last executing test programs: 1m24.837754872s ago: executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x80, 0x30, 0xb, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8}, @TCA_CT_MARK_MASK={0x8}, @TCA_CT_LABELS={0x14, 0x7, "6b46cc8cd3fbd01fefc6e9819b565cbe"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1400000faacde42e7706f9d27b9fc6d954001000010000000000000000000000000a48010000060a03000000000000000000070000081cdb0480100001800b000100736f636b65740000680001800c000100636f756e74657200580002800c00014000000000000000090c000140000000000000029d0c00014000000000000000010c000240000000005031b0bb0c00014000000000000000050c00014000000000000000040c000140000000000000206450000180080001006e61740044000280080002400000000208000740000000350800014000400001080003400000001108000740000000340800054000000017080006400000000f080003400000000d500001800e000100636f6e6e6c696d69740000003c00028008000140000000040800024000000000080002c00000000108000240000000010800014000000000080002400000000008000240000000000c00064000000000000000010900010073797a300000000048000000080a0000000000000000000000000000040007400400058008000940000000000c00064000000000000000000900010073797a30000000000c0006400000000000000000140000001100010000000000000000000000000a"], 0x1b8}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB="24002d800800030000000000050001000000000005000400000000000800020007"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) write$binfmt_misc(r4, &(0x7f0000000040)=ANY=[], 0x4) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000480)={@dev, @initdev}, &(0x7f00000003c0)=0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002a00000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='ext4_writepages\x00', r10}, 0x10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r11, &(0x7f0000000180), 0x2009) close(r8) r12 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_buf(r12, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r4, 0x8008f513, &(0x7f0000000180)) setsockopt$inet6_IPV6_HOPOPTS(r12, 0x29, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="ce54000000040000002632d5b90299acb54213907cae51e8a359386102c9bab3ff5eacfa64f365c8abf40d4796ce329a9e5af0e2c15e25d1ac28970656fdb5d1e7b7615753a4cc8b43c31fa72a7927"], 0x8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r12, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000200000000000b576ad49e109741fff8387fae2b83c5674f1b6705075bc51d63b3fa173b7c95b80589e9fa7b234335157db2ad2c57d1a4910ff6c165189dde90004b5cebebc7fc6554445e5288e681a47f9d2bbcadc25e11da3"], 0x8) splice(r3, 0x0, r8, 0x0, 0x40000000cc0, 0xd) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000911007000000000300"/32], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r4, 0x4) 1m10.895709995s ago: executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x80, 0x30, 0xb, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8}, @TCA_CT_MARK_MASK={0x8}, @TCA_CT_LABELS={0x14, 0x7, "6b46cc8cd3fbd01fefc6e9819b565cbe"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x1b8}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB="24002d800800030000000000050001000000000005000400000000000800020007"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) write$binfmt_misc(r4, &(0x7f0000000040)=ANY=[], 0x4) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000480)={@dev, @initdev}, &(0x7f00000003c0)=0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002a00000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='ext4_writepages\x00', r10}, 0x10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r11, &(0x7f0000000180), 0x2009) close(r8) r12 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_buf(r12, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r4, 0x8008f513, &(0x7f0000000180)) setsockopt$inet6_IPV6_HOPOPTS(r12, 0x29, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="ce54000000040000002632d5b90299acb54213907cae51e8a359386102c9bab3ff5eacfa64f365c8abf40d4796ce329a9e5af0e2c15e25d1ac28970656fdb5d1e7b7615753a4cc8b43c31fa72a7927"], 0x8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r12, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000200000000000b576ad49e109741fff8387fae2b83c5674f1b6705075bc51d63b3fa173b7c95b80589e9fa7b234335157db2ad2c57d1a4910ff6c165189dde90004b5cebebc7fc6554445e5288e681a47f9d2bbcadc25e11da3"], 0x8) splice(r3, 0x0, r8, 0x0, 0x40000000cc0, 0xd) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000911007000000000300"/32], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r4, 0x4) 56.56306834s ago: executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x80, 0x30, 0xb, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8}, @TCA_CT_MARK_MASK={0x8}, @TCA_CT_LABELS={0x14, 0x7, "6b46cc8cd3fbd01fefc6e9819b565cbe"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x1b8}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB="24002d800800030000000000050001000000000005000400000000000800020007"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) write$binfmt_misc(r4, &(0x7f0000000040)=ANY=[], 0x4) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000480)={@dev, @initdev}, &(0x7f00000003c0)=0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002a00000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='ext4_writepages\x00', r10}, 0x10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r11, &(0x7f0000000180), 0x2009) close(r8) r12 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_buf(r12, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r4, 0x8008f513, &(0x7f0000000180)) setsockopt$inet6_IPV6_HOPOPTS(r12, 0x29, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="ce54000000040000002632d5b90299acb54213907cae51e8a359386102c9bab3ff5eacfa64f365c8abf40d4796ce329a9e5af0e2c15e25d1ac28970656fdb5d1e7b7615753a4cc8b43c31fa72a7927"], 0x8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r12, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000200000000000b576ad49e109741fff8387fae2b83c5674f1b6705075bc51d63b3fa173b7c95b80589e9fa7b234335157db2ad2c57d1a4910ff6c165189dde90004b5cebebc7fc6554445e5288e681a47f9d2bbcadc25e11da3"], 0x8) splice(r3, 0x0, r8, 0x0, 0x40000000cc0, 0xd) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000911007000000000300"/32], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r4, 0x4) 42.124901159s ago: executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x80, 0x30, 0xb, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8}, @TCA_CT_MARK_MASK={0x8}, @TCA_CT_LABELS={0x14, 0x7, "6b46cc8cd3fbd01fefc6e9819b565cbe"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x1b8}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB="24002d800800030000000000050001000000000005000400000000000800020007"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) write$binfmt_misc(r4, &(0x7f0000000040)=ANY=[], 0x4) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000480)={@dev, @initdev}, &(0x7f00000003c0)=0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002a00000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='ext4_writepages\x00', r10}, 0x10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r11, &(0x7f0000000180), 0x2009) close(r8) r12 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_buf(r12, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r4, 0x8008f513, &(0x7f0000000180)) setsockopt$inet6_IPV6_HOPOPTS(r12, 0x29, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="ce54000000040000002632d5b90299acb54213907cae51e8a359386102c9bab3ff5eacfa64f365c8abf40d4796ce329a9e5af0e2c15e25d1ac28970656fdb5d1e7b7615753a4cc8b43c31fa72a7927"], 0x8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r12, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000200000000000b576ad49e109741fff8387fae2b83c5674f1b6705075bc51d63b3fa173b7c95b80589e9fa7b234335157db2ad2c57d1a4910ff6c165189dde90004b5cebebc7fc6554445e5288e681a47f9d2bbcadc25e11da3"], 0x8) splice(r3, 0x0, r8, 0x0, 0x40000000cc0, 0xd) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000911007000000000300"/32], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r4, 0x4) 26.249331093s ago: executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x80, 0x30, 0xb, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8}, @TCA_CT_MARK_MASK={0x8}, @TCA_CT_LABELS={0x14, 0x7, "6b46cc8cd3fbd01fefc6e9819b565cbe"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b00)=ANY=[@ANYBLOB="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"], 0x1b8}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB="24002d800800030000000000050001000000000005000400000000000800020007"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) write$binfmt_misc(r4, &(0x7f0000000040)=ANY=[], 0x4) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000480)={@dev, @initdev}, &(0x7f00000003c0)=0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002a00000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='ext4_writepages\x00', r10}, 0x10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r11, &(0x7f0000000180), 0x2009) close(r8) r12 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_buf(r12, 0x29, 0x39, &(0x7f0000e86000)="0022040000ffffebfffffffeffffff0700000000ff000207835eeb1317b208feefaf234b4ff8b4cc4c39bdc8451792b903f4b7d8c8cf2153622652328c19ef68234f905557c4070000008735e9ab2f77c62e0a5cdd2cf9984c070400000000000003ff23353d8b2fc6a3ae1ebfcb49004a3ccd3560ae01010000079c60ed7449b842f3e253be8a62b37f820fe75a9ea937ea4efbfb9b4a128f2dbe2837496d00ad7765abaac2ec0f91c88a1ea1ff6ee308c72febedcf00798d41991ac25bb6fce2220c25ea380c7e112ab358c3a6bd8a59c100000001b4e82cb03419544a3988bc226a85abe6eb60cd7cf8d103d38c31c7c86d16c4d86cbe4ab390c092d077ce70590fbbd4f8bf4d6ab1cea6dbe9d4a54c17aac0db6e3845", 0x118) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r4, 0x8008f513, &(0x7f0000000180)) setsockopt$inet6_IPV6_HOPOPTS(r12, 0x29, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="ce54000000040000002632d5b90299acb54213907cae51e8a359386102c9bab3ff5eacfa64f365c8abf40d4796ce329a9e5af0e2c15e25d1ac28970656fdb5d1e7b7615753a4cc8b43c31fa72a7927"], 0x8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r12, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000200000000000b576ad49e109741fff8387fae2b83c5674f1b6705075bc51d63b3fa173b7c95b80589e9fa7b234335157db2ad2c57d1a4910ff6c165189dde90004b5cebebc7fc6554445e5288e681a47f9d2bbcadc25e11da3"], 0x8) splice(r3, 0x0, r8, 0x0, 0x40000000cc0, 0xd) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000911007000000000300"/32], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r4, 0x4) 9.632391782s ago: executing program 0: r0 = socket$alg(0x26, 0x5, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000440)='\x00'/16, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newtaction={0x80, 0x30, 0xb, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_MARK={0x8}, @TCA_CT_MARK_MASK={0x8}, @TCA_CT_LABELS={0x14, 0x7, "6b46cc8cd3fbd01fefc6e9819b565cbe"}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000b00)=ANY=[@ANYBLOB="1400000faacde42e7706f9d27b9fc6d954001000010000000000000000000000000a48010000060a03000000000000000000070000081cdb0480100001800b000100736f636b65740000680001800c000100636f756e74657200580002800c00014000000000000000090c000140000000000000029d0c00014000000000000000010c000240000000005031b0bb0c00014000000000000000050c00014000000000000000040c000140000000000000206450000180080001006e61740044000280080002400000000208000740000000350800014000400001080003400000001108000740000000340800054000000017080006400000000f080003400000000d500001800e000100636f6e6e6c696d69740000003c00028008000140000000040800024000000000080002c00000000108000240000000010800014000000000080002400000000008000240000000000c00064000000000000000010900010073797a300000000048000000080a0000000000000000000000000000040007400400058008000940000000000c00064000000000000000000900010073797a30000000000c0006400000000000000000140000001100010000000000000000000000000a"], 0x1b8}}, 0x0) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000080)={'wpan1\x00', 0x0}) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r6, @ANYBLOB="24002d800800030000000000050001000000000005000400000000000800020007"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) write$binfmt_misc(r4, &(0x7f0000000040)=ANY=[], 0x4) r8 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x23, &(0x7f0000000480)={@dev, @initdev}, &(0x7f00000003c0)=0xc) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xb, 0x8, 0x10001, 0x9, 0x1}, 0x48) r10 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000240)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r9, @ANYBLOB="0000000000000000b7080000000900007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000850000002a00000095"], &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000ac0)={&(0x7f0000000a80)='ext4_writepages\x00', r10}, 0x10) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r11, &(0x7f0000000180), 0x2009) close(r8) r12 = socket$inet6(0xa, 0x5, 0x0) setsockopt$inet6_buf(r12, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @loopback}, 0x1c) ioctl$F2FS_IOC_RESERVE_COMPRESS_BLOCKS(r4, 0x8008f513, &(0x7f0000000180)) setsockopt$inet6_IPV6_HOPOPTS(r12, 0x29, 0x36, &(0x7f00000002c0)=ANY=[@ANYBLOB="ce54000000040000002632d5b90299acb54213907cae51e8a359386102c9bab3ff5eacfa64f365c8abf40d4796ce329a9e5af0e2c15e25d1ac28970656fdb5d1e7b7615753a4cc8b43c31fa72a7927"], 0x8) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r12, 0x29, 0x37, &(0x7f00000001c0)=ANY=[@ANYBLOB="0000200000000000b576ad49e109741fff8387fae2b83c5674f1b6705075bc51d63b3fa173b7c95b80589e9fa7b234335157db2ad2c57d1a4910ff6c165189dde90004b5cebebc7fc6554445e5288e681a47f9d2bbcadc25e11da3"], 0x8) splice(r3, 0x0, r8, 0x0, 0x40000000cc0, 0xd) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1e, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000911007000000000300"/32], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$LINK_DETACH(0x22, &(0x7f0000000340)=r4, 0x4) 4.461040641s ago: executing program 2: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x5c}}, 0x0) 4.337765785s ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x4, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1}, &(0x7f0000000200), &(0x7f00000002c0)=r1}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r0, 0x58, &(0x7f0000000380)}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "1391e9", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x8, 0x3, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r4}, 0x20) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r7}, &(0x7f0000000100), &(0x7f00000000c0)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xac, &(0x7f0000000480)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xbb, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000001b40), 0x8) r12 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0xa}}]}, 0x40}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x18, 0x26, &(0x7f0000001940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x51389f07}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@alu={0x4, 0x0, 0x4, 0x8, 0x5, 0x6, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd173}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001a80)='GPL\x00', 0x6, 0x4e, &(0x7f0000001ac0)=""/78, 0x41000, 0x19, '\x00', r10, 0x0, r11, 0x8, &(0x7f0000001b80)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001bc0)=[r6, r4], &(0x7f0000001c00)=[{0x3, 0x4, 0x7, 0x2}, {0x3, 0x3, 0xc}, {0x1, 0x4, 0x1, 0x1}, {0x1, 0x1, 0xb, 0x4}, {0x3, 0x3, 0xb, 0x3}, {0x5, 0x1, 0x7, 0xc}, {0x5, 0x4, 0x8}], 0x10, 0x1}, 0x90) r13 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_lsm={0x1d, 0x1d, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@generic, @ringbuf_query, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffa}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}, @map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000800)='syzkaller\x00', 0xffff, 0xce, &(0x7f0000000840)=""/206, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000980)={0x2, 0x5, 0x1, 0x80000000}, 0x10, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000009c0)=[0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000a00)=[{0x2, 0x5, 0xa, 0x8}, {0x0, 0x5, 0x2, 0x6}, {0x4, 0x2, 0xb, 0x2}, {0x2, 0x5, 0x7, 0xc}], 0x10, 0x5}, 0x90) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b00)={0x0, 0x8, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x17, &(0x7f0000000ec0)=ANY=[@ANYRESHEX=r4, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000030000007b8af856fffc020000000000000000000007020000f8ffffffb703000008000000000400000300000085000000820000009500000000000000863934250bdc4b0688"], &(0x7f0000000180)='syzkaller\x00', 0xed95, 0xe8, &(0x7f0000000240)=""/232, 0x41000, 0x60, '\x00', r10, 0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x3, 0x7, 0x5, 0x7}, 0x10, 0xffffffffffffffff, r13, 0x8, &(0x7f0000000b40)=[r14], &(0x7f0000000b80)=[{0x4, 0x3, 0xb, 0x8}, {0x4, 0x3, 0x1, 0x2}, {0x4, 0x4, 0xf, 0xc}, {0x5, 0x3, 0x6, 0x3}, {0x4, 0x4, 0x8, 0x6}, {0x5, 0x3, 0x6, 0x3}, {0x3, 0x1, 0xa, 0x9}, {0x4, 0x1, 0x4}], 0x10, 0x1}, 0x90) 3.208188472s ago: executing program 2: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000780)="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", 0x1a0}], 0x1}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@bridge_newneigh={0xfffffffffffffc4b, 0x1c, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, [@NDA_DST_IPV6={0x14, 0x1, @private0}, @NDA_LLADDR={0xa, 0x2, @local}]}, 0x3c}}, 0x8890) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x207}, 0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e22, 0x4a33, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x10001}}, 0x0, 0x1, 0x3f8, 0x0, 0x23, 0x1}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)="af", 0x4101}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="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"/912, 0x390}], 0x1}}], 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a5ffad8800000000140012800b0001006970766c616e000004000280080005"], 0x44}}, 0x0) sendmsg$rds(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$rds(r1, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000100)=0x1, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xffefffff) 3.056697411s ago: executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@polexpire={0xcc, 0x1b, 0x319516ae726afe1b, 0x0, 0x0, {{{@in6=@private1}}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xcc}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_dccp(0x2, 0x6, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @remote}, [], [], 'wg2\x00', 'team_slave_1\x00'}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x7fff}}, @common=@inet=@set2={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x2, &(0x7f0000000000)=0xff, 0x4) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000300)={{'\x00', 0x2}, {0x400}, 0x4, 0x0, 0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)="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", 0x10d, 0x0, &(0x7f0000000440)={0x2, 0x143, {0x1, 0xc, 0xf9, "c9bbf76b66a888768f726545f1c732934d79f683a98f395c157b1f2452a78a9d6ee00a362d47386f444be9791b2382193da0539a270f8b1408dcbb2e31a4db9216e8cb94f9bf031964cacd870513993792d0d54e62c17c9fa6054e644914622de035c961a6965f162f33e19b204d09882f3d8593811c7fcef14c2296305db1007c100e5e41b52537cdc52145d09909afdac0fd48d1c23d5cd98857feacbf814719226a156b29c94c8876529aaf3fe0ed1a24a70bd516eb6831762a78ec3b7aa939cfdbf68571bb965ffe8be550e5705aae40bc2f7e03fd7e32d970f7f2e3056ab5ca117a62133b0bc8199d417c64f7b9afd02b2d953d759bd9", 0x3d, "04c83479b0d54eea17c6adae1635f079e835e95607e7734df40e0d9e7624d6579ad4ee239b338e9ccb174d44832a71256fa8d0296cc3222358e26a30cf"}, 0x19, "5bdeb31ad700acef96eec5c22c9f65cd013c646a7ac708753e"}, 0x168}) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000400)=0x9) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x0, @local}, 0x10) 2.158706635s ago: executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(twofish)\x00'}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket(0x28, 0x1, 0x0) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r3, 0x6, 0x1f, &(0x7f0000000000), 0x4) (async, rerun: 32) getsockopt$inet_tcp_buf(r3, 0x6, 0x1c, 0x0, &(0x7f00000000c0)) (async, rerun: 32) bind$inet(r3, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) connect$packet(r2, &(0x7f0000000100)={0x28, 0x11, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) connect$packet(r2, &(0x7f0000000000)={0x28, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x14) (async) r4 = socket(0x2, 0xa, 0x0) (async) close(0xffffffffffffffff) recvmmsg(r4, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) accept$packet(r4, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0) (async, rerun: 64) r5 = socket$inet(0x2, 0x6, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) shutdown(r5, 0x0) (async, rerun: 64) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async, rerun: 64) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r6, 0x107, 0x7, 0x0, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x0) writev(r7, &(0x7f0000000180)=[{&(0x7f00000000c0)="390000001000111867090707a640400f0021ff3f31000000170a001700000000040037000900030001372564b758b9a64411f6bb744dc48f57", 0x39}, {&(0x7f0000000040)="9760d00119805a623dbb274db33f0808bd1e92da5ff6256611d94a501939924c3b3f1bd0b72e8ed4e6c7f00b4705bcbc253316b749a36d9e5706eb386f35d6da2c6cfd144f6676152656d71ff8880401175ef9564e08", 0x56}, {&(0x7f0000000200)="aefea52764108e71408d83b8ab28a8bded994ff8087c2c70509c427a40f5bb449ed736ca543ed3bdc41dae1b8f883dfc8885921a85cfd73c0d420ff58eeeeaf35d8414", 