last executing test programs: 1m45.044982642s ago: executing program 4 (id=421): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e24, @multicast2}, 0x10) connect$inet(r0, &(0x7f00000009c0)={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x21}}, 0x10) r1 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000080)={0x28, 0x0, 0x0, @local}, 0x10) connect$vsock_stream(r1, &(0x7f00000000c0), 0x10) writev(r0, &(0x7f0000000200)=[{&(0x7f00000000c0)='X', 0x8030000}], 0x1) shutdown(r0, 0x1) r2 = socket(0x22, 0x2, 0x3) ioctl$IMGETCOUNT(r2, 0x80044943, &(0x7f00000003c0)) ioctl$sock_inet_udp_SIOCOUTQ(r2, 0x5411, &(0x7f0000000000)) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=ANY=[], 0x50) r3 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$sock_int(r3, 0x1, 0x8, 0x0, 0x0) close(0x3) 1m44.732876851s ago: executing program 4 (id=424): r0 = socket(0x2, 0x5, 0x0) sendmmsg$inet_sctp(r0, &(0x7f00000032c0)=[{&(0x7f0000002e40)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) sendmmsg$inet_sctp(r0, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000000002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) (async) sendmmsg$inet_sctp(r0, &(0x7f0000000bc0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000001c0)=[{0x0, 0x2}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="30000000000000008400000001000000000000000c0000000000000000002b0388edb6556900"/51, @ANYRES32=0x0], 0x30}], 0x1, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000000)={r0, 0xe5, 0x25e, 0x101}) r2 = socket$inet6(0xa, 0x5, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r3, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000240)={r4}, &(0x7f00000001c0)=0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={r4, 0x2}, 0x8) (async) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r1, 0x84, 0x75, &(0x7f0000000040)={r4, 0x2}, 0x8) 1m44.468449833s ago: executing program 4 (id=430): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000440), r3) sendmsg$IEEE802154_LLSEC_ADD_DEV(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000580)={0x44, r4, 0x8406f989402a7621, 0x0, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_FRAME_COUNTER={0x8}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_LLSEC_DEV_OVERRIDE={0x5}, @IEEE802154_ATTR_LLSEC_DEV_KEY_MODE={0x5, 0x37, 0x2}]}, 0x44}}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r3) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000001c0)={&(0x7f00000000c0)={0xd0, r5, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@NL802154_ATTR_SEC_OUT_LEVEL={0x8}, @NL802154_ATTR_SEC_FRAME_COUNTER={0x8, 0x2c, 0x4}, @NL802154_ATTR_SEC_OUT_KEY_ID={0xac, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x7}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x81}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0xffff}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x34, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0x3}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x18, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}]}]}, 0xd0}, 0x1, 0x0, 0x0, 0x80}, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56141, 0x0, 0x2, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x2c000}, 0x0) 1m44.362211939s ago: executing program 4 (id=431): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet_dccp(0x2, 0x6, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x10d}]}, 0x108) (async) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000340)=@filter={'filter\x00', 0xe, 0x0, 0x90, [0x0, 0x20000100, 0x20000130, 0x20000160], 0x0, 0x0, &(0x7f0000000100)=[{0x0, '\x00', 0x0, 0xfffffffffffffffe}, {0x0, '\x00', 0x0, 0xffffffffffffffff}, {0x0, '\x00', 0x0, 0xffffffffffffffff, 0x10d}]}, 0x108) ioctl$FS_IOC_SETFSLABEL(r0, 0x8911, &(0x7f0000000000)="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") 1m44.212297884s ago: executing program 4 (id=434): r0 = socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, 0x0, 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, 0x0) (async) ioctl$TUNSETQUEUE(r1, 0x400454d9, 0x0) ioctl$sock_inet_SIOCSIFADDR(r0, 0x8916, 0x0) (async) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r2, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='X\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="090d2000000000f0ff000700000008000300", @ANYRES32=r4, @ANYBLOB="0800051d000000001400060076657468115f746f5f7465616d0000000400cc0008000500040000001400040073"], 0x58}, 0x1, 0x0, 0x0, 0x40000}, 0x0) close(0x4) (async) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, 0x0, 0x0) (async) socket$kcm(0x10, 0x2, 0x0) (async) r5 = socket$kcm(0x2, 0x5, 0x84) sendmsg$inet(r5, &(0x7f0000002980)={&(0x7f0000000180)={0x2, 0x0, @dev}, 0x10, &(0x7f0000001400)=[{&(0x7f0000001800)='_', 0x1}], 0x1}, 0x4000000) setsockopt$sock_attach_bpf(r5, 0x84, 0x1e, &(0x7f0000000000), 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000dd0a00000000000073013700000000009500000200000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0xb5, 0x10, &(0x7f0000000000), 0x7, 0x0, 0xffffffffffffffff, 0x68000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$sock_inet_SIOCSIFADDR(r0, 0x891c, &(0x7f0000000540)={'batadv_slave_1\x00', {0x2, 0x0, @private=0xfffffffe}}) 1m44.03489054s ago: executing program 4 (id=437): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}}, 0x18) bind$can_j1939(r1, &(0x7f0000000280)={0x1d, r3, 0x0, {0x0, 0xff, 0x2}, 0xff}, 0x18) connect$can_j1939(r4, &(0x7f0000000200)={0x1d, r3, 0x3, {0x2, 0xfd}}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000300)="dab99e6631a4fbdeb772f0e8a14e90fbb6156d17373ecfe4c0cdc8f1b642f064da7156072ae00a23cd94260442f6abc644347f73018e1b4eb601cd7725e30ff1983cb1e5405ab94ac5b5cf423867328880ff2ad32e11f1cf9a282b1e0ed193fd63e9cbb84c119ed475c03afe91c61b8175337b5473b6a6be23c99c7990bac2", 0x7f}], 0x1) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x0, {0x0, 0x0, 0x74, r5, {0x6, 0x4}, {0x0, 0x4}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}}, 0x18) (async) bind$can_j1939(r1, &(0x7f0000000280)={0x1d, r3, 0x0, {0x0, 0xff, 0x2}, 0xff}, 0x18) (async) connect$can_j1939(r4, &(0x7f0000000200)={0x1d, r3, 0x3, {0x2, 0xfd}}, 0x18) (async) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000300)="dab99e6631a4fbdeb772f0e8a14e90fbb6156d17373ecfe4c0cdc8f1b642f064da7156072ae00a23cd94260442f6abc644347f73018e1b4eb601cd7725e30ff1983cb1e5405ab94ac5b5cf423867328880ff2ad32e11f1cf9a282b1e0ed193fd63e9cbb84c119ed475c03afe91c61b8175337b5473b6a6be23c99c7990bac2", 0x7f}], 0x1) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x0, {0x0, 0x0, 0x74, r5, {0x6, 0x4}, {0x0, 0x4}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async) 1m28.961556231s ago: executing program 32 (id=437): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00', 0x0}) r4 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}}, 0x18) bind$can_j1939(r1, &(0x7f0000000280)={0x1d, r3, 0x0, {0x0, 0xff, 0x2}, 0xff}, 0x18) connect$can_j1939(r4, &(0x7f0000000200)={0x1d, r3, 0x3, {0x2, 0xfd}}, 