last executing test programs: 58.128104009s ago: executing program 4 (id=68): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000000e00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x32) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_delrule={0x28, 0x21, 0x121, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x18, {r7, 0xffffffffffffffff}}]}, 0x28}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x44, 0x7, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xd4e}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040084}, 0x40040084) sendmsg$NLBL_CIPSOV4_C_ADD(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010126bd70000000000001000000080001000300000024000480050003b5646a06000500030080000000050003008000000005000300060000000800020003"], 0x48}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000140), &(0x7f0000000040)=@tcp6=r1, 0x1}, 0x20) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$inet6(r12, &(0x7f0000000340)={&(0x7f0000000040)={0xa, 0x4e21, 0x8f1, @private2}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="cf0298f676527c37bcf699f389f8d05bd3988f3f64a5a97f2ccac33c4eca63e80d", 0x21}, {&(0x7f00000001c0)="c5a5500ef2fc9923ace08b84071e09195b998bd3a06d40cbd0afb844824dffbdf27dab0f46b71d67f016ef0784eb81992c92d905b9467808fc6e15e9a212cd", 0x3f}], 0x2}, 0x8011) sendmsg$NFT_BATCH(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x38, 0x12, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) sendmsg$NFT_MSG_GETOBJ(r11, &(0x7f0000000380)={0x0, 0xfffffffffffffd62, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES32=r11], 0x34}}, 0x0) 47.414340326s ago: executing program 4 (id=68): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000000e00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x32) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_delrule={0x28, 0x21, 0x121, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x18, {r7, 0xffffffffffffffff}}]}, 0x28}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x44, 0x7, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xd4e}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040084}, 0x40040084) sendmsg$NLBL_CIPSOV4_C_ADD(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010126bd70000000000001000000080001000300000024000480050003b5646a06000500030080000000050003008000000005000300060000000800020003"], 0x48}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000140), &(0x7f0000000040)=@tcp6=r1, 0x1}, 0x20) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$inet6(r12, &(0x7f0000000340)={&(0x7f0000000040)={0xa, 0x4e21, 0x8f1, @private2}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="cf0298f676527c37bcf699f389f8d05bd3988f3f64a5a97f2ccac33c4eca63e80d", 0x21}, {&(0x7f00000001c0)="c5a5500ef2fc9923ace08b84071e09195b998bd3a06d40cbd0afb844824dffbdf27dab0f46b71d67f016ef0784eb81992c92d905b9467808fc6e15e9a212cd", 0x3f}], 0x2}, 0x8011) sendmsg$NFT_BATCH(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x38, 0x12, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) sendmsg$NFT_MSG_GETOBJ(r11, &(0x7f0000000380)={0x0, 0xfffffffffffffd62, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES32=r11], 0x34}}, 0x0) 38.675198391s ago: executing program 4 (id=68): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000000e00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x32) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_delrule={0x28, 0x21, 0x121, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x18, {r7, 0xffffffffffffffff}}]}, 0x28}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x44, 0x7, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xd4e}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040084}, 0x40040084) sendmsg$NLBL_CIPSOV4_C_ADD(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010126bd70000000000001000000080001000300000024000480050003b5646a06000500030080000000050003008000000005000300060000000800020003"], 0x48}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000140), &(0x7f0000000040)=@tcp6=r1, 0x1}, 0x20) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$inet6(r12, &(0x7f0000000340)={&(0x7f0000000040)={0xa, 0x4e21, 0x8f1, @private2}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="cf0298f676527c37bcf699f389f8d05bd3988f3f64a5a97f2ccac33c4eca63e80d", 0x21}, {&(0x7f00000001c0)="c5a5500ef2fc9923ace08b84071e09195b998bd3a06d40cbd0afb844824dffbdf27dab0f46b71d67f016ef0784eb81992c92d905b9467808fc6e15e9a212cd", 0x3f}], 0x2}, 0x8011) sendmsg$NFT_BATCH(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x38, 0x12, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) sendmsg$NFT_MSG_GETOBJ(r11, &(0x7f0000000380)={0x0, 0xfffffffffffffd62, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES32=r11], 0x34}}, 0x0) 28.71541507s ago: executing program 4 (id=68): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000000e00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x32) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_delrule={0x28, 0x21, 0x121, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x18, {r7, 0xffffffffffffffff}}]}, 0x28}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x44, 0x7, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xd4e}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040084}, 0x40040084) sendmsg$NLBL_CIPSOV4_C_ADD(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010126bd70000000000001000000080001000300000024000480050003b5646a06000500030080000000050003008000000005000300060000000800020003"], 0x48}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000140), &(0x7f0000000040)=@tcp6=r1, 0x1}, 0x20) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$inet6(r12, &(0x7f0000000340)={&(0x7f0000000040)={0xa, 0x4e21, 0x8f1, @private2}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="cf0298f676527c37bcf699f389f8d05bd3988f3f64a5a97f2ccac33c4eca63e80d", 0x21}, {&(0x7f00000001c0)="c5a5500ef2fc9923ace08b84071e09195b998bd3a06d40cbd0afb844824dffbdf27dab0f46b71d67f016ef0784eb81992c92d905b9467808fc6e15e9a212cd", 0x3f}], 0x2}, 0x8011) sendmsg$NFT_BATCH(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x38, 0x12, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) sendmsg$NFT_MSG_GETOBJ(r11, &(0x7f0000000380)={0x0, 0xfffffffffffffd62, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES32=r11], 0x34}}, 0x0) 19.151897826s ago: executing program 4 (id=68): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000000e00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x32) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_delrule={0x28, 0x21, 0x121, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x18, {r7, 0xffffffffffffffff}}]}, 0x28}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x44, 0x7, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xd4e}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040084}, 0x40040084) sendmsg$NLBL_CIPSOV4_C_ADD(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010126bd70000000000001000000080001000300000024000480050003b5646a06000500030080000000050003008000000005000300060000000800020003"], 0x48}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000140), &(0x7f0000000040)=@tcp6=r1, 0x1}, 0x20) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$inet6(r12, &(0x7f0000000340)={&(0x7f0000000040)={0xa, 0x4e21, 0x8f1, @private2}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="cf0298f676527c37bcf699f389f8d05bd3988f3f64a5a97f2ccac33c4eca63e80d", 0x21}, {&(0x7f00000001c0)="c5a5500ef2fc9923ace08b84071e09195b998bd3a06d40cbd0afb844824dffbdf27dab0f46b71d67f016ef0784eb81992c92d905b9467808fc6e15e9a212cd", 0x3f}], 0x2}, 0x8011) sendmsg$NFT_BATCH(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x38, 0x12, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) sendmsg$NFT_MSG_GETOBJ(r11, &(0x7f0000000380)={0x0, 0xfffffffffffffd62, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES32=r11], 0x34}}, 0x0) 9.038933025s ago: executing program 4 (id=68): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000000e00000000000000", @ANYRES32, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00 \x00\x00\x00\x00\x00\x00\x00\x00\x00', @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r2, &(0x7f00000001c0)=@pppol2tpin6={0x18, 0x1, {0x0, r3, 0x2, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private0}}}, 0x32) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r6, 0x1, 0x11, &(0x7f0000000000)={0x0, 0x0}, &(0x7f0000000040)=0x5) sendmsg$nl_route(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@ipv6_delrule={0x28, 0x21, 0x121, 0x0, 0x0, {}, [@FIB_RULE_POLICY=@FRA_UID_RANGE={0xc, 0x18, {r7, 0xffffffffffffffff}}]}, 0x28}}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r8) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPSET_CMD_LIST(0xffffffffffffffff, &(0x7f0000000500)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000400)={&(0x7f0000000480)={0x44, 0x7, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FLAGS={0x8, 0x6, 0x1, 0x0, 0xd4e}]}, 0x44}, 0x1, 0x0, 0x0, 0x4040084}, 0x40040084) sendmsg$NLBL_CIPSOV4_C_ADD(r10, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r9, @ANYBLOB="010126bd70000000000001000000080001000300000024000480050003b5646a06000500030080000000050003008000000005000300060000000800020003"], 0x48}}, 0x0) sendmsg$L2TP_CMD_SESSION_DELETE(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000008000000080009000200000008000b"], 0x24}}, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r0, &(0x7f0000000140), &(0x7f0000000040)=@tcp6=r1, 0x1}, 0x20) r11 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r11, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r12 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendmsg$inet6(r12, &(0x7f0000000340)={&(0x7f0000000040)={0xa, 0x4e21, 0x8f1, @private2}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000080)="cf0298f676527c37bcf699f389f8d05bd3988f3f64a5a97f2ccac33c4eca63e80d", 0x21}, {&(0x7f00000001c0)="c5a5500ef2fc9923ace08b84071e09195b998bd3a06d40cbd0afb844824dffbdf27dab0f46b71d67f016ef0784eb81992c92d905b9467808fc6e15e9a212cd", 0x3f}], 0x2}, 0x8011) sendmsg$NFT_BATCH(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWSET={0x38, 0x12, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x60}, 0x1, 0x0, 0x0, 0x40}, 0x20008000) sendmsg$NFT_MSG_GETOBJ(r11, &(0x7f0000000380)={0x0, 0xfffffffffffffd62, &(0x7f0000000180)={&(0x7f0000000440)=ANY=[@ANYRES32=r11], 0x34}}, 0x0) 2.146277491s ago: executing program 1 (id=1389): write(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x100002, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) (async) bind$alg(0xffffffffffffffff, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'crc32\x00'}, 0x58) (async) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000380)={0x2, 0x4e22, @empty}, 0x10) listen(r0, 0x0) (async) socket$netlink(0x10, 0x3, 0x4) (async) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) (rerun: 32) bind$inet6(r1, 0x0, 0x0) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, 0x0, 0x0) (async, rerun: 32) syz_emit_ethernet(0xce, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x2b, 0x4, 0x0, 0x0, 0xc0, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @rand_addr=0x64010101, {[@lsrr={0x83, 0x17, 0x24, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @private=0xa010102, @empty, @multicast2]}, @noop, @ra={0x94, 0x4}, @rr={0x7, 0x1f, 0x31, [@private=0xa010102, @broadcast, @multicast1, @multicast1, @loopback, @dev={0xac, 0x14, 0x14, 0x3b}, @loopback]}, @ssrr={0x89, 0x7, 0xb3, [@loopback]}, @end, @cipso={0x86, 0x43, 0x3, [{0x6, 0x10, "21a7500a0ef2a6a1d83f5c025070"}, {0x1, 0xb, "fd2d873567079a642b"}, {0x2, 0x2}, {0x2, 0x5, "d516bb"}, {0x0, 0xe, "3787512ea87ff1f00cf31189"}, {0x1, 0xd, "4ab0c1712d0d17511f04e1"}]}, @generic={0x86, 0x12, "df156eec463f465f1e3d81cce6e4adeb"}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) (async, rerun: 32) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xe47) 1.967746408s ago: executing program 1 (id=1390): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x2, 0x3032, 0xffffffffffffffff, 0x0) (async) r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000000), 0x10) (async) readv(r0, &(0x7f0000000200)=[{&(0x7f0000000300)=""/136, 0x88}], 0x1) sendmsg$can_bcm(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="05000000030800"/16, @ANYRES64=0x0, @ANYRES64=0x2710], 0x80}}, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000280)={'syzkaller1\x00', @link_local}) (async) syz_extract_tcp_res$synack(&(0x7f0000000040)={0x41424344, 0x41424344}, 0x1, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x101000, 0x0) syz_extract_tcp_res$synack(&(0x7f0000000140)={0x41424344}, 0x1, 0x0) (async) syz_extract_tcp_res$synack(&(0x7f0000000280)={0x41424344}, 0x1, 0x0) write$tun(r4, &(0x7f0000000600)={@void, @val={0x1, 0x4, 0xb7, 0x4, 0xa979, 0x1}, @ipv4=@tcp={{0xa, 0x4, 0x0, 0x16, 0xed, 0x68, 0x0, 0x9, 0x6, 0x0, @private=0xa010102, @private=0xa010102, {[@timestamp_addr={0x44, 0x14, 0xe5, 0x1, 0x8, [{@broadcast, 0x6}, {@remote, 0x80}]}]}}, {{0x4e23, 0x4e24, r5, r6, 0x1, 0x0, 0x6, 0x20, 0x1ff, 0x0, 0x6, {[@mptcp=@mp_join={0x1e, 0x3, 0x1}]}}, {"f0f9e6a99fb9889353d1fc3f6c519eeac54dbb8fda035b5c29c5615791e77114368cda575f082b66182209e6147d2a755e8dc644651c50e1268106c2a9883211639dae6af532c6f3fce347524463e217a92a10b8a75d544302c452853130e53a11b89b4dd5163364725758c5c1c09c143c69c52f0bd1219c1bd07032c82850e8fe320f57f47fa4f2c6aa068d2788f656dd2fbc2a6db2829de78b7afc00e669e8f8a2d5e0bd42e432370c12900d"}}}}, 0xf7) (async) write$tun(r1, &(0x7f00000003c0)={@val={0x0, 0x88fb}, @void, @eth={@broadcast, @dev, @void, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x1, 0x3, 0x10d, 0x68, 0x0, 0x3, 0x6, 0x0, @empty, @multicast2, {[@end, @end]}}, {{0x4e22, 0x4e22, r3, r6, 0x0, 0x0, 0x10, 0x8, 0x40, 0x0, 0x100, {[@md5sig={0x13, 0x12, "6c1e3dc0a004aba8162e569a145b72ce"}, @mss={0x2, 0x4, 0x5}, @window={0x3, 0x3, 0xff}, @mptcp=@ack={0x1e, 0x13, 0x7, 0x4, "dfea50f3df6bd0095135228b6b53df"}]}}, {"85d0229851be6c9883f47fa95864dfa5bf76dc5f169024eeff4116597217308833ed0bdba144e15b40bd6339f7f12da663e220dae324d5491a1e8bbf8f4d583700e8f40ee9e8a33ccea7ae9aace779da74b993453a03bc5f3d9459e4bbf54dc83cac9cc78a7d2a04227f6d8d5a4eec5b5d84b25f6412cceb0920ebd7ad6300ef8f7626059f17b1e7aefdb6a2d1d344bdab8abe32ce8492954969ebd0e1d097b334517927f35999bb21df0bb4c35e2d25bb394d18bf"}}}}}}}, 0x11f) (async, rerun: 64) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x200000b, 0x8c4b815a5465c2b2, 0xffffffffffffffff, 0x0) (async, rerun: 64) bpf$BPF_LINK_UPDATE(0x1d, 0x0, 0x0) 1.841103965s ago: executing program 0 (id=1391): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='freezer.parent_freezing\x00', 0x275a, 0x0) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f00000002c0)="f9", 0x1, 0x54, &(0x7f0000000040)={0xa, 0x0, 0x0, @private2, 0x20000}, 0x1c) sendto$inet6(r1, &(0x7f0000000000)="db", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x4}, 0x1c) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000100), r2) sendmsg$NLBL_UNLABEL_C_STATICADD(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x14, r3, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0x0, 0x0, 0x840}, 0x20008044) shutdown(r1, 0x1) r4 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@broadcast, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x2, 0x0, @multicast2, @private}, @address_reply}}}}, 0x0) sendmsg(0xffffffffffffffff, &(0x7f0000000640)={&(0x7f00000000c0)=@ax25={{0x3, @bcast, 0x7}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast, @default, @null, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x80, &(0x7f0000000940)=[{&(0x7f0000000340)}, {&(0x7f0000000340)="6c99c308750bb95ce880af043676db01899202d675469a466a9652627be040f5ad", 0x21}, {&(0x7f0000000500)="176eac06e82ca47dbd0bcd0509ace94076972fff1406c54285039547e20d179d2d15babd5aabb85d2f1163afac6cafd381506b48934db84e9bde83e8949de3f5876540122c657fec140cc89566071aca3ae3d863209526bc03533c51feaa5de9ce33fa11ebc521b2adaae2f8505faf446396bc99e38d5e7543e21604e16f9d0dc822a98b2e6e48c7a54bdb22fda40a666dcdc15013ae0f3b905c6f4135efc6f842d6d336ecaa4a015cf1fd5ded5573546229280a86d80f18dc38b863b8bbe0fae2a36407dcc7563e9339deac8765b13c", 0xd0}, {&(0x7f0000000680)="6b6bece0bb48d8d5d533d892cee8dd7da0e7e2d84592e1d405f3ad0c13c0a7bfe17074e2c76c7ef56035b5d59f75b74b17923ee59aac1e3f4d8416ced161f10a541f6b99b0971f3bc0bb517378635628d5a2692f22ff0cf9ff00040f0147fd0dfa3cf7d07213158e93e33905f948d8f8ee7c22cec09a7609dce8994cfd99174547da0085cbcaeec47d47ff74ba4684192ebdef1147531475", 0x98}, {&(0x7f0000000440)="8d3e3cf15f19861fe4b87c1a2acf12a35e6ff8518a68fd35c8dd16491aac5aec804f93437e4f4464a4ffb6d6d16399cc239db77b", 0x34}, {&(0x7f0000000480)="297d6d24b3da", 0x6}, {&(0x7f0000000a00)="9e1595442e4f395e6755b5e1a0886821eeddd4120d0358689710c43bda0a23c64e16618697ea7ccd0320f151039750c9a3614062686756fbe1c2a93ede3df68a49e5c3396194ba6da82d76b15d03", 0x4e}, {&(0x7f00000007c0)="eee908cc4e3c9f818c992fd1ca01ee5cb4874d806b06a6dc9ee9b98669e389b113fbc873c454a0db7f6b7a252624449332191b8efc193f1e4f02217993c2087a1bbaa3e68ea9402d464d149f2195b9af4c948f438f41df9eae008f24a6ddbab0baaaa0ff72eb57be9099cff8716687750be9459820f3ff7515dd9bf78396af62a3f8f94c0ad2e34ff51b2cc6967fe525afdb41e4d7204cd1a661feddb88f4f74e68fa56fe4cf3079b0c84b3dd87d640607751a", 0xb3}, {&(0x7f0000000880)="c32cd0aa76b28427b21dd20fa730f371ec0c1137ae310037ad85859a6ef69a62cdac7927c91d4aa7318e71bfedb4053244734efc134fa7a2b636702291751777928b3e31ea74ce03eecd20b9f9250cdfbcca992bd39fb376ddaadd17f38fa45d547bb944fde88dabfcd1ff188f2948c14439157c9641ec1b2026447d9333dfb1345b2358404f59feb6137b0f97bb75def284b030d7276c40cf1c3ac2798556028c089ac54275d4d66b5925", 0xab}], 0x9, 0x0, 0x0, 0x11000000}, 0x4000899) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x7, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) ioctl(r4, 0x8b2a, &(0x7f0000000040)) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000240), &(0x7f0000000280)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(0xffffffffffffffff, 0x84, 0x18, &(0x7f00000001c0)={0x0, 0x7}, 0x8) r5 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r5, 0x29, 0x31, &(0x7f0000000040)=0x9, 0x4) bind$inet6(r5, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) recvmmsg(r5, &(0x7f0000002dc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000002fc0)=""/4103, 0x1007}}], 0x1, 0x0, 0x0) sendto$inet6(r5, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x1}) ioctl$TUNSETQUEUE(r6, 0x400454d9, &(0x7f0000000200)={'veth0_macvtap\x00', 0x400}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000100)={0x0, 0x2c00, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) 1.245682417s ago: executing program 0 (id=1396): syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) (async, rerun: 32) r0 = socket(0x10, 0x3, 0x0) (rerun: 32) sendmsg$inet(r0, &(0x7f0000000340)={&(0x7f0000000140)={0x2, 0x4e22, @multicast1}, 0x10, &(0x7f00000001c0)=[{&(0x7f0000000700)="7a6966dc8772ce0aedebbe19f7529b7a906407b6de932cda7ecc4977826983696bd59f63a171e60963b765abe385fce69ed89ea8fe00de9861ca3f62a031732e9880f054bfb5dc442da997024238c71c6b9ce934482d33fb10c1ce30db64aed341203d3c2223f73bcb53fb8cf88ce38ea62b91543a8f58a4d81c1a54c19b83bd3ce702865f3b5b5d58ff711991237ccdbf2c49bf6733465f021c1a4ee6f8fb6eb7f2c2bc1d3a9ff4492ad2434343db333ff3b6892a5aea8b0ec0d0c233041f346ad9c117329b56e2e9fce237ce9235d2b6b84b97ab1bf927263debb3ad965de31fe1cbed09cd800f897e75e12ba9168361837cf60cd1fb4e2ab598ab3f52b5994a585e150184496ecbea7480d41e2accd5c3b41211c30770c0362115150c0a18ca02f7ba71aa4f346c7e0d8e723670d2f4aa1263eba4931d567df72080ae52dbd182afe300e7e3fce1255fbe733d31880a831f8e59ed98bbf52e6e2801013aef52d8e1091b9aff1670cf781d77504e863fcee4690bcaacc2dbd8a916aa7fc40f5a8a38d0380191faa18d24637a9ef455eb1b06acf0ef073846619b965e0c291fc0d0dd1a986edca57aff845d68ea3b91d184c8f748ba4e98d3c31f32664580dae09ee349ba8e701e743ddb68bab8232997cd4ff1162a170ada498499d3a7522c7ee7f1b32e48d2c5c797f84403109305a715c9b68faa42500c9b0467815d3eaf856bc7084d8d11df148899937cd131b04f83ebcc662dbd66f61f3bb4191f46d513b02e5772736d22e79c1383ef0667dd93a2759cb3485ce7a0656e13966cef46871354a3fa4729d74414486e28de40d7decd411b7d347e948ca5dcdafad655acf17060a70028f885a7b348657a9c7bcb535a8ebf9c48747ee2b947fb86fbbaba5bde3285daf1d3107941838d9ca76662e7f93237d01699f2c5e0f0c595eecd8cd5dc70c561cd3434e1dd63decf262894bca9042548cc6aec66493060c117be7db20ec0eb1a3ff61aecce5018bf4ad3260572f31dd81232483a8e919d033e7560119954ae2d718770094b6215bd50751158c8a659e674a7d4e2e2e5df3dff7e4af76ad2e7f12f9f8c7adfde47ab5c917ea23cf5f162381920a0e44acd979c069c8a119b1e68bd10a763d8560a464ff1fc8e5e47da726b9a9460d250c1194de987bf5f8f7e6a3358e565154699bdadf050ca03096074f595548dddbf87c1dd788a303ce243a0c6a34a7f0125b0f824a22a70a683726a0898b9bbc8c85e7284b546cd4b14006aec7ce0fdef47ba32f6ceae656e421e2a6d0f2a8e7161043bee8237e497dc331eb3137a18249f6302c676d810f46acab3f98929634f0565df0a157b6c9db220c048e2dabcdf66a8b0109dfd4b9677ccb5c702d1f395e5fa9883592eb13e422b1e690dd4d65ff20c3bf893617c1846459e34aacdd1a5e2c122e67035e136e23fc7c31922d466404ec979914fcec0611aa240c873509a12448d2b36721c8685af80d3568d5d7c4c0586bac69e69d903b1487fc7eaf0e7722ab2997b70e47f1276224431622c591753d1ad52919c88151f29ad8365816a7dc7f7fc5c75bb910b57ee86d5a9dc26713c59f28ec70e1b0948715d2c9969bab53fcf3ff9b6da9efef5e5d82a8056cf4cb864da6248e843e8c848c6d31c466b03de27213d55c2b9113c655345543ed6e08ae27bc6610526b359679d48a020f4fe993a57736849709b6bf2ac7f30dcabb580015bd569d5fb5d4f6834c6c59304dbeda36acbf9dc7e1c52be89d77b12772281a1fee64127e3751342b85cd2b5c62487fa0984683decdea812d2688bab3583b1e74a7b2cdfe65b2b0b32b0806b04c6016587f6435e8fab7b5a985ab442a0b2d18f60523ce50fa35ec1b21c911cef195044fb1bd838be883023cfefd13653fd2f7a27aad3388ad8f9eac91913451139555350f74afb6f6f064ec939fe445fb22824897affb1b1836e8f07a6768e27f408d85f8f18d9a93a710681048f72bfc5fb8ec03c8815217871617f6c8b52a69165064e6121a778c253fca1ac39328c04c08b17720759cc1a8632fba8d231fd5ea1675b06f69de76a531f0ae7c7a146a4f7bddd82e30fcce205748b653bf8a5092704b7a2a3b4eafbc73be514c3b5dbbe0de4711930671e9c46bfceb365ed747b5e702436cad9031794c7553274f6542a274e70e1945da8b691a29bfbccdbb19a63bbfdc6e8ca91061c73ee0c6d60d2ac7712038542dad65c61425c6a4d4a279a4b55e88f037a283bc2c8ce87f2f00efb5548d75d97f07e032664ce9dc07618151f16ea5d8c091bc9a0bc04eced7a855f03cfe4a0c60b5d8a1246163d899856a43f545afb968537600342e69504f2da2d7ac39ffdf8f2dc5b82f0cd6cf577e4ea77940a30200827989bb692e198e46afa621358e0fea9bc97ec007f062da4af54fcbde88c2e996523080d08a584f9a239b894f5231412a630dbb04ca4518256867336b7935c820dc2c8dd9e0bbb0a445d6e0267ff8be69db2448e0f025a2fb8b9e52f21c7dbe9795a029a0522f13ccdfe5dd936853bf18c5c7e320ff65369f4ed647ec1d92a05f813a93d21cbd87791319bbe91669be327e06f503ab3a0713bbf50e2ddfc61c1f6291beb1ad87dc46da93c493b2ab6e7f03b7e7a24a03cb91596f65ecd409b83ce2615f9cd5a48f6facafd6a91173c736546d5d36d8557f14187c58bc528fe56b7d8e4aba0cb7f294b2833a0a697e1a6299521b65e77b1f40b2a7176de7735b77a0c7f52df9fa2497413649f3fdd69abe1208265cfa627aa1dbf4db30ba3db6d19c3e6b6397d4a8d56d7788537e83ddf1cd4b310b47e33acedab1218230efcbe4c18365db5dc161147521534723fa87efa7e24474a295e619caa63bc6388a703a9f0aee53a4934e7347944fda12920a704008dfd43d854ef9b6f66b9df2d23225bdf7c8919d7979a0eecaa4101a5e8f7e8fe8834a35cc47e81b9365361341b85dfee1c5465fd697b3049a3c1fc0e647f5e3de8e99e80c5f23fcb1960800604b9fe8503d4ad999791e33ce56640629e433a60c8b1f59935f9905d85fa307ae1cd7a81bac3dfdae52a9eb999c8100802d5b3181b4115ee15a7c4967d1c2fa91209e2ec5df03d5168c0ef617349d37668b4baa1714defa016bb5e942a4ffccce7847482dd8751bc20ac09208e3153d1af38f82b09fcf3c316a031952cd381ce6d753f201699a5b8700dd9686fb2151c00d91acf0804c9ab53fafbbfe71f659348d0169634b729e30ec85bffbdbc9c6132649b95f02eeb68ede33c30362c89cfc285cb0c0d95a2c7d1f72953035cdcf440c952368fc82d6a59ee20812262d55d27f5bab0dc26405e6709dcefbb9d52ec1bb938237c2c56bf2c21341678c588d7f8deda60d8ee0c90bc92f19da54fe5bbf790167cb712ca01028c7e48bba7406a679657e39eea7dcd11c72b2c1c1661cb5d09aee9d2f4777f4c21eaee9b77c572caf9fecf03351993b3835000e0b947e5900244606782917a0a7d57e5c0408a6ffa37dacf9a3fa7389610855bfebb67383f4dcb4a554a0da9ae6233ceab545a52286611dcd7aac873ec62c96435d26a6274970a61d6751057ac7c374adf4e294bd37be59921e8a36cf4c80e605e26fdce3e29f199fb045d508d2b87a9b2c86078cf4c27814b2aac35f643bbb4b66e14c7afdf5a7e1dc113d573bfa33c6b276ad8b38de2899345a5437ba14136b695a17edc2273def826509ec003b340ac1e25faefc4a9e708b7758ba7609b78131aeea97ffcde675d1bc6608058015756857d08de536f9206d0ea629b1078298abc4c28625095df184247414c9380617f7d4b7c513cf8ca3e37f1e0fa7d6a8db097852af12836e7b9a2b5de86f34e6a6060bf4b9f8f874735151b280beeb93c4c00a228b23498a38190d9dd32276e0b562f364905b9cf850e3425f2d34d1bcd97bc5d5c28dc7f2c1eed98dd1ab0f84681657c7c6b5784685213c678189cddab94b3c491ff8d1d57e71189b928535d38af5bf3e553b3abce214cc07efd974c16da059a0fb1c778317e3eedc3d627d9e887383c823cefff7117c37a83e34d2712ee81446bb1cd5cea8d5df0f93e776128551b29e94ef2b8a895220a5f661c0271fd4980585e8b5a9a16f320626fe391d2a59de9b12f4a08ebfc00e39757aaab05b43379bdd23189ff5b333b4350bc929b8b5f1a731d1c01710658a0ae4b28833bfed26a67358a6075f695f71e022f93e253386f7d08cc880ed6c53372717791f4ba461cb7dbb60c3e5aff161eb58a3774e38c6b0abf0a18368efe5deba45d538b22b7fb9352b4a3a17a85b47113bd3cb6445d2e275526ab836237804c616bb1d9ffc84b0d7fb0b8eceae38ed1f66f829deb1e22bec9da5db8968f4920caadaf5cf4169332321ffe00192ef56fe03166f76a3458c376c3a44fdb46b1da259f8c0fbaf29ab11a4750d6e6281a27ff1b98066118cc18e697677ed330c9e5c24cd7c04f53ea6813408cb3acf373988bedc5b53a5dc14fa4860da5c5c32916a62a984840ba65999189c926ad0fd55757fbe6172d1f0b2c4ab4bb1d440177b7e591f249312dddf69691fbfa9857f661b2fe682f5a24cc592cdf72682c6c209e7f9da8a7fc41e2ef79e633e6299c26b4ca73cfe779374ffb0a4a49120f4561b22f2db3c13130b4cd5b54ea3178d540aa7e25bed3096d344dd04a7fe1d86c65afef7e4bec4ec987204f8c0e64251715063fafd6123abf13eb9c07f8ed01060c99bfafaccf9e8d47d5f3617edf486f6c7c4738b9058b2a5f99ec01a50c353e21c9bdfbfefdb4c79180a0f5efc23c7424cc8b1ee60d74376f06089fafa3eaaca133c3ddc62cb925aacca604ee4e8f5ceaf1381f84871b42383e1bbe0eadff6d71702fd703a0bbd46d73171cb78ce4b286003e801220807c3da18891fae1e92793b8a47e0dd598728abdfaa79f487a35fab52e46ba48655a172ce94e39901ca2b65c7db5706578db7c2be5867a895c4dcf8f82116f4d45e6f3113a82d130e60c347e5e7678831bf2f5222d944aa4464b88b26ec2c83f214ba4d2ea5cc5f08919838bd20260bda573d56ad730bf7576cf8a68de83609f25be478fecd89ae42a598a867ed0a490595676eea1a84653ed1824c124f724905b099806df0b970cdea65a11d99bc3dbbd86beb24d90a21f91e9b03587f9b2425be2efe7a64b7851f9bdc085383cf7e5d5c044efb7c18b9987787e97a2467ab14bdce473a704bc85ddd97db49fe87b789dae756a5e19bf28dbf5dd52a195cf6ed51398e336bb6b92d3968dab9fcb8fcd121b2d57e9d967e009044f92d33c856eed658a715461257279441abc010506099b50c22a6c7602e6848f3a414a436aaac33a2a21b1f22b3f4c856476ba1a59af08aa7f849a03a87e40bb638b79458da6a2261f40d7e8b28fa5bd026d44600bf96dff423a63e5565e48807b368a3b32bbe171cc01494a99ece2976e0a05862a5de007adc17520bec481500d55fa4db81dc8a8528139eabb55984fca54efd7b856c010d6f35ac93c10e21e50d936986ecc49f1d48efccc717b8bf7989fb3d2e5010ce2023e73b5b09e690fc300350e4f31a5e8abe1f6afae8d9f93123e474f15193f92b1d8d426e304f44a55c4ec58ed07a2fd48626c0326f467fdbe9a4da0938335669338d9257da807f76218c986d80405822136f6987c528dab37136f9a683f949832317543b0b4cf633653dc858c214cd48edee97b230253f5006a194ee3257e31ad423d697e0ff2d285a3f6cd3ad92c454c0815", 