last executing test programs: 1m22.426214291s ago: executing program 0 (id=317): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x7d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x15}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1m13.921464066s ago: executing program 0 (id=317): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x7d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x15}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 8.220877231s ago: executing program 0 (id=317): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x7d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x15}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 8.220758813s ago: executing program 0 (id=317): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x7d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x15}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 8.220643544s ago: executing program 0 (id=317): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x7d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x15}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 8.220491811s ago: executing program 0 (id=317): r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000a40)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_mpls={0x4c, 0x1, 0x0, 0x0, {{0x9}, {0x20, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}]}, {0x4}, {0xc}, {0xc}}}, @m_pedit={0x30, 0x2, 0x0, 0x0, {{0xa}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x94}}, 0x0) sendmsg$BATADV_CMD_GET_BLA_CLAIM(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, 0x0, 0x100, 0x70bd2d, 0x25dfdbfe, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}, @BATADV_ATTR_VLANID={0x6, 0x28, 0x4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x15, 0x3, &(0x7f0000000000)=@framed={{0x7d, 0xa, 0xa, 0x0, 0x0, 0x71, 0x10, 0x15}}, &(0x7f0000000480)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 5.008483137s ago: executing program 3 (id=1091): setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000000800)=@broute={'broute\x00', 0x20, 0x4, 0x25e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000c0], 0x0, 0x0, &(0x7f00000000c0)=[{0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, [{0x5, 0x21, 0x8, 'netdevsim0\x00', 'veth0_to_bond\x00', 'vlan0\x00', 'ip6_vti0\x00', @random="df0befd05447", [0xff, 0xff, 0x0, 0xff], @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, [0x0, 0xff, 0x0, 0xff, 0x0, 0xff], 0x9e, 0x9e, 0x1ce, [@cpu={{'cpu\x00', 0x0, 0x8}, {{0x7, 0x1}}}], [], @common=@SECMARK={'SECMARK\x00', 0x108, {{0x1, 0x3, 'system_u:object_r:udev_var_run_t:s0\x00'}}}}]}, {0x0, '\x00', 0x1, 0xfffffffffffffffe}, {0x0, '\x00', 0x2, 0x8000000000000003}]}, 0x2d6) r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e000102"], 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f00000004c0)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000006000000050000004dc208000205000000000000000100000d000000000d00000002000000106100302e00"], &(0x7f0000000380)=""/125, 0x3e, 0x7d, 0x0, 0x6, 0x0, @void, @value}, 0x28) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000500), 0x8) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="0500000004000000080000000c00000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000021638ed54d725bfa1eefb2010077ffffff04000000000000008726ba4b451f919100000000d750a8064a21bc4c6d1dc681f8a1535820e0edf6f84fbb552b9fd8a484e58be7cc925f9d1372730fc80b91ed02b7e922fc80ace673abaa67af9d2f212afcbe492077af24f34c82ed3a22531476a2bc7a4fccb3571796285697ddbfd9"], 0x50) bpf$MAP_UPDATE_BATCH(0x19, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x16ec7077c8c871d9}, 0x38) ioctl$sock_SIOCGIFVLAN_GET_VLAN_INGRESS_PRIORITY_CMD(r1, 0x8982, &(0x7f0000000080)) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = accept4(r2, 0x0, &(0x7f0000000480), 0x140800) getsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r4, 0x84, 0x75, &(0x7f0000000340)={0x0, 0x8}, &(0x7f0000000540)=0x8) r6 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r6, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000001000010700000000200000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r6, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmmsg(r6, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f00000011c0)=""/70, 0x46}, {&(0x7f00000000c0)=""/43, 0x21}, {&(0x7f0000003c80)=""/4106, 0x104d}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x4}, 0x1801}], 0x1, 0x10020, 0x0) sendmmsg$alg(r2, &(0x7f0000003e40)=[{0x0, 0x0, &(0x7f0000000880)=[{&(0x7f00000016c0)="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", 0x1000}, {&(0x7f00000005c0)="adad97aa0b32b6587cbd437718b51c3d7dd1c96bc7900f69f31d7983ab23dbe4c450d97f06cbed64494c4f1fd618df234cd100de1d64686e722c571d36430213833e894760097632518238ef23fbb76f5c182e67d17d35b5f4b573f9e108ca098175e91822311a202f34b962fc383fec", 0x70}, {&(0x7f00000026c0)="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", 0x1000}, {&(0x7f0000000700)="b0ec6fe8aad2d76b133dbc7dec3e88fc022415f5012bb19902e78da84f94afad1c73cf23f3c930bd4fec4250d92fee0230cc270577b41744", 0x38}, {&(0x7f0000000740)="9c5300e0d63f614531333836997c990e1972cbfa3201ac582ad93361bd3b99feb0378c3696b3c6eafc2baba4f6c4e35a0349d56c92aa1783f36093fce63291140bfc1a46beae5f50cf6ed5c255820c827c60bf92cf5e95ad129726d167d2957f96069d19a72d4bacde055127418940873fec45a9e452bca161043bb14cfa45c07eb3159413e52faec9be33e92e48bb5ca939b1d924e048fc50f03454c0eac5101374bb6e8169017825d5b7ce1ba20ef6630e5c", 0xb3}], 0x5, &(0x7f0000000900)=[@assoc={0x18, 0x117, 0x4, 0x5}], 0x18, 0x90}, {0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000940)="b74c69d4f0", 0x5}], 0x1, &(0x7f00000009c0)=[@iv={0xf8, 0x117, 0x2, 0xe4, "958c420fe1fa28fd417b59775093b60cb627dc6a5d0f900db252e87b178b2f24dabe95bdad72c29673a975b0a85963357bc973b9ed9a25ccf3708d678095061afe7970a2bd0dd7d52490b69aaeca1315a092405133318302a212f0851de7c0e15a8a9a54f0646b3694b6a209b16a605e996edb5f540081b4f2b6f6a3d1bb0f1fc98e71fc56ef65732fa3c01f5589102f1daf8d8164c8adf2ce61713f37df63fe3a83dc7e9753bc90665f7cefbe11b27aa583c6735148547b5ade9ad9baa28015f78e36fab8573fab62366a91b938ba4eb0f9fa36fe4078d509b11a252cdf277bec422da2"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0xe0, 0x117, 0x2, 0xcb, "196ad5a3419b65e3cb5da722cbf9481e6eccafcf05398e1070c1175308b24b12293028f1a225b437fc623b20bf2aaf06beecd3c1f02dab9ad9399e67f55eb6ea38214f933d1fd17bb25ae208cdbb3d59224bd62bc0e9ec3fd7525eabd6aaceb19943be3ecaebe8594c8fe543e9624d3486ed520f18c5a836535fe21c0589a099d5b1976dfdce5abd48ba95288680f9f2e2e059628e6596e0d60817c55a796993f6d19ce55e2bd3a22f8f25fef0c8b2da9220844231ca08b75b982a6a2d68602176c415f9b1006dd9a943f8"}, @op={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x2}, @op={0x18, 0x117, 0x3, 0x1}], 0x250, 0x801}, {0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000c40)="6fb8e6f279cb89ac45a70cce2412e0a89f31b02ccaf8cea838ef0ba82d4ad9ab20c515b85e13b9f5fe3dc6e8070f", 0x2e}, {&(0x7f0000000c80)="b9c6d28460c2b534e858cfa3aa469bc40e", 0x11}], 0x2, &(0x7f0000000d00)=[@assoc={0x18, 0x117, 0x4, 0x7}, @assoc={0x18, 0x117, 0x4, 0x851}, @assoc={0x18}, @iv={0x88, 0x117, 0x2, 0x6f, "9107ba0a03541af8942c12efc8ebe7a25f91661238bf4fa3bf0a9e1c3e7ef2f623bb329c0ffbbcfd292753cb0dfbc953758d26be42da9dc73df90936f4300545e46d956fee05b72405d6722c938b07300b5008d2fb31a14c4615d42c021f847afcd50b35e7e1ea29fdeb9a5fcfcd91"}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x78, 0x117, 0x2, 0x60, "a4a53625d5721c3be9de9acc7d1ded7d0937a570844b555e3e15798c6af8536beb99f216b2ff1c5bba559937f1a48fc462e4f4b2cd355334f5ce024938ef8e0e7003a9e8393ac70bd57b16e04219de688f8fc8325285b6865f64beb038280f84"}, @iv={0xf0, 0x117, 0x2, 0xd8, "b93cbc728e0e3d8369d2b8ea746852995751eb2fa1af0f4f0d7d0656c82d0629b946cc212045a006c0ae25aa67a1a2f54697579482f307b3e7f8e0cf6d84cd376eae54acb7454a815d605a572e1b528f0fd8ab4feeb40e76c4e5e72125ed251ac9797f44f72c8f964c506d4998899bfeea36e28e093ee44b62f325d83dd973981391fd0f3e6113131ec40f5553ed2271d6bd1941f6d6d9a7abb503997a2de73cb68647281a20954a4eacdcdce94df7b54eea7ea86f9bcbfba0561eb6c32fa1a5a23edf099e19d33d000d63ea364c44fb807c49e0f363d21a"}, @iv={0x70, 0x117, 0x2, 0x5b, "388696feca53dda1d783c41bcdf312ebc9202ef546dbb341f222a4ffe64348a23b552ca5897a33bf5e60c9581813faf2a84818a3aefd764376467453783155c65ec04951915dae2ff19830c9a47e7c36ed4842f98fd6ffedd8f044"}], 0x2c0, 0x1}, {0x0, 0x0, &(0x7f00000015c0)=[{&(0x7f0000000fc0)="7e87633caf3de05e07bdf587cc98872d6deb1b94be543e9f6e1a212ab27c154444c1041f925e541288f4dc6d01f672ecb49b846c28e48ba0d08b30c412e4f029dcddb2fe9a469e56664740d0d2058588dc7ce5b19df37a2557835ef913f8c18e143b0b371a920c43bbb1c096a4553b07c482117c90aebb09918779a4274700ec421a83ee5308606a8e5bd6dac80513d236cae63aa96adc0ffb3f05377c61", 0x9e}, {&(0x7f0000001080)="9bcd5bef39de50db9245618382992923ab32878a29655c9a754b6ec6651a1c4dcf7ddb013ecc63613620458dd1150ec6891e9c7543e5820b4e5d94e10ab961fc929e319b0d8b6ad6e58bc1a53e045e920264e7663213dd6d0a445e4cebe1c910c6f9ae6c5b38c3c83e486466faccc323350dc2a06dee198617421cf1a551c4e9df7a", 0x82}, {&(0x7f0000001140)="be1157598e897c4bd466307362b42ee16cd119debd0a732aafb9b8d6bcca0d2fa53ac67af2d166072b8880705fa6064e2e963635b5c49e0a7434dd89332bfc1f51da", 0x42}, {&(0x7f00000011c0)="7a4ba2079939632abf459156f22bdcd7adbcbf1fb487097a3e0b26fa0c77da1f033f263137ced124c2d29f6b54906699af4e6119a4cf4508484dbd88a11f5193f25aee38d541c492a43597e59354740c7349c03920714cc6531dd5771238775f99657cb4059af63e18a7fcdf228118fa4fe6327453edd0273770b343f2e5f685aad8dd8b35aadd850204b6013cc50e6b22bf6f92e2006a862802332625c8372b735492c7950a02e99dad529f8165039374", 0xb1}, {&(0x7f0000001280)="00838295d71ab881e80b2f5f5abfa0a2c7076026ef7d4a7414d7b61ad8db0da98395220b927dd260e8070727ff030300afa691c601218ede05199b51236ad8a5aa0fe3ac0fe4e7ac36542cbd815c2638e120f81df2803abfc0f4a1d963f660e74c5a3d82bc1e9aa4dfe6074ad8a42fabd3500b75a2", 0x75}, {&(0x7f0000001300)="cb97a79e32e72f4f0e1481cfbe0971f5d29bd1376cb5d4e9f521b5f6a63cc8e2e0247e4aa6eb1b7c4c114cfcac3741dba044140ab1c884c7fda282c85601d8df0899b21b86e06568f61f1de4922108676d7e57f2c255fa04aa1dd40ad1a14dc33f32eb2e020cf1050dd17839753ce206dcce0b70efa45899b58d33f210516790c09b14a5f2d86eae146488ddeadc7ab500b8864920461ffe3b89a21f0b1aff3a8c3769c3406579019e5aa691c2fc09b44afa6378bf16df6c3c85fa0972c591b0cef34c6573ebe5", 0xc7}, {&(0x7f0000001400)="a03f325c5a51a6436100b71e379cc9df1da64d7cd200334d9648ae26aeea21c19b22ef343e4c1719832b55afcac617c0bdf1b19d8a6cbebea312bd0254e864a90cd582d1c8d18d458a78053a12b8cf7e7427d50c37072c075095d5762908c77e54e0f2c58da3638fd6f89648f2b5b6af3b0c413e8d", 0x75}, {&(0x7f0000001480)="1bc2c770e7394f061cc1d47cfce556e3b9b65aac129c36c843e0b6318c5cf8d3180641236e9ed4f0261d588e2aeee291c5de88f044c746d2631d6e0d22755a50da7eb9afdd780b0253860fe6c97ac838faad0b6e8c73480aa2a085e7bb9c3718b2d52f53bb73eb0cb1da8fbe5ef22083bc139c1df0afac7ce0a99578fe", 0x7d}, {&(0x7f0000001500)="6685372fa8c16da60b220ba6ebb778051ebfb905b27ad7135f3ded84fbdbb7aad6d60aa79337204b75f4c005febb0b63acf0084fc875f281e78aa039a85324cd345b0763584d5c39cc506f84fe7274c5e5a316c003038ef56f", 0x59}, {&(0x7f0000001580)="b0cdea2897aee3dedfbcc8b32b840bbdb9", 0x11}], 0xa, &(0x7f00000036c0)=[@op={0x18}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x9}, @op={0x18, 0x117, 0x3, 0x9e44193a658627b1}], 0x60, 0x20000000}, {0x0, 0x0, &(0x7f0000003840)=[{&(0x7f0000003740)="81ec9d8afb21b1b89702e927275ef7ca0a84bb150c64c089e6cc5920710b1260db6bc9a46c90d993ce1054b0e8c2ba6f5b8b463d77da1b8ecbaa88e7c5d2147b53818e70d6839366ef35c28d4f281b8e0b742a29586690bf16837cdc819d250bb1bf1f8e22fe8125b555e5787fdb1385c9552990c95e4fa0981c747336ac528cab109828b4c7df5ff1491a673afc943df3f71d2aa5cec0c26a800ec0408af27527ec55815167d09913a987a9eef34d8746f371e6d094d356433e160134cc66c02b588ffb8d14792f34a26a526256104c294ecc1a7aa99ce5597801debdedbbf2a174f9a0e6d0ccc3e28c7c9f799c681b30bee9b9bc47ffcde5e395b548a0", 0xfe}], 0x1, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000003880)="07778726b043cb9f26df6d0f21", 0xd}, {&(0x7f00000038c0)="485fe0fbe51ed4e2156ad992e7c3d49ae95971b4bc5a2340149f104ee2e3ef40d63222fc2e77c6e0374f9f2685cd1cb5cd31ad2ea10d0c4bd747a5664fe948fc33954d9899c82c56b7dc6f11a6ca632eeae93aaf635668d0e542236307edda2cee0382050709", 0x66}], 0x2, 0xfffffffffffffffe, 0x0, 0x894}, {0x0, 0x0, &(0x7f0000003a80)=[{&(0x7f0000003980)="0471154612224bd89d90db729cfa3e6cb3610eaf88c4094631fee4b042a92285ef684cb30c7d221aa83d3bde794ee401b8add18580e55e42766428d86c2126662e1900e72334f65f519af411d91a7eff99c95068e3a9c3c216d952b44e83c625f29e6a9c76372142071981cb1e55679428bc6510613746fabe6d75d4a42810417927f9a4b55b65066d0b7ecbaaeb2ac8908bac2c1b52dda9f046947f5ccb0617365bd902234868e4fb6a17720ccbec314ffdfe08c9991917e801215cf6330a6a4d4a1b37bacf382ac2bec5e3d931cd8eaee11207b751", 0xd6}], 0x1, &(0x7f0000003ac0)=[@assoc={0x18, 0x117, 0x4, 0x6}, @iv={0xc8, 0x117, 0x2, 0xb2, "ddc40a56b2df1cf42ffb9ef596d34ccaa84a87794ac07ce224622b4db08fc910017b37cec82655a83063c1b7c20481ff1f0021bb3d4ca33f2e50f1f518d6bf0ad86dbf6ea8522c44b22399062821a26002ed1509360eec78f8ded4fbedc11bae0a3a7d96180d130a55c41a2187896063c257f4df405e9b2e125d5f91e8dabe898c3e7754392b1429e772655ed52db4184025b08fe81ef1d7da6fc40a34569c608f7d9169f133d30e379ca9760e7a72978a74"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x81}, @op={0x18}], 0x128}, {0x0, 0x0, &(0x7f0000003c80)=[{&(0x7f0000003c00)="0bd86a80b49e760ac00d01252cfb38fd56a28035d17abb208dc054f7974d97525b87e0473a5a5292bee07f7bf562e5a451e853fde1152a72e8b2378079df9d2116161e53574cc71d7b0b6e393f34449bae4479b73c0b7e7daa75783742c35cb1cb74355de5c5cface5fc693362f407aa671d11edc9fb52", 0x77}], 0x1, &(0x7f0000003cc0)=[@assoc={0x18, 0x117, 0x4, 0x401}, @assoc={0x18, 0x117, 0x4, 0x5}, @iv={0x110, 0x117, 0x2, 0xfa, "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"}, @assoc={0x18, 0x117, 0x4, 0x10000}], 0x158, 0x20004004}], 0x8, 0x4005) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r5, 0x84, 0x75, &(0x7f0000000440)={0x0, 0x9}, 0xfffffffffffffdbb) sendmmsg$inet6(r4, &(0x7f0000000040)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x1, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000001680)='\t', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r4, 0x84, 0x79, &(0x7f0000000000)=ANY=[], 0x8) sendmsg$NFT_BATCH(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010900000900010073797a300000000040000000030a01010000000000000000010000000900030073797a3000000000040004800900010073797a3000000000080005400000000008000a4000000004"], 0x128}}, 0x0) 4.009290237s ago: executing program 3 (id=1104): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=ANY=[@ANYBLOB="240000002100010000000000000000000a000000000000000000000008001b004e"], 0x24}}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r0, 0x84, 0x72, &(0x7f0000000240)={0x0, 0x0, 0x20}, 0xc) r2 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x2, 0x10, 0x9, 0x9, 0xa, 0x0, 0x70bd2a, 0x25dfdbfb, [@sadb_x_policy={0x8, 0x12, 0x4, 0x3, 0x0, 0x0, 0x8, {0x6, 0x32, 0x3, 0x8, 0x0, 0x0, 0x0, @in=@rand_addr=0x5, @in6=@ipv4={'\x00', '\xff\xff', @broadcast}}}]}, 0x50}}, 0x40010) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) ioctl$F2FS_IOC_MOVE_RANGE(r3, 0xc020f509, &(0x7f0000000800)={0xffffffffffffffff, 0x1, 0x2, 0x2}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000140)=@framed={{0x18, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r4}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x3, 0x8, &(0x7f0000000000)=@framed={{0x18, 0x6}, [@tail_call={{0x18, 0x2, 0x1, 0x0, r3}}]}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$inet_sctp(r6, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f00000001c0)='l', 0x1}], 0x1, &(0x7f0000000380)=[@prinfo={0x18, 0x84, 0x5, {0x20, 0x9}}, @sndrcv={0x30, 0x84, 0x1, {0x3, 0x7fff, 0x200, 0x3, 0x7, 0x9, 0x6, 0xffffffff}}], 0x48, 0x2000}, 0x6) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r3}, &(0x7f00000001c0), &(0x7f0000000200)=r5}, 0x20) sendmsg$inet(r0, &(0x7f00000007c0)={&(0x7f0000000100)={0x2, 0x4e23, @private=0xa010101}, 0x10, &(0x7f00000006c0)=[{&(0x7f00000002c0)="e03fbffac22df87a3996f035b61c8022ea165f1ba0145ba964aa0f6b3671008197bd081a28b671ba", 0x28}, {&(0x7f0000000400)="40b48ba5e2b733", 0x7}, {&(0x7f00000004c0)="9ed7a8f80edf301415e3bc4bb289813f2b1445790a0d876462bb1aefe7a2e4977f249a33633a70cc7d3df3599c425289e13c18a93827b4d0db9b1ae7ce3ddeb19d33304cfac59a581949c21948ea", 0x4e}, {&(0x7f0000000540)="710a774748aa1d8792eccb9cc1688838688d97b501772ae49a43c8d4f0e7115766dc96fd369c644c1845b1eb14df5603dac39ce5d9dba32942382e0ecdf43bc324c301501e175d05254d5553a74ebf0ddadb1e7810b32cd4632abfc053fb6a20642d660496bd1836954cdfb2d57353c14b0a59b776d441489f92f32cd87393b355111dedcea13fcdc32a263b0e4df831aa90872b09056c99d4615d0b375f4042b669de341eb2a87347861d755c", 0xad}, {&(0x7f0000000600)="0ef25b7e06bd815c5b706d07470553dfd818e6d3592725b7c683383689cf2d002bc80d97e795de8efbeea4040358b3183d2e1fcaa32702c5d3ee8df59783f348bb5b09839342d9670dc9d4883c259e812936e2472be446be37b5227806fff1c189f4d2a463cf756111d40fd2cfa3b54f4c1fcb40661f0d8bbfdf465758ede5fee4", 0x81}], 0x5, &(0x7f0000000440)=[@ip_ttl={{0x14, 0x0, 0x2, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0x9}}], 0x30}, 0x24000000) sendto$inet6(r0, &(0x7f0000000180)="1a", 0x34000, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$XDP_UMEM_REG(r3, 0x11b, 0x4, &(0x7f0000000080)={&(0x7f0000000380)=""/98, 0x28000, 0x1000, 0x8, 0x2}, 0x20) shutdown(r0, 0x1) 2.792693407s ago: executing program 3 (id=1118): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000180)=0x3) ioctl$PPPIOCSMAXCID(r0, 0x40047451, &(0x7f0000000100)=0xffff0001) close(0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000540)=@newlink={0x28, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x48}, [@IFLA_GSO_MAX_SEGS={0x8, 0x28, 0xb969}]}, 0x28}, 0x1, 0x0, 0x0, 0x4840}, 0x0) r1 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r1, 0x29, 0x2a, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x7ff, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) r2 = socket(0x80000000000000a, 0x2, 0x0) setsockopt$inet6_group_source_req(r2, 0x29, 0x2a, &(0x7f0000000080)={0x20, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @remote}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}}}, 0x108) close(r1) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r3, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0x200105d0}], 0x1}, 0x1f00) sendmsg$tipc(r4, &(0x7f0000000240)={0x0, 0x810100, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1, 0x0, 0x0, 0x3}, 0x40000000) getsockopt$TIPC_DEST_DROPPABLE(r3, 0x10f, 0x89, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) sendmsg$IPSET_CMD_DESTROY(0xffffffffffffffff, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)={0x14}, 0x14}}, 0x8081) r5 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000340), 0x4) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f00000001c0)='cq_alloc_error\x00', r5, 0x0, 0x10000}, 0x18) r6 = socket$kcm(0x29, 0x2, 0x0) r7 = socket$kcm(0x2, 0x1, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r6, 0x89e0, &(0x7f0000000040)={r7}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000780)={'vcan0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000680)=ANY=[@ANYBLOB="0100000000100000040000000700000004000000", @ANYRES32, @ANYBLOB="0100"/20, @ANYRES32=r9, @ANYRES32=r8, @ANYRESDEC], 0x48) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r10, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r11 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x28, 0x203e, 0x107, 0xfffffffc, 0x25dfdbfd, {0x1, 0x7c}, [@nested={0x10, 0x136, 0x0, 0x1, [@typed={0xc, 0x2, 0x0, 0x0, @u64=0x7}]}, @nested={0x4, 0x1}]}, 0x28}, 0x1, 0x0, 0x0, 0x488c0}, 0xc000) 2.403706099s ago: executing program 4 (id=1123): r0 = socket$vsock_stream(0x28, 0x1, 0x0) ioctl$int_in(r0, 0x5421, &(0x7f0000000240)=0x2) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x0, @local}, 0x10) shutdown(r0, 0x0) shutdown(r0, 0x1) poll(&(0x7f0000000300)=[{r0}], 0x1, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(0xffffffffffffffff, 0x84, 0x76, &(0x7f00000002c0)={0x0, 0x1}, 0x8) r1 = socket$packet(0x11, 0x2, 0x300) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r2, 0x84, 0x64, &(0x7f0000000040)=[@in6={0xa, 0x4e23, 0x0, @loopback}], 0x1c) sendmmsg$inet6(r2, &(0x7f0000000540)=[{{&(0x7f0000001a00)={0xa, 0x4e23, 0x0, @loopback, 0x8000000}, 0x1c, &(0x7f0000000640)=[{&(0x7f0000000280)="03", 0x1}], 0x1}}, {{&(0x7f0000000000)={0xa, 0x4e24, 0x8000, @loopback, 0x4}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000080)}, {&(0x7f0000000180)="8a8d3376ff9f447c725453402c04ac3a98fe6127f259e1bca0614eb74875250c4b8757b8e56f7501c8002e6086be29edea435a336f73b908d72f3ef34b7acc37886ac7609596b642d8bc74937827c44776f7505edb8f69d790410e7a6fdbc392a337d31569e0bd301616793e0d76520e6f3e75a99fb70054f2d681cd8028204c620d42a90a6a8dc677aecd85332a9eeed905ea02f7eb5ddb27852b821dfe4e2f002e455121c8ce203b", 0xa9}], 0x2}}], 0x2, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_PD_GET(r3, &(0x7f0000005540)={0x0, 0x0, &(0x7f0000005500)={&(0x7f0000000000)=ANY=[@ANYBLOB="280000000e14010025bd7000ffdbdf25080001000000000008003c"], 0x28}, 0x1, 0x0, 0x0, 0x40400c0}, 0x80c4) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000140)={@fallback=r4, 0x1d, 0x1, 0x6, &(0x7f0000000000)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000040)=[0x0, 0x0], &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) vmsplice(r4, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) r5 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x10) r6 = socket$inet6_dccp(0xa, 0x6, 0x0) ppoll(&(0x7f00000000c0)=[{r0, 0x60e}, {r1, 0x6000}, {r2, 0x1040}, {r3, 0x20}, {0xffffffffffffffff, 0x8005}, {r4, 0x9640}, {r5, 0x4000}, {r6, 0x8002}], 0x8, &(0x7f0000000100), &(0x7f0000000140)={[0x10000]}, 0x8) r7 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0x7ff}, 0x10) write(r7, &(0x7f000018efdc)="240000005a001f0214f9f407000904fcffffff1010000300feffffff0800000000000000", 0x24) 2.158273492s ago: executing program 1 (id=1125): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r1, 0x1, 0x4c, &(0x7f0000000000), 0x4) (async) sendmsg$inet(r0, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r1, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0xff0a, 0x0) (async) r3 = socket(0x848000000015, 0x805, 0x0) sendto$inet6(r3, 0x0, 0x0, 0x0, &(0x7f0000000040)={0xa, 0x4, 0xf444, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}}, 0xfffffffffffffe94) (async) r4 = socket$kcm(0x10, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=ANY=[@ANYBLOB="0b00000007080000010001000900000001000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="00000000d224e8a1405b000000000000000000000000000000000000000000002a41dd399daf46e0c6c2c8ab2b0d6300"/58], 0x50) sendmsg$kcm(r4, &(0x7f0000000940)={0x0, 