last executing test programs: 7.22975682s ago: executing program 3: r0 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r0, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000000080)={0xe0, 0x10, 0x509, 0x0, 0x0, "", [@generic="6f6d8864d22a3f2ffaa46c88bc", @typed={0xa9, 0x0, 0x0, 0x0, @binary="2b0e13e735a3184f123d6da2f1acfac0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce2d715f2dbdda0a9423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d67683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e434db5dd5e995aa0912086d9f4606d2e4cc898739222c5d3a83cb6b707f3336336ebb7d681"}, @nested={0x14, 0x0, 0x0, 0x1, [@typed={0xd, 0x0, 0x0, 0x0, @binary="cfe7336f91087ba18b"}]}]}, 0xe0}], 0x1}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) socket$key(0xf, 0x3, 0x2) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) getsockopt$inet6_udp_int(r3, 0x11, 0x66, 0x0, &(0x7f0000000040)) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000100)=@framed={{0x18, 0x2, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x41}]}, &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x2, 0xd50, 0x0, &(0x7f0000000200)="967ea6141c24565debcb", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x9}, 0x50) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) shutdown(r5, 0x1) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r1, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x62, 0x8, 0xa7d, 0x3, 0x1}, &(0x7f0000000140)=0x14) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000580)={0xae4, 0x0}, 0x8) r8 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f00000005c0)={0x0, 0x8, 0x10}, 0xc) r9 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000680)={0x3, 0x4, 0x4, 0xa, 0x0, r1, 0x400, '\x00', 0x0, r1}, 0x48) r10 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0xa, 0x9, 0x8, 0x2}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x3, 0x6, &(0x7f0000000180)=ANY=[@ANYBLOB="1802000000000000000000000000100018130000", @ANYRES32=r10, @ANYBLOB="0000000000000000850000001f00000095"], &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000740)={0x1b, 0x12, &(0x7f0000000340)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8000, 0x0, 0x0, 0x0, 0x6}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}, @func={0x85, 0x0, 0x1, 0x0, 0x3}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x9}]}, &(0x7f0000000400)='GPL\x00', 0x8, 0xb4, &(0x7f0000000440)=""/180, 0x40f00, 0x58, '\x00', 0x0, 0xd, r2, 0x8, &(0x7f0000000500)={0x8, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x6, 0x1000, 0x7e2}, 0x10, r7, r4, 0x0, &(0x7f0000000700)=[r2, r8, r2, r9, r2, r1, r1, r1, r2, r10], 0x0, 0x10, 0x8}, 0x90) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r1, 0x84, 0x6, &(0x7f0000000280)={r6, @in6={{0xa, 0x4e23, 0x93, @ipv4={'\x00', '\xff\xff', @multicast2}, 0x6}}}, &(0x7f0000000180)=0x84) shutdown(r5, 0x1) socket$nl_route(0x10, 0x3, 0x0) 6.094641696s ago: executing program 3: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x1000) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000540)=0xe8) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$binfmt_misc(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="3100030007", @ANYRES16=r6], 0xd) r7 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(r8, 0x0, 0x0, 0x0) r9 = gettid() r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(r9, &(0x7f0000000740)='ns/cgroup\x00') r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000800)={'wpan0\x00', 0x0}) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r13, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x20, r11, 0x416, 0x70bd2d, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}}, 0x4000000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r10, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x38, r11, 0x1, 0x70bd27, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, r9}]}, 0x38}}, 0x14) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x134, 0x40, 0x4, 0x70bd28, 0x25dfdbfb, {0x1d}, [@typed={0x8, 0x144, 0x0, 0x0, @uid=0xee00}, @nested={0x10f, 0x0, 0x0, 0x1, [@typed={0x4, 0xcf}, @generic, @generic="8e4c97537b886fd6da1409bdb1e20b9b883a67c98dff28208164683052bc435b164a983731e30abbae9cfd9bd89b67ceea829c8c1721505a4838e7ff257f9897ef9046f8a70fb7dc1d9f944ddf94210a4c304d9b67781b8463a2e2b196159d6e61e082f9abb4e988e3fa9cefc0deb0e61e66c593c794fb7e636f0897ea39611840047980affe1e71bb2721fa716430a52e1fe60d39543aefb79777eef12260ed16212293a1301a3db104e733341a5d6118fcf10f98ce6571a0a5215e07cf69e7543e2e091fd30f61ecd28e1706dd", @typed={0x14, 0xb3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="61c3ae6321a5579d4c331e7b4722fad5fe", @typed={0x8, 0x72, 0x0, 0x0, @str=':-7\x00'}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0x8, 0x12e, 0x0, 0x0, @pid}]}, 0x134}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000040) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000800)=0x0) r15 = getgid() sendmsg$unix(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="a16966167a8e3ae2b2e0290d69e7dbc642532832c986967f33e57a6d289d4d474de82c368559c8ea7b827bc64623cfef7cd50000140ed00c0d00868152f7173971102bfe8caef64bcd3defe47f8c2436d179c756a28561f3ebcd5343bd0c34312812ea7e87cf4cd53d8f11f6f6c561a74abb93ab081f18f93a7db3005fb31402db1f8722908503", 0x87}, {&(0x7f0000000280)="a9ad9f5c1f729fdc8067448c19bd9e0c988da81dd01d209ba0fe85b941e7dd776784f26dabbbb346cb643ff57da7ddbd03479165383c3d14b67ce73b83ca419c401827498a47b16390218272a4c1926fa575053ac4cf4fb2bff32ec9bd32ded9a4b798fd07a077b0e4fc9c6cbbae7ab5c9f07c7ed6d0da6f3454b578e86f4919047f2683c351bc96556aae1afac23eca47d6692cf1d7ecaca3930dd4c8845c5440d8b75e5f4dd76d0fe12b7b", 0xac}, {&(0x7f0000000340)="4ab9ad0884c2273eae4ad406788bfce10b791137c392695fa9bddf3615b32a4fdd3b4fd1cbeb2ce3e8ecd6afb8a44f3abe8f71ff3b584c48e89b2b6b6e91e18cbc7c02d881f47173dcc9cdcb839d09baf7cf5d556b94f8b812aabffacb986725bf3d6508f32a45b07b422c45c72b40134a5e87bf00e11f81fc4315f00760d7943f4c40417c7e97ec63dfd14ba73fa1f2ff33c283d8039cc1439864d9790781cd78fa71da09e53abf6ad1fa2275c3be2b7480803adb6c34d0b7c7bfbf781be6bc55b1d1927ccb93a3e4c0", 0xca}, {&(0x7f0000000440)="66ae3e8d8121edf6e21b195640011cefea45814cb467b7bda97dfa2b7e2fd989d844079d852ca34a7aaeb843e0765d68c30b311bb42e0c283cfd8bb4a2b6f7c5e29292d6f09166910e039e2e948c605aea799f8166fb959a4b33d3c6c0376e70f8660a78eaa536ac912d7f0c1ab55d4637d834b42cb80f4c82a635741f218433580d630783c225a770704674dcdedc9b8faa0a417822556ca40608e311376df01666a515a3bdf12c2afcbf78d1e5b1a7bb160e668e1b94f3310a316b7bcbe53cdc9e67a6364306a223c852800fe7f164a07a1ea500937697dadebb486528e9dc60f02d762699cefa7c85173fd115873c3361cac302289d0af8", 0xf9}, {&(0x7f00000005c0)="b54c790160f95e24d9a43f3d377ed96f49005f34a1446c41d5138625322030cfd3273d9fb92ce1c264dcb041045ae08b4d00a17d4a6bb3ac128b67681ac96077370e401b9ba2e4d6d24c2c13c9b3ae6fb03f22b3735c475cc76c103c61e973d2834a0548c93392a3018c7e59ec07ca29", 0x70}], 0x5, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r6}}}, @rights={{0x20, 0x1, 0x1, [r7, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r9, r14, r15}}}], 0x60, 0x2c000}, 0x4000085) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newsa={0xf0, 0x10, 0xebac334d7893b20e, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private1, 0x0, 0x3c}, @in=@broadcast, {}, {}, {0x0, 0x0, 0xfffffffd}, 0x0, 0xfffffffc, 0xa}}, 0xf0}}, 0x0) 4.700239307s ago: executing program 4: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffbffaf, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000001600)='\b', 0xfffffffffffffd68, 0x4004095, 0x0, 0xd56888b5705b13c6) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(r1, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f000001a640)=""/102400, 0x19000, 0x0, 0x0, 0x40020000}, &(0x7f00000008c0)=0x3b) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000000)={0x0, @aes128, 0x0, @desc3}) 4.628144726s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000004821178f459c0b7a600", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100000000000c0002001f0000001e00000008000500", @ANYRES32=r4], 0x50}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010a3c000000120a01020000000000000000020000000900020073797a31000000000800f534fde400230900010073797a3000000000080003400000000a"], 0x64}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0xffffffff, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000077000800", @ANYRES32=r8, @ANYBLOB="000000000000000008000a0010000000"], 0x28}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r10, @ANYBLOB="887b231fce"], 0x28}}, 0x0) 4.302693283s ago: executing program 3: getsockopt$inet_sctp_SCTP_MAX_BURST(0xffffffffffffffff, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240)='./cgroup/syz1\x00', 0x200002, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f00000002c0), &(0x7f0000000780)=0x4) (async) openat$cgroup_ro(r0, &(0x7f0000000080)='rdma.current\x00', 0x275a, 0x0) (async) socket$inet6(0xa, 0x0, 0x0) (async) r1 = socket$packet(0x11, 0x2, 0x300) (async) r2 = socket$inet6(0xa, 0x800000000000002, 0x0) setsockopt$inet6_udp_int(r2, 0x11, 0x0, &(0x7f00000000c0), 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r4, 0x401c5820, 0x0) (async) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000380), 0x101bf) (async) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000080)={0x0, r5, 0x2, 0x4, 0xa3f7}) (async) ioctl$EXT4_IOC_MOVE_EXT(r5, 0xc028660f, 0x0) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000040)={'ip6gretap0\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xf, 0x4, 0x8, 0xc}, 0x48) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', r6, 0xffffffffffffffff, 0x0, 0x1}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001811", @ANYRES32=r8, @ANYBLOB="0000000000000000b702000003000000850000008600000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='svc_xprt_dequeue\x00', r9}, 0x10) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="6800000010000100"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000480012800e0001006970366772657461700000003400028008000100", @ANYRES32, @ANYBLOB="14000600fe80000000000000000000000000001514000700"], 0x68}}, 0x0) (async) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000040)={0x11, 0x0, r6, 0x1, 0x0, 0x6, @broadcast}, 0x14) (async) setsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, 0x0, 0x0) (async) r10 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="fcffffffffffbfff24001280080001006772650018000280060003000000000006002f0003000000040012"], 0x44}}, 0x0) (async) r11 = socket$l2tp(0x2, 0x2, 0x73) sendto$l2tp(r11, &(0x7f0000000040)="e5786a0d0000", 0x6, 0x0, &(0x7f0000000000)={0x2, 0x0, @loopback}, 0x10) r12 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r12, 0x1, 0x41, 0x0, 0x0) (async) bind$inet(0xffffffffffffffff, 0x0, 0x0) 4.01239514s ago: executing program 3: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000009000007010000f8ffffffb702000008000000b70300000000002085000000720001009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000007d0000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x30, r4, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x4e}}}}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x30}, 0x1, 0x0, 0x0, 0x10}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7}, 0x18) connect$can_j1939(r6, &(0x7f0000000140)={0x1d, r7}, 0x18) sendmsg$can_j1939(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)="4480502ac1216c3f00", 0x9}}, 0x0) setsockopt$sock_int(r6, 0x1, 0x4b, &(0x7f0000000240)=0x7ff, 0x4) recvmsg$can_j1939(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/101, 0x65}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='ext4_evict_inode\x00'}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, 0x2, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r8}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}, @TCA_MPLS_BOS={0x5, 0x6}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newtaction={0xcc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0xfffffffffffffffd}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xcc}}, 0x0) 3.944009101s ago: executing program 1: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x1000) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000540)=0xe8) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$binfmt_misc(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="3100030007", @ANYRES16=r6], 0xd) r7 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(r8, 0x0, 0x0, 0x0) r9 = gettid() r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(r9, &(0x7f0000000740)='ns/cgroup\x00') r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000800)={'wpan0\x00', 0x0}) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r13, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x20, r11, 0x416, 0x70bd2d, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}}, 0x4000000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r10, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x38, r11, 0x1, 0x70bd27, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, r9}]}, 0x38}}, 0x14) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x134, 0x40, 0x4, 0x70bd28, 0x25dfdbfb, {0x1d}, [@typed={0x8, 0x144, 0x0, 0x0, @uid=0xee00}, @nested={0x10f, 0x0, 0x0, 0x1, [@typed={0x4, 0xcf}, @generic, @generic="8e4c97537b886fd6da1409bdb1e20b9b883a67c98dff28208164683052bc435b164a983731e30abbae9cfd9bd89b67ceea829c8c1721505a4838e7ff257f9897ef9046f8a70fb7dc1d9f944ddf94210a4c304d9b67781b8463a2e2b196159d6e61e082f9abb4e988e3fa9cefc0deb0e61e66c593c794fb7e636f0897ea39611840047980affe1e71bb2721fa716430a52e1fe60d39543aefb79777eef12260ed16212293a1301a3db104e733341a5d6118fcf10f98ce6571a0a5215e07cf69e7543e2e091fd30f61ecd28e1706dd", @typed={0x14, 0xb3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="61c3ae6321a5579d4c331e7b4722fad5fe", @typed={0x8, 0x72, 0x0, 0x0, @str=':-7\x00'}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0x8, 0x12e, 0x0, 0x0, @pid}]}, 0x134}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000040) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000800)=0x0) r15 = getgid() sendmsg$unix(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="a16966167a8e3ae2b2e0290d69e7dbc642532832c986967f33e57a6d289d4d474de82c368559c8ea7b827bc64623cfef7cd50000140ed00c0d00868152f7173971102bfe8caef64bcd3defe47f8c2436d179c756a28561f3ebcd5343bd0c34312812ea7e87cf4cd53d8f11f6f6c561a74abb93ab081f18f93a7db3005fb31402db1f8722908503", 0x87}, {&(0x7f0000000280)="a9ad9f5c1f729fdc8067448c19bd9e0c988da81dd01d209ba0fe85b941e7dd776784f26dabbbb346cb643ff57da7ddbd03479165383c3d14b67ce73b83ca419c401827498a47b16390218272a4c1926fa575053ac4cf4fb2bff32ec9bd32ded9a4b798fd07a077b0e4fc9c6cbbae7ab5c9f07c7ed6d0da6f3454b578e86f4919047f2683c351bc96556aae1afac23eca47d6692cf1d7ecaca3930dd4c8845c5440d8b75e5f4dd76d0fe12b7b", 0xac}, {&(0x7f0000000340)="4ab9ad0884c2273eae4ad406788bfce10b791137c392695fa9bddf3615b32a4fdd3b4fd1cbeb2ce3e8ecd6afb8a44f3abe8f71ff3b584c48e89b2b6b6e91e18cbc7c02d881f47173dcc9cdcb839d09baf7cf5d556b94f8b812aabffacb986725bf3d6508f32a45b07b422c45c72b40134a5e87bf00e11f81fc4315f00760d7943f4c40417c7e97ec63dfd14ba73fa1f2ff33c283d8039cc1439864d9790781cd78fa71da09e53abf6ad1fa2275c3be2b7480803adb6c34d0b7c7bfbf781be6bc55b1d1927ccb93a3e4c0", 0xca}, {&(0x7f0000000440)="66ae3e8d8121edf6e21b195640011cefea45814cb467b7bda97dfa2b7e2fd989d844079d852ca34a7aaeb843e0765d68c30b311bb42e0c283cfd8bb4a2b6f7c5e29292d6f09166910e039e2e948c605aea799f8166fb959a4b33d3c6c0376e70f8660a78eaa536ac912d7f0c1ab55d4637d834b42cb80f4c82a635741f218433580d630783c225a770704674dcdedc9b8faa0a417822556ca40608e311376df01666a515a3bdf12c2afcbf78d1e5b1a7bb160e668e1b94f3310a316b7bcbe53cdc9e67a6364306a223c852800fe7f164a07a1ea500937697dadebb486528e9dc60f02d762699cefa7c85173fd115873c3361cac302289d0af8", 0xf9}, {&(0x7f00000005c0)="b54c790160f95e24d9a43f3d377ed96f49005f34a1446c41d5138625322030cfd3273d9fb92ce1c264dcb041045ae08b4d00a17d4a6bb3ac128b67681ac96077370e401b9ba2e4d6d24c2c13c9b3ae6fb03f22b3735c475cc76c103c61e973d2834a0548c93392a3018c7e59ec07ca29", 0x70}], 0x5, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r6}}}, @rights={{0x20, 0x1, 0x1, [r7, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r9, r14, r15}}}], 0x60, 0x2c000}, 0x4000085) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newsa={0xf0, 0x10, 0xebac334d7893b20e, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private1, 0x0, 0x3c}, @in=@broadcast, {}, {}, {0x0, 0x0, 0xfffffffd}, 0x0, 0xfffffffc, 0xa}}, 0xf0}}, 0x0) 3.904602435s ago: executing program 2: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES64=r0, @ANYBLOB="f3ffffffffffffff5ff6ad8e48540ac1639bbbd7b213bf"], 0x20}}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0x1a, &(0x7f0000000180)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x4e22, 0x5, @mcast1, 0x1}}, 0xd8ab, 0x0, 0x8, 0x0, 0xfffffffc}}, &(0x7f0000000000)=0xb0) 2.13342463s ago: executing program 4: socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0xffff}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @xfrm={{0x9}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x298}}, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)}, &(0x7f0000002100)=0x10) bind$alg(0xffffffffffffffff, &(0x7f0000000080)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4106(gcm(aes))\x00'}, 0x58) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000080)={0x2, 0x34000, &(0x7f0000000040)={&(0x7f0000000180)={0x2, 0xa, 0x0, 0x0, 0x2}, 0x10}}, 0x0) recvmmsg(r2, &(0x7f0000000740)=[{{&(0x7f00000005c0)=@tipc, 0x80, &(0x7f0000000800)=[{&(0x7f0000001740)=""/4081, 0xff1}, {&(0x7f0000000640)=""/251, 0xfb}, {&(0x7f0000000300)=""/52, 0x34}, {&(0x7f0000000180)=""/51, 0x33}, {&(0x7f0000000240)=""/140, 0x8c}], 0x5}}], 0x4000000000000b7, 0x2, 0x0) read(r2, &(0x7f0000000200)=""/7, 0x7) unshare(0x2000400) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000240)={0x0, @broadcast, @loopback}, &(0x7f0000000280)=0xc) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)=@getqdisc={0x28, 0x26, 0x200, 0x70bd26, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0x3}, {0xf, 0xe}, {0xfff2, 0x13}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x4) bind$802154_raw(0xffffffffffffffff, &(0x7f0000000000)={0x24, @long}, 0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x84, 0x0, &(0x7f00000003c0)) 2.127586111s ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb79164", 0x6c}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b40500000000000071108f000000000006000000000000009500000000000000f43f8228ce8b09f6"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b000000000000000000000000030000000023b500000000000100000000000000feffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000001100000009000000000000000000106cf4aa4ac99e8d000000006c6f00000000000000000000000000e2ffffffffff01000001000000100000fa6215e1c90fed90ac00000010a85f001a4b000000000000000580000000aaaaaabd0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfecc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@private2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)={0x18, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, "", [@typed={0x8, 0x108, 0x0, 0x0, @uid=r5}]}, 