0x18) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000300)="dab99e6631a4fbdeb772f0e8a14e90fbb6156d17373ecfe4c0cdc8f1b642f064da7156072ae00a23cd94260442f6abc644347f73018e1b4eb601cd7725e30ff1983cb1e5405ab94ac5b5cf423867328880ff2ad32e11f1cf9a282b1e0ed193fd63e9cbb84c119ed475c03afe91c61b8175337b5473b6a6be23c99c7990bac2", 0x7f}], 0x1) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x0, {0x0, 0x0, 0x74, r5, {0x6, 0x4}, {0x0, 0x4}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000380)={'vcan0\x00'}) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) bind$can_j1939(r4, &(0x7f0000000080)={0x1d, r3, 0x0, {0x0, 0x0, 0x4}}, 0x18) (async) bind$can_j1939(r1, &(0x7f0000000280)={0x1d, r3, 0x0, {0x0, 0xff, 0x2}, 0xff}, 0x18) (async) connect$can_j1939(r4, &(0x7f0000000200)={0x1d, r3, 0x3, {0x2, 0xfd}}, 0x18) (async) sendmsg$can_j1939(r4, &(0x7f00000001c0)={&(0x7f0000000040), 0x18, &(0x7f0000000180)={&(0x7f00000000c0)="92", 0x1a000}}, 0xee) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) (async) writev(r0, &(0x7f0000000100)=[{&(0x7f0000000300)="dab99e6631a4fbdeb772f0e8a14e90fbb6156d17373ecfe4c0cdc8f1b642f064da7156072ae00a23cd94260442f6abc644347f73018e1b4eb601cd7725e30ff1983cb1e5405ab94ac5b5cf423867328880ff2ad32e11f1cf9a282b1e0ed193fd63e9cbb84c119ed475c03afe91c61b8175337b5473b6a6be23c99c7990bac2", 0x7f}], 0x1) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)=@newtfilter={0x24, 0x11, 0x1, 0x74bd2b, 0x0, {0x0, 0x0, 0x74, r5, {0x6, 0x4}, {0x0, 0x4}, {0xa}}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) (async) 1m7.670611394s ago: executing program 0 (id=681): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400000}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) (async) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x28}}, 0x0) 57.760689399s ago: executing program 0 (id=681): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400000}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) (async) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x28}}, 0x0) 47.334672036s ago: executing program 0 (id=681): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400000}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) (async) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x28}}, 0x0) 38.275447426s ago: executing program 0 (id=681): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400000}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) (async) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x28}}, 0x0) 36.528562431s ago: executing program 1 (id=1228): r0 = socket$nl_route(0x10, 0x3, 0x0) socketpair(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r0, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=@bridge_delneigh={0x28, 0x1e, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2, 0x0, 0x2}, [@NDA_LLADDR={0xa}]}, 0x28}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb01001800000000000000380000003800000003000000010000000000000e0300000000000000000000000000000105000000100000000000000000000003000000000200000002000000000000000061"], 0x0, 0x53, 0x0, 0x0, 0x400000, 0x0, @void, @value}, 0x28) 36.367753404s ago: executing program 1 (id=1232): socket$l2tp6(0xa, 0x2, 0x73) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r0, @ANYRES32=r1, @ANYBLOB="0200"/12, @ANYRES32, @ANYBLOB="170196f0a4a58cb64bf2c5f04f54c5b7c7f41ec31b74e681896f161e69197c91c22231e435e340c8b513e8d11387ef32026b43f160f19dcc0be97a872f70832e822645a4d2bcbd7115daf565f769f40d1cb6c7925a2a03b0e5b77c1424ebeb991ab7543d5f7fb708cc05a4281fbf97b82c02c92149d9a2915ef04c16405d11e8bcb30b1e1605e35c319feac6f6338e67", @ANYRES64=0x0], 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0x4, 0x5, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x4, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r3}, 0x10) (async) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x15, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40000000000000079103000000000007b0a00ff000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) r5 = socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x14, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x10, 0x11}, @TCA_FQ_QUANTUM={0x8}]}}]}, 0x40}}, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=ANY=[@ANYBLOB='H\x00\x00xy\x00K.\x00\x00\x00\x00\x00\x00 \x00z\x00\x00\x00', @ANYRES32=0x0, @ANYBLOB="00000000000000001c0012800b00010062726964676500000c00028005002600010000000a000100aaaaaaaaaa000000"], 0x48}}, 0x0) 36.191424266s ago: executing program 1 (id=1234): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x8}, [@CGW_DST_IF={0x8, 0xa, r2}, @CGW_SRC_IF={0x8, 0x9, r3}]}, 0x24}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@dellink={0x28, 0x11, 0x1, 0x70bd30, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, 0x28483, 0x40520}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x400a) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000078c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_WIPHY(r5, &(0x7f0000007980)={0x0, 0x0, &(0x7f0000007940)={&(0x7f0000007900)={0x24, r4, 0xccd495925cefb39, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x45}, @val={0x8, 0x3, r6}, @void}}}, 0x24}, 0x1, 0x0, 0x0, 0x200040c0}, 0x800) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)={0x30, 0x1411, 0x1, 0x70bd29, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_PORT_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}]}, 0x30}}, 0x0) 35.192839744s ago: executing program 1 (id=1242): r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f00000000c0)=0xfa0, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f00000002c0)=""/19, &(0x7f0000000240)=0x13) (async) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f00000002c0)=""/19, &(0x7f0000000240)=0x13) r2 = socket$alg(0x26, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r3, &(0x7f0000000fc0)=[{&(0x7f0000000ec0)=""/63, 0x3f}], 0x1) socket$kcm(0x2, 0xa, 0x2) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$xdp(0x2c, 0x3, 0x0) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x8000, 0x40, 0x3, 0x3, {{0x29, 0x4, 0x3, 0x9, 0xa4, 0x3, 0x0, 0x1, 0x4, 0x0, @remote, @rand_addr=0x64010102, {[@lsrr={0x83, 0xf, 0x91, [@broadcast, @remote, @local]}, @ssrr={0x89, 0x1e, 0xcc, [@broadcast]}, @lsrr={0x83, 0xb, 0x2b, [@loopback, @empty]}, @timestamp_addr={0x44, 0x4c, 0xe7, 0x1, 0x8, [{@multicast2}, {@multicast2, 0x3}, {@multicast1, 0x3ff}, {@loopback, 0x5}, {@multicast1, 0x6}, {@multicast1, 0x2}, {@dev={0xac, 0x14, 0x14, 0x39}}, {@multicast1, 0x25}, {@multicast2}]}, @end, @generic={0x83, 0x3, 'u'}, @generic={0x44, 0x6, "6391340f"}, @rr={0x7, 0x17, 0xbc, [@dev={0xac, 0x14, 0x14, 0x44}, @private=0xa010102, @loopback, @loopback, @private=0xa010100]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x8000, 0x40, 0x3, 0x3, {{0x29, 0x4, 0x3, 0x9, 0xa4, 0x3, 0x0, 0x1, 0x4, 0x0, @remote, @rand_addr=0x64010102, {[@lsrr={0x83, 0xf, 0x91, [@broadcast, @remote, @local]}, @ssrr={0x89, 0x1e, 0xcc, [@broadcast]}, @lsrr={0x83, 0xb, 0x2b, [@loopback, @empty]}, @timestamp_addr={0x44, 0x4c, 0xe7, 0x1, 0x8, [{@multicast2}, {@multicast2, 0x3}, {@multicast1, 0x3ff}, {@loopback, 0x5}, {@multicast1, 0x6}, {@multicast1, 0x2}, {@dev={0xac, 0x14, 0x14, 0x39}}, {@multicast1, 0x25}, {@multicast2}]}, @end, @generic={0x83, 0x3, 'u'}, @generic={0x44, 0x6, "6391340f"}, @rr={0x7, 0x17, 0xbc, [@dev={0xac, 