0x3e1, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000180081064e81f782db44b904021d080006067c09e8fe55a10a0015400400142603600e120800060000001001a8000b00a400014003000000036004fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) 2.006518327s ago: executing program 4 (id=1127): r0 = syz_init_net_socket$llc(0x1a, 0x1, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r1, 0x6, 0x13, &(0x7f00000021c0)=0x1, 0x4) setsockopt(r1, 0x1, 0x10000000000009, &(0x7f0000000100)="0100ddff", 0x507b420f2d51f971) setsockopt$inet6_tcp_int(r1, 0x6, 0x4, &(0x7f0000000040)=0x3e, 0x4) connect$inet6(r1, &(0x7f0000000180)={0xa, 0x4e22, 0x0, @loopback, 0x402}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1a, 0x3, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000b59b3973b4241100dd7514972af877e3879795f636a40d1432425dad0303825eb57752d761a156a48f0aa6058e2b3d96f8442fbd596fda"], &(0x7f0000000b00)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, @tracing=0x18, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) setsockopt$llc_int(r0, 0x10c, 0x1, &(0x7f0000000280)=0xd1, 0x4) syz_emit_ethernet(0x199, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffff00000000400086dd6030001201633a0000000000000000000000ffffac1414aafe8000000000000000000000000000aa040090780000000561339f80ffd96c00fe8000000000000000000000000000bb00000000000000000000ffff7f0000010001000000000000040156c20400000002050204060000002b000520670000002f0604090000000000000000000000000000ffffffffffffff010000000000000000000000000001000000000000000000000000000000013772839135c3210709e9e3a85c20d8becde1ea8f7e5882b539caa65bdc1d8a5397afc5eee571255a662a35708ff76344a119c990143b08760000f37384958ec0d5936019a33f3742de68a68c1e153936db5e9c617f349849ecd3bf7b9bc601b6603d418430e73f8f910d155cdf80db9e718ecc6568c22c711253ca23891d39798693f00be9019e7d50d1e2c2a13253d8fe8dc35a6ddb62571c52ca5d8c639022f390f42fc963e73cad5f623b4336c3da75dcc8a7d8ce8a37b307fa3932eeffc73c5b2e310f87527d098e512cc14ca32a704872c5144ed442a8f406"], 0x0) syz_80211_join_ibss(&(0x7f0000000000)='wlan1\x00', &(0x7f0000000100)=@random="63f27d386d6804b773582f5f9a46afd7f201f4d043", 0x15, 0x2) syz_80211_join_ibss(&(0x7f0000000140)='wlan0\x00', &(0x7f0000000180)=@default_ibss_ssid, 0x6, 0x1) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="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", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r3 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_TABLE(r3, 0x29, 0xc8, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r4}, 0x18) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r6) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="130000000800000008"], 0x50) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, r6, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000780)={@map=r7, 0xf471f4157d7875c2, 0x1, 0x7, &(0x7f0000000400)=[0x0], 0x1, 0x0, &(0x7f00000006c0)=[0x0, 0x0], &(0x7f0000000700)=[0x0, 0x0, 0x0, 0x0], &(0x7f0000000740)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000800)=ANY=[@ANYRES32=r6, @ANYRES32=r8, @ANYBLOB="2c0000000400000000000000", @ANYRES32=r4, @ANYBLOB="f19364694336c290fbc6b698732827489e0d80c66692baeab6e6ab93a52600a62007dca1df37ab3f40181231b45717d2842cce8dffc084ae1a579d3710d468042d4905b5095f430f8d782f74baf8ffb2e582c319a9a042edc5bfec0f1ed878af6fc1bb59701dd08a3f16b97c558bcdf303d03f2116afdef38f9b68ad82e5b446c01ba38eaf9a19b94b2918175c7cad82ca96c9de05adc90eaccdbc3503399b43205283b84057d0fe52b90b006482801c53a10352984e32", @ANYRES64=r9], 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0xc, 0xf, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000270000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000065000000bf0900000000000055090100000000009500000000000000be91000000000000b5020000000000008500000000000000b7000000000000009500000000000000"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x37, r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0, 0x80000, @void, @value}, 0x94) getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f00000007c0), &(0x7f0000000900)=0x14) 1.500853314s ago: executing program 1 (id=1128): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$inet6(r0, &(0x7f00000000c0)={0xa, 0x4e22, 0x81, @mcast2, 0x5}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x8000, &(0x7f0000000080)={0xa, 0x4e20, 0x94, @mcast2, 0x6}, 0x1c) r1 = socket(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r4 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r3, @ANYBLOB="00000000ff7f00001c001a800800038004000500080000003e"], 0x44}}, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), r4) sendmsg$NL80211_CMD_SET_TID_CONFIG(r1, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000180)={&(0x7f0000000380)={0x448, r5, 0x300, 0x70bd2c, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x10001, 0xb}}}}, [@NL80211_ATTR_TID_CONFIG={0x114, 0x11d, 0x0, 0x1, [{0x4}, {0x10c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xa}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0xc8, 0xd, 0x0, 0x1, [@NL80211_BAND_5GHZ={0x14, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x7c, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x4, 0xa}, {0x6, 0x7}, {0x1, 0x6}, {0x0, 0x1}, {0x6, 0x8}, {0x7, 0x2}, {0x5, 0x5}, {0x0, 0x4}, {0x4, 0x4}, {0x5, 0x7}, {0x3, 0x5}, {0x7, 0x7}, {0x2, 0x7}, {0x7, 0x2}, {0x0, 0x3}, {0x4}, {0x4, 0x9}, {0x7}, {0x3, 0x4}, {0x0, 0x1}, {0x2, 0x2}, {0x2, 0x2}, {0x5, 0x4}, {0x1, 0x1}, {0x7, 0x1}, {0x5, 0x2}, {0x1, 0x3}, {0x0, 0x6}, {0x2, 0xa}, {0x1, 0x3}, {0x3, 0x4}, {0x7, 0xa}, {0x5, 0x1}, {0x3, 0x3}, {0x1, 0x8}, {0x6, 0x2}, {0x6, 0x1}, {0x3, 0x8}, {0x1, 0x7}, {0x7, 0x9}, {0x6, 0x7}]}, @NL80211_TXRATE_HT={0xe, 0x2, [{0x4, 0x7}, {0x1, 0x3}, {0x3, 0x8}, {0x6, 0xa}, {0x7, 0x3}, {0x4, 0x8}, {0x3, 0x4}, {0x4, 0x6}, {0x7, 0xa}, {0x7, 0x9}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0xf, 0x1, [0x12, 0x30, 0x6c, 0x4, 0x30, 0x6c, 0x30, 0x18, 0x78, 0xc, 0x16]}, @NL80211_TXRATE_LEGACY={0xe, 0x1, [0x16, 0xc, 0x1, 0x77, 0xc, 0x16, 0x1b, 0x6c, 0xb, 0x4]}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x1}]}, @NL80211_BAND_2GHZ={0x34, 0x0, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x1c, 0x1, [0x6, 0x2, 0x1, 0x48, 0x5, 0x2, 0x2, 0x2, 0x36, 0x16, 0x16, 0x48, 0x3, 0x60, 0x4, 0x60, 0x16, 0x1, 0x6c, 0xc, 0x1, 0x60, 0x3, 0x48]}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6b32, 0x800, 0x6, 0x9, 0x9c, 0x1, 0x9, 0x3]}}]}]}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0xfe}]}]}, @NL80211_ATTR_TID_CONFIG={0x1c, 0x11d, 0x0, 0x1, [{0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x28}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}]}]}, @NL80211_ATTR_TID_CONFIG={0x2f8, 0x11d, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}]}, {0x26c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x32}, @NL80211_TID_CONFIG_ATTR_AMPDU_CTRL={0x5, 0x9, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_TX_RATE={0x240, 0xd, 0x0, 0x1, [@NL80211_BAND_6GHZ={0x70, 0x3, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x10, 0x1, [0x6c, 0x2, 0xb, 0x36, 0x5, 0x1, 0x60, 0x48, 0x39, 0x1, 0x7e, 0xc]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x51, 0x2, [{0x7, 0x5}, {0x2, 0x8}, {0x0, 0x8}, {0x2, 0x4}, {0x6}, {0x1, 0x1}, {0x2, 0x1}, {0x3, 0x8}, {0x3, 0x6}, {0x6, 0x5}, {0x6, 0xa}, {0x0, 0x2}, {0x6, 0x1}, {0x0, 0xa}, {0x2, 0x7}, {0x2, 0x4}, {0x0, 0xa}, {0x0, 0x2}, {0x1, 0x2}, {0x4, 0x9}, {0x0, 0x1}, {0x7, 0x9}, {0x3, 0x9}, {0x5, 0x3}, {0x6}, {0x5, 0x6}, {0x7, 0x2}, {0x5}, {0x1, 0x7}, {0x1, 0x7}, {0x6, 0xa}, {0x2, 0x8}, {0x7, 0x8}, {0x7, 0x7}, {0x5, 0x2}, {0x4, 0x1}, {0x2, 0x6}, {0x2, 0x4}, {0x3, 0x8}, {}, {0x7, 0x6}, {0x7, 0x5}, {0x7, 0x1}, {0x6, 0x4}, {0x4, 0x1}, {0x4, 0x8}, {0x2, 0x7}, {}, {0x6, 0x4}, {0x5, 0xa}, {0x1}, {0x6, 0x7}, {0x7, 0x9}, {0x0, 0x4}, {0x6, 0x9}, {0x1, 0x5}, {0x5, 0x6}, {0x1, 0x4}, {0x1, 0x6}, {0x3, 0x9}, {0x0, 0x5}, {0x3, 0x5}, {0x7, 0x2}, {0x0, 0x9}, {0x7}, {0x1, 0x2}, {0x6, 0x3}, {0x6}, {}, {0x3, 0x8}, {}, {0x6, 0xa}, {0x7, 0x4}, {0x7, 0x7}, {0x2, 0x6}, {0x7, 0x8}, {0x6, 0x3}]}]}, @NL80211_BAND_6GHZ={0x60, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x6, 0xb54, 0x4, 0x6, 0x0, 0x4, 0x9]}}, @NL80211_TXRATE_HT={0x21, 0x2, [{0x5, 0x6}, {0x0, 0x4}, {0x0, 0x3}, {0x7, 0x4}, {0x6, 0x6}, {0x7, 0x6}, {0x2, 0x1}, {0x3, 0xa}, {0x0, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x1, 0x3}, {0x0, 0x1}, {0x3, 0x9}, {0x0, 0x2}, {0x3, 0x4}, {0x0, 0x1}, {0x7, 0x3}, {0x0, 0x6}, {0x3, 0x7}, {0x1, 0x5}, {0x3, 0x1}, {0x0, 0x5}, {0x2, 0x4}, {0x7, 0x4}, {0x5, 0x9}, {0x5, 0x9}, {0x0, 0x2}, {0x6, 0xa}]}, @NL80211_TXRATE_HT={0x22, 0x2, [{0x6, 0x9}, {0x4, 0x4}, {0x4, 0x4}, {0x2, 0xa}, {0x6, 0x5}, {0x6, 0x2}, {0x1, 0x6}, {}, {0x3, 0x4}, {0x4, 0xa}, {0x3, 0x8}, {0x7}, {0x5, 0x6}, {0x3, 0x8}, {0x3, 0x7}, {0x0, 0x4}, {0x6, 0xa}, {0x5, 0xa}, {}, {0x6, 0x5}, {0x6, 0xa}, {0x1, 0xa}, {0x6, 0x4}, {0x0, 0x2}, {0x3, 0x7}, {0x5, 0x8}, {0x3, 0x9}, {0x0, 0x4}, {0x2, 0x1}, {0x1, 0x7}]}]}, @NL80211_BAND_6GHZ={0x5c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x7, 0x8}, {0x7, 0x3}, {0x5, 0x2}, {0x5, 0x1}, {0x0, 0xa}, {0x2, 0x1}, {0x4, 0x6}, {0x4, 0x5}, {0x1, 0x4}, {0x0, 0x2}, {0x7, 0x8}, {0x5, 0x2}, {0x6, 0x7}, {0x4}, {0x7, 0x5}, {0x7, 0x4}, {0x7, 0xa}, {0x0, 0x6}, {0x0, 0x4}, {0x6, 0x7}, {0x3}, {0x6, 0x5}, {0x5, 0x4}, {0x0, 0x6}, {0x6, 0x7}, {0x2, 0x7}, {0x6, 0x7}, {0x1, 0xa}, {0x3, 0x5}, {0x4, 0x5}, {0x2, 0x3}, {0x4, 0x4}, {0x0, 0xa}, {0x6, 0x4}, {0x4, 0x4}, {0x6, 0x5}, {0x0, 0x9}, {0x6, 0x1}, {0x4, 0x7}, {0x6, 0x9}, {0x0, 0x5}, {0x5, 0x5}, {0x5, 0x3}, {0x4, 0x2}, {0x2, 0x2}, {0x6, 0x6}, {0x0, 0x7}, {0x7, 0xa}, {0x4, 0x5}, {0x6, 0xa}, {0x1, 0x5}, {0x4}, {0x1, 0x4}, {0x1, 0x4}, {0x4, 0x4}, {0x0, 0x7}, {0x5, 0x8}, {0x4, 0x9}, {0x6, 0x1}, {0x6, 0x7}, {0x5, 0x4}, {0x6, 0x9}, {0x2, 0x5}, {0x0, 0xa}, {0x1, 0x3}, {0x3, 0x3}, {0x3, 0x7}, {0x6, 0x7}, {0x0, 0x7}, {0x6, 0x6}, {0x1, 0x7}, {0x2, 0x7}, {0x0, 0x4}]}]}, @NL80211_BAND_2GHZ={0x3c, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HT={0x35, 0x2, [{0x0, 0x5}, {0x7, 0x7}, {0x3, 0x6}, {0x1, 0x6}, {0x4, 0x5}, {0x6, 0x6}, {0x7, 0x3}, {0x1, 0x9}, {0x5, 0x6}, {0x1, 0x5}, {0x2, 0xa}, {0x4}, {0x0, 0x8}, {0x5, 0xa}, {0x5, 0x4}, {0x2, 0x7}, {}, {0x5, 0x7}, {0x1, 0x8}, {0x0, 0xa}, {0x2, 0x5}, {0x1, 0x2}, {0x7}, {0x6, 0xa}, {0x0, 0x2}, {0x0, 0x5}, {0x7, 0x2}, {0x2, 0x7}, {0x3, 0x4}, {0x5}, {0x7, 0x7}, {0x2, 0x9}, {0x0, 0x5}, {0x5, 0x8}, {0x3, 0x5}, {0x3, 0x5}, {0x5, 0xa}, {0x0, 0x5}, {0x6, 0x6}, {0x3}, {0x2, 0xa}, {0x3, 0x4}, {0x3, 0x9}, {0x1, 0x3}, {0x7, 0x7}, {0x0, 0x9}, {0x1}, {0x2, 0x5}, {0x7, 0x5}]}]}, @NL80211_BAND_6GHZ={0x3c, 0x3, 0x0, 0x1, [@NL80211_TXRATE_HT={0x10, 0x2, [{0x5, 0x5}, {0x0, 0x6}, {0x7, 0x9}, {0x2, 0x3}, {0x2, 0x8}, {0x4}, {0x3, 0x6}, {0x4, 0x8}, {0x0, 0x9}, {0x3, 0xa}, {0x4, 0xa}, {0x1, 0x3}]}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HT={0x6, 0x2, [{0x4, 0xa}, {0x7, 0x6}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}]}, @NL80211_BAND_5GHZ={0x98, 0x1, 0x0, 0x1, [@NL80211_TXRATE_HT={0x2f, 0x2, [{0x2, 0x6}, {0x2, 0xa}, {0x6, 0x5}, {0x2, 0x4}, {0x1, 0x16}, {0x4, 0x1}, {0x4, 0x5}, {0x3, 0x1e}, {0x1}, {0x3}, {0x7}, {0x2, 0x9}, {0x4, 0x3}, {0x4, 0x4}, {0x3, 0x7}, {0x7, 0x2}, {}, {0x1}, {0x2, 0x6}, {0x1, 0x8}, {0x4, 0x4}, {0x3}, {0x1, 0x7}, {0x4, 0x7}, {0x1}, {0x5, 0xa}, {0x5, 0x4}, {0x1, 0x8}, {0x7, 0x6}, {0x7, 0x1}, {0x3, 0x7}, {0x0, 0x6}, {0x3, 0x6}, {0x3, 0x7}, {0x1, 0x6}, {0x7, 0xa}, {0x0, 0x8}, {0x1, 0x5}, {0x1, 0x6}, {0x3, 0x8}, {0x7, 0x1}, {0x0, 0x6}, {0x2, 0x5}]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x5, 0x1b, 0x5, 0x48, 0x4e, 0x24, 0x2, 0xc, 0x5, 0x0, 0x36, 0x18, 0x37, 0x1b]}, @NL80211_TXRATE_LEGACY={0x7, 0x1, [0xc, 0x48, 0x3]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x2, 0xb79, 0x7, 0x8, 0x0, 0x400, 0x5d]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}, @NL80211_TXRATE_LEGACY={0x12, 0x1, [0x5, 0x18, 0x48, 0x6, 0xb, 0x5, 0x60, 0x30, 0xc, 0x2, 0x48, 0x8, 0x6c, 0x3]}]}]}, @NL80211_TID_CONFIG_ATTR_NOACK={0x5, 0x6, 0x1}]}, {0x18, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RTSCTS_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x1c}]}, {0x30, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0xc7}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5, 0xb, 0x1}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_RETRY_SHORT={0x5, 0x7, 0x1f}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_RETRY_LONG={0x5, 0x8, 0xfe}]}, {0x2c, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_VIF_SUPP={0xc, 0x2, 0x5}, @NL80211_TID_CONFIG_ATTR_AMSDU_CTRL={0x5}, @NL80211_TID_CONFIG_ATTR_PEER_SUPP={0xc, 0x3, 0xfffffffffffeffff}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}, {0x8, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}]}]}]}, 0x448}, 0x1, 0x0, 0x0, 0x8000}, 0x44800) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=ANY=[@ANYBLOB="1c00000052000122000000000000000002"], 0x1c}}, 0x0) 1.463901193s ago: executing program 4 (id=1129): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r0, &(0x7f0000000240)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8100}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x50, 0x3, 0x7, 0x401, 0x0, 0x0, {0x7, 0x0, 0x1}, [@NFACCT_FILTER={0x24, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0x1ff}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x1b}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x7}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x27}]}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x1}, @NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x20000000400}]}, 0x50}, 0x1, 0x0, 0x0, 0x20000000}, 0x1) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x100000, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_CT_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) 1.251279012s ago: executing program 2 (id=1131): r0 = socket$packet(0x11, 0x2, 0x300) bind$packet(r0, 0x0, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) socket(0x6, 0x80000, 0xf8000) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x800) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r3) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000540)={'filter\x00', 0x7, 0x4, 0x410, 0x218, 0x218, 0x0, 0x328, 0x328, 0x328, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @loopback, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1ff, 'syz1\x00', {0xfb5}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="de24b578ff2d", @mac=@multicast, @dev={0xac, 0x14, 0x14, 0x1e}, @remote, 0x2, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)={0x20, r4, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004080}, 0x24044884) socket$packet(0x11, 0x2, 0x300) (async) bind$packet(r0, 0x0, 0x0) (async) socket$alg(0x26, 0x5, 0x0) (async) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) (async) socket(0x6, 0x80000, 0xf8000) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) (async) accept4(r1, 0x0, 0x0, 0x800) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r2) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$ieee802154(&(0x7f0000000040), r3) (async) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000540)={'filter\x00', 0x7, 0x4, 0x410, 0x218, 0x218, 0x0, 0x328, 0x328, 0x328, 0x4, &(0x7f0000000000), {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @empty, @multicast2, @loopback, 0x2, 0xffffffff}}}, {{@uncond, 0xc0, 0x108}, @unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x1ff, 'syz1\x00', {0xfb5}}}}, {{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@random="de24b578ff2d", @mac=@multicast, @dev={0xac, 0x14, 0x14, 0x1e}, @remote, 0x2, 0xffffffff}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x460) (async) sendmsg$IEEE802154_LLSEC_ADD_KEY(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000009c0)={0x20, r4, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x20004080}, 0x24044884) (async) 1.092577265s ago: executing program 4 (id=1132): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000440)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-generic\x00'}, 0x58) accept4(r0, 0x0, 0x0, 0x0) pipe(&(0x7f00000045c0)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r0, 0x0, r0, 0x0, 0xffffffff, 0x7) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[], 0xfe1b) 953.739223ms ago: executing program 1 (id=1133): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_subtree(r0, &(0x7f0000000200), 0x2, 0x0) write$cgroup_subtree(r1, &(0x7f0000000080)={[{0x2b, 'cpu'}]}, 0x5) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x11, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000002400028014000180080001000000000008000200ac1e00010c00028005000100000000000800074000000001"], 0x64}}, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000007c0)=ANY=[@ANYBLOB="4800000000010104000000000000000002000000240001801400018008000100e000000108000200e00000010c00028005000100000000001000058009"], 0x48}}, 0x0) r5 = socket$inet(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x409, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x31}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x8c}, 0x1, 0x0, 0x0, 0x4008084}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x3a}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r8 = socket$netlink(0x10, 0x3, 0x0) socket$inet(0x2, 0x1, 0x5) sendmsg$nl_route_sched(r8, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000000)=@newqdisc={0x98, 0x24, 0xf0b, 0x70bd2b, 0x0, {0x0, 0x0, 0x12, r7, {}, {0xffff, 0xffff}, {0x2}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_SCHED_BASE_TIME={0xc, 0x3, 0x9}, @TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfc, 0x1], 0x0, [0x8, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3], [0x0, 0x8]}}]}}]}, 0x98}}, 0x0) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x2, 0x4, 0x1, 0x0, r2, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1100000004000000040000000c"], 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{r9}, &(0x7f0000000840), &(0x7f0000000880)=r2}, 0x20) 950.217163ms ago: executing program 2 (id=1134): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000640)={0x0, 0xfffffffffffffff8, &(0x7f0000000600)={&(0x7f0000000000)=@newtaction={0x70, 0x30, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_skbedit={0x58, 0x1, 0x0, 0x0, {{0xc}, {0x48, 0x2, 0x0, 0x1, [@TCA_SKBEDIT_MARK={0x8, 0x3}, @TCA_SKBEDIT_PTYPE={0x6, 0x4}, @TCA_SKBEDIT_PARMS={0x18}]}, {0x4}, {0xc}, {0xc, 0x9, {0x47}}}}]}]}, 0x70}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x33, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x8, &(0x7f0000000dc0)=ANY=[@ANYBLOB="7a0af8ff7525787cbfa100000000000007010000f8ffffffb702000005000000bf130000000000008500000006000000b700000000000000950000ff00000000b2595285faa6ead0169191d54f8196217fc563e2fc91f6da4dad4fdc2eb1b5986fc4a3f611a7c80000040000000000b1a297cfddd73f30f2382f6cda4bfdd45be583823c0f092248a57d48621f3c1c65ee19ee875daf45006a4c4ea5e15b2f9618d547244a22000000000800db583620ce7243d1ae9f2cfe401dbef6619358399aa9c2acd068c03efefd8bc77edf2d34b12cd48a1b20fb7dd843267e0331759f4ec6b5b0af58e604f494eff289026d5045ef08000000000000007718a09f4800afc26abba34635d0e8b598a51bc742135a6e1d33fe226c944bc70bb30d435aa8b5202db761014b1b999a12df6bee431a6681000000263b6233e1c0fe30e384c3cb07b74a72291a1a2b523dd81b6651b1ee48bb004823ebcd8c65743f31f84b263ab9b3426692f01ad194f302d7a658e90000000001000000b6b2f25ddb8c640ab321a402058c9221b6870814cf4ee23ddb79fff5eb156e0a000000000000f2bd1d4a178d86d6935eb8b75bc4eb680d10e8b6ad4c6c8674caf63ff76622939a20d4aadf85db40179c2cf83ee07e30a279d8f9f3bc282deb43a03409f8e6972f3f720d045923702cede0f3e91411f3f1b16f065624f280a7dc938db910f93c49b9e0aa390d0da6972ed719d7e0efb2bb713d1890e317c8de105c3933fd5d5bf38f6b9fc39fc829dcfe4af8ac5fbb7314a7a433e0182767d1376eda2b9c66200349e62d4d0ab1a1dc51907c98000000000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x33, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x1a) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x2800000002000000, 0xe, 0x55, &(0x7f0000000140)="a06ad876d56a0064d082778c3938", &(0x7f0000000380)=""/85, 0x0, 0x4000000}, 0x1a) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000180)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x2, [@var={0x4, 0x0, 0x0, 0xe, 0x4}, @func_proto, @typedef={0x0, 0x0, 0x0, 0x13, 0x4}, @volatile={0x0, 0x0, 0x0, 0xa, 0x3}]}}, 0x0, 0x4e, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a300000000054000000060a010400000000000000000100000008000b40000000000900010073797a30000000002c00048028000180080001006e6174001c00028008000540070000090800014000000000080002"], 0xdc}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800024000000000080001400000000040000000180a0101000b000000000000010000000900020073797a30000000000900010073797a3000000000140003800800024000000009080001400001"], 0xc8}}, 0x0) 873.301964ms ago: executing program 4 (id=1135): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$TUNDETACHFILTER(r2, 0x401054d6, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=@newtfilter={0x30, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) sendmsg$nl_route_sched(r3, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000006080)=@delchain={0x24, 0x65, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x8848}, 0x20004804) r7 = socket$inet6(0xa, 0x5, 0x0) shutdown(r7, 0x0) setsockopt$sock_int(r7, 0x1, 0x2e, &(0x7f0000000040)=0x5, 0x4) recvmmsg(r7, &(0x7f0000008880), 0x45b, 0x2, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r8) sendmsg$NLBL_CIPSOV4_C_ADD(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000001c0)={0x14, r9, 0x1}, 0x14}}, 0x0) r10 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="011d0000000000000000010000000000000001410000001c001700000000000000ed6474683a7379"], 0x38}}, 0x0) 714.525519ms ago: executing program 2 (id=1136): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000300)={'bridge0\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0xe, 0x4, &(0x7f0000000180)=ANY=[@ANYBLOB="18020000801000000000000004000000850000002f00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) sendmsg$nl_route(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1c, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x4, 0x4a, 0x2}, [@NDA_LLADDR={0xa, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xc}}]}, 0x28}}, 0x0) 713.682337ms ago: executing program 3 (id=1137): r0 = socket$alg(0x26, 0x5, 0x0) socket$packet(0x11, 0x2, 0x300) splice(0xffffffffffffffff, 0x0, 0xffffffffffffffff, 0x0, 0x9aa7, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000d84000)={0xa, 0x2}, 0x1c) r2 = socket(0x2b, 0x1, 0x0) listen(r2, 0x0) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0}}, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0xa, &(0x7f0000001100)=0x4, 