0x43}], 0x3) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) (async) r8 = accept4(r0, 0x0, 0x0, 0x0) (async, rerun: 64) r9 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (rerun: 64) setsockopt$inet6_IPV6_RTHDR(r9, 0x29, 0x39, &(0x7f0000001500)=ANY=[@ANYBLOB="0002020000000000ff010000b40000000000000000000001"], 0x18) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={0x0, 0x44}}, 0x0) (async) r10 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r10, &(0x7f00000001c0)=ANY=[@ANYRES16=r1, @ANYRESOCT, @ANYRES8=r4], 0xfe33) (async) sendmsg$nl_route_sched_retired(r8, &(0x7f000001be80)={0x0, 0x0, &(0x7f000001be40)={&(0x7f0000000680)=@deltclass={0x30, 0x29, 0x0, 0x0, 0x0, {}, [@c_atm={{0x8}, {0x4}}]}, 0x30}}, 0x0) 2.129847927s ago: executing program 2: r0 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}]}, @NFT_MSG_NEWSETELEM={0x2c, 0xb, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xc0}}, 0x0) (async, rerun: 64) r4 = socket(0x0, 0x0, 0x0) (rerun: 64) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) r5 = socket$inet6(0xa, 0x2, 0x3a) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x3, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x23}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf}, 0x90) (async) ioctl$BTRFS_IOC_SNAP_CREATE(r5, 0x50009401, 0x0) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) pipe(0x0) (async) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_int(r7, 0x6, 0x6, &(0x7f0000000040)=0x1, 0x4) connect$inet(r7, &(0x7f0000000100)={0x2, 0x0, @empty}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="2bc2ecf005d5e44f00008000001c00"/32, @ANYRES32=r6, @ANYBLOB="0800040000050000"], 0x44}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'veth0_macvtap\x00', 0x0}) ioctl$sock_inet6_SIOCADDRT(r0, 0x890b, &(0x7f0000000000)={@mcast1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @dev={0xfe, 0x80, '\x00', 0x24}, 0x0, 0x0, 0x9, 0x300, 0x2, 0xefb87e854c64ccb, r8}) 2.074504988s ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x5c}}, 0x0) 1.964005245s ago: executing program 3: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x4, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x1d, &(0x7f0000000dc0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x538}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x7}], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1}, &(0x7f0000000200), &(0x7f00000002c0)=r1}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r0, 0x58, &(0x7f0000000380)}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "1391e9", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x8, 0x3, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r4}, 0x20) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r7}, &(0x7f0000000100), &(0x7f00000000c0)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xac, &(0x7f0000000480)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xbb, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000001b40), 0x8) r12 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0xa}}]}, 0x40}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x18, 0x26, &(0x7f0000001940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x51389f07}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@alu={0x4, 0x0, 0x4, 0x8, 0x5, 0x6, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd173}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001a80)='GPL\x00', 0x6, 0x4e, &(0x7f0000001ac0)=""/78, 0x41000, 0x19, '\x00', r10, 0x0, r11, 0x8, &(0x7f0000001b80)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001bc0)=[r6, r4], &(0x7f0000001c00)=[{0x3, 0x4, 0x7, 0x2}, {0x3, 0x3, 0xc}, {0x1, 0x4, 0x1, 0x1}, {0x1, 0x1, 0xb, 0x4}, {0x3, 0x3, 0xb, 0x3}, {0x5, 0x1, 0x7, 0xc}, {0x5, 0x4, 0x8}], 0x10, 0x1}, 0x90) r13 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_lsm={0x1d, 0x1d, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@generic, @ringbuf_query, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffa}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}, @map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000800)='syzkaller\x00', 0xffff, 0xce, &(0x7f0000000840)=""/206, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000980)={0x2, 0x5, 0x1, 0x80000000}, 0x10, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000009c0)=[0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000a00)=[{0x2, 0x5, 0xa, 0x8}, {0x0, 0x5, 0x2, 0x6}, {0x4, 0x2, 0xb, 0x2}, {0x2, 0x5, 0x7, 0xc}], 0x10, 0x5}, 0x90) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b00)={0x0, 0x8, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x17, &(0x7f0000000ec0)=ANY=[@ANYRESHEX=r4, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000030000007b8af856fffc020000000000000000000007020000f8ffffffb703000008000000000400000300000085000000820000009500000000000000863934250bdc4b0688"], &(0x7f0000000180)='syzkaller\x00', 0xed95, 0xe8, &(0x7f0000000240)=""/232, 0x41000, 0x60, '\x00', r10, 0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x3, 0x7, 0x5, 0x7}, 0x10, 0xffffffffffffffff, r13, 0x8, &(0x7f0000000b40)=[r14], &(0x7f0000000b80)=[{0x4, 0x3, 0xb, 0x8}, {0x4, 0x3, 0x1, 0x2}, {0x4, 0x4, 0xf, 0xc}, {0x5, 0x3, 0x6, 0x3}, {0x4, 0x4, 0x8, 0x6}, {0x5, 0x3, 0x6, 0x3}, {0x3, 0x1, 0xa, 0x9}, {0x4, 0x1, 0x4}], 0x10, 0x1}, 0x90) 1.91361328s ago: executing program 4: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpu.stat\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) setsockopt$ax25_int(r1, 0x101, 0xd, &(0x7f0000000000)=0xfffc, 0x4) 1.695083434s ago: executing program 4: r0 = socket$packet(0x11, 0x3, 0x300) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x85, 0x0, 0x0) getsockopt$packet_int(r0, 0x107, 0x17, 0x0, &(0x7f0000000140)) 1.678745151s ago: executing program 3: socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET_CTRZERO(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000020701020000000000000000d251bddec50a0ae7a1805699e900000000"], 0x14}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000004d00)={0x0, 0x0, &(0x7f0000004cc0)={&(0x7f0000002480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58010000000a010400000000000000000500000a08000240000000000c000440000000000800000508000240000000010c0004400000000000000003f70006002d24f702cdab0eb69b86ebe3d60eeeb04218761ee39e32def64a0e18d2eff651b0a5080887c58c443c278c0d0d49b32f3be127a5ab6be473e1adc3b04964a753f8f4bfc0968794edfb513cc6c587d9b67dbdeeb94d37a8b563e0e4c63d5706681b8d30aaabb4be3fad7dc8b5714df0c9e89789f2665b4324e09ecd3bfd7f71ef1305948f9fd59a10cc5b6c129c7b6e748f4dec7488b3b24982ef533f21d2dacf0504000000add402133ed41e01904073b2bde6c20916c2537f55603f708ca10d1867f604b34f70726e667f95b062d72865f3a4db564f11e415aa55534298382ba88f8b45fae0bd91e3a026779e6472988fe765000900010073797a31000000000900010073797a30000000000900010073797a31000000005c000000030a030000000000000000000500000008000a40000000020900030073797a30000000000900010073797a31000000002800048008000240000000031400030076657468310000000000000000000000080001"], 0x1dc}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000caefb8)={0x8, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="850000006100000054000000000000009500000000000000b4a8b1541206000000e9c79077fa15ba36eca61299de54cf77c9062c30bc068829afff36b31fa7e358e95cfa"], &(0x7f0000281ffc)='GPL\x00'}, 0x48) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f00000001c0)={r4, @in={{0x2, 0x0, @empty}}, 0xfffffffe, 0x0, 0x0, 0x0, 0x4d}, 0x9c) bpf$BPF_PROG_TEST_RUN(0x1c, 0x0, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x8901, &(0x7f0000001300)='veth1_to_team\x00') bind$netlink(0xffffffffffffffff, &(0x7f0000000980)={0x10, 0x0, 0x25dfdbff}, 0xc) bind$netlink(0xffffffffffffffff, &(0x7f0000000080)={0x10, 0x0, 0x25dfdbff, 0x1}, 0xc) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000300"/24], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x8, 0x4, 0x4, 0xffffffff, 0x814}, 0x48) ioctl$sock_SIOCSIFBR(r1, 0x8941, &(0x7f0000001200)=@get={0x1, &(0x7f00000011c0)=""/23, 0x2}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00'}) unshare(0x20000400) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000800000000000000000000000850000002700000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map=r7, r8, 0x5}, 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000400)={@map=r7, r8, 0x5, 0x0, 0x0, @prog_id}, 0x20) sendmsg$nl_route_sched(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@newtaction={0xe6c, 0x30, 0x25, 0x0, 0x0, {}, [{0xe58, 0x1, [@m_pedit={0xe54, 0x1, 0x0, 0x0, {{0xa}, {0xe28, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x4}, @TCA_PEDIT_PARMS_EX={0xe20, 0x4, {{{}, 0x2}, [{}, {}, {}, {}, {0x0, 0x0, 0x0, 0xfffffffc}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xffff}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x0, 0x401}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x3}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x1}, {}, {}, {}, {}, {}, {0x0, 0x0, 0xfffffffc}, {0x0, 0x8}, {}, {}, {0xfffffffb}, {}, {}, {}, {}, {}, {0x1f}, {}, {}, {}, {}, {0x0, 0x0, 0x0, 0x0, 0x27}, {}, {}, {}, {}, {}, {}, {}, {0x0, 0x3ff}], [{0x4}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x5}, {}, {0x2}, {0x1}, {}, {}, {0x0, 0x1}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {}, {0x2}]}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xe6c}}, 0x0) r9 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x4c0000, 0x0) ioctl$TUNSETIFF(r9, 0x400454ca, &(0x7f0000001180)={'bond0\x00', 0x1000}) 1.619909463s ago: executing program 1: socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x803, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0xe, 0x16, &(0x7f0000001ec0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x18, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) socket$nl_generic(0x10, 0x3, 0x10) epoll_create1(0x0) epoll_create1(0x0) epoll_create1(0x0) socket(0x2, 0xa, 0x0) socket(0x1d, 0x5e2cb10e2938eb3f, 0x6) socket$rxrpc(0x21, 0x2, 0xa) socket(0x10, 0x803, 0x0) r0 = accept4$packet(0xffffffffffffffff, &(0x7f0000000400)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000600000000040000000000009500000000000000676c28fce162372823a2b290"], &(0x7f0000000100)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_DAT_CACHE(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="1327f3a215869c0a0a836e729644469c0829947716eb9276515f16552ba6e5c594bf44901abc3c3a2e89707e3bfe4d6f52a81f8b894aab16ab18ddd0c3ccf587d3", @ANYRES16=r3, @ANYBLOB="050300000000000000000b000000"], 0x14}}, 0x0) setsockopt$packet_fanout(r0, 0x107, 0x12, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="1fe8ffff0000000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="21003300d0800000080211000000080211000001505050505050000000000000", @ANYBLOB="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"], 0x40}}, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 1.553457072s ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$l2tp6(0xa, 0x2, 0x73) connect$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}, 0x20) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000000)={'filter\x00', 0x4, 0x4, 0x3e8, 0x200, 0x200, 0x200, 0x300, 0x300, 0x300, 0x4, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2}}, {@mac}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}, {{@uncond, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz0\x00', 0x0, 0x2}}}, {{@arp={@multicast1, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_vlan\x00', 'ipvlan1\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00', 0x2, 0x4}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x438) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x4, 0x4}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="18000000000000000000000042a8000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000fcffffff7b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='ext4_ext_remove_space_done\x00', r4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.current\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000100), 0x1001) ioctl$SIOCSIFHWADDR(r5, 0x4030582b, &(0x7f0000000280)={'lo\x00', @link_local={0x1, 0x80, 0xc2, 0xc, 0x8}}) r6 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_ENABLE(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000080)={0x18, r6, 0x10, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x4}]}, 0x18}, 0x1, 0x300}, 0x40000) 1.480801997s ago: executing program 3: socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$netlink(0x10, 0x3, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000001400)=[{&(0x7f0000000780)="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", 0x1a0}], 0x1}, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000240)=@bridge_newneigh={0xfffffffffffffc4b, 0x1c, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x2}, [@NDA_DST_IPV6={0x14, 0x1, @private0}, @NDA_LLADDR={0xa, 0x2, @local}]}, 0x3c}}, 0x8890) r1 = socket$rds(0x15, 0x5, 0x0) bind$rds(r1, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000000200)={0x0, 0x0, 0x207}, 0x20) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000140)={0x0, @in6={{0xa, 0x4e22, 0x4a33, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x10001}}, 0x0, 0x1, 0x3f8, 0x0, 0x23, 0x1}, 0x9c) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r2, &(0x7f0000004900)=[{{0x0, 0x0, &(0x7f0000000780)=[{&(0x7f0000000700)="af", 0x4101}], 0x1}}, {{0x0, 0x0, &(0x7f00000009c0)=[{&(0x7f0000000240)="bda033176eb146b36ef41f221a4e7ce4a02598d750606488520915c6806affc0a913781c7211ce1fcd59a12b5d5afdaf9d723f092ce9d1eed16e208f2e79831ca049e8979ad94621175c2c48c10e33b29f2def51498743b057efc21efe4be4d9f02e9d236f27190c29c5da0f3799452f5e3640340502fde4ae8c56b303e1b79b3d1842bf6277e7efdd1c619f69b9d01839aa326776d335689e4db7cb7e32fad8f4c40e943b43eb4ea173d720bf5998149625a731643636c8ddbe61e1d7d4736f8414a84acc40557012c82697d8a59c873424aefb3c7ff0dba302efaaf887a477b1ab7ea6c1def9db3514e444c1ef36c6cf42cde90d4bbb2e923a5d16a1bb191ad91cab867cd55037d507a12803f3df1b81f1857fad085dbc5c46aac14230d7a4f8b36d6bc63b4a16cd309b7697b421a662b83001b5ce5ab3ff80800243107df7aa6cae9a5db6a8f2a53ef7d6c6aeac76b83a15466c74a9cdbcde8505e3d14c0c3a47a36bf464168202dc88e25f4c1da57faf0eaa7ff16bdd751c2ae5778e169c8ffba57c9a20e24ad51e6e8e02b721e8ca94f131cc98e03b34b615a1db4080362de4ef215d5a0541aeb0c742a2636ac5af8538ceb3585ef9dca8037df55baa072096073b005b53eff0b899de59bc2b5d687d109520571eeacb30124c4012fe6cb9e3bf451be3d21998000000099101533cff5aee6c4783e00e6dd391f664052a6c66c62f62a49fde8fbe336543bf99b55e53b801e54c1d0a292da83db26a8a870ac1d8751c4bc0d495277295cd3a17f9e9a25d70214a17b981b62d5c75356ed025df3557a8b59648edd9d1dbdf169d91f9d85cfac11a57db0a14f03e8934a2cc98d389912a0d9942a40c3ee98d35da61d3bab1a32c9d788e9f74ee57012ca5bfd0dc090b591c64aae6a205fbd349fc372bbd7429983a69cae26ff8b5b019144d318ba225e46bc6cf8d7d3e5952333042542b2fd4fb4d88a3651dd8e14ecc2845d4e71f7dfd128e9e2ee2ab0062a3e701bb2477bfd73d7396ae522f11fa481078d1c7f7905e0846fb072dcf7c06102b3816ec4a3518514c7166d7385b680469f5184a93953258952554e68d93ea8f789c4f13982b65996d7d9cf19f0b39b72e1dc9079d84413bbc30d24fc481e24ef1beacb8bc15f50c2663d684d16a1c71b2c8a568481f4f1b254ccd66fbef4cacfc3e13f2c943a264e429824bef7297f93076aea55ed9cf12512ce3ac3df331695024bd1e53369a87caf6894fce811a64dad315402678de7600"/912, 0x390}], 0x1}}], 0x2, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="a5ffad8800000000140012800b0001006970766c616e000004000280080005"], 0x44}}, 0x0) sendmsg$rds(r1, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$rds(r1, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CONG_MONITOR(r1, 0x114, 0x6, &(0x7f0000000100)=0x1, 0x4) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_crypto(0x10, 0x3, 0x15) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000040), 0x208e24b) r5 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) connect$llc(r5, &(0x7f00000001c0)={0x1a, 0x0, 0x0, 0x8, 0x0, 0x0, @dev}, 0x10) recvmmsg(r5, &(0x7f00000005c0)=[{{0x0, 0xe8, 0x0, 0x0, 0x0, 0x0, 0xffffffff00003f00}}], 0x4000000000001db, 0x0, 0x0) sendfile(r5, r4, 0x0, 0xffefffff) 1.431340154s ago: executing program 4: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000000c0)=@polexpire={0xcc, 0x1b, 0x319516ae726afe1b, 0x0, 0x0, {{{@in6=@private1}}}, [@sec_ctx={0xc, 0x8, {0x8}}]}, 0xcc}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$inet_dccp(0x2, 0x6, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000500)=@raw={'raw\x00', 0x8, 0x3, 0x2b0, 0xc8, 0xffffffff, 0xffffffff, 0xc8, 0xffffffff, 0x1e0, 0xffffffff, 0xffffffff, 0x1e0, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xa8, 0xc8, 0x60030000, {0x0, 0xff000000}}, @unspec=@TRACE={0x20}}, {{@ipv6={@rand_addr=' \x01\x00', @ipv4={'\x00', '\xff\xff', @remote}, [], [], 'wg2\x00', 'team_slave_1\x00'}, 0x0, 0xf8, 0x118, 0x0, {}, [@common=@unspec=@connlabel={{0x28}, {0x7fff}}, @common=@inet=@set2={{0x28}}]}, @unspec=@TRACE={0x20}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x310) setsockopt$inet6_dccp_int(0xffffffffffffffff, 0x21, 0x2, &(0x7f0000000000)=0xff, 0x4) ioctl$INCFS_IOC_CREATE_FILE(r1, 0xc058671e, &(0x7f0000000300)={{'\x00', 0x2}, {0x400}, 0x4, 0x0, 0x0, &(0x7f0000000080)='./file0\x00', &(0x7f0000000100)='./file0\x00', &(0x7f00000001c0)="803538d5eb755e56e18700f77ccfafe2ff52c503f39d68b33bfbb3b57050178e1f8d3f237c920b52649d769482a4cbdd88cbd242f2b245f3489ba0673a84fff9095a75bd52200b0376504179338c7c362ecda71734ff6fd8289e9bbbe8edb389965790f4c58646a762084acd7c7a96f5e9f8a024c3dce9c2509385d9636f195b779b1783852960fa68183fda4f4b1067c2d7833284ccba62bdd29d3049fb4e9501c9d25823eb4df39fa88fb3f6cf3c44254a89ca6a25a7fa12c278ec2c99121971c54988723619bd19bc509f0a30cf63e37ea8385f4c012aa1473f7ef6400315f277c12316f74053d503399b139d7def56e15c20ce2294f5a8e724f92b27c7bfa2ae4b6c3f9c71490ea5ac8d98", 0x10d, 0x0, &(0x7f0000000440)={0x2, 0x143, {0x1, 0xc, 0xf9, "c9bbf76b66a888768f726545f1c732934d79f683a98f395c157b1f2452a78a9d6ee00a362d47386f444be9791b2382193da0539a270f8b1408dcbb2e31a4db9216e8cb94f9bf031964cacd870513993792d0d54e62c17c9fa6054e644914622de035c961a6965f162f33e19b204d09882f3d8593811c7fcef14c2296305db1007c100e5e41b52537cdc52145d09909afdac0fd48d1c23d5cd98857feacbf814719226a156b29c94c8876529aaf3fe0ed1a24a70bd516eb6831762a78ec3b7aa939cfdbf68571bb965ffe8be550e5705aae40bc2f7e03fd7e32d970f7f2e3056ab5ca117a62133b0bc8199d417c64f7b9afd02b2d953d759bd9", 0x3d, "04c83479b0d54eea17c6adae1635f079e835e95607e7734df40e0d9e7624d6579ad4ee239b338e9ccb174d44832a71256fa8d0296cc3222358e26a30cf"}, 0x19, "5bdeb31ad700acef96eec5c22c9f65cd013c646a7ac708753e"}, 0x168}) socket$packet(0x11, 0x3, 0x300) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) setsockopt$inet6_tcp_buf(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000080), 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) ioctl$int_in(r2, 0x5452, &(0x7f0000000400)=0x9) connect$inet(r2, &(0x7f0000e5c000)={0x2, 0x0, @local}, 0x10) 1.40954925s ago: executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r1, r0, 0x26}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r1, &(0x7f0000000940), &(0x7f0000000a40)=@udp=r3}, 0x20) 1.301584351s ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[], 0x5c}}, 0x0) 1.228463955s ago: executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r0, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r0, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0x116d962d5f73552, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r0, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000c00)=""/4111, 0xd80}], 0x2}}], 0x1, 0x122, 0x0) sendmsg$inet(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000380)='U', 0x1}], 0x1}, 0x0) 478.719003ms ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r0, &(0x7f0000d84000)={0xa, 0xfffe, 0x4, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000080)={'wg1\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="7e395cb3184501000000000000000000010000003400088030000080080003000000000024000100c58f4106a798f9cc3dc957630e5493c285aca40065cb6311bea89600f9e88ae4441a9346e74fa775726d00"/98, @ANYRES32=r4, @ANYBLOB], 0x50}}, 0x0) r5 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x18, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="d401000010000000e4413b35beff6bfde105b126ba0b1800000000000000000000000000000095"], &(0x7f0000000240)='syzkaller\x00', 0x5, 0x0, 0x0, 0x41000, 0x5, '\x00', r4, 0x0, r5, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffca6}, 0x90) r6 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r6, 0x89f1, &(0x7f0000000140)={'sit0\x00', &(0x7f0000000200)={'syztnl1\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x5, 0x4, 0x0, 0x0, 0x14, 0x0, 0x0, 0x0, 0x29}}}}) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'rose0\x00'}) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, 0x0, 0x0) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x4000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x3e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r8}, 0x10) r9 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r9, 0x0) recvmmsg(r9, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2000000, 0x12, r10, 0x0) setsockopt$inet6_IPV6_RTHDR(r0, 0x29, 0x39, &(0x7f0000000080)={0x2b, 0x2, 0x2, 0x3b, 0x0, [@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, 0x18) socket$nl_route(0x10, 0x3, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000100)=""/177, 0xb1}], 0x1}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) 358.681876ms ago: executing program 3: r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000440)={@map=0x1, 0xffffffffffffffff, 0x18, 0xc, 0xffffffffffffffff, @prog_id}, 