0x1000}, {&(0x7f0000000280)="a6d374080a861a26182de319e776302dc4a07231b4fea87054842b2c889d767201ffddf8ebfaa1ab965e9db187c4d4f53ab127f01c75d47044d418e7444750a4d1b5ce6bcb72d1d310bdcb7f16838f01a121013816b717daa264e2c14f20bac62a65aa22db9755143f1e5bacbfbc42e84a165f772313720bbf5471ee170e9adbf8f39642d0d99fa8881bd74c8a3d039ca5c4", 0x92}, {&(0x7f0000000180)="6bdf7122d79890e46c33c1aa4f5c2f60b033ab8e61b096f20f22b7de1832459400e2ee65254e3a8452777765c77d9b55c16caec44a", 0x35}, {&(0x7f0000001700)="823203ca0b42da59ea4bb31b790bda3531c88e8e4c17d53c58fe2ad0c13eecf8a8a4fff73148a2ffe8bcb8391715e3fda9fb51a57f7d256e859b4df4599c35e17d76ef96f566484490f5088ba39e387a0ce9a971df5c7436ba0844c016af98a28b83fa023b40273b56a464e5c17f4ea4b303207b9e27e10a7525dc1ac458b3ebedc69160354047b1591973fa2ffda268c81335bea38e469922b184d9e49e46a6a67e0346a59c355e0d5237850c1fa5f659a82580b82165fe4d7153126c15e70ed6d21b2b0548908f89f76750db9c103745939beb7018440eedc2a081f9cbf25a217d15e0fa2893c8ce7d7c9c62efac62648aaeaf76b8e5", 0xf7}], 0x4, &(0x7f0000001800)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x3ff}}, @ip_retopts={{0x5c, 0x0, 0x7, {[@noop, @lsrr={0x83, 0x3, 0xb7}, @noop, @timestamp={0x44, 0x14, 0x4b, 0x0, 0xe, [0x1, 0x9, 0x800, 0x933]}, @noop, @cipso={0x86, 0x31, 0x1, [{0x7, 0x10, "089747ac4789a0cf169093ce5dcf"}, {0x0, 0xe, "cf8aa0bed5147c2bc1b90da7"}, {0x7, 0x2}, {0x7, 0xb, "f003a65a761e7b2395"}]}]}}}, @ip_ttl={{0x14, 0x0, 0x2, 0x5}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x38}}, @ip_retopts={{0x30, 0x0, 0x7, {[@ra={0x94, 0x4}, @ra={0x94, 0x4, 0x1}, @rr={0x7, 0x17, 0xa0, [@remote, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @broadcast]}, @noop]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @remote}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x101}}, @ip_tos_u8={{0x11}}, @ip_retopts={{0x6c, 0x0, 0x7, {[@cipso={0x86, 0x5b, 0x2, [{0x0, 0xe, "711403605c07251c5ab394c6"}, {0x5, 0xf, "25c7640464ba1b1215e7a77b8b"}, {0x2, 0xd, "d4c40feedbf98a85c14342"}, {0x5, 0x11, "1c6b988d494c7b2c6ebcb6a58c42b4"}, {0x7, 0xd, "2663dd5e354c33dae00c35"}, {0x6, 0x5, "d8af16"}, {0x5, 0x8, "5f962582d117"}]}]}}}], 0x198}, 0x40c0) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (async, rerun: 32) r3 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'netdevsim0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000540)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x8003}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r4}]}, 0x40}}, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) (async) r7 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000001ac0), 0x4) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x11, 0x4, 0x4, 0xbf22, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f00000002c0)={r8, &(0x7f0000000540)}, 0x20) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001c00)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000001b80), &(0x7f0000001bc0)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001cc0)={0x11, 0x1, &(0x7f0000000380)=@raw=[@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], &(0x7f00000003c0)='GPL\x00', 0x7, 0xc5, &(0x7f00000019c0)=""/197, 0x40f00, 0x8, '\x00', 0x0, 0x0, r7, 0x8, &(0x7f0000001b00)={0x7, 0x1}, 0x8, 0x10, &(0x7f0000001b40)={0x4, 0x9, 0x3, 0xc8d3}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000001c40)=[r8, r9], &(0x7f0000001c80)=[{0x0, 0x3, 0x5, 0x7}, {0x4, 0x5, 0xb, 0xa}, {0x0, 0x1, 0x7, 0x8}], 0x10, 0x1, @void, @value}, 0x94) (async) sendmsg$NL80211_CMD_NEW_KEY(r1, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="84000000", @ANYRES16=r5, @ANYBLOB="01002abd7000ffdbdf250b00000008000300", @ANYRES32=r6, @ANYBLOB="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"], 0x84}, 0x1, 0x0, 0x0, 0x4000015}, 0x40000) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) (async) connect$ax25(r0, &(0x7f0000000080)={{0x3, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x8}, [@bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r0, 0x89f1, &(0x7f00000006c0)={'ip6_vti0\x00', &(0x7f0000000640)={'syztnl1\x00', r10, 0x29, 0x2, 0x3b, 0x6, 0x50, @local, @mcast2, 0x7800, 0x8000, 0x10000}}) 1.177401809s ago: executing program 3 (id=1397): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='cpuset.effective_mems\x00', 0x275a, 0x0) write$cgroup_type(r2, &(0x7f0000000040), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) getsockopt$IP6T_SO_GET_INFO(r1, 0x29, 0x40, &(0x7f0000000380)={'raw\x00'}, &(0x7f0000003240)=0x54) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="140000001500010000000000000000000b"], 0x14}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000100)={0x0}, 0x8, 0x3000000000002, 0x0, 0x4000}, 0x0) 1.096898918s ago: executing program 1 (id=1399): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x0, 0xe40, 0x0, &(0x7f0000000900)="e02742e8680d85ff9782762f86dd", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), 0xffffffffffffffff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000140)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r2, 0x0) socket$packet(0x11, 0x3, 0x300) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000004c0)={{{@in=@remote, @in6=@loopback, 0x0, 0x0, 0x0, 0x0, 0x2, 0x20}, {0x0, 0x0, 0x8000000000000000, 0x0, 0x0, 0xffffffffffffffff}, {0x9}}, {{@in=@loopback, 0xfffffffd, 0x3c}, 0x0, @in6=@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010100}, 0x0, 0x3, 0x0, 0x0, 0x4000, 0x0, 0x1}}, 0xe8) r4 = socket$key(0xf, 0x3, 0x2) r5 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r5, 0x29, 0x2d, &(0x7f0000000200)={0x3, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x4e22, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}}}, 0x108) sendmsg$key(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)={0x2, 0x12, 0x0, 0x0, 0x2}, 0x10}}, 0x20008040) r6 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r6, 0x0, 0x60, &(0x7f0000000800)={'filter\x00', 0xb001, 0x4, 0x3a8, 0x0, 0x1d0, 0x0, 0x2c0, 0x2c0, 0x2c0, 0x7fffffe, 0x0, {[{{@uncond, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0x1d0}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x46e, 0xfffc}}}, {{@uncond, 0xc0, 0xf0}, @unspec=@CONNMARK={0x30}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x3f8) 1.045379687s ago: executing program 0 (id=1400): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, 0x0, 0x0) ioctl$sock_SIOCGIFVLAN_SET_VLAN_INGRESS_PRIORITY_CMD(r0, 0x8982, &(0x7f00000006c0)={0x2, 'dvmrp1\x00', {0x4006}, 0x5}) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000001440)={0x1c, r3, 0x400, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 1.034334355s ago: executing program 2 (id=1401): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000380)={0x3, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="180200000400000000000000fcffffff185000000600000000000000000000009500000000000000095e18c48056325d0639fd30819df802d8b300ad665aa0aa113163e1159517ec693bc8c533c8b21997a8c076466b7c66336487ab5085d8844f714c57fc640054abebe974a98500c583f2cd0364d3bd2bfafc82c469d2874a9674203ba11182af17fd0ed8df4163c3fd072849d40a720388ecd70c425da071ffbd9f6f"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) (async) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[@ANYBLOB="9feb010018000000000000003c0000003c000000020000000000000002000084ffffffff000000000300000000000000000000000200000000000000000000000000000a030000000000000000000002"], 0x0, 0x56, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x1a, 0x4, 0x0, 0x1, 0x8000, 0x1, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x4, 0x0, @value=r3, @void, @void, @value}, 0x50) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000200), r4) sendmsg$NL802154_CMD_SET_LBT_MODE(r5, &(0x7f0000000480)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000440)={&(0x7f0000000240)={0x34, r6, 0x0, 0x70bd29, 0x25dfdbff, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_LBT_MODE={0x5}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x34}, 0x1, 0x0, 0x0, 0x2000880}, 0x20008000) (async) r7 = socket$kcm(0xa, 0x7, 0x0) (async) sendmsg$inet(0xffffffffffffffff, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)}], 0x1}, 0x0) (async) setsockopt$sock_attach_bpf(0xffffffffffffffff, 0x84, 0x1e, &(0x7f0000000000), 0x10) r8 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8916, &(0x7f0000000000)={r8}) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x71, 0x11, 0xae}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x2a}, @exit], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) ioctl$sock_kcm_SIOCKCMCLONE(r7, 0x8936, &(0x7f0000000000)={r8}) (async) r9 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) (async) socket$packet(0x11, 0x2, 0x300) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xd, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x5, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x4}, [@call={0x85, 0x0, 0x0, 0x5}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000580)={r11, &(0x7f0000000500)="58a6ffe71d1390cb6dd716e3fb8356725b08c2a14cd6f1efa45543a2b6f45d99450b11a2321e00045a3ffc29de483cf242edc0a56ee31d03b647ad2b8bb1a27ca19c542f033d4ca9638daeffe4324d23d5c345727d82e9b269349f474ef722f7998f5d5f116e2fcc9bce250244415499cbbbec0846eb", &(0x7f00000029c0)=""/4096, 0x4}, 0x20) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='tlb_flush\x00', r11}, 0x10) (async) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000001a00)={0x30, r9, 0x1, 0x0, 0x0, {}, [@NBD_ATTR_CLIENT_FLAGS={0xc, 0x6, 0x1}, @NBD_ATTR_SIZE_BYTES={0xc}, @NBD_ATTR_SOCKETS={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x44810}, 0x0) (async) sendmsg$NBD_CMD_CONNECT(r4, &(0x7f0000001c40)={0x0, 0x0, &(0x7f0000001c00)={&(0x7f0000000180)={0x24, r9, 0x1, 0x0, 0x25dfdbfd, {}, [@NBD_ATTR_SOCKETS={0x4}, @NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x8}]}, 0x24}}, 0x4040) (async) readv(r0, &(0x7f0000000000)=[{0x0}], 0x1) 991.299014ms ago: executing program 3 (id=1402): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x803}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000780)={r0, r0, 0x1, 0x0, 0x0, 0xb, 0x81, 0x6, 0xfff9, 0x10, 0x2, 0x8, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPGETCONNLIST(r1, 0x800448d2, &(0x7f0000000140)={0x1, &(0x7f00000006c0)=[{}]}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xa, 0x5, 0x2, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="0400"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000000000000000000000000000000000006e62aa61ff84ac3bd9119ea11900388dfff96e08251e4938c0ec0cb76b897bcfcafb4950891a"], 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYRESDEC=r4, @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000300)='tlb_flush\x00', r5}, 0x10) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cpuacct.usage_percpu\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r6, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000060000000160a01010000000000000000010000000900020073797a30000000000900010073797a300000000008000740000000032c0003800800024000000000080001400000000018000380140001006e657464657673696d30000000000000140000001000010000000000ffffffff0000000a"], 0xa8}, 0x1, 0x0, 0x0, 0x4080}, 0x0) ioctl$NS_GET_PARENT(r2, 0xb702, 0x0) bpf$MAP_GET_NEXT_KEY(0x2, 0x0, 0x0) r8 = socket$netlink(0x10, 0x3, 0xf) bind$netlink(r8, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r9 = socket$netlink(0x10, 0x3, 0xf) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r9, 0x10e, 0x4, &(0x7f0000000080)=0x100, 0x4) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r9, 0x1, 0x8, &(0x7f0000000000), 0x4) r10 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r10, 0x0, 0xca, &(0x7f00000000c0)={0x0, 0x4, 0x0, 0x0, @vifc_lcl_ifindex, @loopback}, 0x10) sendmsg$IPCTNL_MSG_CT_NEW(r8, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000140)={&(0x7f00000002c0)={0x38, 0x0, 0x1, 0x201, 0x0, 0x0, {0xa, 0x0, 0x3}, [@CTA_LABELS_MASK={0x24, 0x17, [0x8, 0x0, 0x0, 0x3ff, 0x800, 0x7, 0x10100, 0x131e]}]}, 0x38}, 0x1, 0x0, 0x0, 0xb4}, 0x0) setsockopt(r2, 0x64, 0x1, 0x0, 0x0) bind$can_raw(0xffffffffffffffff, &(0x7f0000000000), 0x10) close(0xffffffffffffffff) 857.252102ms ago: executing program 2 (id=1403): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0xfdffffff, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x17}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x38}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_SET_ELEM_USERDATA={0x4}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}}, 0x0) 814.137805ms ago: executing program 0 (id=1404): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=ANY=[@ANYBLOB="1801000000000000000000000000000085000000050000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008008000b703000000009c8c850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="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"], 0x238}}, 0x0) close(r2) getsockopt(0xffffffffffffffff, 0x0, 0x36, &(0x7f0000000280)=""/21, &(0x7f0000000400)=0x15) syz_emit_ethernet(0x36, &(0x7f0000000440)=ANY=[@ANYRES64, @ANYRES16], 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) connect$qrtr(0xffffffffffffffff, &(0x7f0000000000), 0xc) close(0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x64, 0x2, 0x6, 0x101, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @private=0xa010100}}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x64}}, 0x0) r4 = socket$inet6(0xa, 0x3, 0xee) bind$netlink(0xffffffffffffffff, &(0x7f0000514ff4)={0x10, 0x0, 0x25dfdbfb}, 0xc) syz_genetlink_get_family_id$tipc(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(0xffffffffffffffff, &(0x7f0000000240)={&(0x7f0000000100), 0xc, &(0x7f00000001c0)={&(0x7f0000000180)=ANY=[], 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x4004081) socket$netlink(0x10, 0x3, 0x8) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="4400001000010400000000fbdbdf250000000000", @ANYRES32=0x0, @ANYBLOB="2323000080000000240012800b00010065727370616e000014000280060002000600000008000700ac141411"], 0x44}}, 0xc0) bind$inet6(r4, &(0x7f0000000600)={0xa, 0x4e24, 0x6, @empty, 0x2}, 0x1c) r6 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$inet_udp_encap(r6, 0x11, 0x64, &(0x7f0000000480)=0x1, 0x4) r7 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), r7) sendmsg$nl_route_sched_retired(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=@newtclass={0x114, 0x28, 0x20, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x3, 0x10}, {0xffe0, 0x3}, {0x9, 0x10}}, [@c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x8}}}, @c_cbq={{0x8}, {0x34, 0x2, [@TCA_CBQ_FOPT={0x10, 0x3, {{0xf, 0x6}, 0x4, 0x8}}, @TCA_CBQ_WRROPT={0x10, 0x2, {0x1, 0x0, 0x4, 0xff, 0x7fffffff, 0x98d6}}, @TCA_CBQ_RATE={0x10, 0x5, {0x6, 0x1, 0xf4d8, 0x5, 0x200, 0x6}}]}}, @c_dsmark={{0xb}, {0xc, 0x2, @TCA_DSMARK_MASK={0x5, 0x4, 0x5}}}, @c_cbq={{0x8}, {0x24, 0x2, [@TCA_CBQ_RATE={0x10, 0x5, {0x40, 0x1, 0x3, 0xba, 0x9, 0xc}}, @TCA_CBQ_RATE={0x10, 0x5, {0x5, 0x0, 0x9, 0xef, 0x7, 0x4}}]}}, @c_atm={{0x8}, {0x50, 0x2, [@TCA_ATM_FD={0x8, 0x1, r0}, @TCA_ATM_EXCESS={0x8, 0x4, {0x9, 0xa}}, @TCA_ATM_EXCESS={0x8, 0x4, {0xc, 0xfff2}}, @TCA_ATM_EXCESS={0x8, 0x4, {0xc, 0x1}}, @TCA_ATM_HDR={0x1a, 0x3, "c45767e77ea21d57f52b85884526cc2afd96619e9714"}, @TCA_ATM_HDR={0xd, 0x3, "3d9ce41859aa7775b6"}]}}]}, 0x114}, 0x1, 0x0, 0x0, 0x800}, 0x24008004) 751.86055ms ago: executing program 1 (id=1405): r0 = socket$inet6(0xa, 0x80002, 0x7) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1d, 0x0, 0x0, 0x8000, 0x24, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) setsockopt$sock_linger(r0, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a05000000000000000000020000000900020073797a310008000008000440000000000900010073797a30000000000800034000000009"], 0x64}, 0x1, 0x0, 0x0, 0x20048800}, 0x0) (async) setsockopt$SO_TIMESTAMPING(r0, 0x1, 0x41, &(0x7f0000000040)=0x1841, 0x4) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_ro(r2, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_devices(r3, &(0x7f0000000140)=ANY=[@ANYBLOB="62202a3a2a206d00c95b1752f6a9fa47c62720c9fb93d24071e21cb4728034ab45bad53d321ee1239eb21ab3d83dd9cfd2c330ec51a433962c1e888cb5e63eed129b290f3f63f8f5c03ddb223ce794f0dd480601a8bf155679bd9e62e3920494f8258ea1383f618b36ba302f1d3f42d48fc1aa981915953be8f647f599ef9e8a1eaa80070cf4a10ace8bc4bc044e713294df5948f325505c92c791567b3d2d3cd76669b653d75a5a6abad3b88be0e2cba438407d92563a14af137afec8f595373fe95eee3b0d94fa8bcaeae7fb590faaa80e3b"], 0x8) (async) setsockopt$nfc_llcp_NFC_LLCP_MIUX(r3, 0x118, 0x1, &(0x7f00000000c0)=0x10b, 0x4) (async) sendmmsg$inet6(r0, &(0x7f0000000080)=[{{&(0x7f0000000000)={0xa, 0x4e24, 0x81, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x2}, 0x1c, 0x0}}], 0x1, 0x20040884) 683.936432ms ago: executing program 2 (id=1406): r0 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(r0, 0x84, 0x1c, &(0x7f0000000000), &(0x7f0000000040)=0x4) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000080), &(0x7f00000000c0)=0x8) ioctl$SIOCGSTAMPNS(r1, 0x8907, &(0x7f0000000100)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_GET(r3, &(0x7f0000000380)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000340)={&(0x7f00000001c0)={0x174, r4, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@TIPC_NLA_NODE={0xd8, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_KEY={0x41, 0x4, {'gcm(aes)\x00', 0x19, "6e1bc5cdf95c10b34e67473ce7157e8141c46737b9dc9813c9"}}, @TIPC_NLA_NODE_ID={0x8d, 0x3, "9610d9a964bfb9548931e9f56ee6a98f753610109237c137e77eba7adf9072c40691cba964e6d4d8f41d05858f5f71e212342e547175466923094050f78e400535a326a468020fb53c9ff19b9124e10ed56ed0b4b945b20d9c0c68a847e9f45ac38ebc499bb3716115eeffde392ed703eb58b44bfc85046d636121f51c99772d9582d2c329d890fa41"}]}, @TIPC_NLA_MEDIA={0x14, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_LINK={0x38, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x34, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xed}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1b218625}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xff}]}]}, @TIPC_NLA_NET={0x3c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0xc1}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x9}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x9}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x1ff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5c}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x4024800}, 0x40) getsockopt$sock_int(r2, 0x1, 0x1, &(0x7f00000003c0), &(0x7f0000000400)=0x4) socket$nl_route(0x10, 0x3, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r5, &(0x7f0000000540)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000500)={&(0x7f0000000480)={0x5c, 0x1, 0x1, 0x201, 0x0, 0x0, {0x1, 0x0, 0x1}, [@CTA_SEQ_ADJ_ORIG={0x14, 0xf, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x3}]}, @CTA_STATUS_MASK={0x8, 0x1a, 0x1, 0x0, 0xff}, @CTA_MARK_MASK={0x8, 0x15, 0x1, 0x0, 0x2}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x9}, @CTA_SEQ_ADJ_REPLY={0x1c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_BEFORE={0x8}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x24e}, @CTA_SEQADJ_OFFSET_AFTER={0x8}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x10}, 0x804) connect$inet(r0, &(0x7f0000000580)={0x2, 0x4e24, @broadcast}, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r6, &(0x7f0000000680)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000640)={&(0x7f0000000600)={0x20, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x30040000}, 0x8000) r7 = socket$inet6(0xa, 0x4, 0x2) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000007c0)={@map, 0x3, 0x0, 0x81, &(0x7f00000006c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0xa, 0x0, &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0], &(0x7f0000000780)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f0000000840)={0x8, 0x0}, 0x8) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000800)={@cgroup, 0xffffffffffffffff, 0x1a, 0x20, 0x0, @void, @void, @void, @value=r9, r8}, 0x20) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) r10 = socket$rxrpc(0x21, 0x2, 0x2) recvfrom$rxrpc(r10, &(0x7f0000000880)=""/147, 0x93, 0x1, &(0x7f0000000940)=@in6={0x21, 0x1, 0x2, 0x1c, {0xa, 0x4e22, 0x7, @empty, 0x6a10b96a}}, 0x24) r11 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_SEND_PRIO(r11, 0x6b, 0x3, &(0x7f0000000980)=0x3, 0x4) close(r7) setsockopt$inet6_IPV6_RTHDRDSTOPTS(r1, 0x29, 0x37, &(0x7f00000009c0)={0x1, 0x28, '\x00', [@calipso={0x7, 0x18, {0x3, 0x4, 0x4, 0xe, [0x9, 0x8]}}, @generic={0xbc, 0x23, "11b7369768d85585acf6a93953afcf4f051b3d7841c95740b2d2e68d654f026462ed87"}, @jumbo={0xc2, 0x4, 0x2}, @generic={0xf1, 0xfd, "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"}]}, 0x150) sendmsg$TIPC_NL_MEDIA_SET(r3, &(0x7f0000000cc0)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x6e34dea3b60d4d52}, 0xc, &(0x7f0000000c80)={&(0x7f0000000bc0)={0xa4, 