0x18}], 0x1}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@mcast2, 0x4e22, 0x0, 0x4e20, 0x0, 0xa, 0x20, 0x80, 0x88, 0x0, r5}, {0x7, 0x80000001, 0xa6, 0x1f, 0x7f5, 0x2, 0x7, 0x6}, {0x8, 0x1ff, 0x4, 0x800}, 0x1, 0x6e6bb9, 0x0, 0x0, 0x1, 0x2}, {{@in=@loopback, 0x4d3, 0x32}, 0x2, @in=@empty, 0x3503, 0x0, 0x2, 0x0, 0x2, 0x8, 0x6}}, 0xe8) write$binfmt_elf32(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "", ['\x00']}, 0x158) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r4}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20) write$cgroup_type(r1, &(0x7f0000000000), 0x184000) 2.033310735s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000004821178f459c0b7a600", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100000000000c0002001f0000001e00000008000500", @ANYRES32=r4], 0x50}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010a3c000000120a01020000000000000000020000000900020073797a31000000000800f534fde400230900010073797a3000000000080003400000000a"], 0x64}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0xffffffff, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000077000800", @ANYRES32=r8, @ANYBLOB="000000000000000008000a0010000000"], 0x28}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r10, @ANYBLOB="887b231fce"], 0x28}}, 0x0) 1.963804934s ago: executing program 3: socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000940)={0xffffffffffffffff, 0xffffffffffffffff}) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r1, 0x0, r3, 0x0, 0xf3a, 0x0) writev(r3, &(0x7f00000001c0)=[{&(0x7f0000000980)="f3", 0x1}, {&(0x7f0000000180)="45017869c2b974dc21adf56fad8f45", 0xf}], 0x2) write$binfmt_misc(r3, 0x0, 0xfdef) write(r0, 0x0, 0x0) bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYBLOB="0000000000000000b7020000004000008500000086000000850000000e00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000180)='btrfs_set_extent_bit\x00', r4}, 0x10) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000180)={0x0, 0x0, 0x0}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(0x0, r6) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f00000001c0)={'vxcan0\x00', 0x0}) r8 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$SO_BINDTODEVICE(r8, 0x1, 0x19, &(0x7f0000000240)='wlan0\x00', 0x10) bind$inet(r8, &(0x7f0000000440)={0x2, 0x0, @remote}, 0x10) connect$inet(r8, &(0x7f0000000280)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r8, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}}], 0x40000cf, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000040)={'syz_tun\x00'}) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000000)=0xf2e, 0x4) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f0000000400)={'tunl0\x00', &(0x7f0000000480)={'ip_vti0\x00', 0x0, 0x1, 0x8000, 0x8, 0x7, {{0x33, 0x4, 0x1, 0x26, 0xcc, 0x67, 0x0, 0x4, 0x2f, 0x0, @broadcast, @broadcast, {[@cipso={0x86, 0x9, 0x0, [{0x4, 0x3, "9d"}]}, @timestamp={0x44, 0x1c, 0xaf, 0x0, 0x9, [0x6, 0x0, 0x1, 0x3, 0x7fffffff, 0x81]}, @noop, @generic={0x0, 0xb, "3586eed07b81b7c366"}, @timestamp_addr={0x44, 0x54, 0xb9, 0x1, 0x9, [{@multicast2, 0x8}, {@remote, 0x4}, {@loopback, 0x9}, {@multicast2, 0x5}, {@rand_addr=0x64010100, 0x20}, {@multicast2, 0x2c000000}, {@dev={0xac, 0x14, 0x14, 0x7}, 0x40}, {@dev={0xac, 0x14, 0x14, 0x3b}, 0xa7b}, {@loopback, 0x9}, {@rand_addr=0x64010102, 0x7cc5e1be}]}, @end, @cipso={0x86, 0x24, 0x3, [{0x1, 0xb, "ef028069455735b0a7"}, {0x2, 0xa, "163e818ba1472ef7"}, {0x0, 0x9, "79414f76568f7d"}]}, @cipso={0x86, 0xb, 0xfffffffffffffffc, [{0x1, 0x5, "0dde46"}]}]}}}}}) sendto$packet(r9, &(0x7f0000000340)="6ec81f8bb9786ec667c8d8cbdaef30b9f52968ff4364e3994e85733d7cd68e0002c44a4b1da125a1a2a6357aaacf22a46211b1ba66d8a847f7ad57c78f7545c631359d13e1004cf6077362834d336ba41342eaac5bf5b349202464f5bebf35cb4b6cd3a1150000000000008ff76cf1fd7fba8c7df96787130b25217751223dd6e58245941a", 0x85, 0x1004, &(0x7f0000000300)={0x11, 0x0, r7, 0x4, 0x5, 0x6, @broadcast}, 0x14) r10 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) write$cgroup_int(r10, &(0x7f00000002c0)=0x6, 0x12) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) sendto$inet6(r3, &(0x7f00000000c0)="e4504e214c6fbf48e236dd9e9920e88651f3724a2888c4993858963560d1f1e6ab5ecb2d3b532e0a4c6cc6ba4db785d538256bfc4d3fb78f9070b753f10d997530f28d0578bc06d40e01e97a628bd33df4f66b5829299b2684a6a2fb737a9c90be235bdbe12f567d6870778d77a9bc6d45ea930cfec2b263975b5dd2cdbf7ff922212706bcb15e2208c88c2f5b44a529bd338ef60bf8f3", 0x97, 0x10, &(0x7f0000000040)={0xa, 0x4e21, 0x8, @remote, 0x9}, 0x1c) 1.943805818s ago: executing program 1: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000017c0)=ANY=[@ANYBLOB="600000070000000000800000000000000000000014000780080011400000000087f6b3f57f26e198050015000f000000050001000608a1b6c94d4af836220535b30000000500000000000005000400000000120900020073797a310000000011000300686173683a69702c6d1135c33ab63f51734cff54f473df3787d7c23f62480dbf5d15918920366b15d30a775181c3a3f415900e69"], 0x60}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000002c80)={0x0, 0x0, &(0x7f0000002c40)={&(0x7f0000003180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a01080000e0030000000e02000000090001007300803000000000080002400000000214000000110001"], 0x50}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x1, 0xa, 0x301}, 0x14}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x7, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r5], 0x0}, 0x90) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r6}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000500)={{}, &(0x7f0000000480)=0x1f6, &(0x7f00000004c0)='%pB \x00'}, 0x20) sendmmsg$inet(r4, &(0x7f00000010c0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=[@ip_retopts={{0x14, 0x0, 0x7, {[@generic={0x94, 0x2}]}}}], 0x18}}], 0x1, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000001940)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000001}, 0x0) readv(r2, &(0x7f0000000380)=[{&(0x7f0000000340)=""/22, 0x16}], 0x1) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) getsockname$packet(r7, &(0x7f0000000300)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_route(0x10, 0x3, 0x0) 1.895329102s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'team0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$smc(&(0x7f0000000040), 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, &(0x7f0000000100), 0x4) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) write$binfmt_aout(0xffffffffffffffff, 0x0, 0x120) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r3], 0x44}}, 0x0) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)}, 0x0) 1.861074403s ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) r1 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r1, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000340)={0x0, {{0xa, 0x0, 0x0, @mcast1}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x108) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f00000005c0)=ANY=[], 0x110) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) unshare(0x24000400) socket$can_raw(0x1d, 0x3, 0x1) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x29, &(0x7f0000000240), 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x6, 0x101, 0x82}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x0, 0x4, 0xfff, 0x5}, 0x48) r2 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r2, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x41, 0x3, 0x248, 0x0, 0x0, 0x0, 0xe0, 0x0, 0x1b0, 0x1f0, 0x1f0, 0x1b0, 0x1f0, 0x3, 0x0, {[{{@ip={@dev, @broadcast, 0x0, 0x0, 'wlan1\x00', 'wg1\x00', {}, {}, 0x6}, 0x0, 0xb8, 0xe0, 0x0, {0x0, 0xffffffffa0028000}, [@common=@ttl={{0x28}}, @common=@socket0={{0x20}}]}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0xffff}}}, {{@ip={@initdev={0xac, 0x1e, 0x0, 0x0}, @multicast2, 0x0, 0x0, 'vlan0\x00'}, 0x0, 0x70, 0xd0}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @link_local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x2a8) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x6, 0x4, 0x4001}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$SO_TIMESTAMPING(r3, 0x1, 0x8, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000540)='rpcb_setport\x00', r0}, 0x19) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="60000000020601010000000000000000000000001c00078005001400070004"], 0x60}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="240000001900090000040000086bb02f"], 0x24}}, 0x0) ioctl$TUNSETOFFLOAD(r4, 0xc004743e, 0x20001400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd1}, 0x90) ioctl$TUNSETOFFLOAD(r4, 0x4010744d, 0x20000000) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r6}, 0x48) bpf$MAP_UPDATE_BATCH(0x19, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x0, r7, 0x4, 0x2}, 0x38) 1.724251299s ago: executing program 1: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffbffaf, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000001600)='\b', 0xfffffffffffffd68, 0x4004095, 0x0, 0xd56888b5705b13c6) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(r1, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f000001a640)=""/102400, 0x19000, 0x0, 0x0, 0x40020000}, &(0x7f00000008c0)=0x3b) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, &(0x7f0000000980)={'sit0\x00', 0x0}) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000000)={0x0, @aes128, 0x0, @desc3}) 1.629928756s ago: executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002ac0)=@delchain={0x40c, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x378, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x60, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RATE64={0xc}]}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x2fc, 0x6, [@m_ctinfo={0xb8, 0x0, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6}]}, {0x81, 0x6, "55eb88be72ea2bba577976ef9b5ab407e07afa05e4594285326849c2ec806d7b79f86d10adeb18245c150ce2b9eaeb2380aa7104a6df31aefd38f6b7bb0a45721ccbc5daab03190ea553ce464d09642e4ff5eeaf1f2e6171c16bc9ed3d7f4e1d714b45e839ac2719fe34dbba607211f211a9b5b79c050373b7bea3b552"}, {0xc}, {0xc}}}, @m_nat={0xd0, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @broadcast}}]}, {0x55, 0x6, "ef93daeef78df7f9a037a0d7a2f92a1cc341deabba437fc636cbf66a843bc4e0304e79be1f16cfa199b042be92c52b0490cb3ccc8a115bd7fba1ddd4a3ea8aa011548c0a44af30d92f016d58b7280bd342"}, {0xc}, {0xc}}}, @m_connmark={0x13c, 0x0, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0xd1, 0x6, "66396e732cf67237ecb590a592c571fa73ca19ec26dea927df7162b385d80fe15ca7f5cb6a4d958bd18714cd4f89f48d039d7da0dc8795f6ad32634b6b66cf821e93079c15dda212b0b37b761850342ebe270d64e92b80cf9114d976338d2dbd729e033dcd00b517933d3e64d73a30fc4e9a29d250104fa297e7a7f17405df935efe7e4806b65a797a850f6a8d8e2c8a8b9f56953d1262211f307b4af9617b04c9c48dea9e41ef304ac3365b6d8846ba792c335b4b2b956f87fa20fc312fee715e656cbb8bb9509b871694c4d4"}, {0xc}, {0xc}}}, @m_bpf={0x34, 0x0, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x40c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000a80)={'gretap0\x00', 0x0, 0x80, 0x1, 0x8b, 0x7f, {{0x4d, 0x4, 0x3, 0x5, 0x134, 0x66, 0x0, 0x2, 0x2f, 0x0, @multicast2, @private=0xa010100, {[@cipso={0x86, 0x59, 0x0, [{0x7, 0x3, 'u'}, {0x0, 0x12, "a902036a4e8b6da83366904a92c5b68d"}, {0x2, 0xd, "da47def6e68ca1a92a4be5"}, {0x2, 0xc, "027cf6a585bd22c3fca3"}, {0x6, 0xa, "639a058dbcac78bf"}, {0x2, 0x12, "30211c710a23dffa9827733857bc85b9"}, {0x0, 0x9, "44e24450741010"}]}, @ssrr={0x89, 0x17, 0xbf, [@empty, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback]}, @lsrr={0x83, 0xb, 0xe, [@dev={0xac, 0x14, 0x14, 0x3b}, @local]}, @cipso={0x86, 0x31, 0xfffffffffffffffd, [{0x0, 0x11, "9ed2dad0a46416cb2c23f720507a5a"}, {0x5, 0x9, "de59372f049cc4"}, {0x0, 0x11, "67c5ec33214d76f629b5588d7d124c"}]}, @timestamp_prespec={0x44, 0x4c, 0x92, 0x3, 0xe, [{@empty, 0x4}, {@multicast2}, {@broadcast, 0x3}, {@local, 0x1}, {@rand_addr=0x64010102, 0x1}, {@rand_addr=0x64010100}, {@broadcast, 0x80}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80}, {@rand_addr=0x64010100, 0x2}]}, @timestamp={0x44, 0x28, 0x89, 0x0, 0x0, [0x9, 0x0, 0x1, 0x9, 0x7ff, 0x0, 0xfffffffe, 0x0, 0x8000]}]}}}}}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001b80)=@filter={'filter\x00', 0xe, 0x4, 0x388, 0xffffffff, 0x0, 0x1c8, 0x2f0, 0xffffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@ipv6={@local, @private2, [], [], 'team_slave_0\x00', 'vlan0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x8}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.623340891s ago: executing program 2: r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = accept4$unix(0xffffffffffffffff, 0x0, &(0x7f0000000000), 0x1000) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000200)=0x0) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000006c0)={{{@in6=@dev, @in=@multicast1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@local}, 0x0, @in6=@mcast1}}, &(0x7f0000000540)=0xe8) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) r5 = socket(0x10, 0x2, 0x0) getsockopt$sock_cred(r5, 0x1, 0x11, &(0x7f0000caaffb)={0x0, 0x0, 0x0}, &(0x7f0000cab000)=0xc) write$binfmt_misc(r4, &(0x7f0000000200)=ANY=[@ANYBLOB="3100030007", @ANYRES16=r6], 0xd) r7 = openat$cgroup_freezer_state(0xffffffffffffffff, &(0x7f00000007c0), 0x2, 0x0) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'ghash-generic\x00'}, 0x58) accept4(r8, 0x0, 0x0, 0x0) r9 = gettid() r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_open_procfs$namespace(r9, &(0x7f0000000740)='ns/cgroup\x00') r11 = syz_genetlink_get_family_id$nl802154(&(0x7f00000007c0), r10) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000800)={'wpan0\x00', 0x0}) r13 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_CCA_MODE(r13, &(0x7f0000000a80)={&(0x7f00000009c0)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000a40)={&(0x7f0000000a00)={0x20, r11, 0x416, 0x70bd2d, 0x0, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}]}, 0x20}}, 0x4000000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r10, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x38, r11, 0x1, 0x70bd27, 0x0, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_PID={0x8, 0x1c, r9}]}, 0x38}}, 0x14) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000080)={&(0x7f00000003c0)={0x138, 0x40, 0x4, 0x70bd28, 0x25dfdbfb, {0x1d}, [@typed={0x8, 0x144, 0x0, 0x0, @uid=0xee00}, @nested={0x112, 0x0, 0x0, 0x1, [@typed={0x4, 0xcf}, @generic, @generic="8e4c97537b886fd6da1409bdb1e20b9b883a67c98dff28208164683052bc435b164a983731e30abbae9cfd9bd89b67ceea829c8c1721505a4838e7ff257f9897ef9046f8a70fb7dc1d9f944ddf94210a4c304d9b67781b8463a2e2b196159d6e61e082f9abb4e988e3fa9cefc0deb0e61e66c593c794fb7e636f0897ea39611840047980affe1e71bb2721fa716430a52e1fe60d39543aefb79777eef12260ed16212293a1301a3db104e733341a5d6118fcf10f98ce6571a0a5215e07cf69e7543e2e091fd30f61ecd28e1706dd", @typed={0x14, 0xb3, 0x0, 0x0, @ipv6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, @generic="61c3ae6321a5579d4c331e7b4722fad5fe627efd", @typed={0x8, 0x72, 0x0, 0x0, @str=':-7\x00'}, @typed={0xc, 0x0, 0x0, 0x0, @u64}]}, @typed={0x8, 0x12e, 0x0, 0x0, @pid}]}, 0x138}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000040) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000800)=0x0) r15 = getgid() sendmsg$unix(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000640)=[{&(0x7f0000000040)="a16966167a8e3ae2b2e0290d69e7dbc642532832c986967f33e57a6d289d4d474de82c368559c8ea7b827bc64623cfef7cd50000140ed00c0d00868152f7173971102bfe8caef64bcd3defe47f8c2436d179c756a28561f3ebcd5343bd0c34312812ea7e87cf4cd53d8f11f6f6c561a74abb93ab081f18f93a7db3005fb31402db1f8722908503", 0x87}, {&(0x7f0000000280)="a9ad9f5c1f729fdc8067448c19bd9e0c988da81dd01d209ba0fe85b941e7dd776784f26dabbbb346cb643ff57da7ddbd03479165383c3d14b67ce73b83ca419c401827498a47b16390218272a4c1926fa575053ac4cf4fb2bff32ec9bd32ded9a4b798fd07a077b0e4fc9c6cbbae7ab5c9f07c7ed6d0da6f3454b578e86f4919047f2683c351bc96556aae1afac23eca47d6692cf1d7ecaca3930dd4c8845c5440d8b75e5f4dd76d0fe12b7b", 0xac}, {&(0x7f0000000340)="4ab9ad0884c2273eae4ad406788bfce10b791137c392695fa9bddf3615b32a4fdd3b4fd1cbeb2ce3e8ecd6afb8a44f3abe8f71ff3b584c48e89b2b6b6e91e18cbc7c02d881f47173dcc9cdcb839d09baf7cf5d556b94f8b812aabffacb986725bf3d6508f32a45b07b422c45c72b40134a5e87bf00e11f81fc4315f00760d7943f4c40417c7e97ec63dfd14ba73fa1f2ff33c283d8039cc1439864d9790781cd78fa71da09e53abf6ad1fa2275c3be2b7480803adb6c34d0b7c7bfbf781be6bc55b1d1927ccb93a3e4c0", 0xca}, {&(0x7f0000000440)="66ae3e8d8121edf6e21b195640011cefea45814cb467b7bda97dfa2b7e2fd989d844079d852ca34a7aaeb843e0765d68c30b311bb42e0c283cfd8bb4a2b6f7c5e29292d6f09166910e039e2e948c605aea799f8166fb959a4b33d3c6c0376e70f8660a78eaa536ac912d7f0c1ab55d4637d834b42cb80f4c82a635741f218433580d630783c225a770704674dcdedc9b8faa0a417822556ca40608e311376df01666a515a3bdf12c2afcbf78d1e5b1a7bb160e668e1b94f3310a316b7bcbe53cdc9e67a6364306a223c852800fe7f164a07a1ea500937697dadebb486528e9dc60f02d762699cefa7c85173fd115873c3361cac302289d0af8", 0xf9}, {&(0x7f00000005c0)="b54c790160f95e24d9a43f3d377ed96f49005f34a1446c41d5138625322030cfd3273d9fb92ce1c264dcb041045ae08b4d00a17d4a6bb3ac128b67681ac96077370e401b9ba2e4d6d24c2c13c9b3ae6fb03f22b3735c475cc76c103c61e973d2834a0548c93392a3018c7e59ec07ca29", 0x70}], 0x5, &(0x7f0000000840)=[@cred={{0x1c, 0x1, 0x2, {r2, r3, r6}}}, @rights={{0x20, 0x1, 0x1, [r7, r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r9, r14, r15}}}], 0x60, 0x2c000}, 0x4000085) sendmsg$nl_xfrm(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newsa={0xf0, 0x10, 0xebac334d7893b20e, 0x0, 0x0, {{@in6=@private2, @in=@rand_addr=0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xee01}, {@in6=@private1, 0x0, 0x3c}, @in=@broadcast, {}, {}, {0x0, 0x0, 0xfffffffd}, 0x0, 0xfffffffc, 0xa}}, 0xf0}}, 0x0) 1.518188072s ago: executing program 0: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES64=r0, @ANYBLOB="f3ffffffffffffff5ff6ad8e48540ac1639bbbd7b213bf"], 0x20}}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0x1a, &(0x7f0000000180)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x4e22, 0x5, @mcast1, 0x1}}, 0xd8ab, 0x0, 0x8, 0x0, 0xfffffffc}}, &(0x7f0000000000)=0xb0) 1.381420501s ago: executing program 0: r0 = socket$inet6(0xa, 0x1, 0x0) bind$inet6(r0, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0xfffffefffffbffaf, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000001600)='\b', 0xfffffffffffffd68, 0x4004095, 0x0, 0xd56888b5705b13c6) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) connect$unix(r1, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f000001a640)=""/102400, 0x19000, 0x0, 0x0, 0x40020000}, &(0x7f00000008c0)=0x3b) socket(0x10, 0x803, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(r2, 0x89f8, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY(0xffffffffffffffff, 0x400c6615, &(0x7f0000000000)={0x0, @aes128, 0x0, @desc3}) 1.377137153s ago: executing program 2: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002ac0)=@delchain={0x40c, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x378, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x60, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_RATE64={0xc}]}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}, @TCA_ROUTE4_ACT={0x2fc, 