0x14, 0x14, 0x44}, @private=0xa010102, @loopback, @loopback, @private=0xa010100]}]}}}}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) (async) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r8, 0x6, 0x3, 0x0, &(0x7f0000000180)) (async) getsockopt$inet_tcp_int(r8, 0x6, 0x3, 0x0, &(0x7f0000000180)) close(r5) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000000040), &(0x7f00000001c0)=0x4) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) (async) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0xb, &(0x7f0000000280)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0xb, &(0x7f0000000280)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r9 = accept4(r2, 0x0, 0x0, 0x0) readv(r9, &(0x7f0000000340)=[{&(0x7f0000000240)=""/3, 0x3}], 0x1) sendmsg$alg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000380)='e3', 0x2}], 0x1, 0x0, 0x0, 0x94}, 0x4000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000010008188040f80ec59acbc0413a1810031000000000100ffffffe1000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x800) 26.343783704s ago: executing program 0 (id=681): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400000}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) (async) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x28}}, 0x0) 25.070697375s ago: executing program 1 (id=1242): r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f00000000c0)=0xfa0, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f00000002c0)=""/19, &(0x7f0000000240)=0x13) (async) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f00000002c0)=""/19, &(0x7f0000000240)=0x13) r2 = socket$alg(0x26, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r3, &(0x7f0000000fc0)=[{&(0x7f0000000ec0)=""/63, 0x3f}], 0x1) socket$kcm(0x2, 0xa, 0x2) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$xdp(0x2c, 0x3, 0x0) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x8000, 0x40, 0x3, 0x3, {{0x29, 0x4, 0x3, 0x9, 0xa4, 0x3, 0x0, 0x1, 0x4, 0x0, @remote, @rand_addr=0x64010102, {[@lsrr={0x83, 0xf, 0x91, [@broadcast, @remote, @local]}, @ssrr={0x89, 0x1e, 0xcc, [@broadcast]}, @lsrr={0x83, 0xb, 0x2b, [@loopback, @empty]}, @timestamp_addr={0x44, 0x4c, 0xe7, 0x1, 0x8, [{@multicast2}, {@multicast2, 0x3}, {@multicast1, 0x3ff}, {@loopback, 0x5}, {@multicast1, 0x6}, {@multicast1, 0x2}, {@dev={0xac, 0x14, 0x14, 0x39}}, {@multicast1, 0x25}, {@multicast2}]}, @end, @generic={0x83, 0x3, 'u'}, @generic={0x44, 0x6, "6391340f"}, @rr={0x7, 0x17, 0xbc, [@dev={0xac, 0x14, 0x14, 0x44}, @private=0xa010102, @loopback, @loopback, @private=0xa010100]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x8000, 0x40, 0x3, 0x3, {{0x29, 0x4, 0x3, 0x9, 0xa4, 0x3, 0x0, 0x1, 0x4, 0x0, @remote, @rand_addr=0x64010102, {[@lsrr={0x83, 0xf, 0x91, [@broadcast, @remote, @local]}, @ssrr={0x89, 0x1e, 0xcc, [@broadcast]}, @lsrr={0x83, 0xb, 0x2b, [@loopback, @empty]}, @timestamp_addr={0x44, 0x4c, 0xe7, 0x1, 0x8, [{@multicast2}, {@multicast2, 0x3}, {@multicast1, 0x3ff}, {@loopback, 0x5}, {@multicast1, 0x6}, {@multicast1, 0x2}, {@dev={0xac, 0x14, 0x14, 0x39}}, {@multicast1, 0x25}, {@multicast2}]}, @end, @generic={0x83, 0x3, 'u'}, @generic={0x44, 0x6, "6391340f"}, @rr={0x7, 0x17, 0xbc, [@dev={0xac, 0x14, 0x14, 0x44}, @private=0xa010102, @loopback, @loopback, @private=0xa010100]}]}}}}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) (async) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r8, 0x6, 0x3, 0x0, &(0x7f0000000180)) (async) getsockopt$inet_tcp_int(r8, 0x6, 0x3, 0x0, &(0x7f0000000180)) close(r5) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000000040), &(0x7f00000001c0)=0x4) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) (async) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0xb, &(0x7f0000000280)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0xb, &(0x7f0000000280)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r9 = accept4(r2, 0x0, 0x0, 0x0) readv(r9, &(0x7f0000000340)=[{&(0x7f0000000240)=""/3, 0x3}], 0x1) sendmsg$alg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000380)='e3', 0x2}], 0x1, 0x0, 0x0, 0x94}, 0x4000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000010008188040f80ec59acbc0413a1810031000000000100ffffffe1000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x800) 12.495345444s ago: executing program 0 (id=681): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000180), r1) (async) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000002c40)={0x7, 0x17, &(0x7f00000007c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}}, {{0x6, 0x0, 0x6}, {0x6, 0x0, 0x0, 0xb}}, [@printk={@p, {0x3, 0x3, 0x3, 0xa, 0x9}, {0x5, 0x1, 0xa, 0x1, 0x9}, {0x7, 0x0, 0x3}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x400000}, {0x56}}], {{0x4, 0x1, 0x2, 0x3}, {0x5, 0x0, 0xb, 0x3}, {0x85, 0x0, 0x0, 0x76}}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x1}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) (async) syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) (async) sendmsg$NBD_CMD_RECONFIGURE(r0, &(0x7f0000001740)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[], 0x28}}, 0x0) 11.772272487s ago: executing program 1 (id=1242): r0 = socket$kcm(0x10, 0x2, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_int(r1, 0x29, 0x2, &(0x7f00000000c0)=0xfa0, 0x4) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f00000002c0)=""/19, &(0x7f0000000240)=0x13) (async) getsockopt$inet6_buf(r1, 0x29, 0x6, &(0x7f00000002c0)=""/19, &(0x7f0000000240)=0x13) r2 = socket$alg(0x26, 0x5, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) (async) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) readv(r3, &(0x7f0000000fc0)=[{&(0x7f0000000ec0)=""/63, 0x3f}], 0x1) socket$kcm(0x2, 0xa, 0x2) r4 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) (async) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) socket$xdp(0x2c, 0x3, 0x0) (async) r5 = socket$xdp(0x2c, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x8000, 0x40, 0x3, 0x3, {{0x29, 0x4, 0x3, 0x9, 0xa4, 0x3, 0x0, 0x1, 0x4, 0x0, @remote, @rand_addr=0x64010102, {[@lsrr={0x83, 0xf, 0x91, [@broadcast, @remote, @local]}, @ssrr={0x89, 0x1e, 0xcc, [@broadcast]}, @lsrr={0x83, 0xb, 0x2b, [@loopback, @empty]}, @timestamp_addr={0x44, 0x4c, 0xe7, 0x1, 0x8, [{@multicast2}, {@multicast2, 0x3}, {@multicast1, 0x3ff}, {@loopback, 0x5}, {@multicast1, 0x6}, {@multicast1, 0x2}, {@dev={0xac, 0x14, 0x14, 0x39}}, {@multicast1, 0x25}, {@multicast2}]}, @end, @generic={0x83, 0x3, 'u'}, @generic={0x44, 0x6, "6391340f"}, @rr={0x7, 0x17, 0xbc, [@dev={0xac, 0x14, 0x14, 0x44}, @private=0xa010102, @loopback, @loopback, @private=0xa010100]}]}}}}}) (async) ioctl$sock_ipv6_tunnel_SIOCGET6RD(0xffffffffffffffff, 0x89f8, &(0x7f0000000100)={'syztnl1\x00', &(0x7f00000002c0)={'syztnl0\x00', 0x0, 0x8000, 0x40, 0x3, 0x3, {{0x29, 0x4, 0x3, 0x9, 0xa4, 0x3, 0x0, 0x1, 0x4, 0x0, @remote, @rand_addr=0x64010102, {[@lsrr={0x83, 0xf, 0x91, [@broadcast, @remote, @local]}, @ssrr={0x89, 0x1e, 0xcc, [@broadcast]}, @lsrr={0x83, 0xb, 0x2b, [@loopback, @empty]}, @timestamp_addr={0x44, 0x4c, 0xe7, 0x1, 0x8, [{@multicast2}, {@multicast2, 0x3}, {@multicast1, 0x3ff}, {@loopback, 