 410.547221][T13948] openvswitch: ɶƣ0GC: Dropping previously announced user features [ 410.764299][T13953] can: request_module (can-proto-0) failed. [ 410.794014][T13960] ebtables: ebtables: counters copy to user failed while replacing table [ 410.898436][T13964] hsr0: entered promiscuous mode [ 411.202676][T13974] netlink: 'syz-executor.3': attribute type 7 has an invalid length. [ 411.213201][T13974] netlink: 'syz-executor.3': attribute type 39 has an invalid length. [ 411.283653][T13976] lo speed is unknown, defaulting to 1000 [ 411.317150][T13978] macvlan7: entered allmulticast mode [ 411.570070][T13985] openvswitch: ɶƣ0GCTw: Dropping previously announced user features [ 411.593188][T13985] openvswitch: ɶƣ0GC: Dropping previously announced user features [ 412.383010][T14016] macvlan3: entered allmulticast mode [ 412.909415][T14029] lo speed is unknown, defaulting to 1000 [ 413.102925][T14036] __nla_validate_parse: 13 callbacks suppressed [ 413.102946][T14036] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.1'. [ 413.159811][T14036] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 413.233254][ T5135] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 413.249258][ T5135] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 413.258130][ T5135] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 413.267791][ T5135] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 413.278309][ T5135] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 413.286561][ T5135] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 413.406699][T14038] lo speed is unknown, defaulting to 1000 [ 413.647976][T14053] macvlan8: entered allmulticast mode [ 413.950376][T14038] chnl_net:caif_netlink_parms(): no params data found [ 414.028345][T14064] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 414.045165][T14064] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.2'. [ 414.352148][T14074] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.2'. [ 414.388646][T14038] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.405404][T14074] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 414.426863][T14038] bridge0: port 1(bridge_slave_0) entered disabled state [ 414.434280][T14038] bridge_slave_0: entered allmulticast mode [ 414.488400][T14038] bridge_slave_0: entered promiscuous mode [ 414.516428][T14038] bridge0: port 2(bridge_slave_1) entered blocking state [ 414.523612][T14038] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.554662][T14038] bridge_slave_1: entered allmulticast mode [ 414.567808][T14038] bridge_slave_1: entered promiscuous mode [ 414.591961][ T5135] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 414.610072][ T5135] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 414.618685][ T5135] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 414.640275][ T5135] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 414.656602][ T5135] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 414.664352][ T5135] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 414.751942][T14038] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 414.816579][T14088] macvlan4: entered allmulticast mode [ 414.870526][T14038] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 414.964233][T14091] lo speed is unknown, defaulting to 1000 [ 414.980458][T14080] lo speed is unknown, defaulting to 1000 [ 414.997881][T14038] team0: Port device team_slave_0 added [ 415.059153][T14038] team0: Port device team_slave_1 added [ 415.066186][T14095] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 415.116327][T14086] lo speed is unknown, defaulting to 1000 [ 415.242461][T14038] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 415.259896][T14038] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.329852][T14038] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 415.365374][ T5135] Bluetooth: hci3: command tx timeout [ 415.390275][T14038] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 415.432301][T14038] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 415.495950][T14038] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 415.763605][T14038] hsr_slave_0: entered promiscuous mode [ 415.788537][T14038] hsr_slave_1: entered promiscuous mode [ 415.825185][T14038] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 415.832845][T14038] Cannot create hsr debugfs directory [ 416.378671][T14124] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 416.411019][T14124] netlink: 113592 bytes leftover after parsing attributes in process `syz-executor.1'. [ 416.603702][T14130] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.1'. [ 416.613762][T14130] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 416.666479][T14080] chnl_net:caif_netlink_parms(): no params data found [ 416.708603][T14038] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.733261][ T5135] Bluetooth: hci6: command tx timeout [ 416.879278][T14038] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.058091][T14146] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 417.080204][T14038] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.108076][T14147] macvlan9: entered allmulticast mode [ 417.181093][T14038] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.225418][T14080] bridge0: port 1(bridge_slave_0) entered blocking state [ 417.245596][T14080] bridge0: port 1(bridge_slave_0) entered disabled state [ 417.253027][T14080] bridge_slave_0: entered allmulticast mode [ 417.281859][T14080] bridge_slave_0: entered promiscuous mode [ 417.305662][T14152] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 417.434304][T14080] bridge0: port 2(bridge_slave_1) entered blocking state [ 417.445767][ T5135] Bluetooth: hci3: command tx timeout [ 417.452312][T14080] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.464822][T14080] bridge_slave_1: entered allmulticast mode [ 417.482493][T14080] bridge_slave_1: entered promiscuous mode [ 417.678026][T14080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 417.689665][T14169] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.1'. [ 417.721454][T14167] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 