0x6, [@m_ctinfo={0xb8, 0x0, 0x0, 0x0, {{0xb}, {0xc, 0x2, 0x0, 0x1, [@TCA_CTINFO_ZONE={0x6}]}, {0x81, 0x6, "55eb88be72ea2bba577976ef9b5ab407e07afa05e4594285326849c2ec806d7b79f86d10adeb18245c150ce2b9eaeb2380aa7104a6df31aefd38f6b7bb0a45721ccbc5daab03190ea553ce464d09642e4ff5eeaf1f2e6171c16bc9ed3d7f4e1d714b45e839ac2719fe34dbba607211f211a9b5b79c050373b7bea3b552"}, {0xc}, {0xc}}}, @m_nat={0xd0, 0x0, 0x0, 0x0, {{0x8}, {0x54, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @loopback}}, @TCA_NAT_PARMS={0x28, 0x1, {{}, @rand_addr, @broadcast}}]}, {0x55, 0x6, "ef93daeef78df7f9a037a0d7a2f92a1cc341deabba437fc636cbf66a843bc4e0304e79be1f16cfa199b042be92c52b0490cb3ccc8a115bd7fba1ddd4a3ea8aa011548c0a44af30d92f016d58b7280bd342"}, {0xc}, {0xc}}}, @m_connmark={0x13c, 0x0, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c}, @TCA_CONNMARK_PARMS={0x1c}]}, {0xd1, 0x6, "66396e732cf67237ecb590a592c571fa73ca19ec26dea927df7162b385d80fe15ca7f5cb6a4d958bd18714cd4f89f48d039d7da0dc8795f6ad32634b6b66cf821e93079c15dda212b0b37b761850342ebe270d64e92b80cf9114d976338d2dbd729e033dcd00b517933d3e64d73a30fc4e9a29d250104fa297e7a7f17405df935efe7e4806b65a797a850f6a8d8e2c8a8b9f56953d1262211f307b4af9617b04c9c48dea9e41ef304ac3365b6d8846ba792c335b4b2b956f87fa20fc312fee715e656cbb8bb9509b871694c4d4"}, {0xc}, {0xc}}}, @m_bpf={0x34, 0x0, 0x0, 0x0, {{0x8}, {0xc, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}]}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x40c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000a80)={'gretap0\x00', 0x0, 0x80, 0x1, 0x8b, 0x7f, {{0x4d, 0x4, 0x3, 0x5, 0x134, 0x66, 0x0, 0x2, 0x2f, 0x0, @multicast2, @private=0xa010100, {[@cipso={0x86, 0x59, 0x0, [{0x7, 0x3, 'u'}, {0x0, 0x12, "a902036a4e8b6da83366904a92c5b68d"}, {0x2, 0xd, "da47def6e68ca1a92a4be5"}, {0x2, 0xc, "027cf6a585bd22c3fca3"}, {0x6, 0xa, "639a058dbcac78bf"}, {0x2, 0x12, "30211c710a23dffa9827733857bc85b9"}, {0x0, 0x9, "44e24450741010"}]}, @ssrr={0x89, 0x17, 0xbf, [@empty, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback]}, @lsrr={0x83, 0xb, 0xe, [@dev={0xac, 0x14, 0x14, 0x3b}, @local]}, @cipso={0x86, 0x31, 0xfffffffffffffffd, [{0x0, 0x11, "9ed2dad0a46416cb2c23f720507a5a"}, {0x5, 0x9, "de59372f049cc4"}, {0x0, 0x11, "67c5ec33214d76f629b5588d7d124c"}]}, @timestamp_prespec={0x44, 0x4c, 0x92, 0x3, 0xe, [{@empty, 0x4}, {@multicast2}, {@broadcast, 0x3}, {@local, 0x1}, {@rand_addr=0x64010102, 0x1}, {@rand_addr=0x64010100}, {@broadcast, 0x80}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80}, {@rand_addr=0x64010100, 0x2}]}, @timestamp={0x44, 0x28, 0x89, 0x0, 0x0, [0x9, 0x0, 0x1, 0x9, 0x7ff, 0x0, 0xfffffffe, 0x0, 0x8000]}]}}}}}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001b80)=@filter={'filter\x00', 0xe, 0x4, 0x388, 0xffffffff, 0x0, 0x1c8, 0x2f0, 0xffffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@ipv6={@local, @private2, [], [], 'team_slave_0\x00', 'vlan0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x8}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.210775126s ago: executing program 4: bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000009000007010000f8ffffffb702000008000000b70300000000002085000000720001009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000100000000000000000000008500000087000000850000007d0000009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r1, 0x0, 0xe, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f0800", 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) sendmsg$NL80211_CMD_RADAR_DETECT(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000400)={&(0x7f00000003c0)={0x38, r4, 0x8, 0x70bd28, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x7, 0x4e}}}}, [@NL80211_ATTR_CENTER_FREQ1={0x8}, @NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x1630}, @NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x3}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x80) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000017850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f00000000c0)={0x1d, r7}, 0x18) connect$can_j1939(r6, &(0x7f0000000140)={0x1d, r7}, 0x18) sendmsg$can_j1939(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000006c0)="4480502ac1216c3f00", 0x9}}, 0x0) setsockopt$sock_int(r6, 0x1, 0x4b, &(0x7f0000000240)=0x7ff, 0x4) recvmsg$can_j1939(r6, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=""/101, 0x65}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='ext4_evict_inode\x00'}, 0x10) socketpair(0xf, 0x3, 0x2, &(0x7f00000001c0)) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000850000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, 0x2, r2, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffc}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='signal_deliver\x00', r8}, 0x10) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_mpls={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c}, @TCA_MPLS_BOS={0x5, 0x6}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8848}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x74}}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=@newtaction={0xcc, 0x30, 0xffff, 0x0, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0xfffffffffffffffd}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xcc}}, 0x0) 1.117735558s ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x26e1, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000580)="d8000000140081044e81f782db44b9040a1d08020a000000040000a118000200ff11000000000e1208000f0100810401a80016ea1f0008400304000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb79164", 0x6c}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="b40500000000000071108f000000000006000000000000009500000000000000f43f8228ce8b09f6"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, &(0x7f0000000240)=@filter={'filter\x00', 0xe, 0x1, 0x130, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0000000000002a7b000000000000000000000000030000000023b500000000000100000000000000feffffff0000000000000000000000000012c31aa8b556307b0000160900000000000000000000000000000000000000ffffffff00000000000000000000000000000000000000000000000000ffffff7f000000000000000000000000000000feffffff010000001100000009000000000000000000106cf4aa4ac99e8d000000006c6f00000000000000000000000000e2ffffffffff01000001000000100000fa6215e1c90fed90ac00000010a85f001a4b000000000000000580000000aaaaaabd0000020000000000007000000070000000a000000041554449540000000000000000000000000000000000000000000000000000000800000000000d000000000000000000"]}, 0x1a8) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x2, 0x300) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000000100), 0xfecc) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000000240)={{{@in6=@private2, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast1}, 0x0, @in6=@local}}, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vxcan0\x00'}) sendmsg$netlink(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000100)={0x18, 0x0, 0x400, 0x70bd2a, 0x25dfdbfb, "", [@typed={0x8, 0x108, 0x0, 0x0, @uid=r5}]}, 0x18}], 0x1}, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000340)={{{@in6=@mcast1, @in6=@mcast2, 0x4e22, 0x0, 0x4e20, 0x0, 0xa, 0x20, 0x80, 0x88, 0x0, r5}, {0x7, 0x80000001, 0xa6, 0x1f, 0x7f5, 0x2, 0x7, 0x6}, {0x8, 0x1ff, 0x4, 0x800}, 0x1, 0x6e6bb9, 0x0, 0x0, 0x1, 0x2}, {{@in=@loopback, 0x4d3, 0x32}, 0x2, @in=@empty, 0x3503, 0x0, 0x2, 0x0, 0x2, 0x8, 0x6}}, 0xe8) write$binfmt_elf32(r0, &(0x7f0000000180)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}, [{}], "", ['\x00']}, 0x158) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000004c0)={{r4}, &(0x7f0000000440), &(0x7f0000000480)=r0}, 0x20) write$cgroup_type(r1, &(0x7f0000000000), 0x184000) 351.555619ms ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x0, 0x0) syz_genetlink_get_family_id$team(&(0x7f00000001c0), r1) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c00000010000104000004821178f459c0b7a600", @ANYRES32=r2, @ANYBLOB="00000000000000001c0012000b000100627269646765"], 0x3c}}, 0x0) r3 = socket(0x1, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000540)={'wlan0\x00'}) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000400)=0x14) r5 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002800128009000100766c616e000000001800028006000100000000000c0002001f0000001e00000008000500", @ANYRES32=r4], 0x50}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket$packet(0x11, 0x2, 0x300) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010a3c000000120a01020000000000000000020000000900020073797a31000000000800f534fde400230900010073797a3000000000080003400000000a"], 0x64}}, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0xffffffff, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2800000010002508000000000000000077000800", @ANYRES32=r8, @ANYBLOB="000000000000000008000a0010000000"], 0x28}}, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000240)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000280)=0x14) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="280000001000250800000000000000000a000000", @ANYRES32=r10, @ANYBLOB="887b231fce"], 0x28}}, 0x0) 347.064073ms ago: executing program 1: socket$inet(0x2, 0x80000, 0x23) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket(0x0, 0x803, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={0x0}, 0x10) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000780)=@newchain={0x96c, 0x64, 0x400, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0x8}, {0xffe0, 0xc}}, [@TCA_RATE={0x6, 0x5, {0x1, 0x3a}}, @filter_kind_options=@f_u32={{0x8}, {0x8ec, 0x2, [@TCA_U32_LINK={0x8, 0x3, 0x4}, @TCA_U32_FLAGS={0x8, 0xb, 0x10000}, @TCA_U32_DIVISOR={0x8, 0x4, 0x93}, @TCA_U32_CLASSID={0x8, 0x1, {0xb, 0xb}}, @TCA_U32_POLICE={0x414, 0x6, [@TCA_POLICE_RATE64={0xc, 0x8, 0x6}, @TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x1, 0x8000, 0x5, 0xffff9d60, 0x6, 0xfffffffa, 0x0, 0x0, 0x2, 0x7f, 0xffff, 0x3ff, 0xffff, 0x6, 0xe, 0x8, 0x0, 0xff2, 0x10001, 0x9, 0xaf9, 0x400, 0xffffffff, 0x8, 0x7fffffff, 0x679, 0x7, 0x0, 0xfc24, 0xfff, 0xb9, 0x0, 0x7, 0x7, 0x20, 0x7, 0x6, 0x6, 0x3, 0x6, 0x0, 0x4, 0x40, 0x6, 0xfff, 0xa1fa, 0x99, 0x0, 0x1, 0x5, 0x68, 0x734f, 0x7ff, 0x4, 0x7, 0x1, 0x1, 0x1, 0x1, 0x4, 0x7fff, 0x7, 0x28000000, 0xffff, 0x7, 0xf32d, 0x747, 0xe9, 0x6, 0xf0, 0x7fffffff, 0x6, 0x10000, 0x5, 0x80, 0x7, 0x9, 0x67, 0x423, 0x3, 0x7, 0x0, 0x3e8b4000, 0x8, 0x4, 0x4, 0x20, 0x1, 0x5, 0x0, 0x0, 0x8, 0x18, 0x6, 0x81, 0x8000, 0xcff9, 0x200, 0x3, 0x9, 0x0, 0x1f, 0xffffffff, 0x3f3, 0x8, 0x6, 0x43ae, 0x0, 0x2, 0x3, 0x9, 0x4, 0x20, 0x2, 0x79, 0x6, 0x6, 0xffffffff, 0xf2e, 0x0, 0x6, 0xfff, 0x7, 0x9, 0xfffffffe, 0x5, 0x4, 0x4, 0x9, 0x4075, 0x0, 0x80, 0x0, 0x101, 0x6, 0x63, 0x5, 0x400, 0x100, 0xab, 0x9, 0x3, 0x8001, 0x7fffffff, 0x6, 0xb7d, 0x4, 0x100, 0x80000001, 0x8, 0xff, 0x73fd, 0x0, 0xfffffdd8, 0x5, 0x0, 0x0, 0x8597, 0xd5d, 0x0, 0x7d9, 0x4, 0x4, 0x6, 0x2, 0x10000, 0x0, 0x0, 0x7f, 0x800, 0xfff, 0x0, 0x4, 0x2, 0x1, 0x0, 0x5, 0x7ff, 0xff, 0x3, 0x1ff, 0x4, 0xfffffff9, 0x9, 0xfff, 0xffffa433, 0x57a5, 0x0, 0xb9, 0x4, 0x1f, 0x4, 0x0, 0x7, 0x1, 0xffffffff, 0x3f, 0x8, 0x4, 0x8, 0x6, 0xb9, 0x6, 0x0, 0x2, 0x2, 0x8, 0xc86, 0x0, 0x5, 0x4, 0xd1, 0x3, 0x3ff, 0x9, 0xfffffff8, 0x101, 0x8001, 0x7902, 0xfffffff7, 0x3ff, 0x6, 0x2, 0x100, 0x9, 0x9, 0x9, 0xbbbe, 0x81, 0x7ff, 0xfffffff9, 0x8000, 0x8, 0x2, 0xffffff80, 0x3d, 0x7, 0x6cd, 0x10001, 0x9, 0xfffffe01, 0x8000, 0x6754, 0x4, 0x6, 0x3, 0x6, 0x5, 0x7, 0x1, 0x0, 0xff, 0x6, 0x9, 0x2]}]}, @TCA_U32_FLAGS={0x8, 0xb, 0x1002}, @TCA_U32_MARK={0x10, 0xa, {0x100, 0x3}}, @TCA_U32_SEL={0x494, 0x5, {0xb, 0x1, 0x38, 0x1000, 0x6, 0x9, 0x1000, 0xfc, [{0x7, 0x200, 0x4, 0xa38}, {0xffffde14, 0x5, 0x8001, 0x40}, {0x9, 0x400, 0xadb, 0x15}, {0x2, 0x1f, 0x100, 0x7}, {0x0, 0x7, 0x4, 0x743763b6}, {0x5, 0x5, 0x4, 0x8001}, {0xfff, 0x80, 0x2, 0x6}, {0x401, 0xffffff80, 0x200, 0x8}, {0x7ff, 0x776, 0x4, 0x80000001}, {0x10000, 0x3, 0x10001, 0x8}, {0xfffffffe, 0x9, 0xb3, 0xfffffffe}, {0x101, 0x6, 0x1}, {0x1, 0xe2, 0x400, 0x8}, {0x0, 0x40, 0x9, 0xfffffff7}, {0xff, 0x7f, 0x1, 0x3}, {0x100, 0x6, 0xb086, 0x10000}, {0x7, 0x1ff, 0x7, 0x3f}, {0x3f, 0x1000, 0x3d, 0x7}, {0x7f, 0x5, 0x1, 0xffffffc8}, {0x0, 0x0, 0x7ec6, 0x3ae}, {0xfffffffa, 0x5, 0x1f, 0x7ff}, {0x77bf, 0x9, 0x3}, {0x1000000, 0x1ff, 0x8, 0x5}, {0x0, 0x0, 0x66, 0x2}, {0x40, 0x101, 0x9, 0xfffffffd}, {0x0, 0x6, 0x9d8, 0x8}, {0x7e, 0x4, 0x2, 0x7}, {0x0, 0x0, 0xb1b, 0x6}, {0xfffffffd, 0x7ff, 0x1, 0x9c}, {0x0, 0xf31, 0x0, 0x3}, {0x7f, 0x0, 0xfff, 0x4}, {0x29813e2c, 0x63738db1, 0x4, 0x1}, {0x8fd4, 0x9, 0xfffff18c, 0x4}, {0x3bcf, 0x1, 0x8e, 0x3}, {0x0, 0xd3cd18f0, 0x4}, {0xdf}, {0x0, 0x0, 0x0, 0x6}, {0x64a, 0x800, 0x551}, {0x7b}, {0x0, 0xff}, {0x0, 0xba26, 0x44c, 0x5}, {0xfffffff8, 0xadc, 0x2, 0x2}, {0x10000, 0x5, 0x0, 0x8}, {0x0, 0x0, 0x7, 0x5}, {0x0, 0x0, 0x0, 0x4}, {0x4, 0x9, 0x1, 0x8001}, {0x4, 0x0, 0x396, 0x3}, {0xa9, 0xfffffffe}, {0xcc, 0x3f, 0xd0, 0x8}, {0xfffffeff, 0x9, 0x7f, 0x800}, {0x20, 0x2, 0x3f, 0x7}, {0x400, 0x1, 0x10000, 0x9}, {0x0, 0x7, 0x1f, 0x3}, {0x0, 0x1, 0x5, 0x7}, {0x101, 0x0, 0x8, 0x7}, {0x0, 0x4, 0x0, 0x9}, {0xfffffffd, 0x3f, 0x0, 0x4}, {0x5d, 0x1000, 0x0, 0x5528}, {0x5, 0x0, 0x7fffffff, 0x9}, {0x7fff, 0x0, 0x0, 0x40}, {0x9, 0x9, 0x400, 0x936}, {0x0, 0x1, 0x4, 0x2}, {0x8, 0x1, 0x80000000, 0x1}, {0x620c, 0x5, 0xfffffffa, 0x9}, {0x0, 0x93, 0x1000, 0x5}, {}, {0x1ff, 0x0, 0x9cff}, {0x0, 0x0, 0x0, 0x8}, {}, {0x3f, 0x3, 0x2, 0x7}, {0x0, 0x0, 0x0, 0x97}, {}]}}, @TCA_U32_HASH={0x8, 0x2, 0x7}]}}, @filter_kind_options=@f_u32={{0x8}, {0x14, 0x2, [@TCA_U32_DIVISOR={0x8, 0x4, 0xab}, @TCA_U32_HASH={0x8, 0x2, 0x401}]}}, @TCA_RATE={0x6, 0x5, {0xbe, 0x8c}}, @TCA_CHAIN={0x8}, @TCA_CHAIN={0x8, 0xb, 0xffffffff}, @filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0xe, 0xb}}]}}]}, 0x96c}, 0x1, 0x0, 0x0, 0x20001008}, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200), 0xf000) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xf03a0005) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00'}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000004c0)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0xffffffff, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 311.884754ms ago: executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_ADDDEF(r2, &(0x7f0000001080)={0x0, 0x40000000, &(0x7f0000001040)={&(0x7f0000000240)={0x1c, r1, 0x1, 0x0, 0x0, {}, [@NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x5}]}, 0x1c}}, 0x0) 255.756586ms ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0xc}, 0x48) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x1f, 0x0}, 0x8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB], 0x0}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.numa_stat\x00', 0x26e1, 0x0) close(r4) close(0xffffffffffffffff) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8b18, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$SIOCSIFHWADDR(r4, 0x8b06, &(0x7f0000000000)={'wlan1\x00', @random="02000000000a"}) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x10, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b70200110000", @ANYRES64=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, r2, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) 209.567903ms ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x0, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4050000000000007950380000000000170000000000000095000000001f0000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) r3 = accept4$x25(0xffffffffffffffff, &(0x7f0000000180)={0x9, @remote}, &(0x7f00000001c0)=0x12, 0x80c00) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000740)={{r4}, &(0x7f00000006c0), &(0x7f0000000700)}, 0x20) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r5}, 0x10) r6 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r6, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="c00e03002a000b05d25a806c8c6f94f90424fc601100077a0a000312050282c137153e370e0c1180fc0b0c000300", 0x33fe0}], 0x1}, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000008fd8850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_int(r8, &(0x7f0000000040)='cpuset.mem_hardwall\x00', 0x2, 0x0) sendfile(r9, r9, 0x0, 0x9) ioctl$sock_x25_SIOCDELRT(r3, 0x890c, &(0x7f0000000080)={@null, 0xc, 'veth1_to_hsr\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000240)={r3}) ioctl$sock_ipv6_tunnel_SIOCDELPRL(r10, 0x89f6, &(0x7f00000002c0)={'sit0\x00', &(0x7f0000000280)={@remote, 0x1, 0x0, 0x30, 0x0, [{@remote}, {@local}, {@multicast1}]}}) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000200)=0x7c6c, 0x12) writev(r2, &(0x7f0000000900)=[{&(0x7f0000000640)="7786b83c25f4449907fe6c440862a276ad7e7f0e", 0x7fd8}], 0x1) 104.498926ms ago: executing program 0: r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_PEER_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1a, &(0x7f0000000000)={0x0, 0xd5, "609ffb1247d3a9beab0f86f32fe73691c2c3ac34413f8004930c050f4e95608c437557d137aea49467aa0af03b53c0e38a50226406a0eed8dc5a042b9183adc91e4558673501fa15cebb88ecff4221494184049f3b8915b6a911c1b8fe7d1777b065caaadda963b64795f9258bec5ca6275752fd5d66a855bbae8c56c81634d8c74223837a9ede0fc2a3ff20bf2d8587d39220f76214288fd7a9cac98af4a044bfa61f6bbc86218ba15ffd7facb95f5dae2fbd1359d1198d48d1e29514043355da7af61bba86c7317aa710fb4cdcfb305b7b1a7a86"}, &(0x7f0000000100)=0xdd) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000140)={r1, 0x101, 0x8}, &(0x7f0000000180)=0x8) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff}) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x20, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x3, 0x1}, 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000300)={0xffffffffffffffff, 0x58, &(0x7f0000000280)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) r5 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xb5, 0xb5, 0x5, [@datasec={0x9, 0x2, 0x0, 0xf, 0x2, [{0x2, 0x7}, {0x2, 0x0, 0x4}], "f714"}, @var={0x4, 0x0, 0x0, 0xe, 0x5, 0x1}, @ptr={0x9, 0x0, 0x0, 0x2, 0x5}, @union={0x7, 0x1, 0x0, 0x5, 0x0, 0x20, [{0x9, 0x4, 0x3}]}, @int={0x3, 0x0, 0x0, 0x1, 0x0, 0x5e, 0x0, 0x79, 0x3}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2, 0x3e}}, @func={0x8, 0x0, 0x0, 0xc, 0x3}, @datasec={0x3, 0x2, 0x0, 0xf, 0x3, [{0x2, 0x8}, {0x4, 0x3, 0x3}], "1d99dd"}]}, {0x0, [0x30, 0x41, 0x2e]}}, &(0x7f0000000440)=""/32, 0xd5, 0x20, 0x1, 0x7fff}, 0x20) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x5, '\x00', r4, r5, 0x2, 0x3, 0x5}, 0x48) recvmsg(r0, &(0x7f0000000ac0)={&(0x7f0000000540)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f0000000980)=[{&(0x7f00000005c0)=""/166, 0xa6}, {&(0x7f0000000680)=""/169, 0xa9}, {&(0x7f0000000740)=""/45, 0x2d}, {&(0x7f0000000780)=""/25, 0x19}, {&(0x7f00000007c0)=""/55, 0x37}, {&(0x7f0000000800)=""/221, 0xdd}, {&(0x7f0000000900)=""/122, 0x7a}], 0x7, &(0x7f0000000a00)=""/186, 0xba}, 0x100) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, &(0x7f0000000bc0)={&(0x7f0000000b00)=""/186, 0x203000, 0x0, 0x1, 0x1}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000cc0)={0x1, &(0x7f0000000c00)="f7d8f64d94e4593ae60456ec2a7b887e299014cbdf11d4fb9bdb97892a681aca8b85a37c2e7397020a70a19602773c5b78401d49f20a24f9139338d6fa2fcfca6872dd2f8a8bbf3e84b2e2272e", &(0x7f0000000c80)=@tcp6=r6, 