0x5}, {@multicast1, 0x6}, {@multicast1, 0x2}, {@dev={0xac, 0x14, 0x14, 0x39}}, {@multicast1, 0x25}, {@multicast2}]}, @end, @generic={0x83, 0x3, 'u'}, @generic={0x44, 0x6, "6391340f"}, @rr={0x7, 0x17, 0xbc, [@dev={0xac, 0x14, 0x14, 0x44}, @private=0xa010102, @loopback, @loopback, @private=0xa010100]}]}}}}}) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) (async) write$cgroup_int(r7, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_tcp_int(r8, 0x6, 0x3, 0x0, &(0x7f0000000180)) (async) getsockopt$inet_tcp_int(r8, 0x6, 0x3, 0x0, &(0x7f0000000180)) close(r5) getsockopt$inet_sctp6_SCTP_FRAGMENT_INTERLEAVE(r7, 0x84, 0x12, &(0x7f0000000040), &(0x7f00000001c0)=0x4) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) (async) bind$alg(r2, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc(twofish)\x00'}, 0x58) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0xb, &(0x7f0000000280)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0xb, &(0x7f0000000280)=ANY=[@ANYRESHEX=0x0], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r9 = accept4(r2, 0x0, 0x0, 0x0) readv(r9, &(0x7f0000000340)=[{&(0x7f0000000240)=""/3, 0x3}], 0x1) sendmsg$alg(r9, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000b80)=[{&(0x7f0000000380)='e3', 0x2}], 0x1, 0x0, 0x0, 0x94}, 0x4000) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000100)="2e00000010008188040f80ec59acbc0413a1810031000000000100ffffffe1000e000a000f000000028002002d1f", 0x2e}], 0x1}, 0x800) 2.396102931s ago: executing program 3 (id=1486): r0 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r0, 0x10d, 0xdc, &(0x7f0000000040), &(0x7f0000000000)=0x4) r1 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r1, 0x8933, &(0x7f0000000080)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b40500000000000061109a000000000020000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0xa, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x366, 0x10, &(0x7f0000000000), 0x2b2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000200)='./cgroup/syz0\x00', 0x200002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x11, 0x80a, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="280000001000010400"/20, @ANYRES32=r4, @ANYBLOB="104001feff09190000000000", @ANYRES32=r4, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0xc000}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f00000000c0)=@ipv6_getaddrlabel={0x78, 0x4a, 0x8, 0x70bd2c, 0x25dfdbfb, {0xa, 0x0, 0x20, 0x0, r4, 0x1}, [@IFAL_ADDRESS={0x14, 0x1, @private0={0xfc, 0x0, '\x00', 0x1}}, @IFAL_LABEL={0x8, 0x2, 0x1}, @IFAL_LABEL={0x8, 0x2, 0x3}, @IFAL_ADDRESS={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x22}}, @IFAL_LABEL={0x8, 0x2, 0xb}, @IFAL_LABEL={0x8, 0x2, 0x2}, @IFAL_ADDRESS={0x14, 0x1, @remote}]}, 0x78}, 0x1, 0x0, 0x0, 0x4008044}, 0x40001) 2.180838929s ago: executing program 3 (id=1488): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x22, &(0x7f0000000380)=@ringbuf={{}, {}, {}, [@kfunc, @generic, @map_idx, @ringbuf_query, @printk={@s}, @jmp, @map_fd]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x3, 0x7, &(0x7f0000000140)=@framed={{0x18, 0x7}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @alu={0x6}, @exit={0x95, 0x0, 0x7b00}, @call={0x85, 0x0, 0x0, 0x13}]}, &(0x7f0000000040)='GPL\x00', 0x4, 0x92, &(0x7f0000000240)=""/146, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={r0, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_WANTLQI(r1, 0x0, 0x3, &(0x7f0000001380)=0x1, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000013c0), r1) r2 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000300)='blkio.bfq.io_service_time_recursive\x00', 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000700)=ANY=[@ANYBLOB="1300000010005846ae6307d4de97000000000000", @ANYRES32=0x1, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x50) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYRES16=r3], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$AUTOFS_IOC_ASKUMOUNT(r4, 0x80049370, &(0x7f0000000080)) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r4, 0xffff0000, 0xe, 0x0, &(0x7f0000001a40)="2b206d074843b397737ea49da2aa", 0x0, 0xf000, 0x720e, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.179181478s ago: executing program 2 (id=1489): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendto$inet6(r0, &(0x7f0000000000)="89a532deec74f211e6ed69d74be1548878c13b6465d1d51b3d06ed5db1cfe5680a26f4687d591359b711e074f1c9ad2beb9a965d557bd2cbbdb8362fcca6d9d16e6de64036ce52a5af2912e6f8495feccd93b3be04abccd8218974bb896844745af8cd38391045386e4f43fe1585de0331ca84142542c536484a", 0x7a, 0x4004, &(0x7f0000000080)={0xa, 0x4e23, 0x5, @mcast1, 0x8001}, 0x1c) (async) shutdown(r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000180)={'sit0\x00', &(0x7f0000000100)={'gre0\x00', 0x0, 0x10, 0x7, 0x1, 0x4, {{0xe, 0x4, 0x0, 0x15, 0x38, 0x65, 0x0, 0x5, 0x4, 0x0, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x24, 0x5b, 0x0, 0xf, [0xfffffff3, 0x4, 0x1, 0x1, 0x5, 0x6, 0x9, 0x9]}]}}}}}) sendmsg$nl_route_sched(r1, &(0x7f0000000c80)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000c40)={&(0x7f00000001c0)=@newtfilter={0xa60, 0x2c, 0x400, 0x70bd2b, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {0x4, 0xffff}, {0xd, 0xfff1}, {0xfff1, 0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0xa34, 0x2, [@TCA_BPF_FLAGS={0x8}, @TCA_BPF_ACT={0x16c, 0x1, [@m_connmark={0x168, 0x4, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x2, 0x7, 0x9, 0x400}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x5, 0x4, 0x4685, 0x6}, 0x800}}]}, {0xff, 0x6, "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"}, {0xc}, {0xc, 0x8, {0x2}}}}]}, @TCA_BPF_POLICE={0x4c, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x3, 0x6, 0xe0d0, 0x9, 0x7f, {0x5, 0x0, 0xc, 0xd, 0x7fff, 0x7}, {0x4, 0x2, 0x0, 0x400, 0x13, 0x9}, 0xb57a, 0x80, 0x9}}, @TCA_POLICE_RATE64={0xc, 0x8, 0x54}]}, @TCA_BPF_POLICE={0x854, 0x2, [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x8, 0x7, 0x200, 0xe, 0x8001, 0x2000, 0x240, 0x0, 0x0, 0x4, 0x0, 0x908, 0x41d, 0x8, 0x4, 0x0, 0xa5, 0x7, 0x2, 0x0, 0x40, 0xeae1, 0x0, 0x400, 0xfffffff8, 0x3, 0x9, 0x9, 0x1, 0xff, 0x8, 0x8, 0x1, 0x5, 0x3, 0x4, 0xc567, 0x6, 0x4, 0xc443, 0x78, 0xd, 0x4, 0x9, 0x2, 0x2, 0x9, 0xcf32, 0x8, 0x2, 0x10000, 0xfffffff7, 0x1, 0xfffffff9, 0x6, 0x8, 0x2, 0x5, 0x2, 0x9, 0x7, 0x8, 0x6, 0x1, 0x0, 0x1f71, 0x4, 0x8001, 0x0, 0x6, 0x9b6c, 0x200, 0x0, 0x6, 0x1, 0xfffff800, 0xd7, 0xc5, 0xfffffeff, 0x9, 0x101, 0xe9, 0x10001, 0xe, 0x6, 0x4053, 0x3, 0x6, 0xff, 0x1, 0x2, 0x6, 0x4, 0xfff, 0x1, 0x7, 0x3, 0x40, 0x6, 0x44, 0xac1, 0x2d, 0x80, 0x4, 0x40, 0x3, 0x5, 0x0, 0x0, 0xff, 0x4, 0x8, 0x3, 0x4, 0x5, 0x7f, 0x2, 0x5, 0x800, 0xb582, 0x2, 0x7, 0x0, 0xc847, 0x5, 0x8001, 0x6, 0x5, 0x8, 0xf, 0xf, 0x2, 0x3, 0x17d, 0x9, 0x4, 0x9, 0x9, 0x9, 0xc4, 0x0, 0xa, 0x88ef, 0x5, 0x401, 0x1, 0xfffffffe, 0x2, 0x2, 0x5, 0x3, 0x6, 0x8, 0x3, 0xff, 0x0, 0x9, 0x1, 0x4, 0x5, 0x0, 0x6, 0xbc4, 0x80000000, 0x9, 0x3, 0x4, 0x4, 0x4f7, 0xde, 0x2bb, 0x8, 0x5, 0xb90c, 0xffffffff, 0x1, 0x200, 0x8, 0xd68e, 0xd6, 0x7, 0x1, 0x2, 0x80ad, 0x8, 0x7, 0x6, 0xee1b, 0x5, 0x2d, 0x1, 0x0, 0x6, 0x10000, 0x8000, 0x7, 0xfffffffb, 0x5555, 