417.730852][T14169] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 417.746834][T14080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 418.022094][T14080] team0: Port device team_slave_0 added [ 418.028984][T14038] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 418.057275][T14080] team0: Port device team_slave_1 added [ 418.074243][T14038] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 418.100235][T14038] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 418.164368][T14182] macvlan3: entered allmulticast mode [ 418.173036][T14038] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 418.395784][T14080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 418.405249][T14080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.475472][T14080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 418.476543][T14190] __nla_validate_parse: 1 callbacks suppressed [ 418.476564][T14190] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 418.499234][T14080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 418.531221][T14080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 418.584164][T14080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 418.601630][T14180] lo speed is unknown, defaulting to 1000 [ 418.696282][T14080] hsr_slave_0: entered promiscuous mode [ 418.713616][T14080] hsr_slave_1: entered promiscuous mode [ 418.726520][T14080] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 418.740318][T14080] Cannot create hsr debugfs directory [ 418.805080][ T5135] Bluetooth: hci6: command tx timeout [ 418.983086][T14207] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.2'. [ 419.006695][T14207] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 419.469277][T14080] netdevsim netdevsim4 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.480644][T14080] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.535634][ T5135] Bluetooth: hci3: command tx timeout [ 419.549749][T14038] 8021q: adding VLAN 0 to HW filter on device bond0 [ 419.611305][T14080] netdevsim netdevsim4 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.629010][T14080] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.718733][T14222] macvlan4: entered allmulticast mode [ 419.741411][T14038] 8021q: adding VLAN 0 to HW filter on device team0 [ 419.816898][T14080] netdevsim netdevsim4 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 419.827840][T14080] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 419.878980][ T5235] bridge0: port 1(bridge_slave_0) entered blocking state [ 419.886294][ T5235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 419.931363][T14229] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 419.985896][T14080] netdevsim netdevsim4 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 420.019262][T14080] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 420.103530][ T5169] bridge0: port 2(bridge_slave_1) entered blocking state [ 420.110790][ T5169] bridge0: port 2(bridge_slave_1) entered forwarding state [ 420.355423][T14240] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.3'. [ 420.382624][T14240] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 420.512067][T14080] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 420.536301][T14080] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 420.653148][T14080] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 420.758071][T14080] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 420.807104][T14257] lo speed is unknown, defaulting to 1000 [ 420.866952][T14038] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 420.896001][ T5135] Bluetooth: hci6: command tx timeout [ 420.987092][T14262] macvlan10: entered allmulticast mode [ 421.183625][T14269] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 421.311829][T14038] veth0_vlan: entered promiscuous mode [ 421.605264][ T5135] Bluetooth: hci3: command tx timeout [ 421.612942][T14038] veth1_vlan: entered promiscuous mode [ 421.662257][T14080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 421.728237][T14285] team0: entered promiscuous mode [ 421.741938][T14281] lo speed is unknown, defaulting to 1000 [ 421.787281][T14284] team0: left promiscuous mode [ 421.910878][T14080] 8021q: adding VLAN 0 to HW filter on device team0 [ 421.955836][T14038] veth0_macvtap: entered promiscuous mode [ 421.991116][T14038] veth1_macvtap: entered promiscuous mode [ 422.046962][ T5235] bridge0: port 1(bridge_slave_0) entered blocking state [ 422.054184][ T5235] bridge0: port 1(bridge_slave_0) entered forwarding state [ 422.100752][ T5235] bridge0: port 2(bridge_slave_1) entered blocking state [ 422.107969][ T5235] bridge0: port 2(bridge_slave_1) entered forwarding state [ 422.193668][T14038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.204294][T14038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.218422][T14038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.229691][T14038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.239926][T14038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.253755][T14038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.264100][T14038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.275459][T14038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.287028][T14038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 422.297951][T14038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.310259][T14038] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 422.332405][T14038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.345344][T14038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.360772][T14038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.371540][T14038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.381777][T14038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.392528][T14038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.404230][T14038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.426911][T14038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.437143][T14038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.448045][T14038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.460398][T14038] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 