0x0, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_NODE={0x64, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x10000}, @TIPC_NLA_NODE_KEY={0x48, 0x4, {'gcm(aes)\x00', 0x20, "750b1b80c1176b9c3a289c6fdc0833782d25f486b010cb0f28ee216b19ecf8c9"}}, @TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x1}, @TIPC_NLA_NODE_UP={0x4}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x7}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x200}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x9b3}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x1}]}]}, 0xa4}, 0x1, 0x0, 0x0, 0x4000000}, 0x2000) 674.228073ms ago: executing program 3 (id=1407): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000005680), 0xffffffffffffffff) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x630}, @op={0x18, 0x117, 0x3, 0x1}], 0x30}, 0x0) sendmsg$nl_route_sched_retired(r3, &(0x7f000001be80)={0x0, 0x0, &(0x7f000001be40)={&(0x7f0000005300)=@newchain={0xff0, 0x64, 0x800, 0x0, 0x0, {}, [@f_rsvp={{0x9}, {0xfc0, 0x2, [@TCA_RSVP_POLICE={0x10, 0x5, [@TCA_POLICE_PEAKRATE64={0xc}]}, @TCA_RSVP_ACT={0xfac, 0x6, [@m_ctinfo={0x124, 0xd, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT={0x18, 0x3, {0x2, 0x0, 0x8, 0xf}}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8}]}, {0xd5, 0x6, "fd8590e6980fade48f293ceee59b2c63c366823ff292760120d13c78710e6cca12037cc6c20ce8a17d90e857c0917d4e3478f333b4069885af59e0ce177e4024f0486a956cf709f691c84fba4f467ecbd0ec39e7b0d8c78cdeaa01993c239200c7cc7618390d91cbf98e535775ecc1cfbd4dec7232550f4655ed26f44dff16f577d634ca7012f1b331ce398563b3c4be6f3b3b7c0703575d71d9cf1c85ed652262ebd320b4f466ccb9c4798a71675534b8c14e9015b7ee5a4056c70848fa23415176f86313ffffd1f8c49eb4a216afc3d9"}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}, @m_bpf={0xe84, 0x1e, 0x0, 0x0, {{0x8}, {0x4}, {0xe59, 0x6, "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"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x2}}}}]}]}}]}, 0xff0}}, 0x0) recvmsg$can_j1939(r3, &(0x7f0000001bc0)={0x0, 0x0, &(0x7f00000002c0)=[{&(0x7f0000004300)=""/4096, 0x1000}], 0x1}, 0x0) r4 = socket$inet(0xa, 0x801, 0x84) connect$inet(r4, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r4, 0x10008) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000300)=ANY=[@ANYBLOB="600000001800dd8d000000000000000002000000ff0000060000000008000700ac1414bb08001e006907000008000700", @ANYRES32=0x0, @ANYBLOB="08000100ac1414bb08000500e000"], 0x60}}, 0x0) r6 = accept4(r4, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_CONTEXT(r6, 0x84, 0x11, &(0x7f0000000280), 0x8) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r7) sendmsg$NLBL_CIPSOV4_C_ADD(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x14, r8, 0x1, 0x70bd26}, 0x14}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000080)='contention_end\x00'}, 0x10) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x2, 0x4, 0x4, 0xbf22, 0x400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) mmap(&(0x7f0000fa2000/0x4000)=nil, 0x4000, 0x2, 0x82011, r9, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f00000058c0)={0x0, 0x0, &(0x7f0000005880)={&(0x7f00000056c0)={0x50, r1, 0x1, 0x70bd27, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0xfffffc72}}]}, 0x50}, 0x1, 0x0, 0x0, 0x804}, 0x10) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000440)) r10 = socket$kcm(0x10, 0x100000000002, 0x4) sendmsg$kcm(r10, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)="39000000140081ae00002c000500015601618575e285af0100d41b2cc32b38d3440c6942cb76cab300"/57, 0x39}], 0x1, 0x0, 0x0, 0xc00e}, 0x0) 514.424477ms ago: executing program 0 (id=1408): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x18, 0xf, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7}, {}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, 0x0, 0x1, 0x0, 0x0, 0x41000, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r3, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030040000b05d25a806c8c6394f90324fc60100002000a000200053582c137153e3704020180fc5409000c00", 0x33fe0}], 0x1}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) setsockopt$MRT6_ADD_MFC_PROXY(r1, 0x29, 0xd2, &(0x7f0000000440)={{0xa, 0x4e22, 0x2, @mcast2}, {0xa, 0x4ea1, 0x7, @mcast1, 0xfffffff9}, 0x0, {[0x7fffffff, 0x80000000, 0x2, 0xffff59a7, 0x934000, 0x7, 0x8f3f, 0xffff]}}, 0x5c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r4, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a2c000000030a01010000000000004000010000000900010073797a30000000000900030073797a320000000098000000060a0104000000000000000001000000a5000b080000000000000080340001800b00010065787468647200002400020dad0001400000000c080003400000000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000002080001400000001408000240000000120400078008000640000000020900010073797a3000000000140000001100010000000000000000000700000a"], 0xec}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x4100080}, 0xc, &(0x7f0000000500)={&(0x7f00000008c0)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x8000}, 0x20000801) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@ipv4_getrule={0x1c, 0x22, 0xa0c, 0x70bd27, 0x25dfdbfd, {0x2, 0x0, 0x14, 0x9, 0x3, 0x0, 0x0, 0x6, 0x5}, ["", "", ""]}, 0x1c}}, 0x10000) r6 = socket$inet(0x2, 0x3, 0x2) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000000680)={&(0x7f00000005c0), 0xc, &(0x7f0000000640)={&(0x7f0000000a00)={0x148, 0x0, 0x800, 0x8000000, 0x25dfdbfe, {{}, {@val={0x8}, @val={0xc, 0x99, {0xfffffffe, 0x20}}}}, [@NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1ff}, @NL80211_ATTR_IE={0x113, 0x2a, [@mesh_id={0x72, 0x6}, @tim={0x5, 0x2c, {0x3, 0xe7, 0x8, "8c39d2156fe666e5f6eaeab72dbfc31bb81bb8c37c3cd25f50ea26c588abcdb9c5b3979568872fb166"}}, @perr={0x84, 0xcf, {0x3, 0xd, [{{0x0, 0x1}, @device_a, 0x1, @value=@device_b, 0x7}, {{0x0, 0x1}, @broadcast, 0xa, @value=@device_b, 0x15}, {{0x0, 0x1}, @broadcast, 0x16b, @value=@broadcast, 0x36}, {{}, @broadcast, 0x7ff, @void, 0x10}, {{}, @device_a, 0x4, @void, 0x5}, {{}, @broadcast, 0x80000000, @void, 0x9}, {{}, @device_b, 0x80000000, @void, 0x23}, {{0x0, 0x1}, @broadcast, 0x40, @value=@broadcast, 0x21}, {{0x0, 0x1}, @device_b, 0x6, @value, 0xc}, {{}, @broadcast, 0xff, @void, 0x1d}, {{}, @device_a, 0xbb9d, @void, 0x39}, {{0x0, 0x1}, @broadcast, 0x9, @value=@device_b, 0x17}, {{}, @device_b, 0xc3b1, @void, 0x13}]}}, @mesh_chsw={0x76, 0x6, {0x48, 0x7f, 0xc, 0x8}}]}]}, 0x148}, 0x1, 0x0, 0x0, 0x4}, 0x24048005) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0xfffffffc, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4000001, @void, @value}, 0x94) r7 = socket$nl_generic(0x10, 0x3, 0x10) unshare(0x22020600) setsockopt$inet_tcp_TCP_FASTOPEN_KEY(0xffffffffffffffff, 0x6, 0x21, 0x0, 0x20) sendmsg$nl_generic(r7, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB="240000003d0007010000000000000280027c0000040000000c00018006d28292f068"], 0x24}, 0x1, 0x0, 0x0, 0xe4}, 0x0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000003c0), 0x141543, 0x0) ioctl$TUNSETIFF(r8, 0x400454ca, &(0x7f0000000400)={'bridge_slave_0\x00', 0x1000}) r9 = socket$caif_stream(0x25, 0x1, 0x4) getsockopt$SO_TIMESTAMPING(r9, 0x1, 0x25, &(0x7f0000000340), &(0x7f0000000380)=0x4) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000040)={@initdev={0xac, 0x1e, 0x1, 0x0}, @local, @empty}, 0xc) socket$nl_route(0x10, 0x3, 0x0) r10 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r10, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r10, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) 480.850811ms ago: executing program 1 (id=1409): r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) ppoll(&(0x7f0000000180)=[{r0, 0x18}], 0x1, &(0x7f00000001c0)={0x0, 0x3938700}, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r1) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000180)={0x48, r2, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x4}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x185}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_STA_WME={0xc, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5, 0x1, 0xff}]}]}, 0x48}}, 0x0) 341.301592ms ago: executing program 2 (id=1410): r0 = socket$phonet(0x23, 0x2, 0x1) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000240)) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000040)='contention_end\x00', r2}, 0x10) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000040)={0x14, r4, 0x28543634fae43ad}, 0x14}}, 0x0) r5 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADDDEST(r5, 0x600, 0x487, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[], 0x44}}, 0x4000) 280.577438ms ago: executing program 3 (id=1411): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x101, 0x0, 0x0, {0x1}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x5}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x9}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0xc0d1}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001200576d100000000000000007000000", @ANYRES32=0x0, @ANYBLOB="000002000255000008001d00ca0e00000a000100bbbbbbbbbbbb0000080003"], 0x3c}}, 0x0) 195.153922ms ago: executing program 1 (id=1412): unshare(0x60000080) r0 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, r0, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) socket$inet_tcp(0x2, 0x1, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) close(0x3) unshare(0x60000080) (async) bpf$BPF_MAP_GET_FD_BY_ID(0xe, 0x0, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, r0, 0x0) (async) bpf$TOKEN_CREATE(0x24, &(0x7f00000000c0)={0x0, r0}, 0x8) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) (async) close(0x3) (async) 120.829333ms ago: executing program 2 (id=1413): r0 = syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x54}, 0x1, 0x0, 0x0, 0x400c080}, 0x0) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xfffffff8, @mcast1, 0x3ff}, @in6={0xa, 0x4e23, 0xffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}], 0x38) (async) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_REM(r3, 0x84, 0x65, &(0x7f0000000000)=[@in6={0xa, 0x4e24, 0xfffffff8, @mcast1, 0x3ff}, @in6={0xa, 0x4e23, 0xffff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}], 0x38) ioctl$sock_ax25_SIOCDELRT(r1, 0x890c, &(0x7f0000000700)={@default, @default, 0x8, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @null, @null, @bcast, @bcast]}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)={0x20, r7, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x20}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32, @ANYBLOB="05005b"], 0x24}}, 0x0) (async) sendmsg$NL80211_CMD_REGISTER_FRAME(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32, @ANYBLOB="05005b"], 0x24}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) (async) r11 = socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r11, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="050000000000000000000600000008000300", @ANYRES32=r13, @ANYBLOB="0800050002000c74"], 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r11, 0x0, 0x0) (async) sendmsg$NL80211_CMD_TRIGGER_SCAN(r11, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) r14 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r11) (async) r15 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r11) sendmsg$NL80211_CMD_VENDOR(r11, &(0x7f0000000640)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000500)={&(0x7f00000003c0)={0x12c, r15, 0x1, 0x70bd26, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x13}, @val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_VENDOR_DATA={0x77, 0xc5, "8003bccb80e62c658160fd140dcf4826d994e9289405279a1ffef0a2f28bfb2c9406869456f650171eddfffac08e15f13c3a9224574238bea3ac010f6701432216bb36f3a9639bbf0d4cadc6531b531726b2406d6fffacc56a7b2bc14b97a1ba9859a36dc95d1a1ab93622efb30875338dbc22"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x7}, @NL80211_ATTR_VENDOR_DATA={0x76, 0xc5, "00a513bb132a4840e768efb64bb5a09c278a9d530067505a78d037d7832fc4014f2c1f060198f0decd6ca4ff8dc423ee53759dba3f27fe558390d9f47a3fa12e1d2c958d60dd7f42253de6902a12bd545b50783cb6fb38f2b442d07ca06df0aa568798fa11b2f784e23815d67e40c7a92dbf"}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x1000}, @NL80211_ATTR_VENDOR_ID={0x8, 0xc3, 0x2}]}, 0x12c}, 0x1, 0x0, 0x0, 0x24000080}, 0x20004001) r16 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r16, 0x0, 0x2000c810) socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newsa={0x17c, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0x0, 0x4000, 0x0, 0x8004}, {@in=@private=0xa010102, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, {0x327, 0x0, 0x0, 0x0, 0xffe, 0x0, 0x1}, {0x4, 0x0, 0xffffffffffffffff}, {0x8f}, 0x70bd29, 0x0, 0xa, 0x4}, [@encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in=@remote}}, @algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0xffffffd2}}, @encap={0x1c, 0x4, {0x3, 0x5e21, 0x0, @in=@rand_addr=0x64010101}}, @offload={0xc, 0x1c, {0x0, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) (async) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newsa={0x17c, 0x10, 0x633, 0x0, 0x0, {{@in6=@private0, @in=@broadcast, 0x0, 0x4000, 0x0, 0x8004}, {@in=@private=0xa010102, 0x0, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1a}, {0x327, 0x0, 0x0, 0x0, 0xffe, 0x0, 0x1}, {0x4, 0x0, 0xffffffffffffffff}, {0x8f}, 0x70bd29, 0x0, 0xa, 0x4}, [@encap={0x1c, 0x20, {0x0, 0x4e22, 0x0, @in=@remote}}, @algo_crypt={0x48, 0x2, {{'ecb(cipher_null)\x00'}, 0xffffffd2}}, @encap={0x1c, 0x4, {0x3, 0x5e21, 0x0, @in=@rand_addr=0x64010101}}, @offload={0xc, 0x1c, {0x0, 0x3}}]}, 0x17c}, 0x1, 0x0, 0x0, 0x8000}, 0x8000) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r14, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x4c, r0, 0x7, 0x0, 0x0, {}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syz_tun\x00'}]}, @ETHTOOL_A_LINKMODES_OURS={0x20, 0x3, 0x0, 0x1, [@ETHTOOL_A_BITSET_VALUE={0x8, 0x4, '\x00\x00\x00\x00'}, @ETHTOOL_A_BITSET_SIZE={0x5, 0x2, 0x9}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_SIZE={0x8, 0x2, 0x7}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x404c001}, 0x24004054) 120.218091ms ago: executing program 3 (id=1414): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) r1 = accept4(r0, 0x0, 0x0, 0x0) accept4(r1, &(0x7f0000000b40)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x0, 0x80800) r2 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010006080800418e00000d08fcff", 0x58}], 0x1) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'md5-generic\x00'}, 0x5a) (async) accept4(r0, 0x0, 0x0, 0x0) (async) accept4(r1, &(0x7f0000000b40)=@rxrpc=@in6={0x21, 0x0, 0x2, 0x1c, {0xa, 0x0, 0x0, @remote}}, 0x0, 0x80800) (async) socket$netlink(0x10, 0x3, 0x8000000004) (async) writev(r2, &(0x7f0000000280)=[{&(0x7f0000000040)="580000001400192340834b80040d8c560a067fbc45ff81054e220000000058000b480400945f64009400050038925a01000000000000008000f0fffeffe809000000fff5dd0000001000010006080800418e00000d08fcff", 0x58}], 0x1) (async) 86.806553ms ago: executing program 0 (id=1415): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000780)=ANY=[@ANYBLOB="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"], 0x168}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000340)=@newtaction={0xcc, 0x30, 0xffff, 0xfffffffe, 0x0, {}, [{0xb8, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x0, 0x5}}]]}, {0x4}, {0xc}, {0xc}}}, @m_gact={0x48, 0x2, 0x0, 0x0, {{0x9}, {0x1c, 0x2, 0x0, 0x1, [@TCA_GACT_PARMS={0x18, 0x2, {0x0, 0x0, 0xa}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xcc}}, 0x0) 693.682µs ago: executing program 3 (id=1416): bpf$BPF_BTF_LOAD(0x12, &(0x7f00000001c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="9feb0100180000000000ddff0c0000000c0000000500000005000000000000362312b31010002e6d0000050000"], &(0x7f0000000180)=""/7, 0x29, 0x7, 0x1, 0xffffff4a, 0x10000, @value}, 0x28) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (async) r2 = accept4(r1, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r2) (async) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@deltaction={0xe0, 0x31, 0xd29e3c416e8dd6b8, 0x70bd25, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x2c, 0x1, [{0x10, 0x13, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'ife\x00'}}]}, @TCA_ACT_TAB={0x58, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x9}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0x10, 0x12, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}, {0x10, 0x6, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}]}, @TCA_ACT_TAB={0x28, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8ab}}, {0xc, 0x3, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffff9c}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}]}, @TCA_ACT_TAB={0x20, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0xc, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x400}}]}]}, 0xe0}, 0x1, 0x0, 0x0, 0x20000840}, 0x40) sendmsg$nl_route_sched(r0, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001c40)=@newtaction={0x50, 0x1e, 0x109, 0x0, 0x0, {}, [{0x3c, 0x1, [@m_connmark={0x38, 0x0, 0x0, 0x0, {{0xd}, {0x4}, {0x6, 0x6, "af96"}, {0xc}, {0xc, 0x8, {0x1}}}}]}]}, 0x50}, 0x1, 0x2b1e}, 0x0) (async, rerun: 64) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={0x1, 0xffffffffffffffff}, 0x4) (rerun: 64) ioctl$FS_IOC_GETFSLABEL(r3, 0x81009431, &(0x7f0000003000)) (async, rerun: 32) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) (async, rerun: 32) sendmmsg(r2, &(0x7f0000002f80)=[{{&(0x7f0000000680)=@un=@file={0x1, './file0\x00'}, 0x80, &(0x7f0000001a00)=[{&(0x7f0000000700)="3f3edfb748ab82114498aded7e05df10da821d7eada526b22603e2c5c1779ff2f636966231552b701709e51f0dc5334c937c9126089f0fe8ad63baa92a69b4193cb75cb7c040db5ef5954614937fb8cb8e955ccda442c47d64ff960de0a829d4cfd2d7b283cba5db6299", 0x6a}, {&(0x7f0000000a00)="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", 0x1000}, {&(0x7f0000000780)="5b0798e11e9dd93a0be64d505460fe9412bbed1e360c349b0ecfc416da33ae7e344e9c7cceaec86c3204e8076b2fac8971d67c1fb7c93c3d8b8fea443b8dc15c95833057a738d88d3990122ae3cd", 0x4e}, {&(0x7f0000001cc0)="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", 0x1000}, {&(0x7f0000000800)="e400cc6a3ccbe217bf8958104621d4b77fd84cb0bce2fac243e7596f7f6618197c571c6b", 0x24}, {&(0x7f0000000840)="dc6b6ede9e3a6da9bd2cf0b0d4b5f8c6c9af3d26071ebbe84b1117588c84a20ed2eb1c86a5929360fba25e0cbd00650acd42e7e2533b2eef51d566769358813521903251e9f50e9b59316e3aadda9ae8a14d4f76ae810cd5981e57ea261322da1f67538b08b74ffc6a24e3780aa86e156383a21ac9ba7d87d40b85dbc950fc40c5505cbe86da4a1d4d470efa40c219929800ba0d9556a5e3c66c644f8a7888a71e518afccdee30d566f9124238d97692f955f01c", 0xb4}, {&(0x7f0000000900)="277c4b8b9f2bc92308259e469c695b8785f8e2811b5c4e2825175bc9beb7205a0ba2e382bcf6f44682e43f9655c8c5a1acf730b1212d9ddb3092d98f6710eba45e88f37791e70459f144e7f64295392996ce2603fee6122f0e72f662dfc306384b6e06ce06a8d865b732fb7aa0ff2838369d6cdf3a25cd615eefc025", 0x7c}], 0x7, &(0x7f0000001a80)=[{0xe0, 0xff, 0x1000, "1607205e976a0fe51e156466cbe31fc5d2221aac845515572ab4bb6f711e13f2c71545e7f096a23d1e1bb6ec1223b7f05785fb7e634bc6ec711f32aa785a392ee9cd3eb577aa19449b993d0fceacb91fce92b7f7e8da09ba6405660a839ff3dbdaaae119e752f5deae7ddccbc761ee4231558cb706e56dc8b95ff35b0c40339cbfdce93d859fde1c7a990eceeb59e3ddbe69903a908c5e346f40572afcde048dc0cf193d9164d522b0b5c1224da4c4d5aba96b727b17da17522300c131884efd9b50593e7d24e397a3"}], 0xe0}}, {{&(0x7f0000001b80)=@l2tp={0x2, 0x0, @broadcast, 0x4}, 0x80, &(0x7f0000001c00)=[{&(0x7f0000002cc0)="fbf0f4ea242b2ff0ae5ea75462da8cce7013b9e624d2a462325a96cd335c1b9e384977f0af791d79193596998f3fbe8693979651e0f01fa92385878776b0e766018959061ba84f8ea3705d875541820607ff6ab3353ace5018ce3300cf3ca7b995aa9f58fbe50fd476fd178edf5fee25f92f2097b5469d21113d086ca4c97f7fbb2ef2be44f03dec71b887c693420b77f511df01f325ec4352892beeee80714dc9d590ffa5e7c841cd3a0cdbb4700950", 0xb0}, {&(0x7f0000000980)="61716fc3d6b689", 0x7}, {&(0x7f0000002d80)="59ab64f744ea0b0fb0a93f9c4443db57ded36d2fb00371bd94dfbe9a5626be2057d13a723a2e49ca6cf54ed178989c48e111ec598bfd77542ade3e1948c3d666fa6f6e36cf29f2ba1f482fd2f09d31998b3106cb583f1d0f3b86f9af667e015f05bd0e8a6708ff6808123ab7fb2037792b8dccc066e652214253ace029213af8183336187a9bf04325d716ebb8bfb01d44d7ea64e79c88158d9eb16d667695d3c348500cb0d7cf6b683649f117f76b376da986f4ba7801b7eaa53523edb89fcd8da5d4ff", 0xc4}, {&(0x7f0000002e80)="72770fb428319ba0d7b3ae9d951f95bda264b50f0f8b640b1ba899362cb08151200617b45898701c8490bd8f687fc1a2235dd820c6c9b96f277b5d7b70736e80bcab9eada4f53e0e11de9e46fe35", 0x4e}], 0x4, &(0x7f0000002f00)=[{0x78, 0xd393efd019953dae, 0x5, "98377296ba8710b070ba697b6f0d1116357fb74e05f6aab8ae27a45e309e82b5aaca4b4ce70ab788c69e1b038648764516e908459e144b9dfd0799622b2ebdf8c0a14722833cfc14c847c8c8a4106535286dc44b8955a42cddbde4236d9b4f5442"}], 0x78}}], 0x2, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000580)={@ifindex, 0x2, 0x1, 0x9, &(0x7f0000000200)=[0x0, 0x0], 0x2, 0x0, &(0x7f0000000240)=[0x0, 0x0, 0x0], &(0x7f0000000300)=[0x0], &(0x7f0000000340)=[0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000005c0)={@map=r3, r5, 0x2d, 0x0, 0x0, @void, @value=r4, @void, @void, r6}, 0x20) (async, rerun: 32) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0x36, &(0x7f00000003c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffff}, [@exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xfffffffe}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @map_val={0x18, 0xa, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10001}, @map_idx={0x18, 0xa, 0x5, 0x0, 0xc}, @cb_func={0x18, 0xb, 0x4, 0x0, 0x2}, @cb_func={0x18, 0x1, 0x4, 0x0, 0xfffffffffffffffa}, @exit, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r3}}, @cb_func={0x18, 0xe, 0x4, 0x0, 0xfffffffffffffffc}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r4}}]}, &(0x7f0000000040)='GPL\x00', 0x1000000, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x9, 0xffffffffffffffff, 0x8, 0x0, 0xffffffea, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (rerun: 32) 0s ago: executing program 2 (id=1417): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8, 0x1014, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r3, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x2, &(0x7f00000003c0)={r4, &(0x7f0000000300), 0x20000000}, 0x20) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000005c0)=ANY=[@ANYBLOB="1c000000512ffedc792839daac98883ddf0502c2d53d", @ANYRESDEC=r4, @ANYRES8=r4, @ANYRES32=r2, @ANYBLOB], 0x1c}, 0x1, 0x0, 0x0, 0x4008080}, 0x9c935d90098c04d4) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newlink={0x34, 0x10, 0x44b, 0x1000, 0x0, {0x7a}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x4}}}]}, 0x34}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000040000000160a01010000000000000000010000000900010073797a30000000000900020073797a3000000000140003"], 0xc8}}, 0x0) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="140100001f0001000000000000000000060100800c0001"], 0x114}], 0x1}, 0x0) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(des3_ede)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r7 = accept4(r6, 0x0, 0x0, 0x0) ioctl$int_in(r7, 0x5452, &(0x7f00000010c0)=0xffff) recvmsg(r7, &(0x7f00000003c0)={0x0, 0x0, 0x0}, 0x0) ioctl$SIOCSIFHWADDR(r0, 0x89fe, &(0x7f0000000300)={'macsec0\x00', @multicast}) kernel console output (not intermixed with test programs): 30][ T5143] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 143.179972][ T8788] lo speed is unknown, defaulting to 1000 [ 143.445381][ T8799] netlink: 8 bytes leftover after parsing attributes in process `syz.0.631'. [ 143.476383][ T8799] netlink: 4 bytes leftover after parsing attributes in process `syz.0.631'. [ 143.771755][ T8788] chnl_net:caif_netlink_parms(): no params data found [ 144.106551][ T8831] dccp_invalid_packet: invalid packet type [ 144.300030][ T8844] netlink: 20 bytes leftover after parsing attributes in process `syz.1.644'. [ 144.443869][ T8846] sch_fq: defrate 117 ignored. [ 144.465428][ T8701] hsr_slave_0: left promiscuous mode [ 144.472208][ T8701] hsr_slave_1: left promiscuous mode [ 144.478144][ T8701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 144.485699][ T8701] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 144.493809][ T8701] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.501566][ T8701] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.521180][ T8701] veth1_macvtap: left promiscuous mode [ 144.526741][ T8701] veth0_macvtap: left promiscuous mode [ 144.532532][ T8701] veth1_vlan: left promiscuous mode [ 144.537850][ T8701] veth0_vlan: left promiscuous mode [ 144.899774][ T8701] team0 (unregistering): Port device team_slave_1 removed [ 144.941972][ T8701] team0 (unregistering): Port device team_slave_0 removed [ 145.115376][ T8863] xt_l2tp: wrong L2TP version: 0 [ 145.240333][ T54] Bluetooth: hci1: command tx timeout [ 145.344001][ T8788] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.357137][ T8788] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.366736][ T8788] bridge_slave_0: entered allmulticast mode [ 145.378243][ T8788] bridge_slave_0: entered promiscuous mode [ 145.402481][ T8788] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.413016][ T8788] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.438105][ T8788] bridge_slave_1: entered allmulticast mode [ 145.447502][ T8788] bridge_slave_1: entered promiscuous mode [ 145.614809][ T8788] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 145.634924][ T8788] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 145.684481][ T8877] netlink: 'syz.2.649': attribute type 47 has an invalid length. [ 145.839861][ T8880] bond0: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 145.899638][ T8880] netlink: 76 bytes leftover after parsing attributes in process `syz.0.652'. [ 145.932045][ T8788] team0: Port device team_slave_0 added [ 145.954914][ T8788] team0: Port device team_slave_1 added [ 145.968347][ T8882] SET target dimension over the limit! [ 146.024489][ T8788] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 146.048428][ T8788] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.090979][ T8788] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 146.120873][ T8788] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 146.127961][ T8788] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 146.171313][ T8788] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 146.246117][ T8788] hsr_slave_0: entered promiscuous mode [ 146.253875][ T8788] hsr_slave_1: entered promiscuous mode [ 146.264337][ T8788] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 146.274378][ T8788] Cannot create hsr debugfs directory [ 146.796975][ T8914] netlink: 'syz.0.662': attribute type 32 has an invalid length. [ 147.134288][ T8936] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 147.139469][ T8937] x_tables: ip_tables: recent.0 match: invalid size 216 (kernel) != (user) 232 [ 147.319449][ T54] Bluetooth: hci1: command tx timeout [ 147.357794][ T8944] netlink: 8 bytes leftover after parsing attributes in process `syz.1.673'. [ 147.379458][ T8944] netlink: 48 bytes leftover after parsing attributes in process `syz.1.673'. [ 147.555895][ T8951] team_slave_0: entered promiscuous mode [ 147.561902][ T8951] team_slave_1: entered promiscuous mode [ 147.567915][ T8951] bond_slave_0: entered promiscuous mode [ 147.573855][ T8951] bond_slave_1: entered promiscuous mode [ 147.591048][ T8951] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 147.733058][ T8788] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 147.760905][ T8788] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 147.795196][ T8788] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 147.809135][ T8788] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 147.914942][ T8788] 8021q: adding VLAN 0 to HW filter on device bond0 [ 147.969141][ T8788] 8021q: adding VLAN 0 to HW filter on device team0 [ 147.987220][ T8693] bridge0: port 1(bridge_slave_0) entered blocking state [ 147.994444][ T8693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 148.009179][ T8689] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.016333][ T8689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 148.019712][ T8979] dccp_invalid_packet: P.Data Offset(10) too large [ 148.328112][ T8989] netlink: 24 bytes leftover after parsing attributes in process `syz.2.684'. [ 148.329933][ T8788] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 148.527943][ T8997] bridge_slave_1: vlans aren't supported yet for dev_uc|mc_add() [ 148.656491][ T8788] veth0_vlan: entered promiscuous mode [ 148.703698][ T8788] veth1_vlan: entered promiscuous mode [ 148.794312][ T8788] veth0_macvtap: entered promiscuous mode [ 148.820413][ T8788] veth1_macvtap: entered promiscuous mode [ 148.838550][ T8788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.855666][ T8788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.877263][ T8788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.904509][ T8788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.914922][ T8788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 148.926112][ T8788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 148.937880][ T8788] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 148.963345][ T9016] lo speed is unknown, defaulting to 1000 [ 148.973582][ T8788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 148.999469][ T8788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.019366][ T8788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.039384][ T8788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.059379][ T8788] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 149.079266][ T8788] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 149.091171][ T8788] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 149.105363][ T8788] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.114364][ T8788] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.125846][ T8788] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.138454][ T8788] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 149.183010][ T9026] x_tables: unsorted entry at hook 3 [ 149.202624][ T9026] netlink: 'syz.1.696': attribute type 4 has an invalid length. [ 149.245412][ T9026] netlink: 'syz.1.696': attribute type 4 has an invalid length. [ 149.331035][ T8702] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.358111][ T8702] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.389469][ T54] Bluetooth: hci1: command tx timeout [ 149.418735][ T8689] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 149.438423][ T8689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 149.522149][ T9036] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input5 [ 149.558458][ T9036] input: failed to attach handler evdev to device input5, error: -4 [ 149.643413][ T9035] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 149.846894][ T9043] netlink: 'syz.0.701': attribute type 22 has an invalid length. [ 149.857694][ T9048] netlink: 8 bytes leftover after parsing attributes in process `syz.0.701'. [ 149.874924][ T9047] netlink: 'syz.1.699': attribute type 10 has an invalid length. [ 149.897919][ T9047] netlink: 40 bytes leftover after parsing attributes in process `syz.1.699'. [ 149.912201][ T9047] bridge0: port 3(macvlan1) entered blocking state [ 149.920381][ T9047] bridge0: port 3(macvlan1) entered disabled state [ 149.928188][ T9047] macvlan1: entered allmulticast mode [ 149.958291][ T9047] veth1_vlan: entered allmulticast mode [ 149.966494][ T9047] macvlan1: entered promiscuous mode [ 149.973397][ T9047] bridge0: port 3(macvlan1) entered blocking state [ 149.980041][ T9047] bridge0: port 3(macvlan1) entered forwarding state [ 149.996477][ T9056] netlink: 112 bytes leftover after parsing attributes in process `syz.0.703'. [ 150.006615][ T9056] netlink: 'syz.0.703': attribute type 1 has an invalid length. [ 150.102598][ T9061] netlink: 'syz.0.705': attribute type 10 has an invalid length. [ 150.165049][ T9063] netlink: 8 bytes leftover after parsing attributes in process `syz.3.706'. [ 150.181196][ T9064] netlink: 'syz.0.705': attribute type 10 has an invalid length. [ 150.189111][ T9064] netlink: 2 bytes leftover after parsing attributes in process `syz.0.705'. [ 150.198890][ T9064] team0: entered promiscuous mode [ 150.205195][ T9064] bond0: entered promiscuous mode [ 150.214821][ T9064] bridge0: port 4(team0) entered blocking state [ 150.229447][ T9064] bridge0: port 4(team0) entered disabled state [ 150.235935][ T9064] team0: entered allmulticast mode [ 150.279425][ T9064] team_slave_0: entered allmulticast mode [ 150.285187][ T9064] team_slave_1: entered allmulticast mode [ 150.299419][ T9064] vlan0: entered allmulticast mode [ 150.304865][ T9064] veth0_vlan: entered allmulticast mode [ 150.310625][ T9064] bond0: entered allmulticast mode [ 150.315765][ T9064] bond_slave_0: entered allmulticast mode [ 150.325719][ T9064] bond_slave_1: entered allmulticast mode [ 150.340734][ T9064] team0: left allmulticast mode [ 150.345621][ T9064] team_slave_0: left allmulticast mode [ 150.359406][ T9064] team_slave_1: left allmulticast mode [ 150.364912][ T9064] vlan0: left allmulticast mode [ 150.389483][ T9064] veth0_vlan: left allmulticast mode [ 150.394834][ T9064] bond0: left allmulticast mode [ 150.399870][ T9064] bond_slave_0: left allmulticast mode [ 150.405364][ T9064] bond_slave_1: left allmulticast mode [ 150.580484][ T9061] team0: left promiscuous mode [ 150.585483][ T9061] team_slave_0: left promiscuous mode [ 150.598480][ T9061] team_slave_1: left promiscuous mode [ 150.604708][ T9061] bond0: left promiscuous mode [ 150.611298][ T9061] bond_slave_0: left promiscuous mode [ 150.617689][ T9061] bond_slave_1: left promiscuous mode [ 150.628230][ T9061] batman_adv: batadv0: Adding interface: team0 [ 150.635127][ T9061] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 150.682043][ T9061] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 150.821816][ T9074] netlink: 'syz.1.708': attribute type 75 has an invalid length. [ 150.993133][ T9089] netlink: 28 bytes leftover after parsing attributes in process `syz.2.710'. [ 151.018174][ T58] hid-generic 0005:16C0:0058.0001: item fetching failed at offset 0/1 [ 151.028063][ T58] hid-generic 0005:16C0:0058.0001: probe with driver hid-generic failed with error -22 [ 151.055034][ T9088] Bluetooth: MGMT ver 1.23 [ 151.427638][ T8689] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.852848][ T8689] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.924398][ T8689] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.995584][ T8689] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.093127][ T8689] bridge_slave_1: left allmulticast mode [ 152.098824][ T8689] bridge_slave_1: left promiscuous mode [ 152.106291][ T8689] bridge0: port 2(bridge_slave_1) entered disabled state [ 152.118709][ T8689] bridge_slave_0: left allmulticast mode [ 152.124663][ T8689] bridge_slave_0: left promiscuous mode [ 152.132764][ T8689] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.631515][ T5143] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 152.640762][ T5143] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 152.655504][ T5143] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 152.671366][ T5143] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 152.681892][ T5143] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 152.692377][ T5143] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 152.736656][ T9123] netlink: 12 bytes leftover after parsing attributes in process `syz.0.722'. [ 152.760536][ T8689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 152.788412][ T8689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 152.806968][ T8689] bond0 (unregistering): Released all slaves [ 152.863592][ T9126] bond0: entered promiscuous mode [ 152.907650][ T9126] bond_slave_0: entered promiscuous mode [ 152.919948][ T9126] bond_slave_1: entered promiscuous mode [ 152.935547][ T9126] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 153.070385][ T9126] bond0: left promiscuous mode [ 153.076200][ T9126] bond_slave_0: left promiscuous mode [ 153.090216][ T9126] bond_slave_1: left promiscuous mode [ 153.321284][ T9120] lo speed is unknown, defaulting to 1000 [ 153.434357][ T9124] syz.3.721 (9124) used greatest stack depth: 16656 bytes left [ 153.505765][ T9147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.734'. [ 153.519551][ T9147] netlink: 4 bytes leftover after parsing attributes in process `syz.2.734'. [ 153.866906][ T8689] hsr_slave_0: left promiscuous mode [ 153.884748][ T8689] hsr_slave_1: left promiscuous mode [ 153.900091][ T8689] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 153.919205][ T8689] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 153.946834][ T8689] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 153.966001][ T8689] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 154.001746][ T8689] veth1_macvtap: left promiscuous mode [ 154.007528][ T8689] veth0_macvtap: left promiscuous mode [ 154.013732][ T8689] veth1_vlan: left promiscuous mode [ 154.019267][ T8689] veth0_vlan: left promiscuous mode [ 154.451858][ T8689] team0 (unregistering): Port device team_slave_1 removed [ 154.488117][ T8689] team0 (unregistering): Port device team_slave_0 removed [ 154.753248][ T54] Bluetooth: hci1: command tx timeout [ 154.831857][ C0] bridge0: received packet on gretap1 with own address as source address (addr:2e:5a:4b:e7:6e:7e, vlan:0) [ 154.957516][ T9120] chnl_net:caif_netlink_parms(): no params data found [ 155.164080][ T9120] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.189609][ T9120] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.196852][ T9120] bridge_slave_0: entered allmulticast mode [ 155.214282][ T9120] bridge_slave_0: entered promiscuous mode [ 155.233434][ T9120] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.255655][ T9120] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.264864][ T9120] bridge_slave_1: entered allmulticast mode [ 155.286639][ T9120] bridge_slave_1: entered promiscuous mode [ 155.360655][ T9204] netlink: 4 bytes leftover after parsing attributes in process `syz.2.756'. [ 155.386424][ T9206] netlink: 104 bytes leftover after parsing attributes in process `syz.3.755'. [ 155.403807][ T9120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 155.451462][ T9120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 155.541295][ T5974] IPVS: starting estimator thread 0... [ 155.568570][ T9120] team0: Port device team_slave_0 added [ 155.601793][ T9120] team0: Port device team_slave_1 added [ 155.639501][ T9213] IPVS: using max 24 ests per chain, 57600 per kthread [ 155.670480][ T9120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 155.677460][ T9120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.709768][ T9120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 155.752715][ T9120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 155.772139][ T9120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 155.822760][ T9120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 155.917754][ T9120] hsr_slave_0: entered promiscuous mode [ 155.935964][ T9120] hsr_slave_1: entered promiscuous mode [ 155.947246][ T9120] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.958746][ T9120] Cannot create hsr debugfs directory [ 155.995276][ T9234] netlink: 'syz.0.769': attribute type 10 has an invalid length. [ 156.023839][ T9234] bridge0: port 3(gretap1) entered disabled state [ 156.031864][ T9234] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.039347][ T9234] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.051573][ T9234] bridge0: port 3(gretap1) entered blocking state [ 156.058044][ T9234] bridge0: port 3(gretap1) entered forwarding state [ 156.064908][ T9234] bridge0: port 2(bridge_slave_1) entered blocking state [ 156.072018][ T9234] bridge0: port 2(bridge_slave_1) entered forwarding state [ 156.079401][ T9234] bridge0: port 1(bridge_slave_0) entered blocking state [ 156.086493][ T9234] bridge0: port 1(bridge_slave_0) entered forwarding state [ 156.099126][ T9234] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 156.110003][ T8702] wlan1: Trigger new scan to find an IBSS to join [ 156.121788][ C0] bridge0: received packet on gretap1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 156.134164][ C0] bridge0: received packet on gretap1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 156.420574][ T9246] netlink: 4 bytes leftover after parsing attributes in process `syz.3.775'. [ 156.613492][ T9252] netlink: 'syz.0.778': attribute type 10 has an invalid length. [ 156.625334][ T9252] batman_adv: batadv0: Removing interface: team0 [ 156.641544][ T9252] bridge0: port 4(team0) entered blocking state [ 156.648207][ T9252] bridge0: port 4(team0) entered disabled state [ 156.668421][ T9252] team0: entered allmulticast mode [ 156.678128][ T9252] team_slave_0: entered allmulticast mode [ 156.684564][ T9252] team_slave_1: entered allmulticast mode [ 156.693268][ T9252] vlan0: entered allmulticast mode [ 156.701590][ T9252] veth0_vlan: entered allmulticast mode [ 156.709001][ T9252] bond0: entered allmulticast mode [ 156.714827][ T9252] bond_slave_0: entered allmulticast mode [ 156.721099][ T9252] bond_slave_1: entered allmulticast mode [ 156.726958][ T9252] bridge0: entered allmulticast mode [ 156.734362][ T9252] team0: left allmulticast mode [ 156.739895][ T9252] team_slave_0: left allmulticast mode [ 156.745576][ T9252] team_slave_1: left allmulticast mode [ 156.754057][ T9252] vlan0: left allmulticast mode [ 156.770149][ C0] bridge0: received packet on gretap1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 156.771355][ T9252] veth0_vlan: left allmulticast mode [ 156.802230][ T9252] bond0: left allmulticast mode [ 156.814014][ T9252] bond_slave_0: left allmulticast mode [ 156.827550][ T9252] bond_slave_1: left allmulticast mode [ 156.833547][ T54] Bluetooth: hci1: command tx timeout [ 156.841942][ T9252] bridge0: left allmulticast mode [ 156.861732][ T9120] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 156.931591][ T9120] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 156.979245][ T9120] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 157.007381][ T9120] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 157.026471][ T9264] netlink: 60 bytes leftover after parsing attributes in process `syz.2.783'. [ 157.053360][ T9260] netlink: 60 bytes leftover after parsing attributes in process `syz.2.783'. [ 157.070517][ C0] bridge0: received packet on gretap1 with own address as source address (addr:aa:aa:aa:aa:aa:17, vlan:0) [ 157.087453][ T9264] netlink: 60 bytes leftover after parsing attributes in process `syz.2.783'. [ 157.157647][ T9120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 157.175941][ T9120] 8021q: adding VLAN 0 to HW filter on device team0 [ 157.208019][ T9120] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 157.218729][ T9120] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 157.233763][ T8702] bridge0: port 1(bridge_slave_0) entered blocking state [ 157.240903][ T8702] bridge0: port 1(bridge_slave_0) entered forwarding state [ 157.274364][ T8702] bridge0: port 2(bridge_slave_1) entered blocking state [ 157.281627][ T8702] bridge0: port 2(bridge_slave_1) entered forwarding state [ 157.354203][ T9276] netlink: 24 bytes leftover after parsing attributes in process `syz.2.788'. [ 157.576602][ T9120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.687696][ T9291] netlink: 12 bytes leftover after parsing attributes in process `syz.0.795'. [ 157.755643][ T9291] bond3: entered promiscuous mode [ 157.774492][ T9291] 8021q: adding VLAN 0 to HW filter on device bond3 [ 157.821539][ T9298] 8021q: adding VLAN 0 to HW filter on device bond3 [ 157.845878][ T9298] bond3: (slave ip6gre3): The slave device specified does not support setting the MAC address [ 157.886546][ T9298] bond3: (slave ip6gre3): Error -95 calling set_mac_address [ 157.925754][ T9305] batadv_slave_1: mtu less than device minimum [ 158.122818][ T9120] veth0_vlan: entered promiscuous mode [ 158.133670][ T9120] veth1_vlan: entered promiscuous mode [ 158.137536][ T9317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.803'. [ 158.154530][ T9120] veth0_macvtap: entered promiscuous mode [ 158.164134][ T9120] veth1_macvtap: entered promiscuous mode [ 158.184305][ T9120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.195876][ T9120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.205884][ T9120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.216465][ T9120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.226380][ T9120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 158.236914][ T9120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.248034][ T9120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 158.294147][ T9120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.304915][ T9120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.315061][ T9120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.325815][ T9120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.335986][ T9120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 158.346587][ T9120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 158.357605][ T9120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 158.367533][ T9120] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.376401][ T9120] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.385180][ T9120] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.394110][ T9120] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 158.491874][ T8702] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.542512][ T8702] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.598181][ T9325] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 158.626809][ T8689] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 158.638685][ T8689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 158.782889][ T9337] netlink: 'syz.0.814': attribute type 3 has an invalid length. [ 158.790745][ T9337] netlink: 8 bytes leftover after parsing attributes in process `syz.0.814'. [ 159.674978][ T9381] netlink: 'syz.3.833': attribute type 10 has an invalid length. [ 159.694363][ T9381] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 159.706296][ T9381] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 160.037447][ T8701] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 160.646165][ T8701] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.011579][ T8701] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.099521][ T8689] wlan1: Trigger new scan to find an IBSS to join [ 161.147827][ T8701] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 161.356539][ T8701] bridge_slave_1: left allmulticast mode [ 161.376044][ T8701] bridge_slave_1: left promiscuous mode [ 161.399510][ T8701] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.432490][ T8701] bridge_slave_0: left allmulticast mode [ 161.438183][ T8701] bridge_slave_0: left promiscuous mode [ 161.477232][ T8701] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.668728][ T5143] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 161.695823][ T5143] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 161.704331][ T5143] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 161.713432][ T5143] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 161.732556][ T9430] IPVS: stopping master sync thread 8336 ... [ 161.757218][ T5143] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 161.772933][ T5143] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 162.029336][ T8704] wlan1: Creating new IBSS network, BSSID 2e:8d:13:eb:b7:4a [ 162.063656][ T8701] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 162.074394][ T8701] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 162.086041][ T8701] bond0 (unregistering): Released all slaves [ 162.097994][ T9439] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 65540, id = 0 [ 162.222429][ T9426] lo speed is unknown, defaulting to 1000 [ 162.629782][ T9453] IPv6: NLM_F_CREATE should be specified when creating new route [ 162.796155][ T8701] hsr_slave_0: left promiscuous mode [ 162.810548][ T8701] hsr_slave_1: left promiscuous mode [ 162.817216][ T8701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 162.834849][ T8701] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 162.847491][ T8701] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 162.855093][ T8701] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 162.881148][ T8701] veth1_macvtap: left promiscuous mode [ 162.886709][ T8701] veth0_macvtap: left promiscuous mode [ 162.892445][ T8701] veth1_vlan: left promiscuous mode [ 162.897741][ T8701] veth0_vlan: left promiscuous mode [ 163.316042][ T8701] team0 (unregistering): Port device team_slave_1 removed [ 163.354274][ T8701] team0 (unregistering): Port device team_slave_0 removed [ 163.703393][ T9426] chnl_net:caif_netlink_parms(): no params data found [ 163.819071][ T9472] netlink: 'syz.2.870': attribute type 11 has an invalid length. [ 163.841071][ T9472] __nla_validate_parse: 2 callbacks suppressed [ 163.841088][ T9472] netlink: 224 bytes leftover after parsing attributes in process `syz.2.870'. [ 163.879415][ T5143] Bluetooth: hci1: command tx timeout [ 163.944856][ T9426] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.977928][ T9426] bridge0: port 1(bridge_slave_0) entered disabled state [ 164.014067][ T9426] bridge_slave_0: entered allmulticast mode [ 164.039513][ T9426] bridge_slave_0: entered promiscuous mode [ 164.057047][ T9426] bridge0: port 2(bridge_slave_1) entered blocking state [ 164.089509][ T9426] bridge0: port 2(bridge_slave_1) entered disabled state [ 164.096847][ T9426] bridge_slave_1: entered allmulticast mode [ 164.112669][ T9426] bridge_slave_1: entered promiscuous mode [ 164.244863][ T9494] netlink: 20 bytes leftover after parsing attributes in process `syz.1.877'. [ 164.284546][ T9426] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 164.317841][ T9426] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 164.458450][ T9426] team0: Port device team_slave_0 added [ 164.477600][ T9426] team0: Port device team_slave_1 added [ 164.571082][ T9426] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 164.585083][ T9426] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.618275][ T9426] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 164.637604][ T9426] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 164.659412][ T9426] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 164.690853][ T9426] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 164.834878][ T9524] netlink: 'syz.0.892': attribute type 3 has an invalid length. [ 164.848647][ T9524] netlink: 'syz.0.892': attribute type 1 has an invalid length. [ 164.860106][ T9426] hsr_slave_0: entered promiscuous mode [ 164.866837][ T9426] hsr_slave_1: entered promiscuous mode [ 164.877924][ T9426] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 164.893838][ T9426] Cannot create hsr debugfs directory [ 165.036892][ T9534] netlink: 8 bytes leftover after parsing attributes in process `syz.3.896'. [ 165.581665][ T9426] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 165.626047][ T9426] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 165.636145][ T9426] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 165.647213][ T9426] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 165.717537][ T9426] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.736215][ T9426] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.753759][ T8704] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.760929][ T8704] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.780301][ T8703] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.787419][ T8703] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.916465][ T9570] netlink: 16 bytes leftover after parsing attributes in process `syz.3.913'. [ 165.942953][ T9570] Cannot find del_set index 286 as target [ 165.949651][ T5143] Bluetooth: hci1: command tx timeout [ 165.986261][ T9575] netlink: 4 bytes leftover after parsing attributes in process `syz.1.915'. [ 166.187353][ T9575] team0 (unregistering): Port device team_slave_0 removed [ 166.204298][ T9575] team0 (unregistering): Port device team_slave_1 removed [ 166.236204][ T9573] lo speed is unknown, defaulting to 1000 [ 166.279553][ T9426] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.772807][ T9426] veth0_vlan: entered promiscuous mode [ 166.801715][ T9426] veth1_vlan: entered promiscuous mode [ 166.821965][ T9609] netlink: 4 bytes leftover after parsing attributes in process `syz.0.920'. [ 166.943211][ T9614] netlink: 4 bytes leftover after parsing attributes in process `syz.2.923'. [ 166.984608][ T9426] veth0_macvtap: entered promiscuous mode [ 167.022941][ T9426] veth1_macvtap: entered promiscuous mode [ 167.068368][ T9426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.093292][ T9426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.108162][ T9426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.120988][ T9426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.131679][ T9426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.142675][ T9426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.154860][ T9426] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.166821][ T5974] IPVS: starting estimator thread 0... [ 167.186652][ T9426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.212091][ T9426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.222954][ T9426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.234196][ T9426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.244723][ T9426] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.255773][ T9426] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.268539][ T9426] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.277061][ T9627] IPVS: using max 21 ests per chain, 50400 per kthread [ 167.288421][ T9426] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.298341][ T9426] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.308523][ T9426] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.319481][ T9426] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.457975][ T8704] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.474054][ T8704] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.497258][ T8703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.519059][ T8703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.692712][ T9642] veth0_vlan: left promiscuous mode [ 167.855499][ T9649] team0: Port device bond0 removed [ 167.863279][ T9649] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 167.879523][ T9649] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 167.892497][ T9649] bond0 (unregistering): (slave bridge0): Releasing backup interface [ 167.901978][ T9649] bridge0: port 3(gretap1) entered disabled state [ 167.908839][ T9649] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.916074][ T9649] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.925525][ T9649] bond0 (unregistering): Released all slaves [ 168.105744][ T9662] netlink: 32 bytes leftover after parsing attributes in process `syz.1.937'. [ 168.210506][ T9668] netlink: 28 bytes leftover after parsing attributes in process `syz.0.939'. [ 168.529241][ T9681] netlink: 5 bytes leftover after parsing attributes in process `syz.1.943'. [ 168.538955][ T9681] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 168.992822][ T8701] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.653202][ T8701] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.980627][ T8701] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.034677][ T8701] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 170.109963][ T8701] bridge_slave_1: left allmulticast mode [ 170.115707][ T8701] bridge_slave_1: left promiscuous mode [ 170.129218][ T8701] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.196088][ T9691] netlink: 40 bytes leftover after parsing attributes in process `syz.2.947'. [ 170.266772][ T9696] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 170.345831][ T9695] netlink: 40 bytes leftover after parsing attributes in process `syz.2.947'. [ 170.355463][ T8701] bridge_slave_0: left allmulticast mode [ 170.361270][ T8701] bridge_slave_0: left promiscuous mode [ 170.367320][ T8701] bridge0: port 1(bridge_slave_0) entered disabled state [ 170.367985][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 170.384540][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 170.393778][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 170.401847][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 170.410370][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 170.418784][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 170.618339][ T9709] netlink: 48 bytes leftover after parsing attributes in process `syz.3.948'. [ 170.870719][ T8701] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 170.883561][ T8701] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 170.895694][ T8701] bond0 (unregistering): Released all slaves [ 170.985898][ T9700] lo speed is unknown, defaulting to 1000 [ 171.105500][ T9724] netlink: 'syz.0.951': attribute type 6 has an invalid length. [ 171.114195][ T9724] netlink: 'syz.0.951': attribute type 7 has an invalid length. [ 171.122590][ T9724] netlink: 'syz.0.951': attribute type 8 has an invalid length. [ 171.247092][ T9726] pim6reg1: entered promiscuous mode [ 171.310337][ T9726] pim6reg1: entered allmulticast mode [ 171.697966][ T9748] netlink: 4 bytes leftover after parsing attributes in process `syz.1.957'. [ 171.871299][ T8701] hsr_slave_0: left promiscuous mode [ 171.885449][ T8701] hsr_slave_1: left promiscuous mode [ 171.906670][ T8701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.924780][ T8701] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.942897][ T8701] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.951516][ T8701] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 171.983420][ T8701] veth1_macvtap: left promiscuous mode [ 171.989094][ T8701] veth0_macvtap: left promiscuous mode [ 171.995240][ T8701] veth1_vlan: left promiscuous mode [ 172.000743][ T8701] veth0_vlan: left promiscuous mode [ 172.281012][ T9764] netlink: 8 bytes leftover after parsing attributes in process `syz.1.959'. [ 172.291913][ T9764] netlink: 24 bytes leftover after parsing attributes in process `syz.1.959'. [ 172.453719][ T8701] team0 (unregistering): Port device team_slave_1 removed [ 172.489994][ T8701] team0 (unregistering): Port device team_slave_0 removed [ 172.509988][ T54] Bluetooth: hci1: command tx timeout [ 172.849235][ T9758] bridge0: port 3(team0) entered disabled state [ 172.863279][ T9758] bridge0: port 1(bridge_slave_0) entered disabled state [ 172.873296][ T9758] bridge0: port 2(bridge_slave_1) entered disabled state [ 172.930857][ T9700] chnl_net:caif_netlink_parms(): no params data found [ 173.057818][ T9777] netlink: 'syz.0.963': attribute type 1 has an invalid length. [ 173.068220][ T9777] netlink: 'syz.0.963': attribute type 2 has an invalid length. [ 173.076710][ T9777] netlink: 8 bytes leftover after parsing attributes in process `syz.0.963'. [ 173.116344][ T9700] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.123753][ T9700] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.131535][ T9700] bridge_slave_0: entered allmulticast mode [ 173.144851][ T9700] bridge_slave_0: entered promiscuous mode [ 173.174503][ T9785] netlink: 4 bytes leftover after parsing attributes in process `syz.3.964'. [ 173.185795][ T9700] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.195153][ T9700] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.203077][ T9700] bridge_slave_1: entered allmulticast mode [ 173.211750][ T9700] bridge_slave_1: entered promiscuous mode [ 173.232667][ T9785] bridge0: port 3(team0) entered disabled state [ 173.402654][ T9785] team0 (unregistering): left allmulticast mode [ 173.409057][ T9785] team_slave_0: left allmulticast mode [ 173.416283][ T9785] team_slave_1: left allmulticast mode [ 173.423315][ T9785] bridge0: port 3(team0) entered disabled state [ 173.432159][ T9785] team_slave_0: left promiscuous mode [ 173.448093][ T9785] team0 (unregistering): Port device team_slave_0 removed [ 173.455439][ T9785] team_slave_1: left promiscuous mode [ 173.465426][ T9785] team0 (unregistering): Port device team_slave_1 removed [ 173.612593][ T9700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 173.656149][ T9700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 173.762108][ T9700] team0: Port device team_slave_0 added [ 173.787103][ T9700] team0: Port device team_slave_1 added [ 173.888743][ T9822] netlink: 'syz.3.975': attribute type 1 has an invalid length. [ 173.926083][ T9817] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 173.944698][ T9822] 8021q: adding VLAN 0 to HW filter on device bond2 [ 173.955296][ T9700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 173.963270][ T9700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.000681][ T9700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.030433][ T9829] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 174.046766][ T9829] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 174.057557][ T9829] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 174.075391][ T9829] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 174.088116][ T9700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.097142][ T9700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.127828][ T9700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.128243][ T9829] xt_l2tp: v2 sid > 0xffff: 262144 [ 174.242464][ T9700] hsr_slave_0: entered promiscuous mode [ 174.250677][ T9700] hsr_slave_1: entered promiscuous mode [ 174.270463][ T9700] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 174.278248][ T9700] Cannot create hsr debugfs directory [ 174.348101][ T9845] netlink: 112 bytes leftover after parsing attributes in process `syz.1.981'. [ 174.435837][ T9850] lo speed is unknown, defaulting to 1000 [ 174.463385][ T9850] lo speed is unknown, defaulting to 1000 [ 174.482889][ T9850] lo speed is unknown, defaulting to 1000 [ 174.596783][ T54] Bluetooth: hci1: command tx timeout [ 174.637101][ T9856] netlink: 84 bytes leftover after parsing attributes in process `syz.0.984'. [ 174.699095][ T9850] infiniband syz0: set active [ 174.704299][ T9850] infiniband syz0: added lo [ 174.713051][ T58] lo speed is unknown, defaulting to 1000 [ 174.750387][ T9850] RDS/IB: syz0: added [ 174.755029][ T9850] smc: adding ib device syz0 with port count 1 [ 174.762452][ T9850] smc: ib device syz0 port 1 has pnetid [ 174.785701][ T9850] lo speed is unknown, defaulting to 1000 [ 174.809977][ T51] lo speed is unknown, defaulting to 1000 [ 174.953047][ T9700] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 174.973792][ T9700] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 174.997565][ T9700] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 175.013157][ T9700] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 175.034816][ T9850] lo speed is unknown, defaulting to 1000 [ 176.673257][ T54] Bluetooth: hci1: command tx timeout [ 176.725293][ T9850] lo speed is unknown, defaulting to 1000 [ 176.741124][ T9872] __nla_validate_parse: 1 callbacks suppressed [ 176.741137][ T9872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.988'. [ 176.848507][ T9700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 176.885462][ T9700] 8021q: adding VLAN 0 to HW filter on device team0 [ 176.906716][ T8701] bridge0: port 1(bridge_slave_0) entered blocking state [ 176.913919][ T8701] bridge0: port 1(bridge_slave_0) entered forwarding state [ 176.939012][ T8701] bridge0: port 2(bridge_slave_1) entered blocking state [ 176.946178][ T8701] bridge0: port 2(bridge_slave_1) entered forwarding state [ 176.976157][ T9850] lo speed is unknown, defaulting to 1000 [ 177.035424][ T9700] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 177.058925][ T9700] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 177.207790][ T9890] netlink: 8 bytes leftover after parsing attributes in process `syz.2.993'. [ 177.246842][ T9891] netlink: 'syz.0.994': attribute type 1 has an invalid length. [ 177.267442][ T9891] netlink: 'syz.0.994': attribute type 1 has an invalid length. [ 177.319018][ T9850] lo speed is unknown, defaulting to 1000 [ 177.485924][ T9700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.666213][ T9910] netlink: 4 bytes leftover after parsing attributes in process `syz.3.998'. [ 177.783627][ T9916] netlink: 'syz.2.999': attribute type 1 has an invalid length. [ 177.801837][ T9916] netlink: 12 bytes leftover after parsing attributes in process `syz.2.999'. [ 177.816569][ T9916] netlink: 8 bytes leftover after parsing attributes in process `syz.2.999'. [ 177.848427][ T9921] sctp: [Deprecated]: syz.0.1000 (pid 9921) Use of int in max_burst socket option deprecated. [ 177.848427][ T9921] Use struct sctp_assoc_value instead [ 178.037311][ T9700] veth0_vlan: entered promiscuous mode [ 178.075044][ T9700] veth1_vlan: entered promiscuous mode [ 178.162900][ T9700] veth0_macvtap: entered promiscuous mode [ 178.172664][ T9700] veth1_macvtap: entered promiscuous mode [ 178.188336][ T9700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.200861][ T9700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.213469][ T9700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.234464][ T9700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.246966][ T9700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.258053][ T9700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.275052][ T9700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.304801][ T9700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.339567][ T9700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.359433][ T9700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.370415][ T9700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.386740][ T9700] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.407524][ T9700] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.422901][ T9700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.447219][ T9700] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.466312][ T9700] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.486576][ T9700] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.499361][ T9700] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.652659][ T9947] tipc: Started in network mode [ 178.657576][ T9947] tipc: Node identity ac1414aa, cluster identity 4711 [ 178.671707][ T9947] tipc: Enabling of bearer rejected, failed to enable media [ 178.699458][ T8701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.707307][ T8701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.741319][ T8689] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.753246][ T8689] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.755411][ T54] Bluetooth: hci1: command tx timeout [ 178.819168][ T9951] netlink: 'syz.0.1010': attribute type 5 has an invalid length. [ 178.875101][ T9958] batadv0: entered promiscuous mode [ 178.926467][ T9958] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 179.159056][ T29] audit: type=1107 audit(1735197514.101:3): pid=9973 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ÀÖÒ’Û²KÈ÷ö¬Ñµóë8>²TóLœ]ä*4Á>V™ï2ŽïõÓ´kN-dRâËU€]û |' [ 179.255281][ T9980] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1021'. [ 179.268623][ T9981] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 179.381978][ T9985] netlink: 'syz.0.1023': attribute type 10 has an invalid length. [ 179.425169][ T9987] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1024'. [ 179.455303][ T9989] netlink: 'syz.2.1025': attribute type 2 has an invalid length. [ 179.472719][ T9989] netlink: 'syz.2.1025': attribute type 1 has an invalid length. [ 179.486323][ T9989] netlink: 'syz.2.1025': attribute type 1 has an invalid length. [ 179.498155][ T9989] netlink: 'syz.2.1025': attribute type 1 has an invalid length. [ 179.513302][ T9993] netlink: 'syz.2.1025': attribute type 2 has an invalid length. [ 179.701173][T10003] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1030'. [ 179.727888][ T8701] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 179.757384][T10004] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1029'. [ 179.783078][T10004] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1029'. [ 179.818554][T10004] 8021q: adding VLAN 0 to HW filter on device bond3 [ 179.845358][T10001] vlan2: entered promiscuous mode [ 179.852483][T10001] bond3: entered promiscuous mode [ 179.862221][T10001] bond3: left promiscuous mode [ 179.952342][ T8701] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.134665][ T8701] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.415824][ T8701] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.538003][ T8701] bridge_slave_1: left allmulticast mode [ 180.543893][ T8701] bridge_slave_1: left promiscuous mode [ 180.550628][ T8701] bridge0: port 2(bridge_slave_1) entered disabled state [ 180.558937][ T8701] bridge_slave_0: left allmulticast mode [ 180.565294][ T8701] bridge_slave_0: left promiscuous mode [ 180.571067][ T8701] bridge0: port 1(bridge_slave_0) entered disabled state [ 180.856700][ T8701] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 180.867440][ T8701] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 180.881002][ T8701] bond0 (unregistering): Released all slaves [ 181.275014][ T5143] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 181.291007][ T5143] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 181.298962][ T5143] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 181.308686][ T5143] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 181.316979][ T5143] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 181.326183][ T5143] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 181.406020][T10021] lo speed is unknown, defaulting to 1000 [ 181.414133][T10021] lo speed is unknown, defaulting to 1000 [ 181.500825][T10031] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 181.717155][T10039] gretap1: entered promiscuous mode [ 181.823429][T10049] __nla_validate_parse: 1 callbacks suppressed [ 181.823449][T10049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1041'. [ 181.859054][ T8701] hsr_slave_0: left promiscuous mode [ 181.874262][ T8701] hsr_slave_1: left promiscuous mode [ 181.912667][ T8701] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 181.929541][ T8701] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 181.951639][ T8701] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 181.959173][ T8701] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 182.061843][ T8701] veth1_macvtap: left promiscuous mode [ 182.067466][ T8701] veth0_macvtap: left promiscuous mode [ 182.073259][ T8701] veth1_vlan: left promiscuous mode [ 182.077692][T10062] netlink: 'syz.1.1046': attribute type 11 has an invalid length. [ 182.078538][ T8701] veth0_vlan: left promiscuous mode [ 182.674688][ T8701] team0 (unregistering): Port device team_slave_1 removed [ 182.719392][ T8701] team0 (unregistering): Port device team_slave_0 removed [ 183.237211][T10068] syz.2.1044: vmalloc error: size 33554432, failed to allocated page array size 65536, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 183.256157][T10068] CPU: 1 UID: 0 PID: 10068 Comm: syz.2.1044 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 183.266948][T10068] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 183.276998][T10068] Call Trace: [ 183.280285][T10068] [ 183.283221][T10068] dump_stack_lvl+0x241/0x360 [ 