0x6, 0xc, 0x7ff, 0x2, 0x80000001, 0x2, 0x1, 0x2249, 0x3, 0xffffffff, 0x7750, 0x0, 0xfffffffa, 0x7, 0x300000, 0x7fffffff, 0x2, 0x7, 0x81, 0x8, 0x5, 0x0, 0x2, 0x40, 0x6606ffca, 0x7, 0x6, 0x4, 0x7fff, 0xfff, 0x6, 0xb, 0x0, 0x5, 0xa94, 0x0, 0xffff, 0xfffffff7, 0xfffffff8, 0x0, 0x9, 0x0, 0x3ff, 0x200, 0x1000, 0x0, 0x7, 0x7, 0x80000001, 0xb5, 0x3, 0x6, 0xb, 0xfc70, 0x6, 0x7cc5, 0x17, 0x2]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffffe, 0x6, 0xffffffff, 0x2, 0x80, {0x0, 0x0, 0x7, 0x8, 0x4}, {0x2, 0x1, 0x800, 0x7, 0x1800, 0x8}, 0x66d9bd10, 0x8, 0xfffffffe}}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x50ce}, @TCA_POLICE_RATE={0x404, 0x2, [0x4, 0x4, 0x5, 0x3, 0x0, 0x4, 0x7, 0x468, 0x7, 0x4, 0x3, 0x9, 0x1ff, 0x9, 0x2, 0x6, 0x40, 0x4, 0x0, 0x80000001, 0x0, 0x0, 0x9, 0xffffffff, 0x5, 0x4, 0x5, 0xc, 0x0, 0xb146, 0x3aa, 0x686bd6f9, 0x8, 0x2, 0x0, 0x3, 0x7ff, 0x8, 0x1a14, 0x2, 0x0, 0x33, 0x6, 0xff, 0x1, 0x3, 0x67, 0x6, 0x1cf9, 0x401, 0x4000000, 0xe, 0x8000, 0x10, 0x2, 0x1, 0x5, 0x3, 0x3, 0x7fff, 0x3, 0x6, 0x6, 0x6, 0x9, 0xf, 0x8, 0x1, 0x35e, 0x6, 0x10001, 0x3, 0x7, 0xfffffff7, 0x7, 0x76, 0x80000001, 0x6, 0x200, 0xf73, 0xfffffff7, 0xfffffffc, 0x20, 0x7, 0x5, 0xfff, 0x9, 0x5, 0x8, 0x0, 0x4a, 0xf08, 0x782, 0x101, 0xf, 0x9, 0x8, 0x3, 0xe002, 0x5, 0x8999, 0x3, 0x140, 0xe007, 0x9, 0xd2bb, 0x6, 0x1, 0x4, 0x9, 0x10, 0x9, 0x1, 0x8, 0x8, 0x7, 0x7, 0x4, 0x7, 0x6, 0xffff, 0x200, 0x7, 0x3226, 0x0, 0x7ff, 0x80, 0xffffffff, 0x91, 0x7fff, 0x5, 0xcb, 0x8, 0x40, 0x9, 0x8000, 0xff, 0x3, 0x1200000, 0x0, 0x3, 0x2, 0x3, 0x1, 0x71b, 0x7, 0x200, 0xa, 0x9, 0x2, 0xffffffff, 0x4, 0x4, 0x6, 0x800, 0x7fff, 0x9137, 0xfffffff6, 0x7fff, 0x2, 0x10001, 0xfffffff7, 0x3, 0x0, 0x200, 0x101, 0xf, 0x81, 0x2, 0x4, 0x4, 0xbd3, 0x685, 0x8, 0x2, 0x6, 0x4, 0x8, 0x2, 0xffff, 0xa, 0x5, 0x7, 0x1, 0xb, 0x4, 0x5, 0x0, 0x5, 0x1ff, 0x0, 0x3, 0x0, 0x4, 0x3, 0x6, 0xffff0f42, 0xfffffffd, 0x7, 0xfffffffb, 0x9, 0x7ff, 0x2, 0x8, 0xaf2, 0xd9, 0x80000000, 0x3, 0x8, 0x32, 0xee, 0x5, 0x5, 0x3, 0x7fff, 0x3, 0x2, 0x0, 0x7, 0x983e, 0xffffffff, 0x0, 0xe, 0x6, 0x3, 0xfffffffe, 0xdc7c, 0x7, 0x2, 0x8001, 0x5, 0x5, 0x9, 0x4, 0x4, 0x0, 0x84, 0x5, 0x5, 0x6, 0xb, 0xfffff000, 0x5, 0x200, 0x80000000, 0xdc1, 0x3, 0x9, 0x5, 0x94a8, 0xb, 0xfc, 0x9, 0x3, 0xfde8, 0x8]}]}, @TCA_BPF_CLASSID={0x8, 0x3, {0xc, 0xa}}, @TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x6bf, 0x9, 0x4, 0x6}]}}]}}]}, 0xa60}, 0x1, 0x0, 0x0, 0x40040}, 0x24080) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000d40)=@nat={'nat\x00', 0x1b, 0x5, 0x4e8, 0xb8, 0x0, 0xffffffff, 0x380, 0x380, 0x450, 0x450, 0xffffffff, 0x450, 0x450, 0x5, &(0x7f0000000cc0), {[{{@uncond, 0x0, 0x70, 0xb8}, @unspec=@DNAT1={0x48, 'DNAT\x00', 0x1, {0x12, @ipv4=@empty, @ipv6=@private2, @icmp_id=0x64, @icmp_id=0x65}}}, {{@uncond, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}, {0x2, 0x41}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x4, [0x4, 0x2, 0x5, 0x4, 0x6, 0x3], 0x1, 0x6}, {0x1, [0x1, 0x2, 0x2, 0x0, 0x7, 0x4], 0x4, 0x3}}}}, {{@uncond, 0x0, 0x198, 0x1d0, 0x0, {}, [@common=@socket0={{0x20}}, @common=@inet=@recent1={{0x108}, {0x6, 0x5, 0x2, 0x1, 'syz1\x00', 0x69, [0x0, 0xffffffff, 0xffffffff, 0x80800000]}}]}, @REDIRECT={0x38, 'REDIRECT\x00', 0x0, {0x1, {0x1, @dev={0xac, 0x14, 0x14, 0x12}, @multicast2, @gre_key=0x2, @port=0x4e22}}}}, {{@uncond, 0x0, 0x98, 0xd0, 0x0, {}, [@common=@ttl={{0x28}, {0x3, 0x1a}}]}, @MASQUERADE={0x38, 'MASQUERADE\x00', 0x0, {0x1, {0x0, @private=0xa010102, @remote, @port=0x4e20, @gre_key=0x5}}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x548) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(&(0x7f00000012c0), r4) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r3, 0x84, 0x13, &(0x7f0000001300)={0x0, 0x8000}, &(0x7f0000001340)=0x8) setsockopt$inet_sctp_SCTP_SET_PEER_PRIMARY_ADDR(r3, 0x84, 0x5, &(0x7f0000001380)={r5, @in6={{0xa, 0xad, 0x5, @mcast2, 0xf92f}}}, 0x84) r6 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_AUTOCLOSE(r6, 0x84, 0x4, &(0x7f0000001440)=0x4, 0x4) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r7, &(0x7f00000015c0)={&(0x7f0000001480)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000001580)={&(0x7f00000014c0)={0xa0, 0x0, 0x20, 0x70bd2a, 0x25dfdbfe, {}, [@TIPC_NLA_MON={0x34, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x56}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x6}, @TIPC_NLA_MON_REF={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x80000000}]}, @TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x1}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xffffffff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x204}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x7}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x20000000}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xffff}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4048014}, 0x40040) (async) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000016c0)={0x1, &(0x7f0000001600)="2608831778360a49c4b82c20826a83d84a581c22f0f3d47ba3da168a05dc9c8e4c8730260a636ca23cca303574c61ead037c922425ddb1a6f59c70d52848afa608", &(0x7f0000001680)=""/46, 0x4}, 0x20) (async) sendto$inet(r6, &(0x7f0000001700)="acc34e1de2cb14c4a0b8ac10aab63df3207c867e9784acd984723666e7cbabdb7cb0bd7a96148c65b2f2bce14c4db5bc24d44ef8b4f46df37d7588fb70346b16ef3ab194962993f18de09fddf6fa7bcde88ccb0c02373dc07c97037be0fb2d706b0e0b93f11fcc1618ed0acd572a3fe2ab2c36c813679a595c333cbc7beb8642a4f2d506d5710e00e8edda2d1a51925cbd6bf0ab785166ae7b4ef449e352bf0f7d48afafff0be36ead360fd75c1a63fa05e35ddef564311e013688a5646811df82cae34c820e1f3ce6e718021cd66e46", 0xd0, 0x10, &(0x7f0000001800)={0x2, 0x4e21, @empty}, 0x10) (async) setsockopt$CAN_RAW_JOIN_FILTERS(0xffffffffffffffff, 0x65, 0x6, &(0x7f0000001840), 0x4) syz_init_net_socket$x25(0x9, 0x5, 0x0) socket$inet_udp(0x2, 0x2, 0x0) (async) getsockopt$inet_sctp_SCTP_PR_SUPPORTED(r3, 0x84, 0x71, &(0x7f0000001880)={r5, 0x10}, &(0x7f00000018c0)=0x8) syz_genetlink_get_family_id$nl80211(&(0x7f0000001900), r7) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$sock_FIOGETOWN(r4, 0x8903, &(0x7f0000001980)=0x0) sendmsg$nl_netfilter(r9, &(0x7f0000001a80)={&(0x7f0000001940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000001a40)={&(0x7f00000019c0)={0x78, 0x3, 0x5, 0x201, 0x70bd29, 0x25dfdbfc, {0x5, 0x0, 0x2}, [@typed={0x8, 0x149, 0x0, 0x0, @pid=r10}, @typed={0xc, 0x54, 0x0, 0x0, @u64=0x8}, @generic="a3dc482f97191542f9fd3bac5a0d35d0687d3fabbcae0c169b14c7306bd3ba8c3ba1b2a70cd2abc53c22d6466db5366a2d52d6e520306a3912ea0a44df6b7011190f04a5ad9a606960b07c3e6da628"]}, 0x78}, 0x1, 0x0, 0x0, 0x4024804}, 0x20000010) (async) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r1, 0x84, 0x77, &(0x7f0000001ac0)={r8, 0x6670, 0x2, [0x6, 0x4]}, 0xc) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000001b00)={r5, 0x3}, &(0x7f0000001b40)=0xc) (async) r12 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000001b80)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x0, 0x0) getsockopt$inet_sctp_SCTP_ENABLE_STREAM_RESET(r12, 0x84, 0x76, &(0x7f0000001bc0)={r11, 0x6}, &(0x7f0000001c00)=0x8) 2.041139986s ago: executing program 5 (id=1490): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r0) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r0) sendmsg$NL802154_CMD_GET_WPAN_PHY(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000900)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="0100000000000001000055f5262ec820fd6000"], 0x1c}}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}]}, @NFT_MSG_NEWRULE={0x94, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_EXPRESSIONS={0x6c, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @exthdr={{0xb}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_DREG={0x8, 0x1, 0x1, 0x0, 0xc}, @NFTA_EXTHDR_OFFSET={0x8}, @NFTA_EXTHDR_LEN={0x8, 0x4, 0x1, 0x0, 0x22}, @NFTA_EXTHDR_TYPE={0x5, 0x2, 0x7}]}}}, {0x34, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_BITWISE_SREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_BITWISE_DREG={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_BITWISE_OP={0x8, 0x6, 0x1, 0x0, 0x2}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x108}}, 0x0) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME_WAIT_CANCEL(r3, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r4, 0x100, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x3e}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xd}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xf}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x69}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x5c}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) 2.015397639s ago: executing program 2 (id=1491): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1f, 0x2, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000540)={{r1, 0xffffffffffffffff}, &(0x7f0000000040), &(0x7f0000000500)}, 0x20) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="180100001700000000000000ff000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000002007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008002010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800"/17], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_BIND_MAP(0x23, &(0x7f0000000280)={r5, r2}, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) sendmsg$IPSET_CMD_DESTROY(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)={0x1c, 0x3, 0x6, 0x801, 0x0, 0x0, {0x2, 0x0, 0x5}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x815}, 0x4084) close(r4) pwritev(r4, &(0x7f0000000440)=[{&(0x7f0000000140)='2', 0x1}], 0x1, 0x4000000, 0x0) sendfile(r3, r4, 0x0, 0x7fff) setsockopt$inet_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000180)={@in6={{0xa, 0x4e22, 0x3, @mcast1, 0x7f}}, 0x0, 0x0, 0x3a, 0x0, "c2757cf919881d87f64dc281256325c987ab9a7aed70ee70f570d2f2b60ec3e7c554fe7620be2e4ad20299f533188c2eaa0b99163c6064219acad2000e3d4cb9b8768098aefa0a4de82210618a08e3c3"}, 0xd8) setsockopt$inet_tcp_int(r0, 0x6, 0x11, &(0x7f0000000000)=0x100000001, 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @remote}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1e, &(0x7f0000000040), 0x14) 1.856941496s ago: executing program 5 (id=1492): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x5) r2 = accept4(r1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000040)={0xfe, 0x9, 0x2, 0xff, 0xa7, 0x0, 0x1, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2, 0x20}, 0xe) readv(r2, &(0x7f00000006c0)=[{&(0x7f0000000600)=""/148, 0x94}], 0x1) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000080)={0x0, 0x7}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(r2, 0x84, 0x1b, &(0x7f0000000140)={r3, 0x1000, "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"}, &(0x7f0000001180)=0x1008) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000011c0)=ANY=[@ANYBLOB="4000000010003b1500"/20, @ANYRESDEC=0x0, @ANYRES16=r0], 0x40}}, 0x80) 1.771421366s ago: executing program 5 (id=1493): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xc, &(0x7f0000000140)=@assoc_value={0x0}, &(0x7f0000000500)=0x8) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000000)={r2, 0x9}, &(0x7f0000000080)=0x8) r3 = socket$inet6(0xa, 0x1, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{r4, 0xffffffffffffffff}, &(0x7f00000003c0), &(0x7f00000007c0)='%-010d \x00'}, 0x22) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000980)={r5}, 0x4) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x18, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000080007b8af8ff00000000b7080000800000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000100)={r6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffe}, 0x50) bind$inet6(r3, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@updpolicy={0xc4, 0x13, 0xcb23c9c9931e99e9, 0x0, 0x0, {{@in6=@empty, @in=@empty, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x0, 0x0, 0xfffffffffffffffc, 0xfffffffffffffffe}}, [@mark={0xc, 0x15, {0x0, 0x7fee}}]}, 0xc4}}, 0x0) sendto$inet6(r3, 0x0, 0x0, 0xfffffefffffbffaf, &(0x7f0000000140)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) setsockopt$inet6_IPV6_ADDRFORM(r3, 0x29, 0x1, &(0x7f0000000000), 0x4) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003b0007010000000000000000017c00000400fc800c00018006000600800a0000080002800400728008000500", @ANYRES32=0x0, @ANYBLOB="cf85ebc2838509808fff51393c995856ab3e98783cbcc21a3f7617d581179880f953a83697f31db129ca9f"], 0x34}}, 0xc000) sendto$inet6(r3, &(0x7f0000001600)='\b', 0xfffffffffffffd68, 0x4004095, 0x0, 0xd56888b5705b13c6) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r3, 0x6, 0x23, &(0x7f0000000040)={&(0x7f0000ffb000/0x4000)=nil, 0x4012, 0x0, 0x0, 0x0, &(0x7f000001a640)=""/102400, 0x19000, 0x0, 0x0, 0x40020000}, &(0x7f00000008c0)=0x3b) r9 = socket$netlink(0x10, 0x3, 0x9) writev(r9, &(0x7f0000000080)=[{&(0x7f00000000c0)="3900000013001118680907071200000f0000ff3f21000000170a001700000000040014001000030001302564aac3f8c2464ef0a12770cb2aac", 0x39}], 0x1) setsockopt$inet6_buf(r3, 0x29, 0x2a, 0x0, 0x0) 1.253789036s ago: executing program 3 (id=1494): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$phonet_pipe(0x23, 0x5, 0x2) getsockopt$PNPIPE_HANDLE(r1, 0x113, 0x3, 0x0, &(0x7f00000004c0)) r2 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x98, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x68, 0x12, 0x0, 0x1, @vlan={{0x9}, {0x58, 0x2, 0x0, 0x1, [@IFLA_VLAN_EGRESS_QOS={0x4c, 0x3, 0x0, 0x1, [@IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x8}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x2, 0x9}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0xc67c, 0xf}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x0, 0x4}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x97d, 0x3}}, @IFLA_VLAN_QOS_MAPPING={0xc, 0x1, {0x9, 0x2}}]}, @IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_CARRIER_CHANGES={0x8, 0x23, 0x9}]}, 0x98}, 0x1, 0xba01}, 0x810) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) 1.02477288s ago: executing program 2 (id=1495): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x3, 0x4, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000001040)='GPL\x00', 0x0, 0x6b, &(0x7f00000004c0)=""/153, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x15) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0xfffffffffffffcea, &(0x7f0000000040)="61df712bc884fed5722780b6c2a7", 