last executing test programs: 4.711844803s ago: executing program 3: r0 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000000c0)={0x1, 0xffffffffffffffff}, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x11, 0x18, &(0x7f0000000240)=ANY=[@ANYBLOB="9a8bfcff000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffe085c1f84a4b9f1600b7030000810000008500000006000000183b000004000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001869000002000000000000000500000018000000ef4d00000000000008000000180000000100000000000000bf000000"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket(0x1, 0x2, 0x0) bind$unix(r5, &(0x7f00000001c0)=@file={0x1, './file0\x00'}, 0x6e) sendmmsg$unix(r5, &(0x7f0000000600)=[{{&(0x7f0000000280)=@file={0x1, './file0\x00'}, 0x6e, 0x0}}, {{&(0x7f0000000300)=@file={0x0, './file0/../file0\x00'}, 0x2, 0x0, 0x0, &(0x7f0000000480)=[@rights={{0x18, 0x1, 0x1, [r4, r3]}}], 0x18}}], 0x2, 0x0) sendto$inet6(r2, &(0x7f0000000140)='l', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @local, 0x3f}, 0x1c) r6 = socket(0x15, 0x5, 0x0) connect$l2tp6(r6, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) writev(r7, &(0x7f00000002c0)=[{&(0x7f0000000300)="4800000014001d0d09074beafd0d8c560284606080ffe006ce204e20590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b", 0x48}], 0x1) socket$l2tp(0x2, 0x2, 0x73) r8 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r8, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) r9 = socket$netlink(0x10, 0x3, 0x0) writev(r9, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) r10 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_msfilter(r10, 0x0, 0x29, &(0x7f0000000000)=ANY=[@ANYBLOB="e00000027fa80a010100000004"], 0x57) setsockopt$inet_mreqsrc(r8, 0x0, 0x24, &(0x7f0000000440)={@multicast2, @loopback, @empty}, 0xc) 3.765346343s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) (async, rerun: 32) r2 = socket$can_bcm(0x1d, 0x2, 0x2) (rerun: 32) connect$can_bcm(r2, &(0x7f0000000140), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000340)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r2, &(0x7f0000000300)={&(0x7f0000000880)={0x1d, r3}, 0x10, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB="052000002a0300"/16, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0xea60, @ANYBLOB="0000000001000000000000801e0200000d77b9258673fd925357ab3f1b6bcea7b81a2da43af3778102d664d8f826bcc086c502dca00eb2d78b5e6c2366887f8de84944ba1018dda1efb23be7eb941b07"], 0x80}}, 0x0) getsockopt$IP6T_SO_GET_REVISION_MATCH(r1, 0x29, 0x44, &(0x7f0000000000)={'icmp\x00'}, &(0x7f0000000040)=0x1e) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) (async, rerun: 32) r6 = syz_init_net_socket$rose(0xb, 0x5, 0x0) (rerun: 32) bind$rose(r6, &(0x7f0000000140)=@full={0xb, @dev={0xbb, 0xbb, 0xbb, 0x2, 0x0}, @default, 0x0, [@bcast, @bcast, @null={0x40, 0x40, 0x1c}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x40) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r7, 0x0, 0x1, &(0x7f0000000000)=0x7, 0x4) bind$inet(r7, &(0x7f0000000040)={0x2, 0x0, @broadcast}, 0x10) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000300)=ANY=[@ANYBLOB="4800000010", @ANYBLOB='\x00'], 0x48}}, 0x40000) socket$netlink(0x10, 0x3, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) (async) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000200)='rdma.current\x00', 0x275a, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r8}, 0x10) (async) r9 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r9, 0xc004743e, 0x20001400) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1204"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000}, 0x80) ioctl$TUNSETOFFLOAD(r9, 0x4010744d, 0x20000000) (async, rerun: 64) r10 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 64) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'ipvlan1\x00', 0x0}) ioctl$sock_inet6_SIOCSIFADDR(0xffffffffffffffff, 0x8916, &(0x7f0000000000)={@private2, 0x0, r11}) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)=ANY=[@ANYBLOB="6c0000001000390400"/20, @ANYRES32=r11, @ANYBLOB="01"], 0x6c}}, 0x0) (async) r12 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$sock_attach_bpf(r12, 0x1, 0x49, &(0x7f0000000040), 0x4) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3800000010000100"/20, @ANYRES32=r5, @ANYBLOB="00000000000000001400ebe1497001800c000400000000000000000004001400"], 0x38}}, 0x0) 3.763358622s ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0xa, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES16=r0, @ANYBLOB="0000000000000000b70800004e9d00007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8fff8ffb703000008000000b7040000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='ext4_es_find_extent_range_enter\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000400)={&(0x7f0000000040)='ext4_es_find_extent_range_enter\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_pid(r4, &(0x7f0000000580), 0x12) (async) socket$inet_udp(0x2, 0x2, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000000)='lp\x00', 0x3) (async) connect$inet6(r5, &(0x7f0000000180)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) (async) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="54010000100001000000000000000000fe8000000000000000000000000000aa00"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000000000000000006c000000fe88000000ff00000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000300686d6163287368613235362d6e656f6e290000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001c001700"/268], 0x154}}, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r5, 0x8933, &(0x7f0000000040)) (async) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)={@cgroup, 0xffffffffffffffff, 0xb, 0x24, 0xffffffffffffffff, @prog_fd}, 0x20) (async) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r7, &(0x7f0000020240), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r7, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f0000000140)=0x14) (async) setsockopt$bt_l2cap_L2CAP_CONNINFO(r7, 0x6, 0x2, &(0x7f0000000200)={0x12af, "b34f8a"}, 0x6) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r9, &(0x7f0000000200), 0xf000) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) (async) r10 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r10, 0x10d, 0xa5, 0x0, &(0x7f0000000000)) 3.620218582s ago: executing program 3: socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(0xffffffffffffffff, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r0, 0x0, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000000000000000096ca60a0000008000100", @ANYRES32=0x0, @ANYBLOB="3c00028038000100240001006e6f746966795f70656572735f636f756e74"], 0x58}, 0x1, 0xf000}, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000002fc0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000940)=ANY=[@ANYBLOB="2c0000001a00010000000000000000000a000000", @ANYRES32], 0x2c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=ANY=[@ANYBLOB="1800"/24], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) unshare(0x68060200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000002, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x2, 0x3a) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 3.260344604s ago: executing program 4: r0 = socket$inet(0x2, 0x80000, 0x23) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x0, 0xd8, 0xc, 0x3, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x2}, 0x48) socket$nl_route(0x10, 0x3, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0), 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x18, 0x4, &(0x7f0000000600)=ANY=[@ANYRES16=r0, @ANYRESHEX=r0, @ANYRESDEC=r1, @ANYRESDEC=r1], &(0x7f0000003ff6)='GPL\x00', 0xffffffff, 0xc3, &(0x7f000000cf3d)=""/195, 0x41000}, 0x90) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1801000000000000000000004b84ffec850000006d000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x4c, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'bitmap:ip,mac\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x4c}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_int(r3, &(0x7f0000000100)='cpuset.cpus\x00', 0x2, 0x0) r4 = openat$cgroup_procs(r3, &(0x7f0000000240)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r4, &(0x7f0000000880), 0x12) r5 = syz_open_procfs$namespace(0x0, 0x0) ioctl$TUNSETIFF(r5, 0xb701, 0x0) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x1) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000640)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x40844}, 0x5) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001f770896b69dc520ad07bbc05aa6a4d8f58bc98b87950e88e2618d0dc001f756f4dcd5e466353c000c62e755bb243ebfd0c1e62d3bf70561d352bf217387906d7c995f86ef43010e9385c045d2a47d54f41078507b00437da8b7dbcd1b3a655a8e46c8cb0b2de9ca3ea089e4af249a79119de5e47a9b2c9002eb40e828c8af0aec50b590120b04e57"], 0x7c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000080)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x28, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x90) 2.843741602s ago: executing program 4: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x0, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000880)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 2.645881604s ago: executing program 4: socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_FILL_RING(r0, 0x11b, 0x5, &(0x7f0000000080)=0x4000, 0x4) socket(0xf, 0x4, 0x5) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x0, 0x0, @remote, 0x34}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x14, &(0x7f00000000c0), &(0x7f00000003c0)=0x8) mmap$xdp(&(0x7f0000ffb000/0x2000)=nil, 0x2000, 0x2000007, 0x11, r0, 0x100000000) mmap$xdp(&(0x7f0000ff8000/0x4000)=nil, 0x4000, 0x0, 0x11, r0, 0x100000000) socket$inet6_tcp(0xa, 0x1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00'}, 0x10) r2 = socket$nl_rdma(0x10, 0x3, 0x14) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r4, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r3, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f00000002c0)=@pppol2tpv3={0x18, 0x1, {0x3, r6, {0x2, 0x0, @multicast2}, 0x3}}, 0x2e) r7 = socket$pppl2tp(0x18, 0x1, 0x1) r8 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r7, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r8, {0x2, 0x0, @multicast2}, 0x2}}, 0x2e) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000018c0)={0x0, 0x0, 0x0}, 0x0) ioctl$sock_SIOCSIFVLAN_GET_VLAN_EGRESS_PRIORITY_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000080)) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r2, &(0x7f0000000280)={&(0x7f0000000000), 0xc, &(0x7f0000000240)={&(0x7f0000000380)={0x128, 0x1403, 0x13, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'pimreg\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'netdevsim0\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'vlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'gre0\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'veth1_to_bridge\x00'}}]}, 0x128}}, 0x0) 1.76919307s ago: executing program 1: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000022d900060000000077f2ab26850000002300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, 0x2, r1}, 0x90) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x4, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x38, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x75adc41b, 0x1a}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x89}, 0x24000000) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffff9, 0x1}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_SSID={0x13, 0x34, @random="6a46d3402049cfdf23cbb4e13d40bb"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="ec0f4aef314d"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bond0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000cc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000d00)=0x14) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, 0x0, 0x40004) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000840)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c65d6d5", @ANYRES16=r3, @ANYBLOB="000426bd7000fbdbdf257200000008000300", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x6) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000880)={0xcc, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x39}}}}, [@NL80211_ATTR_IE={0xa1, 0x2a, [@supported_rates, @mic={0x8c, 0x18, {0x0, "16f0453bb598", @long="567995d02a062a5f301f7e8992318e92"}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @random={0x8, 0x76, "494fe4690213f38abb0ca46483d360d297387521940def8344d261e47a58b04da60b857022afc7cfe8f51b4201cbb690834e58b07e3fe25656144accd5600d4ba385fe65763f65884cdba4ad6a00c55c2a81026c6fec677e2d8f1318f9973d57a6637ec978f740bd3883247fe667b561184cd98dd0a8"}, @challenge={0x10, 0x1, 0x29}, @erp={0x2a, 0x1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8c1}, 0x400a9) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000a00)={0x70, 0x0, 0x0, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x17}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}]}, 0x70}, 0x1, 0x0, 0x0, 0x64050000}, 0x40001) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040), 0xc, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) 1.680182727s ago: executing program 4: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) writev(r2, &(0x7f0000000900)=[{&(0x7f0000000640)}], 0x1) 1.654529492s ago: executing program 2: sendmmsg$sock(0xffffffffffffffff, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) setsockopt$XDP_RX_RING(0xffffffffffffffff, 0x11b, 0x2, 0x0, 0x0) r0 = socket$inet6(0xa, 0x3, 0x8) getsockopt$IP_VS_SO_GET_INFO(r0, 0xff000000, 0x481, 0x0, 0x0) 1.535623314s ago: executing program 2: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000640)='\"', 0x1}], 0x1}, 0x0) write(r0, &(0x7f0000002f80), 0x0) 1.388832545s ago: executing program 2: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x0, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000880)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.319773555s ago: executing program 1: r0 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$IP_VS_SO_GET_DAEMON(r0, 0x88, 0xb, 0x0, &(0x7f0000000080)) 1.295131941s ago: executing program 0: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002ac0)=@delchain={0x11c, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x88, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x6c, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}]}}]}, 0x11c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000a80)={'gretap0\x00', 0x0, 0x80, 0x1, 0x8b, 0x7f, {{0x4d, 0x4, 0x3, 0x5, 0x134, 0x66, 0x0, 0x2, 0x2f, 0x0, @multicast2, @private=0xa010100, {[@cipso={0x86, 0x59, 0x0, [{0x7, 0x3, 'u'}, {0x0, 0x12, "a902036a4e8b6da83366904a92c5b68d"}, {0x2, 0xd, "da47def6e68ca1a92a4be5"}, {0x2, 0xc, "027cf6a585bd22c3fca3"}, {0x6, 0xa, "639a058dbcac78bf"}, {0x2, 0x12, "30211c710a23dffa9827733857bc85b9"}, {0x0, 0x9, "44e24450741010"}]}, @ssrr={0x89, 0x13, 0x0, [@loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback]}, @lsrr={0x83, 0xb, 0xe, [@dev={0xac, 0x14, 0x14, 0x3b}, @local]}, @cipso={0x86, 0x31, 0xfffffffffffffffd, [{0x0, 0x11, "9ed2dad0a46416cb2c23f720507a5a"}, {0x5, 0x9, "de59372f049cc4"}, {0x0, 0x11, "67c5ec33214d76f629b5588d7d124c"}]}, @timestamp_prespec={0x44, 0x4c, 0x92, 0x3, 0xe, [{@empty, 0x4}, {@multicast2}, {@broadcast, 0x3}, {@local, 0x1}, {@rand_addr=0x64010102, 0x1}, {@rand_addr=0x64010100}, {@broadcast, 0x80}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80}, {@rand_addr=0x64010100, 0x2}]}, @timestamp={0x44, 0x2c, 0x89, 0x0, 0x0, [0x0, 0x9, 0x0, 0x1, 0x9, 0x7ff, 0x0, 0xfffffffe, 0x0, 0x8000]}]}}}}}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2ed0300000000000000af99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14008c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000006da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3ab60fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399eb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4978ea8e4aa37014191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88cf573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867857ed13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d9a0e06da200481cde8bf475bc3e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfecc) sendfile(r4, r2, 0x0, 0x10000) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001b80)=@filter={'filter\x00', 0xe, 0x4, 0x388, 0xffffffff, 0x0, 0x1c8, 0x2f0, 0xffffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@ipv6={@local, @private2, [], [], 'team_slave_0\x00', 'vlan0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) socket$inet6(0xa, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'netpci0\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0), 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x4}, 0x24) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b7040000000000008500000033000000850000000800000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 1.213491652s ago: executing program 2: r0 = socket$igmp(0x2, 0x3, 0x2) (async, rerun: 64) r1 = socket$kcm(0x10, 0x2, 0x0) (rerun: 64) sendmsg$kcm(r1, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006007c09e8fe55a10a0015000500142603600e1208000f0000000401a80016002000014002000000036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a02e9000000fcff000000010000000900010073797a300000000038309d230206759326000000"], 0x80}}, 0x0) r3 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r3, 0x10d, 0x0, &(0x7f0000000200), &(0x7f0000000280)=0x4) (async, rerun: 32) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x6, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000002000000000000000000000850000003600000085000000a000000095"], &(0x7f00000013c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (rerun: 32) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001280)={r4, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x7a) (async) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000600)={'macvlan0\x00'}) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000900)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'lo\x00'}) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f00000005c0), &(0x7f0000000640)=0xc) r6 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) (async) r8 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r8, &(0x7f0000000540)={0x0, 0x88a8ffff, &(0x7f00000000c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="440000001100a7cc5a8100ae541d002007000000", @ANYRES32=r7, @ANYBLOB="00000a00100000001c001a80080002802d00ff0408000200f47b0c0d"], 0x44}}, 0x0) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040)='syz_tun\x00', 0x10) (async, rerun: 64) setsockopt$inet6_tcp_TLS_TX(r8, 0x6, 0x1, &(0x7f0000000100)=@gcm_128={{0x303}, "f11cbfe887af8289", "9da1e35583122ce6de52d7c9d296e22a", "f35f2593", "cd5c6e1a237b4d61"}, 0x28) (async, rerun: 64) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @empty, @broadcast}, @timestamp_reply={0x12}}}}}, 0x0) 1.181059065s ago: executing program 1: bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610408000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195}, 0x48) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='memory.events\x00', 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x3, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000feff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a05, 0x1700) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x6, 0x101, 0x82}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x5}, 