0x1}, 0x20) gettid() write(r3, &(0x7f0000000d00)="b16c081633de2b3a75b5a47b200561151490212f3ce17c12dbc65703316f9964c04ec7e3a535678967cf6404a87e638c674cb43a5227b3c62de64291e2ae66b5641450c24d843bb38eb3115e661bddf9e3cfefd94c6fb4cab5b595a2fcb5f0721912ac3b4bfa99e1fb278bc04711d993c4efa95c0a9456", 0x77) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000e40)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000e00)={&(0x7f0000000dc0)=@getqdisc={0x28, 0x26, 0x100, 0x70bd2d, 0x25dfdbff, {0x0, 0x0, 0x0, r4, {0xfff0, 0x2}, {0x1, 0xffff}, {0xffe0, 0x7}}, [{0x4}]}, 0x28}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$BTRFS_IOC_DEV_INFO(r2, 0xd000941e, &(0x7f0000000e80)={0x0, "9e0bc762a53b96d42b9bad9407db60c7"}) ioctl$BTRFS_IOC_DEV_INFO(r3, 0xd000941e, &(0x7f0000001e80)={r8, "371e0a9fc03444efd122b14bd868c458"}) r9 = syz_init_net_socket$ax25(0x3, 0x2, 0x1) sendto$ax25(r9, &(0x7f0000002e80)="ae97e9d47d17ef", 0x7, 0x24001880, &(0x7f0000002ec0)={{0x3, @null, 0x8}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @bcast, @default, @default]}, 0x48) r10 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000002f40), 0x4) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r7, 0x84009422, &(0x7f0000002f80)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) ioctl$BTRFS_IOC_SCRUB_PROGRESS(r10, 0xc400941d, &(0x7f0000003380)={r11, 0x81, 0x400}) setsockopt$inet_tcp_TCP_CONGESTION(r6, 0x6, 0xd, &(0x7f0000003780)='dctcp\x00', 0x6) setsockopt$IP_VS_SO_SET_STOPDAEMON(r0, 0x0, 0x48c, &(0x7f00000037c0)={0x1, 'pim6reg0\x00', 0x4}, 0x18) r12 = syz_genetlink_get_family_id$tipc(&(0x7f0000003840), r6) sendmsg$TIPC_CMD_GET_MEDIA_NAMES(r6, &(0x7f0000003900)={&(0x7f0000003800)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000038c0)={&(0x7f0000003880)={0x1c, r12, 0x1, 0x70bd2a, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x20000000) ioctl$sock_SIOCGPGRP(r9, 0x8904, &(0x7f0000003940)) r13 = syz_genetlink_get_family_id$ethtool(&(0x7f00000039c0), r6) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000003bc0)={&(0x7f0000003980)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000003b80)={&(0x7f0000003ac0)={0xc0, r13, 0x221, 0x70bd29, 0x25dfdbfd, {}, [@ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8}, @ETHTOOL_A_CHANNELS_HEADER={0x1c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x1}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x5}, @ETHTOOL_A_CHANNELS_HEADER={0x68, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bridge_slave_1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pimreg1\x00'}]}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x5}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8, 0x6, 0x8000}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x1}]}, 0xc0}, 0x1, 0x0, 0x0, 0x500c4}, 0x0) 0s ago: executing program 4: r0 = socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r0, 0x0, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYRESHEX, @ANYRES64=r0, @ANYBLOB="f3ffffffffffffff5ff6ad8e48540ac1639bbbd7b213bf"], 0x20}}, 0x0) r2 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000000100)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) getsockopt$inet_sctp6_SCTP_STATUS(r1, 0x84, 0x1a, &(0x7f0000000180)={r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, {0x0, @in6={{0xa, 0x4e22, 0x5, @mcast1, 0x1}}, 0xd8ab, 0x0, 0x8, 0x0, 0xfffffffc}}, &(0x7f0000000000)=0xb0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.34' (ED25519) to the list of known hosts. 2024/06/11 07:54:12 fuzzer started 2024/06/11 07:54:13 dialing manager at 10.128.0.169:30018 [ 52.652077][ T5087] cgroup: Unknown subsys name 'net' [ 52.841233][ T5087] cgroup: Unknown subsys name 'rlimit' 2024/06/11 07:54:14 starting 5 executor processes [ 53.947522][ T5094] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.960222][ T5094] syz-executor (5094) used greatest stack depth: 19280 bytes left [ 54.970943][ T5114] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 54.981259][ T5122] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 54.986344][ T5120] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 54.997837][ T5122] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 54.998265][ T5120] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.005916][ T5122] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.013760][ T5120] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.027230][ T5122] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.027355][ T5120] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.035963][ T5122] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.041669][ T5120] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.055749][ T5120] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.058996][ T5123] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.065804][ T5122] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 55.070983][ T5124] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.084462][ T5124] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.088229][ T5122] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 55.092528][ T5123] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.099229][ T5120] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.106419][ T5124] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.113858][ T5122] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 55.128051][ T5122] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 55.129322][ T5124] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 55.138354][ T5114] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.142851][ T4488] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.156467][ T5124] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.160777][ T5114] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 55.176686][ T5110] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 55.186592][ T5110] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.193712][ T5110] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.690032][ T5116] chnl_net:caif_netlink_parms(): no params data found [ 55.815714][ T5117] chnl_net:caif_netlink_parms(): no params data found [ 55.826831][ T5107] chnl_net:caif_netlink_parms(): no params data found [ 55.983036][ T5116] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.991052][ T5116] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.002691][ T5116] bridge_slave_0: entered allmulticast mode [ 56.009884][ T5116] bridge_slave_0: entered promiscuous mode [ 56.026775][ T5112] chnl_net:caif_netlink_parms(): no params data found [ 56.042628][ T5116] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.050436][ T5116] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.057806][ T5116] bridge_slave_1: entered allmulticast mode [ 56.065209][ T5116] bridge_slave_1: entered promiscuous mode [ 56.127618][ T5109] chnl_net:caif_netlink_parms(): no params data found [ 56.187492][ T5107] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.194858][ T5107] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.201991][ T5107] bridge_slave_0: entered allmulticast mode [ 56.209309][ T5107] bridge_slave_0: entered promiscuous mode [ 56.224783][ T5116] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.234177][ T5117] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.241298][ T5117] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.249097][ T5117] bridge_slave_0: entered allmulticast mode [ 56.256682][ T5117] bridge_slave_0: entered promiscuous mode [ 56.264849][ T5117] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.272062][ T5117] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.279345][ T5117] bridge_slave_1: entered allmulticast mode [ 56.286319][ T5117] bridge_slave_1: entered promiscuous mode [ 56.308968][ T5107] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.316331][ T5107] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.323456][ T5107] bridge_slave_1: entered allmulticast mode [ 56.330453][ T5107] bridge_slave_1: entered promiscuous mode [ 56.352510][ T5116] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.438398][ T5107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.459445][ T5112] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.466673][ T5112] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.474008][ T5112] bridge_slave_0: entered allmulticast mode [ 56.480959][ T5112] bridge_slave_0: entered promiscuous mode [ 56.491106][ T5116] team0: Port device team_slave_0 added [ 56.500422][ T5116] team0: Port device team_slave_1 added [ 56.509149][ T5117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.522015][ T5117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.553652][ T5107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.563605][ T5112] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.571337][ T5112] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.578894][ T5112] bridge_slave_1: entered allmulticast mode [ 56.586265][ T5112] bridge_slave_1: entered promiscuous mode [ 56.647350][ T5109] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.654717][ T5109] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.661870][ T5109] bridge_slave_0: entered allmulticast mode [ 56.669527][ T5109] bridge_slave_0: entered promiscuous mode [ 56.678296][ T5109] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.685948][ T5109] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.693095][ T5109] bridge_slave_1: entered allmulticast mode [ 56.700425][ T5109] bridge_slave_1: entered promiscuous mode [ 56.742373][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.749515][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.776423][ T5116] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.791058][ T5117] team0: Port device team_slave_0 added [ 56.800369][ T5117] team0: Port device team_slave_1 added [ 56.824304][ T5107] team0: Port device team_slave_0 added [ 56.832541][ T5112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.843053][ T5116] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.850879][ T5116] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.877154][ T5116] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.912273][ T5109] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.923087][ T5107] team0: Port device team_slave_1 added [ 56.933913][ T5112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.973835][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.980943][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.007812][ T5117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.023262][ T5109] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.067452][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.074984][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.101072][ T5107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.129986][ T5112] team0: Port device team_slave_0 added [ 57.137793][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.144815][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.165114][ T53] Bluetooth: hci0: command tx timeout [ 57.170918][ T5117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.209142][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.216155][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.242807][ T5107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.244231][ T5118] Bluetooth: hci1: command tx timeout [ 57.254120][ T5110] Bluetooth: hci4: command tx timeout [ 57.259210][ T53] Bluetooth: hci3: command tx timeout [ 57.264391][ T4488] Bluetooth: hci2: command tx timeout [ 57.283662][ T5112] team0: Port device team_slave_1 added [ 57.310684][ T5109] team0: Port device team_slave_0 added [ 57.332657][ T5116] hsr_slave_0: entered promiscuous mode [ 57.340456][ T5116] hsr_slave_1: entered promiscuous mode [ 57.380570][ T5109] team0: Port device team_slave_1 added [ 57.436300][ T5117] hsr_slave_0: entered promiscuous mode [ 57.443547][ T5117] hsr_slave_1: entered promiscuous mode [ 57.450993][ T5117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.459185][ T5117] Cannot create hsr debugfs directory [ 57.466845][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.473908][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.500224][ T5109] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.513607][ T5109] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.520725][ T5109] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.547082][ T5109] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.576707][ T5107] hsr_slave_0: entered promiscuous mode [ 57.583318][ T5107] hsr_slave_1: entered promiscuous mode [ 57.589900][ T5107] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.597558][ T5107] Cannot create hsr debugfs directory [ 57.603750][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.611170][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.637354][ T5112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.690409][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.697959][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.724260][ T5112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.866603][ T5112] hsr_slave_0: entered promiscuous mode [ 57.873672][ T5112] hsr_slave_1: entered promiscuous mode [ 57.881458][ T5112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.889141][ T5112] Cannot create hsr debugfs directory [ 57.903622][ T5109] hsr_slave_0: entered promiscuous mode [ 57.910581][ T5109] hsr_slave_1: entered promiscuous mode [ 57.917230][ T5109] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.924882][ T5109] Cannot create hsr debugfs directory [ 58.236944][ T5116] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.248483][ T5116] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.281109][ T5116] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.308415][ T5116] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.373712][ T5117] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.394182][ T5117] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.405772][ T5117] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.428199][ T5117] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.498593][ T5107] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.510462][ T5107] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.530935][ T5107] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.548904][ T5107] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.663793][ T5112] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.676166][ T5112] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.696026][ T5112] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.706200][ T5112] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.735083][ T5116] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.807625][ T5109] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.818127][ T5109] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.839400][ T5117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.856470][ T5109] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.867196][ T5109] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.899444][ T5116] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.927187][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.934612][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.967608][ T5117] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.981520][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.988695][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.046665][ T5161] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.053750][ T5161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.105685][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.112839][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.221000][ T5107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.245111][ T4488] Bluetooth: hci0: command tx timeout [ 59.288242][ T5112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.310513][ T5109] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.324669][ T5110] Bluetooth: hci2: command tx timeout [ 59.330128][ T5110] Bluetooth: hci1: command tx timeout [ 59.336012][ T5118] Bluetooth: hci3: command tx timeout [ 59.339635][ T5109] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.341516][ T4488] Bluetooth: hci4: command tx timeout [ 59.367557][ T5107] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.383504][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.390738][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.413800][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.421008][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.443077][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.450324][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.481488][ T5112] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.537150][ T5161] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.544345][ T5161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.588117][ T5163] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.595304][ T5163] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.646696][ T5163] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.654388][ T5163] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.686323][ T5107] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.728945][ T5109] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.780262][ T5116] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.819044][ T5117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.017784][ T5117] veth0_vlan: entered promiscuous mode [ 60.077219][ T5107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.131189][ T5117] veth1_vlan: entered promiscuous mode [ 60.158952][ T5116] veth0_vlan: entered promiscuous mode [ 60.211786][ T5116] veth1_vlan: entered promiscuous mode [ 60.238109][ T5109] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.286086][ T5107] veth0_vlan: entered promiscuous mode [ 60.331535][ T5107] veth1_vlan: entered promiscuous mode [ 60.340561][ T5117] veth0_macvtap: entered promiscuous mode [ 60.349906][ T5112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.381316][ T5109] veth0_vlan: entered promiscuous mode [ 60.403831][ T5117] veth1_macvtap: entered promiscuous mode [ 60.440435][ T5116] veth0_macvtap: entered promiscuous mode [ 60.453205][ T5116] veth1_macvtap: entered promiscuous mode [ 60.482327][ T5109] veth1_vlan: entered promiscuous mode [ 60.503321][ T5107] veth0_macvtap: entered promiscuous mode [ 60.528573][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.567473][ T5107] veth1_macvtap: entered promiscuous mode [ 60.583621][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.597863][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.611959][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.656529][ T5116] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.677215][ T5109] veth0_macvtap: entered promiscuous mode [ 