last executing test programs: 23.136112212s ago: executing program 0: r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x8, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000ec0000008500000086000000850000000f00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000004000/0x2000)=nil, 0x2000, 0x0, 0x12, r3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000008000)={0x15, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="b700000000000000070000000000000095000000000000007bc23c22c47a74cfb5af100fc4e94d123d9f22a7561b8850821bc1f8b5b0a3e3b79b0d96ab7cc60e0e144f0f04bfffe66a22d132a161eea53a46a5316f6800"/100], &(0x7f0000003ff6)='syzkaller\x00', 0x1, 0xc3, &(0x7f00000002c0)=""/195}, 0x48) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_BITWISE_OP={0x8}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}]}], {0x14}}, 0x8c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='block_plug\x00', r1}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r4, &(0x7f0000000200), 0x43400) 22.953866729s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@can_newroute={0x14c, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_MOD_SET={0x15, 0x4, {{{}, 0x0, 0x0, 0x0, 0x0, "38023cf227b17d48"}, 0x4}}, @CGW_CS_CRC8={0x11e, 0x6, {0x0, 0x0, 0x21, 0x0, 0x0, "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", 0x0, "5c8d586b2a88d81866930fca15c8a95d29e5b2ea"}}]}, 0x14c}}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, &(0x7f0000000080)={0x2, 0x4e24, @multicast1}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f00000003c0)='dctcp-reno\x00', 0xb) setsockopt$sock_int(r1, 0x1, 0x9, &(0x7f0000000200), 0x4) 22.671315423s ago: executing program 0: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) shutdown(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="74030000", @ANYRES16, @ANYBLOB="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", @ANYRES32=r1], 0x374}}, 0x0) 22.550661144s ago: executing program 0: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$l2tp6(0xffffffffffffffff, &(0x7f00000000c0)={0xa, 0x0, 0x0, @mcast2}, 0x20) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}]}, 0x3c}}, 0x0) r5 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$L2TP_CMD_NOOP(r4, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000180)={0x30, r5, 0x100, 0x70bd27, 0x25dfdbff, {}, [@L2TP_ATTR_UDP_CSUM={0x5}, @L2TP_ATTR_IFNAME={0x14, 0x8, 'gre0\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x400c0a4) r6 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_IPV6_RTHDR(r6, 0x29, 0x39, &(0x7f00000000c0)=ANY=[@ANYBLOB="000204"], 0x18) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r8, r7, 0x2, 0x0, 0x4000}, 0x10) socket$kcm(0x2, 0x2, 0x73) connect$inet6(r6, &(0x7f0000002200)={0xa, 0x0, 0x0, @private2}, 0x1c) r9 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r9, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f09efeffe809005300fff5dd00000010000100080c10216900000000000000", 0x58}], 0x1) sendmmsg$inet6(r6, &(0x7f0000000340)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000002fc0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000500)='}', 0x1}], 0x1}}], 0x1, 0x0) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r10, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="6501000014"], 0x188}}, 0x0) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) 22.351086748s ago: executing program 0: syz_emit_ethernet(0x3b6, &(0x7f0000000800)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf00", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f019"}, {0x21, 0x7, "b8a3e100908f61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015ca83747357a027450004000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 8.271472594s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000240)=ANY=[@ANYBLOB="180000000008002b000000000000000018040000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00'], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000240)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) shutdown(0xffffffffffffffff, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x0, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000080)={'wg2\x00', 0x0}) sendmsg$WG_CMD_SET_DEVICE(r0, &(0x7f00000008c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="740300", @ANYRES16=r1, @ANYBLOB="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", @ANYRES32=r2], 0x374}}, 0x0) 8.189685289s ago: executing program 0: syz_emit_ethernet(0x3b6, &(0x7f0000000800)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cabf00", 0x380, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, [{0x0, 0xa, "a78ce54006598080a8030037004023493b87aafaffffffffffffff23732472eefa45ad96579269748e254c1e4a8a8b3f0ab0c430d3be27df3e34066d42ca0a5c15b37adac15084dbaf736b41e5af2502"}, {0x0, 0x1, "000000050000000026000400"}, {0x0, 0x18, "fe906d26efe39393fe08f73eabc5977b1190a3a6ad8338f1511cdd10c35d8f6de79fc7fd175f75649fa368a32c829af02d7f44d92324a7051e460a13ddde25a5b85b9d930914625d8a049b4cf0d129806a610ad8477a2499a9a0527f75b655a6653d0363a979acf93f88eea07d68423e90280409de1657275f716a2bf2915d1783e8eb477b0d1170f0ecbdef4c23e1b76e9ab3d2fbe4b34438d2a77577edd0ebed9682b851b380ae0cab282af9d7ebe668177704c5fd4698c934de4731f3f61effc978"}, {0x0, 0x1d, "06aa85616177c41bc943afcb84619755403946b0730a18d5c38cf7dcad830f2dc8674b87ba8b58f81ece27975cc39e595e9af90b4fe92a38d25551c2d9ebfc5dfc5a2a501b7e483de3f808895c5f4a1a2367bc591dd8b094822ff0dea07c9a1f643c822a18b79f7c5eba31fb68b2d734a6671e27182aee96f24a4a5cf390dab23b500b0c0272479611e4f7f4299ec4d926d443367b105185e6ecd9602ba95392343e9bbd047ef6bc1ba42399907ccd0a562db212baa39eb8164e240069f656d3a05fecf894222a141123f5ac010000000000000090aa235a670670ffc5dc49dfb58d00000000000000"}, {0x0, 0xb, "17dcea46805d4809c20547406b18901b0aeff04c0300f3c75dc2d227a83b89483b1084743475671545e65eb2e9ac946a3f0e2bc4619f91394c02bcfbbb7d71138537d68e2d2c6393a9f3becd1a9f51a948b5b303f4f019"}, {0x21, 0x7, "b8a3e100908f61640000000200fe80ffff00000000000000ff0bc0fe00000000008879e66485201a0015ca83747357a027450004000000"}, {0x0, 0x14, "5e14f0e74d2d42cfb3f27fafb60845f90b6dfc2e37bc87c6905bbc94d33e1ea71a28105f543e868a8a53b360a9d33e2b1e26eb1d18065daa7628cf9ef083611c9f6ae2e1eb3d8bf9c6ab2642c4808288e62afbf03269f1f98aea6ab3beb5fdc5fdaabc2c676d8800871a6aa54155dea2d995cb22c9924e0ad38c6967052cc7786d779b8353aac33a57d79b05613a12328f61129017fb632dbf04542188b196e213408c"}, {0x0, 0x5, "d5170000dce9674a36da018dff16e70b8b14c4b7a94fe18e88605aa6be1a02a326a6bce65f81ed"}]}}}}}}, 0x0) 8.099085737s ago: executing program 4: socket$key(0xf, 0x3, 0x2) r0 = accept4$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev}, &(0x7f0000000040)=0x1c, 0x80000) getpeername$l2tp6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={""/10, ""/2, @multicast2}}, &(0x7f00000000c0)=0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x20, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1, 0x0, 0x7}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x400c041) ioctl$FS_IOC_RESVSP(r1, 0x40305828, &(0x7f0000000200)={0x0, 0x0, 0x8000}) r2 = socket$inet_dccp(0x2, 0x6, 0x0) bind$inet(r2, &(0x7f0000000240)={0x2, 0x4e21, @empty}, 0x10) ioctl$EXT4_IOC_GROUP_ADD(r0, 0x40286608, &(0x7f0000000280)={0xff, 0x9, 0x7fffffff, 0x4, 0x2, 0x81}) r3 = accept4$ax25(0xffffffffffffffff, &(0x7f00000002c0)={{0x3, @bcast}, [@rose, @null, @bcast, @null, @default, @remote, @netrom]}, &(0x7f0000000340)=0x48, 0x100000) ioctl$FS_IOC_RESVSP(r3, 0x40305828, &(0x7f0000000380)={0x0, 0x1, 0x6, 0xff}) write$binfmt_elf32(r2, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x8, 0x0, 0x7, 0xff, 0x6, 0x0, 0x5, 0xfffffff7, 0x36e, 0x38, 0x9c, 0xfffffff5, 0x8, 0x20, 0x2, 0x3, 0x3, 0x1}, [{0x5, 0x4, 0x1ff, 0x1, 0xf, 0x0, 0x1, 0xff}], "951796bca6845b4c43607c61b2b22cf36683f0d04c9588f8cab94e17d2ae8f44ad1b127331ca044537c900c3ee21f4caa9925496254f12b9dac2f3caf01b8d87f024fffa3ee445e314da2ee6bb7a1fa4e210bfd966de4e254fc520fa39", ['\x00', '\x00', '\x00', '\x00']}, 0x4b5) r4 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r4, 0x84, 0x9, &(0x7f0000000880)={0x0, @in6={{0xa, 0x4e23, 0x7, @remote, 0xc6a}}, 0x0, 0x0, 0x6, 0x7f, 0x3a, 0x1f}, 0x9c) setsockopt$inet6_IPV6_DSTOPTS(r0, 0x29, 0x3b, &(0x7f0000000940)={0x29, 0x1, '\x00', [@padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1]}, 0x18) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000980)={'dummy0\x00', 0x0}) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000009c0)={@ifindex=r5, 0xffffffffffffffff, 0x32, 0x10, 0x0, @prog_fd}, 0x20) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000a00)={0x0, 0x54c}, &(0x7f0000000a40)=0x8) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r6, 0x84, 0x7b, &(0x7f0000000a80)={r7, 0x6}, &(0x7f0000000ac0)=0x8) ioctl$FS_IOC_FSSETXATTR(r0, 0x401c5820, &(0x7f0000000b00)={0x2d40, 0xffff00, 0x4, 0x401, 0x1}) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000b80), 0xffffffffffffffff) sendmsg$IPVS_CMD_DEL_DAEMON(r8, &(0x7f0000000c80)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000c40)={&(0x7f0000000bc0)={0x64, r9, 0x10, 0x70bd2b, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x50, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_ADDR={0x14, 0x1, @ipv4=@remote}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x7}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e23}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0xffffffff}, @IPVS_DEST_ATTR_TUN_PORT={0x6, 0xe, 0x4e24}, @IPVS_DEST_ATTR_PERSIST_CONNS={0x8, 0x9, 0x4}, @IPVS_DEST_ATTR_U_THRESH={0x8, 0x5, 0x8}, @IPVS_DEST_ATTR_FWD_METHOD={0x8, 0x3, 0x2}]}]}, 0x64}, 0x1, 0x0, 0x0, 0x44000}, 0x800) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d00), r8) sendmsg$NL80211_CMD_AUTHENTICATE(r8, &(0x7f0000000dc0)={&(0x7f0000000cc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x34, r10, 0x8, 0x70bd2c, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_SSID={0x20, 0x34, @random="1871e07df688e55a9742cab1aa79f8449ceede1f161baa39fc5f540b"}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000080}, 0x10) getsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000e00), &(0x7f0000000e40)=0x8) pipe(&(0x7f0000000e80)={0xffffffffffffffff}) r12 = openat$cgroup_ro(r11, &(0x7f0000000ec0)='memory.events.local\x00', 0x0, 0x0) sendto$packet(r12, &(0x7f0000000f00)="b6c757d663d049409c33cc3912b2cc6b7ec3875b468305861157756ad4c8ed5cb6d85793fff7af2ec7de09cd497fa55fab111cd7f58e331e7b92eeabb9272706c773a6d7ca0ce5a79ffeecfcdf72ee6ca80e0ca610d5461758ee625f34d219b43750d739c7dcf29bb5f5157c3ef2ff5ad2623c4c6ed8f2bde3f7d8daff5d22fc6ec170957381c3576b1782cc3f378f2a97a3f42c6ad68afc32297204ef0a0f1643798d72c99e8dd2e1bcb61d2229559ad68fcbf5c2c0e3daecca1682a96d6e19c55869d61844375b4db88be5eb752dce3159d1c1f37973487ab38f0bf338887a3133ceee9792d932e803f0d06bdea03e4d0de172f6d355f12f25564c228cad069d348f02dea71fe6529cdd9a68150eb9c48a66e5bf1836585e547bf373ec2b592e08c1d1d47d4f2daaa4942c0b377295ead7d9d53a87cf3e49c36c5266c3557a18b3c357fb4a432a3422faa22daa3da1c082538257b47ba2927aa0dec0d1011db23d5c6c12dcfc9f07fc00fd26c19d1dbb75831fd53b36eb6a86fc6aa46757a3ec96d324c9747d77cf8ff05a8c105d0689e730dc668d3e6a06c50ca55d9a4cd99f71c900b0afaabd8e7bba5663bd5ecc4acf30d155171440349501dafb39766826fda76650eba3eed703aecca525974c8f15c588cbefd337ff0e55cd02d735c79dd8af3d839c62262ac4631e5848c137910c3348060973562970e94a67aea851e9c605250fe5b275084acf904881e1b8bbdfa97172bb933f7ce5fdc91042ffda7c59eb8c62cccd96a66152a72e88f68ba16bb264fd5d72f5bcad86f63272ba16776dfbe17e47654fa0d04fa5b7a63f0af25346d3ed715a91d6347319ae15f5f4681758b753a1f517d65eb4b3908c3d80e13a99a3ef18620df77c66d5c6141e54f6130983168469feca735446e94ac702b4086ec8b2fc93f809be3aaa82b317247930befbe84b34de68f2c2eb184b06f4e7ab18d9d6f7c702abf0dbee297d71951d2109f7ae47b2ca354a1240cdfb9449cb6249163e42a887e6b0ddad29c721050dffab380a8e473f4f81db94059201cd6b910519140d9995509cc85229675f05b01f7efce793db5412df8d0b73bd487fe1b4bcc7e6f3bf9e3f1ecd79feb79aa71025b5c1b5aa17e1f808cbe83e3d1031344e1bdf06d514474a356c45dfb70228bf705a4af7d6905af8ac7df2d4d3b1082359e0f2b4d4399475f71c713264addc3f8156247b0c58ad2db3cfdc2fbccfba7ecffc17d08af9546c5152289fbbe66b88a20b6d203f460db28ba9720d38a9082bcfe9430ae6c3b3c137c5ba093ec5dfb6775f6a13f527c71b04606854bf55d7a6cdb315af64eec65909d082bd1a69b93243182bb5d297ceffaced02b0c79a2d0ba041de32e4331d5132b4b7a7249e80df9e87138abbba7816d60b69be86cdabec3edc11c549f84e055b27382f516ba03f3492b6c9beca27110af32c108734a9d5e1f1d414fcd410ea14ba8944ea266f7d891a0cb28ae197a2eeea739e95042abdd5ae80b188e216f04dd6cdc07405ae09e38b9e7b69fc3f0cae53c48ea0ee9434f2b961546a2cb9cae2f7e5a07d259ace297eefd7664941de448765f3131c68bce9f3c8e00f4cd4922b7cdf1e2e974c146a5c5fe49d20a0b5bef980b0964787d73b0709cb923402ba3981dbe4c74f217626b0688b6f35638411dc7d614949b733fc4b4cdb6d87fdfb8f1e0f7d4ab4beefff8406b6a57cc5250dbc610ffa9a4af3cce6084318e08e4b6582b316ce1b9041142458639ce2fd91a5789d026e2753884e67390f1eb4c43650808d1dd5ab47dcab39c45dfa276140c74740833546524c570d69ae90c17618ecf81ca9811d51cbded89f1bc7c6095afd548784d933f2d1c79f594e5b11c8477f9b143ac09b112a680eb80ff9c83198cbe2db60c141703f0ffd9fab15fe4cdbd4007d2beda69fb4b3efa1f52fbf3f9958ed6aa3e9fc074f8af165e29705885facbe851d8ebb2c8e71aaa872f7f045dd5d14ba1d2e5fcc9a2f496235f8e56bd52104d838b3be06f83186fee05ced2daf372b55af95cf737a5619653cc403aa5aa0830ee20e2689398920c759341ab5b0ca6b4dcc4d05328deb175491b0f9e81777355b1df56623edff39064789259319f4d78fecc0d746602a582e3e2650a434576082dcc74eddcbe8b87a2f36e5d0c897b8d54d72ad51148fc0e9294cc1806a114a055aedee79966582c33b455fc02205eea8e344af28f20dbc0b844ee4183b0eb5fcab2259139158da2a1508d3289e52e95a9b086c88500679d4010847cd8cc004112dcb6280a4d2c5c65e763d0f56ce0010045f977b80a587049dc940aa5353e13255ca587a906a97a4efc42ea7774a1f5c1b21b878023cf15c31550ee092b32bd42f22dc69af25cdc5cb3137f11929e692792747f3f9b293da680d16b70fa61dccd2d42f9e9cf946f0cc8606e2efe2067622ff76e2722d5200d6a609ade02caa897b6399199de94bfbf2b150afa610f8e5f2657d3d5ef40905997c8ce0cc9bd0bc573be14d6c1192e39e748ad4b611d4c1cb257f81d9173494e8b633e15fe6a6361f01319c519996778fa511e68e26735afff438e2457d6dc5dc1cd3ab26a5b90477fed5f03c166520a7674c75bdb4acb76ad376e261f892e948cacd0a781fdf0730464f48338acbd7ce29698894d4008846741eafd8b23b73571fec55fc4febaa9221b1625a5944a3cb64d39aa8a8da660b88bc2a412fc3e5ff008c7527125f5a1db633e2e010f50055f986a6ac748f8b9670931c78adc579dbca7d13c61aa6117f1fc6fba6e953880a284daf10fd11c0b5cfdc7e288d5e2987d10e668fad682305dd2c04531dd5c5f8c7ebe60bf5e7c7b8db2f3348e74b80f4d81d26d0abe83199b06b766fe5f3e96186aa3b18f8f0805126ae5ca48577cea8a21fe5753a20b6cff2afb90bfade8ec8026be4accb3472832434be8868ee2728888d285ec382904f661725e17f83b54f02afed9ffe34a5c44e45361a9445a346f70c80cc1e36887fb9b041ca1a73c2202d9a95a131f42d7add9864d7f473f4238faad39adfd95a7535edb5145a7677b8b6df0f5beaf8cfee4249a3701664c8f1af7c0ea95da48689659c4d831b59d8eed3282bc8106dfb62893e83e85ae4f6099cc61367b085bc57f8f137ef3e7323ef18dad3e2c72bab71179b47a12eedf1524ad3a103f22f668a0e496de8c0324dedb57986b1af0a8345bd562e414579061a06a87e9a36c917ea9545df5815ad17b12cca3650b63d6258e0a3652802c05bf7773eb9e235c4c35481c54a55ea764354ae850fc77bb142b646d521e65dfbb434d1b04c105655b0d61c3dd1a7d364e1d97937343957a974f5cda3761aeb851d32dbe27c8870ba8be1a69cb147ad78e318d0ccc292a1df02aeff3a8a58ffaf5b79530efa7c4867132eab7ae9fd6d6b0299357638fa0d39d94fad183332822052948c6106b415ef6fcdc43386b9d5370c303d253ac356150f59ff47fe461605a2a3bbdea14aa8179d41b1d2720db332b32072255be76838cc3176a7c9ea2ab1cb42db6dd622cd72becc227af6a1e5d1b85525e57b49dd583bef47388a9caca5324e7a2ba0981009283978a0373f3646ceffa0ad54f329c260877db2be8c1e8e88e12e3f9051f6c8bd821fdc4a4f7c8bca8444274eb6f3f679923100eed8b413fe15631414bd2f9fb620e24b283fbc22f37c20b8bb41f81e0e8b054f86b8f25358b9f6a008df218842256143125c0dd5e7a3dc17fa7479f00cb28f024037be7b208637b541fdb258aef45eb94684368d775ee537bac5b1baeb3862690351ec95948b265ed4fc7c9e893f66d3f9b2b6376f5443790104e8bbb4be12fa4e1afe797d043cbef258f9df95c80a411219b9d825cf3d5180d33ed5917bd915aa6681a85642cb46bf3ac0c2ae021e2bbc2460a26a8222eac8c01b9c600016c5ea0d05aec268d2338fd8ee64e2a08b94bba6f685940577a5f4b0060c6cb278fc8991242d4f6bc6b3150479e61a5879b5a1fc00417ea0bc0222587ca13ad41e677d783c6ddd1557e62a41e65a8187dc9ee9ae0a0101b48ee9c6c4c8b3e47477108c6eb8c23df9249e52f20b1008a3d1e4a89c660a0584832df0bf1c83e023c9c76c151c69cc5ee196f930393c458d77da582aae02d0cf0b477dbcaef50ef4c980a0a47febc2490e3148111a619007763410d6b5cd6e0ec35a972ba6f19457e2ddeee537d36a4b36bf0272bf749c5a5ac441fb93e2914ed0ff519337fc8d9403949a11c8145279de37cec83a52033cf5c31318d284418bb80440cd7499125b1a525e3e44b236f6e4289fddb08a6a25339c7fbf4412de008d0cf6e5eefebee2e88adbd2ab982850e418ef9cc8a34d1d84ea093dc4d74dc290219b7d3d46179000439fccaecb84590d9225f0ca3a6e5d4e14086349f5c202fad230089a2149c8c0673b95533c507be02f82d6cdf0ed5d14ae50c2b586c2dda778927bb46c9786558f71c62beeec33c4147ee688da0600ff1316e8a0e6ee1186304ded26b2cf778d65b20c3eac1834e42004ad5b6416f040f2bf5cc77267e202c973412f28ed9657fced032a0e8664aecb39b9b4e916f69af539fbba1e76466231347b63cb272b5d9afc0077b368c90411fc03ece6f0ec4e4919d19f407237b099fc7f83268a66a6f814ffad660f67ea8c00bd6cfdd8792e14041475b4077a70e52c879864487d1f81b77d39c2161bbf7f65f0c483c6c923faa394aad16865a264eb2e715a1f27332f508be51a1a1908505b5b40eb4835bcbc67006e184da644d652408c2b3a842338210e120c5d94368aab1e6d7cc2d55d7c0d311be842c721d4e088e23aa265599d4075ef05f28991bc7d0b62cfc4113cf78b7108a98ea836e66cfa88c2ae24677d8b53557efb45f7b0723347a83aab157713bd0e3f60a71eaae4cc6040d88d01cc61771f046c8c8154bb7f5138ccbe7b0099530e30920a919e8b563d950ce0be070a5665867d58dd5c616db7a8599e05b5c5ab034782731081ceaaf9fadbba6ceeee98bd618a8169f9ab17e1142e009ab6cfcacc1b74d3c281b8a7ae0054bb561cf93ce7e0ff3d397258ebfc34bfa342607d4a60ca10e71a10139dec5218ca5dbe0c6ba9fc4a479d712d2680759714ea4647230f26a5d21d481dcff5524663871afaacb2a50f31cfe3b303caf7506e21a2f86520f00deba12d6f9a1c2c5eaa5f384eb9ca433927e01171a82c3057275063db044c3dc783aa2c39ba517960c454dbc33a3c8d039c3a5bd63734f720fd386fe0d5481880f61828b90c559170fb13500c67fa5ebb40d6a181b2bc4d9ded3b528f16fee2e1140413d070ebe9bf224eecc7c441fa63571e0f84133043950cf3d4efab3c549804892a498820871fe704b8c103571b7c6793152e290f0feb1bad2b4ab50b25448c4adc3bda40ceab85fd88bafad8537f229efb3a6d90c5f7efb19018b35b5d27616f6eedbbb723601c3d3e61f4fec89414f81614ff83dd3e6613778facab1c34fbe099f0b14d0bdb3d0dff46f4891f8e8f5f1d058acdcecb75778c2e7060ba1f7f17fc6b4c6713756ff0d8203127370ccc6a071d341ee3f582a503cdf88a32a9db8ccc3fe2034b588b56a1eec01e6656cfd306887aa69aaf1c81bcdc3152893347738d9b63626f7b4336597df2e2a6adb681c44626891766ce77208228503c25dc15b62a64ec5fb3f68b7bc77e1cf06b73d0811e323fb0fafb19da5dcf6ed0a2993e8a0a0dd6df67fc897f284529389990b5fb5e91305b33355e1876", 0x1000, 0x4000000, &(0x7f0000001f00)={0x11, 0x1c, r5, 0x1, 0x8b, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xe}}, 0x14) 7.929525322s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x3, 0xfff, 0x9}, 0x48) syz_emit_ethernet(0x7a, &(0x7f0000000e40)=ANY=[@ANYBLOB="ffffffffffff00000000000086dd60dd690b00442f00fc000000000000000000000000000000ff020000000000000000000000000001242081000000000010000800000086dd080088be08"], 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000005c0)=@updsa={0x144, 0x1a, 0x1, 0x0, 0x0, {{@in6=@ipv4={'\x00', '\xff\xff', @remote}, @in=@initdev={0xac, 0x1e, 0x0, 0x0}}, {@in=@local, 0x0, 0x32}, @in6=@private0, {}, {}, {}, 0x0, 0x0, 0x2}, [@algo_aead={0x4c, 0x12, {{'aegis128l-aesni\x00'}}}, @extra_flags={0x8}]}, 0x144}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x2, 0x2, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r2}, {0x7, 0x0, 0xb, 0x6}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0xa00}, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xb, 0x2, 0x8}, {0x7, 0x0, 0xa, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {0x7, 0x0, 0x0, 0x6}, {0x5, 0x0, 0x7}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x3, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x5, 0x252, &(0x7f000000cf3d)=""/195}, 0x48) 7.696815092s ago: executing program 4: setsockopt$sock_timeval(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) write$binfmt_script(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000f2ff850000000400000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) socketpair(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r3, &(0x7f0000001dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000400)=""/188, 