0x48) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000300)={0x6, 0x4, 0x4001}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.current\x00', 0x275a, 0x0) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00', r0}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, &(0x7f0000000200)=ANY=[@ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x67000000, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x400}, 0x90) ioctl$TUNSETOFFLOAD(r2, 0x4010744d, 0x20000000) 765.705268ms ago: executing program 0: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x19, 0x4, 0x4, 0x4, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xf, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYRES8=r0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x30, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r2}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000c00)={0x1, 0xb, &(0x7f0000000740)=ANY=[@ANYBLOB="18000000000000140000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$ENABLE_STATS(0x20, 0x0, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r3, 0x84, 0x1e, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_procs(r4, &(0x7f0000000040)='cgroup.procs\x00', 0x2, 0x0) socket$isdn(0x22, 0x3, 0x21) write$cgroup_pid(r5, &(0x7f0000000140), 0x12) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004bc311ec8500000075000000a7"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='percpu_alloc_percpu\x00', r6}, 0x10) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000b40)=[{{&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000001700)}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000001880)='j', 0x1}], 0x1}}, {{&(0x7f0000000300)={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000640)="ba97b5ed187e655305c71c680c953f18f030038989941a8614ca93eb59e100bbe128c1087d39612060d728ecdbb75a18731b0a9f410a25d2490fd409e280e1e8d8cd4984616297027e868ef945e3a4849a885f8afc227979c45e86b44c2f5d97d4a5fc38515a24caec0660fb893aef69b2c8ac1903b2a8bad7e068cd040f728b49d80bc30411d605a924c30316739038145b9c09f736c6a65f5fd88c5220b9bea7d27d6f6dfe1c0232b1e46700679d30149b1039a540809b624521010897699c7b0d34a1ffce04019702f35908a160339a5749cdc2d6e36567eac4bd9b3e4056486633d150a666053de2f0123b91be54ade5d3fa67191207a1dd471ea1b9d7", 0xff}, {&(0x7f00000007c0)="881355d5691ea8bfbdc0ac9adf3e1b0baefd7aa7e016d266b10c278d4cd8afa6f4b259b5d5584f21e7103e2f4e2b22b1bfc06b700e0e7abeb04cf0f69296aa15e1232dfd9d6dbd32e125163780836fa10c9f4afa3e2160", 0x57}, {&(0x7f0000000840)="676f0fe2d7ce31443e412665aede435cc997c32d97e971d8d148b02f1e5d9d81791cc673f860af192ac67175b6d8a0fda8dc617a512387dc6a20d68d5d22c37555c762a083ac207924a39e9462005b32d56c5ae8d8f469ab11374c4e74f84d6c509cb9cde14743794e1968148024ea380d451c4b418617660ce7d64be7a92ee02a6e3886160d9c22a271d05d85e31f159f9074a7e1cb20ff8b3ac227d67aa19c7da041e6213600b181660902c70544f330f8393606dbbdb9193b7d0a14753233db397dc6e17d3e5fad0b41eb1f05b9c1e76095df203f2958df5ba521db198b2706617d0f87161a774c4c2736947015c8718f5e888459159044565c41ce", 0xfd}, {&(0x7f0000000940)="a159373b1b258e251daf4d43e97defe692a6880012da57bad859c73a2f42ca9d3dc952a45659f2ee1133681107464a7838d3343a8f02fff0244f99bb848be1837e89c53a489aa8e83f01225414ec1c0859fa4bfc28e2361c9c9e1c62f3e8b4a76132042f8dd42cbb0635013854d4f3d6a740056c968d60472cf7d340f4e9f1ef487fd166244d4a1b77e3ec8070aaad4453ba", 0x92}], 0x4, &(0x7f0000000a80)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x29}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @remote, @remote}}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@timestamp_addr={0x44, 0x3c, 0xe8, 0x1, 0xf, [{@loopback, 0x9}, {@rand_addr=0x64010102, 0x16d8}, {@remote, 0x9}, {@multicast2, 0x1}, {@multicast2, 0x7}, {@multicast2, 0x3}, {@remote, 0x4}]}, @rr={0x7, 0xf, 0xa, [@remote, @private=0xa010101, @broadcast]}]}}}], 0xb0}}], 0x3, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x20, &(0x7f0000000080), 0x4) socket$inet_smc(0x2b, 0x1, 0x0) openat$cgroup_type(r4, &(0x7f0000000240), 0x2, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='memory.events\x00', 0x7a05, 0x1700) r7 = socket$can_bcm(0x1d, 0x2, 0x2) setsockopt$SO_TIMESTAMPING(r7, 0x1, 0x41, &(0x7f0000000540)=0x410, 0x4) sendmsg$can_bcm(r7, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="050000000300000000a9de51", @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)={0x28, r9, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xed}]}]}, 0x28}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={0xffffffffffffffff, 0x0, 0xe, 0x0, &(0x7f00000005c0)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 762.032391ms ago: executing program 1: sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000002ac0)=@delchain={0x11c, 0x65, 0x0, 0x0, 0x0, {}, [@TCA_CHAIN={0x8}, @TCA_RATE={0x6}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x40, 0x2, [@TCA_FLOWER_KEY_ARP_OP={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_TCP_DST_MASK={0x6}, @TCA_FLOWER_KEY_ENC_IPV6_SRC_MASK={0x14}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}]}}, @filter_kind_options=@f_route={{0xa}, {0x88, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x6c, 0x5, [@TCA_POLICE_RATE64={0xc}, @TCA_POLICE_TBF={0x3c}, @TCA_POLICE_RESULT={0x8}, @TCA_POLICE_PEAKRATE64={0xc}, @TCA_POLICE_RATE64={0xc}]}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_IIF={0x8}]}}]}, 0x11c}}, 0x0) r0 = socket(0x10, 0x803, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000000)={'ip_vti0\x00', &(0x7f0000000a80)={'gretap0\x00', 0x0, 0x80, 0x1, 0x8b, 0x7f, {{0x38, 0x4, 0x3, 0x5, 0xe0, 0x66, 0x0, 0x2, 0x2f, 0x0, @multicast2, @private=0xa010100, {[@ssrr={0x89, 0x17, 0x0, [@empty, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @loopback, @loopback]}, @lsrr={0x83, 0xb, 0xe, [@dev={0xac, 0x14, 0x14, 0x3b}, @local]}, @cipso={0x86, 0x31, 0xfffffffffffffffd, [{0x0, 0x11, "9ed2dad0a46416cb2c23f720507a5a"}, {0x5, 0x9, "de59372f049cc4"}, {0x0, 0x11, "67c5ec33214d76f629b5588d7d124c"}]}, @timestamp_prespec={0x44, 0x4c, 0x92, 0x3, 0xe, [{@empty, 0x4}, {@multicast2}, {@broadcast, 0x3}, {@local, 0x1}, {@rand_addr=0x64010102, 0x1}, {@rand_addr=0x64010100}, {@broadcast, 0x80}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x80}, {@rand_addr=0x64010100, 0x2}]}, @timestamp={0x44, 0x2c, 0x89, 0x0, 0x0, [0x0, 0x9, 0x0, 0x1, 0x9, 0x7ff, 0x0, 0xfffffffe, 0x0, 0x8000]}]}}}}}) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000000e40)=ANY=[@ANYBLOB="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"/3576], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r3}, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100), 0xfecc) sendfile(r4, r2, 0x0, 0x10000) ioctl$FS_IOC_SETFLAGS(r2, 0x40086602, &(0x7f0000000000)) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000001b80)=@filter={'filter\x00', 0xe, 0x4, 0x388, 0xffffffff, 0x0, 0x1c8, 0x2f0, 0xffffffff, 0xffffffff, 0x3e8, 0x3e8, 0x3e8, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz0\x00'}}}, {{@ipv6={@local, @private2, [], [], 'team_slave_0\x00', 'vlan0\x00'}, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28}}, {{@uncond, 0x0, 0xd0, 0xf8, 0x0, {}, [@common=@eui64={{0x28}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffb}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3e8) socket$inet6(0xa, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000400)={'netpci0\x00'}) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f00000006c0), 0x4) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x4}, 0x24) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000540)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000001000000b7040000000000008500000033000000850000000800000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendto(r0, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x334}, {&(0x7f00000007c0)=""/154, 0x8}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) 704.084501ms ago: executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$kcm(r1, &(0x7f0000001d40)={0x0, 0x0, &(0x7f0000001cc0)=[{&(0x7f0000001bc0)="a99ca450ae1ab92b21", 0x9}], 0x1}, 0x8010) socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) recvmsg(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000180)=""/212, 0xd4}], 0x1}, 0x0) sendto(0xffffffffffffffff, &(0x7f0000000600)="b0af98072ca1fde274af41eb15e06a20724adf582424aaa58cfab387d5b0475fe879251107f50990773428c13dea2ff4bc0707bee9083b40bfe73c14a12ea23680515731ff13cefbb579afc50757258c5ef52a5913108ee264ef360a8e99169f49ec3b74c9826b2dd18a0389725a17a6eab33797b85c334d3b4479aeda1d19", 0x52, 0x4040151, &(0x7f0000000340)=@ieee802154={0x24, @short={0x2, 0xffff, 0xaaa3}}, 0x80) r2 = socket(0x1, 0x3, 0x4005) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r5 = socket$inet(0x2, 0x4000000000000001, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$packet(0x11, 0x3, 0x300) socket$packet(0x11, 0x3, 0x300) r6 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r7}, 0x10) pselect6(0x40, &(0x7f00000000c0), 0x0, &(0x7f0000000140)={0x1ff}, 0x0, 0x0) close(r5) ioctl$NS_GET_OWNER_UID(0xffffffffffffffff, 0xb704, &(0x7f0000000440)) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0x0, 0x0, 0x0, {0x60, 0x0, 0x0, r4, {}, {0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x0, "00034000"}}}]}, 0x48}}, 0x0) sendmmsg$alg(r1, &(0x7f0000000400)=[{0x0, 0x0, 0x0, 0x0, &(0x7f0000000140)}], 0x1, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup, 0xffffffffffffffff, 0x1, 0x0, 0x4000}, 0x20) 675.715342ms ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000180)=@bpf_lsm={0xd, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="760a000000000061110c0000000000180000000000000000000000000000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xc, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x5}, 0x90) mmap(&(0x7f0000ffa000/0x3000)=nil, 0x3000, 0x0, 0x80010, r0, 0x78738000) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r2, 0x0, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={0x0}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={0x0, 0x20}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000780)=@newchain={0x90c, 0x64, 0x100, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x2, 0x99afda4802d58a75}, {0xd}, {0xc, 0xb}}, [@TCA_CHAIN={0x8, 0xb, 0x4}, @TCA_RATE={0x6, 0x5, {0x4, 0x33}}, @filter_kind_options=@f_cgroup={{0xb}, {0x8cc, 0x2, [@TCA_CGROUP_POLICE={0x85c, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x40, 0x81, 0x9, 0x1, 0x8, 0xff, 0x10000, 0x7, 0x8, 0xffff401c, 0xfffffff8, 0x2, 0x100, 0x100, 0xffffff01, 0x1ff, 0x4, 0x7f, 0x3, 0xffff825a, 0x7fffffff, 0x6, 0x9, 0x6, 0x2, 0x8, 0x0, 0x5f4, 0x1000, 0x21, 0x6, 0x2, 0x65a, 0x100, 0x7, 0x8, 0x71, 0x81, 0x3f, 0x8, 0x5, 0xc7, 0xfffffffd, 0x7, 0x7, 0x3ff, 0x6, 0x0, 0xfffffffd, 0x4d63d03c, 0x10001, 0x7, 0x9, 0x1, 0x3ff, 0xffffa1e7, 0x8, 0x7, 0x3, 0x1, 0x1, 0x4, 0x2ce732d8, 0x2, 0x20, 0x0, 0xffffffff, 0x20, 0x80, 0x6, 0x7, 0x90fc, 0x0, 0x10, 0x8000, 0x1, 0x3, 0x200, 0x10001, 0x8df, 0x10000, 0x8, 0x1, 0x8, 0x2, 0x101, 0x10000, 0x0, 0x2, 0x0, 0x38, 0x1f, 0x400, 0x4, 0x279908d9, 0x58, 0x7, 0x6, 0xfffffff9, 0x4, 0x9, 0x7, 0x3f, 0x9, 0x2, 0x35, 0xfffffff9, 0x5, 0x487, 0x4, 0x6, 0x5, 0x80, 0x7, 0x86, 0x1000, 0x5, 0x9, 0x2, 0x800, 0x4978, 0x9, 0x4, 0x1f, 0x7, 0x2, 0x6, 0x80000001, 0x8, 0x4, 0xca5, 0x0, 0x1000, 0x70, 0x3, 0x3, 0x7, 0x1000, 0x40, 0xc0, 0xffffffff, 0x2, 0xbb, 0x9, 0x200, 0x0, 0xc070, 0x8, 0x10000, 0x10001, 0x20, 0x1, 0x4, 0x7, 0x80000000, 0x10001, 0x5, 0x3ff, 0x2, 0x0, 0x101, 0x7fffffff, 0x0, 0x5, 0x0, 0x8, 0x20, 0x6, 0x3, 0x3, 0x3, 0xffffff42, 0x80000000, 0x8, 0x0, 0xffff, 0x23, 0x1, 0x4, 0x1, 0x2, 0xf7, 0x0, 0x0, 0x5, 0x80000000, 0x7, 0x2, 0x3ff, 0x401, 0xaf70, 0x2, 0x3, 0xff, 0x4, 0x6, 0x1, 0x3, 0x2, 0x7fff, 0x10001, 0x200, 0xbe0d, 0xfffffb32, 0x7fffffff, 0x8, 0x3, 0x3, 0xfffffff8, 0x5, 0x80, 0x1ffe, 0x5, 0x1, 0x6, 0x1f, 0x0, 0x3f, 0x6, 0x6, 0x3ff00, 0x0, 0x2f, 0x95, 0x5, 0x2, 0x6, 0x2, 0x7fffffff, 0xfffffff8, 0x5b19690a, 0x1ff, 0x8, 0x2c, 0xda, 0x3, 0x81, 0xe, 0x8, 0x9, 0x7, 0x2, 0x401, 0x1f, 0x8000, 0x4, 0xfffffffe, 0x20, 0x4e6f7f0b, 0x1, 0x6, 0x7, 0x9, 0x4, 0x3, 0xfffff818]}, @TCA_POLICE_RATE={0x404, 0x2, [0x1, 0x9, 0x8, 0x1000, 0x1, 0x400, 0x8, 0x8001, 0xfffffffd, 0x7c7, 0x1, 0xff, 0x6, 0x1, 0x8, 0x2, 0x7ff, 0x9, 0x7fff, 0x4a, 0x2, 0x1, 0x200, 0x5, 0x7fff, 0x5, 0x40, 0x2, 0x53, 0x9, 0x1, 0x5, 0x8, 0x4, 0xff, 0x4, 0x6, 0x3, 0x4, 0xff, 0x7, 0x3, 0x64, 0xfffffbe5, 0x4, 0xfff, 0x7fff, 0x4, 0xa1ed, 0xfffffffd, 0x29745bab, 0xfffeffff, 0xffff, 0xffffffe1, 0xd8, 0xfffffffb, 0xfffffff7, 0x3ff, 0x7, 0xffffffff, 0x8, 0xf3, 0x7, 0x1, 0x1, 0x8, 0x58b, 0x0, 0x8001, 0x8001, 0x9, 0xd1bb, 0x10001, 0xba17, 0x7, 0x4e5d, 0x1000, 0xa1c, 0x9, 0x10000, 0x7fff, 0x8f, 0x81, 0x100, 0x0, 0x1, 0x80000000, 0x3, 0x3, 0xfffffff7, 0x933, 0x400, 0x81, 0xfffffff9, 0x1000, 0x12c6, 0x8, 0x2, 0x6, 0x8, 0x20, 0xff, 0x6, 0xfffffffc, 0x1, 0x3, 0x7fff, 0x0, 0x1ff, 0x8000, 0x0, 0x4, 0x8, 0x5eb1209f, 0x9, 0x2, 0x1f, 0x6, 0x1f, 0xfffffffe, 0x7, 0xfffffffb, 0x578, 0x9, 0x9, 0x10000, 0x9, 0x0, 0x0, 0xfffffffc, 0x4, 0x5, 0x4, 0x1ff, 0x7, 0x60, 0x9, 0x1f, 0x101, 0x867, 0x8, 0x2, 0x3, 0x10000, 0xb46, 0x2, 0xfffffff8, 0x6, 0x6, 0x5, 0x24fd, 0xfffffff8, 0x8a4, 0x66d6ea92, 0x2, 0x5, 0x825, 0x3, 0x7, 0x748, 0x62e2, 0x2, 0x9, 0x5, 0x7, 0x1f, 0x2ebd, 0x1, 0x2a, 0x9, 0x1, 0x5, 0x1, 0x8, 0x3, 0x4, 0x3, 0x8000, 0x800, 0x0, 0x7af, 0xfffffffb, 0x8c, 0x863, 0x4, 0x7, 0x40, 0x1, 0x7, 0x3, 0xfffffff9, 0x28e7, 0x5, 0x7f, 0x80000001, 0x0, 0xfffffffb, 0x7f, 0xe9f2, 0x10000, 0x0, 0x3, 0x0, 0x2, 0x10001, 0x1, 0x1, 0x3, 0x800, 0x40, 0x8, 0x401, 0x6, 0x3, 0x3, 0xfffffffa, 0x1, 0xe477, 0x0, 0x0, 0x8001, 0x6, 0x1, 0x3f, 0x800, 0x3, 0x8, 0x9, 0xe6ba, 0x2, 0x1, 0x7, 0xfa1, 0x1e, 0x8, 0x10001, 0xfff, 0x3b, 0x6, 0x8, 0x8, 0x800, 0x1, 0x6, 0x100, 0x1ff, 0x4, 0x4, 0x20, 0x7, 0x7, 0x0, 0x7fffffff, 0x400, 0x401, 0x9]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x6, 0x0, 0x1, 0x8817, 0x38f, {0x4, 0x0, 0x3f, 0x4, 0x3, 0x6}, {0x20, 0x0, 0x5, 0x8001, 0x2, 0x7fd3}, 0x0, 0x1f}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1000}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x8}]}, @TCA_CGROUP_EMATCHES={0x50, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x401}}, @TCA_EMATCH_TREE_LIST={0x34, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x3, 0x0, 0x0, {{0x6, 0x9, 0x2}, [@TCA_EM_IPT_NFPROTO={0x5, 0x4, 0x2}]}}, @TCF_EM_NBYTE={0x1c, 0x3, 0x0, 0x0, {{0x6, 0x2, 0x8}, {0x1f, 0xa, 0x1, "982c0c034bb1fc09728b"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x5}}]}, @TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x3, 0x0, 0x0, {{0x80, 0x7, 0x1}, {{0x1, 0x1}, {0x1, 0x0, 0x1}}}}]}]}]}}]}, 0x90c}}, 0x0) r4 = epoll_create1(0x0) r5 = socket$packet(0x11, 0x2, 0x300) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, 0x0) setsockopt$packet_int(r5, 0x107, 0x0, 0x0, 0x0) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000100), 0xffffffffffffffff) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.empty_time\x00', 0x275a, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_SET_LBT_MODE(r8, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYRES16=r6, @ANYRES16=r6, @ANYBLOB="000126bd7000fedbdf25120000000c00060000000000000000000c00060003000000000000000c00060002000000000000000c00060001"], 0x44}, 0x1, 0x0, 0x0, 0x4000}, 0x0) ioctl$NS_GET_NSTYPE(r7, 0xb703, 0x0) r9 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000003c0)={{r7}, &(0x7f0000000140), &(0x7f0000000340)=r1}, 0x20) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00', 0x0}) r11 = socket(0x10, 0x2, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(r11, 0x84, 0x1, &(0x7f0000000480)={0x0, 0x2, 0x400, 0xe4b8, 0x5, 0x85}, 0x14) sendmsg$nl_route(r11, &(0x7f0000000540)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001300a7cc5a8100ae541d002007000000", @ANYRES32=r10, @ANYBLOB="00000a00100000801c001a80080002802d03fa0408000200f47b0c0d"], 0x44}}, 0x0) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000027c0)=ANY=[@ANYBLOB="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"], 0x2498}}, 0x0) 580.750834ms ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) getsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000040), &(0x7f00000000c0)=0x8) sendmsg$nl_route(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=ANY=[], 0x40}, 0x1, 0x0, 0x0, 0x404c050}, 0x0) 434.227691ms ago: executing program 0: r0 = socket$kcm(0x29, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f00000019c0)={0x0, 0x0, &(0x7f00000017c0)=[{&(0x7f0000000640)='\"', 0x1}], 0x1}, 0x0) write(r0, &(0x7f0000002f80)="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", 0x800) 394.9653ms ago: executing program 3: r0 = socket(0x10, 0x803, 0x0) sendto(r0, &(0x7f00000000c0), 0x0, 0x0, 0x0, 0x0) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000080), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000880)={0x18, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000022d900060000000077f2ab26850000002300000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3c, '\x00', 0x0, 0x2, r1}, 0x90) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x1c, 0x0, 0x0, 0x70bd2b, 0x4, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_DEL_MPATH(0xffffffffffffffff, &(0x7f0000000c80)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c40)={&(0x7f0000000c00)={0x38, 0x0, 0x4, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x75adc41b, 0x1a}}}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x38}, 0x1, 0x0, 0x0, 0x89}, 0x24000000) sendmsg$NL80211_CMD_DEAUTHENTICATE(r2, &(0x7f0000000b80)={&(0x7f0000000a80)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x4c, 0x0, 0x0, 0x70bd2b, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0xfffffff9, 0x1}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_SSID={0x13, 0x34, @random="6a46d3402049cfdf23cbb4e13d40bb"}, @NL80211_ATTR_MAC={0xa, 0x6, @random="ec0f4aef314d"}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40000}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000005c0), 0xffffffffffffffff) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000040)={'bond0\x00'}) getpeername$packet(0xffffffffffffffff, &(0x7f0000000cc0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000d00)=0x14) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(0xffffffffffffffff, 0x0, 0x40004) sendmsg$NL80211_CMD_ABORT_SCAN(r2, &(0x7f0000000840)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000540)={&(0x7f0000000500)=ANY=[@ANYBLOB="1c65d6d5", @ANYRES16=r3, @ANYBLOB="000426bd7000fbdbdf257200000008000300", @ANYRES32, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x6) sendmsg$NL80211_CMD_UPDATE_CONNECT_PARAMS(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000300)={&(0x7f0000000880)={0xcc, 0x0, 0x200, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x1, 0x39}}}}, [@NL80211_ATTR_IE={0xa1, 0x2a, [@supported_rates, @mic={0x8c, 0x18, {0x0, "16f0453bb598", @long="567995d02a062a5f301f7e8992318e92"}}, @sec_chan_ofs={0x3e, 0x1, 0x1}, @random={0x8, 0x76, "494fe4690213f38abb0ca46483d360d297387521940def8344d261e47a58b04da60b857022afc7cfe8f51b4201cbb690834e58b07e3fe25656144accd5600d4ba385fe65763f65884cdba4ad6a00c55c2a81026c6fec677e2d8f1318f9973d57a6637ec978f740bd3883247fe667b561184cd98dd0a8"}, @challenge={0x10, 0x1, 0x29}, @erp={0x2a, 0x1}]}]}, 0xcc}, 0x1, 0x0, 0x0, 0x8c1}, 0x400a9) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r0, &(0x7f00000005c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000480)={&(0x7f0000000a00)={0x70, 0x0, 0x0, 0x70bd29, 