0x4) setsockopt$sock_int(r0, 0x1, 0x2e, &(0x7f0000000040)=0x6, 0x4) sendto$inet6(r1, &(0x7f0000f6f000), 0xfffffffffffffea7, 0x20000004, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) bind$alg(r0, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'adiantum(xchacha20-simd,anubis-generic,nhpoly1305-sse2)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000300)="c99b57381801238c09d0ff0f1d0dbd301e5a47b2f3caa73dcd2a6a370554375a", 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="06000000040000000200000004"], 0x50) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000400)={0x0, 0x0, 0x0, 0x0, 0x9, r3}, 0xfffffffffffffe96) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) shutdown(r1, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000040)={'tunl0\x00', 0x7101}) r6 = socket(0x1e, 0x3, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) r9 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r10, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@getchain={0x64, 0x66, 0x800, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r11, {0xe, 0xffff}, {0x0, 0xe}, {0x4, 0x4}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x6a}, {0x8, 0xb, 0xa6c}, {0x8, 0xb, 0x5}, {0x8, 0xb, 0x6}, {0x8}, {0x8, 0xb, 0xbe6}, {0x8, 0xb, 0x401}]}, 0x64}}, 0x0) write$cgroup_subtree(r4, &(0x7f0000000140)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x0, 0x7, r3}, 0x38) 695.047897ms ago: executing program 1 (id=1138): r0 = socket(0x2, 0x80805, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) ioctl$sock_inet_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f0000000340)={'wg2\x00', {0x2, 0x4e24, @empty}}) 475.910857ms ago: executing program 2 (id=1139): socketpair(0x2c, 0xa, 0x7b, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000100)={'ip6gre0\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x29, 0x3, 0x4, 0x0, 0x0, @private1, @rand_addr=' \x01\x00', 0x20, 0x1, 0x2, 0x2}}) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x25, 0x3, 0x40, @loopback, @empty, 0x40, 0x700, 0x7fffffff, 0xffff}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x29, 0x3, 0x25, 0x3, 0x40, @loopback, @empty, 0x40, 0x700, 0x7fffffff, 0xffff}}) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'ipvlan0\x00', 0x0}) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x10000085}, 0x24000800) (async) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000300)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x58, 0x0, 0x200, 0x70bd25, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V4={0x8, 0x6, @broadcast}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}, @FOU_ATTR_LOCAL_V4={0x8, 0x6, @remote}, @FOU_ATTR_PEER_V4={0x8, 0x8, @multicast2}, @FOU_ATTR_IFINDEX={0x8, 0xb, r2}, @FOU_ATTR_PEER_PORT={0x6, 0xa, 0x4e21}, @FOU_ATTR_IFINDEX={0x8, 0xb, r3}, @FOU_ATTR_IFINDEX={0x8, 0xb, r4}, @FOU_ATTR_TYPE={0x5, 0x4, 0x1}]}, 0x58}, 0x1, 0x0, 0x0, 0x10000085}, 0x24000800) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000003c0)=0x14) (async) getsockname$packet(r1, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000003c0)=0x14) r8 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000540)={&(0x7f0000000400)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x3, [@restrict={0xf, 0x0, 0x0, 0xb, 0x5}]}, {0x0, [0x0]}}, &(0x7f0000000440)=""/244, 0x27, 0xf4, 0x1, 0xffffffff, 0x0, @void, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x10000000, 0xa0, 0xcb16, 0x4203, r6, 0xdc15, '\x00', r7, r8, 0x5, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) (async) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x5, 0x10000000, 0xa0, 0xcb16, 0x4203, r6, 0xdc15, '\x00', r7, r8, 0x5, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) openat$tun(0xffffffffffffff9c, &(0x7f0000000600), 0x10400, 0x0) ioctl$sock_FIOGETOWN(r0, 0x8903, &(0x7f0000000640)=0x0) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000680)=r10, 0x12) (async) write$cgroup_pid(0xffffffffffffffff, &(0x7f0000000680)=r10, 0x12) setsockopt$sock_timeval(r1, 0x1, 0x42, &(0x7f00000006c0)={0x77359400}, 0x10) ioctl$sock_inet_SIOCDARP(r1, 0x8953, &(0x7f0000000700)={{0x2, 0x4e24, @initdev={0xac, 0x1e, 0x0, 0x0}}, {0x1, @broadcast}, 0x10, {0x2, 0x4e21, @empty}, 'veth0_to_bridge\x00'}) sendmsg$nl_route(r1, &(0x7f0000000880)={&(0x7f0000000780)={0x10, 0x0, 0x0, 0x80020002}, 0xc, &(0x7f0000000840)={&(0x7f00000007c0)=@ipv4_getaddr={0x6c, 0x16, 0x400, 0x70bd2b, 0x25dfdbfc, {0x2, 0x18, 0xca, 0x3, r4}, [@IFA_RT_PRIORITY={0x8, 0x9, 0x7}, @IFA_LABEL={0x14, 0x3, 'batadv0\x00'}, @IFA_LABEL={0x14, 0x3, 'batadv0\x00'}, @IFA_RT_PRIORITY={0x8, 0x9, 0x3}, @IFA_LABEL={0x14, 0x3, 'netpci0\x00'}, @IFA_TARGET_NETNSID={0x8, 0xa, 0x1}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4000810}, 0x4004880) close(r9) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$inet(0x2, 0x6, 0x77) ioctl$sock_inet_SIOCGIFBRDADDR(r11, 0x8919, &(0x7f00000008c0)={'ip_vti0\x00', {0x2, 0x0, @dev}}) sendmsg$nl_route(r1, &(0x7f00000009c0)={&(0x7f0000000900)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000980)={&(0x7f0000000940)=@ipv6_getrule={0x1c, 0x22, 0x400, 0x70bd2c, 0x25dfdbfe, {0xa, 0x10, 0x80, 0xfa, 0x0, 0x0, 0x0, 0x4, 0x8}, ["", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket$xdp(0x2c, 0x3, 0x0) (async) r12 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r12, 0x11b, 0x4, &(0x7f0000000b00)={&(0x7f0000000a00)=""/227, 0x18000, 0x800, 0x1, 0x2}, 0x20) (async) setsockopt$XDP_UMEM_REG(r12, 0x11b, 0x4, &(0x7f0000000b00)={&(0x7f0000000a00)=""/227, 0x18000, 0x800, 0x1, 0x2}, 0x20) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000c00)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000bc0)={&(0x7f0000000b80)={0x1c, 0x0, 0x400, 0x70bd28, 0x25dfdbfb, {}, [@ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000c40)=@base={0x11, 0x401, 0x81, 0x5, 0x800, 0x1, 0x5, '\x00', r4, 0xffffffffffffffff, 0x4, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_init_net_socket$netrom(0x6, 0x5, 0x0) (async) syz_init_net_socket$netrom(0x6, 0x5, 0x0) accept4(r5, &(0x7f0000000d00)=@ax25={{0x3, @bcast}, [@bcast, @rose, @netrom, @bcast, @remote, @null, @default, @rose]}, &(0x7f0000000d80)=0x80, 0x80000) (async) r13 = accept4(r5, &(0x7f0000000d00)=@ax25={{0x3, @bcast}, [@bcast, @rose, @netrom, @bcast, @remote, @null, @default, @rose]}, &(0x7f0000000d80)=0x80, 0x80000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000cc0), r13) recvmmsg$unix(r0, &(0x7f0000002440)=[{{0x0, 0x0, &(0x7f0000002280)=[{&(0x7f0000000dc0)=""/202, 0xca}, {&(0x7f0000000ec0)=""/84, 0x54}, {&(0x7f0000000f40)=""/153, 0x99}, {&(0x7f0000001000)=""/5, 0x5}, {&(0x7f0000001040)=""/127, 0x7f}, {&(0x7f00000010c0)=""/110, 0x6e}, {&(0x7f0000001140)=""/81, 0x51}, {&(0x7f00000011c0)=""/5, 0x5}, {&(0x7f0000001200)=""/4096, 0x1000}, {&(0x7f0000002200)=""/87, 0x57}], 0xa, &(0x7f0000002340)}}, {{0x0, 0x0, &(0x7f0000002400)=[{&(0x7f0000002380)=""/77, 0x4d}], 0x1}}], 0x2, 0x10021, &(0x7f00000024c0)={0x0, 0x3938700}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000002640)={&(0x7f0000002540)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002600)={&(0x7f0000002580)=@ipv4_newroute={0x7c, 0x18, 0x400, 0x70bd2c, 0x25dfdbfd, {0x2, 0x0, 0x0, 0x7f, 0x0, 0x2, 0xc8, 0xa, 0x300}, [@RTA_DST={0x8, 0x1, @private=0xa010101}, @RTA_NH_ID={0x8, 0x1e, 0x1}, @RTA_METRICS={0x3e, 0x8, 0x0, 0x1, "4d3bc545453264651bba580df2b87c2be70875f84dd047dbb8100e7a406474045b5c5c01b31c7996f36444b65383822a90d166ef485d686516fb"}, @RTA_MARK={0x8}, @RTA_FLOW={0x8, 0xb, 0x6}]}, 0x7c}, 0x1, 0x0, 0x0, 0x408c5}, 0x41) 387.119934ms ago: executing program 3 (id=1140): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) bind$inet6(r0, &(0x7f0000000200)={0xa, 0x4e22, 0x0, @mcast2, 0xfffffffa}, 0x1c) listen(r1, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x10, &(0x7f0000002a00)=@framed={{0x18, 0x5}, [@snprintf={{}, {}, {}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r2}}]}, &(0x7f0000000000)='GPL\x00', 0x4, 0xe4, &(0x7f0000002b00)=""/228, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendto$inet6(r0, 0x0, 0x0, 0x20000045, &(0x7f00000001c0)={0xa, 0x2, 0x396, @empty}, 0x1c) listen(r0, 0x80000001) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000080)=@generic={&(0x7f0000000000)='./file0\x00', 0x0, 0x10}, 0x18) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f0000000100)}, 0x20) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x1f, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffff6b}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@cb_func={0x18, 0xb}, @map_fd={0x18, 0x4, 0x1, 0x0, r3}, @jmp={0x5, 0x1, 0x7, 0x3, 0x3, 0x20, 0x8}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r4}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x9}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @func={0x85, 0x0, 0x1, 0x0, 0x8}, @func={0x85, 0x0, 0x1, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 201.096233ms ago: executing program 2 (id=1141): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6_udp(0xa, 0x2, 0x0) r3 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r3, &(0x7f0000000100)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x0, @loopback}, 0x4}}, 0x2e) sendmsg$L2TP_CMD_TUNNEL_GET(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004864}, 0x4c000) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000063011a00000006009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x1e00, 0x0, '\x00', 0x0, @sk_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 193.174106ms ago: executing program 1 (id=1142): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'gretap0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000006900000000000001000000940001000000fcffc50000000f00000095"], &(0x7f00000001c0)='GPL\x00', 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', r0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x101, @void, @value}, 0x94) 146.598268ms ago: executing program 3 (id=1143): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c0000000206030000000000000000000000000005000100070000000900020073797a310000000014000780050015000c00000008001240000000000500050002000000050004000000000010000300686173683a69702c6d6163"], 0x5c}}, 0x0) sendmsg$IPSET_CMD_DESTROY(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="1c000000030601020000000000000000020000010500010007008000"], 0x1c}, 0x1, 0x0, 0x0, 0x4004810}, 0x840) (async, rerun: 32) r1 = socket$pptp(0x18, 0x1, 0x2) (rerun: 32) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(r2, &(0x7f0000001980)={0x0, 0x0, &(0x7f0000001940)={&(0x7f00000004c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000000c0000001c000380140003800c00016c08000100000000000400018004000100180001801400020076657468305f746f5f687372"], 0x48}}, 0x0) (async) setsockopt$sock_linger(r1, 0x1, 0xd, &(0x7f0000000080)={0x1, 0x3}, 0x8) 134.710951ms ago: executing program 4 (id=1144): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0x84, &(0x7f0000000000), &(0x7f0000000080)=0x4) sendmsg$netlink(r1, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000200)={0x14, 0x1e, 0x505, 0x0, 0x40000, "", [@typed={0x4, 0x12b, 0x0, 0x0, @binary}]}, 0x14}], 0x1}, 0x8000) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x58, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_hsr\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x101, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'lo\x00'}]}]}]}], {0x14, 0x10}}, 0xe8}}, 0x0) 45.238262ms ago: executing program 2 (id=1145): getsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000000), &(0x7f0000000040)=0x14) r0 = socket$unix(0x1, 0x1, 0x0) bind$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r0, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) connect$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) sendmmsg$unix(r1, &(0x7f0000002640)=[{{0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000340)="b2", 0x1}], 0x1, 0x0, 0x0, 0x4048810}}], 0x1, 0x4041) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendto$inet(r3, &(0x7f0000003bc0)="9ef5bd0e54a5a5afe2d5d0eb30048df92449d64faf35f942e624ae4f093795e4d097433699b923e5dd17339216f22fc9d7f3eef5ebc81ef2e19a9eb0b931314c20b3eaba1d9f0d01b367af94773e09752aadc47d8f5299b2d7", 0x59, 0x4000000, &(0x7f0000003c40)={0x2, 0x4e23, @empty}, 0x10) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r4}, 0x8) close(r5) r6 = socket$inet_sctp(0x2, 0x1, 0x84) r7 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xc, &(0x7f0000000040)=@assoc_value={0x0}, &(0x7f0000000000)=0x8) getsockopt$inet_sctp_SCTP_RECONFIG_SUPPORTED(r6, 0x84, 0x75, &(0x7f0000000000)={r8, 0x44e9}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r5, 0x84, 0x1f, &(0x7f0000003b00)={r8, @in={{0x2, 0x4e20, @multicast2}}, 0x5, 0x5}, 0x90) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = socket$caif_seqpacket(0x25, 0x5, 0x3) ioctl$sock_netdev_private(r10, 0x89f3, &(0x7f0000003a00)="c278c6b39c52ad83daec6cd58f7815d0a1b80b62441d85364602cde228bf20b6531df1c08663d8d94ee3c3cf2e6de936b0bfbf60d2a27be50b4c72d51c510986e33c0ef3f24c94d7960fff761c3389809f93b2e0aec5287d09ebba2c479ee7e97a8fee2a468a4109ea61137bc2f093bedb9df43e69d37bc5493fc4a9abf911bdb46841902e3d8ff45523b828ee868fd5d39987332c427ccd0d5954226d754118838d0d4c6abbe1c0e49aac12dd6e906d344d4fb2446fc903f8b4170e54e4405d4db8dace025d2790fa42e8c807") sendmsg$nl_generic(r9, &(0x7f00000026c0)={0x0, 0x0, &(0x7f0000002680)={&(0x7f0000002640)={0x14, 0x38, 0x1, 0x70bd2c, 0x25dfdbff, {0xc}}, 0x14}, 0x1, 0x0, 0x0, 0x8001}, 0xc804) recvmmsg(r9, &(0x7f0000003800)=[{{&(0x7f0000000080)=@alg, 0x80, &(0x7f0000000540)=[{&(0x7f0000000100)=""/234, 0xea}, {&(0x7f0000000200)=""/19, 0x13}, {&(0x7f0000000240)=""/60, 0x3c}, {&(0x7f0000000280)=""/24, 0x18}, {&(0x7f00000002c0)=""/38, 0x26}, {&(0x7f0000000300)=""/9, 0x9}, {&(0x7f0000000340)=""/209, 0xd1}, {&(0x7f0000000440)=""/229, 0xe5}], 0x8}, 0x4}, {{&(0x7f00000005c0)=@pppoe={0x18, 0x0, {0x0, @broadcast}}, 0x80, &(0x7f0000000840)=[{&(0x7f0000000640)=""/229, 0xe5}, {&(0x7f0000000740)=""/245, 0xf5}], 0x2, &(0x7f0000000880)=""/106, 0x6a}, 0x3e}, {{&(0x7f0000000900)=@l2={0x1f, 0x0, @none}, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000980)=""/21, 0x15}], 0x1, &(0x7f0000000a00)=""/174, 0xae}, 0x7f}, {{&(0x7f0000000ac0)=@un=@abs, 0x80, &(0x7f0000002000)=[{&(0x7f0000000b40)=""/134, 0x86}, {&(0x7f0000000c00)=""/75, 0x4b}, {&(0x7f0000000c80)=""/130, 0x82}, {&(0x7f0000000d40)=""/217, 0xd9}, {&(0x7f0000000e40)=""/4096, 0x1000}, {&(0x7f0000001e40)=""/159, 0x9f}, {&(0x7f0000001f00)=""/56, 0x38}, {&(0x7f0000001f40)=""/13, 0xd}, {&(0x7f0000001f80)=""/94, 0x5e}], 0x9, &(0x7f00000020c0)=""/60, 0x3c}, 0x1ff}, {{&(0x7f0000002100)=@nfc, 0x80, &(0x7f00000021c0)=[{&(0x7f0000002180)=""/18, 0x12}, {&(0x7f0000002700)=""/4096, 0x1000}], 0x2, &(0x7f0000002200)=""/76, 0x4c}, 0x7}, {{&(0x7f0000002280)=@nfc, 0x80, &(0x7f00000024c0)=[{&(0x7f0000002300)=""/2, 0x2}, {&(0x7f0000002340)=""/62, 0x3e}, {&(0x7f0000002380)=""/244, 0xf4}, {&(0x7f0000002480)=""/29, 0x1d}], 0x4}, 0x4}, {{&(0x7f0000002500)=@can, 0x80, &(0x7f0000003700)=[{&(0x7f0000002580)=""/55, 0x37}, {&(0x7f00000025c0)=""/116, 0x74}], 0x2, &(0x7f0000003740)=""/181, 0xb5}, 0xffffffff}], 0x7, 0x2, &(0x7f00000039c0)={0x0, 0x3938700}) 0s ago: executing program 1 (id=1146): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={0x0, 0x24}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) (async) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x2ba) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c0000001000850619fbb7c75150926b00000000", @ANYRES32=r3, @ANYBLOB="fe000000000000001c0012000c000100626f6e64000000000c0002000800010004"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000002000010000000000000000000a000000000000000000000008001a"], 0x2c}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=ANY=[@ANYBLOB="2c0000002000010000000000000000000a000000000000000000000008001a"], 0x2c}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socket(0x1, 0x803, 0x0) (async) r6 = socket(0x1, 0x803, 0x0) r7 = socket(0x1f, 0x4, 0x2) bind$alg(r7, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="540000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800e0001006970366772657461700000001800028014000700fc00000000000000000000000000000008000a00", @ANYRES32=r8], 0x54}}, 0x0) socket(0x1, 0x803, 0x0) (async) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) r11 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCETHTOOL(r11, 0x8946, &(0x7f0000000240)={'geneve0\x00', &(0x7f0000000200)=@ethtool_rxfh={0x46, 0x4, 0x400, 0x1, 0x6, "f7b6fe"}}) socket$inet6_udp(0xa, 0x2, 0x0) (async) r12 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r12, 0x29, 0x40, &(0x7f00000004c0)=@raw={'raw\x00', 0x3c1, 0x3, 0x438, 0x270, 0x2b8, 0xb0000000, 0x270, 0x0, 0x368, 0x3a8, 0x3a8, 0x368, 0x3a8, 0x3, 0x0, {[{{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @local, [], [], 'vlan1\x00', 'pimreg1\x00'}, 0x0, 0x228, 0x270, 0x0, {}, [@common=@inet=@hashlimit3={{0x158}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x0, 'syz1\x00'}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @loopback}, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, [], [], 'virt_wifi0\x00', 'ip_vti0\x00'}, 0x0, 0xd0, 0xf8, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @common=@unspec=@CONNSECMARK={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x498) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="500000001000110f00"/20, @ANYRES32=0x0, @ANYBLOB="040100000000000028001280090001007665746800000000180002801400010000000000", @ANYRES32=0x0, @ANYBLOB="20000000ff7f000000000000", @ANYRES32=r10, @ANYBLOB], 0x50}, 0x1, 0x0, 0x0, 0x40000}, 0x0) kernel console output (not intermixed with test programs): T6553] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.412155][ T6572] dccp_invalid_packet: P.Data Offset(0) too small [ 113.683674][ T6581] syz.4.200: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 113.704069][ T6581] CPU: 1 UID: 0 PID: 6581 Comm: syz.4.200 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 113.704099][ T6581] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 113.704115][ T6581] Call Trace: [ 113.704123][ T6581] [ 113.704131][ T6581] dump_stack_lvl+0x241/0x360 [ 113.704175][ T6581] ? __pfx_dump_stack_lvl+0x10/0x10 [ 113.704204][ T6581] ? __pfx__printk+0x10/0x10 [ 113.704230][ T6581] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 113.704262][ T6581] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 113.704290][ T6581] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 113.704326][ T6581] warn_alloc+0x27c/0x410 [ 113.704345][ T6581] ? is_mmconf_reserved+0x3a1/0x3f0 [ 113.704367][ T6581] ? __vmalloc_node_range_noprof+0x108/0x1390 [ 113.704388][ T6581] ? __pfx_warn_alloc+0x10/0x10 [ 113.704409][ T6581] ? kasan_save_track+0x3f/0x80 [ 113.704428][ T6581] ? __kasan_kmalloc+0x9d/0xb0 [ 113.704452][ T6581] ? xsk_setsockopt+0x449/0x840 [ 113.704469][ T6581] ? do_sock_setsockopt+0x3b1/0x710 [ 113.704487][ T6581] ? __x64_sys_setsockopt+0x1ee/0x280 [ 113.704504][ T6581] ? do_syscall_64+0xf3/0x230 [ 113.704526][ T6581] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.704557][ T6581] __vmalloc_node_range_noprof+0x128/0x1390 [ 113.704609][ T6581] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 113.704634][ T6581] ? __kasan_kmalloc+0x9d/0xb0 [ 113.704664][ T6581] vmalloc_user_noprof+0x74/0x80 [ 113.704683][ T6581] ? xskq_create+0xb6/0x170 [ 113.704703][ T6581] xskq_create+0xb6/0x170 [ 113.704726][ T6581] xsk_init_queue+0xa1/0x100 [ 113.704749][ T6581] xsk_setsockopt+0x449/0x840 [ 113.704772][ T6581] ? __pfx_xsk_setsockopt+0x10/0x10 [ 113.704789][ T6581] ? __lock_acquire+0xad5/0xd80 [ 113.704817][ T6581] ? __pfx_aa_sk_perm+0x10/0x10 [ 113.704867][ T6581] ? aa_sock_opt_perm+0x79/0x120 [ 113.704899][ T6581] ? __pfx_xsk_setsockopt+0x10/0x10 [ 113.704916][ T6581] do_sock_setsockopt+0x3b1/0x710 [ 113.704941][ T6581] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 113.704958][ T6581] ? __fget_files+0x2a/0x420 [ 113.704979][ T6581] ? __fget_files+0x39d/0x420 [ 113.704995][ T6581] ? __fget_files+0x2a/0x420 [ 113.705021][ T6581] __x64_sys_setsockopt+0x1ee/0x280 [ 113.705046][ T6581] do_syscall_64+0xf3/0x230 [ 113.705069][ T6581] ? clear_bhb_loop+0x45/0xa0 [ 113.705092][ T6581] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 113.705110][ T6581] RIP: 0033:0x7f7b6058d169 [ 113.705132][ T6581] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 113.705147][ T6581] RSP: 002b:00007f7b614a3038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 113.705167][ T6581] RAX: ffffffffffffffda RBX: 00007f7b607a5fa0 RCX: 00007f7b6058d169 [ 113.705181][ T6581] RDX: 0000000000000006 RSI: 000000000000011b RDI: 000000000000000c [ 113.705192][ T6581] RBP: 00007f7b6060e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 113.705203][ T6581] R10: 0000200000000000 R11: 0000000000000246 R12: 0000000000000000 [ 113.705215][ T6581] R13: 0000000000000000 R14: 00007f7b607a5fa0 R15: 00007ffe0ae8b5e8 [ 113.705244][ T6581] [ 114.032713][ T6581] Mem-Info: [ 114.036051][ T6581] active_anon:5026 inactive_anon:0 isolated_anon:0 [ 114.036051][ T6581] active_file:1296 inactive_file:38310 isolated_file:0 [ 114.036051][ T6581] unevictable:3840 dirty:124 writeback:0 [ 114.036051][ T6581] slab_reclaimable:9681 slab_unreclaimable:98179 [ 114.036051][ T6581] mapped:28523 shmem:1427 pagetables:892 [ 114.036051][ T6581] sec_pagetables:0 bounce:0 [ 114.036051][ T6581] kernel_misc_reclaimable:0 [ 114.036051][ T6581] free:1341596 free_pcp:426 free_cma:0 [ 114.094785][ T6581] Node 0 active_anon:29504kB inactive_anon:0kB active_file:5184kB inactive_file:153160kB unevictable:4524kB isolated(anon):0kB isolated(file):0kB mapped:114092kB dirty:496kB writeback:0kB shmem:4172kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10940kB pagetables:3568kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 114.172888][ T6581] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 114.205202][ T6581] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 114.233368][ T6581] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 114.239569][ T6581] Node 0 DMA32 free:1444836kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:31196kB inactive_anon:0kB active_file:5184kB inactive_file:153060kB unevictable:1624kB writepending:496kB present:3129332kB managed:2547256kB mlocked:88kB bounce:0kB free_pcp:2376kB local_pcp:864kB free_cma:0kB [ 114.285194][ T6581] lowmem_reserve[]: 0 0 0 0 0 [ 114.290011][ T6581] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:0kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 114.317707][ T6581] lowmem_reserve[]: 0 0 0 0 0 [ 114.322476][ T6581] Node 1 Normal