183.287899][T10068] ? __pfx_dump_stack_lvl+0x10/0x10 [ 183.293096][T10068] ? __pfx__printk+0x10/0x10 [ 183.297685][T10068] ? __rcu_read_unlock+0xa1/0x110 [ 183.302704][T10068] warn_alloc+0x278/0x410 [ 183.307028][T10068] ? __pfx_warn_alloc+0x10/0x10 [ 183.311928][T10068] ? xp_create_and_assign_umem+0x17b/0xc50 [ 183.317734][T10068] ? __get_vm_area_node+0x1c8/0x2d0 [ 183.322937][T10068] ? __get_vm_area_node+0x25c/0x2d0 [ 183.328145][T10068] __vmalloc_node_range_noprof+0x62f/0x1380 [ 183.334036][T10068] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 183.339787][T10068] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 183.346119][T10068] ? rcu_is_watching+0x15/0xb0 [ 183.350884][T10068] ? trace_kmalloc+0x1f/0xd0 [ 183.355472][T10068] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 183.360929][T10068] ? __kvmalloc_node_noprof+0x72/0x190 [ 183.366385][T10068] __kvmalloc_node_noprof+0x142/0x190 [ 183.371748][T10068] ? xp_create_and_assign_umem+0x17b/0xc50 [ 183.377553][T10068] xp_create_and_assign_umem+0x17b/0xc50 [ 183.383197][T10068] ? dev_get_by_index+0x23/0x2d0 [ 183.388134][T10068] xsk_bind+0x386/0xdc0 [ 183.392295][T10068] __sys_bind+0x1e4/0x290 [ 183.396633][T10068] ? __pfx___sys_bind+0x10/0x10 [ 183.401491][T10068] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 183.407814][T10068] ? exc_page_fault+0x590/0x8b0 [ 183.412665][T10068] __x64_sys_bind+0x7a/0x90 [ 183.417166][T10068] do_syscall_64+0xf3/0x230 [ 183.421667][T10068] ? clear_bhb_loop+0x35/0x90 [ 183.426344][T10068] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 183.432237][T10068] RIP: 0033:0x7f8a22185d29 [ 183.436645][T10068] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 183.456249][T10068] RSP: 002b:00007f8a22f63038 EFLAGS: 00000246 ORIG_RAX: 0000000000000031 [ 183.464665][T10068] RAX: ffffffffffffffda RBX: 00007f8a22376240 RCX: 00007f8a22185d29 [ 183.472640][T10068] RDX: 0000000000000010 RSI: 0000000020000100 RDI: 0000000000000003 [ 183.480609][T10068] RBP: 00007f8a22201aa8 R08: 0000000000000000 R09: 0000000000000000 [ 183.488583][T10068] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 183.496556][T10068] R13: 0000000000000001 R14: 00007f8a22376240 R15: 00007ffe8c7bef98 [ 183.504536][T10068] [ 183.515174][ T54] Bluetooth: hci1: command tx timeout [ 183.519572][T10068] Mem-Info: [ 183.523929][T10068] active_anon:5351 inactive_anon:0 isolated_anon:0 [ 183.523929][T10068] active_file:1455 inactive_file:38320 isolated_file:0 [ 183.523929][T10068] unevictable:768 dirty:74 writeback:0 [ 183.523929][T10068] slab_reclaimable:10786 slab_unreclaimable:99936 [ 183.523929][T10068] mapped:31873 shmem:1443 pagetables:772 [ 183.523929][T10068] sec_pagetables:0 bounce:0 [ 183.523929][T10068] kernel_misc_reclaimable:0 [ 183.523929][T10068] free:1321833 free_pcp:203 free_cma:0 [ 183.576837][T10068] Node 0 active_anon:21404kB inactive_anon:0kB active_file:5820kB inactive_file:153208kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:127492kB dirty:296kB writeback:0kB shmem:4236kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11896kB pagetables:3088kB sec_pagetables:0kB all_unreclaimable? no [ 183.616383][T10068] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 183.648032][T10068] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 183.677532][T10068] lowmem_reserve[]: 0 2465 2466 0 0 [ 183.683439][T10068] Node 0 DMA32 free:1366456kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:21264kB inactive_anon:0kB active_file:5820kB inactive_file:152388kB unevictable:1536kB writepending:296kB present:3129332kB managed:2552760kB mlocked:0kB bounce:0kB free_pcp:2140kB local_pcp:1036kB free_cma:0kB [ 183.714732][T10068] lowmem_reserve[]: 0 0 0 0 0 [ 183.721122][T10068] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 183.748358][T10068] lowmem_reserve[]: 0 0 0 0 0 [ 183.753191][T10068] Node 1 Normal free:3904616kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 183.782477][T10068] lowmem_reserve[]: 0 0 0 0 0 [ 183.787252][T10068] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 183.800704][T10068] Node 0 DMA32: 3*4kB (UME) 14*8kB (UM) 116*16kB (ME) 91*32kB (UM) 69*64kB (UM) 32*128kB (UME) 20*256kB (UM) 22*512kB (UM) 5*1024kB (ME) 4*2048kB (UME) 323*4096kB (M) = 1366108kB [ 183.818858][T10068] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 183.830898][T10068] Node 1 Normal: 228*4kB (UME) 63*8kB (UME) 36*16kB (UME) 201*32kB (UME) 102*64kB (UME) 26*128kB (UME) 13*256kB (UME) 6*512kB (UM) 3*1024kB (UME) 5*2048kB (UE) 944*4096kB (M) = 3904616kB [ 183.850131][T10068] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 183.860295][T10068] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 183.869924][T10068] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 183.881196][T10068] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 183.890627][T10068] 41218 total pagecache pages [ 183.895671][T10068] 0 pages in swap cache [ 183.899936][T10068] Free swap = 124996kB [ 183.904091][T10068] Total swap = 124996kB [ 183.908261][T10068] 2097051 pages RAM [ 183.912168][T10068] 0 pages HighMem/MovableOnly [ 183.916849][T10068] 427011 pages reserved [ 183.921071][T10068] 0 pages cma reserved [ 184.299264][T10021] chnl_net:caif_netlink_parms(): no params data found [ 184.505316][T10021] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.526696][T10021] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.534236][T10021] bridge_slave_0: entered allmulticast mode [ 184.541307][T10021] bridge_slave_0: entered promiscuous mode [ 184.549097][T10021] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.556383][T10021] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.563835][T10021] bridge_slave_1: entered allmulticast mode [ 184.571030][T10021] bridge_slave_1: entered promiscuous mode [ 184.658470][T10021] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 184.689205][T10021] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 184.724412][T10021] team0: Port device team_slave_0 added [ 184.746070][T10021] team0: Port device team_slave_1 added [ 184.777652][T10021] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 184.785645][T10021] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.812733][T10021] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 184.825958][T10021] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 184.833005][T10021] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 184.859001][T10021] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 184.930082][T10021] hsr_slave_0: entered promiscuous mode [ 184.942329][T10021] hsr_slave_1: entered promiscuous mode [ 184.948692][T10021] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 184.958532][T10021] Cannot create hsr debugfs directory [ 185.148777][T10130] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1061'. [ 185.326390][T10021] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 185.345941][T10021] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 185.355346][T10021] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 185.365953][T10021] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 185.442263][T10021] 8021q: adding VLAN 0 to HW filter on device bond0 [ 185.468109][T10021] 8021q: adding VLAN 0 to HW filter on device team0 [ 185.486907][ T8689] bridge0: port 1(bridge_slave_0) entered blocking state [ 185.494081][ T8689] bridge0: port 1(bridge_slave_0) entered forwarding state [ 185.527008][ T8689] bridge0: port 2(bridge_slave_1) entered blocking state [ 185.534177][ T8689] bridge0: port 2(bridge_slave_1) entered forwarding state [ 185.550992][ T5845] Bluetooth: hci1: command tx timeout [ 185.835888][T10021] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 186.255891][T10021] veth0_vlan: entered promiscuous mode [ 186.271436][T10021] veth1_vlan: entered promiscuous mode [ 186.324138][T10021] veth0_macvtap: entered promiscuous mode [ 186.334465][T10021] veth1_macvtap: entered promiscuous mode [ 186.349672][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 186.351739][ T5853] Bluetooth: hci2: command 0x0406 tx timeout [ 186.355971][ T5845] Bluetooth: hci0: command 0x080f tx timeout [ 186.408995][T10021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.425735][T10021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.436428][T10021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.450625][T10021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.461612][T10021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 186.474437][T10021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.489186][T10021] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 186.507839][T10021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.526460][T10021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.537997][T10021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.568604][T10021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.584349][T10021] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 186.596798][T10021] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 186.624094][T10021] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 186.651747][T10021] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.661144][T10021] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.679393][T10021] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.688349][T10021] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 186.821306][ T8689] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.844602][ T8689] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 186.909259][ T8703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 186.925052][ T8703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 187.027895][T10198] validate_nla: 3 callbacks suppressed [ 187.027915][T10198] netlink: 'syz.3.1080': attribute type 2 has an invalid length. [ 187.247100][T10205] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 187.272094][T10203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1082'. [ 187.421963][T10208] netlink: 79 bytes leftover after parsing attributes in process `syz.1.1084'. [ 187.463337][T10210] lo speed is unknown, defaulting to 1000 [ 187.482917][T10213] sctp: [Deprecated]: syz.2.1087 (pid 10213) Use of int in max_burst socket option. [ 187.482917][T10213] Use struct sctp_assoc_value instead [ 187.488394][T10210] lo speed is unknown, defaulting to 1000 [ 187.506927][T10208] lo speed is unknown, defaulting to 1000 [ 187.514397][T10213] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 187.650456][T10219] netlink: 'syz.2.1089': attribute type 21 has an invalid length. [ 187.671095][T10219] syzkaller1: entered allmulticast mode [ 187.913381][T10208] lo speed is unknown, defaulting to 1000 [ 188.017347][T10225] netlink: 116 bytes leftover after parsing attributes in process `syz.2.1091'. [ 188.047354][T10229] IPVS: sync thread started: state = MASTER, mcast_ifn = ip6gre0, syncid = 0, id = 0 [ 188.808488][ T8689] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.436437][ T8689] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.494341][ T8689] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.556543][ T8689] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.637742][ T8689] bridge_slave_1: left allmulticast mode [ 189.644446][ T8689] bridge_slave_1: left promiscuous mode [ 189.650964][ T8689] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.659676][ T8689] bridge_slave_0: left allmulticast mode [ 189.665312][ T8689] bridge_slave_0: left promiscuous mode [ 189.671793][ T8689] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.955488][ T8689] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 189.968838][ T8689] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 190.073958][T10262] xt_TCPMSS: Only works on TCP SYN packets [ 190.105487][ T8689] bond0 (unregistering): Released all slaves [ 190.172295][T10266] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1099'. [ 190.202756][T10259] xt_CT: You must specify a L4 protocol and not use inversions on it [ 190.234673][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 190.256367][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 190.281727][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 190.307865][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 190.316569][ T5848] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 190.324609][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 190.456586][T10267] lo speed is unknown, defaulting to 1000 [ 190.533829][T10267] lo speed is unknown, defaulting to 1000 [ 190.688787][T10278] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1103'. [ 191.049643][ T8689] hsr_slave_0: left promiscuous mode [ 191.083185][ T8689] hsr_slave_1: left promiscuous mode [ 191.099005][T10288] x_tables: duplicate underflow at hook 2 [ 191.107106][ T8689] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.131784][ T8689] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.160470][ T8689] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.182180][ T8689] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.249822][ T8689] veth1_macvtap: left promiscuous mode [ 191.269677][ T8689] veth0_macvtap: left promiscuous mode [ 191.280564][ T8689] veth1_vlan: left promiscuous mode [ 191.285921][ T8689] veth0_vlan: left promiscuous mode [ 191.935520][ T8689] team0 (unregistering): Port device team_slave_1 removed [ 191.981004][ T8689] team0 (unregistering): Port device team_slave_0 removed [ 192.352906][T10267] chnl_net:caif_netlink_parms(): no params data found [ 192.359469][ T5848] Bluetooth: hci1: command tx timeout [ 192.473051][T10324] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 192.507294][T10320] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1112'. [ 192.547349][T10330] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1114'. [ 192.673095][T10267] bridge0: port 1(bridge_slave_0) entered blocking state [ 192.691698][T10267] bridge0: port 1(bridge_slave_0) entered disabled state [ 192.715419][T10267] bridge_slave_0: entered allmulticast mode [ 192.724859][T10267] bridge_slave_0: entered promiscuous mode [ 192.755025][T10340] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1117'. [ 192.785810][T10267] bridge0: port 2(bridge_slave_1) entered blocking state [ 192.790395][T10340] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1117'. [ 192.808863][T10267] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.824771][T10267] bridge_slave_1: entered allmulticast mode [ 192.829953][T10340] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1117'. [ 192.842962][T10267] bridge_slave_1: entered promiscuous mode [ 192.866957][T10338] bridge4: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 192.940787][T10340] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1117'. [ 193.006281][T10267] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.039372][T10346] lo speed is unknown, defaulting to 1000 [ 193.046164][T10346] lo speed is unknown, defaulting to 1000 [ 193.052725][T10267] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.249743][T10267] team0: Port device team_slave_0 added [ 193.259160][T10267] team0: Port device team_slave_1 added [ 193.427756][T10267] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 193.437398][T10267] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.469328][T10267] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 193.553542][T10267] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 193.557846][T10374] netlink: 1264 bytes leftover after parsing attributes in process `syz.2.1127'. [ 193.560995][T10267] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 193.561023][T10267] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 193.629594][T10377] netlink: 'syz.0.1126': attribute type 7 has an invalid length. [ 193.640586][T10377] netlink: 244 bytes leftover after parsing attributes in process `syz.0.1126'. [ 193.686310][T10267] hsr_slave_0: entered promiscuous mode [ 193.706120][T10267] hsr_slave_1: entered promiscuous mode [ 193.736601][T10267] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 193.751716][T10267] Cannot create hsr debugfs directory [ 194.157611][T10404] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1134'. [ 194.178626][T10404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1134'. [ 194.199754][T10404] netlink: 'syz.2.1134': attribute type 25 has an invalid length. [ 194.315124][T10406] lo speed is unknown, defaulting to 1000 [ 194.342704][T10406] lo speed is unknown, defaulting to 1000 [ 194.429973][ T5848] Bluetooth: hci1: command tx timeout [ 194.513074][ T1293] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.518331][T10364] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 194.626508][T10267] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 194.648963][T10267] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 194.668221][T10267] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 194.700674][T10267] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 194.840510][T10267] 8021q: adding VLAN 0 to HW filter on device bond0 [ 194.861123][T10267] 8021q: adding VLAN 0 to HW filter on device team0 [ 194.872796][ T8693] bridge0: port 1(bridge_slave_0) entered blocking state [ 194.879899][ T8693] bridge0: port 1(bridge_slave_0) entered forwarding state [ 194.936394][T10364] bridge0: port 2(bridge_slave_1) entered blocking state [ 194.943570][T10364] bridge0: port 2(bridge_slave_1) entered forwarding state [ 195.443209][T10452] xt_cgroup: invalid path, errno=-2 [ 195.564779][T10267] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.233253][T10267] veth0_vlan: entered promiscuous mode [ 196.263250][T10267] veth1_vlan: entered promiscuous mode [ 196.331118][T10267] veth0_macvtap: entered promiscuous mode [ 196.357073][T10267] veth1_macvtap: entered promiscuous mode [ 196.374002][T10267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.385310][T10267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.395461][T10267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.406312][T10267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.421197][T10267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 196.432211][T10267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.447932][T10267] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 196.470729][T10267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.493941][T10267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.509516][ T5848] Bluetooth: hci1: command tx timeout [ 196.537694][T10267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.568515][T10267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.585887][T10267] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 196.597123][T10267] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 196.628927][T10267] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 196.685235][T10267] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.711117][T10267] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.726274][T10267] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.735417][T10267] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.882235][T10364] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.909377][T10364] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.941944][T10364] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.969424][T10364] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 197.478376][T10542] 8021q: VLANs not supported on lo [ 197.708043][T10555] __nla_validate_parse: 8 callbacks suppressed [ 197.708057][T10555] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1169'. [ 197.928727][T10570] lo speed is unknown, defaulting to 1000 [ 197.956414][T10570] lo speed is unknown, defaulting to 1000 [ 197.969030][T10574] netlink: 'syz.2.1172': attribute type 4 has an invalid length. [ 197.988944][T10574] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1172'. [ 198.079512][T10576] xt_time: unknown flags 0x4 [ 198.128585][T10576] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 198.176640][T10576] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 198.541729][T10364] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.541855][T10583] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 198.569705][T10583] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1175'. [ 198.783776][T10364] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.925003][T10364] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 198.986794][T10364] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.051004][T10364] bridge_slave_1: left allmulticast mode [ 199.056693][T10364] bridge_slave_1: left promiscuous mode [ 199.062814][T10364] bridge0: port 2(bridge_slave_1) entered disabled state [ 199.072863][T10364] bridge_slave_0: left allmulticast mode [ 199.078523][T10364] bridge_slave_0: left promiscuous mode [ 199.084652][T10364] bridge0: port 1(bridge_slave_0) entered disabled state [ 199.392635][T10364] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 199.405165][T10364] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 199.415204][T10364] bond0 (unregistering): Released all slaves [ 199.765106][T10364] hsr_slave_0: left promiscuous mode [ 199.778985][T10364] hsr_slave_1: left promiscuous mode [ 199.788772][T10364] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 199.796565][T10364] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 199.804464][T10364] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 199.812129][T10364] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 199.834607][T10364] veth1_macvtap: left promiscuous mode [ 199.840453][T10364] veth0_macvtap: left promiscuous mode [ 199.846044][T10364] veth1_vlan: left promiscuous mode [ 199.852350][T10364] veth0_vlan: left promiscuous mode [ 200.287605][T10601] netlink: 52 bytes leftover after parsing attributes in process `syz.1.1182'. [ 200.450061][T10610] netlink: 256 bytes leftover after parsing attributes in process `syz.0.1181'. [ 200.459618][T10610] netlink: 64 bytes leftover after parsing attributes in process `syz.0.1181'. [ 200.670687][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 200.690499][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 200.709138][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 200.717302][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 200.735368][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 200.746562][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 200.816541][T10364] team0 (unregistering): Port device team_slave_1 removed [ 200.856766][T10364] team0 (unregistering): Port device team_slave_0 removed [ 201.220530][T10591] bridge0: entered promiscuous mode [ 201.225970][T10591] bridge0: left promiscuous mode [ 201.288256][T10612] lo speed is unknown, defaulting to 1000 [ 201.328766][T10612] lo speed is unknown, defaulting to 1000 [ 201.603902][T10626] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1189'. [ 201.629231][T10626] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 201.660650][T10626] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 201.713481][T10626] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 201.735265][T10626] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.254031][T10612] chnl_net:caif_netlink_parms(): no params data found [ 202.429190][T10668] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1201'. [ 202.643057][T10612] bridge0: port 1(bridge_slave_0) entered blocking state [ 202.657476][T10612] bridge0: port 1(bridge_slave_0) entered disabled state [ 202.671339][T10612] bridge_slave_0: entered allmulticast mode [ 202.678369][T10612] bridge_slave_0: entered promiscuous mode [ 202.713337][T10612] bridge0: port 2(bridge_slave_1) entered blocking state [ 202.734495][T10680] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 202.739646][T10612] bridge0: port 2(bridge_slave_1) entered disabled state [ 202.761692][T10612] bridge_slave_1: entered allmulticast