60.691423][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.702168][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.712814][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.725458][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.737626][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.746340][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.757705][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.770579][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.792989][ T5116] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.802907][ T5116] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.812357][ T5116] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.821147][ T5116] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.833343][ T5109] veth1_macvtap: entered promiscuous mode [ 60.848772][ T5117] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.858353][ T5117] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.867812][ T5117] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.877831][ T5117] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.891810][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.902724][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.916848][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.929644][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.941085][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.955671][ T5107] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.965149][ T5107] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.973865][ T5107] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.982860][ T5107] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.003651][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.014843][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.025168][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.037290][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.047295][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.057832][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.069947][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.110532][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.121486][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.132321][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.144530][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.156046][ T5109] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.167786][ T5109] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.179305][ T5109] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.242476][ T5109] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.253039][ T5109] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.263268][ T5109] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.275822][ T5109] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.324595][ T4488] Bluetooth: hci0: command tx timeout [ 61.369460][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.377293][ T5112] veth0_vlan: entered promiscuous mode [ 61.382176][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.404652][ T4488] Bluetooth: hci1: command tx timeout [ 61.404908][ T5110] Bluetooth: hci4: command tx timeout [ 61.410071][ T4488] Bluetooth: hci3: command tx timeout [ 61.415976][ T5110] Bluetooth: hci2: command tx timeout [ 61.432504][ T5112] veth1_vlan: entered promiscuous mode [ 61.517019][ T2486] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.525569][ T2486] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.538482][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.546834][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.615227][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.617229][ T5112] veth0_macvtap: entered promiscuous mode [ 61.640665][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.673488][ T5193] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.689942][ T5112] veth1_macvtap: entered promiscuous mode [ 61.746717][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.746741][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.761903][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.778478][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.780930][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.796988][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.807248][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.817905][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.828308][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.839141][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.850691][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.879890][ T5194] team_slave_0: entered promiscuous mode [ 61.885792][ T5194] team_slave_1: entered promiscuous mode [ 61.893015][ T5194] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 61.902789][ T5194] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 61.922833][ T5195] bond0: entered promiscuous mode [ 61.928333][ T5195] bond_slave_0: entered promiscuous mode [ 61.935697][ T5195] bond_slave_1: entered promiscuous mode [ 61.941457][ T5195] macvlan2: entered promiscuous mode [ 61.947624][ T5195] team0: entered promiscuous mode [ 61.972054][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.983115][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.993356][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.004131][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.016546][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.029503][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.040103][ T5112] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.051053][ T5112] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.062926][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.090641][ T5112] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.099488][ T5112] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.109424][ T5112] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.118659][ T5112] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.156723][ T2470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.175077][ T2470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.200457][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.249006][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.340157][ T2470] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.360316][ T2470] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.435588][ T5199] xt_TCPMSS: Only works on TCP SYN packets [ 62.491758][ T5199] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 62.495258][ T4419] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.560911][ T4419] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.901638][ T2486] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.922698][ T2486] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.415600][ T4488] Bluetooth: hci0: command tx timeout [ 63.484349][ T4488] Bluetooth: hci3: command tx timeout [ 63.489810][ T4488] Bluetooth: hci2: command tx timeout [ 63.496259][ T53] Bluetooth: hci4: command tx timeout [ 63.497170][ T5110] Bluetooth: hci1: command tx timeout [ 63.527370][ T5221] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.604537][ T5226] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 63.625919][ T29] audit: type=1800 audit(1718092464.277:2): pid=5221 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1960 res=0 errno=0 [ 63.876258][ T5235] team_slave_0: entered promiscuous mode [ 63.882011][ T5235] team_slave_1: entered promiscuous mode [ 63.913696][ T5235] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 63.937566][ T5235] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 63.981304][ T5241] bond0: entered promiscuous mode [ 64.011555][ T5241] bond_slave_0: entered promiscuous mode [ 64.032704][ T5241] bond_slave_1: entered promiscuous mode [ 64.047850][ T5241] macvlan2: entered promiscuous mode [ 64.070467][ T5241] team0: entered promiscuous mode [ 64.108488][ T5245] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 64.153870][ T5247] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 64.167514][ T5245] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.3'. [ 64.184551][ T5247] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 64.221191][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 64.500963][ T5261] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 64.667828][ T29] audit: type=1800 audit(1718092465.327:3): pid=5270 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1957 res=0 errno=0 [ 65.633831][ T5291] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 65.689446][ T5291] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 65.781982][ T5298] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 65.790834][ T5298] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.2'. [ 65.881086][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 65.998116][ T5308] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 66.042388][ T29] audit: type=1800 audit(1718092466.697:4): pid=5309 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1945 res=0 errno=0 [ 67.258094][ T5336] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 67.299974][ T5336] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 67.343877][ T5343] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 67.583989][ T29] audit: type=1800 audit(1718092468.227:5): pid=5352 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1948 res=0 errno=0 [ 68.982348][ T5388] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.3'. [ 69.008911][ T5391] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 69.028499][ T5391] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.2'. [ 69.037422][ T5393] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 69.107463][ T5393] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 69.160610][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 69.214898][ T29] audit: type=1800 audit(1718092469.877:6): pid=5403 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1950 res=0 errno=0 [ 69.740328][ T5426] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 69.779634][ T5426] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.4'. [ 69.879535][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 69.993692][ T5437] Zero length message leads to an empty skb [ 70.779945][ T29] audit: type=1800 audit(1718092471.437:7): pid=5446 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1957 res=0 errno=0 [ 70.833111][ T5449] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 70.878870][ T5449] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 70.925277][ T5452] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 70.960143][ T5454] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 70.986096][ T5452] vxcan0: tx drop: invalid da for name 0x0000000000000002 [ 71.072537][ T5458] bond0: entered promiscuous mode [ 71.086271][ T5458] bond_slave_0: entered promiscuous mode [ 71.109538][ T5458] bond_slave_1: entered promiscuous mode [ 71.308426][ T5469] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 71.346233][ T5469] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.0'. [ 71.481896][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 71.734028][ T1246] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.741898][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.774977][ T29] audit: type=1800 audit(1718092472.437:8): pid=5488 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1965 res=0 errno=0 [ 72.393245][ T5492] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 72.492529][ T5499] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 72.583134][ T5501] team0: Device macvlan1 is up. Set it down before adding it as a team port [ 72.691437][ T5507] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 72.730563][ T5507] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 72.921312][ T29] audit: type=1800 audit(1718092473.577:9): pid=5518 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1961 res=0 errno=0 [ 72.954725][ T5516] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.0'. [ 73.251880][ T5535] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 73.342289][ T5539] team0: Device veth1_macvtap is up. Set it down before adding it as a team port [ 74.017368][ T5543] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 74.152269][ T5551] bond0: entered promiscuous mode [ 74.166967][ T5551] bond_slave_0: entered promiscuous mode [ 74.179875][ T5551] bond_slave_1: entered promiscuous mode [ 74.187783][ T5548] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 74.209389][ T5548] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.1'. [ 74.211485][ T5552] pim6reg: entered allmulticast mode [ 74.345442][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 74.373702][ T5555] Bluetooth: MGMT ver 1.22 [ 74.661847][ T5567] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 74.702137][ T5567] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 75.642902][ T5587] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 75.892561][ T29] audit: type=1800 audit(1718092476.547:10): pid=5598 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1948 res=0 errno=0 [ 76.355265][ T5617] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 76.474288][ T5617] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 76.536672][ T5625] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 76.851694][ T932] cfg80211: failed to load regulatory.db [ 77.489878][ T5638] pim6reg: entered allmulticast mode [ 79.015523][ T5681] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 79.032316][ T5684] warning: `syz-executor.0' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 79.063227][ T5681] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.3'. [ 79.110349][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 79.477954][ T29] audit: type=1800 audit(1718092480.137:11): pid=5705 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1966 res=0 errno=0 [ 80.816783][ T5736] xt_TCPMSS: Only works on TCP SYN packets [ 80.831516][ T5736] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 80.871795][ T29] audit: type=1800 audit(1718092481.527:12): pid=5739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1942 res=0 errno=0 [ 80.910971][ T5740] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 80.976493][ T5740] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 81.074813][ T5748] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 81.381297][ T5764] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.4'. [ 81.534555][ T5772] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 82.513039][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 82.559080][ T5789] xt_TCPMSS: Only works on TCP SYN packets [ 82.590533][ T5793] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 82.612315][ T5789] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 82.895092][ T5806] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 83.862246][ T5820] bond0: entered promiscuous mode [ 83.886043][ T5820] bond_slave_0: entered promiscuous mode [ 83.892243][ T5820] bond_slave_1: entered promiscuous mode [ 84.080520][ T29] audit: type=1800 audit(1718092484.737:13): pid=5834 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1964 res=0 errno=0 [ 84.190414][ T5836] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 84.304417][ T5840] xt_TCPMSS: Only works on TCP SYN packets [ 84.328663][ T5842] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 84.358232][ T5840] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 84.380908][ T5844] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 84.422178][ T5850] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 84.565027][ T5852] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 84.713723][ T5859] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 84.829913][ T29] audit: type=1800 audit(1718092485.487:14): pid=5865 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1962 res=0 errno=0 [ 84.860363][ T5868] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 85.904474][ T5892] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 85.967674][ T5897] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.3'. [ 86.173845][ T29] audit: type=1800 audit(1718092486.827:15): pid=5909 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1965 res=0 errno=0 [ 86.373448][ T5912] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 86.373651][ T5915] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 86.478193][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 86.515699][ T5915] team0: Port device bridge1 added [ 87.196288][ T29] audit: type=1800 audit(1718092487.847:16): pid=5935 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1952 res=0 errno=0 [ 87.248521][ T5940] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 87.408918][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 87.726149][ T5954] team0: Port device bridge2 added [ 88.302923][ T29] audit: type=1800 audit(1718092488.957:17): pid=5989 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1959 res=0 errno=0 [ 88.903649][ T6006] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 88.983795][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 89.027874][ T6009] team0: Port device bridge1 added [ 89.119088][ T6009] syz-executor.0 (6009) used greatest stack depth: 17776 bytes left [ 89.345123][ T29] audit: type=1800 audit(1718092489.997:18): pid=6022 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1952 res=0 errno=0 [ 89.538491][ T6030] __nla_validate_parse: 11 callbacks suppressed [ 89.538510][ T6030] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 89.877838][ T6047] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 89.922794][ T6048] netlink: 'syz-executor.1': attribute type 12 has an invalid length. [ 89.960406][ T6048] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.1'. [ 90.015667][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 90.040899][ T6047] team0: Port device bridge2 added [ 90.077894][ T6047] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 90.352643][ T6059] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 90.394929][ T6059] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.3'. [ 90.489577][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 94.163487][ T6100] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 94.189826][ T6100] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.3'. [ 94.251107][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 95.088719][ T29] audit: type=1800 audit(1718092495.737:19): pid=6120 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1964 res=0 errno=0 [ 95.563377][ T6135] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 95.604946][ T6135] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.3'. [ 95.680398][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 95.749993][ T6144] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 95.774129][ T6144] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.2'. [ 95.917313][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 