free:3905896kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:128kB local_pcp:0kB free_cma:0kB [ 114.354919][ T6581] lowmem_reserve[]: 0 0 0 0 0 [ 114.360063][ T6581] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 114.385611][ T6595] __nla_validate_parse: 156 callbacks suppressed [ 114.385630][ T6595] netlink: 20 bytes leftover after parsing attributes in process `syz.0.205'. [ 114.416951][ T6581] Node 0 DMA32: 186*4kB (UME) 509*8kB (UME) 527*16kB (UME) 86*32kB (UME) 50*64kB (UME) 52*128kB (UME) 31*256kB (UME) 13*512kB (U) 4*1024kB (UM) 4*2048kB (UM) 341*4096kB (UM) = 1449472kB [ 114.482420][ T6595] validate_nla: 49 callbacks suppressed [ 114.482442][ T6595] netlink: 'syz.0.205': attribute type 2 has an invalid length. [ 114.514665][ T6581] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 114.545940][ T6581] Node 1 Normal: 232*4kB (U) 69*8kB (UME) 40*16kB (UME) 229*32kB (UME) 112*64kB (UME) 37*128kB (UME) 12*256kB (UM) 7*512kB (UME) 5*1024kB (UME) 3*2048kB (UE) 944*4096kB (M) = 3905896kB [ 114.606521][ T6581] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 114.621279][ T6602] IPv6: NLM_F_REPLACE set, but no existing node found! [ 114.645752][ T6581] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 114.663502][ T6581] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 114.703699][ T6581] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 114.724232][ T6606] tipc: Enabling of bearer rejected, failed to enable media [ 114.744540][ T6581] 41033 total pagecache pages [ 114.749454][ T6581] 0 pages in swap cache [ 114.760173][ T6581] Free swap = 124996kB [ 114.769020][ T6581] Total swap = 124996kB [ 114.782827][ T6581] 2097051 pages RAM [ 114.790154][ T6581] 0 pages HighMem/MovableOnly [ 114.798369][ T6599] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 114.800678][ T6581] 428579 pages reserved [ 114.845414][ T6612] syzkaller1: entered promiscuous mode [ 114.850934][ T6612] syzkaller1: entered allmulticast mode [ 114.853190][ T6581] 0 pages cma reserved [ 114.945309][ T6614] Bluetooth: MGMT ver 1.23 [ 114.985548][ T6614] netlink: 'syz.3.212': attribute type 39 has an invalid length. [ 115.348396][ T6634] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 115.755110][ T6653] tipc: Can't bind to reserved service type 1 [ 115.766028][ T6656] netlink: 28 bytes leftover after parsing attributes in process `syz.1.225'. [ 115.796713][ T6653] netlink: 8 bytes leftover after parsing attributes in process `syz.3.223'. [ 115.797495][ T6660] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.224'. [ 115.869436][ T6660] netlink: 4552 bytes leftover after parsing attributes in process `syz.0.224'. [ 116.247330][ T6685] xt_CT: You must specify a L4 protocol and not use inversions on it [ 116.257726][ T6682] netlink: 1196 bytes leftover after parsing attributes in process `syz.1.233'. [ 116.537782][ T6697] netlink: 16 bytes leftover after parsing attributes in process `syz.0.239'. [ 116.603139][ T6699] netlink: 12 bytes leftover after parsing attributes in process `syz.2.238'. [ 116.684145][ T6701] netlink: 20 bytes leftover after parsing attributes in process `syz.1.240'. [ 117.027633][ T6717] netlink: zone id is out of range [ 117.033171][ T6717] netlink: zone id is out of range [ 117.039829][ T6717] netlink: zone id is out of range [ 117.051871][ T6717] netlink: zone id is out of range [ 117.069734][ T6717] netlink: zone id is out of range [ 117.076981][ T6717] netlink: zone id is out of range [ 117.083440][ T6717] netlink: zone id is out of range [ 117.095245][ T6717] netlink: zone id is out of range [ 117.154650][ T6720] netlink: 28 bytes leftover after parsing attributes in process `syz.3.246'. [ 117.418493][ T6731] delete_channel: no stack [ 117.445096][ T6736] netlink: 'syz.1.250': attribute type 1 has an invalid length. [ 117.452982][ T6736] netlink: 'syz.1.250': attribute type 2 has an invalid length. [ 117.469117][ T6736] netlink: 'syz.1.250': attribute type 1 has an invalid length. [ 117.517911][ T6740] netlink: 'syz.1.250': attribute type 1 has an invalid length. [ 117.565894][ T6740] netlink: 'syz.1.250': attribute type 2 has an invalid length. [ 117.589997][ T6740] netlink: 'syz.1.250': attribute type 1 has an invalid length. [ 118.049022][ T6756] (unnamed net_device) (uninitialized): Invalid ad_actor_system MAC address. [ 118.095240][ T6756] (unnamed net_device) (uninitialized): option ad_actor_system: invalid value (1) [ 118.369265][ T6766] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 118.638670][ T6783] netlink: 'syz.0.263': attribute type 12 has an invalid length. [ 118.790279][ T6788] netlink: 'syz.4.264': attribute type 1 has an invalid length. [ 118.852338][ T6794] tipc: Started in network mode [ 118.893309][ T6794] tipc: Node identity e6de9c3e8b21, cluster identity 4711 [ 118.914548][ T6780] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.922688][ T6794] tipc: Enabled bearer , priority 0 [ 118.966876][ T6800] syzkaller0: entered promiscuous mode [ 118.977982][ T6800] syzkaller0: entered allmulticast mode [ 119.081833][ T6800] tipc: Resetting bearer [ 119.131313][ T6793] tipc: Resetting bearer [ 119.196410][ T6793] tipc: Disabling bearer [ 119.246353][ T6809] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.254508][ T6809] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.838402][ T6847] netlink: 'syz.1.281': attribute type 2 has an invalid length. [ 119.886656][ T6844] ip6gre1: entered promiscuous mode [ 120.190392][ T6864] netlink: 'syz.4.285': attribute type 2 has an invalid length. [ 120.209841][ T6864] netlink: 'syz.4.285': attribute type 8 has an invalid length. [ 120.243317][ T6864] __nla_validate_parse: 6 callbacks suppressed [ 120.243337][ T6864] netlink: 132 bytes leftover after parsing attributes in process `syz.4.285'. [ 120.440073][ T6871] netlink: 'syz.2.287': attribute type 1 has an invalid length. [ 120.977165][ T6889] dvmrp0: entered allmulticast mode [ 121.140264][ T6897] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 121.293416][ T6905] netlink: 8 bytes leftover after parsing attributes in process `syz.4.300'. [ 121.309449][ T6905] netlink: 4 bytes leftover after parsing attributes in process `syz.4.300'. [ 121.340057][ T6905] nbd: socks must be embedded in a SOCK_ITEM attr [ 121.371034][ T6907] netlink: 12 bytes leftover after parsing attributes in process `syz.0.301'. [ 121.816576][ T6924] xt_limit: Overflow, try lower: 2147483649/128 [ 122.111692][ T6932] raw_sendmsg: syz.4.310 forgot to set AF_INET. Fix it! [ 122.625710][ T6948] netlink: 16 bytes leftover after parsing attributes in process `syz.3.316'. [ 122.679354][ T6949] netlink: 16 bytes leftover after parsing attributes in process `syz.3.316'. [ 122.753719][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.887185][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.001271][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.174275][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.220405][ T6962] netlink: 4 bytes leftover after parsing attributes in process `syz.3.320'. [ 123.598352][ T6972] netlink: 36 bytes leftover after parsing attributes in process `syz.4.323'. [ 123.620738][ T12] bridge_slave_1: left allmulticast mode [ 123.641141][ T12] bridge_slave_1: left promiscuous mode [ 123.642602][ T6972] netlink: 16 bytes leftover after parsing attributes in process `syz.4.323'. [ 123.661073][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.708232][ T6972] netlink: 36 bytes leftover after parsing attributes in process `syz.4.323'. [ 123.730485][ T12] bridge_slave_0: left allmulticast mode [ 123.746171][ T12] bridge_slave_0: left promiscuous mode [ 123.758779][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.911734][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 123.925193][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 123.935755][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 123.958549][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 123.966401][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 124.467493][ T12] dvmrp0 (unregistering): left allmulticast mode [ 124.777712][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.793789][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.809308][ T12] bond0 (unregistering): Released all slaves [ 124.888818][ T6993] gretap0: entered promiscuous mode [ 124.917900][ T6994] 0ªî{X¹¦: renamed from gretap0 [ 124.968612][ T6994] 0ªî{X¹¦: left promiscuous mode [ 124.975571][ T6994] 0ªî{X¹¦: entered allmulticast mode [ 124.996002][ T6994] net_ratelimit: 397 callbacks suppressed [ 124.996021][ T6994] A link change request failed with some changes committed already. Interface 30ªî{X¹¦ may have been left with an inconsistent configuration, please check. [ 125.029885][ T12] tipc: Left network mode [ 125.225895][ T7001] x_tables: duplicate underflow at hook 1 [ 125.255814][ T7003] __nla_validate_parse: 5 callbacks suppressed [ 125.255834][ T7003] netlink: 12 bytes leftover after parsing attributes in process `syz.4.334'. [ 125.261381][ T7001] netlink: 36 bytes leftover after parsing attributes in process `syz.2.332'. [ 125.739849][ T7020] netlink: 4 bytes leftover after parsing attributes in process `syz.2.338'. [ 125.821862][ T12] hsr_slave_0: left promiscuous mode [ 125.828279][ T12] hsr_slave_1: left promiscuous mode [ 125.839120][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.852118][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.873567][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.881600][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 125.914114][ T12] veth1_macvtap: left promiscuous mode [ 125.920233][ T12] veth0_macvtap: left promiscuous mode [ 125.935126][ T12] veth1_vlan: left promiscuous mode [ 125.940885][ T12] veth0_vlan: left promiscuous mode [ 126.004882][ T5847] Bluetooth: hci0: command tx timeout [ 126.629006][ T12] team0 (unregistering): Port device team_slave_1 removed [ 126.651046][ T7030] netlink: 16 bytes leftover after parsing attributes in process `syz.1.340'. [ 126.680970][ T12] team0 (unregistering): Port device team_slave_0 removed [ 127.533913][ T7043] bridge_slave_0: left allmulticast mode [ 127.564864][ T7043] bridge_slave_0: left promiscuous mode [ 127.611643][ T7043] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.670949][ T7043] bridge_slave_1: left allmulticast mode [ 127.671608][ T7052] xt_hashlimit: size too large, truncated to 1048576 [ 127.686846][ T7050] netlink: 'syz.2.346': attribute type 7 has an invalid length. [ 127.715390][ T7043] bridge_slave_1: left promiscuous mode [ 127.724668][ T7043] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.799431][ T7043] bond0: (slave bond_slave_0): Releasing backup interface [ 127.876980][ T7058] netlink: 12 bytes leftover after parsing attributes in process `syz.2.348'. [ 128.084491][ T5847] Bluetooth: hci0: command tx timeout [ 128.215014][ T7043] bond0: (slave bond_slave_1): Releasing backup interface [ 128.297021][ T7043] team0: Port device team_slave_0 removed [ 128.332283][ T7043] team0: Port device team_slave_1 removed [ 128.345720][ T7043] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 128.359191][ T7043] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 128.372468][ T7043] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 128.385385][ T7043] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.421030][ T6976] chnl_net:caif_netlink_parms(): no params data found [ 128.467527][ T7046] dccp_close: ABORT with 60 bytes unread [ 129.108268][ T7073] syzkaller1: entered promiscuous mode [ 129.114661][ T7073] syzkaller1: entered allmulticast mode [ 129.216360][ T6976] bridge0: port 1(bridge_slave_0) entered blocking state [ 129.225187][ T6976] bridge0: port 1(bridge_slave_0) entered disabled state [ 129.232446][ T6976] bridge_slave_0: entered allmulticast mode [ 129.256485][ T6976] bridge_slave_0: entered promiscuous mode [ 129.279846][ T7090] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 129.287161][ T7090] IPv6: NLM_F_CREATE should be set when creating new route [ 129.419109][ T7094] vlan2: entered promiscuous mode [ 129.424208][ T7094] bridge0: entered promiscuous mode [ 129.490740][ T7101] netlink: 8 bytes leftover after parsing attributes in process `syz.2.358'. [ 129.511765][ T6976] bridge0: port 2(bridge_slave_1) entered blocking state [ 129.546275][ T6976] bridge0: port 2(bridge_slave_1) entered disabled state [ 129.568270][ T6976] bridge_slave_1: entered allmulticast mode [ 129.591498][ T6976] bridge_slave_1: entered promiscuous mode [ 129.752438][ T7106] netlink: 16 bytes leftover after parsing attributes in process `syz.3.360'. [ 129.820570][ T6976] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 129.830662][ T7110] netlink: 'syz.1.362': attribute type 10 has an invalid length. [ 129.869148][ T7110] bridge0: port 1(team0) entered blocking state [ 129.894656][ T7110] bridge0: port 1(team0) entered disabled state [ 129.903720][ T7110] team0: entered allmulticast mode [ 129.919735][ T7110] team0: entered promiscuous mode [ 129.961890][ T7122] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 130.010159][ T7122] x_tables: ip6_tables: TCPMSS target: only valid for protocol 6 [ 130.053767][ T6976] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 130.120021][ T7126] netlink: 'syz.4.364': attribute type 24 has an invalid length. [ 130.164598][ T5847] Bluetooth: hci0: command tx timeout [ 130.530834][ T7106] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 130.686323][ T7134] syz.1.367: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 130.754567][ T7134] CPU: 0 UID: 0 PID: 7134 Comm: syz.1.367 Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 130.754597][ T7134] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 130.754610][ T7134] Call Trace: [ 130.754619][ T7134] [ 130.754628][ T7134] dump_stack_lvl+0x241/0x360 [ 130.754678][ T7134] ? __pfx_dump_stack_lvl+0x10/0x10 [ 130.754709][ T7134] ? __pfx__printk+0x10/0x10 [ 130.754736][ T7134] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 130.754769][ T7134] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 130.754799][ T7134] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 130.754831][ T7134] warn_alloc+0x27c/0x410 [ 130.754860][ T7134] ? __pfx_warn_alloc+0x10/0x10 [ 130.754889][ T7134] ? xskq_create+0xb6/0x170 [ 130.754910][ T7134] ? __get_vm_area_node+0x1c8/0x2d0 [ 130.754939][ T7134] ? __get_vm_area_node+0x25c/0x2d0 [ 130.754976][ T7134] __vmalloc_node_range_noprof+0x634/0x1390 [ 130.755032][ T7134] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 130.755058][ T7134] ? __kasan_kmalloc+0x9d/0xb0 [ 130.755089][ T7134] vmalloc_user_noprof+0x74/0x80 [ 130.755109][ T7134] ? xskq_create+0xb6/0x170 [ 130.755129][ T7134] xskq_create+0xb6/0x170 [ 130.755153][ T7134] xsk_init_queue+0xa1/0x100 [ 130.755178][ T7134] xsk_setsockopt+0x4f9/0x840 [ 130.755201][ T7134] ? __pfx_xsk_setsockopt+0x10/0x10 [ 130.755231][ T7134] ? __pfx_aa_sk_perm+0x10/0x10 [ 130.755263][ T7134] ? aa_sock_opt_perm+0x79/0x120 [ 130.755298][ T7134] ? __pfx_xsk_setsockopt+0x10/0x10 [ 130.755317][ T7134] do_sock_setsockopt+0x3b1/0x710 [ 130.755346][ T7134] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 130.755364][ T7134] ? __fget_files+0x2a/0x420 [ 130.755388][ T7134] ? __fget_files+0x39d/0x420 [ 130.755405][ T7134] ? __fget_files+0x2a/0x420 [ 130.755433][ T7134] __x64_sys_setsockopt+0x1ee/0x280 [ 130.755463][ T7134] do_syscall_64+0xf3/0x230 [ 130.755499][ T7134] ? clear_bhb_loop+0x45/0xa0 [ 130.755523][ T7134] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 130.755542][ T7134] RIP: 0033:0x7f0f49b8d169 [ 130.755566][ T7134] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 130.755582][ T7134] RSP: 002b:00007f0f4a96d038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 130.755602][ T7134] RAX: ffffffffffffffda RBX: 00007f0f49da6080 RCX: 00007f0f49b8d169 [ 130.755616][ T7134] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003 [ 130.755628][ T7134] RBP: 00007f0f49c0e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 130.755639][ T7134] R10: 00002000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 130.755651][ T7134] R13: 0000000000000001 R14: 00007f0f49da6080 R15: 00007ffea7b75968 [ 130.755682][ T7134] [ 130.755720][ T7134] Mem-Info: [ 131.046987][ T7134] active_anon:5450 inactive_anon:0 isolated_anon:0 [ 131.046987][ T7134] active_file:1330 inactive_file:38318 isolated_file:0 [ 131.046987][ T7134] unevictable:768 dirty:42 writeback:0 [ 131.046987][ T7134] slab_reclaimable:9642 slab_unreclaimable:99368 [ 131.046987][ T7134] mapped:28469 shmem:1439 pagetables:817 [ 131.046987][ T7134] sec_pagetables:0 bounce:0 [ 131.046987][ T7134] kernel_misc_reclaimable:0 [ 131.046987][ T7134] free:1245443 free_pcp:5067 free_cma:0 [ 131.099949][ T7134] Node 0 active_anon:21800kB inactive_anon:0kB active_file:5320kB inactive_file:153192kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:113876kB dirty:168kB writeback:0kB shmem:4220kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10828kB pagetables:3268kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 131.139604][ T7134] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 131.179535][ T7134] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 131.212073][ T7134] lowmem_reserve[]: 0 2487 2487 2487 2487 [ 131.218781][ T7134] Node 0 DMA32 free:1088456kB boost:0kB min:34152kB low:42688kB high:51224kB reserved_highatomic:0KB active_anon:21792kB inactive_anon:0kB active_file:5320kB inactive_file:153092kB unevictable:1536kB writepending:164kB present:3129332kB managed:2547256kB mlocked:0kB bounce:0kB free_pcp:17936kB local_pcp:252kB free_cma:0kB [ 131.258668][ T7134] lowmem_reserve[]: 0 0 0 0 0 [ 131.264910][ T7134] Node 0 Normal free:0kB boost:0kB min:0kB low:0kB high:0kB reserved_highatomic:0KB active_anon:8kB inactive_anon:0kB active_file:0kB inactive_file:100kB unevictable:0kB writepending:4kB present:1048580kB managed:108kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 131.292722][ T7134] lowmem_reserve[]: 0 0 0 0 0 [ 131.299861][ T7134] Node 1 Normal free:3905960kB boost:0kB min:55748kB low:69684kB high:83620kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:80kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:192kB local_pcp:0kB free_cma:0kB [ 131.329383][ T7134] lowmem_reserve[]: 0 0 0 0 0 [ 131.334161][ T7134] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 131.347682][ T7134] Node 0 DMA32: 764*4kB (UM) 746*8kB (UME) 724*16kB (UME) 559*32kB (UME) 367*64kB (UME) 269*128kB (UME) 168*256kB (UME) 76*512kB (UM) 25*1024kB (U) 4*2048kB (UM) 218*4096kB (UM) = 1105056kB [ 131.371957][ T7134] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 131.387581][ T7134] Node 1 Normal: 232*4kB (U) 69*8kB (UME) 40*16kB (UME) 227*32kB (UME) 112*64kB (UME) 38*128kB (UME) 12*256kB (UM) 7*512kB (UME) 5*1024kB (UME) 3*2048kB (UE) 944*4096kB (M) = 3905960kB [ 131.407118][ T7134] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 131.417146][ T7134] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 131.427302][ T7134] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 131.437548][ T7134] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 131.447388][ T7134] 41087 total pagecache pages [ 131.452307][ T7134] 0 pages in swap cache [ 131.456846][ T7134] Free swap = 124996kB [ 131.462529][ T7134] Total swap = 124996kB [ 131.471364][ T7134] 2097051 pages RAM [ 131.475633][ T7134] 0 pages HighMem/MovableOnly [ 131.482129][ T7134] 428579 pages reserved [ 131.487983][ T7134] 0 pages cma reserved [ 131.653209][ T7144] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 132.246126][ T5847] Bluetooth: hci0: command 0x0419 tx timeout [ 132.254070][ T7165] netlink: 216 bytes leftover after parsing attributes in process `syz.1.375'. [ 132.268855][ T7165] netlink: 8 bytes leftover after parsing attributes in process `syz.1.375'. [ 132.810039][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.821013][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.105902][ T6976] team0: Port device team_slave_0 added [ 133.132624][ T6976] team0: Port device team_slave_1 added [ 133.404903][ T6976] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 133.442849][ T6976] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.492524][ T6976] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 133.563568][ T6976] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 133.626665][ T6976] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 133.658548][ T10] IPVS: starting estimator thread 0... [ 133.699055][ T6976] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 133.728687][ T7188] netlink: 11562 bytes leftover after parsing attributes in process `syz.1.380'. [ 133.767410][ T7187] IPVS: using max 27 ests per chain, 64800 per kthread [ 133.870583][ T7190] netlink: 'syz.2.383': attribute type 4 has an invalid length. [ 133.962204][ T6976] hsr_slave_0: entered promiscuous mode [ 133.975735][ T6976] hsr_slave_1: entered promiscuous mode [ 134.147135][ T7205] netlink: 'syz.2.388': attribute type 2 has an invalid length. [ 134.220795][ T7208] netlink: 156 bytes leftover after parsing attributes in process `syz.1.389'. [ 134.324575][ T5847] Bluetooth: hci0: command 0x0419 tx timeout [ 134.546065][ T7219] netlink: 'syz.3.394': attribute type 1 has an invalid length. [ 134.570188][ T7219] netlink: 224 bytes leftover after parsing attributes in process `syz.3.394'. [ 134.596520][ T7216] netlink: 16 bytes leftover after parsing attributes in process `syz.1.393'. [ 134.614309][ T7219] netlink: 'syz.3.394': attribute type 1 has an invalid length. [ 134.624201][ T7219] netlink: 224 bytes leftover after parsing attributes in process `syz.3.394'. [ 134.644112][ T7221] veth0: entered promiscuous mode [ 134.677146][ T7212] veth0: left promiscuous mode [ 134.963174][ T7231] netlink: 12 bytes leftover after parsing attributes in process `syz.1.396'. [ 134.979394][ T7231] tc_dump_action: action bad kind [ 135.058965][ T7240] bridge1: entered promiscuous mode [ 135.334736][ T7254] netlink: 'syz.4.403': attribute type 1 has an invalid length. [ 135.683441][ T6976] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 135.794439][ T6976] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 135.860735][ T7283] x_tables: duplicate underflow at hook 2 [ 135.879164][ T6976] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 135.933561][ T7289] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 136.041051][ T6976] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 136.122985][ T7297] x_tables: duplicate underflow at hook 3 [ 136.142810][ T7296] x_tables: duplicate underflow at hook 3 [ 136.426948][ T7312] netlink: 256 bytes leftover after parsing attributes in process `syz.3.417'. [ 136.443220][ T6976] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.468774][ T7312] netlink: 'syz.3.417': attribute type 9 has an invalid length. [ 136.513126][ T6976] 8021q: adding VLAN 0 to HW filter on device team0 [ 136.560507][ T2997] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.567757][ T2997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 136.599813][ T2997] bridge0: port 2(bridge_slave_1) entered blocking state [ 136.607054][ T2997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 136.721627][ T7330] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 136.761629][ T7332] RDS: rds_bind could not find a transport for fe80::, load rds_tcp or rds_rdma? [ 136.820824][ T7336] netlink: 28 bytes leftover after parsing attributes in process `syz.2.423'. [ 136.845090][ T7336] netlink: 'syz.2.423': attribute type 7 has an invalid length. [ 136.867917][ T7336] netlink: 'syz.2.423': attribute type 8 has an invalid length. [ 136.918457][ T7336] team0: entered promiscuous mode [ 136.923572][ T7336] team_slave_0: entered promiscuous mode [ 136.944646][ T7336] team_slave_1: entered promiscuous mode [ 136.952555][ T7336] bridge0: entered promiscuous mode [ 136.960005][ T7336] gretap0: entered promiscuous mode [ 136.973943][ T7336] hsr1: Slave B (bridge0) is not up; please bring it up to get a fully working HSR network [ 137.072472][ T6976] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 137.181633][ T6976] veth0_vlan: entered promiscuous mode [ 137.257995][ T6976] veth1_vlan: entered promiscuous mode [ 137.312762][ T7349] Bluetooth: MGMT ver 1.23 [ 137.336625][ T7350] __nla_validate_parse: 1 callbacks suppressed [ 137.336642][ T7350] netlink: 4 bytes leftover after parsing attributes in process `syz.1.427'. [ 137.340945][ T7352] netlink: 'syz.3.428': attribute type 33 has an invalid length. [ 137.359940][ T7349] netlink: 4 bytes leftover after parsing attributes in process `syz.1.427'. [ 137.461124][ T7362] netlink: 8 bytes leftover after parsing attributes in process `syz.3.428'. [ 137.742564][ T6976] veth0_macvtap: entered promiscuous mode [ 137.785225][ T6976] veth1_macvtap: entered promiscuous mode [ 137.826718][ T6976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.874380][ T6976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.888170][ T6976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 137.899678][ T6976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 137.913127][ T6976] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 137.964082][ T6976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 137.999394][ T6976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.021748][ T6976] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 138.052566][ T6976] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 138.075105][ T6976] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 138.101453][ T6976] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.112132][ T6976] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.154514][ T6976] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.163280][ T6976] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 138.329815][ T7390] netlink: 68 bytes leftover after parsing attributes in process `syz.1.437'. [ 138.428386][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.441102][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 138.637017][ T2959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 138.670039][ T2959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 139.399195][ T7436] netlink: 11 bytes leftover after parsing attributes in process `syz.4.449'. [ 139.411766][ T7439] netlink: 'syz.3.450': attribute type 10 has an invalid length. [ 139.452356][ T7439] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.464014][ T7439] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 139.509841][ T7443] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 139.550502][ T7445] netlink: 40 bytes leftover after parsing attributes in process `syz.2.451'. [ 139.571594][ T7439] netlink: 20 bytes leftover after parsing attributes in process `syz.3.450'. [ 139.596527][ T7445] netlink: 24 bytes leftover after parsing attributes in process `syz.2.451'. [ 140.573777][ T7479] netlink: 8 bytes leftover after parsing attributes in process `syz.1.461'. [ 140.902485][ T5852] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 140.914240][ T5852] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 140.928401][ T5852] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 140.940563][ T5852] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 140.950530][ T5852] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 141.029197][ T7498] netlink: 12 bytes leftover after parsing attributes in process `syz.4.467'. [ 141.105712][ T7499] xt_hashlimit: invalid interval [ 141.662633][ T7493] chnl_net:caif_netlink_parms(): no params data found [ 141.738691][ T7526] netlink: 'syz.2.477': attribute type 11 has an invalid length. [ 141.935039][ T7493] bridge0: port 1(bridge_slave_0) entered blocking state [ 141.942859][ T7493] bridge0: port 1(bridge_slave_0) entered disabled state [ 141.950731][ T7493] bridge_slave_0: entered allmulticast mode [ 141.960081][ T7493] bridge_slave_0: entered promiscuous mode [ 141.970809][ T7493] bridge0: port 2(bridge_slave_1) entered blocking state [ 141.978594][ T7493] bridge0: port 2(bridge_slave_1) entered disabled state [ 141.986298][ T7493] bridge_slave_1: entered allmulticast mode [ 141.994918][ T7493] bridge_slave_1: entered promiscuous mode [ 142.140377][ T7537] dvmrp0: entered allmulticast mode [ 142.274535][ T7493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 142.318065][ T7493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 142.468533][ T7552] __nla_validate_parse: 5 callbacks suppressed [ 142.468554][ T7552] netlink: 12 bytes leftover after parsing attributes in process `syz.2.485'. [ 142.549021][ T7493] team0: Port device team_slave_0 added [ 142.559378][ T7493] team0: Port device team_slave_1 added [ 142.660646][ T7493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.684940][ T7493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.714856][ T7493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.729367][ T7561] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 142.731068][ T7493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.746095][ T7493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.772975][ T7493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.805668][ T7563] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 142.947012][ T7493] hsr_slave_0: entered promiscuous mode [ 142.962656][ T7493] hsr_slave_1: entered promiscuous mode [ 142.973935][ T7493] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 142.982737][ T7493] Cannot create hsr debugfs directory [ 143.044485][ T5852] Bluetooth: hci0: command tx timeout [ 143.583715][ T7493] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.642285][ T7591] sit1: entered promiscuous mode [ 143.665296][ T7591] sit1: entered allmulticast mode [ 143.733509][ T7601] netlink: 12 bytes leftover after parsing attributes in process `syz.4.502'. [ 143.782992][ T7493] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 143.806019][ T7603] netlink: 24 bytes leftover after parsing attributes in process `syz.1.501'. [ 143.829323][ T7603] netlink: 'syz.1.501': attribute type 10 has an invalid length. [ 143.878202][ T7603] netlink: 16 bytes leftover after parsing attributes in process `syz.1.501'. [ 144.002639][ T7493] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.077329][ T7612] netlink: 12 bytes leftover after parsing attributes in process `syz.3.505'. [ 144.253846][ T7493] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.412130][ T7626] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap0 [ 144.756155][ T7493] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 144.780863][ T7493] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 144.804008][ T7493] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 144.824823][ T7645] netlink: 'syz.3.515': attribute type 29 has an invalid length. [ 144.835858][ T7493] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 144.985794][ T7647] netlink: 24 bytes leftover after parsing attributes in process `syz.3.516'. [ 145.018742][ T7647] netlink: 232 bytes leftover after parsing attributes in process `syz.3.516'. [ 145.051512][ T7649] dvmrp0: entered allmulticast mode [ 145.072566][ T7493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.099155][ T7493] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.122789][ T2959] bridge0: port 1(bridge_slave_0) entered blocking state [ 145.129986][ T2959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 145.138783][ T5852] Bluetooth: hci0: command tx timeout [ 145.186624][ T2966] bridge0: port 2(bridge_slave_1) entered blocking state [ 145.193833][ T2966] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.580130][ T7665] netlink: 10 bytes leftover after parsing attributes in process `syz.4.522'. [ 145.662922][ T7672] netlink: 20 bytes leftover after parsing attributes in process `syz.1.524'. [ 145.676364][ T7670] netlink: 28 bytes leftover after parsing attributes in process `syz.3.525'. [ 145.902663][ T7493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 146.018561][ T7493] veth0_vlan: entered promiscuous mode [ 146.033243][ T7493] veth1_vlan: entered promiscuous mode [ 146.178625][ T7493] veth0_macvtap: entered promiscuous mode [ 146.241764][ T7493] veth1_macvtap: entered promiscuous mode [ 146.327703][ T7493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.350392][ T7493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.360840][ T7493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.371499][ T7493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.381721][ T7493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 146.392975][ T7493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.407050][ T7493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 146.428806][ T7493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.448000][ T7493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.458785][ T7493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.469958][ T7493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.492033][ T7493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 146.507481][ T7493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 146.527473][ T7493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 146.539570][ T7493] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.563317][ T7493] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.574713][ T7493] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.583606][ T7493] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.959852][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.993808][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.109237][ T2997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 147.159757][ T2997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 147.216606][ T5852] Bluetooth: hci0: command tx timeout [ 147.708689][ T7737] __nla_validate_parse: 4 callbacks suppressed [ 147.708709][ T7737] netlink: 4 bytes leftover after parsing attributes in process `syz.3.541'. [ 147.747060][ T7737] netlink: 12 bytes leftover after parsing attributes in process `syz.3.541'. [ 147.983967][ T7751] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 147.996195][ T7744] netlink: 'syz.4.545': attribute type 10 has an invalid length. [ 148.087424][ T7754] netlink: 12 bytes leftover after parsing attributes in process `syz.2.547'. [ 148.099182][ T7744] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 148.615960][ T7761] netlink: 36 bytes leftover after parsing attributes in process `syz.3.549'. [ 149.253575][ T7788] netlink: 20 bytes leftover after parsing attributes in process `syz.3.559'. [ 149.319292][ T7784] netlink: 'syz.4.557': attribute type 29 has an invalid length. [ 149.354881][ T7784] netlink: 'syz.4.557': attribute type 29 has an invalid length. [ 149.411941][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 149.422839][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 149.432472][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 149.442733][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 149.454255][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 149.793016][ T7794] chnl_net:caif_netlink_parms(): no params data found [ 149.848110][ T7814] netlink: 4 bytes leftover after parsing attributes in process `syz.2.564'. [ 150.517316][ T7794] bridge0: port 1(bridge_slave_0) entered blocking state [ 150.528131][ T7794] bridge0: port 1(bridge_slave_0) entered disabled state [ 150.538921][ T7794] bridge_slave_0: entered allmulticast mode [ 150.541765][ T47] IPVS: starting estimator thread 0... [ 150.555232][ T7794] bridge_slave_0: entered promiscuous mode [ 150.582456][ T7794] bridge0: port 2(bridge_slave_1) entered blocking state [ 150.607186][ T7794] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.636367][ T7794] bridge_slave_1: entered allmulticast mode [ 150.643771][ T7794] bridge_slave_1: entered promiscuous mode [ 150.684876][ T7827] IPVS: using max 24 ests per chain, 57600 per kthread [ 150.752227][ T7831] netlink: 12 bytes leftover after parsing attributes in process `syz.1.569'. [ 150.925148][ T7794] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 150.949738][ T7794] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 150.974726][ T7841] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 151.013893][ T7844] netlink: 8 bytes leftover after parsing attributes in process `syz.1.572'. [ 151.148446][ T7794] team0: Port device team_slave_0 added [ 151.172559][ T7850] netlink: 'syz.1.575': attribute type 10 has an invalid length. [ 151.176892][ T7794] team0: Port device team_slave_1 added [ 151.195279][ T7850] netlink: 132 bytes leftover after parsing attributes in process `syz.1.575'. [ 151.325689][ T7794] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 151.351673][ T7794] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.389495][ T7794] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 151.448629][ T7794] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 151.472205][ T7794] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 151.524620][ T5852] Bluetooth: hci0: command tx timeout [ 151.545779][ T7794] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 151.718186][ T7794] hsr_slave_0: entered promiscuous mode [ 151.741074][ T7794] hsr_slave_1: entered promiscuous mode [ 151.762033][ T7794] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 151.789900][ T7794] Cannot create hsr debugfs directory [ 152.311403][ T7879] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 152.390561][ T7794] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.498948][ T7890] netlink: 8 bytes leftover after parsing attributes in process `syz.1.587'. [ 152.517987][ T7794] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.633637][ T7794] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.752685][ T7902] __nla_validate_parse: 5 callbacks suppressed [ 152.752705][ T7902] netlink: 8 bytes leftover after parsing attributes in process `syz.4.591'. [ 152.769120][ T7902] netlink: 32 bytes leftover after parsing attributes in process `syz.4.591'. [ 152.809411][ T7794] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.875583][ T7902] gtp0: entered promiscuous mode [ 152.882310][ T7902] gtp0: entered allmulticast mode [ 153.038125][ T7794] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 153.059297][ T7794] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 153.118560][ T7794] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 153.135649][ T7794] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 153.453770][ T7794] 8021q: adding VLAN 0 to HW filter on device bond0 [ 153.511263][ T7794] 8021q: adding VLAN 0 to HW filter on device team0 [ 153.537651][ T7925] tipc: Started in network mode [ 153.537994][ T7924] netlink: 4 bytes leftover after parsing attributes in process `syz.4.599'. [ 153.542545][ T7925] tipc: Node identity ac14140f, cluster identity 4711 [ 153.543185][ T7925] tipc: New replicast peer: 255.255.255.255 [ 153.614550][ T5852] Bluetooth: hci0: command tx timeout [ 153.615931][ T7925] tipc: Enabled bearer , priority 10 [ 153.770983][ T7363] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.778380][ T7363] bridge0: port 1(bridge_slave_0) entered forwarding state [ 153.831513][ T2997] bridge0: port 2(bridge_slave_1) entered blocking state [ 153.838758][ T2997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 153.867360][ T7930] tipc: Enabling of bearer rejected, already enabled [ 153.977731][ T5891] IPVS: starting estimator thread 0... [ 154.094830][ T7950] IPVS: using max 26 ests per chain, 62400 per kthread [ 154.104182][ T7953] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 154.189979][ T7963] vxcan1 speed is unknown, defaulting to 1000 [ 154.240786][ T7963] vxcan1 speed is unknown, defaulting to 1000 [ 154.253481][ T7963] vxcan1 speed is unknown, defaulting to 1000 [ 154.463147][ T7973] netlink: 28 bytes leftover after parsing attributes in process `syz.4.608'. [ 154.505013][ T7794] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 154.572802][ T7975] bond2: entered allmulticast mode [ 154.584834][ T7975] 8021q: adding VLAN 0 to HW filter on device bond2 [ 154.613994][ T7979] netlink: 'syz.4.610': attribute type 4 has an invalid length. [ 154.712792][ T7794] veth0_vlan: entered promiscuous mode [ 154.736400][ T5889] tipc: Node number set to 2886997007 [ 154.745628][ T7794] veth1_vlan: entered promiscuous mode [ 154.821250][ T7794] veth0_macvtap: entered promiscuous mode [ 154.853963][ T7963] infiniband syz2: set active [ 154.861918][ T7794] veth1_macvtap: entered promiscuous mode [ 154.872781][ T5919] vxcan1 speed is unknown, defaulting to 1000 [ 154.894815][ T7963] infiniband syz2: added vxcan1 [ 154.904583][ T7794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.921610][ T7794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.946359][ T7794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.971196][ T7794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 154.981486][ T7794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 154.992219][ T7794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.002215][ T7794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 155.015656][ T7794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.027434][ T7794] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 155.043087][ T7794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.054725][ T7794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.067464][ T7794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.078188][ T7794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.088201][ T7794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.098961][ T7794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.126445][ T7963] RDS/IB: syz2: added [ 155.131115][ T7963] smc: adding ib device syz2 with port count 1 [ 155.144644][ T7794] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 155.163328][ T7963] smc: ib device syz2 port 1 has pnetid [ 155.169701][ T7794] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 155.171547][ T7794] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 155.224187][ T7994] netlink: 4 bytes leftover after parsing attributes in process `syz.4.615'. [ 155.247143][ T5889] vxcan1 speed is unknown, defaulting to 1000 [ 155.247574][ T7794] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.267956][ T7794] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.278003][ T7794] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.287177][ T7794] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 155.288684][ T8000] IPVS: set_ctl: invalid protocol: 136 0.0.0.0:20004 [ 155.307807][ T7963] vxcan1 speed is unknown, defaulting to 1000 [ 155.557599][ T8008] netlink: 'syz.3.620': attribute type 1 has an invalid length. [ 155.565997][ T2966] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.573848][ T2966] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.685102][ T5852] Bluetooth: hci0: command tx timeout [ 155.705225][ T2966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 155.717274][ T2966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 155.734283][ T8011] netlink: 'syz.1.621': attribute type 10 has an invalid length. [ 156.124297][ T7963] vxcan1 speed is unknown, defaulting to 1000 [ 156.303842][ T8039] sctp: [Deprecated]: syz.1.630 (pid 8039) Use of struct sctp_assoc_value in delayed_ack socket option. [ 156.303842][ T8039] Use struct sctp_sack_info instead [ 156.360737][ T8042] sctp: [Deprecated]: syz.4.631 (pid 8042) Use of struct sctp_assoc_value in delayed_ack socket option. [ 156.360737][ T8042] Use struct sctp_sack_info instead [ 156.611848][ T7963] vxcan1 speed is unknown, defaulting to 1000 [ 156.991180][ T7963] vxcan1 speed is unknown, defaulting to 1000 [ 157.196351][ T7963] vxcan1 speed is unknown, defaulting to 1000 [ 157.386560][ T7963] vxcan1 speed is unknown, defaulting to 1000 [ 157.553362][ T8057] netlink: 830 bytes leftover after parsing attributes in process `syz.3.634'. [ 157.581417][ T8057] netlink: 16 bytes leftover after parsing attributes in process `syz.3.634'. [ 157.638150][ T8059] syzkaller1: entered promiscuous mode [ 157.669199][ T8059] syzkaller1: entered allmulticast mode [ 157.737804][ T8062] netlink: 72 bytes leftover after parsing attributes in process `syz.4.637'. [ 157.905600][ T8065] netlink: 'syz.3.638': attribute type 21 has an invalid length. [ 157.913521][ T8065] netlink: 128 bytes leftover after parsing attributes in process `syz.3.638'. [ 157.923439][ T8065] netlink: 3 bytes leftover after parsing attributes in process `syz.3.638'. [ 157.965748][ T7963] vxcan1 speed is unknown, defaulting to 1000 [ 158.135826][ T8070] netlink: 8 bytes leftover after parsing attributes in process `syz.4.640'. [ 158.243221][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 158.258028][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 158.274751][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 158.282876][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 