0x0, 0x5, 0x0, 0xfffffffffffffcc6}, 0x50) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r0, 0x0, 0xe, 0xfffffffffffffcea, &(0x7f0000000040)="61df712bc884fed5722780b6c2a7", 0x0, 0x5, 0x0, 0xfffffffffffffcc6}, 0x50) r1 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x1, &(0x7f0000000000)=@raw=[@ldst={0x2, 0x2, 0x4, 0xa, 0x0, 0xfffffffffffffff8, 0x4}], &(0x7f0000000080)='GPL\x00', 0x2, 0xf4, &(0x7f0000000240)=""/244, 0x40f00, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f00000000c0)={0x2, 0x4, 0x4, 0xf9}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000100)=[0xffffffffffffffff], 0x0, 0x10, 0x6, @void, @value}, 0x94) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000940)={@cgroup, 0x4, 0x1, 0xfffffff3, &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) (async) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000940)={@cgroup=0xffffffffffffffff, 0x4, 0x1, 0xfffffff3, &(0x7f0000000140)=[0x0, 0x0, 0x0], 0x3, 0x0, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f00000008c0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000900)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='ext4_writepages_result\x00'}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) (async) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r4) bpf$LINK_DETACH(0x22, &(0x7f0000001ac0)=r4, 0x4) (async) bpf$LINK_DETACH(0x22, &(0x7f0000001ac0)=r4, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r4, 0xffffffffffffffff, 0x4}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000d80)={0xffffffffffffffff, 0x6, 0x18}, 0xc) (async) r6 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000d80)={0xffffffffffffffff, 0x6, 0x18}, 0xc) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.sectors\x00', 0x26e1, 0x0) close(r7) ioctl$SIOCSIFHWADDR(r7, 0x8b26, &(0x7f0000000000)={'wlan1\x00'}) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r8, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='\a'], 0x10) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000540)=ANY=[@ANYRES32=r10, @ANYRES32=r9, @ANYBLOB='\a'], 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r10, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r8}, 0x20) r11 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1e000000000000000500000006"], 0x48) bpf$MAP_LOOKUP_ELEM(0x2, &(0x7f0000001740)={r11, 0x0, &(0x7f0000001700)=""/53}, 0x20) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) (async) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) splice(r13, &(0x7f0000000040), r12, 0x0, 0x800000000ff, 0x0) (async) splice(r13, &(0x7f0000000040), r12, 0x0, 0x800000000ff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000e40)={0x20, 0x1d, &(0x7f0000000b00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xf, 0x0, 0x0, 0x0, 0x8}, {}, {}, [@ringbuf_query, @map_fd={0x18, 0x1}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x4}, @tail_call, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000c00)='syzkaller\x00', 0x205, 0x82, &(0x7f0000000c40)=""/130, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x28, r4, 0x8, &(0x7f0000000d00)={0x4, 0x3}, 0x8, 0x10, &(0x7f0000000d40)={0x4, 0xa, 0xab9, 0x7}, 0x10, 0xffffffffffffffff, r1, 0x1, &(0x7f0000000dc0)=[r2, r5, r6, r7, r10, r11, r0, r13], &(0x7f0000000e00)=[{0x0, 0x3, 0xb, 0x6}], 0x10, 0xa41, @void, @value}, 0x94) r14 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xf, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r14}, {}, {}, {0x85, 0x0, 0x0, 0x51}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xf, 0xf, &(0x7f0000000480)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r14}, {}, {}, {0x85, 0x0, 0x0, 0x51}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_device, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000980)={@map=r14, r0, 0x1, 0x2000, r1, @value, @void, @void, @void, r3}, 0x20) 917.771362ms ago: executing program 3 (id=1496): socket$rds(0x15, 0x5, 0x0) (async) r0 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000), 0x4) (async) setsockopt$RDS_CONG_MONITOR(r0, 0x114, 0x6, &(0x7f0000000000), 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000240)={&(0x7f0000000040), 0xc, &(0x7f0000000200)={&(0x7f00000000c0)={0x130, r2, 0x400, 0x70bd2a, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8, 0xc, @random=0x5}, @NL80211_ATTR_TX_RATES={0xd8, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0xa0, 0x2, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0xa, 0x1, [0x36, 0xc, 0xb, 0x24, 0x12, 0xb]}, @NL80211_TXRATE_HT={0x2d, 0x2, [{0x5, 0x4}, {0x2, 0x6}, {0x3, 0x3}, {0x7, 0x1}, {0x2, 0x8}, {0x0, 0x8}, {0x1, 0x6}, {0x4, 0x1}, {0x1, 0xa}, {0x2, 0xa}, {0x3, 0x7}, {0x1, 0xa}, {0x3, 0x1}, {0x3}, {0x0, 0x8}, {0x6, 0x4}, {0x0, 0x3}, {0x3, 0x3}, {0x5, 0x3}, {0x2, 0x16}, {0x2, 0x6}, {0x1, 0xa}, {0x2}, {0x3, 0x7}, {0x2, 0x2}, {0x2, 0x8}, {0x4, 0x2}, {0x1, 0x6}, {0x2, 0x7}, {0x4, 0x7}, {0x0, 0x6}, {0x6, 0x3}, {0x0, 0x3}, {0x3, 0x1}, {0x6, 0x2}, {0x3}, {0x7, 0x2}, {0x7, 0x1}, {0x1, 0x9}, {0x5, 0x9}, {0x3, 0x5}]}, @NL80211_TXRATE_HT={0x4d, 0x2, [{0x0, 0x3}, {0x3, 0x3}, {0x5, 0x4}, {0x3, 0x1}, {0x0, 0xa}, {0x3, 0xa}, {0x1, 0x1}, {0x0, 0x3}, {0x7, 0x6}, {0x3}, {0x2, 0x2}, {0x0, 0x7}, {0x0, 0x1}, {0x3, 0x5}, {0x2, 0x1}, {0x4, 0x8}, {0x6, 0xa}, {0x1, 0x1}, {0x1, 0xa}, {0x1, 0x3}, {0x1, 0x1}, {0x6}, {0x6, 0x8}, {0x5, 0x7}, {0x3, 0x5}, {0x2, 0x7}, {0x2, 0xa}, {0x2, 0x5}, {0x3, 0x8}, {0x6, 0x3}, {0x1, 0x3}, {0x1, 0x6}, {0x2, 0xa}, {0x0, 0x9}, {0x2, 0x1}, {0x4, 0x2}, {0x7, 0x6}, {0x1}, {0x5, 0x6}, {0x1, 0x5}, {0x4, 0x3}, {0x7, 0x8}, {0x6}, {0x2, 0x7}, {0x1, 0x4}, {0x2}, {0x2, 0x9}, {0x7, 0x5}, {0x7, 0x3}, {0x0, 0x6}, {}, {0x1, 0x3}, {0x6, 0x7}, {0x3, 0x9}, {0x2, 0xa}, {0x6, 0x2}, {0x6, 0x3}, {0x0, 0x6}, {0x2, 0xc}, {0x3, 0x1}, {0x7, 0x5}, {0x1, 0x7}, {0x6, 0x4}, {0x6, 0x9}, {0x0, 0x3}, {0x1, 0x1}, {0x6, 0x4}, {0x2, 0x6}, {0x0, 0x2}, {0x3, 0x7}, {0x7, 0x8}, {0x3, 0x4}, {0x1, 0x7}]}, @NL80211_TXRATE_GI={0x5, 0x4, 0x1}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}]}, @NL80211_BAND_5GHZ={0x28, 0x1, 0x0, 0x1, [@NL80211_TXRATE_LEGACY={0x12, 0x1, [0x4, 0x36, 0x30, 0xc, 0x16, 0x10, 0x3, 0x1, 0x4, 0xb, 0x16, 0x12, 0x6, 0x48]}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_HE_LTF={0x5}]}, @NL80211_BAND_2GHZ={0xc, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}]}]}, @NL80211_ATTR_MESH_CONFIG={0x2c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_HWMP_PATH_TO_ROOT_TIMEOUT={0x8, 0x17, 0x1000}, @NL80211_MESHCONF_HWMP_CONFIRMATION_INTERVAL={0x6, 0x19, 0x7}, @NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0x3}, @NL80211_MESHCONF_MIN_DISCOVERY_TIMEOUT={0x6, 0xa, 0x7}, @NL80211_MESHCONF_MAX_PEER_LINKS={0x6, 0x4, 0x40}]}, @NL80211_ATTR_MESH_SETUP={0xc, 0x70, [@NL80211_MESH_SETUP_AUTH_PROTOCOL={0x5, 0x8, 0x4}]}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x130}, 0x1, 0x0, 0x0, 0x10}, 0x11) sendmsg$BATADV_CMD_GET_ORIGINATORS(r1, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x0, 0x4, 0x70bd28, 0x25dfdbff, {}, [@BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x4}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000040) sendmsg$NL80211_CMD_ASSOCIATE(r1, 