0xbc, 0xdf0e}}], 0x1800, 0x0, 0x0) close(r2) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x0) sendmsg$NBD_CMD_DISCONNECT(r6, &(0x7f0000000080)={0x0, 0x382, &(0x7f0000000140)={0x0, 0xb7ff}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="580000000206e10700000000000000000000000014000780080011400000000005001500000000000500010006000000050005000a00000005000400000000000900020073797a31000000000c000300686173683a6970"], 0x58}}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r5, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="3400000010000104000009040000000000000000", @ANYRES32=r8, @ANYBLOB="0000000000000000140012000c000100627269646765"], 0x34}}, 0x0) r9 = socket(0x10, 0x803, 0x0) socket(0x1, 0x803, 0x0) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) r11 = socket(0x10, 0x803, 0x0) r12 = socket(0x1, 0x803, 0x0) getsockname$packet(r12, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r11, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r13}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b521f}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x34}}, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@ipv6_newaddr={0x34, 0x14, 0x9535393fea6295b5, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, r10}, [@IFA_FLAGS={0x8, 0x8, 0x3778bcbaae6b521f}, @IFA_LOCAL={0x14, 0x2, @ipv4}]}, 0x34}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @remote}]}, &(0x7f0000000300)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, 0x0, &(0x7f000095dffc)=0x8) bpf$MAP_CREATE(0x0, 0x0, 0x0) 7.069504213s ago: executing program 4: bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x19, 0x0, 0x8, 0x8}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000107b0af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) socket(0x2000000000000021, 0x2, 0x10000000000002) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @private}}, 0x80, 0x0, 0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000001001000001"], 0x18}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='scsi_dispatch_cmd_start\x00'}, 0x10) 6.891754899s ago: executing program 4: r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x9, 0x9, 0x8, 0x40, 0x0, 0x1}, 0x48) socket$tipc(0x1e, 0x0, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL802154_CMD_GET_WPAN_PHY(0xffffffffffffffff, 0x0, 0x0) sendmsg$NL802154_CMD_SET_MAX_CSMA_BACKOFFS(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_DEVKEY(r2, 0x0, 0x0) connect$inet6(r1, &(0x7f00000003c0)={0xa, 0x4e24, 0x0, @dev, 0x1}, 0x1c) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r1, 0x84, 0x1f, &(0x7f0000000100)={0x0, @in={{0x2, 0x0, @empty}}}, &(0x7f00000001c0)=0x90) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000040)={&(0x7f0000000000)="bc", 0x0, 0x0, 0x0, 0xfffffff8, r0}, 0x38) socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet6_int(r3, 0x29, 0x1a, &(0x7f0000000100)=0x8b, 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x20, &(0x7f0000000400)=[@in={0x2, 0x4e20, @remote}, @in={0x2, 0x4e22, @rand_addr=0x64010101}]}, &(0x7f0000000240)=0x10) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r3, 0x84, 0x18, &(0x7f0000000100)={0x0, 0xbb6}, &(0x7f0000000140)=0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$l2tp(0x2, 0x2, 0x73) socket$inet6_sctp(0xa, 0x0, 0x84) socket$kcm(0x10, 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x0, 0x84) write$cgroup_devices(0xffffffffffffffff, 0x0, 0x9) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b402000000000000611875000000eff5b70cfa43444f452b17f56788fbaf0aeb000005"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x3}, 0x28) shutdown(r4, 0x0) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000002c0)={{{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x10000}, {{@in6=@ipv4={'\x00', '\xff\xff', @multicast2}, 0x0, 0x2b}, 0x0, @in=@empty}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x8, 0x0, 0x0) 4.17729739s ago: executing program 3: setsockopt$inet_int(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0x10, 0x3, 0x0) read(r0, &(0x7f0000000340)=""/254, 0xfe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x5c, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_FAMILY={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_TYPENAME={0x10, 0x3, 'bitmap:port\x00'}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT_TO={0x6, 0x5, 0x0}, @IPSET_ATTR_PORT={0x6}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}]}, 0x5c}}, 0x0) sendto$inet6(r0, &(0x7f0000000140)="1ba0000016001d0d89fdc5cbdd045798707bed4dca141a780f0f8e", 0xff3b, 0x0, 0x0, 0x0) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="d4000000", @ANYRES16=r2, @ANYBLOB="010025bd7000ffdbdf252100000008000300", @ANYRES32=r4, @ANYBLOB="700084801000010072213a37314985f82566aa242400010034558714857ddf7d3c4dd20d8f31e83750813ddd36af1a3a79a093be591b5fba080002000000000008000200ff7f00000a00010002020202020200001c0006800800050000000000080003000000008008000100feffffff100084800b0001008c040c668f28620006009800010000000400ff000a00f500da8bd33bb3e700000a00060008021100000000000400ec000400ff0008009e"], 0xd4}}, 0x0) 4.084549931s ago: executing program 1: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'hash\x00', 0x0, 0x0, 'wp512\x00'}, 0x58) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000640)=@mangle={'mangle\x00', 0x64, 0x6, 0x5e0, 0x0, 0xf0, 0xf0, 0x0, 0x1d8, 0x510, 0x510, 0x510, 0x510, 0x510, 0x6, 0x0, {[{{@uncond, 0x0, 0xa8, 0xf0}, @DNPT={0x48, 'DNPT\x00', 0x0, {@ipv4=@loopback, @ipv4=@private, 0x2c, 0x26}}}, {{@ipv6={@mcast1, @local, [], [], 'macvtap0\x00', 'ip6tnl0\x00'}, 0x0, 0xa8, 0xe8}, @inet=@TPROXY1={0x40, 'TPROXY\x00', 0x1, {0x0, 0x0, @ipv6=@dev}}}, {{@ipv6={@mcast2, @loopback, [], [], 'veth0_to_team\x00', 'vcan0\x00'}, 0x0, 0xf8, 0x120, 0x0, {}, [@common=@icmp6={{0x28}, {0x0, "c9ed"}}, @common=@inet=@socket1={{0x28, 'socket\x00', 0x2}}]}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0x440}}, {{@uncond, 0x0, 0x120, 0x148, 0x0, {}, [@common=@frag={{0x30}}, @common=@hbh={{0x48}}]}, @inet=@DSCP={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @inet=@DSCP={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x640) r2 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$alg(r2, &(0x7f0000000640)=[{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000140)="b57523cb1a2c90d8acad2e2d98dfc9ea7a5843c3b63b683ced2b3266175599b779617e66e6b3e15c042be90635a2d36160bbf9a2edcacc0bbe015b84150a1928de94397894ff36aa430fc2a0814ba634308d6d0837250dfd1eca5383f9d151449743b1a0c4ffc51242a229c5d6d06f147a61d797ea7ffeda95b76f5623", 0x7d}, {&(0x7f0000000300)='l3', 0x2}], 0x2}], 0x1, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r4 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x18}, 0x18) r5 = socket(0x10, 0x3, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000d00)=@newqdisc={0x3b4, 0x24, 0x3fe3aa0262d8c783, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x384, 0x2, [@TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_PARMS={0x14}, @TCA_CHOKE_STAB={0xffffffffffffff64, 0x2, "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"}]}}]}, 0x3b4}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x13, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@jmp={0x5, 0x1, 0x5, 0x3, 0x6, 0x8, 0xffffffffffffffff}, @ldst={0x3, 0x1, 0x3, 0x0, 0x3, 0x8, 0xfffffffffffffffc}, @map_val={0x18, 0x4, 0x2, 0x0, r4, 0x0, 0x0, 0x0, 0xff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000100)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0xe2, '\x00', r7, 0x0, r3, 0x8, &(0x7f0000000140)={0xa, 0x1}, 0x8, 0x10, &(0x7f00000001c0)={0x1, 0xf, 0x0, 0x8}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101}, 0x90) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xd, &(0x7f0000000380)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020000008500000082000000850000002a00000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000b00)={&(0x7f0000000040)='mm_lru_insertion\x00', r9}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r10, &(0x7f0000000180), 0x40010) 3.864549735s ago: executing program 3: socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) pipe(&(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000002ac0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b072e90080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf58351d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc8734c295cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f244a3c307145452ce64dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa165099c5ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c65070020d7df0abc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a00"/3593], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000100)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x85, &(0x7f0000000000)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0xffff}, 0x90) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r0, 0x84, 0x9, &(0x7f00000001c0)={r2, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x0, 0x0, 0xb2}, 0x9c) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000140)=@raw={'raw\x00', 0x8, 0x3, 0x468, 0x188, 0xa, 0x148, 0x0, 0x10, 0x3d0, 0x2a8, 0x2a8, 0x3d0, 0x2a8, 0x3, 0x0, {[{{@ip={@local, @multicast2, 0x0, 0x0, 'bridge0\x00', 'rose0\x00'}, 0x0, 0x118, 0x188, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'veth1_to_team\x00', {0x0, 0x0, 0x9, 0xfffffffc, 0x400000, 0xffffffff, 0x7}}}, @common=@osf={{0x50}, {'syz0\x00', 0x0, 0x9, 0x0, 0x1}}]}, @common=@unspec=@NFLOG={0x70, 'NFLOG\x00', 0x0, {0x0, 0x0, 0xfffc, 0x0, 0x0, "f2f7b9f28413d9d8ad470ad2b60c45cb4ea6e7bf902bdc2ff8a9304d9f655c746adc0bdc773506378bc2d27efd6abb05175089830cc46186074d7de46d5af300"}}}, {{@uncond, 0x0, 0x1e8, 0x248, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}, {'geneve0\x00', {0x0, 0x101, 0x0, 0x0, 0x0, 0x7fff, 0x200}}}, @common=@socket0={{0x20}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x0, 0x0, 0x0, 0x4, 0x5]}}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x4c8) 3.765296201s ago: executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x15, 0x5, &(0x7f0000000140)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b702000000000000850000008600000085100000fcffffff"], &(0x7f0000000100)='GPL\x00', 0x2, 0xda, &(0x7f00000014c0)=""/218}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0xd) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='\''], 0xd) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x9d}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x14, r4, 0x5abf7901103d9bd3}, 0x14}}, 0x0) r5 = socket$packet(0x11, 0x0, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x0, 0x8, 0x13000000, 0x0, 0x1}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000500)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x98}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) socket$inet6(0xa, 0x80001, 0x0) 2.237166687s ago: executing program 1: r0 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RESET_STREAMS(0xffffffffffffffff, 0x84, 0x77, &(0x7f0000000000)={0x0, 0x5944, 0xa, [0x3ff, 0x59, 0x200, 0x5c, 0x8, 0x800, 0x6, 0x21c4, 0x2, 0x3]}, &(0x7f0000000040)=0x1c) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, &(0x7f0000000080)={r1, @in={{0x2, 0x4e22, @broadcast}}, [0x1ff, 0x7, 0x1f, 0x162, 0x1f, 0x0, 0x65dfbd2a, 0x200, 0x5, 0x7ff, 0x8, 0x2, 0x7, 0x0, 0x200]}, &(0x7f0000000180)=0x100) sendmmsg$inet6(r0, &(0x7f0000002440)=[{{&(0x7f00000001c0)={0xa, 0x4e23, 0x20, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x5}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000200)="fc9911a7bb39033702de3dfe7ed59ac44b508f864fa736527c478ad2e0a2ca6310dce2163d0a1cebf7f162876b47ec40cc106b61a7806a6ffa47ba40f4a98a139630ba7b0c726f0932bfe9caebaf85169491fbe95fb0c37f759e7c8682bc39667a4ba234135f32058e3e42953dde30f10f9bc0f30fc7e74abd5aaea286684737bea220e663b3f975f5d51b461225294fe06211741516f2a068bc6820dd9e6f2bd9dbe6a4cf02413abec95fc53cec3c6039a4ed73af4cc967959d2a47d1e3ab4632558bd8338fc4ea", 0xc8}, {&(0x7f0000000300)="0f796867b534e3a6812bd2b4145665c1082def7d25bacfb82e30a9602da9bf981145f473808ec4a17e84d0019a5df45baaf2903e61630236bcc37e09a8c0c86211d1c6bd0d11b8ff939141ce13ef6a755f7ba01715ba0ebd8c8b2dc3bc3be5337b75e0a847dfdd88b5aabf4113e8d2fc4b24acd351407576e69ef8f532fecd8c6740874872371c5769cb59dc0b961451db0ecc41be453932f55cad4655786635de", 0xa1}], 0x2, &(0x7f0000000400)=[@hopopts={{0x110, 0x29, 0x36, {0x0, 0x1e, '\x00', [@calipso={0x7, 0x30, {0x2, 0xa, 0x3a, 0xfff, [0x6, 0x7fffffff, 0x9, 0xef78, 0x7]}}, @generic={0x3f, 0xc0, "653cde3262156e0feee19591535115764e51897cfaff59b4902ede8d3c03840a9462e75bee115d48bd5a91291800a5d7733dee3a09e24b4605ebbecc9b90e022f86664dbfe5cf31389ef644231892381b14481c4e57d6fa27f4d8c67b79ebbb50bee61dc8b01e876bce14f7e37e03cc982040c779cddd828e2c038fe270c2ffe8d013d147ac68c039173e63145cf7401142d2691e95877004fed860ba24195c867fd03e513a001caf6cf16ab0a1d677fd6cd8faf4f440b48c413a3ce91deead4"}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}], 0x128}}, {{&(0x7f0000000540)={0xa, 0x4e24, 0x1b83, @mcast2, 0x100}, 0x1c, &(0x7f00000006c0)=[{&(0x7f0000000580)="a58cb690795bcfd3b8f37659d6fe86ad1d6fa77cf85c36774bf2e071bf87a9983de7bbbf4871fa66325c0f167bfe47e8f91898dc6110440241c897e18f570c8c2fb96d099a19a79ff6c6d7f9", 0x4c}, {&(0x7f0000000600)="1bca2f93adb47d2f210d8a9f0dd5c01d85631789e9455dbb1b01b16d034d4843d605d307d837dab858f2a67df0538347ee30be251f215c162e9955ce4c3be5fdddd20c22be56744fef711468d82cded9fb6c742cd1c07eaa0d93ec137e72f106bbf0bb3934954431c21c475fee8e0c1259219a11781d187ed4bd88a5ff36f1735a8d424677a23886b94d1f54cae5c991a8934cbc61fd0bdc565472e280495f338f70c7bd4a9ccc624baf60503a", 0xad}], 0x2, &(0x7f0000000700)=[@rthdrdstopts={{0x28, 0x29, 0x37, {0x2f, 0x1, '\x00', [@pad1, @pad1, @ra={0x5, 0x2, 0x6}]}}}, @dstopts={{0x30, 0x29, 0x37, {0x32, 0x2, '\x00', [@hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @multicast1}}]}}}], 0x58}}, {{0x0, 0x0, &(0x7f0000001900)=[{&(0x7f0000000780)="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", 0x1000}, {&(0x7f0000001780)="ccff0d8447e396b30a88", 0xa}, {&(0x7f00000017c0)="bdd86fafa744f0003f2a425c3ae3a7c37f91017555f93312a71bfbb0e66a2d082e48e5a3584ef1c395c64839133ec4a812cb2dbf46dfda31172f9b9b11cd4191e17e47beb4948c0e8c776e72926144f0a62c348eee408b3a2c59", 0x5a}, {&(0x7f0000001840)="2b80aee1", 0x4}, {&(0x7f0000001880)="11c1fd6afce6b03c8d3d98cfe7db4c016986d9fb868ca8cb8147d56e8e2f3ddcc7546ea8999f9e3747b132d1c4d8d2bc465e99e075ba99d7dbdca3ce5286aea43330448cbf9a9b16a1e51e540c9bf21e9e07815d5ea74a520f82aa6e85d138a71f8aa0d144e9928b330de2822ecfd9581b512351698f4c6534de7a8e66aa", 0x7e}], 0x5, 0xfffffffffffffffc}}, {{&(0x7f0000001980)={0xa, 0x4e20, 0xffffffff, @ipv4={'\x00', '\xff\xff', @loopback}, 0x5}, 0x1c, &(0x7f0000002040)=[{&(0x7f00000019c0)="92973bee22dd9f19cc6f83abb821718159569aada668e4ebabb5dbf00a586a27edd794f9712fcb8bf0193f789f7d4c6bdb6e77f7b1776f4f1a80ab9849a26ac74c94d3e06141defa3e484169b0edf6002a2f39ffa57c682782bb99475ab7043318d6c7bf8b572d93608734c943ad3e5852e4fb7b120da138eb98f83fb5205e45a70309f869f32bc52a1a73a7294fe74b7f1736029e4a3d3638dac3436a94d76593f3de7027b6b93323d940e9d852d454bf2c20fe9ba5b62efb3a7a183b5eb1e2b8c17d103e3071c61ea6ac1698", 0xcd}, {&(0x7f0000001ac0)="0bd26e8af3383a4acf5bf691146a621202e518ad8f14188e59f2929ed3975896982c51bc96973cf744ae0a449bfd3a8b6a5df9fa159bcd1c8618ac1d852d5bec2df476510464a3f1bcc125d6cea2cbded0864c6e083d504d2fce5c615cc1735147c6e197b048b1ddceb55ee6bc7b34579df0fb5e7f1afe5e3b2dc549e96a7d7dde5660d3eee588c290f252c9153b48b4d899dfe044967ca851c518d32a027b83c41a4c1db8be6ad5af5c371a3470b66ca0378754c903d136ff33d10c7e7ac87111d4c24fd8432443f5c6b584746be0c8c9c7d5ea972a", 0xd6}, {&(0x7f0000001bc0)="a64d56a5ae847d91c782ccb0b3f1e68db83744145800b56110ab31c0990fb214ac760855d32e98bd05c2e697172bf852c6722e5d6d5ebb0549af36df61e1d4e96e923d42463b26ead4a25f0b29f48e49f3c96e7a7766ab1d47d184ecdb23fc91dfc5ab29b95247275c7b970297f82cc3d06bbc9f309ce1be659b95dba436e7db4e4c58e3b125faada9de67c02b8eb9dd7b33913fd64fd9fccc2fdbd1c5d29ea03517ba93d81c3b0ed2a1ec051610", 0xae}, {&(0x7f0000001c80)="fa01fcd23810141a4583b08dff5532139e0aeb86bca20a734786492881285e2db6222c952a685b5814bd4c844a5aefefd5d69780db92db172f39cb3953ecb6aacc1baee8411405e4b52390b73e638c362f66726b6c0bf803c67a66ff51dc8547eea80ea9e29d5359860d24de47516dc1827af252b1539a5d8bbd3f62d2", 0x7d}, {&(0x7f0000001d00)="eb2c28b418d59bc6fe2cd9c3dd", 0xd}, {&(0x7f0000001d40)="6d9b7d44b8ded33c4b4d801d9819afadb1fdd219abcf19c845ca16c55c186789dca1c04fcb26d73d466c2aa2091f360cf8000ada9b0a08a46dbac7735d17d26fe603accc06a8b42cf08fce16ef0642d1df60c246c327e0c6566d7bd9bae8ac6f190729976ce8064d88c6720dbc174daa79b2b8ce63879907ccb787d33297013a9a802f58bf65048a6b4ae7537fbb1657ea6cadb7648d2857e24fc39976b0f6ba8e12e39fe6712f3cf0c405fd6119104dd59152ccd87982d676ae53ca988f197cf4b5852c6520", 0xc6}, {&(0x7f0000001e40)="a4091979cf56df0044a1bb1f45a4d8e30b11e3a8a3a19d1b18ab892ca6b79f763ecb8eb3f6ada4dbb6eaa8bf518b21b255c11198d12e1d1969a6f1252aaa5e16d770fe06d21cc74ae2075d0d82a5a826e278d9e747c0fc0357ab57963d969c95f67d07abe9d09ecef1fac1052d36826f070639551dcbad144ed339725910cb8b04d1f36bb0dd449e44710b880cf16462cff0afebd874d50f22a7fe6cadfc82266297706703db76de947f8f42892fd7d274a196094ef71256", 0xb8}, {&(0x7f0000001f00)="158be4159fce4e80fff5", 0xa}, {&(0x7f0000001f40)="3ab1cb3a7dcba02047ef1e3b5b0962afce1dd2b1123606bea37b5153532c2a4ccde93379e33d5f18c289d89b024e270869696f07e64b24c27cc464b2250d147df188be3d7a3ab0e96932086eabe3f5eaebcb5e5d2ab8ec5e2d33920b06d158bf47add5f288ffcb5cc3c316e9a3e5827b7337c63a9a69ba5b7d8e15fd4f7cfb38c852e8052b0f6082a78eae6292084b2dbc4d736806856c238de2cab66d8eaea511008ef4ea971ca9b9d4c45918aa5218c044ab159f8bc240ae69d834a02ab6d93d02ec0f0e1f0ef765c7ae4a7d764be01b892ae95b483cb1e3ed89c99a8526d2e23b52cd8676414c3c27f488ce8db8179fe44bb51ac775", 0xf7}], 0x9, &(0x7f0000002100)=[@hopopts={{0x50, 0x29, 0x36, {0x89, 0x6, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x1f, 0x7f, [0x101]}}, @hao={0xc9, 0x10, @loopback}, @jumbo={0xc2, 0x4, 0x10001}, @pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @pad1]}}}, @tclass={{0x14, 0x29, 0x43, 0x833a}}, @hopopts={{0x118, 0x29, 0x36, {0x32, 0x20, '\x00', [@hao={0xc9, 0x10, @rand_addr=' \x01\x00'}, @generic={0x7, 0xda, "c037cdf6a1ee17db4a50f7fbb360a794ad4a47244104a5fad1bdb2c48402cd6197a230eb85819b3c21c6a94301c05f6ba3e6944622c5f08f62c1252ff9f1bb14ce3f0f3fbd70e068af4726a417cc70b0bdf4b7087091c7048bc0077db9710890cf776db80dde697734708a6d570aaac6509a2d35ab890d5b754888bb07bd8609036803fda0c13d1702bf01aa63bd4420802f2816b96c36e56764cd816645c12ee77996ac8e046f1f29bdd4d08997887d7e39d29063220b38c944d2dd596c5ba91260e978ec9d367c4a366cc880ee6f3ee699f06025e9bb55a15a"}, @calipso={0x7, 0x10, {0x0, 0x2, 0x1, 0xfc00, [0xffff]}}]}}}], 0x180}}, {{&(0x7f0000002280)={0xa, 0x4e24, 0x1, @loopback, 0x6}, 0x1c, &(0x7f0000002400)=[{&(0x7f00000022c0)="21da94e6fb036a46ca4c58dab78ee529ca4fed632057e2457884c4f0e125edeaeff80dcee7b19b7f6a5442228c403eb77319fc702b0d2d54d660778481ddb3193a5d277e21f9257d3d47f68ae1335c2d13fa4cb12b4961387c323143217b3036942fb360ae5bf45b2dd59770fa3d96aac77c903eb0caf274258cb53576e6d11e8b312ca08939f940c9a39e675a1cbba517bc51265ef50c72683453251aefdd7316c66089b2737d7b5ae29d31fa28fd02f373415f383c997d0d2ebd277fcbc50d8e9deb88ac851b", 0xc7}, {&(0x7f00000023c0)}], 0x2}}], 0x5, 0x81) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000025c0), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000002680)={'syztnl0\x00', &(0x7f0000002600)={'gretap0\x00', 0x0, 0x700, 0x40, 0x1, 0xae, {{0x9, 0x4, 0x2, 0x5, 0x24, 0x67, 0x0, 0x0, 0x29, 0x0, @empty, @private=0xa010101, {[@ssrr={0x89, 0xb, 0x29, [@initdev={0xac, 0x1e, 0x1, 0x0}, @loopback]}, @ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$ETHTOOL_MSG_WOL_GET(0xffffffffffffffff, &(0x7f00000027c0)={&(0x7f0000002580)={0x10, 0x0, 0x0, 0x934e7fc0f9b86cb3}, 0xc, &(0x7f0000002780)={&(0x7f00000026c0)={0xac, r3, 0x300, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bond\x00'}]}, @HEADER={0x54, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}]}]}, 