158.305709][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 158.491185][ T8085] A link change request failed with some changes committed already. Interface xfrm0 may have been left with an inconsistent configuration, please check. [ 158.580202][ T8080] vxcan1 speed is unknown, defaulting to 1000 [ 158.730373][ T8097] sit1: entered promiscuous mode [ 158.735769][ T8097] sit1: entered allmulticast mode [ 158.869747][ T8098] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551585) [ 158.903025][ T8098] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 159.000158][ T7963] vxcan1 speed is unknown, defaulting to 1000 [ 159.153836][ T8110] batadv_slave_1: default FDB implementation only supports local addresses [ 159.172248][ T8111] batadv_slave_1: default FDB implementation only supports local addresses [ 159.194177][ T8110] netlink: 104 bytes leftover after parsing attributes in process `syz.1.651'. [ 159.345476][ T8118] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 159.562234][ T8127] netlink: 24 bytes leftover after parsing attributes in process `syz.3.657'. [ 159.576053][ T8125] veth0_to_hsr: invalid flags given to default FDB implementation [ 159.804839][ T8080] chnl_net:caif_netlink_parms(): no params data found [ 159.905802][ T8140] netlink: 4 bytes leftover after parsing attributes in process `syz.3.661'. [ 160.118819][ T8148] 8021q: adding VLAN 0 to HW filter on device bond2 [ 160.127619][ T8148] bond0: (slave bond2): Enslaving as an active interface with an up link [ 160.233537][ T8080] bridge0: port 1(bridge_slave_0) entered blocking state [ 160.242919][ T8080] bridge0: port 1(bridge_slave_0) entered disabled state [ 160.251084][ T8080] bridge_slave_0: entered allmulticast mode [ 160.267539][ T8080] bridge_slave_0: entered promiscuous mode [ 160.296555][ T8080] bridge0: port 2(bridge_slave_1) entered blocking state [ 160.303744][ T8080] bridge0: port 2(bridge_slave_1) entered disabled state [ 160.320620][ T8080] bridge_slave_1: entered allmulticast mode [ 160.330918][ T5852] Bluetooth: hci0: command tx timeout [ 160.334529][ T8080] bridge_slave_1: entered promiscuous mode [ 160.560305][ T8080] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 160.616460][ T8167] bridge0: port 2(vlan2) entered blocking state [ 160.647589][ T8167] bridge0: port 2(vlan2) entered disabled state [ 160.674749][ T8167] vlan2: entered allmulticast mode [ 160.693723][ T8167] bridge0: entered allmulticast mode [ 160.701509][ T8181] Bluetooth: MGMT ver 1.23 [ 160.724838][ T8167] vlan2: left allmulticast mode [ 160.737653][ T8167] bridge0: left allmulticast mode [ 160.754175][ T8178] netlink: 12 bytes leftover after parsing attributes in process `syz.2.671'. [ 160.777862][ T8080] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 160.928905][ T8178] syz.2.671 (8178) used greatest stack depth: 17688 bytes left [ 160.994200][ T8080] team0: Port device team_slave_0 added [ 161.037208][ T8191] netlink: 104 bytes leftover after parsing attributes in process `syz.4.676'. [ 161.037420][ T8080] team0: Port device team_slave_1 added [ 161.191602][ T8080] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 161.201558][ T8080] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.215098][ T8193] sctp: [Deprecated]: syz.2.677 (pid 8193) Use of struct sctp_assoc_value in delayed_ack socket option. [ 161.215098][ T8193] Use struct sctp_sack_info instead [ 161.255166][ T8205] IPVS: set_ctl: invalid protocol: 103 127.0.0.1:20000 [ 161.284683][ T8080] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 161.313273][ T8080] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 161.339150][ T8080] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 161.420365][ T8080] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 161.584983][ T8221] netlink: 'syz.1.682': attribute type 1 has an invalid length. [ 161.695318][ T8227] netlink: 44 bytes leftover after parsing attributes in process `syz.2.681'. [ 161.708136][ T8080] hsr_slave_0: entered promiscuous mode [ 161.733095][ T8080] hsr_slave_1: entered promiscuous mode [ 161.741742][ T8080] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 161.749812][ T8080] Cannot create hsr debugfs directory [ 162.020275][ T8241] netlink: 8 bytes leftover after parsing attributes in process `syz.4.686'. [ 162.288046][ T8080] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.405027][ T5852] Bluetooth: hci0: command tx timeout [ 162.452643][ T8080] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.598333][ T8080] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.816799][ T8080] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 162.929528][ T8288] __nla_validate_parse: 3 callbacks suppressed [ 162.929548][ T8288] netlink: 8 bytes leftover after parsing attributes in process `syz.2.700'. [ 162.976081][ T8288] netlink: 20 bytes leftover after parsing attributes in process `syz.2.700'. [ 163.118868][ T8290] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 163.167421][ T8290] netlink: 144 bytes leftover after parsing attributes in process `syz.1.701'. [ 163.173545][ T8080] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 163.237964][ T8080] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 163.263139][ T8080] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 163.299073][ T8080] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 163.457168][ T8306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.704'. [ 163.505453][ T8306] netlink: 12 bytes leftover after parsing attributes in process `syz.4.704'. [ 163.627621][ T8080] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.691789][ T8080] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.739724][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.747004][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.822442][ T7363] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.829693][ T7363] bridge0: port 2(bridge_slave_1) entered forwarding state [ 164.352375][ T8349] netlink: 'syz.3.715': attribute type 4 has an invalid length. [ 164.372441][ T8349] netlink: 'syz.3.715': attribute type 1 has an invalid length. [ 164.389177][ T8349] netlink: 232 bytes leftover after parsing attributes in process `syz.3.715'. [ 164.485140][ T5852] Bluetooth: hci0: command tx timeout [ 164.568774][ T8080] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.582489][ T8355] netlink: 56 bytes leftover after parsing attributes in process `syz.3.718'. [ 164.603926][ T8355] netlink: 48 bytes leftover after parsing attributes in process `syz.3.718'. [ 164.673532][ T8080] veth0_vlan: entered promiscuous mode [ 164.682210][ T8361] netlink: 8 bytes leftover after parsing attributes in process `syz.4.717'. [ 164.716184][ T8080] veth1_vlan: entered promiscuous mode [ 164.803502][ T8364] tipc: Enabled bearer , priority 10 [ 164.852259][ T8080] veth0_macvtap: entered promiscuous mode [ 164.911790][ T8080] veth1_macvtap: entered promiscuous mode [ 164.976892][ T8080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 164.998287][ T8080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.018775][ T8080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.042210][ T8080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.058778][ T8080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.069632][ T8080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.109013][ T8080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.138904][ T8080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.153583][ T8080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 165.191537][ T8080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.193432][ T8382] netlink: 32 bytes leftover after parsing attributes in process `syz.1.725'. [ 165.214219][ T8080] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 165.277576][ T8080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.296987][ T8080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.307395][ T8080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.318105][ T8080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.328292][ T8080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.359238][ T8080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.381709][ T8080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.393098][ T8080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.403428][ T8080] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 165.415135][ T8080] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.426945][ T8080] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 165.476835][ T8080] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.489547][ T8080] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.498547][ T8080] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.507659][ T8080] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.806468][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.819683][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.856386][ T8411] netlink: 'syz.4.734': attribute type 1 has an invalid length. [ 165.881085][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 165.901885][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.987891][ T7363] smc: removing ib device syz2 [ 166.017922][ T5890] vxcan1 speed is unknown, defaulting to 1000 [ 166.021611][ T8422] netlink: 'syz.4.736': attribute type 1 has an invalid length. [ 166.031065][ T5890] syz2: Port: 1 Link DOWN [ 166.083214][ T8422] netlink: 'syz.4.736': attribute type 2 has an invalid length. [ 166.422692][ T8430] net veth1_virt_wifi : renamed from virt_wifi0 [ 166.573345][ T5847] Bluetooth: hci0: command tx timeout [ 166.802885][ T8442] netlink: 'syz.3.739': attribute type 10 has an invalid length. [ 166.831234][ T8442] team0: Cannot enslave team device to itself [ 167.011401][ T8449] syzkaller1: entered promiscuous mode [ 167.030662][ T8449] syzkaller1: entered allmulticast mode [ 167.238705][ T8455] batman_adv: batadv0: Adding interface: gretap0 [ 167.258924][ T8455] batman_adv: batadv0: Not using interface gretap0 (retrying later): interface not active [ 167.408828][ T8464] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 167.514264][ T8466] netlink: 'syz.4.747': attribute type 32 has an invalid length. [ 167.986883][ T8490] __nla_validate_parse: 7 callbacks suppressed [ 167.986907][ T8490] netlink: 12 bytes leftover after parsing attributes in process `syz.1.753'. [ 168.308537][ T8494] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 168.608019][ T8508] netlink: 'syz.4.760': attribute type 8 has an invalid length. [ 168.616556][ T8514] netlink: 'syz.4.760': attribute type 8 has an invalid length. [ 168.817846][ T8518] netlink: 16 bytes leftover after parsing attributes in process `syz.1.763'. [ 169.435483][ T8545] netlink: 240 bytes leftover after parsing attributes in process `syz.4.769'. [ 169.476683][ T8547] netlink: 'syz.3.772': attribute type 12 has an invalid length. [ 169.491824][ T8547] netlink: 132 bytes leftover after parsing attributes in process `syz.3.772'. [ 169.850683][ T8558] netlink: 40 bytes leftover after parsing attributes in process `syz.4.775'. [ 170.240526][ T8575] netlink: 4 bytes leftover after parsing attributes in process `syz.2.784'. [ 170.431326][ T8583] netlink: 256 bytes leftover after parsing attributes in process `syz.2.784'. [ 170.441176][ T8583] netlink: 'syz.2.784': attribute type 9 has an invalid length. [ 170.444646][ T3084] IPVS: starting estimator thread 0... [ 170.554531][ T8586] IPVS: using max 31 ests per chain, 74400 per kthread [ 171.907428][ T8600] netlink: 16 bytes leftover after parsing attributes in process `syz.1.791'. [ 171.994682][ T8608] veth0: entered promiscuous mode [ 172.031169][ T8611] netlink: 4 bytes leftover after parsing attributes in process `syz.1.793'. [ 172.078102][ T8611] erspan0: entered promiscuous mode [ 172.106058][ T8608] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 172.117028][ T8611] macvtap0: entered promiscuous mode [ 172.135740][ T8611] macvtap0: entered allmulticast mode [ 172.151359][ T8611] erspan0: entered allmulticast mode [ 172.163133][ T8607] veth0: left promiscuous mode [ 172.679670][ T8644] netlink: 'syz.4.802': attribute type 10 has an invalid length. [ 172.754163][ T8644] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 172.825418][ T8649] netlink: 8 bytes leftover after parsing attributes in process `syz.2.803'. [ 172.884132][ T30] audit: type=1804 audit(1743946159.452:2): pid=8652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz.4.804" name="/newroot/193/cgroup.controllers" dev="tmpfs" ino=1004 res=1 errno=0 [ 172.949139][ T30] audit: type=1800 audit(1743946159.452:3): pid=8652 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.4.804" name="cgroup.controllers" dev="tmpfs" ino=1004 res=0 errno=0 [ 173.013573][ T8656] Cannot find del_set index 65531 as target [ 173.044564][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 173.084896][ T8658] netlink: 'syz.1.808': attribute type 2 has an invalid length. [ 173.133917][ T8658] : entered promiscuous mode [ 173.146051][ T8661] __nla_validate_parse: 1 callbacks suppressed [ 173.146065][ T8661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.805'. [ 173.161871][ T8661] netlink: 8 bytes leftover after parsing attributes in process `syz.4.805'. [ 173.222019][ T8669] netlink: 'syz.3.809': attribute type 39 has an invalid length. [ 173.453924][ T8680] Cannot find map_set index 0 as target [ 173.510186][ T8685] netlink: 4 bytes leftover after parsing attributes in process `syz.4.814'. [ 173.595969][ T8694] netlink: 8 bytes leftover after parsing attributes in process `syz.1.816'. [ 173.632675][ T8697] netlink: 8 bytes leftover after parsing attributes in process `syz.1.816'. [ 173.814788][ T8705] netlink: 8 bytes leftover after parsing attributes in process `syz.1.819'. [ 173.830089][ T8706] netlink: 8 bytes leftover after parsing attributes in process `syz.1.819'. [ 173.841735][ T8708] dccp_v6_rcv: dropped packet with invalid checksum [ 173.858945][ T8705] netlink: 24 bytes leftover after parsing attributes in process `syz.1.819'. [ 173.883321][ T8708] dccp_v6_rcv: dropped packet with invalid checksum [ 173.892423][ T8712] netlink: 12 bytes leftover after parsing attributes in process `syz.3.822'. [ 173.896597][ T8706] netlink: 24 bytes leftover after parsing attributes in process `syz.1.819'. [ 173.929295][ T8711] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 173.932571][ T8708] dccp_v6_rcv: dropped packet with invalid checksum [ 173.945852][ T8708] dccp_v6_rcv: dropped packet with invalid checksum [ 173.995523][ T8708] dccp_v6_rcv: dropped packet with invalid checksum [ 174.003958][ T8708] dccp_v6_rcv: dropped packet with invalid checksum [ 174.020194][ T8708] dccp_v6_rcv: dropped packet with invalid checksum [ 174.037473][ T8712] bond0: (slave macvlan2): Error -98 calling set_mac_address [ 174.053559][ T8708] dccp_v6_rcv: dropped packet with invalid checksum [ 174.080503][ T8715] sch_fq: defrate 0 ignored. [ 174.097768][ T8715] sch_fq: defrate 0 ignored. [ 174.103063][ T8717] xfrm0 speed is unknown, defaulting to 1000 [ 174.122005][ T8715] sch_fq: defrate 0 ignored. [ 174.152959][ T8717] xfrm0 speed is unknown, defaulting to 1000 [ 174.161735][ T8715] sch_fq: defrate 0 ignored. [ 174.179605][ T8715] sch_fq: defrate 0 ignored. [ 174.206560][ T8717] xfrm0 speed is unknown, defaulting to 1000 [ 174.224839][ T8715] sch_fq: defrate 0 ignored. [ 174.240125][ T8715] sch_fq: defrate 0 ignored. [ 174.256285][ T8717] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 174.266737][ T8715] sch_fq: defrate 0 ignored. [ 174.277452][ T8715] sch_fq: defrate 0 ignored. [ 174.292447][ T8717] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 174.314151][ T8715] sch_fq: defrate 0 ignored. [ 174.428648][ T8717] xfrm0 speed is unknown, defaulting to 1000 [ 174.443399][ T8717] xfrm0 speed is unknown, defaulting to 1000 [ 174.461683][ T8717] xfrm0 speed is unknown, defaulting to 1000 [ 174.481223][ T8717] xfrm0 speed is unknown, defaulting to 1000 [ 174.504287][ T8717] xfrm0 speed is unknown, defaulting to 1000 [ 174.538241][ T8717] xfrm0 speed is unknown, defaulting to 1000 [ 174.551067][ T8717] xfrm0 speed is unknown, defaulting to 1000 [ 174.560461][ T8717] xfrm0 speed is unknown, defaulting to 1000 [ 174.580029][ T8717] xfrm0 speed is unknown, defaulting to 1000 [ 174.589955][ T8723] rdma_rxe: rxe_newlink: failed to add ipvlan1 [ 174.802299][ T8756] netlink: 'syz.1.835': attribute type 3 has an invalid length. [ 174.819668][ T8753] bridge0: port 3(batadv1) entered blocking state [ 174.834725][ T8753] bridge0: port 3(batadv1) entered disabled state [ 174.853860][ T8753] batadv1: entered allmulticast mode [ 174.881710][ T8753] batadv1: entered promiscuous mode [ 174.926930][ T8756] bridge0: port 2(batadv1) entered blocking state [ 174.950762][ T8756] bridge0: port 2(batadv1) entered disabled state [ 174.968775][ T8756] batadv1: entered allmulticast mode [ 174.986031][ T8756] batadv1: entered promiscuous mode [ 175.002666][ T8768] nbd: must specify an index to disconnect [ 175.319907][ T7363] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 175.329713][ T7363] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 175.405663][ T36] batman_adv: batadv1: No IGMP Querier present - multicast optimizations disabled [ 175.415224][ T36] batman_adv: batadv1: No MLD Querier present - multicast optimizations disabled [ 175.671739][ T8813] xfrm0 speed is unknown, defaulting to 1000 [ 175.808933][ T8825] netlink: 'syz.3.849': attribute type 10 has an invalid length. [ 175.826001][ T8825] team0: Cannot enslave team device to itself [ 176.103666][ T8840] syz_tun: entered allmulticast mode [ 176.128277][ T8844] x_tables: ip_tables: icmp match: only valid for protocol 1 [ 176.375568][ T8853] netlink: 'syz.1.859': attribute type 3 has an invalid length. [ 176.424040][ T8853] netlink: 'syz.1.859': attribute type 3 has an invalid length. [ 176.779325][ T8875] netlink: 'syz.3.864': attribute type 10 has an invalid length. [ 176.871394][ T8875] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 176.918727][ T8882] tipc: Started in network mode [ 176.923859][ T8882] tipc: Node identity ac1414aa, cluster identity 4711 [ 176.942035][ T8882] tipc: Enabled bearer , priority 10 [ 177.141610][ T8889] vlan2: entered allmulticast mode [ 177.153113][ T8889] bond0: entered allmulticast mode [ 177.159388][ T8889] bridge0: port 3(vlan2) entered blocking state [ 177.166062][ T8889] bridge0: port 3(vlan2) entered disabled state [ 177.174674][ T8889] vlan2: entered promiscuous mode [ 177.179829][ T8889] bond0: entered promiscuous mode [ 177.204500][ C1] net_ratelimit: 33 callbacks suppressed [ 177.204521][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 177.368462][ T8895] netlink: 'syz.1.872': attribute type 10 has an invalid length. [ 177.392008][ T8895] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 177.399455][ T8895] mac80211_hwsim hwsim3 wlan1: entered allmulticast mode [ 177.407549][ T8895] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 177.420228][ T13] bridge0: port 3(vlan2) entered blocking state [ 177.426709][ T13] bridge0: port 3(vlan2) entered forwarding state [ 177.755812][ T8903] af_packet: tpacket_rcv: packet too big, clamped from 28 to 4294967272. macoff=96 [ 177.768240][ T8903] IPVS: set_ctl: invalid protocol: 44 100.1.1.2:20003 [ 177.778700][ T8903] xt_ecn: cannot match TCP bits for non-tcp packets [ 178.044831][ T5919] tipc: Node number set to 2886997162 [ 178.234668][ T8923] veth0_to_hsr: entered promiscuous mode [ 178.244900][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 178.348008][ T8922] veth0_to_hsr: left promiscuous mode [ 178.431331][ T8933] vlan3: entered allmulticast mode [ 178.445648][ T8933] bond0: entered allmulticast mode [ 178.461503][ T8941] __nla_validate_parse: 9 callbacks suppressed [ 178.461523][ T8941] netlink: 4 bytes leftover after parsing attributes in process `syz.4.884'. [ 178.478165][ T8933] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 178.520828][ T8933] bond2: entered allmulticast mode [ 178.527932][ T8933] netdevsim netdevsim4 netdevsim0: entered allmulticast mode [ 178.561624][ T8933] bridge0: port 1(vlan3) entered blocking state [ 178.592166][ T8933] bridge0: port 1(vlan3) entered disabled state [ 178.614159][ T8933] vlan3: entered promiscuous mode [ 178.619439][ T8933] bond0: entered promiscuous mode [ 178.629930][ T8933] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 178.650125][ T8933] bond2: entered promiscuous mode [ 178.662349][ T8933] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 178.707265][ T8942] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 178.723169][ T8950] netlink: 40 bytes leftover after parsing attributes in process `syz.2.888'. [ 178.913778][ T8958] netlink: 'syz.1.891': attribute type 2 has an invalid length. [ 178.948584][ T8964] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:17 to non-existent VLAN 1280 [ 179.281319][ T8983] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x9 [ 179.294497][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 179.655910][ T8997] SET target dimension over the limit! [ 179.684124][ T8997] SET target dimension over the limit! [ 179.792499][ T9004] netlink: 64985 bytes leftover after parsing attributes in process `syz.4.902'. [ 179.988071][ T9012] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.334502][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 180.423977][ T9029] netlink: 12 bytes leftover after parsing attributes in process `syz.3.910'. [ 180.998722][ T9050] netlink: 8 bytes leftover after parsing attributes in process `syz.4.917'. [ 181.127927][ T9055] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 181.137811][ T9056] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 181.162938][ T9055] No such timeout policy "syz0" [ 181.170923][ T9053] rdma_op ffff88805f4699f0 conn xmit_rdma 0000000000000000 [ 181.374386][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 181.507429][ T9065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.925'. [ 181.526065][ T9065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.925'. [ 181.554657][ T9065] netlink: 10 bytes leftover after parsing attributes in process `syz.4.925'. [ 181.570942][ T9067] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 181.613764][ T9065] netlink: 8 bytes leftover after parsing attributes in process `syz.4.925'. [ 181.656093][ T9065] netlink: 4 bytes leftover after parsing attributes in process `syz.4.925'. [ 181.684753][ T5152] Bluetooth: hci4: command 0x0405 tx timeout [ 181.692191][ T9065] netlink: 'syz.4.925': attribute type 1 has an invalid length. [ 181.742699][ T9074] sctp: [Deprecated]: syz.2.928 (pid 9074) Use of struct sctp_assoc_value in delayed_ack socket option. [ 181.742699][ T9074] Use struct sctp_sack_info instead [ 182.000945][ T9082] IPVS: set_ctl: invalid protocol: 50 172.30.0.3:20001 [ 182.404390][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 182.680746][ T9105] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 182.687617][ T9105] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 182.958913][ T9116] gretap0: entered promiscuous mode [ 182.975106][ T9116] macsec0: entered promiscuous mode [ 183.009863][ T9116] gretap0: left promiscuous mode [ 183.454391][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 183.553227][ T9137] netlink: 'syz.4.946': attribute type 5 has an invalid length. [ 183.639223][ T9141] __nla_validate_parse: 7 callbacks suppressed [ 183.639244][ T9141] netlink: 4 bytes leftover after parsing attributes in process `syz.2.947'. [ 183.691826][ T9141] netlink: 8 bytes leftover after parsing attributes in process `syz.2.947'. [ 183.834991][ T9152] netlink: 16 bytes leftover after parsing attributes in process `syz.1.950'. [ 183.927344][ T9156] netlink: 20 bytes leftover after parsing attributes in process `syz.4.952'. [ 184.022141][ T9155] IPVS: set_ctl: invalid protocol: 8 172.20.20.52:20000 [ 184.102734][ T9156] netlink: 76 bytes leftover after parsing attributes in process `syz.4.952'. [ 184.484508][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 184.537128][ T9175] netlink: 8 bytes leftover after parsing attributes in process `syz.4.958'. [ 184.552447][ T9175] netlink: 12 bytes leftover after parsing attributes in process `syz.4.958'. [ 184.756632][ T9188] IPVS: lc: UDP 224.0.0.2:0 - no destination available [ 184.910970][ T9191] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 184.985217][ T9200] netlink: 4 bytes leftover after parsing attributes in process `syz.1.965'. [ 185.092105][ T9202] netlink: 8 bytes leftover after parsing attributes in process `syz.4.967'. [ 185.136833][ T9202] netlink: 52 bytes leftover after parsing attributes in process `syz.4.967'. [ 185.524520][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 185.642058][ T9228] netlink: 'syz.2.976': attribute type 8 has an invalid length. [ 185.890189][ T9236] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 185.927489][ T81] bridge0: port 3(vlan2) entered disabled state [ 186.488186][ T9257] bridge_slave_0: left allmulticast mode [ 186.493889][ T9257] bridge_slave_0: left promiscuous mode [ 186.546989][ T9257] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.565224][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 186.640897][ T9257] bridge_slave_1: left allmulticast mode [ 186.646913][ T9257] bridge_slave_1: left promiscuous mode [ 186.663470][ T9257] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.852685][ T9257] bond0: (slave bond_slave_0): Releasing backup interface [ 186.937917][ T9257] bond0: (slave bond_slave_1): Releasing backup interface [ 186.955803][ T9257] team_slave_0: left promiscuous mode [ 186.980948][ T9257] team0: Port device team_slave_0 removed [ 186.988821][ T9257] team_slave_1: left promiscuous mode [ 187.007966][ T9257] team0: Port device team_slave_1 removed [ 187.023019][ T9257] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.033080][ T9257] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 187.054183][ T9257] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 187.062806][ T9257] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 187.087365][ T9257] batadv1: left allmulticast mode [ 187.092583][ T9257] batadv1: left promiscuous mode [ 187.099091][ T9257] bridge0: port 3(batadv1) entered disabled state [ 187.144761][ T9251] team0: Mode changed to "loadbalance" [ 187.232611][ T3084] xfrm0 speed is unknown, defaulting to 1000 [ 187.256685][ T9272] netlink: 'syz.1.989': attribute type 4 has an invalid length. [ 187.459238][ T9278] geneve2: entered promiscuous mode [ 187.484872][ T9278] geneve2: entered allmulticast mode [ 187.504834][ T9283] netlink: 'syz.4.992': attribute type 32 has an invalid length. [ 187.601546][ T9279] geneve2: entered promiscuous mode [ 187.607097][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 187.622724][ T9279] geneve2: entered allmulticast mode [ 187.674980][ T9283] (unnamed net_device) (uninitialized): option coupled_control: invalid value (7) [ 187.859744][ T9070] Set syz1 is full, maxelem 65536 reached [ 188.069646][ T9303] syzkaller0: entered promiscuous mode [ 188.084957][ T9303] syzkaller0: entered allmulticast mode [ 188.270849][ T9315] vlan1: entered allmulticast mode [ 188.278045][ T9315] veth0_vlan: entered allmulticast mode [ 188.586269][ T9329] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 188.654614][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 189.171280][ T9352] __nla_validate_parse: 8 callbacks suppressed [ 189.171301][ T9352] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1009'. [ 189.187586][ T9352] netlink: 10 bytes leftover after parsing attributes in process `syz.4.1009'. [ 189.222886][ T9357] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1011'. [ 189.682621][ T9370] Cannot find add_set index 1 as target [ 189.688563][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 189.871248][ T9382] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1018'. [ 190.533731][ T9404] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1027'. [ 190.724666][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 190.742245][ T9410] bond0: (slave batadv0): Releasing backup interface [ 190.763300][ T9410] bridge_slave_0: left allmulticast mode [ 190.794649][ T9410] bridge_slave_0: left promiscuous mode [ 190.815071][ T9410] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.843541][ T9410] bridge_slave_1: left allmulticast mode [ 190.852545][ T9410] bridge_slave_1: left promiscuous mode [ 190.864105][ T9410] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.879581][ T9410] bond0: (slave bond_slave_0): Releasing backup interface [ 190.898990][ T9421] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1032'. [ 190.911410][ T9410] bond0: (slave bond_slave_1): Releasing backup interface [ 190.957763][ T9410] team0: Port device team_slave_0 removed [ 190.986545][ T9410] team0: Port device team_slave_1 removed [ 191.005320][ T9410] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 191.015518][ T9410] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 191.031377][ T9410] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 191.049545][ T9410] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 191.075211][ T9410] bond0: (slave wlan1): Releasing backup interface [ 191.142307][ T9419] team0: Mode "ø?õ)balance" not found [ 191.158043][ T9420] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1032'. [ 191.328156][ T9435] xt_hashlimit: overflow, try lower: 4294967295/0 [ 191.492571][ T9445] netlink: 'syz.3.1041': attribute type 1 has an invalid length. [ 191.511043][ T9445] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.1041'. [ 191.743979][ T9451] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1045'. [ 191.774813][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 191.943663][ T9463] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1047'. [ 191.986075][ T9465] syz.3.1049 uses old SIOCAX25GETINFO [ 192.109061][ T9470] (unnamed net_device) (uninitialized): option all_slaves_active: invalid value (222) [ 192.804595][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 193.844601][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 194.252838][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.259223][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.884819][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 195.924560][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 196.964561][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 198.004574][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 199.044502][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 200.084547][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 201.124541][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 202.164532][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 203.205039][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 204.244627][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 205.284554][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 206.324549][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 207.364518][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 207.552143][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 207.561552][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 207.569921][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 207.578876][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 207.587747][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 207.622403][ T9480] xfrm0 speed is unknown, defaulting to 1000 [ 207.794087][ T9480] chnl_net:caif_netlink_parms(): no params data found [ 207.902630][ T9480] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.910181][ T9480] bridge0: port 1(bridge_slave_0) entered disabled state [ 207.917807][ T9480] bridge_slave_0: entered allmulticast mode [ 207.929525][ T9480] bridge_slave_0: entered promiscuous mode [ 207.938584][ T9480] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.945904][ T9480] bridge0: port 2(bridge_slave_1) entered disabled state [ 207.953124][ T9480] bridge_slave_1: entered allmulticast mode [ 207.964247][ T9480] bridge_slave_1: entered promiscuous mode [ 208.003604][ T9480] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.019009][ T9480] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.065244][ T9480] team0: Port device team_slave_0 added [ 208.073399][ T9480] team0: Port device team_slave_1 added [ 208.111342][ T9480] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.118559][ T9480] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.145163][ T9480] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.161878][ T9480] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.169123][ T9480] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.195382][ T9480] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.258873][ T9480] hsr_slave_0: entered promiscuous mode [ 208.269401][ T9480] hsr_slave_1: entered promiscuous mode [ 208.276058][ T9480] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 208.283645][ T9480] Cannot create hsr debugfs directory [ 208.404509][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 208.443729][ T9480] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.521805][ T9480] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.602127][ T9480] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.663694][ T9480] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 208.789248][ T9480] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 208.799400][ T9480] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 208.811263][ T9480] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 208.831169][ T9480] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 208.927581][ T9480] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.951848][ T9480] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.969388][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.976617][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.999452][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.006640][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.242056][ T9480] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 209.292340][ T9480] veth0_vlan: entered promiscuous mode [ 209.310747][ T9480] veth1_vlan: entered promiscuous mode [ 209.349730][ T9480] veth0_macvtap: entered promiscuous mode [ 209.362504][ T9480] veth1_macvtap: entered promiscuous mode [ 209.386600][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.400257][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.410843][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.421447][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.431426][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.442018][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.444555][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 209.452185][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 209.469306][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.480677][ T9480] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 209.502711][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.514253][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.524526][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.537930][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.547877][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.558448][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.568381][ T9480] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.578885][ T9480] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.590308][ T9480] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 209.609231][ T5852] Bluetooth: hci0: command tx timeout [ 209.632108][ T9480] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.646943][ T9480] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.664529][ T9480] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.673269][ T9480] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.805654][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.813531][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.861495][ T2959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.874380][ T2959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.484615][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 211.524970][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 212.346523][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 212.355281][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 212.365324][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 212.373964][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 212.382924][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 212.423195][ T9494] xfrm0 speed is unknown, defaulting to 1000 [ 212.564532][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 212.602012][ T9494] chnl_net:caif_netlink_parms(): no params data found [ 212.697612][ T9494] bridge0: port 1(bridge_slave_0) entered blocking state [ 212.705767][ T9494] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.713031][ T9494] bridge_slave_0: entered allmulticast mode [ 212.720482][ T9494] bridge_slave_0: entered promiscuous mode [ 212.729905][ T9494] bridge0: port 2(bridge_slave_1) entered blocking state [ 212.737479][ T9494] bridge0: port 2(bridge_slave_1) entered disabled state [ 212.745625][ T9494] bridge_slave_1: entered allmulticast mode [ 212.754060][ T9494] bridge_slave_1: entered promiscuous mode [ 212.796464][ T9494] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 212.810275][ T9494] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 212.856350][ T9494] team0: Port device team_slave_0 added [ 212.865968][ T9494] team0: Port device team_slave_1 added [ 212.905922][ T9494] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 212.912916][ T9494] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.939446][ T9494] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 212.953702][ T9494] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 212.961327][ T9494] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 212.989883][ T9494] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 213.045088][ T9494] hsr_slave_0: entered promiscuous mode [ 213.051624][ T9494] hsr_slave_1: entered promiscuous mode [ 213.058349][ T9494] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 213.066309][ T9494] Cannot create hsr debugfs directory [ 213.229206][ T9494] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.302271][ T9494] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.385001][ T9494] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.442390][ T9494] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.582490][ T9494] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 213.594755][ T9494] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 213.604522][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 213.624437][ T9494] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 213.635531][ T9494] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 213.729936][ T9494] 8021q: adding VLAN 0 to HW filter on device bond0 [ 213.753492][ T9494] 8021q: adding VLAN 0 to HW filter on device team0 [ 213.769616][ T2959] bridge0: port 1(bridge_slave_0) entered blocking state [ 213.776812][ T2959] bridge0: port 1(bridge_slave_0) entered forwarding state [ 213.798953][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 213.806134][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.022655][ T9494] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 214.071507][ T9494] veth0_vlan: entered promiscuous mode [ 214.083437][ T9494] veth1_vlan: entered promiscuous mode [ 214.124325][ T9494] veth0_macvtap: entered promiscuous mode [ 214.136061][ T9494] veth1_macvtap: entered promiscuous mode [ 214.154123][ T9494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.168049][ T9494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.179045][ T9494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.189698][ T9494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.201882][ T9494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.212975][ T9494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.222899][ T9494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.233708][ T9494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.243652][ T9494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 214.254598][ T9494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.266375][ T9494] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 214.284836][ T9494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.296784][ T9494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.310242][ T9494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.321211][ T9494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.332228][ T9494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.342846][ T9494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.352753][ T9494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.363437][ T9494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.373331][ T9494] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 214.383901][ T9494] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 214.395561][ T9494] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 214.408479][ T5847] Bluetooth: hci0: command tx timeout [ 214.421293][ T9494] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.430747][ T9494] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.442424][ T9494] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.452691][ T9494] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.532626][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.550512][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.585736][ T2959] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.593613][ T2959] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.644589][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 215.684641][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 216.724521][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 216.807648][ T55] Bluetooth: hci2: command 0x0406 tx timeout [ 216.809933][ T5849] Bluetooth: hci1: command 0x0406 tx timeout [ 216.813867][ T5842] Bluetooth: hci3: command 0x0406 tx timeout [ 217.473393][ T5152] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 217.484637][ T5152] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 217.492967][ T5152] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 217.501602][ T5152] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 217.509681][ T5152] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 217.550130][ T9508] xfrm0 speed is unknown, defaulting to 1000 [ 217.710539][ T9508] chnl_net:caif_netlink_parms(): no params data found [ 217.764654][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 217.805999][ T9508] bridge0: port 1(bridge_slave_0) entered blocking state [ 217.813164][ T9508] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.821822][ T9508] bridge_slave_0: entered allmulticast mode [ 217.830004][ T9508] bridge_slave_0: entered promiscuous mode [ 217.839068][ T9508] bridge0: port 2(bridge_slave_1) entered blocking state [ 217.847090][ T9508] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.855857][ T9508] bridge_slave_1: entered allmulticast mode [ 217.863158][ T9508] bridge_slave_1: entered promiscuous mode [ 217.907918][ T9508] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 217.920715][ T9508] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 217.965946][ T9508] team0: Port device team_slave_0 added [ 217.974833][ T9508] team0: Port device team_slave_1 added [ 218.023381][ T9508] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.030812][ T9508] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.056937][ T9508] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.070572][ T9508] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.078124][ T9508] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.108602][ T9508] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.162478][ T9508] hsr_slave_0: entered promiscuous mode [ 218.169595][ T9508] hsr_slave_1: entered promiscuous mode [ 218.176567][ T9508] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 218.184140][ T9508] Cannot create hsr debugfs directory [ 218.331675][ T9508] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.406103][ T9508] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.470468][ T9508] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.534188][ T9508] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.671002][ T9508] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 218.681129][ T9508] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 218.693399][ T9508] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 218.703484][ T9508] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 218.804532][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 