0x20) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(0xffffffffffffffff, 0x84, 0x12, &(0x7f0000000000), &(0x7f0000000040)=0x4) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000240)='htcp\x00', 0xfedd) sendto$inet(r0, &(0x7f0000000180)='{', 0x1, 0x0, 0x0, 0x0) sendmmsg$inet(r0, &(0x7f00000021c0), 0x2, 0x4000851) 262.552779ms ago: executing program 1: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x4, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x1d, &(0x7f0000000dc0)=@raw=[@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x40}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @printk={@llx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x1}}, @btf_id={0x18, 0x8, 0x3, 0x0, 0x2}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x538}, @cb_func={0x18, 0x6, 0x4, 0x0, 0xfffffffffffffff9}, @map_idx_val={0x18, 0x3, 0x6, 0x0, 0x6, 0x0, 0x0, 0x0, 0x3}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @map_idx={0x18, 0x8, 0x5, 0x0, 0x7}], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1}, &(0x7f0000000200), &(0x7f00000002c0)=r1}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r0, 0x58, &(0x7f0000000380)}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "1391e9", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x8, 0x3, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r4}, 0x20) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r7}, &(0x7f0000000100), &(0x7f00000000c0)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xac, &(0x7f0000000480)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xbb, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000001b40), 0x8) r12 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0xa}}]}, 0x40}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x18, 0x26, &(0x7f0000001940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x51389f07}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@alu={0x4, 0x0, 0x4, 0x8, 0x5, 0x6, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd173}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001a80)='GPL\x00', 0x6, 0x4e, &(0x7f0000001ac0)=""/78, 0x41000, 0x19, '\x00', r10, 0x0, r11, 0x8, &(0x7f0000001b80)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001bc0)=[r6, r4], &(0x7f0000001c00)=[{0x3, 0x4, 0x7, 0x2}, {0x3, 0x3, 0xc}, {0x1, 0x4, 0x1, 0x1}, {0x1, 0x1, 0xb, 0x4}, {0x3, 0x3, 0xb, 0x3}, {0x5, 0x1, 0x7, 0xc}, {0x5, 0x4, 0x8}], 0x10, 0x1}, 0x90) r13 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_lsm={0x1d, 0x1d, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@generic, @ringbuf_query, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffa}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}, @map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000800)='syzkaller\x00', 0xffff, 0xce, &(0x7f0000000840)=""/206, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000980)={0x2, 0x5, 0x1, 0x80000000}, 0x10, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000009c0)=[0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000a00)=[{0x2, 0x5, 0xa, 0x8}, {0x0, 0x5, 0x2, 0x6}, {0x4, 0x2, 0xb, 0x2}, {0x2, 0x5, 0x7, 0xc}], 0x10, 0x5}, 0x90) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b00)={0x0, 0x8, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x17, &(0x7f0000000ec0)=ANY=[@ANYRESHEX=r4, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000030000007b8af856fffc020000000000000000000007020000f8ffffffb703000008000000000400000300000085000000820000009500000000000000863934250bdc4b0688"], &(0x7f0000000180)='syzkaller\x00', 0xed95, 0xe8, &(0x7f0000000240)=""/232, 0x41000, 0x60, '\x00', r10, 0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x3, 0x7, 0x5, 0x7}, 0x10, 0xffffffffffffffff, r13, 0x8, &(0x7f0000000b40)=[r14], &(0x7f0000000b80)=[{0x4, 0x3, 0xb, 0x8}, {0x4, 0x3, 0x1, 0x2}, {0x4, 0x4, 0xf, 0xc}, {0x5, 0x3, 0x6, 0x3}, {0x4, 0x4, 0x8, 0x6}, {0x5, 0x3, 0x6, 0x3}, {0x3, 0x1, 0xa, 0x9}, {0x4, 0x1, 0x4}], 0x10, 0x1}, 0x90) 165.030849ms ago: executing program 2: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x4, 0x4, 0x8}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0x0, 0x0, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x36, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{0x1}, &(0x7f0000000200), &(0x7f00000002c0)=r1}, 0x20) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000400)={r0, 0x58, &(0x7f0000000380)}, 0x10) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r3, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000000c0)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "1391e9", 0x14, 0x6, 0x0, @ipv4={'\x00', '\xff\xff', @broadcast}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0xc2}}}}}}}, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x7, 0x4, 0x8, 0x3, 0x0, 0x1}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r4}, 0x20) r5 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000005c0)={0x1b, 0x0, 0x0, 0x0, 0x0, 0x1, 0xffff, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0x8}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0xd, &(0x7f00000000c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0xb1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r9}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r7}, &(0x7f0000000100), &(0x7f00000000c0)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000680)={0xffffffffffffffff, 0xe0, &(0x7f0000000f40)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0), ""/16, 0x0, 0x0, 0x0, 0x0, 0x2, 0x8, &(0x7f0000000340)=[0x0, 0x0], &(0x7f0000000440)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0xac, &(0x7f0000000480)=[{}, {}, {}], 0x18, 0x10, &(0x7f00000004c0), &(0x7f0000000500), 0x8, 0xbb, 0x8, 0x8, &(0x7f0000000540)}}, 0x10) r11 = bpf$ITER_CREATE(0x21, &(0x7f0000001b40), 0x8) r12 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0xa}}]}, 0x40}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001c80)={0x18, 0x26, &(0x7f0000001940)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x51389f07}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@alu={0x4, 0x0, 0x4, 0x8, 0x5, 0x6, 0x1}, @func={0x85, 0x0, 0x1, 0x0, 0x1}, @printk={@li, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xd173}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000001a80)='GPL\x00', 0x6, 0x4e, &(0x7f0000001ac0)=""/78, 0x41000, 0x19, '\x00', r10, 0x0, r11, 0x8, &(0x7f0000001b80)={0x4, 0x2}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000001bc0)=[r6, r4], &(0x7f0000001c00)=[{0x3, 0x4, 0x7, 0x2}, {0x3, 0x3, 0xc}, {0x1, 0x4, 0x1, 0x1}, {0x1, 0x1, 0xb, 0x4}, {0x3, 0x3, 0xb, 0x3}, {0x5, 0x1, 0x7, 0xc}, {0x5, 0x4, 0x8}], 0x10, 0x1}, 0x90) r13 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_lsm={0x1d, 0x1d, &(0x7f0000000700)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x80, 0x0, 0x0, 0x0, 0x1}, {}, {}, [@generic, @ringbuf_query, @btf_id={0x18, 0x9, 0x3, 0x0, 0x4}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffffa}, @map_idx_val={0x18, 0xb, 0x6, 0x0, 0xa, 0x0, 0x0, 0x0, 0x1}, @map_val={0x18, 0x3, 0x2, 0x0, 0x1, 0x0, 0x0, 0x0, 0x9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x1}]}, &(0x7f0000000800)='syzkaller\x00', 0xffff, 0xce, &(0x7f0000000840)=""/206, 0x41000, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f0000000940)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000980)={0x2, 0x5, 0x1, 0x80000000}, 0x10, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000009c0)=[0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000a00)=[{0x2, 0x5, 0xa, 0x8}, {0x0, 0x5, 0x2, 0x6}, {0x4, 0x2, 0xb, 0x2}, {0x2, 0x5, 0x7, 0xc}], 0x10, 0x5}, 0x90) r14 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000b00)={0x0, 0x8, 0x10}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x6, 0x17, &(0x7f0000000ec0)=ANY=[@ANYRESHEX=r4, @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000030000007b8af856fffc020000000000000000000007020000f8ffffffb703000008000000000400000300000085000000820000009500000000000000863934250bdc4b0688"], &(0x7f0000000180)='syzkaller\x00', 0xed95, 0xe8, &(0x7f0000000240)=""/232, 0x41000, 0x60, '\x00', r10, 0x5, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000006c0)={0x3, 0x7, 0x5, 0x7}, 0x10, 0xffffffffffffffff, r13, 0x8, &(0x7f0000000b40)=[r14], &(0x7f0000000b80)=[{0x4, 0x3, 0xb, 0x8}, {0x4, 0x3, 0x1, 0x2}, {0x4, 0x4, 0xf, 0xc}, {0x5, 0x3, 0x6, 0x3}, {0x4, 0x4, 0x8, 0x6}, {0x5, 0x3, 0x6, 0x3}, {0x3, 0x1, 0xa, 0x9}, {0x4, 0x1, 0x4}], 0x10, 0x1}, 0x90) 19.798617ms ago: executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r1, r0, 0x26}, 0x10) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @local}}}, 0x32) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000a80)={r1, &(0x7f0000000940), &(0x7f0000000a40)=@udp=r3}, 0x20) 0s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) r2 = accept(r1, &(0x7f0000000080)=@tipc=@id, &(0x7f0000000100)=0x80) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000440)={'syztnl1\x00', 0x0, 0x4, 0x1f, 0x4, 0x6, 0x28, @dev={0xfe, 0x80, '\x00', 0x24}, @dev={0xfe, 0x80, '\x00', 0x3c}, 0x8, 0x8000, 0x1, 0x6}}) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000580)={'syztnl1\x00', &(0x7f0000000500)={'erspan0\x00', 0x0, 0x700, 0x8000, 0x6, 0x5, {{0x16, 0x4, 0x1, 0x0, 0x58, 0x66, 0x0, 0x7, 0x2f, 0x0, @empty, @local, {[@timestamp_addr={0x44, 0x24, 0x33, 0x1, 0x3, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fff}, {@dev={0xac, 0x14, 0x14, 0x3e}, 0xf738}, {@remote, 0x8001}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}]}, @timestamp_prespec={0x44, 0x14, 0xa, 0x3, 0x7, [{@loopback, 0x401}, {@dev={0xac, 0x14, 0x14, 0x1d}, 0x101}]}, @generic={0x94, 0x9, "6e51a6252ba55c"}]}}}}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000005c0)={'bond_slave_0\x00', 0x0}) getpeername$packet(r2, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000640)=0x14) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f00000006c0)={'tunl0\x00', &(0x7f0000000680)={'syztnl1\x00', 0x0, 0x8, 0x10, 0x5, 0x9f0c, {{0x6, 0x4, 0x1, 0x8, 0x18, 0x65, 0x0, 0xc0, 0x4, 0x0, @empty, @rand_addr=0x64010101, {[@end]}}}}}) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r9, 0x8933, &(0x7f0000000180)={'batadv_slave_0\x00', 0x0}) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000600)=@ipv6_newroute={0x38, 0x18, 0x105, 0x0, 0x0, {}, [@RTA_OIF={0x8, 0x4, r10}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x3}, @RTA_ENCAP={0xc, 0x16, 0x0, 0x1, @SEG6_LOCAL_ACTION={0x8}}]}, 0x38}}, 0x0) r12 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000080)=@newqdisc={0x40, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r14, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x4}}]}, 0x40}}, 0x0) getsockopt$inet6_mreq(r1, 0x29, 0x1c, &(0x7f0000000700)={@local, 0x0}, &(0x7f0000000740)=0x14) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000000f00)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000ec0)={&(0x7f0000000780)={0x724, 0x0, 0x2, 0x70bd28, 0x25dfdbff, {}, [@ETHTOOL_A_FEATURES_HEADER={0x70, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'virt_wifi0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}]}, @ETHTOOL_A_FEATURES_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r8}]}, @ETHTOOL_A_FEATURES_WANTED={0x240, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x66, 0x4, "f795c771773a86c8accf9a1d027321e09a71aa38f3533dcbb242673fd8f31fb4a0f165c008db8c1454be55da8336f2e0c30e9df937018feda68711a8c7e6b79c48ccf7c86965b86f196a503d4aa051b03c0b5b13a3cd9335f1fa097a9d8aa66ec921"}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0xe, 0x5, "31120bfe6fb64257693b"}, @ETHTOOL_A_BITSET_BITS={0xfc, 0x3, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '*,\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3f}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x4c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0xb, 0x2, '*[%\\)-\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x9, 0x2, '[+&/\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xf23}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_MASK={0xb8, 0x5, "c69da66d16535563137f26a03cb7c9a55f640261b2e5300e81981a0e61dcdb0f865bb82f75bad9eb9a4b8cff85b263cc99d02180fab60180274ba0c8db493fbc4e8c3bfca9bf11acdb65aebb861bed43937f13b156c2b3b518ae5a982a8ff1a2ccd9466207081215a264c6aae29081a36f522e2c6c8023c28cfac4aceb7c7979290d96b3604edb9f2f9d964b7b80cbde3eb5088e5cd5b536a1438ab45c7935cfdf70589f0d2db80b42e3e1d06a61eb33d4f21586"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x401}]}, @ETHTOOL_A_FEATURES_HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r14}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r15}]}, @ETHTOOL_A_FEATURES_WANTED={0x288, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_MASK={0x8a, 0x5, "1843409ec0cffe21c0a3cf7b56f8c608b73247bb9bd530ca8d55848b0d4a0944960e2a16decee18fd71741524d0938c53545df4e951f4635d95ea079603d21487d8b9dc45b8a1925172b64139cfca2cd4c7ff03aaa51134af5cba9bce27d08bcd94bbbef6ae02cf92c9855584aed05bec2403ab3cbf736ad627b5bc6dd9f59263ebf622b03c2"}, @ETHTOOL_A_BITSET_VALUE={0xa2, 0x4, "e0ad38744aae3d18615751e43d0eec83dd6fb377a14f5c1a868b0af705d77161c027cdc064bf325f5e0350e3eeed1748f74f32cc8f8ae7a4ddc269618fb88c060b220932d73c756226785eaade3df608fd8c71e4548b162baf4d6d1af6805530829284363bd22660fa03461b0925d662d68a4e068e5626418d3355404ac5118e356f94c6a932e22f06b61f2db3c099b6122d4909c906a595d1c710a8c74a"}, @ETHTOOL_A_BITSET_BITS={0x78, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x16, 0x2, '(\xc9:.\']d$-\')\'&+/)[\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}]}, {0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, '[\\%\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xbb}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x48, 0x5, "442e6de75cf564e1299389c6f28c17b4526180569dba560445fc10e72261c4a76f9a6a2b264c6d0d41528b31beee59039d5ba53db369d186d377bbf56e1f50fc7621f0a2"}, @ETHTOOL_A_BITSET_BITS={0x90, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x401}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xa1ec}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x8000}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x1}]}, {0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, 'wlan1\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}]}]}, @ETHTOOL_A_FEATURES_WANTED={0x60, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x5a, 0x4, "93af90f1d7c0b07c4257d012d161d1c1fc4b9a0128c67fdd6829813c596a3a641758cae2e5e1791722ac5738f1b85ee224c5a9bc43468064148b5d8782731e9ba0dad1dd72d69cb0c2642c143243be8cdab8aab33158"}]}, @ETHTOOL_A_FEATURES_WANTED={0x8, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}]}, @ETHTOOL_A_FEATURES_WANTED={0x118, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x34, 0x3, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x4}]}, {0x24, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x81}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0xffff8000}]}, {0x4}]}, @ETHTOOL_A_BITSET_BITS={0xac, 0x3, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x7, 0x2, '@$\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x9}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}]}, {0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x3}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x815}, @ETHTOOL_A_BITSET_BIT_NAME={0xe, 0x2, 'ip6erspan\x00'}]}, {0x8, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x10, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xa, 0x2, '+*,-:\x00'}]}, {0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0xc, 0x2, 'nl80211\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x6}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x2}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x938}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_MASK={0x1d, 0x5, "5bca9bef155c5173da7948abdb6c4ceab0ae769fb38062abab"}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x1}]}]}, 0x724}, 0x1, 0x0, 0x0, 0x2400c0c4}, 0x4) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_MESH_CONFIG(r2, &(0x7f0000000340)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x28, r3, 0x8, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8, 0x3, r16}, @val={0xc, 0x99, {0x1ff, 0x18}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x84}, 0x40000) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x0, 0x0, @dev, 0xd}, 0x1c) bind$inet(r2, &(0x7f0000000380)={0x2, 0x4e23, @multicast1}, 0x10) ioctl$sock_SIOCINQ(r1, 0x5411, &(0x7f00000002c0)) r17 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r17, &(0x7f0000000200)={0x1f, 0xffff, 0x4}, 0x6) recvmmsg(r17, &(0x7f0000000600), 0x204083acb88ff8b, 0x0, 0x0) r18 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r18, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000001300012c9dff7f84d913e90002"], 0x14}], 0x1}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x30, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x14, 0x5, @loopback}, @IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x50}}, 0x0) kernel console output (not intermixed with test programs): 06.172683][T12471] dummy0: entered allmulticast mode [ 306.189902][T12471] dummy0: entered promiscuous mode [ 306.205123][T12471] bridge0: port 3(dummy0) entered blocking state [ 306.211714][T12471] bridge0: port 3(dummy0) entered forwarding state [ 306.768626][T12508] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 306.812105][T12508] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'. [ 307.045013][T12523] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 307.063501][T12523] dummy0: left allmulticast mode [ 307.073963][T12523] dummy0: left promiscuous mode [ 307.093913][T12523] bridge0: port 3(dummy0) entered disabled state [ 307.168708][T12523] bridge_slave_1: left allmulticast mode [ 307.174477][T12523] bridge_slave_1: left promiscuous mode [ 307.209857][T12523] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.265935][T12523] bridge_slave_0: left allmulticast mode [ 307.274465][T12523] bridge_slave_0: left promiscuous mode [ 307.310094][T12523] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.816103][T12568] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 308.495020][T12602] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 309.112366][T12634] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 309.132252][T12634] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 309.776289][T12667] veth1_macvtap: left promiscuous mode [ 309.796205][T12667] macsec0: entered allmulticast mode [ 310.365415][T12691] tipc: Cannot configure node identity twice [ 310.760187][T12704] Bluetooth: hci3: invalid length 0, exp 2 for type 12 [ 310.830981][T12708] netlink: 236 bytes leftover after parsing attributes in process `syz-executor.2'. [ 310.878407][T12704] macvlan2: entered allmulticast mode [ 310.901942][T12704] team0: Port device macvlan2 added [ 310.996597][T12715] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 311.890725][T12759] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 311.960509][T12759] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 312.084310][T12774] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 312.104005][T12774] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 312.233103][T12781] netlink: 9412 bytes leftover after parsing attributes in process `syz-executor.3'. [ 313.539621][T12835] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 313.573386][T12835] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 314.015821][T12859] EXT4-fs warning (device sda1): ext4_group_extend:1861: can't shrink FS - resize aborted [ 314.906732][T12894] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 314.960879][T12903] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 315.065728][T12894] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.098222][T12903] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 315.223343][T12894] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.361174][T12894] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.580545][T12894] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.650882][T12894] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.736482][T12894] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.792027][T12894] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 316.149905][T12956] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 316.296066][T12969] ipt_ECN: cannot use operation on non-tcp rule [ 316.564785][T12980] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.587848][T12980] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 60767 - 0 [ 316.652076][T12989] tipc: Cannot configure node identity twice [ 316.882070][T12980] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.893746][T12980] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 60767 - 0 [ 316.939607][T12998] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 317.018675][T12998] team0: Port device dummy0 added [ 317.031735][T13006] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.3'. [ 317.041814][T12997] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 317.068233][T13004] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 317.136308][T12980] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.171198][T13011] xt_TPROXY: Can be used only with -p tcp or -p udp [ 317.178231][T12980] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 60767 - 0 [ 317.320972][T12980] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.366502][T12980] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 60767 - 0 [ 317.534695][T13028] team0: entered promiscuous mode [ 317.562715][T13028] team_slave_0: entered promiscuous mode [ 317.569981][T13028] team_slave_1: entered promiscuous mode [ 317.577790][T13028] dummy0: entered promiscuous mode [ 317.583248][T13028] macvlan2: entered promiscuous mode [ 317.602851][T13028] mac80211_hwsim hwsim30 wlan0: entered promiscuous mode [ 317.626597][T13028] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 317.651595][T13028] team0: left promiscuous mode [ 317.678599][T13028] team_slave_0: left promiscuous mode [ 317.687303][T13028] team_slave_1: left promiscuous mode [ 317.707053][T13028] dummy0: left promiscuous mode [ 317.712169][T13028] macvlan2: left promiscuous mode [ 317.720878][T13028] mac80211_hwsim hwsim30 wlan0: left promiscuous mode [ 317.827966][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 317.850276][T12980] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 60767 - 0 [ 317.862943][T12980] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 317.913607][T12980] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 60767 - 0 [ 317.956241][T12980] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 318.004511][T12980] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 60767 - 0 [ 318.033277][T12980] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 318.100802][T12980] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 60767 - 0 [ 318.131335][T12980] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 318.151761][T13055] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 318.214084][T13056] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 318.268882][T13064] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.3'. [ 318.285228][T13057] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 318.311570][T12969] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 60767 - 0 [ 318.324891][T12969] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 318.348618][T13063] netlink: 'syz-executor.3': attribute type 29 has an invalid length. [ 318.393327][T12969] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 60767 - 0 [ 318.413205][T12969] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 318.499455][T12969] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 60767 - 0 [ 318.532292][T12969] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 318.664247][T12969] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 60767 - 0 [ 318.692461][T12969] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 318.936678][T13088] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 318.958276][T13089] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.0'. [ 318.968308][T13088] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 319.077123][T13097] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 319.084775][T13091] netlink: 'syz-executor.3': attribute type 9 has an invalid length. [ 319.101161][T13097] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 319.115427][T13091] netlink: 209836 bytes leftover after parsing attributes in process `syz-executor.3'. [ 319.187515][T13097] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 319.236773][T13097] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 319.440814][T13112] netlink: 'syz-executor.2': attribute type 29 has an invalid length. [ 319.472721][T13112] netlink: 209844 bytes leftover after parsing attributes in process `syz-executor.2'. [ 319.660246][T13120] team0: entered promiscuous mode [ 319.678623][T13120] team_slave_0: entered promiscuous mode [ 319.695870][T13120] team_slave_1: entered promiscuous mode [ 319.704639][T13120] dummy0: entered promiscuous mode [ 319.710538][T13120] macvlan2: entered promiscuous mode [ 319.732473][T13120] mac80211_hwsim hwsim30 wlan0: entered promiscuous mode [ 319.744235][T13120] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 319.770804][T13120] team0: left promiscuous mode [ 319.777685][T13120] team_slave_0: left promiscuous mode [ 319.785461][T13120] team_slave_1: left promiscuous mode [ 319.802376][T13120] dummy0: left promiscuous mode [ 319.812390][T13120] macvlan2: left promiscuous mode [ 319.818200][T13120] mac80211_hwsim hwsim30 wlan0: left promiscuous mode [ 320.689995][T13181] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 321.034653][T13200] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 322.369200][T13264] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 322.759028][T13264] veth1_macvtap: entered promiscuous mode [ 323.008481][T13269] netlink: 664 bytes leftover after parsing attributes in process `syz-executor.0'. [ 323.355453][T12969] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 60767 - 0 [ 323.387898][T12969] netdevsim netdevsim4 eth0: set [1, 1] type 2 family 0 port 6081 - 0 [ 323.459710][T12969] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 60767 - 0 [ 323.487233][T12969] netdevsim netdevsim4 eth1: set [1, 1] type 2 family 0 port 6081 - 0 [ 323.544378][T12969] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 60767 - 0 [ 323.554295][T12969] netdevsim netdevsim4 eth2: set [1, 1] type 2 family 0 port 6081 - 0 [ 323.598214][T12969] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 60767 - 0 [ 323.623698][T12969] netdevsim netdevsim4 eth3: set [1, 1] type 2 family 0 port 6081 - 0 [ 323.826795][T13321] validate_nla: 1 callbacks suppressed [ 323.826814][T13321] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 323.869381][T13320] netlink: 664 bytes leftover after parsing attributes in process `syz-executor.4'. [ 323.895550][T13321] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 323.955163][T13313] netlink: 'syz-executor.2': attribute type 7 has an invalid length. [ 323.997820][T13313] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. [ 324.068125][T13325] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 324.765804][T13368] netlink: 664 bytes leftover after parsing attributes in process `syz-executor.2'. [ 324.785008][T13363] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 325.134677][T13388] sctp: [Deprecated]: syz-executor.2 (pid 13388) Use of int in max_burst socket option deprecated. [ 325.134677][T13388] Use struct sctp_assoc_value instead [ 325.238906][T13394] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 325.294200][T13394] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 40286 - 0 [ 325.337251][T13394] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 40286 - 0 [ 325.358698][T13394] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 40286 - 0 [ 325.385097][T13394] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 40286 - 0 [ 325.508055][T13406] netlink: 664 bytes leftover after parsing attributes in process `syz-executor.0'. [ 326.128766][T13441] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.138160][T13441] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.146919][T13441] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.155872][T13441] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 326.179195][T13441] vxlan0: entered promiscuous mode [ 326.196646][T13441] vxlan0: entered allmulticast mode [ 326.227458][T13441] netdevsim netdevsim2 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.236714][T13441] netdevsim netdevsim2 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.245766][T13441] netdevsim netdevsim2 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.254783][T13441] netdevsim netdevsim2 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 326.691886][T13472] sctp: [Deprecated]: syz-executor.1 (pid 13472) Use of int in max_burst socket option deprecated. [ 326.691886][T13472] Use struct sctp_assoc_value instead [ 326.787738][T13472] netdevsim netdevsim1 netdevsim0: set [1, 1] type 2 family 0 port 37980 - 0 [ 326.807931][T13472] netdevsim netdevsim1 netdevsim1: set [1, 1] type 2 family 0 port 37980 - 0 [ 326.825596][T13472] netdevsim netdevsim1 netdevsim2: set [1, 1] type 2 family 0 port 37980 - 0 [ 326.836437][T13472] netdevsim netdevsim1 netdevsim3: set [1, 1] type 2 family 0 port 37980 - 0 [ 327.615061][T13518] sctp: [Deprecated]: syz-executor.3 (pid 13518) Use of int in max_burst socket option deprecated. [ 327.615061][T13518] Use struct sctp_assoc_value instead [ 327.681750][T13518] __nla_validate_parse: 4 callbacks suppressed [ 327.681771][T13518] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 327.768281][T13518] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 53101 - 0 [ 327.785390][T13518] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 53101 - 0 [ 327.809364][T13518] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 53101 - 0 [ 327.860227][T13518] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 53101 - 0 [ 328.176272][T13545] netlink: 664 bytes leftover after parsing attributes in process `syz-executor.1'. [ 328.490685][T13556] can: request_module (can-proto-0) failed. [ 328.624083][T13577] sctp: [Deprecated]: syz-executor.3 (pid 13577) Use of int in max_burst socket option deprecated. [ 328.624083][T13577] Use struct sctp_assoc_value instead [ 328.680149][T13577] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 329.090867][T13600] netlink: 664 bytes leftover after parsing attributes in process `syz-executor.4'. [ 329.507149][T13619] sctp: [Deprecated]: syz-executor.3 (pid 13619) Use of int in max_burst socket option deprecated. [ 329.507149][T13619] Use struct sctp_assoc_value instead [ 329.558824][T13619] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 329.957703][T13635] netlink: 664 bytes leftover after parsing attributes in process `syz-executor.0'. [ 330.243690][T13647] sctp: [Deprecated]: syz-executor.4 (pid 13647) Use of int in max_burst socket option deprecated. [ 330.243690][T13647] Use struct sctp_assoc_value instead [ 330.347762][T13653] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 330.974957][T13685] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. [ 331.516587][T13705] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 332.371375][T13735] sctp: [Deprecated]: syz-executor.0 (pid 13735) Use of int in max_burst socket option deprecated. [ 332.371375][T13735] Use struct sctp_assoc_value instead [ 332.454415][T13735] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 332.482465][T13735] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 36858 - 0 [ 332.518729][T13735] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 36858 - 0 [ 332.550628][T13735] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 36858 - 0 [ 332.585540][T13735] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 36858 - 0 [ 333.220756][T13775] sctp: [Deprecated]: syz-executor.1 (pid 13775) Use of int in max_burst socket option deprecated. [ 333.220756][T13775] Use struct sctp_assoc_value instead [ 333.247769][T13775] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 333.400242][T13784] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 333.605348][T13792] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 333.855343][T13806] netlink: 664 bytes leftover after parsing attributes in process `syz-executor.4'. [ 334.009138][T13811] sctp: [Deprecated]: syz-executor.4 (pid 13811) Use of int in max_burst socket option deprecated. [ 334.009138][T13811] Use struct sctp_assoc_value instead [ 334.108671][T13811] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 334.272930][T13821] bridge3: the hash_elasticity option has been deprecated and is always 16 [ 334.584129][T13834] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 334.627057][T13834] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.4'. [ 334.648273][T13834] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 334.799839][T13843] netlink: 664 bytes leftover after parsing attributes in process `syz-executor.2'. [ 335.001404][T13856] sctp: [Deprecated]: syz-executor.3 (pid 13856) Use of int in max_burst socket option deprecated. [ 335.001404][T13856] Use struct sctp_assoc_value instead [ 335.046281][T13856] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 335.267731][ T5118] Bluetooth: hci2: command 0x0406 tx timeout [ 335.433446][T13874] netlink: 664 bytes leftover after parsing attributes in process `syz-executor.0'. [ 335.650966][T13892] sctp: [Deprecated]: syz-executor.1 (pid 13892) Use of int in max_burst socket option deprecated. [ 335.650966][T13892] Use struct sctp_assoc_value instead [ 335.698060][T13896] sctp: [Deprecated]: syz-executor.2 (pid 13896) Use of int in max_burst socket option deprecated. [ 335.698060][T13896] Use struct sctp_assoc_value instead [ 335.731901][T13892] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 335.899220][T13903] tun0: tun_chr_ioctl cmd 2148553947 [ 335.943890][T13911] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 2097153 (only 8 groups) [ 336.428588][T13936] sctp: [Deprecated]: syz-executor.1 (pid 13936) Use of int in max_burst socket option deprecated. [ 336.428588][T13936] Use struct sctp_assoc_value instead [ 336.506113][T13940] openvswitch: Êü: Dropping previously announced user features [ 337.279475][T13984] sctp: [Deprecated]: syz-executor.3 (pid 13984) Use of int in max_burst socket option deprecated. [ 337.279475][T13984] Use struct sctp_assoc_value instead [ 337.842714][T14007] syzkaller1: entered allmulticast mode [ 337.972214][T14010] sctp: [Deprecated]: syz-executor.3 (pid 14010) Use of int in max_burst socket option deprecated. [ 337.972214][T14010] Use struct sctp_assoc_value instead [ 338.495841][T14033] __nla_validate_parse: 10 callbacks suppressed [ 338.495862][T14033] netlink: 664 bytes leftover after parsing attributes in process `syz-executor.0'. [ 338.883862][T14064] mac80211_hwsim hwsim36 wlan0: entered promiscuous mode [ 338.894337][T14064] macvlan3: entered promiscuous mode [ 338.901220][T14064] macvlan3: entered allmulticast mode [ 338.906906][T14064] mac80211_hwsim hwsim36 wlan0: entered allmulticast mode [ 338.928646][T14064] mac80211_hwsim hwsim36 wlan0: left allmulticast mode [ 338.959610][T14064] mac80211_hwsim hwsim36 wlan0: left promiscuous mode [ 339.406583][T14094] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 339.603872][T14101] mac80211_hwsim hwsim25 wlan0: entered promiscuous mode [ 339.632755][T14101] macvlan2: entered promiscuous mode [ 339.642332][T14101] macvlan2: entered allmulticast mode [ 339.651077][T14101] mac80211_hwsim hwsim25 wlan0: entered allmulticast mode [ 339.670371][T14101] mac80211_hwsim hwsim25 wlan0: left allmulticast mode [ 339.695185][T14101] mac80211_hwsim hwsim25 wlan0: left promiscuous mode [ 340.313093][T14136] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 340.489434][T14146] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 340.642089][T14154] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.1'. [ 340.688991][T14154] Êü: entered promiscuous mode [ 340.730528][T14157] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 340.833460][T14159] team1: Mode changed to "broadcast" [ 340.887868][T14157] team1: Mode changed to "loadbalance" [ 340.963094][ T57] IPVS: starting estimator thread 0... [ 341.077521][T14165] IPVS: using max 20 ests per chain, 48000 per kthread [ 341.212218][ T5118] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 341.223007][ T5118] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 341.234860][ T5118] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 341.247825][ T5118] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 341.255729][ T5118] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 341.264026][ T5118] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 341.311099][T14180] netlink: zone id is out of range [ 341.329662][T14180] netlink: zone id is out of range [ 341.336408][T14180] netlink: zone id is out of range [ 341.387407][T14180] netlink: zone id is out of range [ 341.392591][T14180] netlink: zone id is out of range [ 341.442834][T14180] netlink: zone id is out of range [ 341.457126][T14180] netlink: zone id is out of range [ 341.480809][T14180] netlink: zone id is out of range [ 341.495748][T14182] debugfs: Directory '!' with parent 'ieee80211' already present! [ 341.514690][T14180] netlink: zone id is out of range [ 341.528819][T14180] netlink: zone id is out of range [ 342.012955][T12201] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.040567][T12201] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 36858 - 0 [ 342.145723][T14217] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 342.197458][T14176] chnl_net:caif_netlink_parms(): no params data found [ 342.212897][T14221] RDS: rds_bind could not find a transport for ::ffff:172.20.20.187, load rds_tcp or rds_rdma? [ 342.302226][T12201] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 342.320672][T12201] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 36858 - 0 [ 342.348972][T14234] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 342.455125][T14237] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 342.497199][T14237] CPU: 0 PID: 14237 Comm: syz-executor.3 Not tainted 6.9.0-syzkaller-12171-gccf23c916ca3 #0 [ 342.507357][T14237] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 342.517468][T14237] Call Trace: [ 342.520757][T14237] [ 342.523690][T14237] dump_stack_lvl+0x241/0x360 [ 342.528394][T14237] ? __pfx_dump_stack_lvl+0x10/0x10 [ 342.533590][T14237] ? __pfx__printk+0x10/0x10 [ 342.538184][T14237] ? sysfs_warn_dup+0x51/0xa0 [ 342.542866][T14237] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 342.548254][T14237] sysfs_warn_dup+0x8e/0xa0 [ 342.552767][T14237] sysfs_do_create_link_sd+0xbe/0x110 [ 342.558146][T14237] device_add_class_symlinks+0x1c5/0x250 [ 342.563788][T14237] device_add+0x553/0xbf0 [ 342.568136][T14237] wiphy_register+0x1d3f/0x2b30 [ 342.573008][T14237] ? __pfx_wiphy_register+0x10/0x10 [ 342.578568][T14237] ? minstrel_ht_alloc+0x72b/0x860 [ 342.583799][T14237] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 342.589933][T14237] ieee80211_register_hw+0x3098/0x3d80 [ 342.595450][T14237] ? ieee80211_register_hw+0x10c1/0x3d80 [ 342.601112][T14237] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 342.606941][T14237] ? __asan_memset+0x23/0x50 [ 342.611541][T14237] ? __hrtimer_init+0x170/0x250 [ 342.616398][T14237] mac80211_hwsim_new_radio+0x2597/0x44c0 [ 342.622152][T14237] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 342.628221][T14237] ? kmalloc_node_track_caller_noprof+0x242/0x440 [ 342.634654][T14237] ? kstrndup+0x5c/0xb0 [ 342.638814][T14237] ? __asan_memcpy+0x40/0x70 [ 342.643403][T14237] hwsim_new_radio_nl+0xe4c/0x21d0 [ 342.648522][T14237] ? __pfx___nla_validate_parse+0x10/0x10 [ 342.654247][T14237] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 342.659818][T14237] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 342.666260][T14237] genl_rcv_msg+0xb14/0xec0 [ 342.670777][T14237] ? mark_lock+0x9a/0x350 [ 342.675119][T14237] ? __pfx_genl_rcv_msg+0x10/0x10 [ 342.680171][T14237] ? __pfx_lock_acquire+0x10/0x10 [ 342.685194][T14237] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 342.690740][T14237] ? __pfx___might_resched+0x10/0x10 [ 342.696038][T14237] netlink_rcv_skb+0x1e3/0x430 [ 342.700818][T14237] ? __pfx_genl_rcv_msg+0x10/0x10 [ 342.705856][T14237] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 342.711159][T14237] ? __netlink_deliver_tap+0x77e/0x7c0 [ 342.716763][T14237] genl_rcv+0x28/0x40 [ 342.720778][T14237] netlink_unicast+0x7ea/0x980 [ 342.725572][T14237] ? __pfx_netlink_unicast+0x10/0x10 [ 342.730860][T14237] ? __virt_addr_valid+0x183/0x520 [ 342.735980][T14237] ? __check_object_size+0x49c/0x900 [ 342.741267][T14237] ? bpf_lsm_netlink_send+0x9/0x10 [ 342.746381][T14237] netlink_sendmsg+0x8db/0xcb0 [ 342.751154][T14237] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.756438][T14237] ? __import_iovec+0x536/0x820 [ 342.761288][T14237] ? aa_sock_msg_perm+0x91/0x160 [ 342.766255][T14237] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 342.771554][T14237] ? security_socket_sendmsg+0x87/0xb0 [ 342.777030][T14237] ? __pfx_netlink_sendmsg+0x10/0x10 [ 342.782336][T14237] __sock_sendmsg+0x221/0x270 [ 342.787033][T14237] ____sys_sendmsg+0x525/0x7d0 [ 342.791824][T14237] ? __pfx_____sys_sendmsg+0x10/0x10 [ 342.797131][T14237] __sys_sendmsg+0x2b0/0x3a0 [ 342.801725][T14237] ? __pfx___sys_sendmsg+0x10/0x10 [ 342.806875][T14237] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 342.813201][T14237] ? do_syscall_64+0x100/0x230 [ 342.817976][T14237] ? do_syscall_64+0xb6/0x230 [ 342.822688][T14237] do_syscall_64+0xf3/0x230 [ 342.827210][T14237] ? clear_bhb_loop+0x35/0x90 [ 342.831891][T14237] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 342.837796][T14237] RIP: 0033:0x7f9e7727cee9 [ 342.842218][T14237] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 342.861845][T14237] RSP: 002b:00007f9e780440c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 342.870275][T14237] RAX: ffffffffffffffda RBX: 00007f9e773b3fa0 RCX: 00007f9e7727cee9 [ 342.878258][T14237] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000004 [ 342.886269][T14237] RBP: 00007f9e772c947f R08: 0000000000000000 R09: 0000000000000000 [ 342.894277][T14237] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 342.902262][T14237] R13: 000000000000004d R14: 00007f9e773b3fa0 R15: 00007ffcfbc0c908 [ 342.910336][T14237] [ 342.977161][T12201] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.002952][T12201] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 36858 - 0 [ 343.240741][T12201] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 343.252760][T12201] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 36858 - 0 [ 343.290976][T14255] pim6reg: entered