0xac}, 0x1, 0x0, 0x0, 0x4000}, 0x4048810) socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$bt_hci(r2, 0x0, 0x2, &(0x7f0000002800)=""/4096, 0xfffffffffffffffd) r5 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000003800), 0x2, 0x0) write$cgroup_subtree(r5, &(0x7f0000003840)={[{0x2b, 'cpu'}, {0x2b, 'perf_event'}, {0x2d, 'rlimit'}, {0x2d, 'freezer'}, {0x2b, 'net'}, {0x2b, 'cpu'}]}, 0x2c) r6 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r6, &(0x7f0000003880)={0x1f, @none}, 0x8) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000038c0)='./cgroup.net/syz0\x00', 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000003900)='cgroup.freeze\x00', 0x0, 0x0) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000003980), r8) sendmsg$NL80211_CMD_GET_KEY(r8, &(0x7f0000003a40)={&(0x7f0000003940)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000003a00)={&(0x7f00000039c0)={0x34, r9, 0x100, 0x70bd26, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0xb53e6a7, 0x9}}}}, [@NL80211_ATTR_KEY_CIPHER={0x8, 0x9, 0xfac01}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x34}, 0x1, 0x0, 0x0, 0x4840}, 0x0) writev(r2, &(0x7f0000003a80), 0x0) bind$802154_dgram(0xffffffffffffffff, &(0x7f0000003ac0)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0302}}}, 0x14) getsockopt$inet_sctp6_SCTP_NODELAY(r8, 0x84, 0x3, &(0x7f0000003b00), &(0x7f0000003b40)=0x4) write$binfmt_script(r2, &(0x7f0000003b80)={'#! ', './file0', [{0x20, '/'}, {0x20, 'net'}], 0xa, "4165cff3cd6cb2db1b77bb6cf19709d2d137f4935b57b50d5a50ed901da0500c41fc30fdd3add8e06278e4e74e3d999164142b3b2767b0bcaa1f65255efe26035ba5b33d667021cf505c31de468b79f1c2d1e9ebe8d306db8090103206e15d1a3519283cd7c15d80ad35408048d0de6579692a36fec05015eeabc6c7bf5e"}, 0x8f) r10 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r10, 0x6, 0xd, &(0x7f0000003c40)='reno\x00', 0x5) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xa, 0x12, r8, 0xa8098000) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000003cc0)={'wpan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000003d00)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r11, &(0x7f0000003e00)={&(0x7f0000003c80)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000003dc0)={&(0x7f0000003d40)={0x4c, 0x0, 0x4, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r12}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5, 0x13, 0x1}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r13}, @NL802154_ATTR_LBT_MODE={0x5}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x4800) 1.240906966s ago: executing program 1: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x90}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x0, 0x0, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000e2bac15d3b6641a215f099e26603a050337b2ccc70a9f928ba3c529bb6e7365e7e246317380f5884d79663e7fcaa89795d7b10e88378c33265a7af06040e3d0bbc6a5864dfa023c6ac1da574242785bbb4ece12b11da52496875e1e384042aad63a3094bf3bc0e40"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000180)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x0, 0x9, 0x1}, 0x10, 0x0, r5, 0x2, &(0x7f00000007c0)=[r5, r5, r6, r5, r5], &(0x7f0000000800)=[{0x0, 0x3, 0x4, 0x3}, {0x2, 0x2, 0x1, 0x3}], 0x10, 0x5}, 0x90) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r9, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) socket$key(0xf, 0x3, 0x2) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e40)={0x6, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0xd, 0x11, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018160000", @ANYRES32, @ANYBLOB="00000000bf91000000000000b7020000000000008500000084000000b7000000000000009500"/48], &(0x7f0000000c40)='GPL\x00', 0x800, 0x12, &(0x7f0000000c80)=""/18, 0x41000, 0x18, '\x00', r11, 0x27, r5, 0x8, &(0x7f0000000cc0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000e00)={0x3, 0x2, 0x1, 0x2}, 0x10, r12, r2, 0x6, &(0x7f0000000e80)=[r5, r6], &(0x7f0000000ec0)=[{0x0, 0x1, 0x6, 0x5}, {0x5, 0x3, 0x10, 0x9}, {0x2, 0x1, 0xa, 0x6}, {0x2, 0x2, 0x8, 0xa}, {0x0, 0x0, 0xc, 0x4}, {0x4, 0x3, 0x2, 0x6}], 0x10, 0xffffffe0}, 0x90) r13 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r13, &(0x7f00000000c0)={0x1d, r14}, 0x10) r15 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@ptr={0x8}]}, {0x0, [0x30, 0x2e]}}, &(0x7f0000000540)=""/121, 0x28, 0x79, 0x0, 0x7fffffff}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r0, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000b00)=r3}, 0x20) r17 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x0, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x7}, @generic={0x8, 0x3, 0x3, 0x46e9, 0x4}, @alu={0x0, 0x0, 0x7, 0xa, 0x0, 0x10}, @alu={0x4, 0x1, 0x9, 0xa}, @generic={0xeb, 0x8, 0x5, 0x4, 0xba4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x81}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x8000}, @kfunc], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x6000, 0x0, &(0x7f0000000440)=""/15, 0x41000, 0x0, '\x00', r14, 0x0, r15, 0x8, &(0x7f00000005c0)={0x6, 0x3}, 0x0, 0x10, 0x0, 0x0, 0xaebc, r7, 0x0, &(0x7f0000000b80)=[r2, r16, r5], &(0x7f0000000bc0)=[{0x4, 0x3, 0x5, 0xc}]}, 0x80) r18 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000001000000000000000ee2559009500000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x80) r19 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='sched_process_wait\x00', r18}, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r19}, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r17, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 1.0224888s ago: executing program 1: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) (async) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x24}}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x38, 0x0, 0x1, 0x0, 0xfffffffd, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg0\x00'}]}, 0x38}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x38, 0x0, 0x1, 0x0, 0xfffffffd, {{}, {@void, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_4ADDR={0x5}, @NL80211_ATTR_IFNAME={0x14, 0x4, 'pimreg0\x00'}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00'}) r5 = socket$netlink(0x10, 0x3, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) write$binfmt_script(r7, 0x0, 0xfffffe5d) (async) write$binfmt_script(r7, 0x0, 0xfffffe5d) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r8, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64"], 0x3c}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000880)=ANY=[@ANYBLOB="3c00000010008506000000ff0100000000000000", @ANYRES32=r8, @ANYBLOB="01ff00e1c2ed00001c0012000c000100626f6e64"], 0x3c}}, 0x0) getsockname$packet(r7, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000004c0)=0x14) socket(0x10, 0x80002, 0x0) (async) r10 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r10, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @vti={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VTI_LOCAL={0x8, 0x4, @remote}]}}}, @IFLA_MASTER={0x8, 0xa, r9}]}, 0x40}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x10, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4c, r8, {0xb}}}, 0x24}}, 0x0) (async) sendmsg$nl_route_sched(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000180)=@newqdisc={0x24, 0x10, 0x1, 0x0, 0x0, {0x10, 0x0, 0x4c, r8, {0xb}}}, 0x24}}, 0x0) socketpair(0x1e, 0x1, 0x0, &(0x7f0000000080)) bpf$ENABLE_STATS(0x20, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x8, 0x13, &(0x7f0000000040)=@framed={{0x18, 0x2}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0xa}, {0x5, 0x1, 0xb, 0x1, 0xa, 0x6}, {0x7, 0x0, 0x4}, {}, {}, {0x85, 0x0, 0x0, 0x89}}, @printk={@li, {0x3, 0x3, 0x6, 0xa, 0x1, 0xfff8, 0x51}, {0x5}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r12 = openat$cgroup_type(r11, &(0x7f00000001c0), 0x2, 0x0) write$cgroup_type(r12, &(0x7f0000000280), 0x9) openat$cgroup_procs(r11, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) 751.606319ms ago: executing program 2: bpf$MAP_UPDATE_ELEM(0x2, 0x0, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x900, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="6400000002060108000000000000000000000000140007800800114000000000050015000e0000000500010006000000050005000a00000005000400000000000900020073797a310000000015000300686173683a69702c706f72742c6e6574"], 0x64}}, 0x0) 732.059963ms ago: executing program 1: socket$kcm(0x2, 0x0, 0x2) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) write$binfmt_misc(r0, &(0x7f0000000200)=ANY=[@ANYBLOB='&\x00\x00\x00\a'], 0xd) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='\''], 0xd) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x9d}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00'}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r2}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$wireguard(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$WG_CMD_GET_DEVICE(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x14, r4, 0x5abf7901103d9bd3}, 0x14}}, 0x0) r5 = socket$packet(0x11, 0x0, 0x300) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@bloom_filter={0x1e, 0x0, 0x8, 0x13000000, 0x0, 0x1}, 0x48) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000440)='blkio.bfq.io_wait_time_recursive\x00', 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000500)) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup/syz0\x00', 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb7, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x98}, [@ldst={0x4}]}, &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79}, 0x2a) socket$inet6(0xa, 0x80001, 0x0) 700.719575ms ago: executing program 3: r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFQNL_MSG_CONFIG(r0, &(0x7f0000000240)={0x0, 0x7000000, &(0x7f0000000140)={&(0x7f00000000c0)={0x30, 0x2, 0x3, 0x3, 0x0, 0x0, {}, [@NFQA_CFG_CMD={0x8, 0x1, {0x1}}, @NFQA_CFG_PARAMS={0x9}, @NFQA_CFG_MASK={0x8}]}, 0x30}}, 0x0) 579.083413ms ago: executing program 2: r0 = socket$tipc(0x1e, 0x2, 0x0) r1 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r1, &(0x7f0000000200)=@name={0x1e, 0x2, 0x0, {{0x42, 0xfffffffe}}}, 0x10) bind$tipc(r0, &(0x7f0000000100)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x2}}, 0x10) sendmsg$tipc(r0, &(0x7f0000002340)={&(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0x20000000}}, 0x10, 0x0}, 0x0) 513.291317ms ago: executing program 2: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_subtree(r0, &(0x7f0000000000)=ANY=[], 0xda00) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r1 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$MRT6(r1, 0x29, 0x7, 0x0, &(0x7f0000000540)) 511.594762ms ago: executing program 3: bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) mmap$xdp(&(0x7f0000ffe000/0x2000)=nil, 0x2000, 0xf, 0x72, 0xffffffffffffffff, 0x0) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000000)={0x43, 0x0, 0x0, 0x3}, 0x10) r1 = socket$kcm(0x2b, 0x1, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000"], 0x7c}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) sendmsg$OSF_MSG_ADD(0xffffffffffffffff, &(0x7f0000000180)={&(0x7f0000000100), 0xc, 0x0}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r5, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r4, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r7, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r6, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000d00)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r9, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r10, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) socket$kcm(0x29, 0x5, 0x0) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r12, 0x0) socket(0xa, 0x0, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, 0x0}, 0x0) sendmsg$inet(r1, &(0x7f0000000040)={&(0x7f00000000c0)={0x2, 0x4001, @loopback}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x300}, 0x2000488c) 360.493691ms ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) gettid() r1 = socket(0x40000000015, 0x5, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f0000000240)={'veth0_to_batadv\x00'}) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)={0x3c, 0x41, 0x107, 0x0, 0x80, {0x1, 0x7c}, [@nested={0x28, 0x38, 0x0, 0x1, [@typed={0x8, 0x11f, 0x0, 0x0, @ipv4=@loopback}, @typed={0x8, 0xb7, 0x0, 0x0, @ipv4=@local}, @typed={0x14, 0xc0, 0x0, 0x0, @ipv6=@local}]}]}, 0x3c}}, 0x0) 295.398114ms ago: executing program 3: r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0xd, 0x8, &(0x7f0000000940)=@framed={{0x18, 0x9}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r0}, {}, {0x85, 0x0, 0x0, 0x90}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000040)={0x1b, 0x0, 0x0, 0x0, 0x0, r0, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x5}, 0x48) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000e2bac15d3b6641a215f099e26603a050337b2ccc70a9f928ba3c529bb6e7365e7e246317380f5884d79663e7fcaa89795d7b10e88378c33265a7af06040e3d0bbc6a5864dfa023c6ac1da574242785bbb4ece12b11da52496875e1e384042aad63a3094bf3bc0e40"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r3}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000740)={r5, 0x0, 0x0}, 0x10) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r5, 0x8, &(0x7f0000000180)={0x6, 0x1}, 0x8, 0x10, &(0x7f0000000500)={0x4, 0x0, 0x9, 0x1}, 0x10, 0x0, r5, 0x2, &(0x7f00000007c0)=[r5, r5, r6, r5, r5], &(0x7f0000000800)=[{0x0, 0x3, 0x4, 0x3}, {0x2, 0x2, 0x1, 0x3}], 0x10, 0x5}, 0x90) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000180)={0x1c, r9, 0x701, 0x0, 0x0, {{}, {@val={0x8, 0x3, r10}, @void}}}, 0x1c}}, 0x0) close(0xffffffffffffffff) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf1, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) socket$key(0xf, 0x3, 0x2) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000e40)={0x6, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000f40)={0xd, 0x11, &(0x7f0000001000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000018160000", @ANYRES32, @ANYBLOB="00000000bf91000000000000b7020000000000008500000084000000b7000000000000009500"/48], &(0x7f0000000c40)='GPL\x00', 0x800, 0x12, &(0x7f0000000c80)=""/18, 0x41000, 0x18, '\x00', r11, 0x27, r5, 0x8, &(0x7f0000000cc0)={0xa, 0x1}, 0x8, 0x10, &(0x7f0000000e00)={0x3, 0x2, 0x1, 0x2}, 0x10, r12, r2, 0x6, &(0x7f0000000e80)=[r5, r6], &(0x7f0000000ec0)=[{0x0, 0x1, 0x6, 0x5}, {0x5, 0x3, 0x10, 0x9}, {0x2, 0x1, 0xa, 0x6}, {0x2, 0x2, 0x8, 0xa}, {0x0, 0x0, 0xc, 0x4}, {0x4, 0x3, 0x2, 0x6}], 0x10, 0xffffffe0}, 0x90) r13 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r13, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r13, &(0x7f00000000c0)={0x1d, r14}, 0x10) r15 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000004c0)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@ptr={0x8}]}, {0x0, [0x30, 0x2e]}}, &(0x7f0000000540)=""/121, 0x28, 0x79, 0x0, 0x7fffffff}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000b40)={{r0, 0xffffffffffffffff}, &(0x7f0000000640), &(0x7f0000000b00)=r3}, 0x20) r17 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_ext={0x1c, 0x0, &(0x7f0000000980)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf5}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r6}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @cb_func={0x18, 0x7}, @generic={0x8, 0x3, 0x3, 0x46e9, 0x4}, @alu={0x0, 0x0, 0x7, 0xa, 0x0, 0x10}, @alu={0x4, 0x1, 0x9, 0xa}, @generic={0xeb, 0x8, 0x5, 0x4, 0xba4}, @func={0x85, 0x0, 0x1, 0x0, 0xfffffffffffffffd}, @map_val={0x18, 0x0, 0x2, 0x0, r1, 0x0, 0x0, 0x0, 0x81}, @initr0={0x18, 0x0, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x8000}, @kfunc], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000400)='syzkaller\x00', 0x6000, 0x0, &(0x7f0000000440)=""/15, 0x41000, 0x0, '\x00', r14, 0x0, r15, 0x8, &(0x7f00000005c0)={0x6, 0x3}, 0x0, 0x10, 0x0, 0x0, 0xaebc, r7, 0x0, &(0x7f0000000b80)=[r2, r16, r5], &(0x7f0000000bc0)=[{0x4, 0x3, 0x5, 0xc}]}, 0x80) r18 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000001000000000000000ee2559009500000000"], &(0x7f0000000000)='syzkaller\x00'}, 0x80) r19 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000001c0)='sched_process_wait\x00', r18}, 0x10) bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r19}, 0x8) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r17, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) 234.041594ms ago: executing program 2: bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079109000000000006b0ac0ff000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x7300, &(0x7f000000cf3d)=""/195}, 0x48) r0 = socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0xffffffffffffff40, 0x6, 0xa, 0x0, 0x0, 0x0, {0x0, 0x0, 0x1}, [@NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @xfrm={{0x9}, @void}}]}]}], {0x14}}, 0x84}}, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x7, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r3}}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r4, 0x27, 0x0, 0x0, 0x0, 0x0, 0x1400, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0}, 0x50) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r6 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000040)={'veth0_to_hsr\x00', 0x0}) setsockopt$packet_int(r6, 0x107, 0xf, &(0x7f0000000000)=0xf3e, 0x4) (async) setsockopt$packet_int(r6, 0x107, 0x14, &(0x7f0000000080)=0x5, 0x4) (async) sendto$packet(r6, &(0x7f00000000c0)="3f030e000a0012002c001e0089e9aaa911d7c2290f0086dd1327c9167c643c4a1b7880610cc96655b1b141ab059b24d0fbc50df71548a3f6c5609063382a0c153cfdf9435e3ffe46", 0xe90c, 0x0, &(0x7f0000000540)={0x11, 0x0, r7, 0x1, 0x0, 0x6, @multicast}, 0x14) (async) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, 0x0, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000002100000008000300", @ANYRES32=r5, @ANYBLOB="0600eb00000000000c007d"], 0x30}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=@newtaction={0x84, 0x30, 0xffff, 0x0, 0x0, {}, [{0x70, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x10000000, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) syz_emit_ethernet(0x52, &(0x7f0000000580)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaaaa86dd60ff0cf5001c0600fe8000000000000000000000000000aafe8000000000000000000000000000aa00"/66, @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="5000080090780000"], 0x0) 80.306621ms ago: executing program 2: r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$fou(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$SO_ATTACH_FILTER(r2, 0x1, 0x1a, &(0x7f0000000040)={0x1, &(0x7f0000000340)=[{0x6, 0x0, 0x0, 0x67b}]}, 0x10) bind$inet6(r2, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) getsockopt$bt_hci(r2, 0x84, 0xa, &(0x7f0000000500)=""/4067, &(0x7f00000004c0)=0xfe3) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000002c0)={0x38, r1, 0x1, 0x0, 0x0, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @empty}, @FOU_ATTR_AF={0x5, 0x2, 0xa}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e23}]}, 0x38}}, 0x0) 0s ago: executing program 3: bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x13, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000073000000180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r1 = socket$xdp(0x2c, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000340)='blkio.bfq.io_merged\x00', 0x0, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_NET_SET(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000200)=ANY=[@ANYBLOB="54010000", @ANYRES16=r3, @ANYBLOB="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"], 0x154}}, 0x0) getsockopt$sock_buf(r1, 0x1, 0x3b, &(0x7f0000000000)=""/183, &(0x7f00000000c0)=0xb7) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x17, 0x8, &(0x7f0000000740)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7030000000000008500009500000000000000"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$inet(0x2, 0x80001, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000002c0)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r7}, 0x10) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) (async) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) unshare(0x6020400) r8 = socket$unix(0x1, 0x1, 0x0) bind$unix(r8, &(0x7f00000001c0)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r8, 0x0) sendmmsg$inet_sctp(r6, &(0x7f0000006cc0)=[{0x0, 0x0, 0x0, 0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="30000000000000008400000005"], 0x30}], 0x1, 0x0) sendmsg$nl_xfrm(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000015c0)=ANY=[@ANYRESHEX=r3], 0xcc}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.196' (ED25519) to the list of known hosts. 