422.470994][T14038] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 422.482873][T14038] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 422.584100][T14038] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.605888][T14038] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.617694][T14038] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.633302][T14038] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 422.965218][ T5135] Bluetooth: hci6: command tx timeout [ 422.997813][ T6121] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.006040][ T6121] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.173313][ T6124] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 423.207681][ T6124] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 423.333507][T14323] lo speed is unknown, defaulting to 1000 [ 423.474567][T14330] ɶƣ0GCTw: entered promiscuous mode [ 423.505648][T14332] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 423.559564][T14330] ɶƣ0GC: entered promiscuous mode [ 423.581866][T14333] netlink: 144316 bytes leftover after parsing attributes in process `syz-executor.0'. [ 423.810857][T14080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 423.829149][T14341] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 424.993349][T14080] veth0_vlan: entered promiscuous mode [ 425.087549][T14080] veth1_vlan: entered promiscuous mode [ 425.133086][T14381] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 425.162539][T14384] team0: entered promiscuous mode [ 425.180705][T14384] team_slave_0: entered promiscuous mode [ 425.191102][T14384] team_slave_1: entered promiscuous mode [ 425.275474][T14080] veth0_macvtap: entered promiscuous mode [ 425.327750][T14080] veth1_macvtap: entered promiscuous mode [ 425.355820][T14384] team_slave_0: entered allmulticast mode [ 425.417220][T14384] team0: Port device team_slave_0 removed [ 425.492236][T14382] team0: left promiscuous mode [ 425.517384][T14382] team_slave_1: left promiscuous mode [ 425.533283][T14080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.575340][T14080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.595448][T14080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.619918][T14080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.641450][T14080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.652324][T14080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.656089][T14396] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 425.673894][T14080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.697008][T14080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.707450][T14080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.741394][T14080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.762538][T14080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 425.785587][T14080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.840378][T14080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 425.904428][T14080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 425.954125][T14080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 425.983996][T14080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.010195][T14080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.031867][T14080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.047796][T14080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.093337][T14080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.137504][T14080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.167231][T14080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.178130][T14080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.193531][T14080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.209985][T14080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.228472][T14080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 426.255152][T14080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 426.295730][T14080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 426.430695][T14080] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.463551][T14080] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.474114][T14080] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.483075][T14080] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 426.504688][T14416] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 426.917922][T14433] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 426.927773][ T6125] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 426.964213][ T6125] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.103179][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 427.145237][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 427.457163][T14450] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 427.667374][T14454] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 427.686405][T14456] netlink: 860 bytes leftover after parsing attributes in process `syz-executor.1'. [ 427.716788][T14454] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 428.285378][T14477] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.0'. [ 428.699313][T14496] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 429.238180][T14518] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 429.492736][T14522] team0: entered promiscuous mode [ 429.499662][T14522] team_slave_1: entered promiscuous mode [ 429.548071][T14519] team0: left promiscuous mode [ 429.584765][T14519] team_slave_1: left promiscuous mode [ 429.693985][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 429.707584][T14534] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 429.747228][T14540] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 430.389112][T14559] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 430.399984][T14562] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 431.099314][T14584] openvswitch: ɶƣ0GCTw: Dropping previously announced user features [ 431.133102][T14587] openvswitch: ɶƣ0GC: Dropping previously announced user features [ 431.143005][T14581] netlink: 144316 