allmulticast mode [ 343.316721][T14176] bridge0: port 1(bridge_slave_0) entered blocking state [ 343.337236][ T5126] Bluetooth: hci1: command tx timeout [ 343.350275][T14176] bridge0: port 1(bridge_slave_0) entered disabled state [ 343.391100][T14176] bridge_slave_0: entered allmulticast mode [ 343.409085][T14176] bridge_slave_0: entered promiscuous mode [ 343.441305][T14176] bridge0: port 2(bridge_slave_1) entered blocking state [ 343.449376][T14176] bridge0: port 2(bridge_slave_1) entered disabled state [ 343.456874][T14176] bridge_slave_1: entered allmulticast mode [ 343.457939][T14266] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 343.466885][T14176] bridge_slave_1: entered promiscuous mode [ 343.511919][T14252] batadv_slave_0: entered allmulticast mode [ 343.534003][T14255] batadv_slave_0: left allmulticast mode [ 343.672148][T14251] pim6reg: left allmulticast mode [ 343.724439][T14275] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.2'. [ 343.744904][T14275] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 343.780886][T14176] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 343.803083][T14176] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 343.907468][ T29] audit: type=1804 audit(1717188369.218:58): pid=14279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3469169456/syzkaller.ZDSdDs/172/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 344.039266][T14176] team0: Port device team_slave_0 added [ 344.079288][T14176] team0: Port device team_slave_1 added [ 344.795802][T12201] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 344.819891][T12201] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 344.842179][T12201] bond0 (unregistering): Released all slaves [ 344.949571][T14295] sysfs: cannot create duplicate filename '/class/ieee80211/!' [ 344.988018][T14295] CPU: 0 PID: 14295 Comm: syz-executor.3 Not tainted 6.9.0-syzkaller-12171-gccf23c916ca3 #0 [ 344.998189][T14295] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 345.008318][T14295] Call Trace: [ 345.011625][T14295] [ 345.014572][T14295] dump_stack_lvl+0x241/0x360 [ 345.019327][T14295] ? __pfx_dump_stack_lvl+0x10/0x10 [ 345.024580][T14295] ? __pfx__printk+0x10/0x10 [ 345.029845][T14295] ? sysfs_warn_dup+0x51/0xa0 [ 345.034563][T14295] ? kmalloc_trace_noprof+0x19c/0x2c0 [ 345.040004][T14295] sysfs_warn_dup+0x8e/0xa0 [ 345.044568][T14295] sysfs_do_create_link_sd+0xbe/0x110 [ 345.049988][T14295] device_add_class_symlinks+0x1c5/0x250 [ 345.055680][T14295] device_add+0x553/0xbf0 [ 345.060333][T14295] wiphy_register+0x1d3f/0x2b30 [ 345.065223][T14295] ? __pfx_wiphy_register+0x10/0x10 [ 345.070447][T14295] ? minstrel_ht_alloc+0x72b/0x860 [ 345.075616][T14295] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 345.081836][T14295] ieee80211_register_hw+0x3098/0x3d80 [ 345.087346][T14295] ? ieee80211_register_hw+0x10c1/0x3d80 [ 345.093036][T14295] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 345.099006][T14295] ? __asan_memset+0x23/0x50 [ 345.103659][T14295] ? __hrtimer_init+0x170/0x250 [ 345.108546][T14295] mac80211_hwsim_new_radio+0x2597/0x44c0 [ 345.114341][T14295] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 345.120457][T14295] ? kmalloc_node_track_caller_noprof+0x242/0x440 [ 345.126913][T14295] ? kstrndup+0x5c/0xb0 [ 345.131113][T14295] ? __asan_memcpy+0x40/0x70 [ 345.136160][T14295] hwsim_new_radio_nl+0xe4c/0x21d0 [ 345.141311][T14295] ? __pfx___nla_validate_parse+0x10/0x10 [ 345.147079][T14295] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 345.152694][T14295] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 345.159082][T14295] genl_rcv_msg+0xb14/0xec0 [ 345.163675][T14295] ? mark_lock+0x9a/0x350 [ 345.168075][T14295] ? __pfx_genl_rcv_msg+0x10/0x10 [ 345.173171][T14295] ? __pfx_lock_acquire+0x10/0x10 [ 345.178234][T14295] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 345.183873][T14295] ? __pfx___might_resched+0x10/0x10 [ 345.189230][T14295] netlink_rcv_skb+0x1e3/0x430 [ 345.194022][T14295] ? __pfx_genl_rcv_msg+0x10/0x10 [ 345.199178][T14295] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 345.204603][T14295] ? __netlink_deliver_tap+0x77e/0x7c0 [ 345.210109][T14295] genl_rcv+0x28/0x40 [ 345.214169][T14295] netlink_unicast+0x7ea/0x980 [ 345.218998][T14295] ? __pfx_netlink_unicast+0x10/0x10 [ 345.224413][T14295] ? __virt_addr_valid+0x183/0x520 [ 345.229588][T14295] ? __check_object_size+0x49c/0x900 [ 345.234941][T14295] ? bpf_lsm_netlink_send+0x9/0x10 [ 345.240121][T14295] netlink_sendmsg+0x8db/0xcb0 [ 345.245118][T14295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.250447][T14295] ? __import_iovec+0x536/0x820 [ 345.255349][T14295] ? aa_sock_msg_perm+0x91/0x160 [ 345.260371][T14295] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 345.265792][T14295] ? security_socket_sendmsg+0x87/0xb0 [ 345.271342][T14295] ? __pfx_netlink_sendmsg+0x10/0x10 [ 345.276741][T14295] __sock_sendmsg+0x221/0x270 [ 345.281434][T14295] ____sys_sendmsg+0x525/0x7d0 [ 345.286212][T14295] ? __pfx_____sys_sendmsg+0x10/0x10 [ 345.291550][T14295] __sys_sendmsg+0x2b0/0x3a0 [ 345.296185][T14295] ? __pfx___sys_sendmsg+0x10/0x10 [ 345.301401][T14295] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 345.307779][T14295] ? do_syscall_64+0x100/0x230 [ 345.312842][T14295] ? do_syscall_64+0xb6/0x230 [ 345.317555][T14295] do_syscall_64+0xf3/0x230 [ 345.322185][T14295] ? clear_bhb_loop+0x35/0x90 [ 345.326912][T14295] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 345.332841][T14295] RIP: 0033:0x7f9e7727cee9 [ 345.337293][T14295] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 345.356940][T14295] RSP: 002b:00007f9e780440c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 345.365498][T14295] RAX: ffffffffffffffda RBX: 00007f9e773b3fa0 RCX: 00007f9e7727cee9 [ 345.373507][T14295] RDX: 0000000000000000 RSI: 0000000020000080 RDI: 0000000000000004 [ 345.381600][T14295] RBP: 00007f9e772c947f R08: 0000000000000000 R09: 0000000000000000 [ 345.389649][T14295] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 345.397659][T14295] R13: 000000000000004d R14: 00007f9e773b3fa0 R15: 00007ffcfbc0c908 [ 345.405688][T14295] [ 345.417153][ T5126] Bluetooth: hci1: command tx timeout [ 345.472192][T12201] tipc: Left network mode [ 345.496105][T14176] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 345.518075][T14176] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.601393][T14176] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 345.618914][T14176] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 345.626587][T14176] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 345.655912][T14176] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 345.669803][T14324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 346.022128][T14176] hsr_slave_0: entered promiscuous mode [ 346.055246][T14176] hsr_slave_1: entered promiscuous mode [ 346.071794][T14176] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 346.092101][T14176] Cannot create hsr debugfs directory [ 346.125096][ T29] audit: type=1804 audit(1717188371.428:59): pid=14339 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1635559553/syzkaller.FyVWul/353/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 346.178159][T12201] hsr_slave_0: left promiscuous mode [ 346.186379][T12201] hsr_slave_1: left promiscuous mode [ 346.196081][T12201] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 346.204345][T12201] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 346.230362][T12201] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 346.238570][T12201] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 346.285268][T12201] veth1_macvtap: left promiscuous mode [ 346.291136][T12201] veth0_macvtap: left promiscuous mode [ 346.297493][T12201] veth1_vlan: left promiscuous mode [ 346.302884][T12201] veth0_vlan: left promiscuous mode [ 346.526731][T12201] pimreg (unregistering): left allmulticast mode [ 347.146544][T12201] team0 (unregistering): Port device team_slave_1 removed [ 347.231751][T12201] team0 (unregistering): Port device team_slave_0 removed [ 347.497933][ T5126] Bluetooth: hci1: command tx timeout [ 347.919657][T14352] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.928094][T14352] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.936835][T14352] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.945175][T14352] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 347.970964][T14352] vxlan0: entered promiscuous mode [ 347.978157][T14352] vxlan0: entered allmulticast mode [ 347.984467][T14358] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 347.995062][T14352] netdevsim netdevsim3 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.003952][T14352] netdevsim netdevsim3 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.012552][T14352] netdevsim netdevsim3 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.021059][T14352] netdevsim netdevsim3 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.577171][T14385] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.2'. [ 348.599249][T14378] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 348.624942][T14385] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 348.733677][T14390] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 348.865794][T14392] syzkaller1: entered promiscuous mode [ 348.883034][T14392] syzkaller1: entered allmulticast mode [ 349.196173][T14176] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 349.214898][T14176] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 349.264745][T14176] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 349.333924][T14176] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 349.579636][ T5126] Bluetooth: hci1: command tx timeout [ 349.754038][T14417] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.2'. [ 349.778375][T14417] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 349.805850][T14421] (unnamed net_device) (uninitialized): option packets_per_slave: invalid value (18446744073709551614) [ 349.848977][T14421] (unnamed net_device) (uninitialized): option packets_per_slave: allowed values 0 - 65535 [ 349.895563][T14176] 8021q: adding VLAN 0 to HW filter on device bond0 [ 349.956374][T14428] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 349.994103][T14176] 8021q: adding VLAN 0 to HW filter on device team0 [ 350.063252][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 350.070509][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 350.103825][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 350.111103][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 350.288888][T14441] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 350.448790][T14451] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 350.668546][T14176] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 350.772894][T14176] veth0_vlan: entered promiscuous mode [ 350.779907][ T29] audit: type=1804 audit(1717188376.078:60): pid=14465 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3469169456/syzkaller.ZDSdDs/185/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 350.825720][T14176] veth1_vlan: entered promiscuous mode [ 350.905713][T14176] veth0_macvtap: entered promiscuous mode [ 350.924076][T14176] veth1_macvtap: entered promiscuous mode [ 350.948874][T14176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.965541][T14176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.975562][T14176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 350.988171][T14176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 350.998727][T14176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.009327][T14176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.020526][T14176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.031851][T14176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.045196][T14176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.056126][T14176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.068081][T14176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 351.078719][T14176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.115977][T14176] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 351.129277][T14475] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 351.141825][T14475] netlink: 666 bytes leftover after parsing attributes in process `syz-executor.3'. [ 351.195342][T14176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.212228][T14176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.226867][T14176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.253830][T14176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.268281][T14176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.279706][T14176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.290350][T14176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.311927][T14176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.326593][T14176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.349836][T14176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.366578][T14176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.379451][T14176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.389474][T14176] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 351.401144][T14176] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 351.414004][T14176] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 351.445042][T14176] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.480577][T14176] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.489598][T14176] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.498938][T14176] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 351.514266][T14479] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 351.754215][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.794561][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 351.863713][T12198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 351.873099][T12198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 352.006649][T14499] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 352.287373][T14512] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 352.364333][T14518] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 352.670721][T14535] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 352.739150][T14537] Bluetooth: hci3: service_discovery: expected 4 bytes, got 7 bytes [ 352.752678][T14537] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 353.254157][T14565] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 353.372403][T14571] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 353.433406][T14575] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 353.888654][T14176] syz-executor.0 (14176) used greatest stack depth: 17112 bytes left [ 354.010124][T14604] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 354.072605][T12201] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 354.133104][T14604] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 354.328275][T14616] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 354.866676][ T5118] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 354.881964][ T5118] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 354.883093][T14642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 354.903047][ T5118] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 354.912197][ T5118] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 354.920413][ T5118] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 354.928084][ T5118] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 355.038514][T14648] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 355.049165][T14648] netlink: 666 bytes leftover after parsing attributes in process `syz-executor.4'. [ 355.252159][T14641] chnl_net:caif_netlink_parms(): no params data found [ 355.319827][T12201] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.473166][T12201] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.493177][T14662] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 355.535569][T14641] bridge0: port 1(bridge_slave_0) entered blocking state [ 355.543338][T14641] bridge0: port 1(bridge_slave_0) entered disabled state [ 355.568561][T14641] bridge_slave_0: entered allmulticast mode [ 355.585833][T14641] bridge_slave_0: entered promiscuous mode [ 355.682316][T12201] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 355.713644][T14641] bridge0: port 2(bridge_slave_1) entered blocking state [ 355.735301][T14641] bridge0: port 2(bridge_slave_1) entered disabled state [ 355.749130][T14641] bridge_slave_1: entered allmulticast mode [ 355.758059][T14641] bridge_slave_1: entered promiscuous mode [ 355.844001][T14641] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 355.878439][T14641] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 355.983793][T14641] team0: Port device team_slave_0 added [ 356.027319][T14641] team0: Port device team_slave_1 added [ 356.121082][T12201] bridge_slave_1: left allmulticast mode [ 356.136495][T12201] bridge_slave_1: left promiscuous mode [ 356.146879][T12201] bridge0: port 2(bridge_slave_1) entered disabled state [ 356.175626][T12201] bridge_slave_0: left allmulticast mode [ 356.191578][T12201] bridge_slave_0: left promiscuous mode [ 356.205459][T12201] bridge0: port 1(bridge_slave_0) entered disabled state [ 356.714708][T12201] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 356.726607][T12201] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 356.742328][T12201] bond0 (unregistering): Released all slaves [ 356.773146][T14641] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 356.787745][T14641] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 356.854859][T14641] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 356.939727][T14641] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 356.955982][T14641] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.011852][T14641] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.024574][ T5118] Bluetooth: hci1: command tx timeout [ 357.322234][T14641] hsr_slave_0: entered promiscuous mode [ 357.399957][T14641] hsr_slave_1: entered promiscuous mode [ 357.427688][T14641] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 357.454505][T14641] Cannot create hsr debugfs directory [ 357.746162][T12201] hsr_slave_0: left promiscuous mode [ 357.773876][T12201] hsr_slave_1: left promiscuous mode [ 357.797244][T12201] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 357.814668][T12201] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 357.886624][T12201] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 357.909009][T12201] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 358.047275][T12201] veth1_macvtap: left promiscuous mode [ 358.052894][T12201] veth0_macvtap: left promiscuous mode [ 358.083213][T12201] veth1_vlan: left promiscuous mode [ 358.096738][T12201] veth0_vlan: left promiscuous mode [ 359.108615][ T5118] Bluetooth: hci1: command tx timeout [ 359.265621][T12201] team0 (unregistering): Port device team_slave_1 removed [ 359.336493][T12201] team0 (unregistering): Port device team_slave_0 removed [ 360.002765][T14734] pim6reg: entered allmulticast mode [ 360.097846][T14734] pim6reg: left allmulticast mode [ 360.255662][T14757] netlink: 9412 bytes leftover after parsing attributes in process `syz-executor.3'. [ 360.427642][T14766] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 360.435932][T14766] netlink: 666 bytes leftover after parsing attributes in process `syz-executor.1'. [ 360.879323][T14785] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 360.912308][T14785] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 361.177131][ T5118] Bluetooth: hci1: command tx timeout [ 362.422034][T14641] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 362.445768][T14641] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 362.480349][T14641] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 362.523193][T14641] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 362.677477][T14802] netlink: 9412 bytes leftover after parsing attributes in process `syz-executor.3'. [ 362.865099][T14641] 8021q: adding VLAN 0 to HW filter on device bond0 [ 362.873717][T14812] bridge_slave_1: left allmulticast mode [ 362.880558][T14812] bridge_slave_1: left promiscuous mode [ 362.890963][T14812] bridge0: port 2(bridge_slave_1) entered disabled state [ 362.904776][T14812] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 362.923936][T14812] net_ratelimit: 239 callbacks suppressed [ 362.923959][T14812] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 363.030249][T14641] 8021q: adding VLAN 0 to HW filter on device team0 [ 363.069950][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 363.077189][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 363.123656][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 363.130907][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 363.267827][ T5118] Bluetooth: hci1: command tx timeout [ 363.274765][T14641] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 363.343570][T14828] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 363.354390][T14828] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 365.067789][T14857] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 365.106016][T14641] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 365.255799][T14861] netlink: 9412 bytes leftover after parsing attributes in process `syz-executor.3'. [ 