2024/06/07 12:29:16 fuzzer started 2024/06/07 12:29:16 dialing manager at 10.128.0.169:30018 [ 59.051003][ T5090] cgroup: Unknown subsys name 'net' [ 59.227605][ T5090] cgroup: Unknown subsys name 'rlimit' 2024/06/07 12:29:17 starting 5 executor processes [ 60.327346][ T5099] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 61.381012][ T5116] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 61.390841][ T5114] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.399391][ T5116] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 61.408424][ T5116] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 61.417353][ T5119] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.425594][ T5119] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 61.433363][ T5119] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 61.441317][ T5119] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 61.450124][ T5119] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 61.458742][ T5119] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 61.461883][ T5122] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 61.467280][ T5119] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 61.482228][ T5119] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 61.482633][ T5129] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 61.490632][ T5119] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 61.498213][ T5128] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.504380][ T5119] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 61.512342][ T5129] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 61.518814][ T5119] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 61.525401][ T5129] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.532636][ T5119] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 61.552448][ T5119] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 61.562610][ T5119] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.572178][ T5114] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 61.572904][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.583298][ T5114] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 61.594040][ T5114] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 61.605037][ T53] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 61.607627][ T5114] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 61.619648][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 62.146745][ T5112] chnl_net:caif_netlink_parms(): no params data found [ 62.252469][ T5118] chnl_net:caif_netlink_parms(): no params data found [ 62.269421][ T5111] chnl_net:caif_netlink_parms(): no params data found [ 62.296320][ T5120] chnl_net:caif_netlink_parms(): no params data found [ 62.381582][ T5124] chnl_net:caif_netlink_parms(): no params data found [ 62.457569][ T5112] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.465538][ T5112] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.472879][ T5112] bridge_slave_0: entered allmulticast mode [ 62.480111][ T5112] bridge_slave_0: entered promiscuous mode [ 62.522401][ T5112] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.529761][ T5112] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.537625][ T5112] bridge_slave_1: entered allmulticast mode [ 62.544933][ T5112] bridge_slave_1: entered promiscuous mode [ 62.621123][ T5111] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.629473][ T5111] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.636785][ T5111] bridge_slave_0: entered allmulticast mode [ 62.643623][ T5111] bridge_slave_0: entered promiscuous mode [ 62.670183][ T5120] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.677650][ T5120] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.685249][ T5120] bridge_slave_0: entered allmulticast mode [ 62.691976][ T5120] bridge_slave_0: entered promiscuous mode [ 62.699700][ T5118] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.707061][ T5118] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.714515][ T5118] bridge_slave_0: entered allmulticast mode [ 62.721408][ T5118] bridge_slave_0: entered promiscuous mode [ 62.729455][ T5118] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.736894][ T5118] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.744455][ T5118] bridge_slave_1: entered allmulticast mode [ 62.751487][ T5118] bridge_slave_1: entered promiscuous mode [ 62.758493][ T5111] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.765984][ T5111] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.773183][ T5111] bridge_slave_1: entered allmulticast mode [ 62.780510][ T5111] bridge_slave_1: entered promiscuous mode [ 62.790316][ T5112] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.804832][ T5112] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.819967][ T5120] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.827346][ T5120] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.836334][ T5120] bridge_slave_1: entered allmulticast mode [ 62.843094][ T5120] bridge_slave_1: entered promiscuous mode [ 62.940021][ T5118] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.965325][ T5112] team0: Port device team_slave_0 added [ 62.985558][ T5120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.998534][ T5120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.009504][ T5118] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.030784][ T5111] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.045932][ T5111] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.057563][ T5112] team0: Port device team_slave_1 added [ 63.064062][ T5124] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.072606][ T5124] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.080103][ T5124] bridge_slave_0: entered allmulticast mode [ 63.087243][ T5124] bridge_slave_0: entered promiscuous mode [ 63.132728][ T5118] team0: Port device team_slave_0 added [ 63.177680][ T5124] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.185768][ T5124] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.192936][ T5124] bridge_slave_1: entered allmulticast mode [ 63.199985][ T5124] bridge_slave_1: entered promiscuous mode [ 63.220567][ T5120] team0: Port device team_slave_0 added [ 63.231652][ T5120] team0: Port device team_slave_1 added [ 63.239763][ T5118] team0: Port device team_slave_1 added [ 63.261312][ T5111] team0: Port device team_slave_0 added [ 63.311339][ T5111] team0: Port device team_slave_1 added [ 63.320526][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.328462][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.355547][ T5112] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.369701][ T5124] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.382607][ T5124] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.402631][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.409784][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.436465][ T5118] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.467380][ T5112] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.477874][ T5112] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.504935][ T5112] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.537915][ T5120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.548055][ T5120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.575152][ T5120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.585213][ T53] Bluetooth: hci1: command tx timeout [ 63.588243][ T5120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.598555][ T5120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.624968][ T5120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.636668][ T5118] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.643628][ T5118] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.654726][ T5114] Bluetooth: hci0: command tx timeout [ 63.670202][ T5118] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.680423][ T5127] Bluetooth: hci3: command tx timeout [ 63.691814][ T5130] Bluetooth: hci2: command tx timeout [ 63.693600][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.703711][ T53] Bluetooth: hci4: command tx timeout [ 63.705499][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.736691][ T5111] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.759730][ T5124] team0: Port device team_slave_0 added [ 63.773106][ T5124] team0: Port device team_slave_1 added [ 63.804041][ T5111] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.811574][ T5111] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.837893][ T5111] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.883804][ T5124] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 63.891097][ T5124] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.917205][ T5124] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 63.930158][ T5124] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 63.937235][ T5124] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 63.963496][ T5124] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.011207][ T5120] hsr_slave_0: entered promiscuous mode [ 64.019255][ T5120] hsr_slave_1: entered promiscuous mode [ 64.037673][ T5112] hsr_slave_0: entered promiscuous mode [ 64.046658][ T5112] hsr_slave_1: entered promiscuous mode [ 64.052874][ T5112] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.061236][ T5112] Cannot create hsr debugfs directory [ 64.116531][ T5111] hsr_slave_0: entered promiscuous mode [ 64.122968][ T5111] hsr_slave_1: entered promiscuous mode [ 64.129962][ T5111] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.137605][ T5111] Cannot create hsr debugfs directory [ 64.155551][ T5118] hsr_slave_0: entered promiscuous mode [ 64.161813][ T5118] hsr_slave_1: entered promiscuous mode [ 64.168252][ T5118] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.176349][ T5118] Cannot create hsr debugfs directory [ 64.253178][ T5124] hsr_slave_0: entered promiscuous mode [ 64.259576][ T5124] hsr_slave_1: entered promiscuous mode [ 64.266154][ T5124] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.274680][ T5124] Cannot create hsr debugfs directory [ 64.706654][ T5112] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 64.718543][ T5112] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 64.740488][ T5112] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 64.758657][ T5112] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 64.799346][ T5111] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 64.828771][ T5111] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 64.858466][ T5111] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 64.868853][ T5111] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 64.905881][ T5118] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 64.920235][ T5118] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 64.930304][ T5118] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 64.952614][ T5118] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.056516][ T5120] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 65.067745][ T5120] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 65.095411][ T5120] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 65.107270][ T5120] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 65.202715][ T5124] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.215904][ T5124] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.238440][ T5112] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.270525][ T5124] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.281834][ T5124] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.325756][ T5112] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.341714][ T5111] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.396180][ T2529] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.403533][ T2529] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.413102][ T2529] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.420393][ T2529] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.474687][ T5111] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.517644][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.524814][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.533600][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.540862][ T5165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.592149][ T5118] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.654700][ T53] Bluetooth: hci1: command tx timeout [ 65.688869][ T5118] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.718970][ T5111] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 65.731857][ T5111] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 65.749456][ T5130] Bluetooth: hci2: command tx timeout [ 65.755481][ T5127] Bluetooth: hci3: command tx timeout [ 65.761193][ T5114] Bluetooth: hci0: command tx timeout [ 65.764474][ T53] Bluetooth: hci4: command tx timeout [ 65.801543][ T5167] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.808759][ T5167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.856381][ T5120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.902172][ T5167] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.909468][ T5167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.028805][ T5124] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.044755][ T5112] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.077473][ T5120] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.122741][ T5165] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.129965][ T5165] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.186559][ T5124] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.214089][ T5165] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.221339][ T5165] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.257442][ T5111] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.269834][ T5167] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.277247][ T5167] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.293878][ T5112] veth0_vlan: entered promiscuous mode [ 66.314990][ T5167] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.322205][ T5167] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.371745][ T5112] veth1_vlan: entered promiscuous mode [ 66.408592][ T5120] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.441257][ T5118] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.489076][ T5124] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.507508][ T5124] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.645537][ T5112] veth0_macvtap: entered promiscuous mode [ 66.680594][ T5118] veth0_vlan: entered promiscuous mode [ 66.698208][ T5112] veth1_macvtap: entered promiscuous mode [ 66.708926][ T5111] veth0_vlan: entered promiscuous mode [ 66.740603][ T5111] veth1_vlan: entered promiscuous mode [ 66.758296][ T5118] veth1_vlan: entered promiscuous mode [ 66.820529][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.858691][ T5112] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.873436][ T5120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.898208][ T5112] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.912688][ T5112] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.922310][ T5112] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.938574][ T5112] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.958262][ T5124] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.983136][ T5111] veth0_macvtap: entered promiscuous mode [ 67.028266][ T5111] veth1_macvtap: entered promiscuous mode [ 67.061302][ T5118] veth0_macvtap: entered promiscuous mode [ 67.098002][ T5118] veth1_macvtap: entered promiscuous mode [ 67.120624][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.133062][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.146089][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.200553][ T5111] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.214069][ T5111] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.233084][ T5111] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.263113][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.278144][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.288462][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 67.299245][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.310657][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.322162][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.332816][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.344434][ T5118] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 67.356249][ T5118] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 67.367149][ T5118] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.376278][ T5124] veth0_vlan: entered promiscuous mode [ 67.397888][ T5111] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.406930][ T5111] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.418637][ T5111] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.428901][ T5111] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.443537][ T5118] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.453485][ T5118] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.462547][ T5118] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.471973][ T5118] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.491409][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.503024][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.599564][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.601254][ T5124] veth1_vlan: entered promiscuous mode [ 67.620365][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.700339][ T2874] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.718196][ T2874] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.735982][ T53] Bluetooth: hci1: command tx timeout [ 67.787445][ T5120] veth0_vlan: entered promiscuous mode [ 67.795355][ T2874] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.814688][ T53] Bluetooth: hci0: command tx timeout [ 67.818625][ T2874] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.820119][ T53] Bluetooth: hci3: command tx timeout [ 67.833432][ T5130] Bluetooth: hci4: command tx timeout [ 67.834237][ T5114] Bluetooth: hci2: command tx timeout [ 67.855778][ T5196] sch_tbf: burst 511 is lower than device gre0 mtu (1500) ! [ 67.921822][ T5120] veth1_vlan: entered promiscuous mode [ 67.943252][ T5124] veth0_macvtap: entered promiscuous mode [ 67.992300][ T5124] veth1_macvtap: entered promiscuous mode [ 68.005838][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.015189][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.059714][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.077250][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.088271][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.102034][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.114221][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.125275][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.147227][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.170929][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.198430][ T5124] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.246958][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.260075][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.271127][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.282171][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.292553][ T5124] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.303461][ T5124] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.327549][ T5124] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.352620][ T5124] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.398353][ T5124] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.448277][ T5124] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.467935][ T5124] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.596358][ T5120] veth0_macvtap: entered promiscuous mode [ 68.667934][ T5120] veth1_macvtap: entered promiscuous mode [ 68.725719][ T5219] syz-executor.1 uses obsolete (PF_INET,SOCK_PACKET) [ 68.837248][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.869869][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.891937][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.903475][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.920997][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.932170][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.952469][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.970345][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.983190][ T5120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.034508][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.050890][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.072451][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.086637][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.109205][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.120416][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.130698][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.142425][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.154916][ T5120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.180658][ T5120] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.213327][ T5120] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.248852][ T5120] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.267834][ T5120] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.327390][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.334789][ T5243] Bluetooth: MGMT ver 1.22 [ 69.343840][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.488960][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.520549][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.660326][ T2928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.704055][ T2928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.816773][ T5114] Bluetooth: hci1: command tx timeout [ 69.832012][ T2874] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.860470][ T2874] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.894731][ T5127] Bluetooth: hci4: command tx timeout [ 69.895836][ T53] Bluetooth: hci0: command tx timeout [ 69.900285][ T5127] Bluetooth: hci2: command tx timeout [ 69.915533][ T5114] Bluetooth: hci3: command tx timeout [ 70.189101][ T5239] syz-executor.1 (5239) used greatest stack depth: 17360 bytes left [ 70.914425][ T5293] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 71.394586][ T5307] sctp: [Deprecated]: syz-executor.3 (pid 5307) Use of int in maxseg socket option. [ 71.394586][ T5307] Use struct sctp_assoc_value instead [ 71.613179][ T5321] tipc: Started in network mode [ 71.642153][ T5321] tipc: Node identity fe8000000000000000000000000000aa, cluster identity 4711 [ 71.687427][ T5321] tipc: Enabling of bearer rejected, failed to enable media [ 71.848143][ T5333] tipc: Enabling of bearer rejected, failed to enable media [ 71.899557][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.919036][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.071711][ T5343] tipc: Started in network mode [ 72.091943][ T5343] tipc: Node identity ac1414aa, cluster identity 4711 [ 72.115655][ T5343] tipc: Enabled bearer , priority 10 [ 72.392472][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880163f5800: rx timeout, send abort [ 72.402666][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880163f5800: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 72.507138][ T5357] Zero length message leads to an empty skb [ 72.740247][ T5385] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 72.868535][ T5385] team0: Port device wlan1 added [ 72.883710][ T5390] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 73.012097][ T5387] geneve0: entered promiscuous mode [ 73.035484][ T5387] geneve0: left promiscuous mode [ 73.058815][ T5392] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.0'. [ 73.166427][ T5396] sctp: [Deprecated]: syz-executor.4 (pid 5396) Use of struct sctp_assoc_value in delayed_ack socket option. [ 73.166427][ T5396] Use struct sctp_sack_info instead [ 73.214593][ T5404] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.224872][ T50] tipc: Node number set to 2886997162 [ 73.227249][ T5404] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 73.244925][ T5404] IPv6: Can't replace route, no match found [ 73.684073][ C0] vcan0: j1939_tp_rxtimer: 0xffff8880163f5c00: rx timeout, send abort [ 73.692526][ C0] vcan0: j1939_xtp_rx_abort_one: 0xffff8880163f5c00: 0x0f000: (3) A timeout occurred and this is the connection abort to close the session. [ 73.770315][ T5429] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.988930][ T5437] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.4'. [ 74.658194][ T5473] (unnamed net_device) (uninitialized): option use_carrier: invalid value (32) [ 74.699578][ T5475] Driver unsupported XDP return value 0 on prog (id 29) dev N/A, expect packet loss! [ 74.716881][ T5481] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 75.090870][ T5499] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 75.279720][ T5514] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 75.334047][ T5514] team0: Device hsr_slave_0 failed to register rx_handler [ 75.535540][ T5530] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 75.760955][ T5541] netlink: 'syz-executor.4': attribute type 33 has an invalid length. [ 75.823425][ T5548] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 75.847354][ T5548] netlink: 244 bytes leftover after parsing attributes in process `syz-executor.1'. [ 77.041085][ T5635] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 77.050862][ T5635] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 77.071142][ T5635] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 77.125268][ T5635] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 77.151584][ T5635] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 77.186209][ T5635] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 77.223081][ T5635] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 77.264884][ T5653] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 78.262938][ T5704] sctp: [Deprecated]: syz-executor.1 (pid 5704) Use of int in maxseg socket option. [ 78.262938][ T5704] Use struct sctp_assoc_value instead [ 78.549337][ T5712] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 78.621959][ T5712] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 78.821954][ T5735] validate_nla: 4 callbacks suppressed [ 78.821973][ T5735] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 78.949936][ T5735] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 79.133146][ T5759] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 79.543123][ T5792] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 79.603163][ T5790] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 79.644963][ T5793] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 79.685614][ T5790] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 80.367477][ T5833] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 80.421766][ T5841] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 80.476567][ T5843] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 80.614691][ T5114] Bluetooth: hci0: command tx timeout [ 81.119875][ T5879] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 81.260935][ T5889] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 81.308082][ T5891] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 81.669457][ T5912] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 81.892028][ T5922] vxlan0: entered allmulticast mode [ 81.964213][ T5929] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 81.968660][ T5921] IPVS: stopping master sync thread 5929 ... [ 82.140756][ T785] cfg80211: failed to load regulatory.db [ 82.697597][ T5114] Bluetooth: hci0: command tx timeout [ 83.294760][ T6011] __nla_validate_parse: 1 callbacks suppressed [ 83.294781][ T6011] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 83.586850][ T6023] netlink: zone id is out of range [ 83.610030][ T6023] netlink: zone id is out of range [ 83.623847][ T6023] netlink: zone id is out of range [ 83.682981][ T6023] netlink: set zone limit has 4 unknown bytes [ 83.764674][ T6032] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 83.785414][ T6033] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 83.818184][ T6032] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 83.871309][ T6037] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 84.271496][ T6066] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 84.282950][ T6065] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 84.379873][ T6069] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 84.418718][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 84.702546][ T6077] veth1: entered promiscuous mode [ 84.735220][ T6077] vlan2: entered promiscuous mode [ 84.753515][ T6080] netlink: zone id is out of range [ 84.757198][ T6077] vlan2: entered allmulticast mode [ 84.766478][ T6077] veth1: entered allmulticast mode [ 84.776217][ T6080] netlink: zone id is out of range [ 84.789938][ T6080] netlink: zone id is out of range [ 84.801485][ T6077] veth1: left allmulticast mode [ 84.816584][ T785] IPVS: starting estimator thread 0... [ 84.817339][ T6077] veth1: left promiscuous mode [ 84.856787][ T6080] netlink: set zone limit has 4 unknown bytes [ 84.912760][ T6088] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.922153][ T6088] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.931690][ T6088] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.941559][ T6088] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 84.950825][ T6086] IPVS: using max 20 ests per chain, 48000 per kthread [ 84.973642][ T6088] vxlan0: entered promiscuous mode [ 84.980030][ T6088] vxlan0: entered allmulticast mode [ 85.010020][ T6088] netdevsim netdevsim1 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.019946][ T6088] netdevsim netdevsim1 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.029621][ T6088] netdevsim netdevsim1 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.038728][ T6088] netdevsim netdevsim1 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 85.336015][ T6102] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.3'. [ 85.428798][ T6113] netlink: 9412 bytes leftover after parsing attributes in process `syz-executor.2'. [ 85.447050][ T6114] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 85.507612][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 85.664520][ T6124] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 85.748485][ T6130] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 85.896229][ T6135] xt_hashlimit: size too large, truncated to 1048576 [ 85.969752][ T6135] xt_hashlimit: max too large, truncated to 1048576 [ 86.282508][ T6135] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 86.420187][ T5127] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 86.430541][ T5127] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 86.440120][ T5127] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 86.464732][ T5127] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 86.476210][ T5127] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 86.486526][ T5127] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 86.529123][ T2874] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.697720][ T2874] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 86.815456][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 86.865332][ T6164] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 86.869122][ T2874] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.007612][ T6169] vxlan0: entered allmulticast mode [ 87.056684][ T2874] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.302396][ T6149] chnl_net:caif_netlink_parms(): no params data found [ 87.468413][ T2874] bridge_slave_1: left allmulticast mode [ 87.474881][ T2874] bridge_slave_1: left promiscuous mode [ 87.481910][ T2874] bridge0: port 2(bridge_slave_1) entered disabled state [ 87.496832][ T2874] bridge_slave_0: left allmulticast mode [ 87.503631][ T2874] bridge_slave_0: left promiscuous mode [ 87.517464][ T2874] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.951329][ T6202] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 88.023633][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 88.160542][ T6209] No such timeout policy "syz0" [ 88.534906][ T2874] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 88.543946][ T5127] Bluetooth: hci2: command tx timeout [ 88.575727][ T2874] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 88.588347][ T2874] bond0 (unregistering): Released all slaves [ 88.796171][ T6220] x_tables: duplicate underflow at hook 2 [ 88.808336][ T6215] __nla_validate_parse: 4 callbacks suppressed [ 88.808482][ T6215] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 88.887615][ T6215] 8021q: VLANs not supported on hsr0 [ 89.266028][ T6233] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 89.308272][ T6149] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.375350][ T6149] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.425019][ T6149] bridge_slave_0: entered allmulticast mode [ 89.438972][ T6234] openvswitch: netlink: Missing key (keys=80040, expected=200000) [ 89.493209][ T6149] bridge_slave_0: entered promiscuous mode [ 89.632354][ T6149] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.704906][ T6149] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.757027][ T6149] bridge_slave_1: entered allmulticast mode [ 89.798388][ T6149] bridge_slave_1: entered promiscuous mode [ 89.854963][ T6239] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.4'. [ 89.858835][ T6240] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 89.958247][ T6249] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 90.068186][ T6149] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.092605][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 90.111074][ T6149] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.174485][ T2874] hsr_slave_0: left promiscuous mode [ 90.202252][ T2874] hsr_slave_1: left promiscuous mode [ 90.233934][ T2874] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 90.265652][ T6260] netlink: 228 bytes leftover after parsing attributes in process `syz-executor.2'. [ 90.275562][ T2874] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 90.286082][ T2874] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 90.293695][ T2874] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 90.327243][ T2874] veth1_macvtap: left promiscuous mode [ 90.333689][ T2874] veth0_macvtap: left promiscuous mode [ 90.343248][ T2874] veth1_vlan: left promiscuous mode [ 90.349136][ T2874] veth0_vlan: left promiscuous mode [ 90.614398][ T5127] Bluetooth: hci2: command tx timeout [ 90.842805][ T6277] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 91.003467][ T2874] team0 (unregistering): Port device team_slave_1 removed [ 91.047097][ T2874] team0 (unregistering): Port device team_slave_0 removed [ 91.457562][ T6282] sch_fq: defrate 0 ignored. [ 91.520722][ T6149] team0: Port device team_slave_0 added [ 91.534072][ T6284] SET target dimension over the limit! [ 91.543010][ T6149] team0: Port device team_slave_1 added [ 91.556655][ T6286] netlink: zone id is out of range [ 91.579129][ T6286] netlink: zone id is out of range [ 91.586724][ T6286] netlink: zone id is out of range [ 91.661460][ T6286] netlink: set zone limit has 4 unknown bytes [ 91.720560][ T6149] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.736896][ T6149] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.793273][ T6149] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.824287][ T6298] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 91.830705][ T6149] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.860922][ T6149] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.922357][ T6149] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 92.025544][ T6305] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 92.139263][ T6304] team0: Port device geneve0 added [ 92.169521][ T6149] hsr_slave_0: entered promiscuous mode [ 92.187606][ T6149] hsr_slave_1: entered promiscuous mode [ 92.201237][ T6149] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.211746][ T6149] Cannot create hsr debugfs directory [ 92.446176][ T6324] netlink: zone id is out of range [ 92.470903][ T6324] netlink: zone id is out of range [ 92.483370][ T6324] netlink: zone id is out of range [ 92.564716][ T6324] netlink: set zone limit has 4 unknown bytes [ 92.694514][ T5127] Bluetooth: hci2: command tx timeout [ 92.789338][ T6341] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 92.903626][ T6345] netem: unknown loss type 0 [ 92.909010][ T6345] netem: change failed [ 92.971576][ T6348] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.2'. [ 93.091719][ T6149] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.120555][ T6149] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.139861][ T6149] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.159160][ T6149] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.342290][ T6149] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.383314][ T6149] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.410088][ T5166] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.417299][ T5166] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.447922][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.455490][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.786370][ T6387] syzkaller0: entered allmulticast mode [ 93.861581][ T6399] sctp: [Deprecated]: syz-executor.2 (pid 6399) Use of int in max_burst socket option. [ 93.861581][ T6399] Use struct sctp_assoc_value instead [ 93.986688][ T6406] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 94.015643][ T6406] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 94.091661][ T6149] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.217692][ T6149] veth0_vlan: entered promiscuous mode [ 94.253161][ T6149] veth1_vlan: entered promiscuous mode [ 94.280998][ T6416] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.0'. [ 94.318396][ T6149] veth0_macvtap: entered promiscuous mode [ 94.333552][ T6149] veth1_macvtap: entered promiscuous mode [ 94.383332][ T6149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.406519][ T6149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.416661][ T6149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.431675][ T6149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.445213][ T6149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.458618][ T6149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.477811][ T6422] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 94.492522][ T6149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 94.507052][ T6149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.519056][ T6149] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.530297][ T6426] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 94.552294][ T6426] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 