mode [ 202.763374][T10680] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1204'. [ 202.777010][T10612] bridge_slave_1: entered promiscuous mode [ 202.847015][ T5848] Bluetooth: hci1: command tx timeout [ 202.867253][T10612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 202.879897][T10612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 203.023367][T10686] pim6reg: entered allmulticast mode [ 203.040748][T10688] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 203.058727][T10682] pim6reg: left allmulticast mode [ 203.134396][T10612] team0: Port device team_slave_0 added [ 203.155264][T10612] team0: Port device team_slave_1 added [ 203.200403][T10697] ipt_ECN: cannot use operation on non-tcp rule [ 203.258109][T10612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 203.272115][T10612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.343414][T10612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 203.408996][T10612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 203.430151][T10612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 203.493568][T10708] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1213'. [ 203.505954][T10612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 203.545201][T10714] geneve0: mtu less than device minimum [ 203.617219][T10612] hsr_slave_0: entered promiscuous mode [ 203.634581][T10612] hsr_slave_1: entered promiscuous mode [ 203.659837][T10612] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 203.678658][T10612] Cannot create hsr debugfs directory [ 203.745593][T10723] netlink: 39 bytes leftover after parsing attributes in process `syz.3.1218'. [ 203.761894][T10723] netlink: 39 bytes leftover after parsing attributes in process `syz.3.1218'. [ 203.789905][T10723] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1218'. [ 203.818686][T10723] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1218'. [ 203.991269][T10742] netlink: 'syz.1.1224': attribute type 1 has an invalid length. [ 204.000152][T10747] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1223'. [ 204.066385][T10742] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 204.105181][T10755] lo speed is unknown, defaulting to 1000 [ 204.178404][T10755] lo speed is unknown, defaulting to 1000 [ 204.372542][T10771] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1229'. [ 204.390033][T10771] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1229'. [ 204.491544][T10612] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 204.514053][T10612] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 204.543748][T10612] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 204.579423][T10612] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 204.653601][T10781] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1231'. [ 204.697661][T10612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 204.726341][T10612] 8021q: adding VLAN 0 to HW filter on device team0 [ 204.781401][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.788534][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 204.825983][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.833154][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 204.909468][ T5848] Bluetooth: hci1: command tx timeout [ 205.065668][T10795] netlink: 'syz.0.1235': attribute type 3 has an invalid length. [ 205.578894][T10612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 205.980715][T10612] veth0_vlan: entered promiscuous mode [ 205.992297][T10612] veth1_vlan: entered promiscuous mode [ 206.012822][T10612] veth0_macvtap: entered promiscuous mode [ 206.022781][T10612] veth1_macvtap: entered promiscuous mode [ 206.044022][T10612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.054929][T10612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.065267][T10612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 206.075890][T10612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.087136][T10612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 206.097484][T10612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.108503][T10612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.119133][T10612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 206.130114][T10612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 206.141324][T10612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 206.177620][T10612] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.186976][T10612] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.196345][T10612] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.205361][T10612] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 206.395657][ T8693] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.406738][ T8693] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.483812][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 206.496108][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 206.745620][T10868] xfrm2: entered allmulticast mode [ 206.923485][T10879] xt_l2tp: wrong L2TP version: 0 [ 206.933293][T10879] netlink: 'syz.2.1252': attribute type 1 has an invalid length. [ 207.828878][T10888] __nla_validate_parse: 9 callbacks suppressed [ 207.828898][T10888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1255'. [ 207.845606][T10888] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1255'. [ 208.703647][ T8691] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.833303][ T8691] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.304240][ T8691] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.354500][ T8691] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.430534][ T8691] bridge_slave_1: left allmulticast mode [ 209.436210][ T8691] bridge_slave_1: left promiscuous mode [ 209.443477][ T8691] bridge0: port 2(bridge_slave_1) entered disabled state [ 209.451865][ T8691] bridge_slave_0: left allmulticast mode [ 209.457516][ T8691] bridge_slave_0: left promiscuous mode [ 209.463671][ T8691] bridge0: port 1(bridge_slave_0) entered disabled state [ 209.855357][T10909] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1259'. [ 209.952946][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 209.963591][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 210.010556][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 210.036206][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 210.056411][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 210.064023][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 210.118308][ T8691] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 210.129102][ T8691] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 210.139638][ T8691] bond0 (unregistering): Released all slaves [ 210.160126][T10909] bridge_slave_1: left allmulticast mode [ 210.175779][T10909] bridge_slave_1: left promiscuous mode [ 210.182031][T10909] bridge0: port 2(bridge_slave_1) entered disabled state [ 210.193586][T10909] bridge_slave_0: left allmulticast mode [ 210.203882][T10909] bridge_slave_0: left promiscuous mode [ 210.218413][T10909] bridge0: port 1(bridge_slave_0) entered disabled state [ 210.262177][T10909] bridge0 (unregistering): left allmulticast mode [ 210.422084][T10911] lo speed is unknown, defaulting to 1000 [ 210.437208][T10911] lo speed is unknown, defaulting to 1000 [ 210.863815][T10938] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1269'. [ 210.899807][T10938] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1269'. [ 210.921900][T10951] netlink: 'syz.3.1269': attribute type 1 has an invalid length. [ 210.940782][ T8691] hsr_slave_0: left promiscuous mode [ 210.947656][ T8691] hsr_slave_1: left promiscuous mode [ 210.951797][T10952] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1271'. [ 210.985000][T10951] netlink: 'syz.3.1269': attribute type 3 has an invalid length. [ 210.993339][T10951] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1269'. [ 211.002649][T10951] NCSI netlink: No device for ifindex 0 [ 211.015102][ T8691] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 211.029891][ T8691] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 211.046276][ T8691] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 211.055686][ T8691] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 211.092785][ T8691] veth1_macvtap: left promiscuous mode [ 211.106688][ T8691] veth0_macvtap: left promiscuous mode [ 211.113601][ T8691] veth1_vlan: left promiscuous mode [ 211.119030][ T8691] veth0_vlan: left promiscuous mode [ 211.533808][ T8691] team0 (unregistering): Port device team_slave_1 removed [ 211.576337][ T8691] team0 (unregistering): Port device team_slave_0 removed [ 211.938923][T10938] batadv0: entered promiscuous mode [ 211.944861][T10938] batadv0: left promiscuous mode [ 212.109671][ T5848] Bluetooth: hci1: command tx timeout [ 212.263281][T10911] chnl_net:caif_netlink_parms(): no params data found [ 212.506709][T10998] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1283'. [ 212.534136][T10911] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.541788][T10911] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.549035][T10911] bridge_slave_0: entered allmulticast mode [ 212.556140][T10911] bridge_slave_0: entered promiscuous mode [ 212.563832][T10911] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.571023][T10911] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.578179][T10911] bridge_slave_1: entered allmulticast mode [ 212.584890][T10911] bridge_slave_1: entered promiscuous mode [ 212.644928][T10911] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.658374][T10911] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.721051][T10911] team0: Port device team_slave_0 added [ 212.734767][T10911] team0: Port device team_slave_1 added [ 212.748172][T11009] openvswitch: netlink: Message has 8 unknown bytes. [ 212.795625][T11009] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1287'. [ 212.805892][T10911] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.815518][T10911] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.841995][T10911] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.853585][T11009] netlink: 'syz.0.1287': attribute type 12 has an invalid length. [ 212.865485][T10911] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.873070][T10911] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.900849][T10911] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 212.960772][T10911] hsr_slave_0: entered promiscuous mode [ 212.968113][T10911] hsr_slave_1: entered promiscuous mode [ 212.975849][T10911] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 212.989087][T10911] Cannot create hsr debugfs directory [ 213.192459][T11015] lo speed is unknown, defaulting to 1000 [ 213.199000][T11015] lo speed is unknown, defaulting to 1000 [ 213.556246][T11019] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1290'. [ 213.588904][T10911] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 213.643377][T10911] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 213.668360][T10911] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 213.699226][T10911] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 213.964340][T11034] syzkaller1: entered promiscuous mode [ 213.976428][T11034] syzkaller1: entered allmulticast mode [ 214.121233][T11052] netlink: 'syz.0.1299': attribute type 10 has an invalid length. [ 214.129116][T11052] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1299'. [ 214.149559][T11052] bridge0: port 4(batadv0) entered blocking state [ 214.159476][T11052] bridge0: port 4(batadv0) entered disabled state [ 214.166080][T11052] batadv0: entered allmulticast mode [ 214.186291][T11052] batadv0: entered promiscuous mode [ 214.197071][ T5848] Bluetooth: hci1: command tx timeout [ 214.252420][T11056] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 214.280178][T11058] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 214.350483][T11062] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1302'. [ 214.376515][T10911] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.413586][T10911] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.430635][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.437764][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.469645][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.476780][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.525345][ T8691] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 214.535285][ T8691] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 214.651954][T11078] tipc: Enabling of bearer <Þ|i³:æ> rejected, media not registered [ 214.750628][T11085] tc_dump_action: action bad kind [ 214.776099][T10911] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.886956][T11092] netlink: 16178 bytes leftover after parsing attributes in process `syz.0.1311'. [ 215.264204][T11113] warn_alloc: 1 callbacks suppressed [ 215.264223][T11113] syz.1.1316: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null) [ 215.265497][T11121] netlink: 'syz.2.1319': attribute type 11 has an invalid length. [ 215.283622][T11113] ,cpuset=/,mems_allowed=0-1 [ 215.308984][T11113] CPU: 1 UID: 0 PID: 11113 Comm: syz.1.1316 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 215.319747][T11113] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 215.329800][T11113] Call Trace: [ 215.333076][T11113] [ 215.335999][T11113] dump_stack_lvl+0x241/0x360 [ 215.340681][T11113] ? __pfx_dump_stack_lvl+0x10/0x10 [ 215.345876][T11113] ? __pfx__printk+0x10/0x10 [ 215.350465][T11113] ? __rcu_read_unlock+0xa1/0x110 [ 215.355489][T11113] warn_alloc+0x278/0x410 [ 215.359815][T11113] ? __pfx_warn_alloc+0x10/0x10 [ 215.364662][T11113] ? xskq_create+0xb6/0x170 [ 215.369163][T11113] ? __get_vm_area_node+0x1c8/0x2d0 [ 215.374389][T11113] ? __get_vm_area_node+0x25c/0x2d0 [ 215.379608][T11113] __vmalloc_node_range_noprof+0x62f/0x1380 [ 215.385538][T11113] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 215.391886][T11113] ? __kasan_kmalloc+0x98/0xb0 [ 215.396651][T11113] vmalloc_user_noprof+0x74/0x80 [ 215.401586][T11113] ? xskq_create+0xb6/0x170 [ 215.406088][T11113] xskq_create+0xb6/0x170 [ 215.410423][T11113] xsk_init_queue+0xa1/0x100 [ 215.415014][T11113] xsk_setsockopt+0x598/0x950 [ 215.419700][T11113] ? __pfx_xsk_setsockopt+0x10/0x10 [ 215.424894][T11113] ? __pfx_aa_sk_perm+0x10/0x10 [ 215.429745][T11113] ? __pfx_lock_acquire+0x10/0x10 [ 215.434763][T11113] ? aa_sock_opt_perm+0x79/0x120 [ 215.439704][T11113] ? __pfx_xsk_setsockopt+0x10/0x10 [ 215.444898][T11113] do_sock_setsockopt+0x3af/0x720 [ 215.449923][T11113] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 215.455465][T11113] ? __fget_files+0x395/0x410 [ 215.460139][T11113] ? __fget_files+0x2a/0x410 [ 215.464733][T11113] __x64_sys_setsockopt+0x1ee/0x280 [ 215.469933][T11113] do_syscall_64+0xf3/0x230 [ 215.474432][T11113] ? clear_bhb_loop+0x35/0x90 [ 215.479106][T11113] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 215.484992][T11113] RIP: 0033:0x7f5afa985d29 [ 215.489403][T11113] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 215.509091][T11113] RSP: 002b:00007f5afb783038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 215.517504][T11113] RAX: ffffffffffffffda RBX: 00007f5afab76080 RCX: 00007f5afa985d29 [ 215.525484][T11113] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003 [ 215.533464][T11113] RBP: 00007f5afaa01aa8 R08: 0000000000000004 R09: 0000000000000000 [ 215.541446][T11113] R10: 00000000200001c0 R11: 0000000000000246 R12: 0000000000000000 [ 215.549424][T11113] R13: 0000000000000001 R14: 00007f5afab76080 R15: 00007fff85965b78 [ 215.557410][T11113] [ 215.567501][T10911] veth0_vlan: entered promiscuous mode [ 215.578888][T10911] veth1_vlan: entered promiscuous mode [ 215.584969][T11113] Mem-Info: [ 215.588121][T11113] active_anon:4378 inactive_anon:0 isolated_anon:0 [ 215.588121][T11113] active_file:1455 inactive_file:38340 isolated_file:0 [ 215.588121][T11113] unevictable:768 dirty:111 writeback:0 [ 215.588121][T11113] slab_reclaimable:10782 slab_unreclaimable:102495 [ 215.588121][T11113] mapped:28355 shmem:1448 pagetables:646 [ 215.588121][T11113] sec_pagetables:0 bounce:0 [ 215.588121][T11113] kernel_misc_reclaimable:0 [ 215.588121][T11113] free:1339603 free_pcp:320 free_cma:0 [ 215.805827][T11113] Node 0 active_anon:17212kB inactive_anon:0kB active_file:5820kB inactive_file:153288kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:113220kB dirty:444kB writeback:0kB shmem:4256kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11596kB pagetables:2384kB sec_pagetables:0kB all_unreclaimable? no [ 215.826422][T11135] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1323'. [ 215.861963][T11137] rdma_rxe: rxe_newlink: failed to add ip6gre0 [ 215.871186][T11113] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 215.905736][T11113] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 215.914324][T11135] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1323'. [ 215.950472][T11113] lowmem_reserve[]: 0 2465 2466 0 0 [ 215.962579][T11113] Node 0 DMA32 free:1437024kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:17372kB inactive_anon:0kB active_file:5820kB inactive_file:152468kB unevictable:1536kB writepending:440kB present:3129332kB managed:2552760kB mlocked:0kB bounce:0kB free_pcp:2448kB local_pcp:1820kB free_cma:0kB [ 216.006796][T11139] lo speed is unknown, defaulting to 1000 [ 216.020433][T11139] lo speed is unknown, defaulting to 1000 [ 216.039174][T10911] veth0_macvtap: entered promiscuous mode [ 216.039794][T11113] lowmem_reserve[]: 0 0 0 0 0 [ 216.050040][T10911] veth1_macvtap: entered promiscuous mode [ 216.059551][T11113] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:820kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 216.087941][T10911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.099430][T11113] lowmem_reserve[]: 0 0 0 0 0 [ 216.104208][T11113] Node 1 Normal free:3904712kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:72kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 216.109378][T10911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.147185][T10911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 216.160769][T10911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.174310][T11113] lowmem_reserve[]: 0 0 0 0 0 [ 216.179090][T11113] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 216.190696][T10911] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 216.213641][T11147] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1324'. [ 216.234194][T11113] Node 0 DMA32: 2*4kB (E) 14*8kB (UME) 113*16kB (UME) 136*32kB (UME) 192*64kB (UME) 128*128kB (UM) 65*256kB (UME) 33*512kB (UME) 10*1024kB (UM) 6*2048kB (UME) 328*4096kB (UM) = 1434504kB [ 216.237949][T10911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.269881][ T5848] Bluetooth: hci1: command tx timeout [ 216.288163][T10911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.288777][T11113] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 216.311085][T10911] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 216.339455][T11113] Node 1 Normal: 230*4kB (UME) 64*8kB (UME) 37*16kB (UME) 201*32kB (UME) 103*64kB (UME) 26*128kB (UME) 13*256kB (UME) 6*512kB (UM) 3*1024kB (UME) 5*2048kB (UE) 944*4096kB (M) = 3904712kB [ 216.379444][T11113] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 216.388831][T10911] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 216.412518][T10911] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 216.424156][T11113] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 216.445801][T10911] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.459507][T11113] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 216.466518][T10911] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.469073][T11113] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 216.469094][T11113] 42632 total pagecache pages [ 216.469103][T11113] 0 pages in swap cache [ 216.469111][T11113] Free swap = 124996kB [ 216.469119][T11113] Total swap = 124996kB [ 216.469129][T11113] 2097051 pages RAM [ 216.469137][T11113] 0 pages HighMem/MovableOnly [ 216.469145][T11113] 427011 pages reserved [ 216.469154][T11113] 0 pages cma reserved [ 216.478066][T10911] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.535568][T10911] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 216.694426][T11153] lo speed is unknown, defaulting to 1000 [ 216.746143][T11154] lo speed is unknown, defaulting to 1000 [ 216.763545][T11153] lo speed is unknown, defaulting to 1000 [ 216.888170][ T8701] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 216.920178][ T8701] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 216.976163][ T2977] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 217.013931][ T2977] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 217.014603][T11163] tipc: Started in network mode [ 217.029712][T11163] tipc: Node identity 2dff0000000000000080ffffffffffff, cluster identity 4711 [ 217.094476][T11154] lo speed is unknown, defaulting to 1000 [ 217.122621][T11137] netlink: 'syz.3.1322': attribute type 4 has an invalid length. [ 217.136597][T11171] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.213682][T11137] infiniband syz0: set down [ 217.238819][ T58] lo speed is unknown, defaulting to 1000 [ 217.250997][ T58] lo speed is unknown, defaulting to 1000 [ 217.587167][T11185] lo speed is unknown, defaulting to 1000 [ 217.603936][T11185] lo speed is unknown, defaulting to 1000 [ 217.657680][T11190] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1336'. [ 218.113365][ T8693] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.437590][ T8693] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.533563][ T8693] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.604003][ T8693] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.712523][ T8693] bridge_slave_1: left allmulticast mode [ 218.718182][ T8693] bridge_slave_1: left promiscuous mode [ 218.724228][ T8693] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.732901][ T8693] bridge_slave_0: left allmulticast mode [ 218.738539][ T8693] bridge_slave_0: left promiscuous mode [ 218.744462][ T8693] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.037858][ T8693] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.052030][ T8693] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.063264][ T8693] bond0 (unregistering): Released all slaves [ 219.305468][ T8693] hsr_slave_0: left promiscuous mode [ 219.312922][ T8693] hsr_slave_1: left promiscuous mode [ 219.318729][ T8693] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 219.340422][ T8693] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 219.354773][ T8693] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 219.367205][ T8693] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 219.384288][ T8693] veth1_macvtap: left promiscuous mode [ 219.389983][ T8693] veth0_macvtap: left promiscuous mode [ 219.395601][ T8693] veth1_vlan: left promiscuous mode [ 219.401046][ T8693] veth0_vlan: left promiscuous mode [ 219.756836][ T8693] team0 (unregistering): Port device team_slave_1 removed [ 220.052198][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 220.062826][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 220.072969][ T54] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 220.081854][ T54] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 220.099012][ T54] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 220.117752][ T54] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 220.118065][T11233] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1345'. [ 220.150900][T11234] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1345'. [ 220.172988][ T8693] team0 (unregistering): Port device team_slave_0 removed [ 220.375177][T11244] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1347'. [ 220.656793][T11241] netlink: 'syz.3.1347': attribute