365.279962][T14641] veth0_vlan: entered promiscuous mode [ 365.322267][T14641] veth1_vlan: entered promiscuous mode [ 365.392598][T14865] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 365.431664][T14641] veth0_macvtap: entered promiscuous mode [ 365.488842][T14641] veth1_macvtap: entered promiscuous mode [ 365.519105][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.599643][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.619436][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.630710][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.641288][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.651982][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.667053][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.747653][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.772351][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.856012][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 365.870293][T14880] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 365.892668][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 365.921627][T14880] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 365.967472][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.030296][T14641] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 366.099893][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.152695][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.176406][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.221302][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.274053][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.308993][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.343865][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.361275][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.407304][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.437265][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.465643][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.491617][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.515630][T14641] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 366.534855][T14641] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 366.562394][T14641] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 366.605427][T14890] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 366.633588][T14890] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 366.710304][T14641] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.739678][T14641] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.749719][T14641] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 366.759552][T14641] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.124852][ T5162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.151246][ T5162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.155545][T14909] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 367.251271][T14915] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 367.322975][ T5162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 367.377172][ T5162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 367.615985][T14924] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 368.355336][T12198] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 368.549565][T14952] sctp: [Deprecated]: syz-executor.4 (pid 14952) Use of int in max_burst socket option deprecated. [ 368.549565][T14952] Use struct sctp_assoc_value instead [ 368.664886][T14954] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 368.835478][T12198] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.076799][T12198] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.348434][T12198] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 369.505758][ T5126] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 369.518057][ T5126] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 369.527557][ T5126] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 369.538489][ T5126] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 369.546475][ T5126] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 369.554343][ T5126] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 369.779380][T14985] netlink: 9412 bytes leftover after parsing attributes in process `syz-executor.4'. [ 370.103405][T12198] bridge_slave_1: left allmulticast mode [ 370.118592][T12198] bridge_slave_1: left promiscuous mode [ 370.137869][T12198] bridge0: port 2(bridge_slave_1) entered disabled state [ 370.179246][T12198] bridge_slave_0: left allmulticast mode [ 370.192600][T12198] bridge_slave_0: left promiscuous mode [ 370.207763][T12198] bridge0: port 1(bridge_slave_0) entered disabled state [ 370.410412][T14994] sctp: [Deprecated]: syz-executor.1 (pid 14994) Use of int in max_burst socket option deprecated. [ 370.410412][T14994] Use struct sctp_assoc_value instead [ 371.011494][T15008] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 371.430063][T12198] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 371.459622][T12198] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 371.483131][T12198] bond0 (unregistering): Released all slaves [ 371.507708][T14999] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 371.622159][T15000] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 371.657444][ T5118] Bluetooth: hci1: command tx timeout [ 372.185439][T15038] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 372.368919][T12198] hsr_slave_0: left promiscuous mode [ 372.404568][T12198] hsr_slave_1: left promiscuous mode [ 372.445674][T15048] sctp: [Deprecated]: syz-executor.2 (pid 15048) Use of int in max_burst socket option deprecated. [ 372.445674][T15048] Use struct sctp_assoc_value instead [ 372.468134][T12198] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 372.475638][T12198] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 372.584892][T12198] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 372.617984][T12198] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 372.710311][T12198] veth1_macvtap: left promiscuous mode [ 372.716179][T12198] veth0_macvtap: left promiscuous mode [ 372.728727][T12198] veth1_vlan: left promiscuous mode [ 372.739028][T12198] veth0_vlan: left promiscuous mode [ 372.745844][T15050] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 373.738203][ T5118] Bluetooth: hci1: command tx timeout [ 373.748950][T12198] team0 (unregistering): Port device team_slave_1 removed [ 373.804983][T12198] team0 (unregistering): Port device team_slave_0 removed [ 374.425040][T15054] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 374.495992][T14981] chnl_net:caif_netlink_parms(): no params data found [ 374.512395][T15051] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 374.970258][T14981] bridge0: port 1(bridge_slave_0) entered blocking state [ 374.981639][T15084] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 374.999625][T14981] bridge0: port 1(bridge_slave_0) entered disabled state [ 375.013398][T14981] bridge_slave_0: entered allmulticast mode [ 375.034954][T14981] bridge_slave_0: entered promiscuous mode [ 375.062857][T14981] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.086287][T14981] bridge0: port 2(bridge_slave_1) entered disabled state [ 375.107448][T14981] bridge_slave_1: entered allmulticast mode [ 375.132848][T14981] bridge_slave_1: entered promiscuous mode [ 375.215074][T14981] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 375.259933][T14981] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 375.296373][T15096] sctp: [Deprecated]: syz-executor.3 (pid 15096) Use of int in max_burst socket option deprecated. [ 375.296373][T15096] Use struct sctp_assoc_value instead [ 375.378990][T14981] team0: Port device team_slave_0 added [ 375.392066][T14981] team0: Port device team_slave_1 added [ 375.437297][T15096] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 375.501575][T14981] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 375.511770][T14981] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.550000][T14981] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 375.635416][T14981] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 375.669654][T14981] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 375.701772][T14981] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 375.818675][ T5118] Bluetooth: hci1: command tx timeout [ 375.926892][T14981] hsr_slave_0: entered promiscuous mode [ 375.962709][T14981] hsr_slave_1: entered promiscuous mode [ 376.011956][T14981] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 376.047646][T14981] Cannot create hsr debugfs directory [ 376.374037][T15131] sctp: [Deprecated]: syz-executor.2 (pid 15131) Use of int in max_burst socket option deprecated. [ 376.374037][T15131] Use struct sctp_assoc_value instead [ 376.492634][T15136] x_tables: duplicate underflow at hook 2 [ 376.503846][T15138] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 377.063037][T14981] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 377.088781][T14981] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 377.126809][T14981] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 377.149018][T14981] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 377.392027][T14981] 8021q: adding VLAN 0 to HW filter on device bond0 [ 377.455850][T14981] 8021q: adding VLAN 0 to HW filter on device team0 [ 377.489986][ T57] bridge0: port 1(bridge_slave_0) entered blocking state [ 377.497182][ T57] bridge0: port 1(bridge_slave_0) entered forwarding state [ 377.546189][ T57] bridge0: port 2(bridge_slave_1) entered blocking state [ 377.553441][ T57] bridge0: port 2(bridge_slave_1) entered forwarding state [ 377.708088][T15178] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 377.781314][T15178] : entered promiscuous mode [ 377.899461][ T5118] Bluetooth: hci1: command tx timeout [ 378.168519][T14981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 378.344958][T14981] veth0_vlan: entered promiscuous mode [ 378.407303][T14981] veth1_vlan: entered promiscuous mode [ 378.545601][T14981] veth0_macvtap: entered promiscuous mode [ 378.587415][T14981] veth1_macvtap: entered promiscuous mode [ 378.762035][T15209] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 378.873324][T15209] 8021q: adding VLAN 0 to HW filter on device team0 [ 378.883834][T15209] bond0: (slave team0): Enslaving as an active interface with an up link [ 379.023172][ T5126] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 379.035018][ T5126] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 379.043928][ T5126] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 379.053655][ T5126] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 379.055461][T14981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.078545][ T5126] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 379.104189][ T5126] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 379.156506][T14981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.203304][T14981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.226441][T14981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.243746][T14981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.259949][ T1245] ieee802154 phy1 wpan1: encryption failed: -22 [ 379.284822][T14981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.297555][T14981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.317012][T14981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.326417][T15220] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 379.344132][T14981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.355037][T14981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.375238][T14981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 379.388832][T14981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.410083][T14981] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 379.433998][T14981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.457101][T14981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.475938][T14981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.486857][T14981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.507284][T14981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.531722][T14981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.542235][T14981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.562821][T14981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.573169][T14981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.589953][T14981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.600575][T14981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.611401][T14981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.621545][T14981] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 379.637026][T14981] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 379.650380][T14981] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 379.727366][T14981] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.760495][T14981] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.789846][T14981] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.798866][T14981] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 379.972808][T15224] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 380.181175][ T5162] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.218989][ T5162] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.379862][T12198] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 380.416999][T12198] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 380.582692][T15210] chnl_net:caif_netlink_parms(): no params data found [ 380.874944][T15210] bridge0: port 1(bridge_slave_0) entered blocking state [ 380.883470][T15210] bridge0: port 1(bridge_slave_0) entered disabled state [ 380.906529][T15210] bridge_slave_0: entered allmulticast mode [ 380.926511][T15210] bridge_slave_0: entered promiscuous mode [ 380.956136][T15248] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 381.059497][T15248] 8021q: adding VLAN 0 to HW filter on device team0 [ 381.098875][T15248] bond0: (slave team0): Enslaving as an active interface with an up link [ 381.146329][T15210] bridge0: port 2(bridge_slave_1) entered blocking state [ 381.161207][T15210] bridge0: port 2(bridge_slave_1) entered disabled state [ 381.177570][ T5118] Bluetooth: hci3: command tx timeout [ 381.184810][T15210] bridge_slave_1: entered allmulticast mode [ 381.194459][T15210] bridge_slave_1: entered promiscuous mode [ 381.253869][T15267] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 381.335001][T15210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 381.388195][T15210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 381.486307][T15210] team0: Port device team_slave_0 added [ 381.514790][T15210] team0: Port device team_slave_1 added [ 381.584985][T15210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 381.605135][T15210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.647216][T15210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 381.672885][T15210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 381.692616][T15210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 381.735977][T15210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 381.880009][T15210] hsr_slave_0: entered promiscuous mode [ 381.912323][T15210] hsr_slave_1: entered promiscuous mode [ 381.928216][T15210] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 381.946358][T15210] Cannot create hsr debugfs directory [ 382.226744][T15210] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.240343][T15210] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 1] type 2 family 0 port 40286 - 0 [ 382.528697][T15210] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.541135][T15210] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 1] type 2 family 0 port 40286 - 0 [ 382.579268][T15297] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 382.649795][T15297] 8021q: adding VLAN 0 to HW filter on device team0 [ 382.688510][T15297] bond0: (slave team0): Enslaving as an active interface with an up link [ 382.798676][T15210] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 382.837878][T15210] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 1] type 2 family 0 port 40286 - 0 [ 382.930443][T15299] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 383.022420][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.135978][T15210] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.150160][T15210] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 1] type 2 family 0 port 40286 - 0 [ 383.217223][T15303] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 383.239743][T15303] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 383.257842][ T5118] Bluetooth: hci3: command tx timeout [ 383.327969][T15302] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 383.543791][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.576049][T15210] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 383.678256][ T5126] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 383.693987][ T5126] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 383.704398][ T5126] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 383.717605][ T5126] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 383.717723][T15210] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 383.735057][ T5126] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 383.744361][ T5126] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 383.815681][T15210] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 383.916890][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 383.959001][T15210] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 384.057501][ T29] audit: type=1804 audit(1717188409.358:61): pid=15322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2751403032/syzkaller.fv0L3N/491/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 [ 384.103011][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 384.271989][T15330] netlink: 666 bytes leftover after parsing attributes in process `syz-executor.1'. [ 384.629294][ T12] bridge_slave_1: left allmulticast mode [ 384.636615][ T12] bridge_slave_1: left promiscuous mode [ 384.649248][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 384.713690][ T12] bridge_slave_0: left allmulticast mode [ 384.737468][ T12] bridge_slave_0: left promiscuous mode [ 384.746794][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 385.275929][ T29] audit: type=1804 audit(1717188410.578:62): pid=15359 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2751403032/syzkaller.fv0L3N/497/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 [ 385.348784][ T5118] Bluetooth: hci3: command tx timeout [ 385.838430][ T5118] Bluetooth: hci1: command tx timeout [ 386.194685][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 386.221234][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 386.248046][ T12] bond0 (unregistering): Released all slaves [ 386.303907][T15373] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 386.339661][T15373] dummy0: entered promiscuous mode [ 386.350693][T15373] macvtap1: entered promiscuous mode [ 386.367471][T15373] macvtap1: entered allmulticast mode [ 386.380144][T15373] dummy0: entered allmulticast mode [ 386.679937][T15386] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 386.712848][T15386] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 386.883239][ T12] hsr_slave_0: left promiscuous mode [ 386.923624][ T12] hsr_slave_1: left promiscuous mode [ 386.968349][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 386.987411][ T29] audit: type=1804 audit(1717188412.288:63): pid=15391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2751403032/syzkaller.fv0L3N/503/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 [ 387.027148][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 387.042952][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 387.058636][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 387.178738][ T12] veth1_macvtap: left promiscuous mode [ 387.184361][ T12] veth0_macvtap: left promiscuous mode [ 387.197473][ T12] veth1_vlan: left promiscuous mode [ 387.209103][ T12] veth0_vlan: left promiscuous mode [ 387.417578][ T5118] Bluetooth: hci3: command tx timeout [ 387.799426][T15420] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 387.898279][ T5118] Bluetooth: hci1: command tx timeout [ 388.159552][ T12] team0 (unregistering): Port device team_slave_1 removed [ 388.220399][ T12] team0 (unregistering): Port device team_slave_0 removed [ 388.823444][T15313] chnl_net:caif_netlink_parms(): no params data found [ 389.013443][T15413] vlan1: entered promiscuous mode [ 389.027110][T15413] dummy0: entered promiscuous mode [ 389.032504][T15413] vlan1: entered allmulticast mode [ 389.044201][T15413] dummy0: entered allmulticast mode [ 389.200258][ T29] audit: type=1804 audit(1717188414.508:64): pid=15424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2751403032/syzkaller.fv0L3N/507/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 389.215573][T15210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 389.262384][T15210] 8021q: adding VLAN 0 to HW filter on device team0 [ 389.348926][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.356172][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 389.441964][T15313] bridge0: port 1(bridge_slave_0) entered blocking state [ 389.480721][T15313] bridge0: port 1(bridge_slave_0) entered disabled state [ 