96.634069][ T29] audit: type=1800 audit(1718092497.287:20): pid=6164 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1948 res=0 errno=0 [ 97.055365][ T6187] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 97.168726][ T6187] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 97.333495][ T6206] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 97.378691][ T6206] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.3'. [ 97.496072][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 98.089462][ T6215] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 98.114813][ T6219] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 98.410406][ T6230] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 98.460361][ T6232] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 98.497464][ T6234] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 98.565677][ T6230] bridge1: entered promiscuous mode [ 98.573240][ T6230] team0: Port device bridge1 added [ 101.996239][ T6264] __nla_validate_parse: 5 callbacks suppressed [ 101.996259][ T6264] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 102.019182][ T6261] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 102.039546][ T6261] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.2'. [ 102.059762][ T6264] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 102.113179][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 102.154466][ T6275] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 102.198683][ T6277] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 102.262898][ T6275] team0: Port device bridge4 added [ 102.270447][ T6280] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 102.302877][ T6275] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 103.391145][ T6304] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 103.440217][ T6304] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 103.601088][ T6315] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 103.644924][ T6319] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 103.703805][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 103.709200][ T6317] team0: Port device bridge5 added [ 104.014483][ T6337] IPVS: set_ctl: invalid protocol: 136 172.30.0.1:20000 [ 104.436677][ T6355] sctp: failed to load transform for md5: -4 [ 104.457691][ T6361] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 104.523567][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 104.944911][ T29] audit: type=1800 audit(1718092505.607:21): pid=6393 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1967 res=0 errno=0 [ 105.064788][ T6384] syzkaller0: entered promiscuous mode [ 105.070528][ T6384] syzkaller0: entered allmulticast mode [ 105.123164][ T6396] Cannot find set identified by id 0 to match [ 120.939796][ T6423] netlink: 'syz-executor.3': attribute type 12 has an invalid length. [ 120.968405][ T6423] __nla_validate_parse: 12 callbacks suppressed [ 120.968423][ T6423] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.3'. [ 121.053718][ T6424] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 121.056651][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 121.098278][ T6431] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.4'. [ 121.337819][ T6441] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 121.391455][ T6446] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 121.440741][ T6444] netlink: 872 bytes leftover after parsing attributes in process `syz-executor.4'. [ 121.542580][ T6455] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 121.649100][ T6455] team0: Port device bridge5 added [ 121.649423][ T6464] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.1'. [ 121.668350][ T6455] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 121.773822][ T6469] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.4'. [ 121.795822][ T6475] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 121.819374][ T6475] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 121.874497][ T6479] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 122.204508][ T29] audit: type=1800 audit(1718092522.847:22): pid=6505 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1952 res=0 errno=0 [ 122.281371][ T6507] bridge1: entered promiscuous mode [ 122.287040][ T6512] batman_adv: batadv0: adding TT local entry 4a:c8:93:75:00:00 to non-existent VLAN 2358 [ 122.332745][ T6507] team0: Port device bridge1 added [ 122.516681][ T6523] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 2147221503 (only 8 groups) [ 123.550088][ T29] audit: type=1800 audit(1718092524.207:23): pid=6547 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1965 res=0 errno=0 [ 123.659831][ T29] audit: type=1804 audit(1718092524.317:24): pid=6541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir2465325617/syzkaller.FApQ5N/108/memory.events" dev="sda1" ino=1964 res=1 errno=0 [ 123.918487][ T6560] team0: Port device bridge3 added [ 124.277563][ T6578] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 124.341618][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 124.443457][ T6584] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) [ 124.814106][ T29] audit: type=1800 audit(1718092525.467:25): pid=6592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1960 res=0 errno=0 [ 125.247472][ T6603] team0: Port device bridge4 added [ 125.697201][ T6612] syzkaller0: entered promiscuous mode [ 125.718300][ T6612] syzkaller0: entered allmulticast mode [ 126.438074][ T29] audit: type=1800 audit(1718092527.097:26): pid=6541 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="memory.events" dev="sda1" ino=1964 res=0 errno=0 [ 127.042447][ T6662] __nla_validate_parse: 15 callbacks suppressed [ 127.042468][ T6662] netlink: 6 bytes leftover after parsing attributes in process `syz-executor.1'. [ 127.150385][ T6667] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 127.187100][ T6667] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 127.220249][ T6670] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.392685][ T6676] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 127.841860][ T6676] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 127.907142][ T6679] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 127.995663][ T6685] IPVS: set_ctl: invalid protocol: 29 100.1.1.1:20001 [ 128.015194][ T6685] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 128.027128][ T6685] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 128.041617][ T6685] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 128.308520][ T6703] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 128.747222][ T6721] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.3'. [ 128.866356][ T6686] dccp_close: ABORT with 32 bytes unread [ 128.952320][ T6730] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 129.207373][ T6743] netlink: 'syz-executor.4': attribute type 16 has an invalid length. [ 130.447086][ T6784] team0: Port device bridge5 added [ 130.461893][ T6788] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 130.569155][ T29] audit: type=1800 audit(1718092531.227:27): pid=6795 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1965 res=0 errno=0 [ 130.825762][ T6805] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 131.056493][ T6816] bridge2: entered promiscuous mode [ 131.062803][ T6816] team0: Port device bridge2 added [ 131.121371][ T6737] infiniband syz2: set active [ 131.204379][ T6737] infiniband syz2: added veth1_to_bridge [ 131.348831][ T6829] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 131.350959][ T6737] syz2: rxe_create_cq: returned err = -12 [ 131.371842][ T6737] infiniband syz2: Couldn't create ib_mad CQ [ 131.379248][ T6829] geneve0: entered promiscuous mode [ 131.384210][ T6737] infiniband syz2: Couldn't open port 1 [ 131.413718][ T6737] RDS/IB: syz2: added [ 131.439976][ T6829] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 131.462625][ T6737] smc: adding ib device syz2 with port count 1 [ 131.473763][ T6737] smc: ib device syz2 port 1 has pnetid [ 131.573115][ T6840] IPVS: set_ctl: invalid protocol: 29 100.1.1.1:20001 [ 131.687761][ T6842] Bluetooth: MGMT ver 1.22 [ 131.847708][ T6846] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.888646][ T6846] bridge_slave_1: left promiscuous mode [ 131.897069][ T6846] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.989008][ T6849] ax25_connect(): syz-executor.0 uses autobind, please contact jreuter@yaina.de [ 132.039000][ T6853] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 132.062751][ T6853] __nla_validate_parse: 23 callbacks suppressed [ 132.062769][ T6853] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.2'. [ 132.317724][ T6862] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 132.327790][ T6862] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 132.530590][ T29] audit: type=1800 audit(1718092533.187:28): pid=6871 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1944 res=0 errno=0 [ 132.559927][ T6873] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.4'. [ 132.688180][ T6877] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 133.031226][ T6896] bridge_slave_0: default FDB implementation only supports local addresses [ 133.167687][ T1246] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.216207][ T6910] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 133.227346][ T6910] openvswitch: netlink: IP tunnel attribute has 3060 unknown bytes. [ 133.340773][ T6914] team0: Device batadv0 is up. Set it down before adding it as a team port [ 133.350515][ T29] audit: type=1800 audit(1718092533.997:29): pid=6915 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1961 res=0 errno=0 [ 133.385056][ T6907] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 133.435378][ T6917] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.1'. [ 133.724055][ T5110] Bluetooth: hci0: command 0x0c1a tx timeout [ 133.730252][ T4488] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 133.827001][ T6931] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.940846][ T6931] hsr_slave_0: left promiscuous mode [ 133.948228][ T6931] hsr_slave_1: left promiscuous mode [ 134.379676][ T29] audit: type=1800 audit(1718092535.037:30): pid=6950 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1964 res=0 errno=0 [ 135.282284][ T6958] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.4'. [ 135.349682][ T6962] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 135.528042][ T6971] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.743115][ T6974] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 135.761371][ T29] audit: type=1800 audit(1718092536.417:31): pid=6974 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1965 res=0 errno=0 [ 135.793116][ T6987] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 135.804931][ T5110] Bluetooth: hci0: command 0x0c1a tx timeout [ 135.811276][ T4488] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 135.866937][ T6987] team0: Port device bridge6 added [ 136.833660][ T7016] xt_CT: No such helper "syz1" [ 137.171389][ T7033] __nla_validate_parse: 8 callbacks suppressed [ 137.171408][ T7033] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 137.209774][ T7035] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 137.272491][ T7039] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 137.319919][ T7040] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.1'. [ 137.392553][ T7050] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 137.517185][ T7053] xt_CT: No such helper "syz1" [ 137.586061][ T7059] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.1'. [ 137.974677][ T7080] bond0: option arp_interval: invalid value (18446744073366943235) [ 137.988686][ T7080] bond0: option arp_interval: allowed values 0 - 2147483647 [ 138.033131][ T7087] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 138.074923][ T7074] xt_NFQUEUE: number of total queues is 0 [ 138.122165][ T29] audit: type=1800 audit(1718092538.777:32): pid=7091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1967 res=0 errno=0 [ 138.159655][ T29] audit: type=1804 audit(1718092538.777:33): pid=7091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2553120329/syzkaller.dw5pN8/144/memory.events" dev="sda1" ino=1967 res=1 errno=0 [ 138.188858][ T7093] sctp: [Deprecated]: syz-executor.4 (pid 7093) Use of struct sctp_assoc_value in delayed_ack socket option. [ 138.188858][ T7093] Use struct sctp_sack_info instead [ 138.191833][ T29] audit: type=1804 audit(1718092538.777:34): pid=7091 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2553120329/syzkaller.dw5pN8/144/memory.events" dev="sda1" ino=1967 res=1 errno=0 [ 138.262699][ T7099] tipc: Started in network mode [ 138.318929][ T7099] tipc: Node identity ac1414aa, cluster identity 4711 [ 138.348813][ T7099] tipc: Enabled bearer , priority 10 [ 138.449347][ T7101] xt_CT: No such helper "syz1" [ 138.637952][ T7112] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 138.669197][ T7112] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 138.676898][ T7112] IPv6: NLM_F_CREATE should be set when creating new route [ 138.690574][ T7112] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 138.697890][ T7112] IPv6: NLM_F_CREATE should be set when creating new route [ 138.717229][ T7112] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 138.960089][ T7121] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 139.197644][ T7133] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 139.259762][ T7139] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 139.383168][ T7149] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.1'. [ 139.465446][ T932] tipc: Node number set to 2886997162 [ 139.842931][ T7184] 8021q: adding VLAN 0 to HW filter on device bond1 [ 139.931772][ T7191] hsr_slave_0: left promiscuous mode [ 139.953459][ T7191] hsr_slave_1: left promiscuous mode [ 139.979918][ T7178] xt_CT: No such helper "syz1" [ 140.106325][ T7184] vlan8: entered promiscuous mode [ 140.148244][ T7199] bond1: (slave bridge6): Enslaving as an active interface with an up link [ 140.312375][ T7209] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 140.837839][ T7244] Illegal XDP return value 4294967294 on prog (id 317) dev N/A, expect packet loss! [ 140.978634][ T7255] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 141.482642][ T7286] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.932744][ T29] audit: type=1800 audit(1718092542.587:35): pid=7311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1948 res=0 errno=0 [ 141.967278][ T29] audit: type=1804 audit(1718092542.587:36): pid=7311 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2553120329/syzkaller.dw5pN8/160/memory.events" dev="sda1" ino=1948 res=1 errno=0 [ 142.008181][ T29] audit: type=1804 audit(1718092542.667:37): pid=7314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2553120329/syzkaller.dw5pN8/160/memory.events" dev="sda1" ino=1948 res=1 errno=0 [ 142.313473][ T7334] __nla_validate_parse: 5 callbacks suppressed [ 142.313492][ T7334] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 142.460390][ T7339] netlink: 92 bytes leftover after parsing attributes in process `syz-executor.0'. [ 142.594855][ T7348] bond0: (slave vlan0): Opening slave failed [ 142.743525][ T7357] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 142.839458][ T7364] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 142.923308][ T7367] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 143.504752][ T5110] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 143.513475][ T5110] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 143.522040][ T5110] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 143.530288][ T5110] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 143.541769][ T5110] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 143.549955][ T5110] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 143.771187][ T7407] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.3'. [ 143.962220][ T7412] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 144.025520][ T7416] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 144.220356][ T63] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.349705][ T63] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.441485][ T7434] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 144.507211][ T63] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.573024][ T63] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.710478][ T7451] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 144.868677][ T7399] chnl_net:caif_netlink_parms(): no params data found [ 145.054216][ T7458] netlink: 296 bytes leftover after parsing attributes in process `syz-executor.4'. [ 145.067691][ T7458] vxcan0: entered promiscuous mode [ 145.091776][ T63] bridge_slave_1: left allmulticast mode [ 145.098174][ T63] bridge_slave_1: left promiscuous mode [ 145.106638][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.127036][ T63] bridge_slave_0: left allmulticast mode [ 145.132769][ T63] bridge_slave_0: left promiscuous mode [ 145.139229][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.262264][ T7470] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 145.272263][ T7470] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.3'. [ 145.291524][ T7470] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 145.627790][ T63] team0: Port device bridge2 removed [ 145.654370][ T5110] Bluetooth: hci5: command tx timeout [ 145.745391][ T63] team0: Port device bridge4 removed [ 145.807503][ T63] team0: Port device bridge5 removed [ 145.874710][ T63] bond1 (unregistering): (slave bridge6): Releasing backup interface [ 146.000252][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 146.009454][ T63] bond_slave_0: left promiscuous mode [ 146.020755][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 146.030955][ T63] bond_slave_1: left promiscuous mode [ 146.039019][ T63] bond0 (unregistering): Released all slaves [ 146.128250][ T63] bond1 (unregistering): Released all slaves [ 146.331733][ T7399] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.357773][ T7399] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.365929][ T7399] bridge_slave_0: entered allmulticast mode [ 146.375807][ T7399] bridge_slave_0: entered promiscuous mode [ 146.394208][ T7496] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:20002 [ 146.397240][ T7399] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.415911][ T7399] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.423264][ T7399] bridge_slave_1: entered allmulticast mode [ 146.447747][ T7399] bridge_slave_1: entered promiscuous mode [ 146.580674][ T7399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 146.609672][ T7399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 146.815537][ T7508] bond0: (slave macvlan4): Error -98 calling set_mac_address [ 146.856224][ T7399] team0: Port device team_slave_0 added [ 146.865692][ T7399] team0: Port device team_slave_1 added [ 