218.820636][ T9508] 8021q: adding VLAN 0 to HW filter on device bond0 [ 218.842933][ T9508] 8021q: adding VLAN 0 to HW filter on device team0 [ 218.862408][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.869560][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 218.893556][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.900748][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 219.123210][ T9508] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 219.179615][ T9508] veth0_vlan: entered promiscuous mode [ 219.192053][ T9508] veth1_vlan: entered promiscuous mode [ 219.240410][ T9508] veth0_macvtap: entered promiscuous mode [ 219.251485][ T9508] veth1_macvtap: entered promiscuous mode [ 219.272633][ T9508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.283920][ T9508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.295482][ T9508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.306091][ T9508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.316147][ T9508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.331547][ T9508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.341857][ T9508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.352328][ T9508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.362734][ T9508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.377147][ T9508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.387146][ T9508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 219.397791][ T9508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.409824][ T9508] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 219.429391][ T9508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.440163][ T9508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.452925][ T9508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.463919][ T9508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.474950][ T9508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.485532][ T9508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.495665][ T9508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.506183][ T9508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.516473][ T9508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.529352][ T9508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.539602][ T9508] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 219.550199][ T9508] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 219.562279][ T9508] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 219.576879][ T9508] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.585819][ T9508] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.594912][ T9508] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.603628][ T9508] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 219.616105][ T5152] Bluetooth: hci0: command tx timeout [ 219.692950][ T7363] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.710370][ T7363] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.742788][ T7363] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 219.752596][ T7363] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 219.856350][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 220.884531][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 221.924585][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 222.416307][ T9533] netdevsim netdevsim3: Direct firmware load for . [ 222.416307][ T9533] failed with error -2 [ 222.457759][ T9533] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 222.457759][ T9533] [ 222.512389][ T9539] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 222.553374][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 222.563387][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 222.572846][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 222.583200][ T5847] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 222.596021][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 222.596744][ T9539] netlink: 'syz.1.1060': attribute type 10 has an invalid length. [ 222.642736][ T9545] netlink: 'syz.1.1060': attribute type 10 has an invalid length. [ 222.713362][ T9540] xfrm0 speed is unknown, defaulting to 1000 [ 222.959953][ T9555] __nla_validate_parse: 2 callbacks suppressed [ 222.959977][ T9555] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1062'. [ 222.966475][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 222.990868][ T9556] netlink: 'syz.2.1064': attribute type 13 has an invalid length. [ 222.999119][ T9556] netlink: 'syz.2.1064': attribute type 58 has an invalid length. [ 223.009429][ T9556] netlink: 152 bytes leftover after parsing attributes in process `syz.2.1064'. [ 223.171627][ T9540] chnl_net:caif_netlink_parms(): no params data found [ 223.567086][ T9564] xfrm0 speed is unknown, defaulting to 1000 [ 223.753788][ T9540] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.772961][ T9540] bridge0: port 1(bridge_slave_0) entered disabled state [ 223.786334][ T9540] bridge_slave_0: entered allmulticast mode [ 223.813422][ T9540] bridge_slave_0: entered promiscuous mode [ 223.872829][ T9540] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.880443][ T9540] bridge0: port 2(bridge_slave_1) entered disabled state [ 223.915260][ T9540] bridge_slave_1: entered allmulticast mode [ 223.924017][ T9540] bridge_slave_1: entered promiscuous mode [ 224.004560][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 224.049851][ T9540] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 224.185461][ T9540] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 224.264208][ T9603] bridge0: port 2(30ªî{X¹¦) entered blocking state [ 224.273392][ T9603] bridge0: port 2(30ªî{X¹¦) entered disabled state [ 224.294867][ T9603] 0ªî{X¹¦: entered promiscuous mode [ 224.316600][ T9540] team0: Port device team_slave_0 added [ 224.403582][ T9540] team0: Port device team_slave_1 added [ 224.542099][ T9618] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1078'. [ 224.569946][ T9540] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 224.596573][ T9540] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.628567][ T9622] Bluetooth: MGMT ver 1.23 [ 224.634259][ T9540] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 224.660643][ T5152] Bluetooth: hci0: command tx timeout [ 224.696398][ T9540] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 224.720776][ T9540] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 224.768422][ T9540] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 224.881255][ T9540] hsr_slave_0: entered promiscuous mode [ 224.899893][ T9540] hsr_slave_1: entered promiscuous mode [ 224.915031][ T9540] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 224.932862][ T9540] Cannot create hsr debugfs directory [ 225.044889][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 225.045182][ C0] Unknown status report in ack skb [ 225.062199][ T9636] netlink: 'syz.3.1085': attribute type 1 has an invalid length. [ 225.094540][ T9636] netlink: 244 bytes leftover after parsing attributes in process `syz.3.1085'. [ 225.111092][ T9636] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1085'. [ 225.420732][ T9647] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 225.429376][ T9647] vcan0: tx drop: invalid da for name 0x0000000000000002 [ 225.446725][ T9647] No such timeout policy "syz0" [ 225.525440][ T9652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1090'. [ 225.593106][ T9540] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.745287][ T9540] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.788578][ T9662] netlink: 'syz.2.1093': attribute type 9 has an invalid length. [ 225.797116][ T9662] netlink: 'syz.2.1093': attribute type 6 has an invalid length. [ 225.872877][ T9540] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 225.936427][ T9668] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 226.022983][ T9540] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.084536][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 226.287260][ T9675] IPVS: persistence engine module ip_vs_pe_À not found [ 226.330001][ T9682] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1101'. [ 226.415120][ T9682] bridge0: entered promiscuous mode [ 226.435883][ T9682] macvlan2: entered promiscuous mode [ 226.497886][ T9540] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 226.559573][ T9692] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1106'. [ 226.584101][ T9692] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1106'. [ 226.594823][ T9540] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 226.611895][ T9540] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 226.664623][ T9540] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 226.683577][ T9698] IPv6: sit1: Disabled Multicast RS [ 226.706592][ T9698] sit1: entered allmulticast mode [ 226.727491][ T5847] Bluetooth: hci0: command tx timeout [ 226.810171][ T9702] IPv6: sit1: Disabled Multicast RS [ 226.844131][ T9702] sit1: entered allmulticast mode [ 227.044428][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 227.125444][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 227.279241][ T9540] 8021q: adding VLAN 0 to HW filter on device bond0 [ 227.315785][ T9726] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1115'. [ 227.336180][ T9540] 8021q: adding VLAN 0 to HW filter on device team0 [ 227.351331][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.359021][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 227.390005][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.397295][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 228.037339][ T9540] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.165784][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 228.210705][ T9540] veth0_vlan: entered promiscuous mode [ 228.247362][ T9756] __nla_validate_parse: 1 callbacks suppressed [ 228.247386][ T9756] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1123'. [ 228.271285][ T9540] veth1_vlan: entered promiscuous mode [ 228.276611][ T9758] netlink: 'syz.2.1124': attribute type 11 has an invalid length. [ 228.316505][ T9756] netlink: 'syz.4.1123': attribute type 3 has an invalid length. [ 228.382480][ T9540] veth0_macvtap: entered promiscuous mode [ 228.433359][ T9540] veth1_macvtap: entered promiscuous mode [ 228.482789][ T9761] netlink: 'syz.1.1125': attribute type 21 has an invalid length. [ 228.509939][ T9540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.515444][ T9761] netlink: 'syz.1.1125': attribute type 11 has an invalid length. [ 228.529182][ T9766] netlink: 'syz.2.1126': attribute type 10 has an invalid length. [ 228.553779][ T9540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.577942][ T9540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.600262][ T9540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.630615][ T9540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.644086][ T9540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.668822][ T9540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.707227][ T9540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.744472][ T9540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.778533][ T9540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.797728][ T9540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.810196][ T9540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.816162][ T5152] Bluetooth: hci0: command tx timeout [ 228.821501][ T9540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 228.836572][ T9540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 228.850891][ T9540] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 228.860974][ T9766] vlan0: entered allmulticast mode [ 228.881048][ T9766] vlan0: entered promiscuous mode [ 228.890089][ T9766] team0: Port device vlan0 added [ 229.091277][ T9540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.102746][ T9540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.113998][ T9540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.134849][ T9540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.160346][ T9540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.176348][ T9540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.194412][ T9540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.204705][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 229.214391][ T9540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.224883][ T9540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.235711][ T9540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.251404][ T9540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.281490][ T9540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.294073][ T9540] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 229.314347][ T9540] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 229.336177][ T9540] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.447057][ T9540] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.474626][ T9540] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.483396][ T9540] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.534357][ T9540] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.585107][ T9797] nftables ruleset with unbound set [ 229.878565][ T9814] bridge: RTM_NEWNEIGH with invalid state 0x4 [ 229.960893][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.003061][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.128611][ T9805] tipc: Enabling of bearer rejected, media not registered [ 230.218021][ T2966] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 230.244505][ C1] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 230.246563][ T2966] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 230.570507][ T9540] ------------[ cut here ]------------ [ 230.578716][ T9540] refcount_t: underflow; use-after-free. [ 230.586549][ T9540] WARNING: CPU: 1 PID: 9540 at lib/refcount.c:28 refcount_warn_saturate+0x15a/0x1d0 [ 230.597486][ T9540] Modules linked in: [ 230.601835][ T9540] CPU: 1 UID: 0 PID: 9540 Comm: syz-executor Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 230.613821][ T9540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 230.624170][ T9540] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 230.630415][ T9540] Code: 60 65 a1 8c e8 87 b2 7d fc 90 0f 0b 90 90 eb 99 e8 4b 92 be fc c6 05 fa 03 45 0b 01 90 48 c7 c7 c0 65 a1 8c e8 67 b2 7d fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 28 92 be fc c6 05 d4 03 45 0b 01 90 [ 230.650211][ T9540] RSP: 0000:ffffc9000b2577b8 EFLAGS: 00010246 [ 230.656533][ T9540] RAX: 957cd1ebdeeceb00 RBX: ffff88805f4f7c78 RCX: ffff88802ea78000 [ 230.664767][ T9540] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 230.672796][ T9540] RBP: 0000000000000003 R08: ffffffff81827a12 R09: fffffbfff1d7a978 [ 230.680897][ T9540] R10: dffffc0000000000 R11: fffffbfff1d7a978 R12: ffff88805f4f7c60 [ 230.690669][ T9540] R13: ffff88802ea78000 R14: ffff88807d192800 R15: ffff88805f4f7c60 [ 230.700052][ T9540] FS: 0000000000000000(0000) GS:ffff888125096000(0000) knlGS:0000000000000000 [ 230.709292][ T9540] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 230.712258][ T9848] netlink: 'syz.1.1146': attribute type 1 has an invalid length. [ 230.715942][ T9540] CR2: 00007f0f49b54e00 CR3: 0000000067bd2000 CR4: 00000000003526f0 [ 230.716074][ T9540] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 230.716089][ T9540] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 230.716121][ T9540] Call Trace: [ 230.716130][ T9540] [ 230.716142][ T9540] klist_dec_and_del+0x3ec/0x3f0 [ 230.716177][ T9540] ? __pfx_klist_children_put+0x10/0x10 [ 230.716225][ T9540] klist_remove+0x229/0x3f0 [ 230.716248][ T9540] ? __pfx_klist_children_put+0x10/0x10 [ 230.716279][ T9540] ? __pfx_klist_remove+0x10/0x10 [ 230.716306][ T9540] ? __pfx_kobject_move+0x10/0x10 [ 230.716336][ T9540] ? get_device_parent+0x25d/0x410 [ 230.716363][ T9540] device_move+0x1b4/0x710 [ 230.798304][ T9540] ? hci_conn_unlink+0x5a2/0x630 [ 230.803303][ T9540] hci_conn_del_sysfs+0xb5/0x170 [ 230.811564][ T9540] hci_conn_del+0x8d5/0xc50 [ 230.816214][ T9540] hci_conn_hash_flush+0x18e/0x240 [ 230.821393][ T9540] hci_dev_close_sync+0xa8d/0x1260 [ 230.826750][ T9540] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 230.832346][ T9540] ? rcu_is_watching+0x15/0xb0 [ 230.837256][ T9540] hci_unregister_dev+0x20b/0x510 [ 230.842328][ T9540] vhci_release+0x80/0xd0 [ 230.846771][ T9540] ? __pfx_vhci_release+0x10/0x10 [ 230.851847][ T9540] __fput+0x3e9/0x9f0 [ 230.856021][ T9540] task_work_run+0x251/0x310 [ 230.860673][ T9540] ? __pfx_task_work_run+0x10/0x10 [ 230.865880][ T9540] ? do_exit+0xa0c/0x27f0 [ 230.870268][ T9540] ? do_exit+0xa0c/0x27f0 [ 230.874737][ T9540] do_exit+0xa11/0x27f0 [ 230.878970][ T9540] ? __pfx_do_exit+0x10/0x10 [ 230.883631][ T9540] ? _raw_spin_unlock_irq+0x23/0x50 [ 230.889319][ T9540] ? lockdep_hardirqs_on+0x9d/0x150 [ 230.896307][ T9540] do_group_exit+0x207/0x2c0 [ 230.900964][ T9540] __x64_sys_exit_group+0x3f/0x40 [ 230.901982][ T5152] Bluetooth: hci0: command tx timeout [ 230.907363][ T9540] x64_sys_call+0x26c3/0x26d0 [ 230.916368][ T9540] do_syscall_64+0xf3/0x230 [ 230.920919][ T9540] ? clear_bhb_loop+0x45/0xa0 [ 230.925729][ T9540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 230.931658][ T9540] RIP: 0033:0x7fcc60f8d169 [ 230.936199][ T9540] Code: Unable to access opcode bytes at 0x7fcc60f8d13f. [ 230.936843][ T9849] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1146'. [ 230.943224][ T9540] RSP: 002b:00007ffc2a566598 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 230.943255][ T9540] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcc60f8d169 [ 230.943270][ T9540] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 230.943283][ T9540] RBP: 00007fcc60fed8d0 R08: 00007ffc2a564337 R09: 0000000000000003 [ 230.985362][ T9540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 230.993375][ T9540] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffc2a566750 [ 231.003179][ T9540] [ 231.008169][ T9540] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 231.015497][ T9540] CPU: 1 UID: 0 PID: 9540 Comm: syz-executor Not tainted 6.14.0-syzkaller-13305-g61f96e684edd #0 PREEMPT(full) [ 231.027336][ T9540] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 231.037438][ T9540] Call Trace: [ 231.040833][ T9540] [ 231.043807][ T9540] dump_stack_lvl+0x241/0x360 [ 231.048623][ T9540] ? __pfx_dump_stack_lvl+0x10/0x10 [ 231.053854][ T9540] ? __pfx__printk+0x10/0x10 [ 231.058483][ T9540] ? vscnprintf+0x5d/0x90 [ 231.062856][ T9540] panic+0x349/0x880 [ 231.066804][ T9540] ? __warn+0x174/0x4d0 [ 231.071016][ T9540] ? __pfx_panic+0x10/0x10 [ 231.075495][ T9540] __warn+0x344/0x4d0 [ 231.079513][ T9540] ? refcount_warn_saturate+0x15a/0x1d0 [ 231.085099][ T9540] report_bug+0x2b3/0x500 [ 231.089456][ T9540] ? refcount_warn_saturate+0x15a/0x1d0 [ 231.095035][ T9540] ? refcount_warn_saturate+0x15a/0x1d0 [ 231.100621][ T9540] ? refcount_warn_saturate+0x15c/0x1d0 [ 231.106212][ T9540] handle_bug+0x89/0x170 [ 231.110493][ T9540] exc_invalid_op+0x1a/0x50 [ 231.115028][ T9540] asm_exc_invalid_op+0x1a/0x20 [ 231.119903][ T9540] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 231.126075][ T9540] Code: 60 65 a1 8c e8 87 b2 7d fc 90 0f 0b 90 90 eb 99 e8 4b 92 be fc c6 05 fa 03 45 0b 01 90 48 c7 c7 c0 65 a1 8c e8 67 b2 7d fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 28 92 be fc c6 05 d4 03 45 0b 01 90 [ 231.145690][ T9540] RSP: 0000:ffffc9000b2577b8 EFLAGS: 00010246 [ 231.151771][ T9540] RAX: 957cd1ebdeeceb00 RBX: ffff88805f4f7c78 RCX: ffff88802ea78000 [ 231.159749][ T9540] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 231.167728][ T9540] RBP: 0000000000000003 R08: ffffffff81827a12 R09: fffffbfff1d7a978 [ 231.175703][ T9540] R10: dffffc0000000000 R11: fffffbfff1d7a978 R12: ffff88805f4f7c60 [ 231.183679][ T9540] R13: ffff88802ea78000 R14: ffff88807d192800 R15: ffff88805f4f7c60 [ 231.191661][ T9540] ? __warn_printk+0x2a2/0x360 [ 231.196462][ T9540] ? refcount_warn_saturate+0x159/0x1d0 [ 231.202023][ T9540] klist_dec_and_del+0x3ec/0x3f0 [ 231.206996][ T9540] ? __pfx_klist_children_put+0x10/0x10 [ 231.212559][ T9540] klist_remove+0x229/0x3f0 [ 231.217068][ T9540] ? __pfx_klist_children_put+0x10/0x10 [ 231.222624][ T9540] ? __pfx_klist_remove+0x10/0x10 [ 231.227672][ T9540] ? __pfx_kobject_move+0x10/0x10 [ 231.232707][ T9540] ? get_device_parent+0x25d/0x410 [ 231.237828][ T9540] device_move+0x1b4/0x710 [ 231.242263][ T9540] ? hci_conn_unlink+0x5a2/0x630 [ 231.247206][ T9540] hci_conn_del_sysfs+0xb5/0x170 [ 231.252165][ T9540] hci_conn_del+0x8d5/0xc50 [ 231.256678][ T9540] hci_conn_hash_flush+0x18e/0x240 [ 231.261816][ T9540] hci_dev_close_sync+0xa8d/0x1260 [ 231.266965][ T9540] ? __pfx_hci_dev_close_sync+0x10/0x10 [ 231.272514][ T9540] ? rcu_is_watching+0x15/0xb0 [ 231.277285][ T9540] hci_unregister_dev+0x20b/0x510 [ 231.282313][ T9540] vhci_release+0x80/0xd0 [ 231.286649][ T9540] ? __pfx_vhci_release+0x10/0x10 [ 231.291680][ T9540] __fput+0x3e9/0x9f0 [ 231.295674][ T9540] task_work_run+0x251/0x310 [ 231.300283][ T9540] ? __pfx_task_work_run+0x10/0x10 [ 231.305417][ T9540] ? do_exit+0xa0c/0x27f0 [ 231.309805][ T9540] ? do_exit+0xa0c/0x27f0 [ 231.314163][ T9540] do_exit+0xa11/0x27f0 [ 231.318341][ T9540] ? __pfx_do_exit+0x10/0x10 [ 231.322958][ T9540] ? _raw_spin_unlock_irq+0x23/0x50 [ 231.328161][ T9540] ? lockdep_hardirqs_on+0x9d/0x150 [ 231.333368][ T9540] do_group_exit+0x207/0x2c0 [ 231.337977][ T9540] __x64_sys_exit_group+0x3f/0x40 [ 231.343011][ T9540] x64_sys_call+0x26c3/0x26d0 [ 231.347693][ T9540] do_syscall_64+0xf3/0x230 [ 231.352203][ T9540] ? clear_bhb_loop+0x45/0xa0 [ 231.356890][ T9540] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 231.362786][ T9540] RIP: 0033:0x7fcc60f8d169 [ 231.367209][ T9540] Code: Unable to access opcode bytes at 0x7fcc60f8d13f. [ 231.374228][ T9540] RSP: 002b:00007ffc2a566598 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 231.382660][ T9540] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007fcc60f8d169 [ 231.390640][ T9540] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 231.398614][ T9540] RBP: 00007fcc60fed8d0 R08: 00007ffc2a564337 R09: 0000000000000003 [ 231.406605][ T9540] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 231.414593][ T9540] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffc2a566750 [ 231.422607][ T9540] [ 231.425788][ T9540] Kernel Offset: disabled [ 231.430112][ T9540] Rebooting in 86400 seconds..