389.498069][T15313] bridge_slave_0: entered allmulticast mode [ 389.516252][T15313] bridge_slave_0: entered promiscuous mode [ 389.536055][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.543420][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 389.578443][T15313] bridge0: port 2(bridge_slave_1) entered blocking state [ 389.585976][T15313] bridge0: port 2(bridge_slave_1) entered disabled state [ 389.604535][T15313] bridge_slave_1: entered allmulticast mode [ 389.620214][T15313] bridge_slave_1: entered promiscuous mode [ 389.743024][T15313] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 389.792014][T15313] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 389.959696][T15210] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 389.977890][ T5118] Bluetooth: hci1: command tx timeout [ 390.033954][T15313] team0: Port device team_slave_0 added [ 390.080043][T15313] team0: Port device team_slave_1 added [ 390.309146][T15313] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 390.316145][T15313] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.362898][T15313] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 390.390235][T15313] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 390.407377][T15313] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 390.466124][T15313] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 390.684540][T15313] hsr_slave_0: entered promiscuous mode [ 390.703507][T15313] hsr_slave_1: entered promiscuous mode [ 390.714888][T15313] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 390.765389][T15313] Cannot create hsr debugfs directory [ 390.995447][T15210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 391.287508][T15210] veth0_vlan: entered promiscuous mode [ 391.318170][T15479] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 391.344799][T15479] vlan2: entered promiscuous mode [ 391.439099][T15210] veth1_vlan: entered promiscuous mode [ 391.596830][T15210] veth0_macvtap: entered promiscuous mode [ 391.604870][ T29] audit: type=1804 audit(1717188416.908:65): pid=15488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2751403032/syzkaller.fv0L3N/511/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 391.638113][T15210] veth1_macvtap: entered promiscuous mode [ 391.669163][T15210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.686534][T15210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.698785][T15210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.710540][T15210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.722501][T15210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.733834][T15210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.744890][T15210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.756618][T15210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.769778][T15210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.796572][T15210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.826734][T15210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 391.845880][T15210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.870767][T15210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 391.884816][T15210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.898529][T15210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.909102][T15210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.922944][T15210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.933223][T15210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.944574][T15210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.954534][T15210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.966183][T15210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 391.976764][T15210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 391.990443][T15210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.001006][T15210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.011695][T15210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.023523][T15210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 392.057563][ T5118] Bluetooth: hci1: command tx timeout [ 392.058139][T15210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 392.088380][T15210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 392.116539][T15210] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.151819][T15210] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.178542][T15210] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.189034][T15210] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 392.502114][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.520678][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.543387][T15313] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 392.594223][T15313] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 392.665274][T15313] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 392.731358][ T5162] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 392.745383][T15313] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 392.754045][ T5162] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 392.898049][T15530] RDS: rds_bind could not find a transport for fe80::aa, load rds_tcp or rds_rdma? [ 393.081366][T15313] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.171995][T15313] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.223180][ T5162] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.230464][ T5162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.291838][ T5162] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.299126][ T5162] bridge0: port 2(bridge_slave_1) entered forwarding state [ 393.396442][T15539] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 393.450008][T15539] vlan1: entered promiscuous mode [ 393.544106][T15546] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 393.631881][ T29] audit: type=1804 audit(1717188418.938:66): pid=15547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3469169456/syzkaller.ZDSdDs/255/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 393.946514][T15313] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 394.112906][T15313] veth0_vlan: entered promiscuous mode [ 394.162080][T15313] veth1_vlan: entered promiscuous mode [ 394.179182][T15557] netlink: 292 bytes leftover after parsing attributes in process `syz-executor.4'. [ 394.310768][T15313] veth0_macvtap: entered promiscuous mode [ 394.358670][T15313] veth1_macvtap: entered promiscuous mode [ 394.453443][T15313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.507137][T15313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.547169][T15313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.582961][T15313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.617913][T15313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.630085][T15313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.651051][T15313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.672991][T15313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.689303][T15313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.708852][T15313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.732825][T15313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.755683][T15313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.775480][T15313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 394.793535][T15313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.806500][T15313] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 394.846589][T15571] veth1_macvtap: left promiscuous mode [ 394.864740][T15571] macsec0: entered allmulticast mode [ 394.893258][T15571] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 394.931343][T15313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 394.968973][T15313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 394.983375][T15313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.010454][T15313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.028018][T15313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.040255][T15313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.052732][T15313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.066111][T15313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.076785][T15313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.088207][T15313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.101321][T15586] sctp: [Deprecated]: syz-executor.2 (pid 15586) Use of int in max_burst socket option deprecated. [ 395.101321][T15586] Use struct sctp_assoc_value instead [ 395.118576][T15313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.129382][T15313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.139605][T15313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.152120][T15313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.166616][T15313] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 395.182472][T15313] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 395.203737][ T29] audit: type=1804 audit(1717188420.508:67): pid=15588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1635559553/syzkaller.FyVWul/443/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 395.239343][T15313] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 395.263901][T15586] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 395.291477][T15586] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 54957 - 0 [ 395.313586][T15586] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 54957 - 0 [ 395.342923][T15586] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 54957 - 0 [ 395.357850][T15586] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 54957 - 0 [ 395.408305][T15313] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.427088][T15313] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.446156][T15313] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.464826][T15313] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 395.791607][ T2818] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 395.814460][T15607] syz-executor.2: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 395.826970][ T2818] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 395.844256][T15607] CPU: 1 PID: 15607 Comm: syz-executor.2 Not tainted 6.9.0-syzkaller-12171-gccf23c916ca3 #0 [ 395.854619][T15607] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 395.864717][T15607] Call Trace: [ 395.868115][T15607] [ 395.871093][T15607] dump_stack_lvl+0x241/0x360 [ 395.875822][T15607] ? __pfx_dump_stack_lvl+0x10/0x10 [ 395.881070][T15607] ? __pfx__printk+0x10/0x10 [ 395.885720][T15607] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 395.892361][T15607] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 395.898918][T15607] warn_alloc+0x278/0x410 [ 395.903307][T15607] ? stack_depot_save_flags+0x29/0x830 [ 395.908782][T15607] ? __vmalloc_node_range_noprof+0x106/0x1490 [ 395.914863][T15607] ? __pfx_warn_alloc+0x10/0x10 [ 395.919822][T15607] ? kasan_save_track+0x3f/0x80 [ 395.924677][T15607] ? __kasan_kmalloc+0x98/0xb0 [ 395.929460][T15607] ? xsk_setsockopt+0x598/0x950 [ 395.934520][T15607] ? do_sock_setsockopt+0x3af/0x720 [ 395.939767][T15607] ? __sys_setsockopt+0x1ae/0x250 [ 395.945301][T15607] ? __x64_sys_setsockopt+0xb5/0xd0 [ 395.950713][T15607] ? do_syscall_64+0xf3/0x230 [ 395.955627][T15607] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 395.961913][T15607] __vmalloc_node_range_noprof+0x126/0x1490 [ 395.968204][T15607] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 395.974563][T15607] ? __kasan_kmalloc+0x98/0xb0 [ 395.979539][T15607] ? xskq_create+0x54/0x170 [ 395.984155][T15607] vmalloc_user_noprof+0x74/0x80 [ 395.989145][T15607] ? xskq_create+0xb6/0x170 [ 395.993951][T15607] xskq_create+0xb6/0x170 [ 395.998843][T15607] xsk_init_queue+0xa1/0x100 [ 396.003799][T15607] xsk_setsockopt+0x598/0x950 [ 396.008558][T15607] ? __pfx_xsk_setsockopt+0x10/0x10 [ 396.013881][T15607] ? __pfx_lock_acquire+0x10/0x10 [ 396.019022][T15607] ? aa_sock_opt_perm+0x79/0x120 [ 396.023971][T15607] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 396.029602][T15607] ? security_socket_setsockopt+0x87/0xb0 [ 396.035500][T15607] ? __pfx_xsk_setsockopt+0x10/0x10 [ 396.040706][T15607] do_sock_setsockopt+0x3af/0x720 [ 396.045736][T15607] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 396.051552][T15607] ? __fget_files+0x29/0x470 [ 396.056708][T15607] ? __fget_files+0x3f6/0x470 [ 396.061626][T15607] __sys_setsockopt+0x1ae/0x250 [ 396.066794][T15607] __x64_sys_setsockopt+0xb5/0xd0 [ 396.071946][T15607] do_syscall_64+0xf3/0x230 [ 396.076551][T15607] ? clear_bhb_loop+0x35/0x90 [ 396.081398][T15607] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 396.087950][T15607] RIP: 0033:0x7f5dfd27cee9 [ 396.092399][T15607] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 396.112031][T15607] RSP: 002b:00007f5dfe0d00c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 396.120549][T15607] RAX: ffffffffffffffda RBX: 00007f5dfd3b3fa0 RCX: 00007f5dfd27cee9 [ 396.128713][T15607] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000003 [ 396.137496][T15607] RBP: 00007f5dfd2c947f R08: 0000000000000020 R09: 0000000000000000 [ 396.145705][T15607] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 396.153803][T15607] R13: 000000000000000b R14: 00007f5dfd3b3fa0 R15: 00007fffeda15ee8 [ 396.161894][T15607] [ 396.208419][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 396.220592][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 396.233032][T15607] Mem-Info: [ 396.241498][T15607] active_anon:19006 inactive_anon:0 isolated_anon:0 [ 396.241498][T15607] active_file:0 inactive_file:48177 isolated_file:0 [ 396.241498][T15607] unevictable:768 dirty:306 writeback:0 [ 396.241498][T15607] slab_reclaimable:11034 slab_unreclaimable:121490 [ 396.241498][T15607] mapped:20669 shmem:5812 pagetables:642 [ 396.241498][T15607] sec_pagetables:0 bounce:0 [ 396.241498][T15607] kernel_misc_reclaimable:0 [ 396.241498][T15607] free:1342426 free_pcp:1033 free_cma:0 [ 396.291184][T15607] Node 0 active_anon:76024kB inactive_anon:0kB active_file:0kB inactive_file:192428kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:82676kB dirty:1024kB writeback:0kB shmem:21712kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10976kB pagetables:2568kB sec_pagetables:0kB all_unreclaimable? no [ 396.329549][T15607] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 396.430157][T15607] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 396.501322][T15607] lowmem_reserve[]: 0 2571 2571 0 0 [ 396.531216][T15607] Node 0 DMA32 free:1409392kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:75984kB inactive_anon:0kB active_file:0kB inactive_file:191208kB unevictable:1536kB writepending:124kB present:3129332kB managed:2659880kB mlocked:0kB bounce:0kB free_pcp:5432kB local_pcp:3820kB free_cma:0kB [ 396.583256][T15607] lowmem_reserve[]: 0 0 0 0 0 [ 396.588675][T15607] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:320kB unevictable:0kB writepending:0kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 396.618192][T15607] lowmem_reserve[]: 0 0 0 0 0 [ 396.651146][T15607] Node 1 Normal free:3945096kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 396.724824][T15607] lowmem_reserve[]: 0 0 0 0 0 [ 396.746865][T15607] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 396.793585][T15607] Node 0 DMA32: 356*4kB (UME) 122*8kB (UME) 127*16kB (UM) 175*32kB (UME) 86*64kB (UME) 37*128kB (UME) 17*256kB (UME) 32*512kB (UME) 22*1024kB (UME) 4*2048kB (U) 327*4096kB (UM) = 1411120kB [ 396.837868][T15607] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 396.875373][T15607] Node 1 Normal: 4*4kB (U) 5*8kB (UM) 13*16kB (UM) 10*32kB (UM) 11*64kB (U) 9*128kB (U) 5*256kB (UM) 4*512kB (UM) 3*1024kB (U) 2*2048kB (U) 960*4096kB (M) = 3945096kB [ 396.888037][T15627] sctp: [Deprecated]: syz-executor.4 (pid 15627) Use of int in max_burst socket option deprecated. [ 396.888037][T15627] Use struct sctp_assoc_value instead [ 396.907257][T15607] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 396.927304][T15607] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 396.953986][T15607] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 396.997361][T15607] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 397.013617][T15627] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 397.034637][T15607] 53683 total pagecache pages [ 397.042396][T15607] 0 pages in swap cache [ 397.046621][T15607] Free swap = 124996kB [ 397.076145][T15607] Total swap = 124996kB [ 397.088558][T15607] 2097051 pages RAM [ 397.098762][T15607] 0 pages HighMem/MovableOnly [ 397.121518][T15607] 400871 pages reserved [ 397.142618][T15607] 0 pages cma reserved [ 397.276566][T15644] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 397.282749][T15643] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 397.297119][T15644] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'. [ 397.361174][ T29] audit: type=1804 audit(1717188422.668:68): pid=15641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir1635559553/syzkaller.FyVWul/449/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 [ 397.938056][T15670] sctp: [Deprecated]: syz-executor.1 (pid 15670) Use of int in max_burst socket option deprecated. [ 397.938056][T15670] Use struct sctp_assoc_value instead [ 398.056726][T15678] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 398.681802][ T1109] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.057651][T15720] nftables ruleset with unbound chain [ 399.484264][T15747] sctp: [Deprecated]: syz-executor.4 (pid 15747) Use of int in max_burst socket option deprecated. [ 399.484264][T15747] Use struct sctp_assoc_value instead [ 399.532839][T15747] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.4'. [ 399.694034][ T1109] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.723159][ T5126] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 399.734850][ T5126] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 399.752362][ T5126] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 399.767505][ T5126] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 399.778217][ T5126] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 399.785810][ T5126] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 399.831809][ T1109] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 399.982687][T15757] syzkaller0: entered promiscuous mode [ 399.998866][T15757] syzkaller0: entered allmulticast mode [ 400.060865][ T1109] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 400.944767][T15781] sctp: [Deprecated]: syz-executor.3 (pid 15781) Use of int in max_burst socket option deprecated. [ 400.944767][T15781] Use struct sctp_assoc_value instead [ 401.819462][ T5126] Bluetooth: hci1: command tx timeout [ 402.982192][T15781] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 403.309189][ T1109] bridge_slave_1: left allmulticast mode [ 403.329769][T15798] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 403.337776][ T1109] bridge_slave_1: left promiscuous mode [ 403.338136][T15798] netlink: 636 bytes leftover after parsing attributes in process `syz-executor.1'. [ 403.377338][ T1109] bridge0: port 2(bridge_slave_1) entered disabled state [ 403.394662][ T1109] bridge_slave_0: left allmulticast mode [ 403.400688][ T1109] bridge_slave_0: left promiscuous mode [ 403.406563][ T1109] bridge0: port 1(bridge_slave_0) entered disabled state [ 403.440706][T15802] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 403.744717][T15815] sctp: [Deprecated]: syz-executor.2 (pid 15815) Use of int in max_burst socket option deprecated. [ 403.744717][T15815] Use struct sctp_assoc_value instead [ 403.907397][ T5126] Bluetooth: hci1: command tx timeout [ 404.571832][ T1109] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 404.645515][ T1109] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 404.671377][ T1109] bond0 (unregistering): Released all slaves [ 404.732802][T15815] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 405.250542][T15849] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 405.440311][ T1109] hsr_slave_0: left promiscuous mode [ 405.461997][ T1109] hsr_slave_1: left promiscuous mode [ 405.485645][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 405.515383][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 405.562726][ T1109] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 405.574393][ T1109] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 405.660526][ T1109] veth1_macvtap: left promiscuous mode [ 405.666243][ T1109] veth0_macvtap: left promiscuous mode [ 405.680618][ T1109] veth1_vlan: left promiscuous mode [ 405.691930][ T1109] veth0_vlan: left promiscuous mode [ 405.977335][ T5126] Bluetooth: hci1: command tx timeout [ 406.144808][T15872] sctp: [Deprecated]: syz-executor.1 (pid 15872) Use of int in max_burst socket option deprecated. [ 406.144808][T15872] Use struct sctp_assoc_value instead [ 406.600966][ T29] audit: type=1804 audit(1717188431.908:69): pid=15877 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2751403032/syzkaller.fv0L3N/547/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 406.776557][ T1109] team0 (unregistering): Port device team_slave_1 removed [ 406.835508][ T1109] team0 (unregistering): Port device team_slave_0 removed [ 407.577644][T15751] chnl_net:caif_netlink_parms(): no params data found [ 407.603023][T15874] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 