bytes leftover after parsing attributes in process `syz-executor.0'. [ 431.534271][T14607] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 432.036407][T14623] openvswitch: ɶƣ0GCTw: Dropping previously announced user features [ 432.040307][T14621] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 432.068433][T14621] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 432.112028][T14623] openvswitch: ɶƣ0GC: Dropping previously announced user features [ 432.116176][T14624] netlink: 144316 bytes leftover after parsing attributes in process `syz-executor.3'. [ 432.817053][T14657] openvswitch: ɶƣ0GCTw: Dropping previously announced user features [ 432.830479][T14657] openvswitch: ɶƣ0GC: Dropping previously announced user features [ 433.385230][T14684] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.515727][T14691] tipc: Started in network mode [ 433.529662][T14691] tipc: Node identity d649d628da03, cluster identity 4711 [ 433.549906][T14691] tipc: Enabled bearer , priority 0 [ 433.576952][T14690] tipc: Disabling bearer [ 433.688870][T14701] vlan0: entered promiscuous mode [ 433.769838][T14694] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 433.830831][T14701] vlan0 (unregistering): left promiscuous mode [ 434.003837][T14710] __nla_validate_parse: 3 callbacks suppressed [ 434.003859][T14710] netlink: 860 bytes leftover after parsing attributes in process `syz-executor.1'. [ 434.341713][T14721] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 434.482894][T14721] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 434.701343][T14734] tipc: Started in network mode [ 434.718865][T14734] tipc: Node identity 021f1245096b, cluster identity 4711 [ 434.745718][T14734] tipc: Enabled bearer , priority 0 [ 434.808997][T14733] tipc: Disabling bearer [ 434.955394][T14746] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 435.150733][T14760] netlink: 248 bytes leftover after parsing attributes in process `syz-executor.2'. [ 435.258573][T14764] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. [ 435.456133][T14769] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 435.721587][T14782] ebtables: ebtables: counters copy to user failed while replacing table [ 435.818315][T14787] macvlan2: entered promiscuous mode [ 435.823696][T14787] macvlan2: entered allmulticast mode [ 435.880679][T14791] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 436.019723][T14798] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 436.260065][T14811] netlink: 'syz-executor.2': attribute type 27 has an invalid length. [ 437.118869][T14844] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 437.285531][ T5125] Bluetooth: hci2: command 0x0405 tx timeout [ 437.371875][T14852] team0: entered promiscuous mode [ 437.377273][T14852] team_slave_0: entered promiscuous mode [ 437.383328][T14852] team_slave_1: entered promiscuous mode [ 437.385238][T14842] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 437.417346][T14852] team_slave_0: entered allmulticast mode [ 437.477425][T14852] team0: Port device team_slave_0 removed [ 437.497090][T14851] team0: left promiscuous mode [ 437.530586][T14851] team_slave_1: left promiscuous mode [ 437.557875][T14854] openvswitch: netlink: Missing key (keys=40, expected=100) [ 438.054278][T14874] can: request_module (can-proto-0) failed. [ 438.093073][T14878] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 438.177887][T14880] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 438.260260][T14888] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 438.411610][T14896] team0: entered promiscuous mode [ 438.427251][T14894] team0: left promiscuous mode [ 438.549390][T14902] tipc: Enabled bearer , priority 0 [ 438.571654][T14901] tipc: Disabling bearer [ 439.037110][T14921] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 439.405299][T14940] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 439.412204][T14942] tipc: Started in network mode [ 439.418670][T14942] tipc: Node identity 5e9b28ba0889, cluster identity 4711 [ 439.428316][T14942] tipc: Enabled bearer , priority 0 [ 439.439619][T14940] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 439.480285][T14938] tipc: Disabling bearer [ 439.889006][T14956] netlink: 10 bytes leftover after parsing attributes in process `syz-executor.4'. [ 440.031021][T14981] vxcan0: tx drop: invalid da for name 0x0000000000000002 [ 440.174508][T14985] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 440.189507][T14985] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 440.210554][T14985] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 440.219237][T14985] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 440.234192][T14987] tipc: Enabled bearer , priority 0 [ 440.270081][T14986] tipc: Disabling bearer [ 440.406837][T14991] pim6reg: entered allmulticast mode [ 440.419406][T14991] pim6reg: left allmulticast mode [ 440.659166][T15000] ip6tnl1: entered promiscuous mode [ 440.664452][T15000] ip6tnl1: entered allmulticast mode [ 440.904245][ T29] audit: type=1804 audit(1718800599.550:134): pid=15019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3227999548/syzkaller.uydorW/492/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 440.957868][T15023] team0: entered promiscuous mode [ 441.002806][ T29] audit: type=1804 audit(1718800599.600:135): pid=15019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3227999548/syzkaller.uydorW/492/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 441.053338][T15022] team0: left promiscuous mode [ 441.096407][ T29] audit: type=1804 audit(1718800599.600:136): pid=15019 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir3227999548/syzkaller.uydorW/492/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 441.252188][T15035] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 441.265031][T15035] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 441.290450][T15037] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 441.315349][T15040] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 441.735232][T15065] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 