146.974847][ T7399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.981832][ T7399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.021629][ T7399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 147.036133][ T7399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 147.043200][ T7399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 147.078044][ T7399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 147.197219][ T7399] hsr_slave_0: entered promiscuous mode [ 147.204654][ T7399] hsr_slave_1: entered promiscuous mode [ 147.402012][ T7526] team0: Device batadv0 is up. Set it down before adding it as a team port [ 147.440248][ T7534] netlink: 'syz-executor.4': attribute type 64 has an invalid length. [ 147.455305][ T7534] __nla_validate_parse: 3 callbacks suppressed [ 147.455322][ T7534] netlink: 164 bytes leftover after parsing attributes in process `syz-executor.4'. [ 147.478640][ T7537] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 147.546828][ T7541] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 147.649668][ T7541] team0: Port device bridge7 added [ 147.660283][ T7546] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 147.727381][ T5110] Bluetooth: hci5: command tx timeout [ 147.902303][ T7550] dummy0: entered promiscuous mode [ 147.911493][ T7550] dummy0: left promiscuous mode [ 148.126215][ T7553] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 148.160382][ T7557] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 148.253795][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 148.264161][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 148.284975][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 148.294872][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 148.342652][ T63] veth1_macvtap: left promiscuous mode [ 148.349627][ T63] veth0_macvtap: left promiscuous mode [ 148.358727][ T63] veth1_vlan: left promiscuous mode [ 148.365599][ T63] veth0_vlan: left promiscuous mode [ 148.979281][ T63] team0 (unregistering): Port device team_slave_1 removed [ 149.020159][ T63] team0 (unregistering): Port device team_slave_0 removed [ 149.550206][ T7593] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 149.727490][ T7399] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 149.745494][ T7399] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 149.757161][ T7399] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 149.776088][ T7399] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 149.804401][ T5110] Bluetooth: hci5: command tx timeout [ 149.906034][ T7399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 149.928192][ T7399] 8021q: adding VLAN 0 to HW filter on device team0 [ 149.943087][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 149.950278][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 149.966980][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 149.974158][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 150.030982][ T7399] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 150.235182][ T7399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 150.318255][ T7399] veth0_vlan: entered promiscuous mode [ 150.355650][ T7399] veth1_vlan: entered promiscuous mode [ 150.421347][ T7399] veth0_macvtap: entered promiscuous mode [ 150.450540][ T7399] veth1_macvtap: entered promiscuous mode [ 150.477276][ T7399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.494658][ T7399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.512038][ T7399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.525083][ T7399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.535088][ T7399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.546750][ T7399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.556752][ T7399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 150.573013][ T7399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.585166][ T7399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 150.608715][ T7399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.626485][ T7399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.648736][ T7399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.664296][ T7399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.681333][ T7399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.699733][ T7399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.710797][ T7399] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 150.729003][ T7399] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 150.750965][ T7399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 150.772745][ T4488] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 150.787777][ T4488] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 150.799951][ T4488] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 150.814854][ T4488] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 150.821224][ T7399] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.840111][ T7627] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.2'. [ 150.850900][ T4488] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 150.863795][ T4488] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 150.875379][ T7399] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.885311][ T7399] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.894255][ T7399] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 150.935593][ T7629] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 150.950439][ T7632] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 150.999766][ T7629] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.264541][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.273031][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.374084][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 151.384504][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 151.516933][ T7653] IPv6: Can't replace route, no match found [ 151.776634][ T7624] chnl_net:caif_netlink_parms(): no params data found [ 151.830868][ T29] audit: type=1804 audit(1718092552.487:38): pid=7665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1432848848/syzkaller.DuYJtP/2/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 151.859901][ T29] audit: type=1804 audit(1718092552.517:39): pid=7665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1432848848/syzkaller.DuYJtP/2/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 151.887117][ T5110] Bluetooth: hci5: command tx timeout [ 151.896546][ T29] audit: type=1804 audit(1718092552.547:40): pid=7665 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1432848848/syzkaller.DuYJtP/2/memory.events" dev="sda1" ino=1960 res=1 errno=0 [ 151.988594][ T63] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.105811][ T63] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.143386][ T7624] bridge0: port 1(bridge_slave_0) entered blocking state [ 152.150986][ T7624] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.170112][ T7624] bridge_slave_0: entered allmulticast mode [ 152.179035][ T7624] bridge_slave_0: entered promiscuous mode [ 152.188519][ T7624] bridge0: port 2(bridge_slave_1) entered blocking state [ 152.197643][ T7624] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.214334][ T7624] bridge_slave_1: entered allmulticast mode [ 152.222778][ T7624] bridge_slave_1: entered promiscuous mode [ 152.278185][ T63] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.298303][ T7679] sctp: [Deprecated]: syz-executor.1 (pid 7679) Use of int in maxseg socket option. [ 152.298303][ T7679] Use struct sctp_assoc_value instead [ 152.436051][ T63] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.465536][ T7689] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 152.519612][ T7693] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 152.549576][ T7624] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 152.595882][ T7624] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 152.728961][ T7624] team0: Port device team_slave_0 added [ 152.762608][ T7624] team0: Port device team_slave_1 added [ 152.924541][ T5110] Bluetooth: hci0: command tx timeout [ 152.959380][ T63] bridge_slave_1: left allmulticast mode [ 152.966247][ T63] bridge_slave_1: left promiscuous mode [ 152.972120][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.988081][ T63] bridge_slave_0: left allmulticast mode [ 152.995300][ T63] bridge_slave_0: left promiscuous mode [ 153.001162][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.540825][ T63] team0: Port device bridge1 removed [ 153.676314][ T63] team0: Port device bridge2 removed [ 153.868636][ T63] team0: Port device bridge5 removed [ 154.063598][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 154.079568][ T63] bond_slave_0: left promiscuous mode [ 154.091521][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 154.105365][ T63] bond_slave_1: left promiscuous mode [ 154.119399][ T63] bond0 (unregistering): Released all slaves [ 154.135809][ T7624] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.143013][ T7624] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.169396][ T7624] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.190867][ T7624] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.201442][ T7624] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.253040][ T7624] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.274170][ T7704] tc_dump_action: action bad kind [ 154.321556][ T7717] IPv6: Can't replace route, no match found [ 154.467798][ T7624] hsr_slave_0: entered promiscuous mode [ 154.482322][ T7624] hsr_slave_1: entered promiscuous mode [ 154.497593][ T7624] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 154.507803][ T7624] Cannot create hsr debugfs directory [ 155.004688][ T5110] Bluetooth: hci0: command tx timeout [ 155.473594][ T7624] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 155.531312][ T7624] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 155.543308][ T7624] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 155.555369][ T7624] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 155.865559][ T7624] 8021q: adding VLAN 0 to HW filter on device bond0 [ 155.940885][ T7624] 8021q: adding VLAN 0 to HW filter on device team0 [ 155.985761][ T783] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.992960][ T783] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.033252][ T63] hsr_slave_0: left promiscuous mode [ 156.070872][ T63] hsr_slave_1: left promiscuous mode [ 156.077498][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.093134][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.102467][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.117155][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.167994][ T63] veth1_macvtap: left promiscuous mode [ 156.173575][ T63] veth0_macvtap: left promiscuous mode [ 156.184379][ T63] veth1_vlan: left promiscuous mode [ 156.190934][ T63] veth0_vlan: left promiscuous mode [ 156.368459][ T63] infiniband syz2: set down [ 156.948701][ T63] team0 (unregistering): Port device team_slave_1 removed [ 156.991808][ T63] team0 (unregistering): Port device team_slave_0 removed [ 157.084686][ T5110] Bluetooth: hci0: command tx timeout [ 157.121514][ T35] smc: removing ib device syz2 [ 157.359813][ T7752] __nla_validate_parse: 2 callbacks suppressed [ 157.359835][ T7752] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 157.723141][ T783] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.730397][ T783] bridge0: port 2(bridge_slave_1) entered forwarding state [ 158.064853][ T7797] xt_NFQUEUE: number of total queues is 0 [ 158.071122][ T7797] Bluetooth: MGMT ver 1.22 [ 158.127332][ T7800] netlink: 'syz-executor.4': attribute type 64 has an invalid length. [ 158.159832][ T7800] A link change request failed with some changes committed already. Interface macsec0 may have been left with an inconsistent configuration, please check. [ 158.247453][ T7806] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 158.493726][ T7624] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 158.606963][ T7815] IPv6: Can't replace route, no match found [ 158.779375][ T7624] veth0_vlan: entered promiscuous mode [ 158.814775][ T7823] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 158.816568][ T7624] veth1_vlan: entered promiscuous mode [ 158.917005][ T7624] veth0_macvtap: entered promiscuous mode [ 158.939921][ T7624] veth1_macvtap: entered promiscuous mode [ 159.109333][ T7624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.127896][ T7624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.138388][ T7624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.151235][ T7624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.161472][ T7624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.172456][ T5110] Bluetooth: hci0: command tx timeout [ 159.178595][ T7624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.188878][ T7624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 159.199772][ T7624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.217408][ T7624] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 159.241712][ T7624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.272240][ T7624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.282817][ T7624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.303970][ T7624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.319237][ T7624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.331236][ T7624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.342610][ T7624] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 159.353542][ T7624] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 159.365783][ T7624] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 159.415660][ T7624] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.426275][ T7624] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.437404][ T7624] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.447136][ T7624] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 159.560010][ T7841] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 159.579026][ T7841] pim6reg0: linktype set to 778 [ 159.604719][ T2470] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.612765][ T2470] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.659858][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 159.668654][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 159.681920][ T7849] sctp: [Deprecated]: syz-executor.0 (pid 7849) Use of struct sctp_assoc_value in delayed_ack socket option. [ 159.681920][ T7849] Use struct sctp_sack_info instead [ 159.761594][ T7854] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 159.768014][ T7855] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 159.843184][ T7859] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 160.486772][ T7891] syzkaller0: entered promiscuous mode [ 160.492520][ T7891] syzkaller0: entered allmulticast mode [ 160.531272][ T29] audit: type=1800 audit(1718092561.187:41): pid=7897 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1962 res=0 errno=0 [ 160.624202][ T7895] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 162.834352][ T7900] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 162.852779][ T7900] vlan0: entered promiscuous mode [ 162.870402][ T7928] A link change request failed with some changes committed already. Interface veth1_to_batadv may have been left with an inconsistent configuration, please check. [ 163.182714][ T29] audit: type=1800 audit(1718092563.837:42): pid=7946 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1959 res=0 errno=0 [ 163.396085][ T7952] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 163.417264][ T7952] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.0'. [ 163.431008][ T7952] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 163.441435][ T7955] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 163.452420][ T7955] bridge_slave_1: left allmulticast mode [ 163.461547][ T7955] bridge_slave_1: left promiscuous mode [ 163.467591][ T7955] bridge0: port 2(bridge_slave_1) entered disabled state [ 163.611444][ T7955] bridge_slave_0: left allmulticast mode [ 163.634798][ T7955] bridge_slave_0: left promiscuous mode [ 163.640690][ T7955] bridge0: port 1(bridge_slave_0) entered disabled state [ 163.816565][ T7964] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 163.856021][ T7968] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 164.225939][ T63] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.384484][ T63] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.468740][ T7991] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 164.669794][ T63] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.728733][ T7997] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 164.792121][ T63] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.821121][ T29] audit: type=1800 audit(1718092565.477:43): pid=8001 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1960 res=0 errno=0 [ 164.844178][ T7997] netlink: 'syz-executor.1': attribute type 21 has an invalid length. [ 164.852370][ T7997] netlink: 'syz-executor.1': attribute type 20 has an invalid length. [ 165.012837][ T4488] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 165.023308][ T4488] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 165.031804][ T4488] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 165.040288][ T4488] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 165.050740][ T4488] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 165.059122][ T4488] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 165.228634][ T63] bridge_slave_1: left allmulticast mode [ 165.238772][ T63] bridge_slave_1: left promiscuous mode [ 165.246482][ T63] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.265329][ T63] bridge_slave_0: left allmulticast mode [ 165.280483][ T63] bridge_slave_0: left promiscuous mode [ 165.288332][ T63] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.556879][ T63] bond0 (unregistering): (slave geneve0): Releasing backup interface [ 165.657470][ T63] team0: Port device bridge1 removed [ 165.723752][ T63] team0: Port device bridge2 removed [ 165.863800][ T63] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 165.875021][ T63] bond_slave_0: left promiscuous mode [ 165.882561][ T63] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 165.892734][ T63] bond_slave_1: left promiscuous mode [ 165.902382][ T63] bond0 (unregistering): (slave macvlan2): Releasing backup interface [ 165.911394][ T63] macvlan2: left promiscuous mode [ 165.916651][ T63] team0: left promiscuous mode [ 165.922457][ T63] team_slave_0: left promiscuous mode [ 165.928287][ T63] team_slave_1: left promiscuous mode [ 165.936358][ T63] bond0 (unregistering): Released all slaves [ 166.039846][ T63] tipc: Disabling bearer [ 166.058461][ T63] tipc: Left network mode [ 166.365944][ T8009] chnl_net:caif_netlink_parms(): no params data found [ 166.792670][ T8009] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.816269][ T8009] bridge0: port 1(bridge_slave_0) entered disabled state [ 166.829201][ T8009] bridge_slave_0: entered allmulticast mode [ 166.845684][ T8009] bridge_slave_0: entered promiscuous mode [ 166.878627][ T8009] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.884480][ T8082] netlink: 165 bytes leftover after parsing attributes in process `syz-executor.3'. [ 166.888935][ T8009] bridge0: port 2(bridge_slave_1) entered disabled state [ 166.902666][ T8009] bridge_slave_1: entered allmulticast mode [ 166.911174][ T29] audit: type=1800 audit(1718092567.567:44): pid=8083 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1959 res=0 errno=0 [ 166.911601][ T8009] bridge_slave_1: entered promiscuous mode [ 167.025894][ T8086] netlink: 'syz-executor.0': attribute type 291 has an invalid length. [ 167.047866][ T8009] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 167.066419][ T8086] netlink: 'syz-executor.0': attribute type 16 has an invalid length. [ 167.090146][ T8009] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 167.164173][ T5110] Bluetooth: hci3: command tx timeout [ 169.252867][ T5110] Bluetooth: hci3: command 0x041b tx timeout [ 169.489360][ T8009] team0: Port device team_slave_0 added [ 169.512296][ T8009] team0: Port device team_slave_1 added [ 169.525883][ T8144] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 169.554123][ T8144] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 169.562449][ T8144] netlink: 16074 bytes leftover after parsing attributes in process `syz-executor.0'. [ 169.707593][ T8148] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 169.736003][ T8009] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.750125][ T8009] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.780848][ T8009] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 169.871370][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 169.888348][ T63] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 169.898152][ T63] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 169.916471][ T63] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 169.962454][ T63] veth1_macvtap: left promiscuous mode [ 169.968804][ T63] veth0_macvtap: left promiscuous mode [ 169.985246][ T63] veth1_vlan: left promiscuous mode [ 169.992283][ T63] veth0_vlan: left promiscuous mode [ 170.167124][ T63] pim6reg (unregistering): left allmulticast mode [ 171.323981][ T4488] Bluetooth: hci3: command 0x041b tx timeout [ 171.480080][ T63] team0 (unregistering): Port device team_slave_1 removed [ 171.520037][ T63] team0 (unregistering): Port device team_slave_0 removed [ 171.854399][ T8156] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 171.865050][ T8009] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 171.873700][ T8009] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 171.902166][ T8009] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 171.927526][ T8173] netlink: 'syz-executor.1': attribute type 291 has an invalid length. [ 171.948340][ T8176] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 172.103332][ T8009] hsr_slave_0: entered promiscuous mode [ 172.162558][ T8009] hsr_slave_1: entered promiscuous mode [ 172.454133][ T8009] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 172.461739][ T8009] Cannot create hsr debugfs directory [ 172.697992][ T29] audit: type=1800 audit(1718092573.347:45): pid=8216 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1945 res=0 errno=0 [ 173.131161][ T8242] Bluetooth: MGMT ver 1.22 [ 173.404084][ T4488] Bluetooth: hci3: command 0x041b tx timeout [ 174.008296][ T8252] team_slave_0: entered promiscuous mode [ 174.014247][ T8252] team_slave_1: entered promiscuous mode [ 174.056444][ T8252] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 174.068272][ T8252] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 174.268970][ T29] audit: type=1800 audit(1718092574.927:46): pid=8271 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1959 res=0 errno=0 [ 174.564882][ T8009] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 174.602930][ T8009] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 174.627525][ T8009] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 174.669930][ T8009] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 174.880417][ T8009] 8021q: adding VLAN 0 to HW filter on device bond0 [ 174.938414][ T8009] 8021q: adding VLAN 0 to HW filter on device team0 [ 174.974931][ T5111] bridge0: port 1(bridge_slave_0) entered blocking state [ 174.982113][ T5111] bridge0: port 1(bridge_slave_0) entered forwarding state [ 175.015608][ T5111] bridge0: port 2(bridge_slave_1) entered blocking state [ 175.022774][ T5111] bridge0: port 2(bridge_slave_1) entered forwarding state [ 175.121259][ T8009] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 175.190707][ T8317] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 175.484142][ T4488] Bluetooth: hci3: command 0x041b tx timeout [ 175.727056][ T8324] team_slave_0: entered promiscuous mode [ 175.732899][ T8324] team_slave_1: entered promiscuous mode [ 175.738749][ T8324] bridge1: entered promiscuous mode [ 175.744416][ T8324] bridge3: entered promiscuous mode [ 175.750493][ T8324] bridge4: entered promiscuous mode [ 175.755796][ T8324] bridge5: entered promiscuous mode [ 175.761033][ T8324] bridge6: entered promiscuous mode [ 175.766316][ T8324] bridge7: entered promiscuous mode [ 175.824739][ T8324] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 175.833039][ T8324] macvlan3: entered promiscuous mode [ 175.838417][ T8324] team0: entered promiscuous mode [ 175.862833][ T8324] bond0: (slave macvlan3): Enslaving as an active interface with an up link [ 176.019709][ T8009] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 176.062384][ T8334] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.4'. [ 176.151274][ T8009] veth0_vlan: entered promiscuous mode [ 176.166872][ T8340] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 176.217696][ T8009] veth1_vlan: entered promiscuous mode [ 176.262933][ T8009] veth0_macvtap: entered promiscuous mode [ 176.281138][ T8009] veth1_macvtap: entered promiscuous mode [ 176.309228][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.322031][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.337653][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.349508][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.368532][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.385278][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.399925][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 176.413476][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.432835][ T8009] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 176.460907][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.472696][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.490255][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.500813][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.514049][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.524776][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.536715][ T8009] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 176.548308][ T8009] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 176.559974][ T8009] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 176.581555][ T8009] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.601416][ T8009] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.620482][ T8009] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 176.634065][ T8009] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 177.235189][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.243047][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.292256][ T8351] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 177.321956][ T8351] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.0'. [ 177.347211][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 177.359862][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 177.659464][ T8373] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 177.734773][ T8365] sock: sock_timestamping_bind_phc: sock not bind to device [ 178.577067][ T8388] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 178.697973][ T8397] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 178.744152][ T29] audit: type=1800 audit(1718092579.377:47): pid=8400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1945 res=0 errno=0 [ 178.928269][ T8411] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 179.111336][ T8424] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 179.134219][ T8424] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.1'. [ 179.167671][ T8424] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 180.047087][ T8439] netlink: 'syz-executor.1': attribute type 291 has an invalid length. [ 180.064463][ T8439] netlink: 'syz-executor.1': attribute type 16 has an invalid length. [ 180.081760][ T29] audit: type=1800 audit(1718092580.737:48): pid=8441 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1951 res=0 errno=0 [ 180.121514][ T8436] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 181.324623][ T5118] Bluetooth: hci2: command 0x0406 tx timeout [ 181.331745][ T53] Bluetooth: hci1: command 0x0406 tx timeout [ 186.716468][ T8453] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 186.999308][ T8480] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 187.852429][ T8491] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 187.872978][ T8492] netlink: 'syz-executor.0': attribute type 291 has an invalid length. [ 187.888163][ T8492] netlink: 'syz-executor.0': attribute type 16 has an invalid length. [ 187.895755][ T29] audit: type=1800 audit(1718092588.557:49): pid=8494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1947 res=0 errno=0 [ 188.075433][ T8503] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 188.121460][ T8510] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 188.250129][ T8514] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 188.262694][ T8514] netlink: 55 bytes leftover after parsing attributes in process `syz-executor.0'. [ 188.285262][ T8514] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 188.297436][ T8514] team0: Port device virt_wifi0 added [ 188.519170][ T8524] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 188.608309][ T8527] team_slave_0: entered promiscuous mode [ 188.614106][ T8527] team_slave_1: entered promiscuous mode [ 188.624917][ T8527] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 188.639618][ T8527] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 189.351984][ T29] audit: type=1800 audit(1718092590.007:50): pid=8534 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1956 res=0 errno=0 [ 189.535637][ T8546] geneve2: entered promiscuous mode [ 189.540895][ T8546] geneve2: entered allmulticast mode [ 189.593307][ T8550] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 189.923594][ T8577] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 189.960763][ T8579] bond0: (slave macvlan3): Error -98 calling set_mac_address [ 190.088757][ T29] audit: type=1800 audit(1718092590.747:51): pid=8585 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1957 res=0 errno=0 [ 191.990051][ T8605] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 192.157005][ T8615] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 192.197678][ T8618] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 192.207471][ T8618] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.0'. [ 192.269775][ T8620] team_slave_0: entered promiscuous mode [ 192.275570][ T8620] team_slave_1: entered promiscuous mode [ 192.282963][ T8620] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 192.293357][ T8620] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 192.308255][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 192.409392][ T29] audit: type=1800 audit(1718092593.067:52): pid=8627 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1954 res=0 errno=0 [ 192.722763][ T29] audit: type=1800 audit(1718092593.377:53): pid=8641 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1961 res=0 errno=0 [ 193.688722][ T8651] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 193.814286][ T8663] netlink: 'syz-executor.4': attribute type 12 has an invalid length. [ 193.829769][ T8663] netlink: 197276 bytes leftover after parsing attributes in process `syz-executor.4'. [ 193.888564][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 193.969959][ T2486] ------------[ cut here ]------------ [ 193.975808][ T2486] WARNING: CPU: 0 PID: 2486 at net/wireless/sme.c:846 __cfg80211_connect_result+0x19ea/0x21d0 [ 193.986250][ T2486] Modules linked in: [ 193.990185][ T2486] CPU: 0 PID: 2486 Comm: kworker/u8:8 Not tainted 6.10.0-rc2-syzkaller-00722-gbb678f01804c #0 [ 194.000573][ T2486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 194.010755][ T2486] Workqueue: cfg80211 cfg80211_event_work [ 194.016687][ T2486] RIP: 0010:__cfg80211_connect_result+0x19ea/0x21d0 [ 194.023660][ T2486] Code: a4 00 89 c3 31 ff 89 c6 e8 63 06 b3 f6 85 db 74 29 e8 2a 32 99 f6 84 c0 74 27 e8 11 02 b3 f6 e9 84 00 00 00 e8 07 02 b3 f6 90 <0f> 0b 90 4c 89 ff 4c 89 f6 e8 68 23 00 00 eb 91 e8 f1 01 b3 f6 eb [ 194.043811][ T2486] RSP: 0018:ffffc90009a479e0 EFLAGS: 00010293 [ 194.050035][ T2486] RAX: ffffffff8ae32489 RBX: 0000000000000000 RCX: ffff888029db5a00 [ 194.058102][ T2486] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 2024/06/11 07:56:34 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 194.066174][ T2486] RBP: ffffc90009a47b00 R08: ffffffff8ae32059 R09: 1ffffffff25f5ebd [ 194.074279][ T2486] R10: dffffc0000000000 R11: fffffbfff25f5ebe R12: ffff88807dbd1898 [ 194.082276][ T2486] R13: dffffc0000000000 R14: ffff88807dbd1818 R15: ffff88802ba4f000 [ 194.090357][ T2486] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 194.099372][ T2486] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 194.106075][ T2486] CR2: 00007fb78dca7ffc CR3: 0000000066f62000 CR4: 00000000003506f0 [ 194.114415][ T2486] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 194.122532][ T2486] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 194.131308][ T2486] Call Trace: [ 194.135065][ T2486] [ 194.138013][ T2486] ? __warn+0x163/0x4e0 [ 194.142189][ T2486] ? __cfg80211_connect_result+0x19ea/0x21d0 [ 194.148275][ T2486] ? report_bug+0x2b3/0x500 [ 194.152800][ T2486] ? __cfg80211_connect_result+0x19ea/0x21d0 [ 194.158859][ T2486] ? handle_bug+0x3e/0x70 [ 194.163224][ T2486] ? exc_invalid_op+0x1a/0x50 [ 194.168014][ T2486] ? asm_exc_invalid_op+0x1a/0x20 [ 194.173067][ T2486] ? __cfg80211_connect_result+0x15b9/0x21d0 [ 194.179104][ T2486] ? __cfg80211_connect_result+0x19e9/0x21d0 [ 194.185204][ T2486] ? __cfg80211_connect_result+0x19ea/0x21d0 [ 194.191283][ T2486] ? __pfx___cfg80211_connect_result+0x10/0x10 [ 194.197550][ T2486] ? lockdep_hardirqs_on+0x99/0x150 [ 194.202789][ T2486] cfg80211_process_wdev_events+0x356/0x510 [ 194.208909][ T2486] cfg80211_process_rdev_events+0xac/0x110 [ 194.214816][ T2486] ? process_scheduled_works+0x945/0x1830 [ 194.220554][ T2486] cfg80211_event_work+0x2f/0x40 [ 194.225619][ T2486] process_scheduled_works+0xa2c/0x1830 [ 194.231604][ T2486] ? __pfx_process_scheduled_works+0x10/0x10 [ 194.238015][ T2486] ? assign_work+0x364/0x3d0 [ 194.242645][ T2486] worker_thread+0x86d/0xd70 [ 194.247559][ T2486] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 194.253479][ T2486] ? __kthread_parkme+0x169/0x1d0 [ 194.258575][ T2486] ? __pfx_worker_thread+0x10/0x10 [ 194.263705][ T2486] kthread+0x2f0/0x390 [ 194.267840][ T2486] ? __pfx_worker_thread+0x10/0x10 [ 194.272964][ T2486] ? __pfx_kthread+0x10/0x10 [ 194.277661][ T2486] ret_from_fork+0x4b/0x80 [ 194.282109][ T2486] ? __pfx_kthread+0x10/0x10 [ 194.286763][ T2486] ret_from_fork_asm+0x1a/0x30 [ 194.291561][ T2486] [ 194.294655][ T2486] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 194.301941][ T2486] CPU: 0 PID: 2486 Comm: kworker/u8:8 Not tainted 6.10.0-rc2-syzkaller-00722-gbb678f01804c #0 [ 194.312186][ T2486] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 194.322249][ T2486] Workqueue: cfg80211 cfg80211_event_work [ 194.327995][ T2486] Call Trace: [ 194.331281][ T2486] [ 194.334224][ T2486] dump_stack_lvl+0x241/0x360 [ 194.338919][ T2486] ? __pfx_dump_stack_lvl+0x10/0x10 [ 194.344131][ T2486] ? __pfx__printk+0x10/0x10 [ 194.348738][ T2486] ? vscnprintf+0x5d/0x90 [ 194.353079][ T2486] panic+0x349/0x860 [ 194.356989][ T2486] ? __warn+0x172/0x4e0 [ 194.361162][ T2486] ? __pfx_panic+0x10/0x10 [ 194.365621][ T2486] ? ret_from_fork_asm+0x1a/0x30 [ 194.370582][ T2486] __warn+0x346/0x4e0 [ 194.374587][ T2486] ? __cfg80211_connect_result+0x19ea/0x21d0 [ 194.380575][ T2486] report_bug+0x2b3/0x500 [ 194.384930][ T2486] ? __cfg80211_connect_result+0x19ea/0x21d0 [ 194.390900][ T2486] handle_bug+0x3e/0x70 [ 194.395046][ T2486] exc_invalid_op+0x1a/0x50 [ 194.399538][ T2486] asm_exc_invalid_op+0x1a/0x20 [ 194.404391][ T2486] RIP: 0010:__cfg80211_connect_result+0x19ea/0x21d0 [ 194.410972][ T2486] Code: a4 00 89 c3 31 ff 89 c6 e8 63 06 b3 f6 85 db 74 29 e8 2a 32 99 f6 84 c0 74 27 e8 11 02 b3 f6 e9 84 00 00 00 e8 07 02 b3 f6 90 <0f> 0b 90 4c 89 ff 4c 89 f6 e8 68 23 00 00 eb 91 e8 f1 01 b3 f6 eb [ 194.430561][ T2486] RSP: 0018:ffffc90009a479e0 EFLAGS: 00010293 [ 194.436623][ T2486] RAX: ffffffff8ae32489 RBX: 0000000000000000 RCX: ffff888029db5a00 [ 194.444581][ T2486] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 194.452537][ T2486] RBP: ffffc90009a47b00 R08: ffffffff8ae32059 R09: 1ffffffff25f5ebd [ 194.460493][ T2486] R10: dffffc0000000000 R11: fffffbfff25f5ebe R12: ffff88807dbd1898 [ 194.468448][ T2486] R13: dffffc0000000000 R14: ffff88807dbd1818 R15: ffff88802ba4f000 [ 194.476510][ T2486] ? __cfg80211_connect_result+0x15b9/0x21d0 [ 194.482492][ T2486] ? __cfg80211_connect_result+0x19e9/0x21d0 [ 194.488488][ T2486] ? __pfx___cfg80211_connect_result+0x10/0x10 [ 194.494641][ T2486] ? lockdep_hardirqs_on+0x99/0x150 [ 194.499860][ T2486] cfg80211_process_wdev_events+0x356/0x510 [ 194.505765][ T2486] cfg80211_process_rdev_events+0xac/0x110 [ 194.511569][ T2486] ? process_scheduled_works+0x945/0x1830 [ 194.517282][ T2486] cfg80211_event_work+0x2f/0x40 [ 194.522218][ T2486] process_scheduled_works+0xa2c/0x1830 [ 194.527774][ T2486] ? __pfx_process_scheduled_works+0x10/0x10 [ 194.533769][ T2486] ? assign_work+0x364/0x3d0 [ 194.538354][ T2486] worker_thread+0x86d/0xd70 [ 194.542937][ T2486] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 194.548824][ T2486] ? __kthread_parkme+0x169/0x1d0 [ 194.553840][ T2486] ? __pfx_worker_thread+0x10/0x10 [ 194.558941][ T2486] kthread+0x2f0/0x390 [ 194.563000][ T2486] ? __pfx_worker_thread+0x10/0x10 [ 194.568101][ T2486] ? __pfx_kthread+0x10/0x10 [ 194.572684][ T2486] ret_from_fork+0x4b/0x80 [ 194.577091][ T2486] ? __pfx_kthread+0x10/0x10 [ 194.581671][ T2486] ret_from_fork_asm+0x1a/0x30 [ 194.586441][ T2486] [ 194.589666][ T2486] Kernel Offset: disabled [ 194.594140][ T2486] Rebooting in 86400 seconds..