type 15 has an invalid length. [ 220.711321][T11226] lo speed is unknown, defaulting to 1000 [ 220.733200][T11226] lo speed is unknown, defaulting to 1000 [ 221.065670][T11226] chnl_net:caif_netlink_parms(): no params data found [ 221.262263][T11277] netlink: 68 bytes leftover after parsing attributes in process `syz.0.1354'. [ 221.295648][T11280] IPVS: set_ctl: invalid protocol: 41 172.30.1.3:20002 [ 221.339471][T11283] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 221.408603][T11283] netlink: 'syz.3.1357': attribute type 10 has an invalid length. [ 221.421430][T11226] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.428660][T11226] bridge0: port 1(bridge_slave_0) entered disabled state [ 221.437382][T11289] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1358'. [ 221.449635][T11226] bridge_slave_0: entered allmulticast mode [ 221.469857][T11226] bridge_slave_0: entered promiscuous mode [ 221.499119][T11283] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 221.545229][T11226] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.556526][T11226] bridge0: port 2(bridge_slave_1) entered disabled state [ 221.569948][T11226] bridge_slave_1: entered allmulticast mode [ 221.580521][T11301] netlink: 'syz.3.1357': attribute type 10 has an invalid length. [ 221.600477][T11226] bridge_slave_1: entered promiscuous mode [ 221.656958][T11301] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1357'. [ 221.722424][T11301] batman_adv: batadv0: Adding interface: vlan1 [ 221.728635][T11301] batman_adv: batadv0: The MTU of interface vlan1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 221.797597][T11301] batman_adv: batadv0: Interface activated: vlan1 [ 221.825245][T11226] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 221.865738][T11226] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.018096][T11226] team0: Port device team_slave_0 added [ 222.027698][T11321] GUP no longer grows the stack in syz.0.1365 (11321): 20004000-20005000 (20002000) [ 222.050540][T11226] team0: Port device team_slave_1 added [ 222.069487][T11321] CPU: 1 UID: 0 PID: 11321 Comm: syz.0.1365 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 222.080297][T11321] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 222.090381][T11321] Call Trace: [ 222.093682][T11321] [ 222.096639][T11321] dump_stack_lvl+0x241/0x360 [ 222.101356][T11321] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.106589][T11321] ? __pfx__printk+0x10/0x10 [ 222.111199][T11321] ? find_vma+0xf9/0x170 [ 222.115456][T11321] __get_user_pages+0x4385/0x49e0 [ 222.120515][T11321] ? __pfx_lock_acquire+0x10/0x10 [ 222.125573][T11321] ? mark_lock+0x9a/0x360 [ 222.129939][T11321] ? __lock_acquire+0x1397/0x2100 [ 222.135015][T11321] ? __pfx___get_user_pages+0x10/0x10 [ 222.140428][T11321] ? __gup_longterm_locked+0xd2f/0x17f0 [ 222.146007][T11321] ? __pfx_down_read_killable+0x10/0x10 [ 222.151594][T11321] ? __pfx_lock_acquire+0x10/0x10 [ 222.156647][T11321] ? try_get_folio+0xf1/0x6f0 [ 222.161350][T11321] ? __pfx_lock_release+0x10/0x10 [ 222.166413][T11321] __gup_longterm_locked+0xe64/0x17f0 [ 222.171828][T11321] ? mark_lock+0x9a/0x360 [ 222.176183][T11321] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 222.182188][T11321] ? __pfx___gup_longterm_locked+0x10/0x10 [ 222.188027][T11321] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 222.194398][T11321] ? gup_fast_fallback+0x207e/0x29c0 [ 222.199711][T11321] gup_fast_fallback+0x2266/0x29c0 [ 222.204880][T11321] ? __pfx_gup_fast_fallback+0x10/0x10 [ 222.210386][T11321] ? __mutex_trylock_common+0x183/0x2e0 [ 222.215963][T11321] ? __pfx___might_resched+0x10/0x10 [ 222.221272][T11321] ? is_valid_gup_args+0x124/0x200 [ 222.226410][T11321] get_user_pages_fast+0xcc/0x160 [ 222.231466][T11321] ? __pfx_get_user_pages_fast+0x10/0x10 [ 222.237112][T11321] ? rcu_is_watching+0x15/0xb0 [ 222.241903][T11321] ? trace_contention_end+0x3c/0x120 [ 222.247225][T11321] ? __mutex_lock+0x37f/0xee0 [ 222.251947][T11321] __iov_iter_get_pages_alloc+0x3b4/0x8e0 [ 222.257706][T11321] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 222.264072][T11321] iov_iter_get_pages2+0xcf/0x130 [ 222.269133][T11321] ? __pfx_iov_iter_get_pages2+0x10/0x10 [ 222.274805][T11321] __se_sys_vmsplice+0x740/0x1490 [ 222.279856][T11321] ? plist_del+0x3f1/0x410 [ 222.284324][T11321] ? __pfx___se_sys_vmsplice+0x10/0x10 [ 222.289813][T11321] ? __pfx_futex_wake+0x10/0x10 [ 222.294733][T11321] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 222.300744][T11321] ? do_syscall_64+0x100/0x230 [ 222.305532][T11321] ? do_syscall_64+0xb6/0x230 [ 222.310234][T11321] do_syscall_64+0xf3/0x230 [ 222.314759][T11321] ? clear_bhb_loop+0x35/0x90 [ 222.319463][T11321] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.325381][T11321] RIP: 0033:0x7ff844985d29 [ 222.329816][T11321] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 222.349447][T11321] RSP: 002b:00007ff845819038 EFLAGS: 00000246 ORIG_RAX: 0000000000000116 [ 222.357893][T11321] RAX: ffffffffffffffda RBX: 00007ff844b75fa0 RCX: 00007ff844985d29 [ 222.365895][T11321] RDX: 0000000000000001 RSI: 00000000200000c0 RDI: 0000000000000008 [ 222.373889][T11321] RBP: 00007ff844a01aa8 R08: 0000000000000000 R09: 0000000000000000 [ 222.381884][T11321] R10: 0000000000000001 R11: 0000000000000246 R12: 0000000000000000 [ 222.389877][T11321] R13: 0000000000000000 R14: 00007ff844b75fa0 R15: 00007ffea2bfd168 [ 222.397889][T11321] [ 222.404803][ T54] Bluetooth: hci1: command tx timeout [ 222.440164][T11226] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.477245][T11226] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.525644][T11226] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.588443][T11226] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.636520][T11226] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.726263][T11226] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 222.803259][T11347] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1371'. [ 222.831694][T11347] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1371'. [ 222.902597][T11226] hsr_slave_0: entered promiscuous mode [ 222.927194][T11226] hsr_slave_1: entered promiscuous mode [ 222.938709][T11226] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 222.946930][T11226] Cannot create hsr debugfs directory [ 222.984993][T11349] veth4: entered allmulticast mode [ 223.061894][T11354] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1376'. [ 223.085352][T11354] NCSI netlink: No device for ifindex 0 [ 223.123165][T11357] lo speed is unknown, defaulting to 1000 [ 223.228879][T11358] lo speed is unknown, defaulting to 1000 [ 223.254257][T11357] lo speed is unknown, defaulting to 1000 [ 223.276462][T11367] lo speed is unknown, defaulting to 1000 [ 223.466732][T11374] netlink: 'syz.1.1382': attribute type 4 has an invalid length. [ 223.772385][T11358] lo speed is unknown, defaulting to 1000 [ 224.039454][T11226] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 224.065065][T11226] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 224.082695][T11380] netlink: 48 bytes leftover after parsing attributes in process `syz.3.1381'. [ 224.108434][T11226] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 224.152715][T11226] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 224.181089][T11367] lo speed is unknown, defaulting to 1000 [ 224.299484][T11385] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 224.429344][ T54] Bluetooth: hci1: command tx timeout [ 224.648218][T11226] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.850684][T11226] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.862528][T11395] xt_cgroup: xt_cgroup: no path or classid specified [ 224.893062][ T2977] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.900253][ T2977] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.917223][ T2977] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.924384][ T2977] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.013775][T11226] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 225.063104][T11226] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 225.352256][T11226] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.368112][T11407] netlink: 'syz.0.1391': attribute type 10 has an invalid length. [ 225.380782][T11407] __nla_validate_parse: 3 callbacks suppressed [ 225.380800][T11407] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1391'. [ 225.397259][T11407] team_slave_0: entered promiscuous mode [ 225.403342][T11407] team_slave_1: entered promiscuous mode [ 225.418050][T11407] team0: entered promiscuous mode [ 225.431149][T11407] 8021q: adding VLAN 0 to HW filter on device team0 [ 225.442624][T11407] bridge0: port 5(team0) entered blocking state [ 225.449043][T11407] bridge0: port 5(team0) entered disabled state [ 225.457559][T11407] team0: entered allmulticast mode [ 225.484906][T11407] team_slave_0: entered allmulticast mode [ 225.499816][T11407] team_slave_1: entered allmulticast mode [ 225.516756][T11407] vlan0: entered allmulticast mode [ 225.539573][T11407] veth0_vlan: entered allmulticast mode [ 225.546458][T11407] team0: left allmulticast mode [ 225.582456][T11407] team_slave_0: left allmulticast mode [ 225.587987][T11407] team_slave_1: left allmulticast mode [ 225.597890][T11407] vlan0: left allmulticast mode [ 225.603141][T11407] veth0_vlan: left allmulticast mode [ 226.025086][T11226] veth0_vlan: entered promiscuous mode [ 226.068809][T11226] veth1_vlan: entered promiscuous mode [ 226.147126][T11226] veth0_macvtap: entered promiscuous mode [ 226.171494][T11459] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8 [ 226.184296][T11226] veth1_macvtap: entered promiscuous mode [ 226.212576][T11447] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 226.226679][T11226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.242877][T11226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.254786][T11226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 226.271443][T11226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.317189][T11226] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 226.372916][T11226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.409461][T11226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.436707][T11475] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1405'. [ 226.440343][T11226] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 226.477878][T11226] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 226.509470][ T54] Bluetooth: hci1: command tx timeout [ 226.515051][ T8693] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 226.530009][T11226] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 226.556511][T11226] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.566581][T11226] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.593571][T11483] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1407'. [ 226.596004][T11226] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.631229][T11486] netlink: 211456 bytes leftover after parsing attributes in process `syz.0.1408'. [ 226.637191][T11226] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.666297][T11472] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1407'. [ 226.681500][T11486] netlink: zone id is out of range [ 226.686672][T11486] netlink: zone id is out of range [ 226.715034][T11489] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1408'. [ 226.758319][T11486] netlink: get zone limit has 8 unknown bytes [ 226.768150][T11493] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1408'. [ 226.812895][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.844524][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.852474][T11486] openvswitch: netlink: Message has 8 unknown bytes. [ 226.895477][ T8707] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.928054][ T8707] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.974564][T11497] lo speed is unknown, defaulting to 1000 [ 227.025941][T11497] lo speed is unknown, defaulting to 1000 [ 227.139666][T11509] netlink: 'syz.3.1416': attribute type 7 has an invalid length. [ 227.144465][T11460] ================================================================== [ 227.160270][T11460] BUG: KASAN: slab-use-after-free in __mutex_lock+0x7fb/0xee0 [ 227.167749][T11460] Read of size 8 at addr ffff88805552c060 by task khidpd_0006fff9/11460 [ 227.176094][T11460] [ 227.178430][T11460] CPU: 0 UID: 0 PID: 11460 Comm: khidpd_0006fff9 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 227.186019][T11509] netlink: 'syz.3.1416': attribute type 8 has an invalid length. [ 227.189616][T11460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 227.189630][T11460] Call Trace: [ 227.189637][T11460] [ 227.189645][T11460] dump_stack_lvl+0x241/0x360 [ 227.218313][T11460] ? __pfx_dump_stack_lvl+0x10/0x10 [ 227.223543][T11460] ? __pfx__printk+0x10/0x10 [ 227.228153][T11460] ? _printk+0xd5/0x120 [ 227.230103][T11513] netlink: 'syz.2.1417': attribute type 1 has an invalid length. [ 227.232309][T11460] ? __virt_addr_valid+0x183/0x530 [ 227.245155][T11460] ? __virt_addr_valid+0x183/0x530 [ 227.250282][T11460] print_report+0x169/0x550 [ 227.254808][T11460] ? __virt_addr_valid+0x183/0x530 [ 227.259933][T11460] ? __virt_addr_valid+0x183/0x530 [ 227.265050][T11460] ? __virt_addr_valid+0x45f/0x530 [ 227.270155][T11460] ? __phys_addr+0xba/0x170 [ 227.274664][T11460] ? __mutex_lock+0x7fb/0xee0 [ 227.279334][T11460] kasan_report+0x143/0x180 [ 227.283829][T11460] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 227.289712][T11460] ? __mutex_lock+0x7fb/0xee0 [ 227.294382][T11460] __mutex_lock+0x7fb/0xee0 [ 227.298875][T11460] ? __mutex_lock+0x5ef/0xee0 [ 227.303541][T11460] ? l2cap_unregister_user+0x6a/0x1c0 [ 227.308905][T11460] ? __pfx___mutex_lock+0x10/0x10 [ 227.313919][T11460] ? __pfx___timer_delete_sync+0x10/0x10 [ 227.319543][T11460] l2cap_unregister_user+0x6a/0x1c0 [ 227.324729][T11460] hidp_session_thread+0x450/0x490 [ 227.329823][T11460] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 227.335707][T11460] ? __pfx_hidp_session_thread+0x10/0x10 [ 227.341339][T11460] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 227.347219][T11460] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 227.353448][T11460] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 227.359677][T11460] ? __kthread_parkme+0x169/0x1d0 [ 227.364692][T11460] ? __pfx_hidp_session_thread+0x10/0x10 [ 227.370318][T11460] kthread+0x2f0/0x390 [ 227.374464][T11460] ? __pfx_hidp_session_thread+0x10/0x10 [ 227.380087][T11460] ? __pfx_kthread+0x10/0x10 [ 227.384664][T11460] ret_from_fork+0x4b/0x80 [ 227.389066][T11460] ? __pfx_kthread+0x10/0x10 [ 227.393660][T11460] ret_from_fork_asm+0x1a/0x30 [ 227.398415][T11460] [ 227.401425][T11460] [ 227.403735][T11460] Allocated by task 11226: [ 227.408127][T11460] kasan_save_track+0x3f/0x80 [ 227.412793][T11460] __kasan_kmalloc+0x98/0xb0 [ 227.417370][T11460] __kmalloc_noprof+0x285/0x4c0 [ 227.422208][T11460] hci_alloc_dev_priv+0x27/0x2030 [ 227.427220][T11460] vhci_create_device+0x116/0x6a0 [ 227.432235][T11460] vhci_write+0x3cf/0x490 [ 227.436553][T11460] vfs_write+0xaeb/0xd30 [ 227.440780][T11460] ksys_write+0x18f/0x2b0 [ 227.445093][T11460] do_syscall_64+0xf3/0x230 [ 227.449582][T11460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.455462][T11460] [ 227.457790][T11460] Freed by task 11226: [ 227.461927][T11460] kasan_save_track+0x3f/0x80 [ 227.466589][T11460] kasan_save_free_info+0x40/0x50 [ 227.471602][T11460] __kasan_slab_free+0x59/0x70 [ 227.476351][T11460] kfree+0x196/0x430 [ 227.480233][T11460] hci_release_dev+0x1525/0x16b0 [ 227.485157][T11460] bt_host_release+0x83/0x90 [ 227.489740][T11460] device_release+0x99/0x1c0 [ 227.494326][T11460] kobject_put+0x22f/0x480 [ 227.498728][T11460] vhci_release+0x88/0xd0 [ 227.503049][T11460] __fput+0x23c/0xa50 [ 227.507020][T11460] task_work_run+0x24f/0x310 [ 227.511599][T11460] do_exit+0xa2f/0x28e0 [ 227.515747][T11460] do_group_exit+0x207/0x2c0 [ 227.520322][T11460] __x64_sys_exit_group+0x3f/0x40 [ 227.525334][T11460] x64_sys_call+0x26a8/0x26b0 [ 227.529994][T11460] do_syscall_64+0xf3/0x230 [ 227.534485][T11460] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 227.540368][T11460] [ 227.542674][T11460] Last potentially related work creation: [ 227.548369][T11460] kasan_save_stack+0x3f/0x60 [ 227.553030][T11460] __kasan_record_aux_stack+0xac/0xc0 [ 227.558397][T11460] insert_work+0x3e/0x330 [ 227.562711][T11460] __queue_work+0xb66/0xf50 [ 227.567203][T11460] queue_work_on+0x1c2/0x380 [ 227.571777][T11460] process_scheduled_works+0xa66/0x1840 [ 227.577311][T11460] worker_thread+0x870/0xd30 [ 227.581886][T11460] kthread+0x2f0/0x390 [ 227.585944][T11460] ret_from_fork+0x4b/0x80 [ 227.590347][T11460] ret_from_fork_asm+0x1a/0x30 [ 227.595101][T11460] [ 227.597410][T11460] Second to last potentially related work creation: [ 227.603976][T11460] kasan_save_stack+0x3f/0x60 [ 227.608638][T11460] __kasan_record_aux_stack+0xac/0xc0 [ 227.614002][T11460] insert_work+0x3e/0x330 [ 227.618321][T11460] __queue_work+0xc8b/0xf50 [ 227.622810][T11460] call_timer_fn+0x187/0x650 [ 227.627390][T11460] __run_timer_base+0x695/0x8e0 [ 227.632226][T11460] run_timer_softirq+0xb7/0x170 [ 227.637064][T11460] handle_softirqs+0x2d4/0x9b0 [ 227.641837][T11460] __irq_exit_rcu+0xf7/0x220 [ 227.646419][T11460] irq_exit_rcu+0x9/0x30 [ 227.650656][T11460] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 227.656274][T11460] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 227.662250][T11460] [ 227.664560][T11460] The buggy address belongs to the object at ffff88805552c000 [ 227.664560][T11460] which belongs to the cache kmalloc-8k of size 8192 [ 227.678608][T11460] The buggy address is located 96 bytes inside of [ 227.678608][T11460] freed 8192-byte region [ffff88805552c000, ffff88805552e000) [ 227.692393][T11460] [ 227.694702][T11460] The buggy address belongs to the physical page: [ 227.701193][T11460] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x55528 [ 227.709938][T11460] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 227.718422][T11460] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 227.726384][T11460] page_type: f5(slab) [ 227.730352][T11460] raw: 00fff00000000040 ffff88801ac42280 0000000000000000 0000000000000001 [ 227.738924][T11460] raw: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 227.747491][T11460] head: 00fff00000000040 ffff88801ac42280 0000000000000000 0000000000000001 [ 227.756159][T11460] head: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 227.764816][T11460] head: 00fff00000000003 ffffea0001554a01 ffffffffffffffff 0000000000000000 [ 227.773470][T11460] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 227.782130][T11460] page dumped because: kasan: bad access detected [ 227.788540][T11460] page_owner tracks the page as allocated [ 227.794237][T11460] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 10842, tgid 10842 (cryptomgr_probe), ts 206261971928, free_ts 206226228384 [ 227.816193][T11460] post_alloc_hook+0x1f3/0x230 [ 227.820956][T11460] get_page_from_freelist+0x365c/0x37a0 [ 227.826493][T11460] __alloc_pages_noprof+0x292/0x710 [ 227.831679][T11460] alloc_pages_mpol_noprof+0x3e8/0x680 [ 227.837126][T11460] alloc_slab_page+0x6a/0x110 [ 227.841788][T11460] allocate_slab+0x5a/0x2b0 [ 227.846285][T11460] ___slab_alloc+0xc27/0x14a0 [ 227.850955][T11460] __slab_alloc+0x58/0xa0 [ 227.855278][T11460] __kmalloc_cache_noprof+0x27b/0x390 [ 227.860643][T11460] cryptomgr_notify+0x84/0xb10 [ 227.865401][T11460] notifier_call_chain+0x1a5/0x3f0 [ 227.870498][T11460] blocking_notifier_call_chain+0x69/0x90 [ 227.876210][T11460] crypto_alg_mod_lookup+0x372/0x760 [ 227.881483][T11460] crypto_grab_spawn+0x7a/0x360 [ 227.886341][T11460] xts_create+0x193/0xa60 [ 227.890678][T11460] cryptomgr_probe+0x84/0x220 [ 227.895363][T11460] page last free pid 10847 tgid 10847 stack trace: [ 227.901861][T11460] free_unref_page+0xd3f/0x1010 [ 227.906715][T11460] __put_partials+0x160/0x1c0 [ 227.911391][T11460] put_cpu_partial+0x17c/0x250 [ 227.916579][T11460] __slab_free+0x290/0x380 [ 227.920985][T11460] qlist_free_all+0x9a/0x140 [ 227.925567][T11460] kasan_quarantine_reduce+0x14f/0x170 [ 227.931016][T11460] __kasan_slab_alloc+0x23/0x80 [ 227.935857][T11460] kmem_cache_alloc_noprof+0x1d9/0x380 [ 227.941327][T11460] vm_area_alloc+0x24/0x1d0 [ 227.945845][T11460] _install_special_mapping+0x32/0x350 [ 227.951309][T11460] map_vdso+0x227/0x4a0 [ 227.955460][T11460] load_elf_binary+0x1c7a/0x2770 [ 227.960400][T11460] bprm_execve+0xaf5/0x17a0 [ 227.964896][T11460] kernel_execve+0x931/0xa50 [ 227.969477][T11460] call_usermodehelper_exec_async+0x237/0x380 [ 227.975535][T11460] ret_from_fork+0x4b/0x80 [ 227.979941][T11460] [ 227.982254][T11460] Memory state around the buggy address: [ 227.987867][T11460] ffff88805552bf00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 227.995915][T11460] ffff88805552bf80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 228.003967][T11460] >ffff88805552c000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 228.012026][T11460] ^ [ 228.019235][T11460] ffff88805552c080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 228.027292][T11460] ffff88805552c100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 228.035354][T11460] ================================================================== [ 228.045162][T11460] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 228.052378][T11460] CPU: 0 UID: 0 PID: 11460 Comm: khidpd_0006fff9 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 228.063587][T11460] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 228.073654][T11460] Call Trace: [ 228.076935][T11460] [ 228.079854][T11460] dump_stack_lvl+0x241/0x360 [ 228.084552][T11460] ? __pfx_dump_stack_lvl+0x10/0x10 [ 228.089745][T11460] ? __pfx__printk+0x10/0x10 [ 228.094327][T11460] ? vscnprintf+0x5d/0x90 [ 228.098653][T11460] panic+0x349/0x880 [ 228.102546][T11460] ? check_panic_on_warn+0x21/0xb0 [ 228.107652][T11460] ? __pfx_panic+0x10/0x10 [ 228.112061][T11460] ? mark_lock+0x9a/0x360 [ 228.116381][T11460] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 228.122267][T11460] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 228.128145][T11460] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 228.134471][T11460] ? print_report+0x502/0x550 [ 228.139159][T11460] check_panic_on_warn+0x86/0xb0 [ 228.144092][T11460] ? __mutex_lock+0x7fb/0xee0 [ 228.148766][T11460] end_report+0x77/0x160 [ 228.153008][T11460] kasan_report+0x154/0x180 [ 228.157508][T11460] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 228.163394][T11460] ? __mutex_lock+0x7fb/0xee0 [ 228.168069][T11460] __mutex_lock+0x7fb/0xee0 [ 228.172564][T11460] ? __mutex_lock+0x5ef/0xee0 [ 228.177511][T11460] ? l2cap_unregister_user+0x6a/0x1c0 [ 228.182894][T11460] ? __pfx___mutex_lock+0x10/0x10 [ 228.187927][T11460] ? __pfx___timer_delete_sync+0x10/0x10 [ 228.193566][T11460] l2cap_unregister_user+0x6a/0x1c0 [ 228.198758][T11460] hidp_session_thread+0x450/0x490 [ 228.203861][T11460] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 228.209750][T11460] ? __pfx_hidp_session_thread+0x10/0x10 [ 228.215377][T11460] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 228.221257][T11460] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 228.227487][T11460] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 228.233721][T11460] ? __kthread_parkme+0x169/0x1d0 [ 228.238738][T11460] ? __pfx_hidp_session_thread+0x10/0x10 [ 228.244362][T11460] kthread+0x2f0/0x390 [ 228.248422][T11460] ? __pfx_hidp_session_thread+0x10/0x10 [ 228.254053][T11460] ? __pfx_kthread+0x10/0x10 [ 228.258639][T11460] ret_from_fork+0x4b/0x80 [ 228.263041][T11460] ? __pfx_kthread+0x10/0x10 [ 228.267621][T11460] ret_from_fork_asm+0x1a/0x30 [ 228.272378][T11460] [ 228.275629][T11460] Kernel Offset: disabled [ 228.279943][T11460] Rebooting in 86400 seconds..