441.852415][T15069] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 442.110833][T15072] lo speed is unknown, defaulting to 1000 [ 442.118682][T15077] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 443.234547][T15126] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 443.266886][T15126] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 443.295948][T15126] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 443.315827][T15126] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 443.336505][T15126] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 443.461960][T15134] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 443.639581][T15141] lo speed is unknown, defaulting to 1000 [ 443.750687][T15142] ip6gretap0: entered promiscuous mode [ 443.795716][T15142] batadv_slave_0: entered promiscuous mode [ 443.992210][T15161] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 444.650237][T15185] RDS: rds_bind could not find a transport for c00::1, load rds_tcp or rds_rdma? [ 444.914505][T15194] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 445.519910][T15221] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 447.013491][T15289] Cannot find add_set index 0 as target [ 447.033605][T15288] __nla_validate_parse: 6 callbacks suppressed [ 447.033713][T15288] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 447.152176][T15295] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 447.163321][T15295] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 448.031301][T15331] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 448.354516][ T29] audit: type=1804 audit(1718800607.010:137): pid=15347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir4064112626/syzkaller.yus5JC/55/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 448.445237][ T29] audit: type=1804 audit(1718800607.060:138): pid=15347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir4064112626/syzkaller.yus5JC/55/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 448.524800][ T29] audit: type=1804 audit(1718800607.060:139): pid=15347 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir4064112626/syzkaller.yus5JC/55/cgroup.controllers" dev="sda1" ino=1959 res=1 errno=0 [ 448.630519][T15357] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 448.656769][T15357] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.3'. [ 448.677269][T15361] netlink: 184 bytes leftover after parsing attributes in process `syz-executor.0'. [ 448.696576][T15357] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 448.715202][T15361] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 448.747514][T15357] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 449.017167][T15374] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 449.675116][T15393] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 449.780228][T15397] netem: unknown loss type 8 [ 449.791539][T15397] netem: change failed [ 449.821054][T15399] Cannot find add_set index 0 as target [ 449.890353][T15401] netlink: 'syz-executor.4': attribute type 23 has an invalid length. [ 450.229342][T15416] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 450.352061][ T5235] IPVS: starting estimator thread 0... [ 450.455048][T15423] IPVS: using max 17 ests per chain, 40800 per kthread [ 450.598700][T15435] netem: unknown loss type 8 [ 450.645612][T15435] netem: change failed [ 450.715726][T15443] netlink: 'syz-executor.1': attribute type 23 has an invalid length. [ 450.722526][T15438] openvswitch: ɶƣ0GCTw: Dropping previously announced user features [ 450.831390][T15448] openvswitch: ɶƣ0GC: Dropping previously announced user features [ 451.568527][ T29] audit: type=1804 audit(1718800610.230:140): pid=15483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3852686278/syzkaller.uBocOp/317/cgroup.controllers" dev="sda1" ino=1944 res=1 errno=0 [ 451.652324][ T29] audit: type=1804 audit(1718800610.270:141): pid=15483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3852686278/syzkaller.uBocOp/317/cgroup.controllers" dev="sda1" ino=1944 res=1 errno=0 [ 451.730546][ T29] audit: type=1804 audit(1718800610.280:142): pid=15483 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir3852686278/syzkaller.uBocOp/317/cgroup.controllers" dev="sda1" ino=1944 res=1 errno=0 [ 451.807725][T15480] lo speed is unknown, defaulting to 1000 [ 451.817278][T15493] openvswitch: ɶƣ0GCTw: Dropping previously announced user features [ 451.912777][T15493] openvswitch: ɶƣ0GC: Dropping previously announced user features [ 452.337433][T15508] __nla_validate_parse: 9 callbacks suppressed [ 452.337454][T15508] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 452.582951][T15512] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 452.605997][T15512] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 452.627115][T15517] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 452.922144][T15525] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 453.097654][T15533] tipc: Enabled bearer , priority 0 [ 453.315530][T15533] tipc: Resetting bearer [ 453.347415][T15535] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 453.430968][T15531] tipc: Resetting bearer [ 453.777336][ T5125] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 453.789752][ T5125] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 453.808078][ T5125] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 453.818885][ T5125] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 453.832065][ T5125] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 453.840317][ T5125] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 454.155225][ T5170] tipc: Node number set to 206231080 [ 455.708241][T15531] tipc: Disabling bearer [ 455.719902][T15552] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 455.730574][T15552] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 455.741187][T15552] bridge0: port 3(macsec0) entered blocking state [ 455.747824][T15552] bridge0: port 3(macsec0) entered listening state [ 455.754584][T15552] bridge0: port 2(bridge_slave_1) entered blocking state [ 455.761805][T15552] bridge0: port 2(bridge_slave_1) entered listening state [ 