0x25dfdbfc, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x11}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x72}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x7e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x17}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x24}]}, 0x70}, 0x1, 0x0, 0x0, 0x64050000}, 0x40001) bind$l2tp6(0xffffffffffffffff, &(0x7f0000000080)={0xa, 0x0, 0x0, @empty}, 0x20) r5 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) write$binfmt_script(r5, &(0x7f0000000100)={'#! ', './file0'}, 0xb) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x10012, r5, 0x0) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000580)={&(0x7f0000000040), 0xc, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) recvmmsg(r0, 0x0, 0x0, 0x0, &(0x7f0000003700)={0x77359400}) 243.539629ms ago: executing program 0: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000440)) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) bind$inet(0xffffffffffffffff, &(0x7f0000000080)={0x2, 0x0, @broadcast}, 0x10) r2 = socket$kcm(0x2b, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c) setsockopt$sock_attach_bpf(r2, 0x1, 0xd, &(0x7f0000000080), 0x24) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='\x00\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000200)="350400003f000511d25a80648c63940d0324fc60040035400c0002000200002037153e370c040180061010004500", 0x2e}, {&(0x7f0000000a40)="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", 0x407}], 0x2}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000480)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2}, 0x48) r3 = socket$inet6(0xa, 0x3, 0x8000000003c) ioctl$sock_SIOCGPGRP(r3, 0x8904, &(0x7f0000000240)) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_ro(r4, &(0x7f00000001c0)='cgroup.kill\x00', 0x275a, 0x0) socket$can_bcm(0x1d, 0x2, 0x2) unshare(0x20000400) unshare(0x100) sendmsg(r3, &(0x7f00000000c0)={0x0, 0x952b, &(0x7f0000000100)=[{&(0x7f0000000000)="2b10", 0xffbd}], 0x1, 0x0, 0x0, 0x2c}, 0x4) 161.725684ms ago: executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0xc, 0xc, &(0x7f0000000880)=@framed={{}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r0}, {}, {0x3, 0x3, 0x3, 0xa, 0x5}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x1e}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 105.884478ms ago: executing program 2: r0 = syz_init_net_socket$802154_raw(0x24, 0x4, 0x0) sendmsg$NFT_MSG_GETCHAIN(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}}, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @remote}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r1, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) sendmsg$kcm(r1, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0xfd356b74, &(0x7f0000000600)=ANY=[@ANYRESOCT=r0, @ANYRES16=r0], 0xfffffffffffffedc}, 0x890) openat$cgroup_procs(0xffffffffffffffff, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000180)={'syztnl0\x00', &(0x7f00000003c0)={'syztnl0\x00', 0x0, 0x20, 0x7c0, 0xfffffffc, 0x7fffffff, {{0x1e, 0x4, 0x0, 0x0, 0x78, 0x64, 0x0, 0x7, 0x2f, 0x0, @multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, {[@end, @end, @timestamp_addr={0x44, 0x34, 0x65, 0x1, 0xd, [{@empty, 0x2}, {@empty, 0x401e398a}, {@private=0xa010101, 0x1}, {@broadcast, 0x101}, {@broadcast, 0xffffffff}, {@empty}]}, @ssrr={0x89, 0x13, 0xab, [@private=0xa010102, @private=0xa010100, @multicast1, @multicast1]}, @ra={0x94, 0x4}, @timestamp={0x44, 0xc, 0xf1, 0x0, 0x5, [0x986, 0x6]}, @ssrr={0x89, 0xb, 0x9a, [@initdev={0xac, 0x1e, 0x0, 0x0}, @local]}]}}}}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000500)={'ip6_vti0\x00', &(0x7f0000000480)={'ip6tnl0\x00', r3, 0x4, 0x97, 0x7f, 0x1, 0x52, @private2, @mcast2, 0x8000, 0x40, 0x9, 0x7fffffff}}) socket$inet_smc(0x2b, 0x1, 0x0) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r4, &(0x7f00000002c0)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, 0x1, @null}, 0x1c) ioctl$SIOCRSGCAUSE(r4, 0x8917, 0x0) r5 = socket(0x28, 0x5, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000f00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a70000000060a010400000000000000000200000044000480400001800e000100627974656f726465720000002c000280080001400d00001608000240000000000800044000000002080003400000000008000540000000080900010073797a30000000000900020073797a32"], 0x98}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x40, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0x39, 0x2, 0x0, 0x1, {0x8}}}}, @IFLA_NUM_TX_QUEUES={0x8}]}, 0x40}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct={0x0, 0x0, 0x0, 0x10, 0x1}]}}, &(0x7f0000000080)=""/227, 0x26, 0xe3, 0x1}, 0x20) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) r8 = bpf$ITER_CREATE(0x21, &(0x7f0000000200), 0x8) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r8, 0x0, 0x0}, 0x10) write$cgroup_subtree(r8, &(0x7f0000000540)={[{0x2b, 'net_prio'}, {0x2d, 'net'}, {0x2d, 'cpuset'}, {0x2b, 'cpuset'}, {0x2d, 'net'}, {0x2b, 'freezer'}, {0x2b, 'freezer'}, {0x2b, 'net_prio'}, {0x2b, 'rdma'}]}, 0x46) listen(0xffffffffffffffff, 0x0) connect$vsock_stream(r5, &(0x7f0000000080), 0x10) sendmmsg(r5, &(0x7f0000000100)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000000)="1b", 0x40000}], 0x1}}], 0x1, 0x0) accept4$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$FS_IOC_SETFLAGS(r7, 0x40086602, &(0x7f0000000300)) 96.079341ms ago: executing program 1: r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000080850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000940)={0x0, 0x47010005, &(0x7f00000008c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000020a010800000000000000000000000020000000000a010800000000000000000a0000000900010073797a31000000003c000000000a030000000000000000000a00000008000240000000010900010073797a31"], 0x84}}, 0x0) 67.219266ms ago: executing program 0: r0 = socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x30004001) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000000), 0x4) setsockopt$IP_VS_SO_SET_EDIT(r0, 0x0, 0x483, &(0x7f0000000900)={0x0, @empty, 0x4e22, 0x1, 'dh\x00', 0x1a, 0x10001, 0x6c}, 0x2c) recvmsg(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x61) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000005c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16, @ANYBLOB="b159b9f209a1d7db400096b8e33408000300", @ANYRES32=r3, @ANYBLOB="1c005a80"], 0x38}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) ioctl$FS_IOC_SETVERSION(0xffffffffffffffff, 0x40087602, &(0x7f00000009c0)=0x92e1) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000a00)={0xffffffffffffffff}) ppoll(&(0x7f0000000a80)=[{r1, 0x80}, {0xffffffffffffffff, 0xa040}, {r1}, {0xffffffffffffffff, 0x200}, {r0, 0x100}, {0xffffffffffffffff, 0x120b}, {r2, 0x80}, {r4, 0xe}, {0xffffffffffffffff, 0x8010}], 0x9, &(0x7f0000000b00), &(0x7f0000000b40)={[0x7]}, 0x8) socketpair(0x18, 0x4, 0x6, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_inet_tcp_SIOCATMARK(r5, 0x8905, &(0x7f0000000940)) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) r8 = accept$alg(r7, 0x0, 0x0) write$binfmt_script(r8, &(0x7f0000000000)={'#! ', './file0', [], 0xa, "68130654a4"}, 0x10) getsockopt$inet6_tcp_int(r6, 0x6, 0x2, &(0x7f0000000440), &(0x7f0000000480)=0x4) sendmsg(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000080)="adcd", 0x2}, {&(0x7f0000000200)="c055f3144eb8f53dafccb6fe58b57fb310bc400127ba1ec57bd920fcb68dbbe704e099858113b4d57ee56857d1fac75e6b6a581c22a49bcbebb241587bbb79906cf54a025601c26a7c7fe6bf6e3768faeb084457fd2eca8d925d35b2c9d95f3297e15cd8170acfbeecbb9c8639eee66b9f55ce8a3e257b31168b23", 0x7b}, {&(0x7f0000000100)="42e1ee281786541e06087b6d1abd90a2bab644fae760068bd855b7d4d260af5ee4c1833fe8aa2246c7aa2d9a259745de", 0x30}, {&(0x7f0000000280)="02a607e2775522129f84ce3480148e52d1723309069c81012ab9d6662cf94beda71d6cd6744ecc53a075a2edf99fe1b660efa994cddf94d52de774dd9ec8d1b55f023fdbf49df77b266641afcc9ecdc657643f66e0bd6dd93429e1c8b0175b5f837b259924f153b086018845ea8bfc60117c4120bc6f3f0151ed69cfca563e9f16c58d6cc9fb956fea5e59fcbcf236e9181853", 0x93}], 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x3f8}, 0x20000810) 33.636976ms ago: executing program 3: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r1, 0x0) r2 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r2, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r3 = accept(r1, 0x0, 0x0) sendmsg$TEAM_CMD_OPTIONS_SET(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000080)=ANY=[], 0xfffffdef}}, 0x0) writev(r2, &(0x7f0000000900)=[{&(0x7f0000000640)="7786b83c25f4449907fe", 0xa}], 0x1) 0s ago: executing program 1: openat$ppp(0xffffffffffffff9c, 0x0, 0x0, 0x0) socket(0x0, 0x3, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) bind$bt_l2cap(r0, &(0x7f0000000000)={0x1f, 0x1, @any, 0x0, 0x1}, 0xe) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x1, @fixed, 0x0, 0x1}, 0xe) syz_emit_ethernet(0x36, &(0x7f00000000c0)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0x7}}}}}}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)="d800000019008111e0020f060d8107040a60090000bed7f95c00e76c8b3ba22ac8c10699e3ffffff14000500fe8081780600e666b8b7b94002000009080016060003000000000009d67f6f9400f7d1d9bbe94fa27100a007a2f7457f01896034277ce06bbace8017cb39b62ee5a7cef40900003f000000643a5e83d42365f003724a237ee4b11602b2a10000000014d6d930dfe1d9c322fe040000005025acca262f3d40fad956674e733670634c1f215ce3bb9ad809d50b694138c9f1ac76efb42a9ecbee5de6ccd44242f4d643f6fd0f26187b51980dd6", 0xd8}], 0x1}, 0x0) kernel console output (not intermixed with test programs): dit(1718088741.542:929): pid=2258 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir1493967523/syzkaller.unhSgb/310/memory.events" dev="sda1" ino=1950 res=1 errno=0 [ 1055.762049][ T2274] ieee802154 phy0 wpan0: encryption failed: -22 [ 1055.992352][ T2283] netlink: 84 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1055.997451][ T2285] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 1056.016129][ T2285] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1056.033993][ T2283] netlink: 'syz-executor.1': attribute type 25 has an invalid length. [ 1056.065531][ T2283] netlink: 'syz-executor.1': attribute type 44 has an invalid length. [ 1056.447833][ T2296] netlink: 9 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1056.482485][ T2296] 0·: renamed from hsr0 (while UP) [ 1056.515245][ T2296] 0·: entered allmulticast mode [ 1056.524759][ T2296] hsr_slave_0: entered allmulticast mode [ 1056.530470][ T2296] hsr_slave_1: entered allmulticast mode [ 1056.547253][ T2296] A link change request failed with some changes committed already. Interface 70· may have been left with an inconsistent configuration, please check. [ 1056.759888][ T29] audit: type=1800 audit(1718088742.852:930): pid=2314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1956 res=0 errno=0 [ 1056.844291][ T29] audit: type=1804 audit(1718088742.892:931): pid=2314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir996507314/syzkaller.CUDWUV/354/memory.events" dev="sda1" ino=1956 res=1 errno=0 [ 1056.974544][ T29] audit: type=1800 audit(1718088742.892:932): pid=2316 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1961 res=0 errno=0 [ 1057.064966][ T29] audit: type=1804 audit(1718088742.902:933): pid=2314 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir996507314/syzkaller.CUDWUV/354/memory.events" dev="sda1" ino=1956 res=1 errno=0 [ 1057.328907][T29554] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.587990][ T4491] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 1057.599159][ T4491] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 1057.608320][ T4491] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 1057.620703][ T4491] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 1057.636735][ T4491] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 1057.653897][T29554] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.654327][ T4491] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 1057.777939][T29554] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1057.882739][T29554] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1058.106519][ T2369] ieee802154 phy0 wpan0: encryption failed: -22 [ 1058.224372][T29554] bridge_slave_1: left allmulticast mode [ 1058.254514][T29554] bridge_slave_1: left promiscuous mode [ 1058.266119][T29554] bridge0: port 2(bridge_slave_1) entered disabled state [ 1058.377483][T29554] bridge_slave_0: left allmulticast mode [ 1058.383218][T29554] bridge_slave_0: left promiscuous mode [ 1058.390512][T29554] bridge0: port 1(bridge_slave_0) entered disabled state [ 1058.441141][ T2374] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1059.784522][T28605] Bluetooth: hci3: command tx timeout [ 1060.122901][T29554] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1060.140227][T29554] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1060.152790][T29554] bond0 (unregistering): Released all slaves [ 1060.193040][ T2379] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1060.234315][ T2402] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1060.606811][ T2423] ieee802154 phy0 wpan0: encryption failed: -22 [ 1060.693557][ T2428] x_tables: duplicate underflow at hook 1 [ 1060.846398][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 1060.846419][ T29] audit: type=1800 audit(1718088746.952:939): pid=2439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1959 res=0 errno=0 [ 1060.898383][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1060.918618][ T29] audit: type=1804 audit(1718088746.982:940): pid=2439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2957202976/syzkaller.vprmAm/317/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 1060.947601][ T29] audit: type=1804 audit(1718088746.992:941): pid=2439 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir2957202976/syzkaller.vprmAm/317/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 1061.062384][ T2443] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1061.281669][ T2344] chnl_net:caif_netlink_parms(): no params data found [ 1061.473010][T29554] hsr_slave_0: left promiscuous mode [ 1061.488093][T29554] hsr_slave_1: left promiscuous mode [ 1061.500167][T29554] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1061.509879][T29554] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1061.520493][T29554] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1061.529145][T29554] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1061.589009][T29554] veth1_macvtap: left promiscuous mode [ 1061.594790][T29554] veth0_macvtap: left promiscuous mode [ 1061.600704][T29554] veth1_vlan: left promiscuous mode [ 1061.606330][T29554] veth0_vlan: left promiscuous mode [ 1061.864672][T28605] Bluetooth: hci3: command tx timeout [ 1062.427817][T29554] team0 (unregistering): Port device team_slave_1 removed [ 1062.481616][T29554] team0 (unregistering): Port device team_slave_0 removed [ 1063.193169][ T2454] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1063.404260][ T29] audit: type=1800 audit(1718088749.502:942): pid=2485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1952 res=0 errno=0 [ 1063.436758][ T29] audit: type=1804 audit(1718088749.542:943): pid=2485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir996507314/syzkaller.CUDWUV/366/memory.events" dev="sda1" ino=1952 res=1 errno=0 [ 1063.464425][ T29] audit: type=1804 audit(1718088749.542:944): pid=2485 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir996507314/syzkaller.CUDWUV/366/memory.events" dev="sda1" ino=1952 res=1 errno=0 [ 1063.516978][ T2344] bridge0: port 1(bridge_slave_0) entered blocking state [ 1063.564496][ T2344] bridge0: port 1(bridge_slave_0) entered disabled state [ 1063.578314][ T2344] bridge_slave_0: entered allmulticast mode [ 1063.610745][ T2344] bridge_slave_0: entered promiscuous mode [ 1063.627659][ T2344] bridge0: port 2(bridge_slave_1) entered blocking state [ 1063.649507][ T2344] bridge0: port 2(bridge_slave_1) entered disabled state [ 1063.671437][ T2344] bridge_slave_1: entered allmulticast mode [ 1063.692425][ T2344] bridge_slave_1: entered promiscuous mode [ 1063.848181][ T2344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1063.903801][ T2344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1063.944517][T28605] Bluetooth: hci3: command tx timeout [ 1064.021743][ T2344] team0: Port device team_slave_0 added [ 1064.034814][ T2344] team0: Port device team_slave_1 added [ 1064.124183][ T2344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1064.151598][ T2344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1064.226472][ T2344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1064.250625][ T2344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1064.262905][ T2344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1064.294450][ T2344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1064.518902][ T2344] hsr_slave_0: entered promiscuous mode [ 1064.541477][ T2344] hsr_slave_1: entered promiscuous mode [ 1064.564491][ T2344] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1064.579719][ T2344] Cannot create hsr debugfs directory [ 1064.630460][ T2525] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 1064.641422][ T2525] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1064.981238][ T2533] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.130561][ T2533] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.279314][ T2533] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.440573][ T2533] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1065.655116][ T2533] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.742166][ T2533] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.757562][ T2554] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1065.784168][ T2554] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1065.786214][ T2533] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1065.851741][ T2533] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1066.024432][T28605] Bluetooth: hci3: command tx timeout [ 1066.179601][ T2344] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 1066.212646][ T2344] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 1066.242180][ T2567] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1066.275785][ T2344] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 1066.312646][ T2344] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 1066.609245][ T2344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1066.684963][ T2344] 8021q: adding VLAN 0 to HW filter on device team0 [ 1066.717599][T21101] bridge0: port 1(bridge_slave_0) entered blocking state [ 1066.724947][T21101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1066.773591][T21099] bridge0: port 2(bridge_slave_1) entered blocking state [ 1066.780931][T21099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1066.894836][ T2586] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1067.032647][ T29] audit: type=1804 audit(1718088753.132:945): pid=2588 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2957202976/syzkaller.vprmAm/330/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0 [ 1067.121272][ T2593] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.210812][ T2593] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.322864][ T2593] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.400545][ T2344] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1067.415567][ T2593] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1067.424769][ T2603] Dead loop on virtual device ipvlan1, fix it urgently! [ 1067.453389][ T2605] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 1067.465549][ T2605] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1067.559634][ T2344] veth0_vlan: entered promiscuous mode [ 1067.582194][ T2593] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.612155][ T2593] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.634985][ T2344] veth1_vlan: entered promiscuous mode [ 1067.662871][ T2593] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.694822][ T2593] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1067.805653][ T2344] veth0_macvtap: entered promiscuous mode [ 1067.826921][ T2344] veth1_macvtap: entered promiscuous mode [ 1067.863613][ T2344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1067.896298][ T2344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1067.920016][ T2344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1067.966110][ T2344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.004223][ T2344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1068.026102][ T2344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.047976][ T2344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1068.068627][ T2344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.095902][ T2344] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1068.120222][ T2344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1068.144585][ T2344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.162923][ T2344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1068.188660][ T2344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.211076][ T2344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1068.241681][ T2344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.274713][ T2344] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1068.308628][ T2603] syz-executor.2 (2603) used greatest stack depth: 8976 bytes left [ 1068.317125][ T2344] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1068.347412][ T2344] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1068.367739][T29552] wlan1: Trigger new scan to find an IBSS to join [ 1068.371830][ T2344] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.406822][ T2344] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.424123][ T2344] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.438376][ T2344] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1068.460843][ T2637] team_slave_0: entered promiscuous mode [ 1068.466625][ T2637] team_slave_1: entered promiscuous mode [ 1068.474371][T29559] wlan1: Trigger new scan to find an IBSS to join [ 1068.496102][ T2637] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 1068.524922][ T2637] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 1068.570069][ T2641] bond0: entered promiscuous mode [ 1068.575364][ T2644] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1068.587969][T29561] wlan1: Trigger new scan to find an IBSS to join [ 1068.601618][ T2641] bond_slave_0: entered promiscuous mode [ 1068.616742][ T2641] bond_slave_1: entered promiscuous mode [ 1068.623249][ T2641] macvlan2: entered promiscuous mode [ 1068.629609][ T2641] team0: entered promiscuous mode [ 1068.668505][ T2646] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1068.681998][T29554] wlan1: Trigger new scan to find an IBSS to join [ 1068.690326][ T2646] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.777902][ T2646] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1068.788393][T29554] wlan1: Trigger new scan to find an IBSS to join [ 1068.795502][ T2646] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.871082][ T2646] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1068.879396][T29561] wlan1: Trigger new scan to find an IBSS to join [ 1068.925147][ T2646] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1068.979751][T29561] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1068.990621][T29551] wlan1: Trigger new scan to find an IBSS to join [ 1069.009470][T29561] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1069.050656][ T2646] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1069.063899][ T2646] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1069.088493][T29561] wlan1: Trigger new scan to find an IBSS to join [ 1069.129776][T29561] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1069.150825][T29561] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1069.202163][T29559] wlan1: Trigger new scan to find an IBSS to join [ 1069.270085][ T2646] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1069.289786][T29558] wlan1: Trigger new scan to find an IBSS to join [ 1069.304525][ T2646] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.353860][ T2646] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1069.376120][ T2646] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.392382][T29561] wlan1: Trigger new scan to find an IBSS to join [ 1069.439798][ T2646] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1069.482722][ T2646] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.494838][T29558] wlan1: Trigger new scan to find an IBSS to join [ 1069.538691][ T2646] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1069.556892][ T2646] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1069.591077][ T2677] delete_channel: no stack [ 1069.600057][T29559] wlan1: Trigger new scan to find an IBSS to join [ 1069.636299][ T2677] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 1069.664836][ T2677] netlink: 199836 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1069.961054][ T2692] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1070.590295][ T2716] netdevsim netdevsim3 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1070.608893][ T2716] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.772547][ T2716] netdevsim netdevsim3 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1070.804525][ T2716] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1070.896400][ T2716] netdevsim netdevsim3 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1070.927533][ T2716] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.043319][ T2716] netdevsim netdevsim3 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1071.064161][ T2716] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1071.467749][ T2759] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 1071.589562][ T29] audit: type=1800 audit(1718088757.692:946): pid=2763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1959 res=0 errno=0 [ 1071.650602][ T29] audit: type=1804 audit(1718088757.732:947): pid=2763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir977794892/syzkaller.lSZtsy/8/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 1071.677505][ T29] audit: type=1804 audit(1718088757.742:948): pid=2763 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir977794892/syzkaller.lSZtsy/8/memory.events" dev="sda1" ino=1959 res=1 errno=0 [ 1071.913703][ T4491] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 1071.926898][ T4491] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 1071.938244][ T4491] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 1071.956411][ T4491] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 1071.971626][ T4491] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 1071.979789][ T4491] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 1072.426511][ T2779] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1072.625094][ T2795] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1072.670073][ T2795] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1072.812536][ T2769] chnl_net:caif_netlink_parms(): no params data found [ 1073.030332][ T2769] bridge0: port 1(bridge_slave_0) entered blocking state [ 1073.042236][ T2769] bridge0: port 1(bridge_slave_0) entered disabled state [ 1073.050053][ T2769] bridge_slave_0: entered allmulticast mode [ 1073.058976][ T2769] bridge_slave_0: entered promiscuous mode [ 1073.075094][ T2769] bridge0: port 2(bridge_slave_1) entered blocking state [ 1073.083543][ T2769] bridge0: port 2(bridge_slave_1) entered disabled state [ 1073.091172][ T2769] bridge_slave_1: entered allmulticast mode [ 1073.099134][ T2769] bridge_slave_1: entered promiscuous mode [ 1073.196232][ T2769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1073.238619][ T2769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1073.304996][T29551] wlan1: Trigger new scan to find an IBSS to join [ 1073.312916][ T2769] team0: Port device team_slave_0 added [ 1073.356120][ T2769] team0: Port device team_slave_1 added [ 1073.439997][ T2769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1073.453413][ T2769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1073.481567][ T2769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1073.512237][T29551] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.538339][ T2769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1073.554770][ T2769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1073.582876][ T2769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1073.646752][T29551] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.768550][T29551] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.790397][ T2769] hsr_slave_0: entered promiscuous mode [ 1073.803708][ T2831] Bluetooth: MGMT ver 1.22 [ 1073.809242][ T2769] hsr_slave_1: entered promiscuous mode [ 1073.826434][ T2769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 1073.834485][ T2769] Cannot create hsr debugfs directory [ 1073.866623][T29551] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1073.932340][ T2831] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 1073.945560][ T2831] pim6reg0: linktype set to 776 [ 1074.025042][T28605] Bluetooth: hci2: command tx timeout [ 1074.253584][T29552] wlan1: Creating new IBSS network, BSSID 92:35:21:4c:41:ee [ 1074.300417][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1074.871720][ T4491] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1074.885003][ T4491] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1074.893568][ T4491] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1074.916385][ T4491] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1074.940245][ T4491] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1074.957673][ T4491] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1075.142270][T29551] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1075.157315][T29551] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1075.168515][T29551] bond0 (unregistering): Released all slaves [ 1075.180465][ T2854] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1075.253063][ T29] audit: type=1800 audit(1718088761.352:949): pid=2863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1947 res=0 errno=0 [ 1075.302038][ T29] audit: type=1804 audit(1718088761.402:950): pid=2863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir977794892/syzkaller.lSZtsy/20/memory.events" dev="sda1" ino=1947 res=1 errno=0 [ 1075.334464][ T29] audit: type=1804 audit(1718088761.402:951): pid=2863 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir977794892/syzkaller.lSZtsy/20/memory.events" dev="sda1" ino=1947 res=1 errno=0 [ 1075.429796][ T2716] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 1075.452210][ T2716] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.485001][T29551] : left promiscuous mode [ 1075.680327][ T2716] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 1075.700606][ T2716] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.735862][ T2716] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 1075.746076][ T2716] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.774999][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1075.822289][ T2716] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 1075.830941][ T2716] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1075.884758][ T2876] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1076.104836][T28605] Bluetooth: hci2: command tx timeout [ 1076.151123][ T2769] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 1076.185034][ T2769] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 1076.208224][ T2769] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 1076.245523][ T2769] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 1076.515220][T29551] hsr_slave_0: left promiscuous mode [ 1076.531078][T29551] hsr_slave_1: left promiscuous mode [ 1076.540779][T29551] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1076.564259][T29551] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1076.574323][T29551] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1076.581796][T29551] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1076.678237][T29551] veth1_macvtap: left promiscuous mode [ 1076.705556][T29551] veth0_macvtap: left promiscuous mode [ 1076.715549][T29551] veth1_vlan: left promiscuous mode [ 1076.720951][T29551] veth0_vlan: left promiscuous mode [ 1077.065491][T28605] Bluetooth: hci4: command tx timeout [ 1077.569792][T29551] team0 (unregistering): Port device team_slave_1 removed [ 1077.627097][T29551] team0 (unregistering): Port device team_slave_0 removed [ 1078.184476][T28605] Bluetooth: hci2: command tx timeout [ 1078.278748][ T2906] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.499523][ T2906] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1078.817116][ T2906] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.024577][ T2906] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1079.072938][ T2860] chnl_net:caif_netlink_parms(): no params data found [ 1079.155279][T28605] Bluetooth: hci4: command tx timeout [ 1079.235054][T29551] IPVS: stop unused estimator thread 0... [ 1079.259585][ T2769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1079.361344][ T2906] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.382311][ T2906] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.401839][ T2906] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.461660][ T2906] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1079.582921][ T2769] 8021q: adding VLAN 0 to HW filter on device team0 [ 1079.643375][T21099] bridge0: port 1(bridge_slave_0) entered blocking state [ 1079.650750][T21099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1079.667978][T21099] bridge0: port 2(bridge_slave_1) entered blocking state [ 1079.675262][T21099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1079.731799][ T2860] bridge0: port 1(bridge_slave_0) entered blocking state [ 1079.753909][ T2860] bridge0: port 1(bridge_slave_0) entered disabled state [ 1079.781888][ T2860] bridge_slave_0: entered allmulticast mode [ 1079.805727][ T2860] bridge_slave_0: entered promiscuous mode [ 1079.815049][ T2860] bridge0: port 2(bridge_slave_1) entered blocking state [ 1079.822331][ T2860] bridge0: port 2(bridge_slave_1) entered disabled state [ 1079.829970][ T2860] bridge_slave_1: entered allmulticast mode [ 1079.839257][ T2860] bridge_slave_1: entered promiscuous mode [ 1079.970353][ T2860] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1079.999274][ T2860] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1080.021428][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1080.119368][ T2932] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1080.182254][ T2860] team0: Port device team_slave_0 added [ 1080.233391][ T2860] team0: Port device team_slave_1 added [ 1080.264381][T28605] Bluetooth: hci2: command tx timeout [ 1080.347395][ T2860] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1080.367267][ T2860] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1080.394937][ T2860] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1080.408490][ T2860] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1080.415982][ T2860] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1080.453423][ T2860] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1080.635275][ T2860] hsr_slave_0: entered promiscuous mode [ 1080.665222][ T2860] hsr_slave_1: entered promiscuous mode [ 1081.198123][ T2860] netdevsim netdevsim0 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1081.224357][T28605] Bluetooth: hci4: command tx timeout [ 1081.234331][ T2860] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.326869][ T2769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1081.410344][ T2860] netdevsim netdevsim0 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1081.456501][ T2860] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.516970][ T2950] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 1081.545546][ T2950] netlink: 'syz-executor.1': attribute type 39 has an invalid length. [ 1081.600272][ T2952] bridge1: port 1(gretap1) entered blocking state [ 1081.610088][ T2952] bridge1: port 1(gretap1) entered disabled state [ 1081.629334][ T2952] gretap1: entered allmulticast mode [ 1081.639615][ T2952] gretap1: entered promiscuous mode [ 1081.659008][ T2860] netdevsim netdevsim0 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1081.684227][ T2860] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1081.714796][ T2951] netlink: 'syz-executor.1': attribute type 7 has an invalid length. [ 1081.723025][ T2951] netlink: 'syz-executor.1': attribute type 39 has an invalid length. [ 1081.779860][ T2860] netdevsim netdevsim0 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 1081.802245][ T2860] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.131805][ T2860] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1082.184442][ T2860] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1082.205696][ T2860] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1082.224436][ T2860] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1082.275871][ T2769] veth0_vlan: entered promiscuous mode [ 1082.325360][ T2769] veth1_vlan: entered promiscuous mode [ 1082.469036][ T2860] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1082.536054][ T2860] 8021q: adding VLAN 0 to HW filter on device team0 [ 1082.547381][ T2769] veth0_macvtap: entered promiscuous mode [ 1082.585630][T21101] bridge0: port 1(bridge_slave_0) entered blocking state [ 1082.592791][T21101] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1082.622383][ T2769] veth1_macvtap: entered promiscuous mode [ 1082.685663][T21101] bridge0: port 2(bridge_slave_1) entered blocking state [ 1082.692899][T21101] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1082.738458][ T2970] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.787548][ T2769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1082.808007][ T2769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.823077][ T2769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1082.833888][ T2769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.845624][ T2769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1082.874455][ T2769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.884545][ T2769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1082.898391][ T2769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1082.917064][ T2769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1082.942542][ T2970] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1082.978063][ T2769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1083.002722][ T2769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.018454][ T2769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1083.038285][ T2769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.050757][ T2769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1083.071701][ T2769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.094148][ T2769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1083.113796][ T2769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1083.119191][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1083.126238][ T2769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1083.179298][ T2970] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.212303][ T2769] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.234847][ T2769] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.243616][ T2769] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.259926][ T2769] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.272214][ T2977] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1083.304932][T28605] Bluetooth: hci4: command tx timeout [ 1083.313949][ T2970] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1083.613705][ T2970] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.634241][T29551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1083.642131][T29551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1083.650063][ T2970] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.708187][ T2970] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.747049][ T2970] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1083.822703][T29552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1083.842179][T29552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1083.878477][ T2860] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1084.069823][ T2860] veth0_vlan: entered promiscuous mode [ 1084.119564][ T2860] veth1_vlan: entered promiscuous mode [ 1084.269036][ T2860] veth0_macvtap: entered promiscuous mode [ 1084.319960][ T2860] veth1_macvtap: entered promiscuous mode [ 1084.403766][ T2860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1084.454106][ T2860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.475468][ T2860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1084.521153][ T2860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.559659][ T2860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1084.570535][ T2860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.580943][ T2860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1084.602015][ T2860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.612286][ T2860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1084.631496][ T2860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.659128][ T2860] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1084.679655][ T3009] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1084.722632][ T2860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1084.742446][ T2860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.757699][ T2860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1084.769563][ T2860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.779653][ T2860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1084.794175][ T2860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.816842][ T2860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1084.844654][ T2860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.864266][ T2860] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1084.884097][ T2860] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1084.906478][ T2860] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1084.950630][ T2860] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.013024][ T2860] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.034296][ T2860] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.043168][ T2860] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1085.250222][ T3023] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.302559][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1085.339269][ T3023] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.369609][T29551] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1085.382260][T29551] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1085.403058][ T3023] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.438334][ T985] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1085.447617][ T985] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1085.490794][ T3023] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1085.555308][ T3029] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1085.563581][ T3029] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1085.573720][ T3029] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1085.984557][ T3042] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1086.000187][ T3044] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1086.281334][ T3055] Cannot find add_set index 0 as target [ 1086.670609][ T3070] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1086.699179][ T3070] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1087.206072][ T3087] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1087.476048][ T3096] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 1087.580830][ T3103] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1087.604931][ T3103] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1088.495861][ T3132] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1088.766217][ T3138] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 1089.027348][ T3148] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1089.556860][ T3023] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1089.828121][ T3023] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.011266][ T3023] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.037243][ T3023] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1090.116123][ T3166] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 1090.125821][ T3166] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 1090.613653][ T3184] __nla_validate_parse: 7 callbacks suppressed [ 1090.613676][ T3184] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1090.650556][ T3184] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1090.870246][ T3196] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1090.978638][ T3196] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.062834][ T3196] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.142977][ T3196] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1091.289969][ T3196] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.316600][ T3214] ieee802154 phy0 wpan0: encryption failed: -22 [ 1091.322966][ T3196] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.343007][ T3196] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.371377][ T3196] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1091.503350][ T3217] netlink: 6204 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1091.515239][ T3217] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1091.526999][ T3217] netlink: 6204 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1091.540444][ T3218] netlink: 6204 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1091.551603][ T3218] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1091.569344][ T3218] netlink: 6204 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1091.592232][ T3217] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1091.818193][ T3223] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1092.234946][ T3247] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 1094.740514][ T3245] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.873665][ T3245] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1094.989069][ T29] audit: type=1800 audit(1718088781.092:952): pid=3241 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="memory.events" dev="sda1" ino=1962 res=0 errno=0 [ 1095.018892][ T3245] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.150167][ T3245] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1095.171584][ T29] audit: type=1800 audit(1718088781.272:953): pid=3278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1955 res=0 errno=0 [ 1095.234916][ T29] audit: type=1804 audit(1718088781.312:954): pid=3278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir928958183/syzkaller.Xtc83R/23/memory.events" dev="sda1" ino=1955 res=1 errno=0 [ 1095.317267][ T29] audit: type=1804 audit(1718088781.322:955): pid=3278 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir928958183/syzkaller.Xtc83R/23/memory.events" dev="sda1" ino=1955 res=1 errno=0 [ 1095.439007][ T3245] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.533925][ T3245] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.619412][ T3245] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.684344][ T3245] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1095.719202][ T3289] __nla_validate_parse: 3 callbacks suppressed [ 1095.719224][ T3289] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1096.226402][ T3310] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 1096.315104][ T3312] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1096.365743][ T3312] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1096.587149][ T29] audit: type=1800 audit(1718088782.692:956): pid=3322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1958 res=0 errno=0 [ 1096.643952][ T29] audit: type=1804 audit(1718088782.742:957): pid=3322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir977794892/syzkaller.lSZtsy/55/memory.events" dev="sda1" ino=1958 res=1 errno=0 [ 1096.705994][ T29] audit: type=1804 audit(1718088782.752:958): pid=3322 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir977794892/syzkaller.lSZtsy/55/memory.events" dev="sda1" ino=1958 res=1 errno=0 [ 1096.743154][ T3320] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1096.907198][ T3326] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1097.048773][ T3320] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.300933][ T3320] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.406960][ T3320] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1097.535454][ T3355] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 1098.385487][ T3361] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1098.414223][ T3361] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1098.611611][ T3363] syzkaller0: entered promiscuous mode [ 1098.624541][ T3363] syzkaller0: entered allmulticast mode [ 1098.657735][ T3363] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 1099.435301][ T3380] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1099.481732][ T29] audit: type=1800 audit(1718088785.582:959): pid=3323 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="memory.events" dev="sda1" ino=1963 res=0 errno=0 [ 1099.791116][ T3388] bond1: entered promiscuous mode [ 1099.806960][ T29] audit: type=1800 audit(1718088785.912:960): pid=3349 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="memory.events" dev="sda1" ino=1966 res=0 errno=0 [ 1099.828234][ T3388] bond1: entered allmulticast mode [ 1099.833769][ T3388] 8021q: adding VLAN 0 to HW filter on device bond1 [ 1100.498249][ T3400] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 1100.731510][T29554] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1100.764374][ T29] audit: type=1800 audit(1718088786.832:961): pid=3410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1958 res=0 errno=0 [ 1100.817708][ T29] audit: type=1804 audit(1718088786.862:962): pid=3410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2737658872/syzkaller.uWuQT8/335/memory.events" dev="sda1" ino=1958 res=1 errno=0 [ 1100.862492][ T29] audit: type=1804 audit(1718088786.872:963): pid=3410 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2737658872/syzkaller.uWuQT8/335/memory.events" dev="sda1" ino=1958 res=1 errno=0 [ 1101.017532][T29554] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.242265][T29554] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.395901][ T3320] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.456713][ T3320] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.658384][T29554] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1101.726194][ T3320] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.737109][ T4491] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 1101.744951][ T3428] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1101.758319][ T4491] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 1101.766887][ T4491] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 1101.777344][ T4491] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 1101.785487][ T4491] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 1101.795850][ T4491] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 1101.817086][ T3320] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1101.842018][ T3428] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1102.038997][T29554] bridge_slave_1: left allmulticast mode [ 1102.049916][T29554] bridge_slave_1: left promiscuous mode [ 1102.065089][T29554] bridge0: port 2(bridge_slave_1) entered disabled state [ 1102.097787][T29554] bridge_slave_0: left allmulticast mode [ 1102.103585][T29554] bridge_slave_0: left promiscuous mode [ 1102.155023][T29554] bridge0: port 1(bridge_slave_0) entered disabled state [ 1102.434747][ T3447] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1102.928206][T29554] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 1102.942337][T29554] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 1102.959831][T29554] bond0 (unregistering): Released all slaves [ 1102.991806][ T3439] team_slave_0: entered promiscuous mode [ 1102.997629][ T3439] team_slave_1: entered promiscuous mode [ 1103.016651][ T3439] macsec1: entered allmulticast mode [ 1103.022019][ T3439] team0: entered allmulticast mode [ 1103.047849][ T3439] team_slave_0: entered allmulticast mode [ 1103.053663][ T3439] team_slave_1: entered allmulticast mode [ 1103.100739][ T3439] team0: left allmulticast mode [ 1103.107789][ T3439] team_slave_0: left allmulticast mode [ 1103.119042][ T3439] team_slave_1: left allmulticast mode [ 1103.134043][ T3439] team_slave_0: left promiscuous mode [ 1103.139634][ T3439] team_slave_1: left promiscuous mode [ 1103.671858][ T3471] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1103.700683][ T3470] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1103.734844][ T29] audit: type=1800 audit(1718088789.842:964): pid=3473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1958 res=0 errno=0 [ 1103.848391][ T29] audit: type=1804 audit(1718088789.932:965): pid=3473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir996507314/syzkaller.CUDWUV/428/memory.events" dev="sda1" ino=1958 res=1 errno=0 [ 1103.874912][ T4491] Bluetooth: hci4: command tx timeout [ 1103.953578][ T29] audit: type=1804 audit(1718088789.942:966): pid=3473 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir996507314/syzkaller.CUDWUV/428/memory.events" dev="sda1" ino=1958 res=1 errno=0 [ 1104.177255][T29554] hsr_slave_0: left promiscuous mode [ 1104.208176][T29554] hsr_slave_1: left promiscuous mode [ 1104.215830][T29554] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 1104.223298][T29554] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 1104.235644][T29554] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 1104.253468][T29554] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 1104.310398][T29552] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1104.346880][T29554] veth1_macvtap: left promiscuous mode [ 1104.352669][T29554] veth0_macvtap: left promiscuous mode [ 1104.366287][T29554] veth1_vlan: left promiscuous mode [ 1104.377470][T29554] veth0_vlan: left promiscuous mode [ 1104.463691][ T29] audit: type=1800 audit(1718088790.562:967): pid=3424 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="memory.events" dev="sda1" ino=1956 res=0 errno=0 [ 1105.308440][T29554] team0 (unregistering): Port device team_slave_1 removed [ 1105.366433][T29554] team0 (unregistering): Port device team_slave_0 removed [ 1105.920772][ T3495] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1105.940339][ T3503] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1105.944588][ T4491] Bluetooth: hci4: command tx timeout [ 1105.960782][ T3503] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1106.019208][ T3426] chnl_net:caif_netlink_parms(): no params data found [ 1106.371818][ T3426] bridge0: port 1(bridge_slave_0) entered blocking state [ 1106.381945][ T3426] bridge0: port 1(bridge_slave_0) entered disabled state [ 1106.404271][ T3426] bridge_slave_0: entered allmulticast mode [ 1106.423206][ T3426] bridge_slave_0: entered promiscuous mode [ 1106.501948][ T3426] bridge0: port 2(bridge_slave_1) entered blocking state [ 1106.516081][ T3426] bridge0: port 2(bridge_slave_1) entered disabled state [ 1106.523647][ T3426] bridge_slave_1: entered allmulticast mode [ 1106.534622][ T3426] bridge_slave_1: entered promiscuous mode [ 1106.614315][ T3522] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1106.635742][ T3522] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1106.701896][ T3426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 1106.742418][ T3426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 1106.900011][ T29] audit: type=1800 audit(1718088793.002:968): pid=3533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1958 res=0 errno=0 [ 1106.954468][ T29] audit: type=1804 audit(1718088793.052:969): pid=3533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2361104816/syzkaller.PqYkjm/36/memory.events" dev="sda1" ino=1958 res=1 errno=0 [ 1107.000813][ T3426] team0: Port device team_slave_0 added [ 1107.010781][ T29] audit: type=1804 audit(1718088793.052:970): pid=3533 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2361104816/syzkaller.PqYkjm/36/memory.events" dev="sda1" ino=1958 res=1 errno=0 [ 1107.041739][ T3426] team0: Port device team_slave_1 added [ 1107.152370][ T3426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 1107.171080][ T3426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1107.215693][ T3426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 1107.248975][ T3426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 1107.258081][ T3426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 1107.293939][ T3426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 1107.430870][ T3426] hsr_slave_0: entered promiscuous mode [ 1107.447396][ T3426] hsr_slave_1: entered promiscuous mode [ 1107.895381][ T3554] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1107.930873][ T3559] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1107.961867][ T3559] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1108.025497][ T4491] Bluetooth: hci4: command tx timeout [ 1108.333593][ T3569] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1108.627427][ T3576] Dead loop on virtual device ipvlan1, fix it urgently! [ 1109.879886][ T3596] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1110.104332][ T4491] Bluetooth: hci4: command tx timeout [ 1111.008385][ T3595] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1111.057723][ T3426] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 1111.090967][ T3426] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 1111.136998][ T3426] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 1111.167826][ T3426] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 1111.211140][ T3600] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1111.410078][ T3426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 1111.425737][ T3608] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 1111.452445][ T3608] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1111.496614][ T3426] 8021q: adding VLAN 0 to HW filter on device team0 [ 1111.536417][T21099] bridge0: port 1(bridge_slave_0) entered blocking state [ 1111.543887][T21099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1111.630531][T21102] bridge0: port 2(bridge_slave_1) entered blocking state [ 1111.637786][T21102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1111.775926][ T3621] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1112.231166][ T3426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 1112.391022][ T3426] veth0_vlan: entered promiscuous mode [ 1112.442612][ T3426] veth1_vlan: entered promiscuous mode [ 1112.545764][ T3645] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 1112.553665][ T3426] veth0_macvtap: entered promiscuous mode [ 1112.593943][ T3426] veth1_macvtap: entered promiscuous mode [ 1112.632411][ T3647] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1112.649388][ T3426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1112.661391][ T3426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.672636][ T3426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1112.693674][ T3648] netlink: 'syz-executor.1': attribute type 214 has an invalid length. [ 1112.702949][ T3426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.714989][ T3426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1112.725628][ T3426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.736237][ T3426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1112.758924][ T3426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.776803][ T3426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 1112.803419][ T3426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.838974][ T3426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 1112.891148][ T3426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1112.917330][ T3426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.960615][ T3426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1112.977316][ T3426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1112.995086][ T3426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1113.020382][ T3426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.042551][ T3426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1113.101798][ T3426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.141581][ T3426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 1113.168488][ T3426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 1113.194593][ T3667] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1113.196325][ T3426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 1113.241097][ T3655] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1113.312018][ T3426] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.355617][ T3426] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.396493][ T3426] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.416002][ T3426] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1113.481808][ T3671] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1113.521298][ T3669] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1113.562983][ T3669] bridge0: port 2(bridge_slave_1) entered disabled state [ 1113.570869][ T3669] bridge0: port 1(bridge_slave_0) entered disabled state [ 1113.625481][ T3669] bridge0: port 2(bridge_slave_1) entered blocking state [ 1113.633232][ T3669] bridge0: port 2(bridge_slave_1) entered forwarding state [ 1113.640897][ T3669] bridge0: port 1(bridge_slave_0) entered blocking state [ 1113.648278][ T3669] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1113.698690][ T3669] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1113.916764][T29558] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1113.944287][T29558] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1114.025759][ T29] audit: type=1800 audit(1718088800.132:971): pid=3686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1954 res=0 errno=0 [ 1114.027855][ T3685] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1114.059412][T29552] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 1114.083780][T29552] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 1114.118549][ T29] audit: type=1804 audit(1718088800.202:972): pid=3686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2361104816/syzkaller.PqYkjm/51/memory.events" dev="sda1" ino=1954 res=1 errno=0 [ 1114.163392][ T3688] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1114.181380][ T29] audit: type=1804 audit(1718088800.202:973): pid=3686 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2361104816/syzkaller.PqYkjm/51/memory.events" dev="sda1" ino=1954 res=1 errno=0 [ 1114.346842][ T29] audit: type=1800 audit(1718088800.272:974): pid=3616 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="memory.events" dev="sda1" ino=1961 res=0 errno=0 [ 1114.575240][ T3698] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1114.716117][ T3704] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1114.752619][ T3704] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1114.820808][ T3705] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1114.922214][ T3710] x_tables: duplicate underflow at hook 1 [ 1115.002519][ T3714] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1115.083880][ T3715] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1115.182747][ T29] audit: type=1800 audit(1718088801.282:975): pid=3726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1966 res=0 errno=0 [ 1115.205564][ T3727] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1115.263918][ T29] audit: type=1804 audit(1718088801.342:976): pid=3726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir996507314/syzkaller.CUDWUV/450/memory.events" dev="sda1" ino=1966 res=1 errno=0 [ 1115.309242][ T29] audit: type=1804 audit(1718088801.342:977): pid=3726 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir996507314/syzkaller.CUDWUV/450/memory.events" dev="sda1" ino=1966 res=1 errno=0 [ 1115.321126][ T3728] netlink: 'syz-executor.1': attribute type 4 has an invalid length. [ 1115.431033][ T3733] bond0: option ad_select: unable to set because the bond device is up [ 1115.486681][ T3738] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1115.921901][ T3750] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1116.017291][ T3753] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1116.241929][ T3759] netlink: 'syz-executor.2': attribute type 12 has an invalid length. [ 1116.267695][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 1116.718293][ T29] audit: type=1800 audit(1718088802.822:978): pid=3773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1958 res=0 errno=0 [ 1116.814231][ T29] audit: type=1804 audit(1718088802.882:979): pid=3773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir996507314/syzkaller.CUDWUV/454/memory.events" dev="sda1" ino=1958 res=1 errno=0 [ 1116.848092][ T29] audit: type=1804 audit(1718088802.892:980): pid=3773 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir996507314/syzkaller.CUDWUV/454/memory.events" dev="sda1" ino=1958 res=1 errno=0 [ 1116.920802][ T3783] veth0_macvtap: left promiscuous mode [ 1117.068131][ T3791] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 1117.644897][ T3818] syz2: rxe_newlink: already configured on veth1_to_bridge [ 1117.902667][ T3827] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 1118.477580][ T3853] netlink: 'syz-executor.2': attribute type 32 has an invalid length. [ 1118.494576][ T3853] __nla_validate_parse: 5 callbacks suppressed [ 1118.494597][ T3853] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1118.873008][ T3877] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 1118.999080][ T3881] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 1119.011771][ T3883] netlink: 328 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1119.097806][ T3885] x_tables: ip_tables: osf match: only valid for protocol 6 [ 1119.145147][ T29] kauditd_printk_skb: 11 callbacks suppressed [ 1119.145167][ T29] audit: type=1800 audit(1718088805.252:992): pid=3887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1945 res=0 errno=0 [ 1119.219879][ T29] audit: type=1804 audit(1718088805.302:993): pid=3887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2737658872/syzkaller.uWuQT8/357/memory.events" dev="sda1" ino=1945 res=1 errno=0 [ 1119.278319][ T29] audit: type=1804 audit(1718088805.302:994): pid=3887 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2737658872/syzkaller.uWuQT8/357/memory.events" dev="sda1" ino=1945 res=1 errno=0 [ 1119.565155][ T3899] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1119.794840][ T3903] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1120.087155][ T3915] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 1121.333828][ T29] audit: type=1800 audit(1718088807.442:995): pid=3852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="memory.events" dev="sda1" ino=1967 res=0 errno=0 [ 1121.970336][ T3929] ieee802154 phy0 wpan0: encryption failed: -22 [ 1123.011764][ T3919] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 1123.113585][ T3920] netlink: 'syz-executor.4': attribute type 4 has an invalid length. [ 1123.138870][ T3934] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1123.703356][ T3968] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 1123.732026][ T3967] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 1123.759497][ T3967] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 1123.798718][ T3967] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1123.878126][ T3970] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1124.039650][ T3975] Cannot find add_set index 0 as target [ 1124.359065][ T3991] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 1124.414628][ T29] audit: type=1800 audit(1718088810.522:996): pid=3993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1962 res=0 errno=0 [ 1124.447685][ T29] audit: type=1804 audit(1718088810.552:997): pid=3993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir977794892/syzkaller.lSZtsy/112/memory.events" dev="sda1" ino=1962 res=1 errno=0 [ 1124.473814][ T29] audit: type=1804 audit(1718088810.552:998): pid=3993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir977794892/syzkaller.lSZtsy/112/memory.events" dev="sda1" ino=1962 res=1 errno=0 [ 1126.656722][ T3980] tipc: Started in network mode [ 1126.661904][ T3980] tipc: Node identity da1e259e8fc2, cluster identity 4711 [ 1126.669989][ T3980] tipc: Enabled bearer , priority 10 [ 1126.678633][ T3979] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1126.884976][ T4007] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 1126.921873][ T4007] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 1126.929438][ T4011] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 1126.974304][ T4007] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1127.229636][ T4029] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_macvtap, syncid = 0, id = 0 [ 1127.251839][ T4025] Cannot find add_set index 0 as target [ 1127.366832][ T4032] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 1127.689502][ T29] audit: type=1800 audit(1718088813.792:999): pid=4043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1950 res=0 errno=0 [ 1127.719864][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1127.761651][ T29] audit: type=1804 audit(1718088813.832:1000): pid=4043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir996507314/syzkaller.CUDWUV/469/memory.events" dev="sda1" ino=1950 res=1 errno=0 [ 1127.792638][T26812] tipc: Node number set to 1440490910 [ 1127.816193][ T4046] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1127.830197][ T29] audit: type=1804 audit(1718088813.832:1001): pid=4043 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir996507314/syzkaller.CUDWUV/469/memory.events" dev="sda1" ino=1950 res=1 errno=0 [ 1128.109381][ T4052] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1128.192325][ T4059] sctp: [Deprecated]: syz-executor.2 (pid 4059) Use of int in maxseg socket option. [ 1128.192325][ T4059] Use struct sctp_assoc_value instead [ 1128.222003][ T4062] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1128.241799][ T4062] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 1128.256538][ T4063] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 1128.266248][ T4062] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1128.770380][ T29] audit: type=1800 audit(1718088814.872:1002): pid=4084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1937 res=0 errno=0 [ 1128.860404][ T29] audit: type=1804 audit(1718088814.902:1003): pid=4084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3789386435/syzkaller.STQZ6d/33/memory.events" dev="sda1" ino=1937 res=1 errno=0 [ 1128.900921][ T29] audit: type=1804 audit(1718088814.902:1004): pid=4084 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3789386435/syzkaller.STQZ6d/33/memory.events" dev="sda1" ino=1937 res=1 errno=0 [ 1129.088039][ T4097] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 1129.485845][ T4117] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.516688][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1129.542216][ T4118] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1129.573217][ T4118] IPv6: NLM_F_CREATE should be specified when creating new route [ 1129.598931][ T4117] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.685504][ T4117] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.710758][ T4126] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 1129.771231][ T4117] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1129.941113][ T4117] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1129.959163][ T29] audit: type=1800 audit(1718088816.062:1005): pid=4132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1963 res=0 errno=0 [ 1129.995432][ T4117] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.012631][ T29] audit: type=1804 audit(1718088816.102:1006): pid=4132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2737658872/syzkaller.uWuQT8/374/memory.events" dev="sda1" ino=1963 res=1 errno=0 [ 1130.048502][ T4117] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.079838][ T4117] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1130.083808][ T29] audit: type=1804 audit(1718088816.102:1007): pid=4132 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2737658872/syzkaller.uWuQT8/374/memory.events" dev="sda1" ino=1963 res=1 errno=0 [ 1130.536790][ T4145] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1130.611635][ T29] audit: type=1800 audit(1718088816.712:1008): pid=4149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1957 res=0 errno=0 [ 1130.664371][ T29] audit: type=1804 audit(1718088816.712:1009): pid=4149 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2361104816/syzkaller.PqYkjm/82/memory.events" dev="sda1" ino=1957 res=1 errno=0 [ 1130.777662][ T29] audit: type=1804 audit(1718088816.782:1010): pid=4155 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2361104816/syzkaller.PqYkjm/82/memory.events" dev="sda1" ino=1957 res=1 errno=0 [ 1131.581290][ T29] audit: type=1800 audit(1718088817.682:1011): pid=4187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1953 res=0 errno=0 [ 1131.626252][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 1131.698482][ T29] audit: type=1804 audit(1718088817.762:1012): pid=4187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir977794892/syzkaller.lSZtsy/127/memory.events" dev="sda1" ino=1953 res=1 errno=0 [ 1131.740357][ T4193] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1131.782232][ T4193] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1131.804290][ T29] audit: type=1804 audit(1718088817.762:1013): pid=4187 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir977794892/syzkaller.lSZtsy/127/memory.events" dev="sda1" ino=1953 res=1 errno=0 [ 1132.231117][ T4208] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1132.351995][ T29] audit: type=1800 audit(1718088818.452:1014): pid=4213 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1953 res=0 errno=0 [ 1133.016506][ T4229] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1133.315964][ T4229] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.520871][ T4229] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.716978][ T4229] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1133.867761][ T4229] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 1134.117458][ T4229] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.158678][ T4229] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 1134.313781][ T4262] syzkaller0: entered promiscuous mode [ 1134.329134][ T4262] syzkaller0: entered allmulticast mode [ 1134.370564][ T4229] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 1135.341521][T29554] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1137.321837][ T4229] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 1137.331658][ T4277] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1137.437905][ T4285] ɶƣ0GC¦: entered promiscuous mode [ 1137.581700][ T4300] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 1138.266496][ T4352] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 1138.425882][ T4359] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1138.850879][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1138.922176][ T4386] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1139.449436][ T4394] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 1139.591335][ T4398] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1139.631513][ T4400] Dead loop on virtual device ipvlan1, fix it urgently! [ 1140.025318][ T4415] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1140.381700][ T4428] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 1140.414276][ T29] kauditd_printk_skb: 5 callbacks suppressed [ 1140.414298][ T29] audit: type=1800 audit(1718088826.512:1020): pid=4433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1962 res=0 errno=0 [ 1140.535075][ T29] audit: type=1804 audit(1718088826.552:1021): pid=4433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2361104816/syzkaller.PqYkjm/100/memory.events" dev="sda1" ino=1962 res=1 errno=0 [ 1140.552922][ T4437] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1140.616682][ T29] audit: type=1804 audit(1718088826.562:1022): pid=4433 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2361104816/syzkaller.PqYkjm/100/memory.events" dev="sda1" ino=1962 res=1 errno=0 [ 1140.665554][T28605] Bluetooth: hci4: command 0x0405 tx timeout [ 1141.348814][ T4471] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 1141.572576][ T4476] netlink: 364 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1141.652292][ T29] audit: type=1800 audit(1718088827.712:1023): pid=4379 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="memory.events" dev="sda1" ino=1954 res=0 errno=0 [ 1141.712056][ T4482] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1142.109969][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1142.216559][ T4503] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1142.267049][ T4504] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1142.480379][ T4516] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 1142.890063][ T4534] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1143.189015][ T4543] sctp: [Deprecated]: syz-executor.0 (pid 4543) Use of int in maxseg socket