94.599171][ T6149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.610162][ T6149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.628321][ T6149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.641134][ T6149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.646658][ T6430] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.656457][ T6149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.675907][ T6149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.732611][ T6149] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 94.743533][ T6149] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 94.755921][ T6149] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.782691][ T5127] Bluetooth: hci2: command tx timeout [ 94.821240][ T6149] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.827275][ T6435] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 94.841055][ T6149] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.857894][ T6149] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.875502][ T6149] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.891233][ T6435] ieee802154 phy0 wpan0: encryption failed: -22 [ 94.900851][ T6435] ieee802154 phy0 wpan0: encryption failed: -22 [ 94.925458][ T6435] ieee802154 phy0 wpan0: encryption failed: -22 [ 94.951557][ T6435] ieee802154 phy0 wpan0: encryption failed: -22 [ 94.970302][ T6435] ieee802154 phy0 wpan0: encryption failed: -22 [ 94.993904][ T6435] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.013591][ T6435] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.024806][ T6435] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.034332][ T2928] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.042371][ T2928] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.050080][ T6435] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.050221][ T6435] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.071477][ T6435] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.078100][ T6435] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.084931][ T6435] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.091418][ T6435] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.099823][ T6435] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.106829][ T2928] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.113287][ T6435] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.115724][ T2928] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.123362][ T6435] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.142633][ T6435] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.158596][ T6435] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.188221][ T6435] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.217161][ T6435] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.240808][ T6435] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.270852][ T6435] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.288102][ T6435] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.304262][ T6435] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.331829][ T6435] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.351756][ T6435] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.375921][ T6435] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.392598][ T6435] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.444934][ T6435] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.458210][ T6435] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.472051][ T6435] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.484482][ T6435] ieee802154 phy0 wpan0: encryption failed: -22 [ 95.539778][ T6467] tipc: Enabling of bearer rejected, failed to enable media [ 95.600462][ T6468] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 95.627571][ T6468] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 95.638674][ T6467] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.4'. [ 95.663962][ T6477] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 95.686227][ T6477] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 95.899094][ T6485] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 95.937539][ T6493] syz-executor.2: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz2,mems_allowed=0-1 [ 95.966703][ T6493] CPU: 1 PID: 6493 Comm: syz-executor.2 Not tainted 6.10.0-rc2-syzkaller-00438-g62b5bf58b928 #0 [ 95.977195][ T6493] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 95.987378][ T6493] Call Trace: [ 95.990684][ T6493] [ 95.993643][ T6493] dump_stack_lvl+0x241/0x360 [ 95.998384][ T6493] ? __pfx_dump_stack_lvl+0x10/0x10 [ 96.003766][ T6493] ? __pfx__printk+0x10/0x10 [ 96.008370][ T6493] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 96.014799][ T6493] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 96.021341][ T6493] warn_alloc+0x278/0x410 [ 96.025720][ T6493] ? stack_depot_save_flags+0x29/0x830 [ 96.031243][ T6493] ? __vmalloc_node_range_noprof+0x10b/0x1460 [ 96.037356][ T6493] ? __pfx_warn_alloc+0x10/0x10 [ 96.042240][ T6493] ? kasan_save_track+0x3f/0x80 [ 96.047151][ T6493] ? __kasan_kmalloc+0x98/0xb0 [ 96.051923][ T6493] ? xsk_setsockopt+0x598/0x950 [ 96.056778][ T6493] ? do_sock_setsockopt+0x3af/0x720 [ 96.062089][ T6493] ? __sys_setsockopt+0x1ae/0x250 [ 96.067108][ T6493] ? __x64_sys_setsockopt+0xb5/0xd0 [ 96.072297][ T6493] ? do_syscall_64+0xf3/0x230 [ 96.076985][ T6493] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.083095][ T6493] __vmalloc_node_range_noprof+0x130/0x1460 [ 96.089042][ T6493] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 96.095382][ T6493] ? __kasan_kmalloc+0x98/0xb0 [ 96.100142][ T6493] ? xskq_create+0x54/0x170 [ 96.104650][ T6493] vmalloc_user_noprof+0x74/0x80 [ 96.109583][ T6493] ? xskq_create+0xb6/0x170 [ 96.114079][ T6493] xskq_create+0xb6/0x170 [ 96.118407][ T6493] xsk_init_queue+0xa1/0x100 [ 96.122996][ T6493] xsk_setsockopt+0x598/0x950 [ 96.127671][ T6493] ? __pfx_xsk_setsockopt+0x10/0x10 [ 96.132868][ T6493] ? __pfx_lock_acquire+0x10/0x10 [ 96.137885][ T6493] ? aa_sock_opt_perm+0x79/0x120 [ 96.142906][ T6493] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 96.148445][ T6493] ? security_socket_setsockopt+0x87/0xb0 [ 96.154161][ T6493] ? __pfx_xsk_setsockopt+0x10/0x10 [ 96.159350][ T6493] do_sock_setsockopt+0x3af/0x720 [ 96.164376][ T6493] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 96.169916][ T6493] ? __fget_files+0x29/0x470 [ 96.174503][ T6493] ? __fget_files+0x3f6/0x470 [ 96.179252][ T6493] __sys_setsockopt+0x1ae/0x250 [ 96.184101][ T6493] __x64_sys_setsockopt+0xb5/0xd0 [ 96.189126][ T6493] do_syscall_64+0xf3/0x230 [ 96.193629][ T6493] ? clear_bhb_loop+0x35/0x90 [ 96.198310][ T6493] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 96.204208][ T6493] RIP: 0033:0x7f07b887cf69 [ 96.208621][ T6493] Code: 28 00 00 00 75 05 48 83 c4 28 c3 e8 e1 20 00 00 90 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 b0 ff ff ff f7 d8 64 89 01 48 [ 96.228397][ T6493] RSP: 002b:00007f07b96090c8 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 96.236821][ T6493] RAX: ffffffffffffffda RBX: 00007f07b89b3f80 RCX: 00007f07b887cf69 [ 96.244809][ T6493] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003 [ 96.252785][ T6493] RBP: 00007f07b88da6fe R08: 0000000000000020 R09: 0000000000000000 [ 96.260750][ T6493] R10: 00000000200033c0 R11: 0000000000000246 R12: 0000000000000000 [ 96.268713][ T6493] R13: 000000000000000b R14: 00007f07b89b3f80 R15: 00007ffe7a537288 [ 96.276689][ T6493] [ 96.290124][ T6493] Mem-Info: [ 96.293489][ T6493] active_anon:17558 inactive_anon:0 isolated_anon:0 [ 96.293489][ T6493] active_file:0 inactive_file:46538 isolated_file:0 [ 96.293489][ T6493] unevictable:768 dirty:80 writeback:0 [ 96.293489][ T6493] slab_reclaimable:10262 slab_unreclaimable:93247 [ 96.293489][ T6493] mapped:18458 shmem:1579 pagetables:701 [ 96.293489][ T6493] sec_pagetables:0 bounce:0 [ 96.293489][ T6493] kernel_misc_reclaimable:0 [ 96.293489][ T6493] free:1389547 free_pcp:834 free_cma:0 [ 96.412898][ T6493] Node 0 active_anon:70108kB inactive_anon:0kB active_file:0kB inactive_file:186088kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:73828kB dirty:316kB writeback:0kB shmem:4780kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10376kB pagetables:2672kB sec_pagetables:0kB all_unreclaimable? no [ 96.462278][ T6493] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 96.538052][ T6493] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 96.584020][ T6493] lowmem_reserve[]: 0 2571 2571 0 0 [ 96.592613][ T6493] Node 0 DMA32 free:1593136kB boost:0kB min:35108kB low:43884kB high:52660kB reserved_highatomic:0KB active_anon:69960kB inactive_anon:0kB active_file:0kB inactive_file:185784kB unevictable:1536kB writepending:312kB present:3129332kB managed:2659884kB mlocked:0kB bounce:0kB free_pcp:948kB local_pcp:64kB free_cma:0kB [ 96.635274][ T6493] lowmem_reserve[]: 0 0 0 0 0 [ 96.640545][ T6493] Node 0 Normal free:0kB boost:0kB min:4kB low:4kB high:4kB reserved_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:304kB unevictable:0kB writepending:4kB present:1048576kB managed:360kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 96.684533][ T6493] lowmem_reserve[]: 0 0 0 0 0 [ 96.692961][ T6493] Node 1 Normal free:3950948kB boost:0kB min:54788kB low:68484kB high:82180kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:1256kB local_pcp:0kB free_cma:0kB [ 96.728821][ T6493] lowmem_reserve[]: 0 0 0 0 0 [ 96.733757][ T6493] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 96.759367][ T6493] Node 0 DMA32: 20*4kB (UME) 38*8kB (UE) 95*16kB (UME) 172*32kB (UME) 146*64kB (UME) 131*128kB (UME) 55*256kB (UME) 29*512kB (UM) 8*1024kB (UM) 3*2048kB (ME) 370*4096kB (M) = 1592304kB [ 96.802703][ T6493] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 96.836134][ T6519] EXT4-fs warning (device sda1): __ext4_ioctl:1258: Setting inode version is not supported with metadata_csum enabled. [ 96.898131][ T6493] Node 1 Normal: 1*4kB (M) 4*8kB (UM) 2*16kB (UM) 5*32kB (UM) 4*64kB (U) 1*128kB (U) 1*256kB (M) 1*512kB (M) 1*1024kB (U) 2*2048kB (UM) 963*4096kB (M) = 3950948kB [ 97.019007][ T6523] tipc: Enabling of bearer <Žz:l> rejected, media not registered [ 97.054877][ T6493] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 97.142408][ T6493] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 97.234246][ T6493] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 97.253335][ T6531] net_ratelimit: 2 callbacks suppressed [ 97.253356][ T6531] netlink: zone id is out of range [ 97.255817][ T6493] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 97.271901][ T6531] netlink: zone id is out of range [ 97.289496][ T6531] netlink: zone id is out of range [ 97.331750][ T6493] 48120 total pagecache pages [ 97.340629][ T6534] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 97.344456][ T6531] netlink: set zone limit has 4 unknown bytes [ 97.362179][ T6493] 0 pages in swap cache [ 97.375104][ T6493] Free swap = 124996kB [ 97.379885][ T6493] Total swap = 124996kB [ 97.387188][ T6493] 2097051 pages RAM [ 97.398289][ T6493] 0 pages HighMem/MovableOnly [ 97.403849][ T6493] 400870 pages reserved [ 97.419182][ T6493] 0 pages cma reserved [ 97.433258][ T6540] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 97.649256][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 97.672884][ T6548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 97.806844][ T6558] EXT4-fs warning (device sda1): __ext4_ioctl:1258: Setting inode version is not supported with metadata_csum enabled. [ 98.469693][ T6606] nbd: socks must be embedded in a SOCK_ITEM attr [ 98.550047][ T6604] bridge0: port 3(vlan2) entered blocking state [ 98.583710][ T6613] sctp: [Deprecated]: syz-executor.3 (pid 6613) Use of struct sctp_assoc_value in delayed_ack socket option. [ 98.583710][ T6613] Use struct sctp_sack_info instead [ 98.606737][ T6604] bridge0: port 3(vlan2) entered disabled state [ 98.617840][ T6613] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20003 [ 98.660301][ T6604] vlan2: entered allmulticast mode [ 98.722121][ T6604] vlan2: left allmulticast mode [ 98.820371][ T6626] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.974008][ T6636] dccp_invalid_packet: P.Data Offset(0) too small [ 99.056447][ T6645] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 99.083143][ T6647] __nla_validate_parse: 8 callbacks suppressed [ 99.083161][ T6647] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 99.108769][ T6648] warning: `syz-executor.0' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 99.159345][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 99.182969][ T6642] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 99.506989][ T6668] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 100.228408][ T6689] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 100.289500][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 100.574251][ T6718] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 100.591788][ T6718] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 101.155679][ T6734] Dead loop on virtual device ipvlan1, fix it urgently! [ 101.440383][ T6734] syz-executor.3 (6734) used greatest stack depth: 8344 bytes left [ 101.454530][ T6745] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 101.463441][ T6742] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 101.714230][ T29] audit: type=1804 audit(1717763399.219:2): pid=6762 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir587063191/syzkaller.yl3chU/112/cgroup.controllers" dev="sda1" ino=1951 res=1 errno=0 [ 101.844075][ T6778] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 101.968999][ T6787] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 102.017533][ T6785] dvmrp0: entered allmulticast mode [ 102.045168][ T6785] dvmrp0: left allmulticast mode [ 102.103695][ T6795] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 102.859772][ T6810] net_ratelimit: 3 callbacks suppressed [ 102.859793][ T6810] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 102.897978][ T29] audit: type=1804 audit(1717763400.409:3): pid=6810 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir3941759117/syzkaller.tA5sHK/95/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 103.565185][ T6856] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 103.789395][ T6873] batadv_slave_1: entered promiscuous mode [ 103.813088][ T6873] netlink: 'syz-executor.4': attribute type 23 has an invalid length. [ 103.852065][ T6873] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.861074][ T6873] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.991837][ T6873] bridge0: entered promiscuous mode [ 104.075643][ T6873] batadv_slave_1: left promiscuous mode [ 104.109506][ T6892] syzkaller0: entered promiscuous mode [ 104.139153][ T6892] syzkaller0: entered allmulticast mode [ 104.168668][ T6903] syz-executor.0[6903] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.168904][ T6903] syz-executor.0[6903] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 104.324605][ T6914] __nla_validate_parse: 1 callbacks suppressed [ 104.324626][ T6914] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 104.535832][ T6933] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 104.548148][ T6933] netlink: 112860 bytes leftover after parsing attributes in process `syz-executor.4'. [ 104.563888][ T6933] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 105.544245][ T6985] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 105.765245][ T6981] netlink: 'syz-executor.2': attribute type 9 has an invalid length. [ 106.653355][ T7029] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. [ 106.668664][ T7029] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.3'. [ 106.909513][ T7047] raw_sendmsg: syz-executor.0 forgot to set AF_INET. Fix it! [ 107.071738][ T7057] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 107.172558][ T7071] IPVS: set_ctl: invalid protocol: 0 0.0.0.0:17 [ 107.212460][ T7072] ax25_connect(): syz-executor.2 uses autobind, please contact jreuter@yaina.de [ 107.390210][ T7085] tipc: Enabling of bearer <Žz:l> rejected, media not registered [ 107.408180][ T7089] EXT4-fs warning (device sda1): verify_group_input:137: Cannot add at group 2147221507 (only 8 groups) [ 107.452222][ T7082] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 107.466435][ T7082] IPv6: NLM_F_CREATE should be specified when creating new route [ 107.494560][ T7082] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 107.501869][ T7082] IPv6: NLM_F_CREATE should be set when creating new route [ 107.509274][ T7082] IPv6: NLM_F_CREATE should be set when creating new route [ 107.516693][ T7082] IPv6: NLM_F_CREATE should be set when creating new route [ 108.088513][ T7133] netlink: 'syz-executor.2': attribute type 21 has an invalid length. [ 108.136280][ T7136] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 108.178965][ T7136] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.3'. [ 108.218263][ T7144] bridge0: left promiscuous mode [ 108.238987][ T7144] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.247020][ T7144] bridge0: port 2(bridge_slave_1) entered forwarding state [ 108.255400][ T7144] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.262556][ T7144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.286491][ T5115] Dead loop on virtual device ipvlan1, fix it urgently! [ 108.312708][ T7144] bridge0: entered promiscuous mode [ 108.318292][ T7144] bridge0: entered allmulticast mode [ 108.334724][ T7151] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 108.382859][ T7154] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 108.400012][ T5166] Dead loop on virtual device ipvlan1, fix it urgently! [ 108.785599][ T7180] syzkaller0: entered promiscuous mode [ 108.792272][ T7189] netlink: 1956 bytes leftover after parsing attributes in process `syz-executor.1'. [ 108.803040][ T7177] sctp: [Deprecated]: syz-executor.2 (pid 7177) Use of int in max_burst socket option deprecated. [ 108.803040][ T7177] Use struct sctp_assoc_value instead [ 108.821364][ T7180] syzkaller0: entered allmulticast mode [ 110.704752][ T7207] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 110.869413][ T7234] netlink: 480 bytes leftover after parsing attributes in process `syz-executor.1'. [ 110.938264][ T7234] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 111.032762][ T7245] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 111.135944][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 111.153487][ T7258] Cannot find del_set index 0 as target [ 111.292914][ T7263] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 111.313298][ T7266] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 111.408941][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 111.673955][ T7289] syz-executor.2[7289] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.675473][ T7289] syz-executor.2[7289] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.705675][ T7289] syz-executor.2[7289] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.717950][ T7289] syz-executor.2[7289] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 111.883652][ T7308] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 111.916882][ T7301] openvswitch: netlink: nsh attr 2048 is out of range max 3 [ 112.009414][ T7311] team1: Mode changed to "loadbalance" [ 112.028273][ T7312] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 112.040839][ T7314] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 112.128599][ T7316] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 112.345249][ T7335] Dead loop on virtual device ipvlan1, fix it urgently! [ 112.518758][ T7342] delete_channel: no stack [ 112.672761][ T7347] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.844641][ C0] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 113.322552][ T7392] netlink: 'syz-executor.2': attribute type 19 has an invalid length. [ 113.412377][ T29] audit: type=1804 audit(1717763410.919:4): pid=7399 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1468722460/syzkaller.5Fe2tb/67/cgroup.controllers" dev="sda1" ino=1953 res=1 errno=0 [ 113.835709][ T7422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.560407][ T7482] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 115.053516][ T7514] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 115.254268][ T5114] Bluetooth: hci2: command 0x0405 tx timeout [ 115.653089][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 115.715684][ T7524] batadv_slave_1: entered promiscuous mode [ 115.737259][ T7527] __nla_validate_parse: 17 callbacks suppressed [ 115.737279][ T7527] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 115.782318][ T7523] batadv_slave_1: left promiscuous mode [ 115.831523][ T29] audit: type=1804 audit(1717763413.339:5): pid=7529 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir601197203/syzkaller.TXV8fa/147/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 116.046524][ T7541] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 116.974648][ T7573] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 116.999918][ T7567] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.1'. [ 117.016105][ T7564] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20000 [ 117.115800][ T7578] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 117.310359][ T7589] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 117.321751][ T7597] IPVS: set_ctl: invalid protocol: 255 172.30.1.3:20002 [ 117.345218][ T5114] Bluetooth: hci2: command 0x0405 tx timeout [ 117.547116][ T7607] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 117.627834][ T7608] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.071578][ T7624] geneve2: entered promiscuous mode [ 118.161871][ T7624] geneve2: entered allmulticast mode [ 118.871931][ T7657] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 118.948323][ T7661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.046722][ T7670] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 119.405061][ T7691] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 119.455733][ T7691] netlink: 'syz-executor.4': attribute type 2 has an invalid length. [ 119.533731][ T7691] : entered promiscuous mode [ 119.655171][ T7704] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 119.808262][ T7712] Bluetooth: MGMT ver 1.22 [ 119.969963][ T7719] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 120.009867][ T7724] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 120.353025][ T7741] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 120.522409][ T7744] team0: Port device geneve0 added [ 120.745442][ T7761] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 120.811488][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 120.947302][ T7769] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 120.983235][ T7770] nbd: must specify an index to disconnect [ 120.988223][ T7766] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 121.162757][ T7778] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 121.369176][ T7782] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 121.660115][ T7797] netlink: 140 bytes leftover after parsing attributes in process `syz-executor.2'. [ 121.708008][ T7797] netdevsim0 speed is unknown, defaulting to 1000 [ 121.734537][ T7797] netdevsim0 speed is unknown, defaulting to 1000 [ 121.779991][ T7797] netdevsim0 speed is unknown, defaulting to 1000 [ 121.786118][ T7802] SET target dimension over the limit! [ 121.847896][ T7797] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 121.878906][ T7805] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 121.950903][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 121.955720][ T7797] infiniband syz0: RDMA CMA: cma_listen_on_dev, error -98 [ 122.099756][ T7797] netdevsim0 speed is unknown, defaulting to 1000 [ 122.124470][ T7797] netdevsim0 speed is unknown, defaulting to 1000 [ 122.150267][ T7797] netdevsim0 speed is unknown, defaulting to 1000 [ 122.168167][ T7797] netdevsim0 speed is unknown, defaulting to 1000 [ 122.188681][ T7797] netdevsim0 speed is unknown, defaulting to 1000 [ 122.716802][ T7830] sock: sock_timestamping_bind_phc: sock not bind to device [ 122.742740][ T7828] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 122.920006][ T7836] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 122.970176][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 123.453578][ T7852] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 123.472155][ T7850] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.157132][ T7871] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.241758][ T7888] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 124.292643][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 124.679870][ T7912] bond1: entered allmulticast mode [ 124.692223][ T7912] 8021q: adding VLAN 0 to HW filter on device bond1 [ 124.888200][ T7929] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 124.933214][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 125.235251][ T7947] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 125.315676][ T7952] Dead loop on virtual device ipvlan1, fix it urgently! [ 125.331980][ T7952] Dead loop on virtual device ipvlan1, fix it urgently! [ 125.760501][ T7982] netdevsim netdevsim4: Direct firmware load for ./file0 failed with error -2 [ 125.773571][ T7982] netdevsim netdevsim4: Falling back to sysfs fallback for: ./file0 [ 125.848471][ T7987] netlink: 'syz-executor.1': attribute type 58 has an invalid length. [ 126.008177][ T7994] netlink: 168 bytes leftover after parsing attributes in process `syz-executor.1'. [ 126.188674][ T8006] ip6gretap0: entered promiscuous mode [ 126.211912][ T8006] bridge0: entered promiscuous mode [ 126.387228][ T8020] netlink: 72 bytes leftover after parsing attributes in process `syz-executor.2'. [ 126.393731][ T8022] syz-executor.0[8022] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.404429][ T8022] syz-executor.0[8022] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.409639][ T8023] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.535334][ T53] Bluetooth: hci0: command tx timeout [ 126.535812][ T5127] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 126.703391][ T8032] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 126.710699][ T8032] IPv6: NLM_F_CREATE should be set when creating new route [ 126.718015][ T8032] IPv6: NLM_F_CREATE should be set when creating new route [ 127.269813][ T8074] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 127.334046][ T8078] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.0'. [ 127.345462][ T8077] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 127.445954][ T8080] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.464728][ T8081] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.1'. [ 127.497783][ T8087] nbd: must specify a size in bytes for the device [ 127.738188][ T8098] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 127.769442][ T8098] netlink: 193500 bytes leftover after parsing attributes in process `syz-executor.3'. [ 127.783238][ T8102] hsr0: entered promiscuous mode [ 127.800955][ T8106] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 127.844802][ T8105] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.3'. [ 127.997795][ T8113] net veth1_virt_wifi ÿÿÿÿÿÿÿ: renamed from virt_wifi0 [ 128.341993][ T8138] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 128.382562][ T8138] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 128.463271][ T8147] team0: Port device macvlan2 added [ 128.675595][ T8150] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.950948][ T8184] ip6gretap0: entered promiscuous mode [ 128.967300][ T8184] bridge0: entered promiscuous mode [ 128.980520][ T8184] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 129.001965][ T8184] Cannot create hsr debugfs directory [ 129.495373][ C0] Dead loop on virtual device ipvlan1, fix it urgently! [ 129.737391][ T8216] macvlan3: entered promiscuous mode [ 129.752704][ T8216] vlan1: entered promiscuous mode [ 129.772415][ T8216] team0: Port device macvlan3 added [ 129.807033][ T8221] team0: Port device macvlan3 added [ 129.922603][ T8227] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.982744][ T8235] x_tables: duplicate underflow at hook 1 [ 130.753217][ T8279] trusted_key: syz-executor.4 sent an empty control message without MSG_MORE. [ 130.792174][ T8279] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.4'. [ 130.850173][ T8279] netlink: 'syz-executor.4': attribute type 8 has an invalid length. [ 131.335252][ T8315] __nla_validate_parse: 1 callbacks suppressed [ 131.335271][ T8315] netlink: 277 bytes leftover after parsing attributes in process `syz-executor.0'. [ 131.351481][ T8314] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 131.393530][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 131.441179][ T8323] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.4'. [ 131.642915][ T8327] veth1_macvtap: left promiscuous mode [ 131.671628][ T8327] macsec0: entered allmulticast mode [ 131.892773][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.086663][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.239368][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.456652][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 132.523385][ T8377] veth1_macvtap: left promiscuous mode [ 132.551207][ T8377] macsec0: entered allmulticast mode [ 132.594702][ T8371] veth1_macvtap: entered promiscuous mode [ 132.661502][ T8371] veth1_macvtap: entered allmulticast mode [ 132.867065][ T51] bridge_slave_1: left allmulticast mode [ 132.888468][ T51] bridge_slave_1: left promiscuous mode [ 132.898971][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.899371][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 132.917963][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 132.926342][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 132.936637][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 132.945916][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 132.953903][ T51] bridge_slave_0: left allmulticast mode [ 132.960057][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 132.983311][ T51] bridge_slave_0: left promiscuous mode [ 133.025294][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.337206][ T1247] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.344580][ T51] ip6gretap0 (unregistering): left promiscuous mode [ 133.347054][ T1247] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.595882][ T51] team0: Port device geneve0 removed [ 133.632158][ T51] bridge0 (unregistering): left promiscuous mode [ 134.028982][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.059240][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.082139][ T51] bond0 (unregistering): Released all slaves [ 134.139338][ T8400] netdevsim0 speed is unknown, defaulting to 1000 [ 134.371400][ T8447] xt_hashlimit: size too large, truncated to 1048576 [ 134.390919][ T8447] xt_hashlimit: overflow, try lower: 0/0 [ 134.471911][ T8453] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 134.482057][ T8453] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 134.515361][ T8453] netlink: 'syz-executor.1': attribute type 3 has an invalid length. [ 134.529375][ T8453] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.1'. [ 134.610283][ T8400] chnl_net:caif_netlink_parms(): no params data found [ 134.741385][ T8466] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 134.751056][ T8466] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 134.905720][ T8471] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 134.918941][ T8400] bridge0: port 1(bridge_slave_0) entered blocking state [ 134.932806][ T8400] bridge0: port 1(bridge_slave_0) entered disabled state [ 134.943344][ T8400] bridge_slave_0: entered allmulticast mode [ 134.957669][ T8400] bridge_slave_0: entered promiscuous mode [ 134.970030][ T8400] bridge0: port 2(bridge_slave_1) entered blocking state [ 134.979689][ T8400] bridge0: port 2(bridge_slave_1) entered disabled state [ 134.993100][ T8400] bridge_slave_1: entered allmulticast mode [ 135.003423][ T8400] bridge_slave_1: entered promiscuous mode [ 135.023899][ T5127] Bluetooth: hci1: command tx timeout [ 135.195273][ T8484] tipc: Can't bind to reserved service type 0 [ 135.445212][ T8400] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 135.473380][ T8400] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 135.536271][ T8491] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 135.580901][ T8400] team0: Port device team_slave_0 added [ 135.599137][ T8502] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 135.610251][ T8400] team0: Port device team_slave_1 added [ 135.681519][ T8504] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 135.716667][ T8400] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.732782][ T8400] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.769741][ T8400] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.783104][ T8504] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 135.840079][ T8400] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.874255][ T8400] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.975382][ T8400] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.998485][ T8517] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 136.697783][ T8529] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 136.723074][ T8529] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 136.808435][ T8529] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.817813][ T8529] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.826738][ T8529] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.835647][ T8529] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.915314][ T8529] vxlan0: entered promiscuous mode [ 136.943506][ T8538] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 136.986206][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 137.009797][ T8538] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 137.095488][ T5127] Bluetooth: hci1: command tx timeout [ 137.104242][ T8544] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 137.201801][ T8548] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 137.304045][ T51] hsr_slave_0: left promiscuous mode [ 137.326312][ T51] hsr_slave_1: left promiscuous mode [ 137.339695][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.352073][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.377933][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.385764][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.415290][ T51] veth1_macvtap: left promiscuous mode [ 137.421054][ T51] veth0_macvtap: left promiscuous mode [ 137.427291][ T51] veth1_vlan: left promiscuous mode [ 137.432694][ T51] veth0_vlan: left promiscuous mode [ 137.572603][ T51] team0 (unregistering): Port device macvlan2 removed [ 137.742909][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807f49c000: rx timeout, send abort [ 137.988813][ T51] team0 (unregistering): Port device team_slave_1 removed [ 138.032571][ T51] team0 (unregistering): Port device team_slave_0 removed [ 138.251461][ C1] vxcan0: j1939_tp_rxtimer: 0xffff88807f49c000: abort rx timeout. Force session deactivation [ 138.442703][ T8400] hsr_slave_0: entered promiscuous mode [ 138.449323][ T8400] hsr_slave_1: entered promiscuous mode [ 138.466427][ T8400] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.484649][ T8400] Cannot create hsr debugfs directory [ 138.494679][ T8548] bridge: RTM_NEWNEIGH bridge0 without NUD_PERMANENT [ 138.629319][ T8560] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.844090][ T8578] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 138.978109][ T8579] cannot load conntrack support for proto=3 [ 139.066817][ T8582] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 139.077752][ T8578] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 139.168520][ T8560] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.179074][ T5127] Bluetooth: hci1: command tx timeout [ 139.199634][ T8579] netdevsim0 speed is unknown, defaulting to 1000 [ 139.385678][ T8582] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 139.563785][ T8560] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.883510][ T8560] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.976189][ C1] vxcan0: j1939_xtp_rx_dat: no tx connection found [ 140.251012][ T8601] netlink: zone id is out of range [ 140.269556][ T8560] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.279641][ T8601] netlink: zone id is out of range [ 140.291035][ T8601] netlink: zone id is out of range [ 140.293062][ T8560] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.320417][ T8601] netlink: set zone limit has 4 unknown bytes [ 140.379103][ T8560] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.436630][ T8560] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.558617][ T8612] vlan2: entered promiscuous mode [ 140.574234][ T8612] vlan2: entered allmulticast mode [ 140.681625][ T8621] delete_channel: no stack [ 140.732823][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880578e3400: rx timeout, send abort [ 140.848407][ T8400] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 140.879759][ T8400] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 140.888397][ T8629] delete_channel: no stack [ 140.927176][ T8634] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 140.959549][ T8400] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 140.977614][ T8400] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 141.055833][ T8638] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 141.223638][ T8400] 8021q: adding VLAN 0 to HW filter on device bond0 [ 141.241205][ C1] vxcan0: j1939_tp_rxtimer: 0xffff8880578e3400: abort rx timeout. Force session deactivation [ 141.254380][ T5127] Bluetooth: hci1: command tx timeout [ 141.270531][ T8400] 8021q: adding VLAN 0 to HW filter on device team0 [ 141.290419][ T785] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.297753][ T785] bridge0: port 1(bridge_slave_0) entered forwarding state [ 141.317047][ T785] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.324323][ T785] bridge0: port 2(bridge_slave_1) entered forwarding state [ 141.481898][ T29] audit: type=1804 audit(1717763438.989:6): pid=8662 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir23544158/syzkaller.Yx6fWR/239/cgroup.controllers" dev="sda1" ino=1947 res=1 errno=0 [ 141.703405][ T8400] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 141.751190][ T8678] netlink: zone id is out of range [ 141.773417][ T8678] netlink: zone id is out of range [ 141.801870][ T8400] veth0_vlan: entered promiscuous mode [ 141.813457][ T8678] netlink: zone id is out of range [ 141.853142][ T8400] veth1_vlan: entered promiscuous mode [ 141.870746][ T8678] netlink: set zone limit has 4 unknown bytes [ 141.948431][ T8400] veth0_macvtap: entered promiscuous mode [ 141.971485][ T8400] veth1_macvtap: entered promiscuous mode [ 142.002057][ T8400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.022902][ T29] audit: type=1800 audit(1717763439.529:7): pid=8696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1964 res=0 errno=0 [ 142.044627][ T8400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.058954][ T8400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.075037][ T29] audit: type=1800 audit(1717763439.539:8): pid=8696 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.3" name="memory.events" dev="sda1" ino=1964 res=0 errno=0 [ 142.096711][ T8400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.112726][ T8400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.123430][ T8400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.143447][ T8400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.153953][ T8400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.167501][ T8400] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.187063][ T8400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.198142][ T8400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.215575][ T8701] sctp: [Deprecated]: syz-executor.3 (pid 8701) Use of int in maxseg socket option. [ 142.215575][ T8701] Use struct sctp_assoc_value instead [ 142.254340][ T8400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.269562][ T8400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.291339][ T8400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.328632][ T8400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.344890][ T8400] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.372486][ T8400] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.411086][ T8400] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.459961][ T8400] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.479939][ T8400] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.498043][ T8400] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.516582][ T8400] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.709307][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.735476][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.819751][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.854370][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.012059][ T8730] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 143.080231][ T8734] netlink: zone id is out of range [ 143.195077][ T29] audit: type=1804 audit(1717763440.709:9): pid=8739 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir23544158/syzkaller.Yx6fWR/249/cgroup.controllers" dev="sda1" ino=1949 res=1 errno=0 [ 143.335572][ T51] wlan1: Trigger new scan to find an IBSS to join [ 143.521581][ T8749] pim6reg0: tun_chr_ioctl cmd 1074025677 [ 143.531640][ T8749] pim6reg0: linktype set to 776 [ 144.181236][ T8783] __nla_validate_parse: 1 callbacks suppressed [ 144.181254][ T8783] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 144.212690][ T8785] xt_hashlimit: size too large, truncated to 1048576 [ 144.265364][ T8790] netlink: 209316 bytes leftover after parsing attributes in process `syz-executor.2'. [ 144.282706][ T8785] xt_hashlimit: max too large, truncated to 1048576 [ 144.525222][ T8800] netlink: 'syz-executor.3': attribute type 21 has an invalid length. [ 144.550500][ T8785] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 144.932657][ T8818] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 144.948789][ T8818] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. [ 145.192380][ T8829] netlink: 7 bytes leftover after parsing attributes in process `syz-executor.4'. [ 145.246394][ T8829] netlink: 'syz-executor.4': attribute type 15 has an invalid length. [ 145.740328][ T35] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.827923][ T8853] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 145.874403][ T8853] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 145.922584][ T8856] net_ratelimit: 5 callbacks suppressed [ 145.922597][ T8856] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 146.300933][ T8871] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 146.376378][ T12] wlan1: Trigger new scan to find an IBSS to join [ 146.407229][ T8872] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 146.467561][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 146.480505][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 146.488961][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 146.498526][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 146.509291][ T53] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 146.519215][ T53] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 146.579565][ T8875] netdevsim0 speed is unknown, defaulting to 1000 [ 147.140200][ T8875] chnl_net:caif_netlink_parms(): no params data found [ 147.467152][ T35] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 147.561377][ T8920] bridge0: port 3(vlan2) entered blocking state [ 147.588753][ T8920] bridge0: port 3(vlan2) entered disabled state [ 147.612481][ T8920] vlan2: entered allmulticast mode [ 147.635098][ T8920] vlan2: left allmulticast mode [ 147.766043][ T35] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.029483][ T35] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.044838][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 148.065560][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 148.084925][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 148.094039][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 148.103734][ T8932] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 148.117514][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 148.136695][ T8875] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.144065][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 148.174393][ T8875] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.194799][ T8875] bridge_slave_0: entered allmulticast mode [ 148.203788][ T8875] bridge_slave_0: entered promiscuous mode [ 148.238940][ T8875] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.263180][ T8875] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.296086][ T8875] bridge_slave_1: entered allmulticast mode [ 148.314327][ T8875] bridge_slave_1: entered promiscuous mode [ 148.473561][ T8875] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.500291][ T8875] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.555253][ T8928] netdevsim0 speed is unknown, defaulting to 1000 [ 148.614393][ T5127] Bluetooth: hci1: command tx timeout [ 148.646854][ T8938] team0: Port device macvlan2 added [ 148.671163][ T35] bridge_slave_1: left allmulticast mode [ 148.678095][ T35] bridge_slave_1: left promiscuous mode [ 148.684009][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.696837][ T35] bridge_slave_0: left allmulticast mode [ 148.702721][ T35] bridge_slave_0: left promiscuous mode [ 148.708809][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 149.040828][ T8946] can: request_module (can-proto-0) failed. [ 149.143182][ T8948] can: request_module (can-proto-0) failed. [ 149.300949][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 149.313035][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 149.324001][ T35] bond0 (unregistering): Released all slaves [ 149.341993][ T1087] wlan1: Creating new IBSS network, BSSID da:15:2d:53:71:93 [ 149.352943][ T8875] team0: Port device team_slave_0 added [ 149.394896][ T8941] dummy0: entered promiscuous mode [ 149.407262][ T8941] macsec1: entered allmulticast mode [ 149.431454][ T8941] dummy0: entered allmulticast mode [ 149.460776][ T8941] dummy0: left allmulticast mode [ 149.469938][ T8941] dummy0: left promiscuous mode [ 149.559320][ T8875] team0: Port device team_slave_1 added [ 149.633741][ T8954] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.1'. [ 149.732245][ T8957] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 149.733205][ T8966] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 149.757759][ T8875] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.772536][ T8875] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.781094][ T8968] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 149.830818][ T8875] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.867429][ T8968] netlink: 260 bytes leftover after parsing attributes in process `syz-executor.1'. [ 149.892000][ T8875] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.941448][ T8875] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.969202][ T8875] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 150.036782][ T8979] Dead loop on virtual device ipvlan1, fix it urgently! [ 150.039602][ T8981] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 150.052259][ T8979] xt_hashlimit: size too large, truncated to 1048576 [ 150.052280][ T8979] xt_hashlimit: max too large, truncated to 1048576 [ 150.212925][ T8979] x_tables: ip_tables: osf match: used from hooks OUTPUT, but only valid from PREROUTING/INPUT/FORWARD [ 150.224402][ T5127] Bluetooth: hci4: command tx timeout [ 150.366286][ T8875] hsr_slave_0: entered promiscuous mode [ 150.384631][ T8875] hsr_slave_1: entered promiscuous mode [ 150.402818][ T8875] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 150.423916][ T8875] Cannot create hsr debugfs directory [ 150.459841][ T35] hsr_slave_0: left promiscuous mode [ 150.483914][ T35] hsr_slave_1: left promiscuous mode [ 150.498372][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 150.514268][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 150.528586][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 150.545496][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 150.608657][ T35] veth1_macvtap: left promiscuous mode [ 150.626887][ T35] veth0_macvtap: left promiscuous mode [ 150.639602][ T35] veth1_vlan: left promiscuous mode [ 150.654639][ T35] veth0_vlan: left promiscuous mode [ 150.696490][ T5127] Bluetooth: hci1: command tx timeout [ 151.635376][ T9002] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 151.685490][ T9002] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.2'. [ 151.866969][ T35] team0 (unregistering): Port device team_slave_1 removed [ 151.966421][ T35] team0 (unregistering): Port device team_slave_0 removed [ 152.304277][ T53] Bluetooth: hci4: command tx timeout [ 152.779912][ T53] Bluetooth: hci1: command tx timeout [ 152.793081][ T8928] chnl_net:caif_netlink_parms(): no params data found [ 152.914973][ T9031] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 152.961974][ T9031] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 152.962756][ T9033] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 152.995596][ T9033] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 153.418734][ T8928] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.463468][ T8928] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.482654][ T8928] bridge_slave_0: entered allmulticast mode [ 153.502884][ T8928] bridge_slave_0: entered promiscuous mode [ 153.532897][ T8928] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.554453][ T8928] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.561990][ T8928] bridge_slave_1: entered allmulticast mode [ 153.585866][ T8928] bridge_slave_1: entered promiscuous mode [ 153.752909][ T8928] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 153.780739][ T8928] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 153.816243][ T25] ================================================================== [ 153.824343][ T25] BUG: KASAN: slab-use-after-free in sco_sock_timeout+0x8b/0x270 [ 153.832063][ T25] Write of size 4 at addr ffff88805f6a5080 by task kworker/1:0/25 [ 153.839849][ T25] [ 153.842177][ T25] CPU: 1 PID: 25 Comm: kworker/1:0 Not tainted 6.10.0-rc2-syzkaller-00438-g62b5bf58b928 #0 [ 153.852139][ T25] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 153.862180][ T25] Workqueue: events sco_sock_timeout [ 153.867478][ T25] Call Trace: [ 153.870748][ T25] [ 153.873669][ T25] dump_stack_lvl+0x241/0x360 [ 153.878342][ T25] ? __pfx_dump_stack_lvl+0x10/0x10 [ 153.883531][ T25] ? __pfx__printk+0x10/0x10 [ 153.888108][ T25] ? _printk+0xd5/0x120 [ 153.892249][ T25] ? __virt_addr_valid+0x183/0x520 [ 153.897349][ T25] ? __virt_addr_valid+0x183/0x520 [ 153.902451][ T25] print_report+0x169/0x550 [ 153.906945][ T25] ? __virt_addr_valid+0x183/0x520 [ 153.912049][ T25] ? __virt_addr_valid+0x183/0x520 [ 153.917152][ T25] ? __virt_addr_valid+0x44e/0x520 [ 153.922256][ T25] ? __phys_addr+0xba/0x170 [ 153.926750][ T25] ? sco_sock_timeout+0x8b/0x270 [ 153.931675][ T25] kasan_report+0x143/0x180 [ 153.936253][ T25] ? __pfx_lock_acquire+0x10/0x10 [ 153.941267][ T25] ? sco_sock_timeout+0x8b/0x270 [ 153.946198][ T25] kasan_check_range+0x282/0x290 [ 153.951127][ T25] sco_sock_timeout+0x8b/0x270 [ 153.955889][ T25] ? process_scheduled_works+0x945/0x1830 [ 153.961689][ T25] process_scheduled_works+0xa2c/0x1830 [ 153.967231][ T25] ? __pfx_process_scheduled_works+0x10/0x10 [ 153.973201][ T25] ? assign_work+0x364/0x3d0 [ 153.977779][ T25] worker_thread+0x86d/0xd70 [ 153.982364][ T25] ? __kthread_parkme+0x169/0x1d0 [ 153.987461][ T25] ? __pfx_worker_thread+0x10/0x10 [ 153.992557][ T25] kthread+0x2f0/0x390 [ 153.996613][ T25] ? __pfx_worker_thread+0x10/0x10 [ 154.001708][ T25] ? __pfx_kthread+0x10/0x10 [ 154.006289][ T25] ret_from_fork+0x4b/0x80 [ 154.010701][ T25] ? __pfx_kthread+0x10/0x10 [ 154.015278][ T25] ret_from_fork_asm+0x1a/0x30 [ 154.020127][ T25] [ 154.023132][ T25] [ 154.025436][ T25] Allocated by task 8966: [ 154.029740][ T25] kasan_save_track+0x3f/0x80 [ 154.034416][ T25] __kasan_kmalloc+0x98/0xb0 [ 154.039117][ T25] __kmalloc_noprof+0x1f9/0x400 [ 154.043954][ T25] sk_prot_alloc+0xe0/0x210 [ 154.048472][ T25] sk_alloc+0x38/0x370 [ 154.052523][ T25] __netlink_create+0x6c/0x280 [ 154.057267][ T25] netlink_create+0x3d5/0x590 [ 154.061927][ T25] __sock_create+0x490/0x920 [ 154.066506][ T25] __sys_socket+0x150/0x3c0 [ 154.071009][ T25] __x64_sys_socket+0x7a/0x90 [ 154.075689][ T25] do_syscall_64+0xf3/0x230 [ 154.080364][ T25] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.086263][ T25] [ 154.088577][ T25] Freed by task 24: [ 154.092366][ T25] kasan_save_track+0x3f/0x80 [ 154.097050][ T25] kasan_save_free_info+0x40/0x50 [ 154.102064][ T25] poison_slab_object+0xe0/0x150 [ 154.106986][ T25] __kasan_slab_free+0x37/0x60 [ 154.111731][ T25] kfree+0x149/0x360 [ 154.115615][ T25] __sk_destruct+0x476/0x5f0 [ 154.120205][ T25] rcu_core+0xafd/0x1830 [ 154.124431][ T25] handle_softirqs+0x2c4/0x970 [ 154.129176][ T25] run_ksoftirqd+0xca/0x130 [ 154.133662][ T25] smpboot_thread_fn+0x544/0xa30 [ 154.138602][ T25] kthread+0x2f0/0x390 [ 154.142657][ T25] ret_from_fork+0x4b/0x80 [ 154.147064][ T25] ret_from_fork_asm+0x1a/0x30 [ 154.151816][ T25] [ 154.154129][ T25] Last potentially related work creation: [ 154.160347][ T25] kasan_save_stack+0x3f/0x60 [ 154.165014][ T25] __kasan_record_aux_stack+0xac/0xc0 [ 154.170377][ T25] call_rcu+0x167/0xa70 [ 154.174519][ T25] netlink_release+0x1638/0x1b10 [ 154.179441][ T25] sock_close+0xbc/0x240 [ 154.183669][ T25] __fput+0x406/0x8b0 [ 154.187633][ T25] __x64_sys_close+0x7f/0x110 [ 154.192294][ T25] do_syscall_64+0xf3/0x230 [ 154.196782][ T25] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 154.202665][ T25] [ 154.204974][ T25] The buggy address belongs to the object at ffff88805f6a5000 [ 154.204974][ T25] which belongs to the cache kmalloc-2k of size 2048 [ 154.219015][ T25] The buggy address is located 128 bytes inside of [ 154.219015][ T25] freed 2048-byte region [ffff88805f6a5000, ffff88805f6a5800) [ 154.232971][ T25] [ 154.235282][ T25] The buggy address belongs to the physical page: [ 154.241681][ T25] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5f6a0 [ 154.250428][ T25] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 154.258908][ T25] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 154.266880][ T25] page_type: 0xffffefff(slab) [ 154.271541][ T25] raw: 00fff00000000040 ffff888015042000 0000000000000000 dead000000000001 [ 154.280105][ T25] raw: 0000000000000000 0000000000080008 00000001ffffefff 0000000000000000 [ 154.288674][ T25] head: 00fff00000000040 ffff888015042000 0000000000000000 dead000000000001 [ 154.297326][ T25] head: 0000000000000000 0000000000080008 00000001ffffefff 0000000000000000 [ 154.305979][ T25] head: 00fff00000000003 ffffea00017da801 ffffffffffffffff 0000000000000000 [ 154.314630][ T25] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 154.323277][ T25] page dumped because: kasan: bad access detected [ 154.329678][ T25] page_owner tracks the page as allocated [ 154.335372][ T25] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5120, tgid 5120 (syz-executor.4), ts 61769146679, free_ts 17584976391 [ 154.356885][ T25] post_alloc_hook+0x1f3/0x230 [ 154.361638][ T25] get_page_from_freelist+0x2e2d/0x2ee0 [ 154.367174][ T25] __alloc_pages_noprof+0x256/0x6c0 [ 154.372361][ T25] alloc_slab_page+0x5f/0x120 [ 154.377022][ T25] allocate_slab+0x5a/0x2e0 [ 154.381508][ T25] ___slab_alloc+0xcd1/0x14b0 [ 154.386170][ T25] __slab_alloc+0x58/0xa0 [ 154.390482][ T25] kmalloc_node_track_caller_noprof+0x281/0x440 [ 154.396706][ T25] kmalloc_reserve+0x111/0x2a0 [ 154.401458][ T25] __alloc_skb+0x1f3/0x440 [ 154.405860][ T25] rtmsg_ifinfo_build_skb+0x84/0x260 [ 154.411174][ T25] rtmsg_ifinfo+0x91/0x1b0 [ 154.415596][ T25] register_netdevice+0x1665/0x19e0 [ 154.420784][ T25] __ip_tunnel_create+0x2b4/0x380 [ 154.425794][ T25] ip_tunnel_init_net+0x21c/0x710 [ 154.430801][ T25] ops_init+0x359/0x610 [ 154.434943][ T25] page last free pid 1 tgid 1 stack trace: [ 154.440726][ T25] free_unref_page+0xd22/0xea0 [ 154.445473][ T25] free_contig_range+0x9e/0x160 [ 154.450306][ T25] destroy_args+0x8a/0x890 [ 154.454719][ T25] debug_vm_pgtable+0x4be/0x550 [ 154.459552][ T25] do_one_initcall+0x248/0x880 [ 154.464311][ T25] do_initcall_level+0x157/0x210 [ 154.469242][ T25] do_initcalls+0x3f/0x80 [ 154.473663][ T25] kernel_init_freeable+0x435/0x5d0 [ 154.478849][ T25] kernel_init+0x1d/0x2b0 [ 154.483321][ T25] ret_from_fork+0x4b/0x80 [ 154.487738][ T25] ret_from_fork_asm+0x1a/0x30 [ 154.492505][ T25] [ 154.494816][ T25] Memory state around the buggy address: [ 154.500453][ T25] ffff88805f6a4f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 154.508514][ T25] ffff88805f6a5000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 154.516566][ T25] >ffff88805f6a5080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 154.524622][ T25] ^ [ 154.528673][ T25] ffff88805f6a5100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 154.536818][ T25] ffff88805f6a5180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 154.544866][ T25] ================================================================== [ 154.554957][ T25] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 154.562175][ T25] CPU: 1 PID: 25 Comm: kworker/1:0 Not tainted 6.10.0-rc2-syzkaller-00438-g62b5bf58b928 #0 [ 154.572136][ T25] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/02/2024 [ 154.582177][ T25] Workqueue: events sco_sock_timeout [ 154.587459][ T25] Call Trace: [ 154.590728][ T25] [ 154.593741][ T25] dump_stack_lvl+0x241/0x360 [ 154.598415][ T25] ? __pfx_dump_stack_lvl+0x10/0x10 [ 154.603600][ T25] ? __pfx__printk+0x10/0x10 [ 154.608178][ T25] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 154.614151][ T25] ? vscnprintf+0x5d/0x90 [ 154.618473][ T25] panic+0x349/0x860 [ 154.622359][ T25] ? check_panic_on_warn+0x21/0xb0 [ 154.627462][ T25] ? __pfx_panic+0x10/0x10 [ 154.631867][ T25] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 154.637751][ T25] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 154.643630][ T25] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 154.649959][ T25] check_panic_on_warn+0x86/0xb0 [ 154.654891][ T25] ? sco_sock_timeout+0x8b/0x270 [ 154.659837][ T25] end_report+0x77/0x160 [ 154.664087][ T25] kasan_report+0x154/0x180 [ 154.668585][ T25] ? __pfx_lock_acquire+0x10/0x10 [ 154.673608][ T25] ? sco_sock_timeout+0x8b/0x270 [ 154.678547][ T25] kasan_check_range+0x282/0x290 [ 154.683481][ T25] sco_sock_timeout+0x8b/0x270 [ 154.688252][ T25] ? process_scheduled_works+0x945/0x1830 [ 154.693961][ T25] process_scheduled_works+0xa2c/0x1830 [ 154.699507][ T25] ? __pfx_process_scheduled_works+0x10/0x10 [ 154.705481][ T25] ? assign_work+0x364/0x3d0 [ 154.710062][ T25] worker_thread+0x86d/0xd70 [ 154.714734][ T25] ? __kthread_parkme+0x169/0x1d0 [ 154.719836][ T25] ? __pfx_worker_thread+0x10/0x10 [ 154.725042][ T25] kthread+0x2f0/0x390 [ 154.729120][ T25] ? __pfx_worker_thread+0x10/0x10 [ 154.734224][ T25] ? __pfx_kthread+0x10/0x10 [ 154.738845][ T25] ret_from_fork+0x4b/0x80 [ 154.743269][ T25] ? __pfx_kthread+0x10/0x10 [ 154.747858][ T25] ret_from_fork_asm+0x1a/0x30 [ 154.752624][ T25] [ 154.755910][ T25] Kernel Offset: disabled [ 154.760261][ T25] Rebooting in 86400 seconds..