455.769267][T15552] bridge0: port 1(bridge_slave_0) entered blocking state [ 455.776528][T15552] bridge0: port 1(bridge_slave_0) entered listening state [ 455.790309][T15557] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 455.823974][T15557] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 455.925823][ T5135] Bluetooth: hci0: command tx timeout [ 455.959814][T15556] lo speed is unknown, defaulting to 1000 [ 456.049234][T15572] team0: entered promiscuous mode [ 456.097140][T15571] team0: left promiscuous mode [ 456.318305][T15587] ɶƣ0GCTw: entered promiscuous mode [ 456.390452][T15587] ɶƣ0GC: entered promiscuous mode [ 456.420660][T15556] chnl_net:caif_netlink_parms(): no params data found [ 456.508255][T15592] tipc: Enabled bearer , priority 0 [ 456.660392][T15597] tipc: Resetting bearer [ 456.789825][T15590] tipc: Resetting bearer [ 458.019696][ T5135] Bluetooth: hci0: command 0x041b tx timeout [ 458.970482][T15590] tipc: Disabling bearer [ 458.986606][T15618] __nla_validate_parse: 3 callbacks suppressed [ 458.986625][T15618] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 459.022692][T15622] openvswitch: ɶƣ0GCTw: Dropping previously announced user features [ 459.114998][T15624] openvswitch: ɶƣ0GC: Dropping previously announced user features [ 459.176973][T15556] bridge0: port 1(bridge_slave_0) entered blocking state [ 459.199712][T15556] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.217856][T15556] bridge_slave_0: entered allmulticast mode [ 459.237564][T15556] bridge_slave_0: entered promiscuous mode [ 459.256809][T15630] team0: entered promiscuous mode [ 459.261884][T15630] team_slave_1: entered promiscuous mode [ 459.349654][T15556] bridge0: port 2(bridge_slave_1) entered blocking state [ 459.357543][T15556] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.365417][T15556] bridge_slave_1: entered allmulticast mode [ 459.373620][T15556] bridge_slave_1: entered promiscuous mode [ 459.380581][T15629] team0: left promiscuous mode [ 459.386857][T15629] team_slave_1: left promiscuous mode [ 459.483896][T15556] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 459.521149][T15556] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 459.602327][T15556] team0: Port device team_slave_0 added [ 459.622242][T15556] team0: Port device team_slave_1 added [ 459.667051][T15556] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 459.680940][T15556] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.731439][T15556] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 459.760537][T15556] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 459.777348][T15556] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 459.817573][T15556] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 459.973544][T15556] hsr_slave_0: entered promiscuous mode [ 459.991152][T15556] hsr_slave_1: entered promiscuous mode [ 460.006344][T15556] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 460.024087][T15556] Cannot create hsr debugfs directory [ 460.086296][ T5125] Bluetooth: hci0: command 0x041b tx timeout [ 460.470372][T15556] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.499654][T15556] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.609562][T15556] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.620311][T15556] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.758804][T15556] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.769527][T15556] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 460.864680][T15556] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 460.876988][T15556] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 461.214644][T15661] tipc: Enabled bearer , priority 0 [ 461.406055][T15661] tipc: Resetting bearer [ 461.415817][T15556] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 461.445583][T15664] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 461.493982][T15659] tipc: Resetting bearer [ 461.796191][ T5135] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 461.813954][ T5135] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 461.822658][ T5135] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 461.855776][ T5135] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 461.880035][ T5135] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 461.887651][ T5135] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 462.183702][ T5135] Bluetooth: hci0: command 0x041b tx timeout [ 463.932143][T15659] tipc: Disabling bearer [ 463.935859][ T5135] Bluetooth: hci3: command tx timeout [ 463.954582][T15556] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 464.053123][T15556] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 464.084064][T15556] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 464.193456][T15667] lo speed is unknown, defaulting to 1000 [ 464.255388][ T5135] Bluetooth: hci0: command 0x041b tx timeout [ 464.404472][ T6124] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.593984][ T6124] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.644401][T15700] team0: entered promiscuous mode [ 464.721426][ T6124] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.862562][ T6124] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 464.952519][T15708] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 465.084745][T15696] team0: left promiscuous mode [ 465.271202][T15556] 8021q: adding VLAN 0 to HW filter on device bond0 [ 465.453478][ T6124] bridge_slave_1: left allmulticast mode [ 465.468720][ T6124] bridge_slave_1: left promiscuous mode [ 465.474980][ T6124] bridge0: port 2(bridge_slave_1) entered disabled state [ 465.517066][ T6124] bridge_slave_0: left allmulticast mode [ 465.522782][ T6124] bridge_slave_0: left promiscuous mode [ 465.557006][ T6124] bridge0: port 1(bridge_slave_0) entered disabled state [ 465.575965][T15730] RDS: rds_bind could not find a transport for fe80::17, load rds_tcp or rds_rdma? [ 466.005653][ T5135] Bluetooth: hci3: command tx timeout [ 466.538188][ T6124] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 466.552283][ T6124] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 466.566187][ T6124] bond0 (unregistering): Released all slaves [ 466.621397][T15728] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 466.682017][ T6124] ɶƣ0GCTw: left promiscuous mode [ 466.700984][T15740] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 466.736000][T15556] 8021q: adding VLAN 0 to HW filter on device team0 [ 466.753316][ T6124] ɶƣ0GC: left promiscuous mode [ 466.811837][ T5169] bridge0: port 1(bridge_slave_0) entered blocking state [ 466.819106][ T5169] bridge0: port 1(bridge_slave_0) entered forwarding state [ 466.864587][ T6124] tipc: Left network mode [ 466.871872][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 466.879123][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 466.900021][T15667] chnl_net:caif_netlink_parms(): no params data found [ 467.092645][T15754] team0: entered promiscuous mode [ 467.103726][T15754] team_slave_1: entered promiscuous mode [ 467.126385][T15752] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 467.243139][T15758] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 467.447557][T15745] team0: left promiscuous mode [ 467.452397][T15745] team_slave_1: left promiscuous mode [ 467.454410][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88806ca4b400: rx timeout, send abort [ 467.555809][ T6124] hsr_slave_0: left promiscuous mode [ 467.572463][ T6124] hsr_slave_1: left promiscuous mode [ 467.592917][ T6124] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 467.608616][ T6124] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 467.618802][ T6124] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 467.621232][T15774] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 467.627309][ T6124] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 467.662070][ T6124] veth1_macvtap: left promiscuous mode [ 467.668776][ T6124] veth0_macvtap: left promiscuous mode [ 467.674664][ T6124] veth1_vlan: left promiscuous mode [ 467.680713][ T6124] veth0_vlan: left promiscuous mode [ 467.967483][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88806ca4b400: abort rx timeout. Force session deactivation [ 468.095263][ T5125] Bluetooth: hci3: command tx timeout [ 468.450034][ T6124] team0 (unregistering): Port device team_slave_1 removed [ 469.009640][T15667] bridge0: port 1(bridge_slave_0) entered blocking state [ 469.019593][T15667] bridge0: port 1(bridge_slave_0) entered disabled state [ 469.027502][T15667] bridge_slave_0: entered allmulticast mode [ 469.034789][T15667] bridge_slave_0: entered promiscuous mode [ 469.050197][T15776] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 469.070011][T15785] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 469.129754][T15667] bridge0: port 2(bridge_slave_1) entered blocking state [ 469.156812][T15667] bridge0: port 2(bridge_slave_1) entered disabled state [ 469.164159][T15667] bridge_slave_1: entered allmulticast mode [ 469.172881][T15667] bridge_slave_1: entered promiscuous mode [ 469.368319][T15667] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 469.450666][T15667] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 469.747836][T15667] team0: Port device team_slave_0 added [ 469.811324][T15667] team0: Port device team_slave_1 added [ 469.963373][T15667] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 469.999508][T15667] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.086394][T15667] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 470.127825][T15667] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 470.134036][T15831] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 470.153612][T15667] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 470.188975][ T5125] Bluetooth: hci3: command 0x0419 tx timeout [ 470.209480][T15667] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 470.351520][T15556] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 470.402639][T15839] team_slave_1: entered promiscuous mode [ 470.446815][T15839] team_slave_1: left promiscuous mode [ 470.493503][T15840] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 470.549839][ T6124] IPVS: stop unused estimator thread 0... [ 470.595850][T15667] hsr_slave_0: entered promiscuous mode [ 470.623085][T15667] hsr_slave_1: entered promiscuous mode [ 470.650880][T15667] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 470.665877][T15667] Cannot create hsr debugfs directory [ 470.748432][T15851] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 470.864672][T15556] veth0_vlan: entered promiscuous mode [ 471.033772][T15868] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 471.046349][ C0] [ 471.049282][ C0] ============================= [ 471.054470][ C0] WARNING: suspicious RCU usage [ 471.059393][ C0] 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 Not tainted [ 471.066585][ C0] ----------------------------- [ 471.071459][ C0] net/bridge/br_private.h:1599 suspicious rcu_dereference_protected() usage! [ 471.080289][ C0] [ 471.080289][ C0] other info that might help us debug this: [ 471.080289][ C0] [ 471.090594][ C0] [ 471.090594][ C0] rcu_scheduler_active = 2, debug_locks = 1 [ 471.098727][ C0] 4 locks held by syz-executor.2/15860: [ 471.104306][ C0] #0: ffff88802411ba98 (&mm->mmap_lock){++++}-{3:3}, at: exit_mmap+0x2a9/0xc80 [ 471.113506][ C0] #1: ffffc90000007c00 ((&p->forward_delay_timer)){+.-.}-{0:0}, at: call_timer_fn+0xc0/0x650 [ 471.123916][ C0] #2: ffff88806c670cb8 (&br->lock){+.-.}-{2:2}, at: br_forward_delay_timer_expired+0x50/0x440 [ 471.134408][ C0] #3: ffffffff8e333fa0 (rcu_read_lock){....