option. [ 1143.189015][ T4543] Use struct sctp_assoc_value instead [ 1143.533621][ T4559] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 1143.558755][ T4555] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1143.879785][ T4567] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1144.303862][ T4564] syzkaller0: entered promiscuous mode [ 1144.330316][ T4564] syzkaller0: entered allmulticast mode [ 1145.233167][ T4596] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1145.682375][ T4608] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 1148.085949][ T4610] No such timeout policy "syz0" [ 1148.512673][ T4604] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1148.736211][ T4623] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 1148.758470][ T4623] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 1148.780217][ T4623] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1148.809442][ T4632] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1149.616877][ T4647] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1149.886118][ T4658] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1150.174302][ T4666] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 1150.307395][ T4668] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 1150.324539][ T4668] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 1150.350108][ T4668] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1150.748843][ T4665] syzkaller0: entered promiscuous mode [ 1150.761382][ T4665] syzkaller0: entered allmulticast mode [ 1150.771791][ T4672] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1150.865424][ T4693] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1151.022996][ T4698] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1153.783708][ T29] audit: type=1800 audit(1718088839.882:1024): pid=4692 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.events" dev="sda1" ino=1958 res=0 errno=0 [ 1154.631986][ T4708] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1154.881695][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1155.799234][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1157.247523][ T4734] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1157.722841][ T4754] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1157.739524][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1158.546568][ T4783] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1158.738195][ T4789] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1159.032825][ T4800] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1159.213152][ T29] audit: type=1800 audit(1718088845.312:1025): pid=4815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1966 res=0 errno=0 [ 1159.243869][ T29] audit: type=1804 audit(1718088845.342:1026): pid=4815 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3789386435/syzkaller.STQZ6d/67/memory.events" dev="sda1" ino=1966 res=1 errno=0 [ 1159.744444][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1161.183337][ T4840] netlink: 96 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1162.034279][ T4850] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1162.218589][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1162.382637][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1162.646950][ T29] audit: type=1800 audit(1718088848.752:1027): pid=4881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1955 res=0 errno=0 [ 1162.726799][ T29] audit: type=1804 audit(1718088848.752:1028): pid=4881 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2361104816/syzkaller.PqYkjm/127/memory.events" dev="sda1" ino=1955 res=1 errno=0 [ 1163.015679][ T4896] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1163.970765][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1164.034659][ T4933] syz-executor.4[4933] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1164.034944][ T4933] syz-executor.4[4933] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 1164.291685][ T4937] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1165.120574][ T29] audit: type=1800 audit(1718088851.222:1029): pid=4860 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.3" name="memory.events" dev="sda1" ino=1945 res=0 errno=0 [ 1165.307252][ T29] audit: type=1800 audit(1718088851.402:1030): pid=4884 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.0" name="memory.events" dev="sda1" ino=1965 res=0 errno=0 [ 1165.308797][ T4966] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 1165.883849][ T4975] Dead loop on virtual device ipvlan1, fix it urgently! [ 1166.367802][T29557] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1167.780527][ T5002] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1167.929546][ T5013] xt_policy: neither incoming nor outgoing policy selected [ 1167.988996][ T5013] netlink: 'syz-executor.4': attribute type 19 has an invalid length. [ 1168.188345][ T5029] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 1170.420568][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1170.903650][ T29] audit: type=1800 audit(1718088857.002:1031): pid=5079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1966 res=0 errno=0 [ 1170.996600][ T29] audit: type=1804 audit(1718088857.102:1032): pid=5079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2737658872/syzkaller.uWuQT8/430/memory.events" dev="sda1" ino=1966 res=1 errno=0 [ 1171.041635][ T29] audit: type=1804 audit(1718088857.102:1033): pid=5079 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2737658872/syzkaller.uWuQT8/430/memory.events" dev="sda1" ino=1966 res=1 errno=0 [ 1171.233133][ T5083] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1171.431549][ T5099] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 1171.460690][ T5099] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1171.573214][ T5102] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 1174.276766][ T29] audit: type=1800 audit(1718088860.372:1034): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1965 res=0 errno=0 [ 1174.375752][ T29] audit: type=1804 audit(1718088860.482:1035): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2737658872/syzkaller.uWuQT8/436/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 1174.450188][ T29] audit: type=1804 audit(1718088860.522:1036): pid=5139 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2737658872/syzkaller.uWuQT8/436/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 1174.517021][ T5145] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 1174.541693][ T5146] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1174.580752][ T5145] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1175.238935][ T5174] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 1175.282714][ T5175] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1177.818272][ T5204] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 1177.829456][ T5204] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1178.441012][ T5194] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1178.455835][ T5196] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1178.627628][ T5217] xt_policy: neither incoming nor outgoing policy selected [ 1178.802398][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1178.875112][ T5231] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 1178.884962][ T5231] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1178.986105][ T5234] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 1179.282842][ T5247] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1179.347042][ T5247] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1179.396224][ T5248] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1179.976569][ T5269] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 1180.005865][ T5269] __nla_validate_parse: 1 callbacks suppressed [ 1180.005889][ T5269] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1180.070169][ T5273] Dead loop on virtual device ipvlan1, fix it urgently! [ 1180.199031][ T5281] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 1180.273839][ T5283] xt_connbytes: Forcing CT accounting to be enabled [ 1180.284506][ T5283] xt_CT: You must specify a L4 protocol and not use inversions on it [ 1180.651692][ T5288] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1180.674518][ T5288] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1180.824389][ T4491] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1181.017785][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1181.098376][ T5299] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1181.127779][ T5299] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1181.473931][ T5301] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1181.509442][ T5301] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1181.745035][ T5311] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 1181.763593][ T5311] netlink: 5 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1182.004984][ T5321] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 1182.404396][ T5330] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1182.413870][ T5330] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1182.769890][ T29] audit: type=1800 audit(1718088868.872:1037): pid=5279 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="memory.events" dev="sda1" ino=1952 res=0 errno=0 [ 1182.808405][ T5337] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 1182.900326][ T5340] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 1183.040414][ T5344] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 1183.624913][ T4491] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1185.232315][ T5388] __nla_validate_parse: 6 callbacks suppressed [ 1185.232339][ T5388] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1185.354111][ T5388] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1185.723658][ T4491] Bluetooth: hci0: Opcode 0x0c03 failed: -110 [ 1185.838987][ T29] audit: type=1800 audit(1718088871.932:1038): pid=5400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1966 res=0 errno=0 [ 1185.913766][ T29] audit: type=1804 audit(1718088871.942:1039): pid=5400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3789386435/syzkaller.STQZ6d/91/memory.events" dev="sda1" ino=1966 res=1 errno=0 [ 1186.028718][ T29] audit: type=1804 audit(1718088871.942:1040): pid=5400 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3789386435/syzkaller.STQZ6d/91/memory.events" dev="sda1" ino=1966 res=1 errno=0 [ 1186.109342][ T5406] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1187.298460][ T5424] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1187.364796][ T5424] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1187.648886][ T5431] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1187.700973][ T5431] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1187.729178][ T29] audit: type=1800 audit(1718088873.832:1041): pid=5389 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="memory.events" dev="sda1" ino=1938 res=0 errno=0 [ 1187.958250][ T29] audit: type=1800 audit(1718088874.042:1042): pid=5391 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.events" dev="sda1" ino=1965 res=0 errno=0 [ 1188.760185][ T5445] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1188.771474][ T5445] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1190.203342][ T29] audit: type=1800 audit(1718088876.302:1043): pid=5454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1966 res=0 errno=0 [ 1190.248759][ T29] audit: type=1804 audit(1718088876.362:1044): pid=5454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir996507314/syzkaller.CUDWUV/565/memory.events" dev="sda1" ino=1966 res=1 errno=0 [ 1190.276646][ T29] audit: type=1804 audit(1718088876.362:1045): pid=5454 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir996507314/syzkaller.CUDWUV/565/memory.events" dev="sda1" ino=1966 res=1 errno=0 [ 1191.331275][ T5443] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1191.465421][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1191.668969][ T5475] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1191.727371][ T5475] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1191.745716][ T5476] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1191.756614][ T5476] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1191.797905][ T29] audit: type=1800 audit(1718088877.902:1046): pid=5478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1967 res=0 errno=0 [ 1191.841818][ T29] audit: type=1804 audit(1718088877.932:1047): pid=5478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir996507314/syzkaller.CUDWUV/568/memory.events" dev="sda1" ino=1967 res=1 errno=0 [ 1191.869233][ T29] audit: type=1804 audit(1718088877.942:1048): pid=5478 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir996507314/syzkaller.CUDWUV/568/memory.events" dev="sda1" ino=1967 res=1 errno=0 [ 1192.236458][ T5490] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1192.873169][ T5504] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1192.898643][ T5506] xt_policy: neither incoming nor outgoing policy selected [ 1193.368853][ T29] audit: type=1800 audit(1718088879.472:1049): pid=5524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1968 res=0 errno=0 [ 1193.428761][ T29] audit: type=1804 audit(1718088879.502:1050): pid=5524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir996507314/syzkaller.CUDWUV/570/memory.events" dev="sda1" ino=1968 res=1 errno=0 [ 1193.466131][ T29] audit: type=1804 audit(1718088879.502:1051): pid=5524 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir996507314/syzkaller.CUDWUV/570/memory.events" dev="sda1" ino=1968 res=1 errno=0 [ 1195.184267][ T5512] Bluetooth: hci3: command 0x0406 tx timeout [ 1195.191656][ T5512] Bluetooth: hci2: command 0x0406 tx timeout [ 1195.632523][ T5525] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1195.642064][ T5525] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1195.795926][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1195.958231][ T5546] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1197.289890][T29561] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 1199.762377][ T29] audit: type=1800 audit(1718088885.862:1052): pid=5569 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="memory.events" dev="sda1" ino=1967 res=0 errno=0 [ 1200.445577][ T29] audit: type=1800 audit(1718088886.542:1053): pid=5586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1967 res=0 errno=0 [ 1200.487153][ T29] audit: type=1804 audit(1718088886.592:1054): pid=5586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2361104816/syzkaller.PqYkjm/170/memory.events" dev="sda1" ino=1967 res=1 errno=0 [ 1200.515520][ T29] audit: type=1804 audit(1718088886.592:1055): pid=5586 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2361104816/syzkaller.PqYkjm/170/memory.events" dev="sda1" ino=1967 res=1 errno=0 [ 1200.571530][ T5558] __nla_validate_parse: 2 callbacks suppressed [ 1200.571552][ T5558] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1200.590388][ T5578] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1200.602801][ T5578] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1200.630550][ T5583] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1200.654938][ T5583] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1200.916329][ T5600] netlink: 'syz-executor.2': attribute type 4 has an invalid length. [ 1201.119032][ T5613] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:20002 [ 1201.803159][ T29] audit: type=1800 audit(1718088887.902:1056): pid=5636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1958 res=0 errno=0 [ 1201.867183][ T29] audit: type=1804 audit(1718088887.942:1057): pid=5636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir977794892/syzkaller.lSZtsy/214/memory.events" dev="sda1" ino=1958 res=1 errno=0 [ 1201.974412][ T29] audit: type=1804 audit(1718088887.942:1058): pid=5636 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir977794892/syzkaller.lSZtsy/214/memory.events" dev="sda1" ino=1958 res=1 errno=0 [ 1202.136918][ T29] audit: type=1800 audit(1718088888.222:1059): pid=5646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1965 res=0 errno=0 [ 1202.222398][ T29] audit: type=1804 audit(1718088888.282:1060): pid=5646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir996507314/syzkaller.CUDWUV/575/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 1202.278228][ T29] audit: type=1804 audit(1718088888.282:1061): pid=5646 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir996507314/syzkaller.CUDWUV/575/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 1204.760677][ T5655] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1204.773001][ T5655] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1204.783389][ T5652] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1204.792908][ T5652] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1205.182281][ T5683] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1205.288502][ T5689] IPVS: set_ctl: invalid protocol: 103 172.20.20.187:20002 [ 1205.488396][ T29] audit: type=1800 audit(1718088891.592:1062): pid=5696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1958 res=0 errno=0 [ 1205.552000][ T29] audit: type=1804 audit(1718088891.652:1063): pid=5696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2361104816/syzkaller.PqYkjm/175/memory.events" dev="sda1" ino=1958 res=1 errno=0 [ 1205.602362][ T29] audit: type=1804 audit(1718088891.652:1064): pid=5696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.4" name="/root/syzkaller-testdir2361104816/syzkaller.PqYkjm/175/memory.events" dev="sda1" ino=1958 res=1 errno=0 [ 1206.265365][ T5706] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1206.282672][ T5706] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1206.775836][ T5734] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1207.665015][ T29] audit: type=1800 audit(1718088893.772:1065): pid=5743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1969 res=0 errno=0 [ 1207.710828][ T29] audit: type=1804 audit(1718088893.802:1066): pid=5743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir996507314/syzkaller.CUDWUV/582/memory.events" dev="sda1" ino=1969 res=1 errno=0 [ 1207.742514][ T5724] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 1207.753086][ T5724] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 1207.774583][ T29] audit: type=1804 audit(1718088893.802:1067): pid=5743 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir996507314/syzkaller.CUDWUV/582/memory.events" dev="sda1" ino=1969 res=1 errno=0 [ 1207.871077][ T5716] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 1207.894439][ T5738] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1207.950281][ T29] audit: type=1800 audit(1718088894.042:1068): pid=5749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1963 res=0 errno=0 [ 1207.984480][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1208.029655][ T29] audit: type=1804 audit(1718088894.102:1069): pid=5749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3789386435/syzkaller.STQZ6d/109/memory.events" dev="sda1" ino=1963 res=1 errno=0 [ 1208.072513][ T29] audit: type=1804 audit(1718088894.102:1070): pid=5749 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3789386435/syzkaller.STQZ6d/109/memory.events" dev="sda1" ino=1963 res=1 errno=0 [ 1208.382673][ T5766] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1208.429656][ T5766] mac80211_hwsim