407.952486][T15751] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.000632][T15751] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.047718][T15751] bridge_slave_0: entered allmulticast mode [ 408.055390][T15751] bridge_slave_0: entered promiscuous mode [ 408.058624][ T5126] Bluetooth: hci1: command tx timeout [ 408.110187][T15751] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.125277][T15751] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.132874][T15751] bridge_slave_1: entered allmulticast mode [ 408.140764][T15751] bridge_slave_1: entered promiscuous mode [ 408.220934][T15751] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 408.261720][T15751] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 408.350653][T15916] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 408.460187][T15751] team0: Port device team_slave_0 added [ 408.482947][T15751] team0: Port device team_slave_1 added [ 408.576228][T15751] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 408.597748][T15751] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.641399][T15751] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 408.704952][T15927] sctp: [Deprecated]: syz-executor.1 (pid 15927) Use of int in max_burst socket option deprecated. [ 408.704952][T15927] Use struct sctp_assoc_value instead [ 408.740202][T15751] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 408.760436][T15751] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 408.808886][T15751] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 408.873838][T15751] hsr_slave_0: entered promiscuous mode [ 408.888097][T15751] hsr_slave_1: entered promiscuous mode [ 408.894971][T15751] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 408.903645][T15751] Cannot create hsr debugfs directory [ 408.909435][T15930] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 409.098054][T15939] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 409.822383][T15751] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 409.864723][T15751] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 409.889977][T15751] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 409.923904][T15751] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 410.005952][T15969] tipc: Started in network mode [ 410.020370][T15969] tipc: Node identity 9ca6, cluster identity 3 [ 410.026600][T15969] tipc: Node number set to 40102 [ 410.295210][T15986] sctp: [Deprecated]: syz-executor.1 (pid 15986) Use of int in max_burst socket option deprecated. [ 410.295210][T15986] Use struct sctp_assoc_value instead [ 410.303919][T15751] 8021q: adding VLAN 0 to HW filter on device bond0 [ 410.383434][T15751] 8021q: adding VLAN 0 to HW filter on device team0 [ 410.427698][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 410.434915][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 410.444046][T15991] Bluetooth: MGMT ver 1.22 [ 410.451062][T15991] Bluetooth: hci3: invalid length 0, exp 2 for type 14 [ 410.465268][T15988] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 410.491519][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 410.498852][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 410.763558][T16002] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 410.889326][T15751] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 410.925289][T16009] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 410.993050][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::ffff:0.0.0.0]:20002. Sending cookies. [ 411.040488][T15751] veth0_vlan: entered promiscuous mode [ 411.089192][T15751] veth1_vlan: entered promiscuous mode [ 411.171567][T15751] veth0_macvtap: entered promiscuous mode [ 411.192246][T15751] veth1_macvtap: entered promiscuous mode [ 411.270006][T15751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.309833][T16016] --map-set only usable from mangle table [ 411.320853][T15751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.367277][T15751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.407121][T15751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.437484][T15751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.467050][T15751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.508355][T15751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.527065][T15751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.543708][T15751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.559195][T15751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.577583][T15751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.619423][T15751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.637116][T15751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 411.647826][T15751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.663848][T15751] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 411.728563][T15751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.764441][T15751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.780871][T15751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.814390][T15751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.829355][T15751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.849814][T15751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.871896][T15751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.894499][T15751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.907739][T15751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.929898][T15751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.940362][T15751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.953084][T15751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.963354][T15751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.975159][T15751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 411.985352][T15751] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 411.998262][T15751] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 412.014882][T15751] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 412.026562][T16043] sctp: [Deprecated]: syz-executor.3 (pid 16043) Use of int in max_burst socket option deprecated. [ 412.026562][T16043] Use struct sctp_assoc_value instead [ 412.081244][T15751] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.107681][T15751] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.116565][T15751] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.137345][T15751] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 412.165931][T16043] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 412.400815][T12202] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.418256][T12202] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.503255][ T45] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 412.518973][ T45] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 412.869671][T16075] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 412.936663][T16077] sctp: [Deprecated]: syz-executor.3 (pid 16077) Use of int in max_burst socket option deprecated. [ 412.936663][T16077] Use struct sctp_assoc_value instead [ 412.968322][T16077] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 413.276472][T16089] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 413.620778][T16106] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 414.159945][T16130] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 414.306353][T16134] bridge_slave_1: left allmulticast mode [ 414.316020][T16134] bridge_slave_1: left promiscuous mode [ 414.345872][T16134] bridge0: port 2(bridge_slave_1) entered disabled state [ 414.396472][T16134] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 414.423651][T16134] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 414.453787][T16144] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 414.902271][T16171] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 415.543999][T16185] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 415.758933][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 415.875775][T16186] mac80211_hwsim hwsim39 wlan1: entered promiscuous mode [ 415.910195][T16189] bridge_slave_1: left allmulticast mode [ 415.916626][T16189] bridge_slave_1: left promiscuous mode [ 415.923422][T16189] bridge0: port 2(bridge_slave_1) entered disabled state [ 416.011462][T16189] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 416.022340][T16189] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 416.129177][T16198] x_tables: duplicate underflow at hook 2 [ 416.433986][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.613948][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 416.651348][T16218] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 416.670126][ T5118] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 416.683162][ T5118] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 416.707626][ T5118] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 416.723526][ T5118] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 416.743081][ T5118] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 416.758586][ T5118] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 416.841416][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 417.446803][ T12] bridge_slave_1: left allmulticast mode [ 417.487158][ T12] bridge_slave_1: left promiscuous mode [ 417.547665][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 417.663909][ T12] bridge_slave_0: left allmulticast mode [ 417.677128][ T12] bridge_slave_0: left promiscuous mode [ 417.697448][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 418.678960][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 418.708525][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 418.730717][ T12] bond0 (unregistering): Released all slaves [ 418.788199][T16256] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 418.810382][T16261] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 418.857101][ T5126] Bluetooth: hci1: command tx timeout [ 418.982436][T16270] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 419.048852][T16224] chnl_net:caif_netlink_parms(): no params data found [ 419.477541][ T12] hsr_slave_0: left promiscuous mode [ 419.498726][ T12] hsr_slave_1: left promiscuous mode [ 419.533280][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 419.557693][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 419.585486][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 419.601796][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 419.663892][ T12] veth1_macvtap: left promiscuous mode [ 419.678889][ T12] veth0_macvtap: left promiscuous mode [ 419.690634][ T12] veth1_vlan: left promiscuous mode [ 419.703081][ T12] veth0_vlan: left promiscuous mode [ 420.665985][ T12] team0 (unregistering): Port device team_slave_1 removed [ 420.734823][ T12] team0 (unregistering): Port device team_slave_0 removed [ 420.939515][ T5118] Bluetooth: hci1: command tx timeout [ 421.455267][T16305] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 421.475110][T16314] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 421.499248][T16312] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 421.537441][T16315] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 421.557868][T16318] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 421.727404][T16224] bridge0: port 1(bridge_slave_0) entered blocking state [ 421.739822][T16224] bridge0: port 1(bridge_slave_0) entered disabled state [ 421.755743][T16224] bridge_slave_0: entered allmulticast mode [ 421.772870][T16224] bridge_slave_0: entered promiscuous mode [ 421.792240][T16327] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 421.820101][T16224] bridge0: port 2(bridge_slave_1) entered blocking state [ 421.830365][T16224] bridge0: port 2(bridge_slave_1) entered disabled state [ 421.848859][T16224] bridge_slave_1: entered allmulticast mode [ 421.868521][T16224] bridge_slave_1: entered promiscuous mode [ 422.083884][T16224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 422.124039][T16224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 422.210410][T16224] team0: Port device team_slave_0 added [ 422.232256][T16224] team0: Port device team_slave_1 added [ 422.298814][ T5118] Bluetooth: hci5: command 0x0405 tx timeout [ 422.331618][T16224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 422.341790][T16224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.368512][T16224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 422.393278][T16224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 422.400924][T16224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 422.427943][T16224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 422.576632][T16224] hsr_slave_0: entered promiscuous mode [ 422.590434][T16224] hsr_slave_1: entered promiscuous mode [ 422.621380][T16224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 422.629241][T16224] Cannot create hsr debugfs directory [ 422.983868][T16352] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 423.017301][ T5126] Bluetooth: hci1: command tx timeout [ 423.058661][T16356] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 423.441391][T16376] RDS: rds_bind could not find a transport for ::ffff:172.20.20.170, load rds_tcp or rds_rdma? [ 423.591064][T16376] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 423.921734][T16224] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 423.951961][T16224] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 423.992090][T16224] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 424.029051][T16224] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 424.235279][T16224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 424.284538][T16224] 8021q: adding VLAN 0 to HW filter on device team0 [ 424.342003][ T5158] bridge0: port 1(bridge_slave_0) entered blocking state [ 424.349319][ T5158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 424.373176][ T5158] bridge0: port 2(bridge_slave_1) entered blocking state [ 424.380428][ T5158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 424.670523][T16400] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 424.803240][T16224] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 424.865957][T16402] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 424.886074][ T2818] [ 424.888472][ T2818] ====================================================== [ 424.895504][ T2818] WARNING: possible circular locking dependency detected [ 424.902540][ T2818] 6.9.0-syzkaller-12171-gccf23c916ca3 #0 Not tainted [ 424.909335][ T2818] ------------------------------------------------------ [ 424.916551][ T2818] kworker/u8:10/2818 is trying to acquire lock: [ 424.922790][ T2818] ffff88804242ea20 (&stab->lock){+.-.}-{2:2}, at: sock_map_delete_elem+0x175/0x250 [ 424.932453][ T2818] [ 424.932453][ T2818] but task is already holding lock: [ 424.939837][ T2818] ffff888051cbd2b0 (&psock->link_lock){+...}-{2:2}, at: sock_map_unref+0xcc/0x5e0 [ 424.949210][ T2818] [ 424.949210][ T2818] which lock already depends on the new lock. [ 424.949210][ T2818] [ 424.959625][ T2818] [ 424.959625][ T2818] the existing dependency chain (in reverse order) is: [ 424.968647][ T2818] [ 424.968647][ T2818] -> #1 (&psock->link_lock){+...}-{2:2}: [ 424.976467][ T2818] lock_acquire+0x1ed/0x550 [ 424.981489][ T2818] _raw_spin_lock_bh+0x35/0x50 [ 424.986767][ T2818] sock_map_update_common+0x31c/0x5b0 [ 424.992657][ T2818] sock_map_update_elem_sys+0x55f/0x910 [ 424.998749][ T2818] map_update_elem+0x53a/0x6f0 [ 425.004050][ T2818] __sys_bpf+0x76f/0x810 [ 425.008820][ T2818] __x64_sys_bpf+0x7c/0x90 [ 425.013756][ T2818] do_syscall_64+0xf3/0x230 [ 425.018806][ T2818] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 425.025239][ T2818] [ 425.025239][ T2818] -> #0 (&stab->lock){+.-.}-{2:2}: [ 425.032555][ T2818] validate_chain+0x18e0/0x5900 [ 425.038278][ T2818] __lock_acquire+0x1346/0x1fd0 [ 425.043639][ T2818] lock_acquire+0x1ed/0x550 [ 425.048651][ T2818] _raw_spin_lock_bh+0x35/0x50 [ 425.053928][ T2818] sock_map_delete_elem+0x175/0x250 [ 425.059641][ T2818] bpf_prog_b236b74763481f2e+0x42/0x4b [ 425.065610][ T2818] bpf_trace_run2+0x2ec/0x540 [ 425.070900][ T2818] kfree+0x2bb/0x360 [ 425.075317][ T2818] sock_map_unref+0x3ac/0x5e0 [ 425.080507][ T2818] sock_hash_free+0x580/0x820 [ 425.085699][ T2818] bpf_map_free_deferred+0xe6/0x110 [ 425.091410][ T2818] process_scheduled_works+0xa2c/0x1830 [ 425.097471][ T2818] worker_thread+0x86d/0xd70 [ 425.102576][ T2818] kthread+0x2f0/0x390 [ 425.107161][ T2818] ret_from_fork+0x4b/0x80 [ 425.112093][ T2818] ret_from_fork_asm+0x1a/0x30 [ 425.117373][ T2818] [ 425.117373][ T2818] other info that might help us debug this: [ 425.117373][ T2818] [ 425.127616][ T2818] Possible unsafe locking scenario: [ 425.127616][ T2818] [ 425.135056][ T2818] CPU0 CPU1 [ 425.140493][ T2818] ---- ---- [ 425.145843][ T2818] lock(&psock->link_lock); [ 425.150421][ T2818] lock(&stab->lock); [ 425.157001][ T2818] lock(&psock->link_lock); [ 425.164097][ T2818] lock(&stab->lock); [ 425.168175][ T2818] [ 425.168175][ T2818] *** DEADLOCK *** [ 425.168175][ T2818] [ 425.176337][ T2818] 6 locks held by kworker/u8:10/2818: [ 425.181706][ T2818] #0: ffff888015089148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 425.193375][ T2818] #1: ffffc90009827d00 ((work_completion)(&map->work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 425.205138][ T2818] #2: ffff88807ea81f58 (sk_lock-AF_INET){+.+.}-{0:0}, at: sock_hash_free+0x4b3/0x820 [ 425.214736][ T2818] #3: ffffffff8e333e60 (rcu_read_lock){....}-{1:2}, at: sock_hash_free+0x4bf/0x820 [ 425.224165][ T2818] #4: ffff888051cbd2b0 (&psock->link_lock){+...}-{2:2}, at: sock_map_unref+0xcc/0x5e0 [ 425.233956][ T2818] #5: ffffffff8e333e60 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1fc/0x540 [ 425.243379][ T2818] [ 425.243379][ T2818] stack backtrace: [ 425.249363][ T2818] CPU: 0 PID: 2818 Comm: kworker/u8:10 Not tainted 6.9.0-syzkaller-12171-gccf23c916ca3 #0 [ 425.259354][ T2818] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 425.269422][ T2818] Workqueue: events_unbound bpf_map_free_deferred [ 425.275890][ T2818] Call Trace: [ 425.279258][ T2818] [ 425.282177][ T2818] dump_stack_lvl+0x241/0x360 [ 425.286849][ T2818] ? __pfx_dump_stack_lvl+0x10/0x10 [ 425.292159][ T2818] ? print_circular_bug+0x130/0x1a0 [ 425.297520][ T2818] check_noncircular+0x36a/0x4a0 [ 425.302541][ T2818] ? __pfx_check_noncircular+0x10/0x10 [ 425.307993][ T2818] ? lockdep_lock+0x123/0x2b0 [ 425.312662][ T2818] ? _find_first_zero_bit+0xd3/0x100 [ 425.317942][ T2818] validate_chain+0x18e0/0x5900 [ 425.322798][ T2818] ? __pfx_validate_chain+0x10/0x10 [ 425.328082][ T2818] ? __pfx_validate_chain+0x10/0x10 [ 425.333298][ T2818] ? validate_chain+0x11e/0x5900 [ 425.338255][ T2818] ? validate_chain+0x11e/0x5900 [ 425.343227][ T2818] ? mark_lock+0x9a/0x350 [ 425.347567][ T2818] __lock_acquire+0x1346/0x1fd0 [ 425.352433][ T2818] lock_acquire+0x1ed/0x550 [ 425.356929][ T2818] ? sock_map_delete_elem+0x175/0x250 [ 425.362324][ T2818] ? __lock_acquire+0x1346/0x1fd0 [ 425.367363][ T2818] ? __pfx_lock_acquire+0x10/0x10 [ 425.372383][ T2818] ? sock_map_delete_elem+0x175/0x250 [ 425.377744][ T2818] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 425.383544][ T2818] ? sock_map_delete_elem+0x175/0x250 [ 425.388922][ T2818] _raw_spin_lock_bh+0x35/0x50 [ 425.393707][ T2818] ? sock_map_delete_elem+0x175/0x250 [ 425.399092][ T2818] sock_map_delete_elem+0x175/0x250 [ 425.404320][ T2818] ? __pfx_sock_map_delete_elem+0x10/0x10 [ 425.410057][ T2818] ? bpf_trace_run2+0x1fc/0x540 [ 425.414931][ T2818] bpf_prog_b236b74763481f2e+0x42/0x4b [ 425.420379][ T2818] bpf_trace_run2+0x2ec/0x540 [ 425.425065][ T2818] ? __pfx_bpf_trace_run2+0x10/0x10 [ 425.430517][ T2818] ? do_raw_spin_lock+0x14f/0x370 [ 425.435537][ T2818] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 425.441331][ T2818] ? sock_map_unref+0x3ac/0x5e0 [ 425.446201][ T2818] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 425.451568][ T2818] ? sock_map_unref+0x3ac/0x5e0 [ 425.456427][ T2818] kfree+0x2bb/0x360 [ 425.460322][ T2818] sock_map_unref+0x3ac/0x5e0 [ 425.464993][ T2818] ? sock_hash_free+0x4bf/0x820 [ 425.469849][ T2818] sock_hash_free+0x580/0x820 [ 425.474620][ T2818] ? __pfx_sock_hash_free+0x10/0x10 [ 425.479811][ T2818] ? percpu_ref_put+0x1f/0x250 [ 425.484579][ T2818] ? percpu_ref_put+0x18b/0x250 [ 425.489427][ T2818] ? bpf_map_free_deferred+0x9a/0x110 [ 425.494792][ T2818] bpf_map_free_deferred+0xe6/0x110 [ 425.499992][ T2818] ? process_scheduled_works+0x945/0x1830 [ 425.505790][ T2818] process_scheduled_works+0xa2c/0x1830 [ 425.511338][ T2818] ? __pfx_process_scheduled_works+0x10/0x10 [ 425.517314][ T2818] ? assign_work+0x364/0x3d0 [ 425.521896][ T2818] worker_thread+0x86d/0xd70 [ 425.526480][ T2818] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 425.532455][ T2818] ? __kthread_parkme+0x169/0x1d0 [ 425.537472][ T2818] ? __pfx_worker_thread+0x10/0x10 [ 425.542662][ T2818] kthread+0x2f0/0x390 [ 425.546723][ T2818] ? __pfx_worker_thread+0x10/0x10 [ 425.551962][ T2818] ? __pfx_kthread+0x10/0x10 [ 425.556774][ T2818] ret_from_fork+0x4b/0x80 [ 425.561200][ T2818] ? __pfx_kthread+0x10/0x10 2024/05/31 20:47:30 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 425.565784][ T2818] ret_from_fork_asm+0x1a/0x30 [ 425.570637][ T2818] [ 425.574422][ T5126] Bluetooth: hci1: command tx timeout [ 425.643622][T16404] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 425.686027][T16408] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'.