}-{1:2}, at: br_mst_set_state+0x171/0x7a0 [ 471.144112][ C0] [ 471.144112][ C0] stack backtrace: [ 471.150068][ C0] CPU: 0 PID: 15860 Comm: syz-executor.2 Not tainted 6.10.0-rc2-syzkaller-00761-g3ec8d7572a69 #0 [ 471.160687][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 471.170954][ C0] Call Trace: [ 471.174323][ C0] [ 471.177179][ C0] dump_stack_lvl+0x241/0x360 [ 471.181889][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 471.187114][ C0] ? __pfx__printk+0x10/0x10 [ 471.191772][ C0] lockdep_rcu_suspicious+0x221/0x340 [ 471.197205][ C0] br_mst_set_state+0x29e/0x7a0 [ 471.202103][ C0] ? br_mst_set_state+0x171/0x7a0 [ 471.207168][ C0] ? __pfx_br_mst_set_state+0x10/0x10 [ 471.212606][ C0] br_set_state+0x28a/0x7b0 [ 471.217160][ C0] ? do_raw_spin_lock+0x14f/0x370 [ 471.222233][ C0] ? __pfx_br_set_state+0x10/0x10 [ 471.227311][ C0] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 471.232734][ C0] br_forward_delay_timer_expired+0x176/0x440 [ 471.238837][ C0] ? call_timer_fn+0x161/0x650 [ 471.243623][ C0] call_timer_fn+0x18e/0x650 [ 471.248227][ C0] ? call_timer_fn+0xc0/0x650 [ 471.252912][ C0] ? __pfx_br_forward_delay_timer_expired+0x10/0x10 [ 471.259525][ C0] ? __pfx_call_timer_fn+0x10/0x10 [ 471.264649][ C0] ? __pfx_br_forward_delay_timer_expired+0x10/0x10 [ 471.271251][ C0] ? __pfx_br_forward_delay_timer_expired+0x10/0x10 [ 471.277856][ C0] ? __pfx_br_forward_delay_timer_expired+0x10/0x10 [ 471.284456][ C0] ? _raw_spin_unlock_irq+0x23/0x50 [ 471.289670][ C0] ? lockdep_hardirqs_on+0x99/0x150 [ 471.294886][ C0] ? __pfx_br_forward_delay_timer_expired+0x10/0x10 [ 471.301515][ C0] __run_timer_base+0x66a/0x8e0 [ 471.306416][ C0] ? __pfx___run_timer_base+0x10/0x10 [ 471.311816][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 471.318164][ C0] run_timer_softirq+0xb7/0x170 [ 471.323036][ C0] handle_softirqs+0x2c4/0x970 [ 471.327814][ C0] ? __irq_exit_rcu+0xf4/0x1c0 [ 471.332594][ C0] ? __pfx_handle_softirqs+0x10/0x10 [ 471.337890][ C0] ? irqtime_account_irq+0xd4/0x1e0 [ 471.343104][ C0] __irq_exit_rcu+0xf4/0x1c0 [ 471.347789][ C0] ? __pfx___irq_exit_rcu+0x10/0x10 [ 471.353004][ C0] irq_exit_rcu+0x9/0x30 [ 471.357250][ C0] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 471.362898][ C0] [ 471.365828][ C0] [ 471.368758][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 471.374741][ C0] RIP: 0010:unwind_next_frame+0x4c1/0x2a00 [ 471.380556][ C0] Code: c1 0f 83 e9 00 00 00 e8 8d 32 55 00 48 c7 c3 b8 83 ba 8f 49 bd 00 00 00 00 00 fc ff df e9 96 01 00 00 49 89 df 48 89 5c 24 28 <49> 89 dd 4c 8b 74 24 38 4c 89 e0 4c 29 e8 48 89 c1 48 c1 f9 02 48 [ 471.400164][ C0] RSP: 0018:ffffc9000aa97528 EFLAGS: 00000246 [ 471.406244][ C0] RAX: 0000000000000000 RBX: ffffffff8fbe4d80 RCX: ffffffff90311e2e [ 471.414226][ C0] RDX: ffff88801a3c3c00 RSI: 000000000000f272 RDI: 000000000000f273 [ 471.422205][ C0] RBP: 0000000000005967 R08: ffffffff8140f23e R09: ffffc9000aa976f0 [ 471.430177][ C0] R10: 0000000000000003 R11: ffffffff8181dfd0 R12: ffffffff8fbe4d80 [ 471.438152][ C0] R13: 00000000000ac001 R14: dffffc0000000000 R15: ffffffff8fbe4d80 [ 471.446131][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 471.452291][ C0] ? unwind_next_frame+0x2de/0x2a00 [ 471.457508][ C0] ? unwind_next_frame+0x2de/0x2a00 [ 471.462719][ C0] ? exit_mm+0x21f/0x310 [ 471.466974][ C0] ? exit_mm+0x220/0x310 [ 471.471219][ C0] ? exit_mm+0x220/0x310 [ 471.475468][ C0] ? __kernel_text_address+0xd/0x40 [ 471.480668][ C0] ? exit_mm+0x220/0x310 [ 471.484917][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 471.491074][ C0] arch_stack_walk+0x151/0x1b0 [ 471.495852][ C0] ? exit_mm+0x220/0x310 [ 471.500105][ C0] stack_trace_save+0x118/0x1d0 [ 471.505051][ C0] ? __pfx_stack_trace_save+0x10/0x10 [ 471.510458][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 471.516444][ C0] kasan_save_track+0x3f/0x80 [ 471.521124][ C0] ? kasan_save_track+0x3f/0x80 [ 471.525988][ C0] ? kasan_save_free_info+0x40/0x50 [ 471.531199][ C0] ? poison_slab_object+0xe0/0x150 [ 471.536326][ C0] ? __kasan_slab_free+0x37/0x60 [ 471.541277][ C0] ? kmem_cache_free+0x145/0x350 [ 471.546214][ C0] ? __vm_area_free+0xe0/0x110 [ 471.550989][ C0] ? exit_mmap+0x645/0xc80 [ 471.555407][ C0] ? __mmput+0x115/0x3c0 [ 471.559659][ C0] ? exit_mm+0x220/0x310 [ 471.563948][ C0] ? __memcg_slab_free_hook+0xa7/0x310 [ 471.569419][ C0] ? __vm_area_free+0xe0/0x110 [ 471.574191][ C0] kasan_save_free_info+0x40/0x50 [ 471.579226][ C0] poison_slab_object+0xe0/0x150 [ 471.584173][ C0] ? __vm_area_free+0xe0/0x110 [ 471.588951][ C0] __kasan_slab_free+0x37/0x60 [ 471.593727][ C0] kmem_cache_free+0x145/0x350 [ 471.598499][ C0] __vm_area_free+0xe0/0x110 [ 471.603101][ C0] exit_mmap+0x645/0xc80 [ 471.607356][ C0] ? __pfx_exit_mmap+0x10/0x10 [ 471.612124][ C0] ? __asan_memset+0x23/0x50 [ 471.616746][ C0] ? uprobe_clear_state+0x277/0x290 [ 471.621951][ C0] ? mm_update_next_owner+0x53c/0x660 [ 471.627352][ C0] __mmput+0x115/0x3c0 [ 471.631467][ C0] exit_mm+0x220/0x310 [ 471.635571][ C0] ? __pfx_exit_mm+0x10/0x10 [ 471.640189][ C0] ? taskstats_exit+0x348/0xa70 [ 471.645098][ C0] ? tty_audit_exit+0x155/0x200 [ 471.650101][ C0] do_exit+0x9aa/0x27e0 [ 471.654310][ C0] ? preempt_schedule_common+0x84/0xd0 [ 471.659837][ C0] ? __pfx_do_exit+0x10/0x10 [ 471.664473][ C0] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 471.670503][ C0] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 471.676866][ C0] ? preempt_schedule_thunk+0x1a/0x30 [ 471.682310][ C0] do_group_exit+0x207/0x2c0 [ 471.686943][ C0] __x64_sys_exit_group+0x3f/0x40 [ 471.692012][ C0] do_syscall_64+0xf3/0x230 [ 471.696540][ C0] ? clear_bhb_loop+0x35/0x90 [ 471.701232][ C0] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 471.707139][ C0] RIP: 0033:0x7f7dba27cf29 [ 471.711570][ C0] Code: Unable to access opcode bytes at 0x7f7dba27ceff. [ 471.718599][ C0] RSP: 002b:00007fff8ec3c4a8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 471.727033][ C0] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f7dba27cf29 [ 471.735019][ C0] RDX: 0000000000000064 RSI: 0000000000000000 RDI: 0000000000000000 [ 471.743005][ C0] RBP: 0000000000000001 R08: 0000000400000000 R09: 0000000000000000 [ 471.750986][ C0] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 471.758965][ C0] R13: 0000000000000000 R14: 00007fff8ec3c580 R15: 0000000000000001 [ 471.766961][ C0] [ 471.770958][ C0] bridge0: port 1(bridge_slave_0) entered learning state [ 471.779708][ C0] bridge0: port 2(bridge_slave_1) entered learning state 2024/06/19 12:37:10 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 471.787032][ C0] bridge0: port 3(macsec0) entered learning state [ 472.072547][T15556] veth1_vlan: entered promiscuous mode [ 472.245815][ T5135] Bluetooth: hci3: command 0x0419 tx timeout