hwsim48 wlan1: entered promiscuous mode [ 1208.460345][ T5766] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 1208.947908][ T5791] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1209.102903][ T5796] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 1209.112905][ T5796] bridge0: port 1(bridge_slave_0) entered disabled state [ 1209.215435][ T29] audit: type=1800 audit(1718088895.312:1071): pid=5798 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1946 res=0 errno=0 [ 1209.755369][ T5796] bridge0: port 1(bridge_slave_0) entered blocking state [ 1209.762608][ T5796] bridge0: port 1(bridge_slave_0) entered forwarding state [ 1209.807780][ T5796] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 1209.878262][ T5805] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1211.767659][ T29] kauditd_printk_skb: 2 callbacks suppressed [ 1211.767682][ T29] audit: type=1800 audit(1718088897.872:1074): pid=5786 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.events" dev="sda1" ino=1953 res=0 errno=0 [ 1212.275326][T29559] wlan1: Trigger new scan to find an IBSS to join [ 1212.614838][ T5832] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1213.206033][ T5825] netlink: 'syz-executor.4': attribute type 39 has an invalid length. [ 1213.541178][ T29] audit: type=1800 audit(1718088899.642:1075): pid=5852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1956 res=0 errno=0 [ 1213.612547][ T29] audit: type=1804 audit(1718088899.682:1076): pid=5852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir996507314/syzkaller.CUDWUV/588/memory.events" dev="sda1" ino=1956 res=1 errno=0 [ 1213.661799][ T29] audit: type=1804 audit(1718088899.692:1077): pid=5852 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir996507314/syzkaller.CUDWUV/588/memory.events" dev="sda1" ino=1956 res=1 errno=0 [ 1213.748219][ T5861] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1213.777705][ T29] audit: type=1800 audit(1718088899.702:1078): pid=5850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1938 res=0 errno=0 [ 1213.918900][ T29] audit: type=1804 audit(1718088899.742:1079): pid=5850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3789386435/syzkaller.STQZ6d/114/memory.events" dev="sda1" ino=1938 res=1 errno=0 [ 1214.058795][ T29] audit: type=1804 audit(1718088899.742:1080): pid=5850 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3789386435/syzkaller.STQZ6d/114/memory.events" dev="sda1" ino=1938 res=1 errno=0 [ 1214.545882][ T5886] syz2: rxe_newlink: already configured on veth1_to_bridge [ 1214.721727][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1215.007813][ T29] audit: type=1800 audit(1718088901.112:1081): pid=5908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1965 res=0 errno=0 [ 1215.077443][ T29] audit: type=1804 audit(1718088901.182:1082): pid=5908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir977794892/syzkaller.lSZtsy/230/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 1215.151695][ T29] audit: type=1804 audit(1718088901.212:1083): pid=5908 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir977794892/syzkaller.lSZtsy/230/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 1215.233770][T29244] wlan1: Trigger new scan to find an IBSS to join [ 1216.253494][T29551] wlan1: Creating new IBSS network, BSSID 8e:9d:86:f9:3e:50 [ 1216.500967][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1216.591774][ T5959] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1216.607230][ T5960] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 1216.888314][ T29] kauditd_printk_skb: 6 callbacks suppressed [ 1216.888334][ T29] audit: type=1800 audit(1718088902.992:1090): pid=5970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1966 res=0 errno=0 [ 1216.969407][ T29] audit: type=1804 audit(1718088903.052:1091): pid=5970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2737658872/syzkaller.uWuQT8/483/memory.events" dev="sda1" ino=1966 res=1 errno=0 [ 1217.017686][ T29] audit: type=1804 audit(1718088903.052:1092): pid=5970 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.3" name="/root/syzkaller-testdir2737658872/syzkaller.uWuQT8/483/memory.events" dev="sda1" ino=1966 res=1 errno=0 [ 1217.991080][ T6016] lo speed is unknown, defaulting to 1000 [ 1217.997492][ T6014] syz-executor.0 (6014) used obsolete PPPIOCDETACH ioctl [ 1218.020599][ T6016] lo speed is unknown, defaulting to 1000 [ 1218.101817][ T6016] lo speed is unknown, defaulting to 1000 [ 1218.444624][ T6027] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1218.641748][ T6016] infiniband syz0: set active [ 1218.647262][T21102] lo speed is unknown, defaulting to 1000 [ 1218.671551][ T6016] infiniband syz0: added lo [ 1218.685333][ T6016] syz0: rxe_create_cq: returned err = -12 [ 1218.713322][ T6016] infiniband syz0: Couldn't create ib_mad CQ [ 1218.723547][ T6016] infiniband syz0: Couldn't open port 1 [ 1218.786083][ T6016] RDS/IB: syz0: added [ 1218.790198][ T6016] smc: adding ib device syz0 with port count 1 [ 1218.817893][ T6016] smc: ib device syz0 port 1 has pnetid SYZ1 (user defined) [ 1218.834751][T21102] lo speed is unknown, defaulting to 1000 [ 1218.846430][ T6016] lo speed is unknown, defaulting to 1000 [ 1219.226186][ T6016] lo speed is unknown, defaulting to 1000 [ 1219.554485][ T29] audit: type=1800 audit(1718088905.652:1093): pid=5962 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.2" name="memory.events" dev="sda1" ino=1965 res=0 errno=0 [ 1219.662738][ T6016] lo speed is unknown, defaulting to 1000 [ 1220.056791][ T6016] lo speed is unknown, defaulting to 1000 [ 1220.466612][ T29] audit: type=1800 audit(1718088906.572:1094): pid=5993 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.4" name="memory.events" dev="sda1" ino=1938 res=0 errno=0 [ 1220.525152][ T6016] lo speed is unknown, defaulting to 1000 [ 1220.783474][ T6016] lo speed is unknown, defaulting to 1000 [ 1221.193923][ T6032] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 1221.302751][ T6061] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 1221.355077][ T6065] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1221.376169][ T6066] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1221.381383][ T6067] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1221.918115][ T6065] lo speed is unknown, defaulting to 1000 [ 1222.576573][ T6101] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1223.026786][ T6113] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 1223.064275][ T6113] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 1223.444712][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1223.645708][ T6129] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1223.816436][ T6138] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 1223.858774][ T6138] hsr0: entered promiscuous mode [ 1223.895258][ T6138] bond0: (slave hsr0): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 1223.951126][ T6138] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 1223.964551][ T6138] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 1224.030568][ T6138] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 1224.741034][ T6147] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1224.804063][ T6147] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 1224.897840][ T6129] lo speed is unknown, defaulting to 1000 [ 1225.372634][ T6169] pimreg: entered allmulticast mode [ 1225.687078][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1225.870409][T28605] Bluetooth: hci4: command 0x0405 tx timeout [ 1226.590238][ T29] audit: type=1800 audit(1718088912.692:1095): pid=6143 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz-executor.1" name="memory.events" dev="sda1" ino=1938 res=0 errno=0 [ 1226.759200][ T6203] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 1227.096588][ T6261] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 1227.119893][ T6261] infiniband syz0: set active [ 1227.137219][ T2927] lo speed is unknown, defaulting to 1000 [ 1227.261238][ T6265] netlink: 672 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1227.286094][ T6265] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1227.777661][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1228.099104][ T6291] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 1228.443690][ T6301] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 1228.776658][ T29] audit: type=1800 audit(1718088914.872:1096): pid=6313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.2" name="memory.events" dev="sda1" ino=1965 res=0 errno=0 [ 1228.789265][ T6291] lo speed is unknown, defaulting to 1000 [ 1228.862608][ T29] audit: type=1804 audit(1718088914.922:1097): pid=6313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir996507314/syzkaller.CUDWUV/614/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 1228.944363][ T29] audit: type=1804 audit(1718088914.932:1098): pid=6313 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.2" name="/root/syzkaller-testdir996507314/syzkaller.CUDWUV/614/memory.events" dev="sda1" ino=1965 res=1 errno=0 [ 1229.408242][ T6331] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1229.433626][ T6331] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1229.507135][ T6335] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 1229.581395][ T6336] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 1229.681231][ T6328] rdma_rxe: rxe_newlink: failed to add veth1_to_bridge [ 1229.928663][ T6343] netlink: 456 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1230.125573][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 1230.508725][ T29] audit: type=1800 audit(1718088916.612:1099): pid=6358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1957 res=0 errno=0 [ 1230.580474][ T29] audit: type=1804 audit(1718088916.662:1100): pid=6358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3789386435/syzkaller.STQZ6d/138/memory.events" dev="sda1" ino=1957 res=1 errno=0 [ 1230.607600][ T29] audit: type=1804 audit(1718088916.662:1101): pid=6358 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.0" name="/root/syzkaller-testdir3789386435/syzkaller.STQZ6d/138/memory.events" dev="sda1" ino=1957 res=1 errno=0 [ 1230.717182][ T6360] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 1230.735987][ T6360] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1231.044999][ T29] audit: type=1800 audit(1718088917.132:1102): pid=6373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1953 res=0 errno=0 [ 1231.104954][ T29] audit: type=1804 audit(1718088917.192:1103): pid=6373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir977794892/syzkaller.lSZtsy/255/memory.events" dev="sda1" ino=1953 res=1 errno=0 [ 1231.155375][ T29] audit: type=1804 audit(1718088917.192:1104): pid=6373 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name="/root/syzkaller-testdir977794892/syzkaller.lSZtsy/255/memory.events" dev="sda1" ino=1953 res=1 errno=0 [ 1231.345959][ T6385] netlink: 672 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1231.375635][ T6385] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 1231.673646][ T6399] ================================================================== [ 1231.681786][ T6399] BUG: KASAN: slab-use-after-free in rose_get_neigh+0x1b6/0x6f0 [ 1231.689462][ T6399] Read of size 1 at addr ffff88802a32b030 by task syz-executor.2/6399 [ 1231.697618][ T6399] [ 1231.699942][ T6399] CPU: 0 PID: 6399 Comm: syz-executor.2 Not tainted 6.10.0-rc2-syzkaller-00722-gbb678f01804c #0 [ 1231.710361][ T6399] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 1231.720422][ T6399] Call Trace: 2024/06/11 06:55:17 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 1231.723706][ T6399] [ 1231.726826][ T6399] dump_stack_lvl+0x241/0x360 [ 1231.731560][ T6399] ? __pfx_dump_stack_lvl+0x10/0x10 [ 1231.736815][ T6399] ? __pfx__printk+0x10/0x10 [ 1231.741450][ T6399] ? _printk+0xd5/0x120 [ 1231.745655][ T6399] ? __virt_addr_valid+0x183/0x520 [ 1231.750803][ T6399] ? __virt_addr_valid+0x183/0x520 [ 1231.755959][ T6399] print_report+0x169/0x550 [ 1231.760604][ T6399] ? __virt_addr_valid+0x183/0x520 [ 1231.764343][ T6403] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:20002 [ 1231.765744][ T6399] ? __virt_addr_valid+0x183/0x520 [ 1231.765785][ T6399] ? __virt_addr_valid+0x44e/0x520 [ 1231.782759][ T6399] ? __phys_addr+0xba/0x170 [ 1231.787344][ T6399] ? rose_get_neigh+0x1b6/0x6f0 [ 1231.792245][ T6399] kasan_report+0x143/0x180 [ 1231.796792][ T6399] ? rose_get_neigh+0x1b6/0x6f0 [ 1231.801690][ T6399] rose_get_neigh+0x1b6/0x6f0 [ 1231.806417][ T6399] rose_connect+0x45a/0x1170 [ 1231.811067][ T6399] ? aa_sk_perm+0x967/0xab0 [ 1231.815613][ T6399] ? __pfx_rose_connect+0x10/0x10 [ 1231.820675][ T6399] ? aa_af_perm+0x330/0x3b0 [ 1231.825220][ T6399] ? __might_fault+0xaa/0x120 [ 1231.829930][ T6399] ? __might_fault+0xc6/0x120 [ 1231.834648][ T6399] ? bpf_lsm_socket_connect+0x9/0x10 [ 1231.839992][ T6399] ? security_socket_connect+0x87/0xb0 [ 1231.845507][ T6399] __sys_connect+0x2df/0x310 [ 1231.850152][ T6399] ? __pfx___sys_connect+0x10/0x10 [ 1231.855333][ T6399] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 1231.861721][ T6399] ? do_syscall_64+0x100/0x230 [ 1231.866714][ T6399] __x64_sys_connect+0x7a/0x90 [ 1231.871545][ T6399] do_syscall_64+0xf3/0x230 [ 1231.876199][ T6399] ? clear_bhb_loop+0x35/0x90 [ 1231.880917][ T6399] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 1231.886860][ T6399] RIP: 0033:0x7feee447cf69 [ 1231.891314][ T6399] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 1231.911146][ T6399] RSP: 002b:00007feee51920c8 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 1231.919607][ T6399] RAX: ffffffffffffffda RBX: 00007feee45b3f80 RCX: 00007feee447cf69 [ 1231.927712][ T6399] RDX: 000000000000001c RSI: 00000000200002c0 RDI: 0000000000000007 [ 1231.935726][ T6399] RBP: 00007feee44da6fe R08: 0000000000000000 R09: 0000000000000000 [ 1231.943779][ T6399] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 1231.951781][ T6399] R13: 000000000000000b R14: 00007feee45b3f80 R15: 00007ffd3499d388 [ 1231.960083][ T6399] [ 1231.963129][ T6399] [ 1231.965504][ T6399] Allocated by task 29561: [ 1231.969940][ T6399] kasan_save_track+0x3f/0x80 [ 1231.974660][ T6399] __kasan_kmalloc+0x98/0xb0 [ 1231.979381][ T6399] kmalloc_trace_noprof+0x19c/0x2c0 [ 1231.984619][ T6399] batadv_forw_packet_alloc+0x19c/0x3b0 [ 1231.990209][ T6399] batadv_iv_ogm_queue_add+0x6da/0xbf0 [ 1231.996073][ T6399] batadv_iv_ogm_schedule+0xc4d/0x1090 [ 1232.001586][ T6399] batadv_iv_send_outstanding_bat_ogm_packet+0x6fe/0x810 [ 1232.008771][ T6399] process_scheduled_works+0xa2c/0x1830 [ 1232.014361][ T6399] worker_thread+0x86d/0xd70 [ 1232.018984][ T6399] kthread+0x2f0/0x390 [ 1232.023086][ T6399] ret_from_fork+0x4b/0x80 [ 1232.027544][ T6399] ret_from_fork_asm+0x1a/0x30 [ 1232.032357][ T6399] [ 1232.034703][ T6399] Freed by task 29551: [ 1232.038780][ T6399] kasan_save_track+0x3f/0x80 [ 1232.043490][ T6399] kasan_save_free_info+0x40/0x50 [ 1232.048543][ T6399] poison_slab_object+0xe0/0x150 [ 1232.053594][ T6399] __kasan_slab_free+0x37/0x60 [ 1232.058401][ T6399] kfree+0x149/0x360 [ 1232.062332][ T6399] process_scheduled_works+0xa2c/0x1830 [ 1232.068003][ T6399] worker_thread+0x86d/0xd70 [ 1232.072623][ T6399] kthread+0x2f0/0x390 [ 1232.076722][ T6399] ret_from_fork+0x4b/0x80 [ 1232.081187][ T6399] ret_from_fork_asm+0x1a/0x30 [ 1232.085994][ T6399] [ 1232.088339][ T6399] Last potentially related work creation: [ 1232.094069][ T6399] kasan_save_stack+0x3f/0x60 [ 1232.098781][ T6399] __kasan_record_aux_stack+0xac/0xc0 [ 1232.104181][ T6399] insert_work+0x3e/0x330 [ 1232.108628][ T6399] __queue_work+0xc16/0xee0 [ 1232.113163][ T6399] call_timer_fn+0x18e/0x650 [ 1232.117791][ T6399] __run_timer_base+0x695/0x8e0 [ 1232.122669][ T6399] run_timer_softirq+0xb7/0x170 [ 1232.127552][ T6399] handle_softirqs+0x2c4/0x970 [ 1232.132355][ T6399] __irq_exit_rcu+0xf4/0x1c0 [ 1232.136979][ T6399] irq_exit_rcu+0x9/0x30 [ 1232.141257][ T6399] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 1232.146942][ T6399] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 1232.152979][ T6399] [ 1232.155332][ T6399] The buggy address belongs to the object at ffff88802a32b000 [ 1232.155332][ T6399] which belongs to the cache kmalloc-512 of size 512 [ 1232.169464][ T6399] The buggy address is located 48 bytes inside of [ 1232.169464][ T6399] freed 512-byte region [ffff88802a32b000, ffff88802a32b200) [ 1232.183214][ T6399] [ 1232.185616][ T6399] The buggy address belongs to the physical page: [ 1232.192065][ T6399] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2a328 [ 1232.200873][ T6399] head: order:2 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 1232.209401][ T6399] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 1232.216976][ T6399] page_type: 0xffffefff(slab) [ 1232.221686][ T6399] raw: 00fff00000000040 ffff888015041c80 dead000000000100 dead000000000122 [ 1232.230309][ T6399] raw: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 1232.239012][ T6399] head: 00fff00000000040 ffff888015041c80 dead000000000100 dead000000000122 [ 1232.247711][ T6399] head: 0000000000000000 0000000000100010 00000001ffffefff 0000000000000000 [ 1232.256412][ T6399] head: 00fff00000000002 ffffea0000a8ca01 ffffffffffffffff 0000000000000000 [ 1232.265199][ T6399] head: 0000000000000004 0000000000000000 00000000ffffffff 0000000000000000 [ 1232.273890][ T6399] page dumped because: kasan: bad access detected [ 1232.280339][ T6399] page_owner tracks the page as allocated [ 1232.286076][ T6399] page last allocated via order 2, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5114, tgid 5114 (syz-executor.2), ts 77337016652, free_ts 77201339167 [ 1232.308096][ T6399] post_alloc_hook+0x1f3/0x230 [ 1232.312921][ T6399] get_page_from_freelist+0x2e2d/0x2ee0 [ 1232.318507][ T6399] __alloc_pages_noprof+0x256/0x6c0 [ 1232.323737][ T6399] alloc_slab_page+0x5f/0x120 [ 1232.328467][ T6399] allocate_slab+0x5a/0x2e0 [ 1232.333005][ T6399] ___slab_alloc+0xcd1/0x14b0 [ 1232.337725][ T6399] __slab_alloc+0x58/0xa0 [ 1232.342101][ T6399] kmalloc_trace_noprof+0x1d5/0x2c0 [ 1232.347338][ T6399] device_add+0xc1/0xbf0 [ 1232.351611][ T6399] netdev_register_kobject+0x17e/0x320 [ 1232.357111][ T6399] register_netdevice+0x11d5/0x19e0 [ 1232.362338][ T6399] veth_newlink+0x84f/0xcd0 [ 1232.366883][ T6399] rtnl_newlink+0x158f/0x20a0 [ 1232.371592][ T6399] rtnetlink_rcv_msg+0x89b/0x1180 [ 1232.376829][ T6399] netlink_rcv_skb+0x1e3/0x430 [ 1232.381633][ T6399] netlink_unicast+0x7ea/0x980 [ 1232.386529][ T6399] page last free pid 5125 tgid 5125 stack trace: [ 1232.392886][ T6399] free_unref_page+0xd22/0xea0 [ 1232.397711][ T6399] __put_partials+0xeb/0x130 [ 1232.402509][ T6399] put_cpu_partial+0x17c/0x250 [ 1232.407311][ T6399] __slab_free+0x2ea/0x3d0 [ 1232.412291][ T6399] qlist_free_all+0x9e/0x140 [ 1232.416999][ T6399] kasan_quarantine_reduce+0x14f/0x170 [ 1232.422488][ T6399] __kasan_slab_alloc+0x23/0x80 [ 1232.427389][ T6399] kmalloc_trace_noprof+0x132/0x2c0 [ 1232.432706][ T6399] netdevice_event+0x37d/0x950 [ 1232.437526][ T6399] notifier_call_chain+0x19f/0x3e0 [ 1232.442686][ T6399] __netdev_upper_dev_link+0x4c3/0x670 [ 1232.448189][ T6399] netdev_master_upper_dev_link+0xb1/0x100 [ 1232.454124][ T6399] batadv_hardif_enable_interface+0x26e/0x9f0 [ 1232.460246][ T6399] batadv_softif_slave_add+0x79/0xf0 [ 1232.465569][ T6399] do_setlink+0xe70/0x41f0 [ 1232.470029][ T6399] rtnl_newlink+0x180b/0x20a0 [ 1232.474741][ T6399] [ 1