0x0, 0x0) ioctl$sock_SIOCSIFVLAN_SET_VLAN_FLAG_CMD(r1, 0x8983, &(0x7f0000000380)={0x7, 'vcan0\x00', {0x3}, 0x1c}) ppoll(&(0x7f00000003c0)=[{r0}], 0x1, &(0x7f0000000400)={0x77359400}, &(0x7f0000000440)={[0x2]}, 0x8) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r1, 0x8983, &(0x7f0000000480)={0x0, 'ip6_vti0\x00', {0x1}, 0x5}) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f00000006c0)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000680)={&(0x7f0000000500)={0x158, 0x0, 0x401, 0x70bd27, 0x25dfdbfc, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x5}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0x9, 0x7}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0x9, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x8}}, {{@pci={{0x8}, {0x11}}, {0x8}}, {0x8, 0x9, 0x2}}]}, 0x158}, 0x1, 0x0, 0x0, 0x24004804}, 0x4) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000740), r1) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x58, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x40}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}]}, 0x58}, 0x1, 0x0, 0x0, 0x2004d004}, 0x4090) (async) sendmsg$L2TP_CMD_SESSION_GET(r1, &(0x7f0000000840)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x58, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x40}, @L2TP_ATTR_DATA_SEQ={0x5, 0x4, 0x7}, @L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x4}, @L2TP_ATTR_RECV_TIMEOUT={0xc, 0x16, 0x3}, @L2TP_ATTR_IP6_DADDR={0x14, 0x20, @private1={0xfc, 0x1, '\x00', 0x1}}, @L2TP_ATTR_UDP_DPORT={0x6, 0x1b, 0x4e21}]}, 0x58}, 0x1, 0x0, 0x0, 0x2004d004}, 0x4090) socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000008c0), r1) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r4, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x68, r5, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008018}, 0x20000001) (async) sendmsg$NL80211_CMD_STOP_SCHED_SCAN(r4, &(0x7f00000009c0)={&(0x7f0000000880)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000980)={&(0x7f0000000900)={0x68, r5, 0x800, 0x70bd25, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_COOKIE={0xc, 0x58, 0x37}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x46}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x76}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0x20}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xb}, @NL80211_ATTR_COOKIE={0xc, 0x58, 0xa}]}, 0x68}, 0x1, 0x0, 0x0, 0x4008018}, 0x20000001) openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x306841377057f2, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000a00), 0x306841377057f2, 0x0) write$tun(r6, &(0x7f0000000a40)={@val={0x0, 0xd}, @void, @eth={@dev={'\xaa\xaa\xaa\xaa\xaa', 0x2c}, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x40}, @void, {@x25={0x805, {0x2, 0x3e, 0xff, "1d2e68be108abb64ef93efeeb1c7960a161e235861473d09ccc2a42acfb9145baa46c96832ad16683e62af45749fc08e0f368bd92b8bfdfd1c4b8c3c80c51a7b6d50f889392bb6f4e41ce9313e8db53f0bfdd8a644f234963f2ec37b1d414f41c36308f7b627922ebc30e3eeb24e"}}}}}, 0x83) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000b40), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000b80)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, r7, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000801) (async) sendmsg$BATADV_CMD_GET_HARDIF(r4, &(0x7f0000000c40)={&(0x7f0000000b00)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000bc0)={0x34, r7, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_BRIDGE_LOOP_AVOIDANCE_ENABLED={0x5, 0x2e, 0x1}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r8}, @BATADV_ATTR_MESH_IFINDEX={0x8}]}, 0x34}, 0x1, 0x0, 0x0, 0x4}, 0x4000801) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000cc0)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000cc0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r9, &(0x7f0000000ec0)={&(0x7f0000000c80)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000e80)={&(0x7f0000000d00)={0x168, r5, 0x300, 0x70bd2d, 0x25dfdbff, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x80, 0x25}}}}, [@NL80211_ATTR_STA_WME={0x24, 0x81, [@NL80211_STA_WME_UAPSD_QUEUES={0x5}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x2}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0xd}, @NL80211_STA_WME_MAX_SP={0x5, 0x2, 0x1}]}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x8000, 0x7}}, @NL80211_ATTR_STA_SUPPORT_P2P_PS={0x5}, @NL80211_ATTR_VLAN_ID={0x6, 0x11a, 0x1}, @NL80211_ATTR_AIRTIME_WEIGHT={0x6, 0x112, 0x8}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xf8, 0xbe, "0fd3922b6ea7d051729134f7c363d497c7c69e33c41d80845222f2468f84d1c24e48002dbdcc710ef189d7b91f03da5d7f06869f7575242a0b7d18e1ff7dff7f40b2003a041cbfd4645f2d041285946f3c8291e61add910ec7a0a7b2dc30c86fa8140ed4935221541d019a9bac99ef001564f31a4643161e0e89cf0de0a70b105e7b0ef86aad3c4255a1b1b6364f0f0dcfb043a8697f07a12440f119c3dc022780dafda4802f240e43c644770b9b9b4086a5e2ea6852fb7ce6f2ac3c55932774dff7f4300a50d64ddfa025b2fd1872b91ae69319c3cb35fd14bc00f09e2a972e243f0b6751c2d0877e2730cf105cb639dd2836bc"}]}, 0x168}, 0x1, 0x0, 0x0, 0x8000}, 0x94) r11 = socket$inet_dccp(0x2, 0x6, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000f00)={'nr0\x00'}) recvmmsg(r11, &(0x7f0000002380)=[{{&(0x7f0000000f40)=@pppol2tpin6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @private1}}}, 0x80, &(0x7f00000010c0)=[{&(0x7f0000000fc0)=""/240, 0xf0}], 0x1}, 0xffffffff}, {{0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000001100)=""/252, 0xfc}, {&(0x7f0000001200)=""/199, 0xc7}, {&(0x7f0000001300)=""/35, 0x23}], 0x3, &(0x7f0000001380)=""/4096, 0x1000}, 0xe610}], 0x2, 0x0, &(0x7f0000002400)={0x77359400}) sendmsg$NL80211_CMD_DEL_INTERFACE(r12, &(0x7f0000002500)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000024c0)={&(0x7f0000002480)={0x28, r5, 0x2, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x100, 0x5a}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x48010}, 0x20000804) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, 0xfffffffffffffffe, 0x0) (async) setsockopt$ALG_SET_KEY(r12, 0x117, 0x1, 0xfffffffffffffffe, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000002540)={'wlan0\x00'}) 884.645549ms ago: executing program 2 (id=1497): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f00000003c0), r0) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="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", @ANYRES16=r1, @ANYBLOB="010026bd7000fbdbdf25170000000c000600010000000100000004003080"], 0x24}, 0x1, 0x0, 0x0, 0x2800a000}, 0x8010) 689.806869ms ago: executing program 5 (id=1498): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="488ea7607c1aa24d8df35db7b500ebde29d4a2eb3b05000010000104000000000000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000280012800b000100677265746170000018000280050013000100000005000a000000000004001200"], 0x48}}, 0x0) (async) r2 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), 0xffffffffffffffff) (async, rerun: 64) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000000), &(0x7f0000000040)=0x4) (async, rerun: 64) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async, rerun: 64) syz_emit_ethernet(0x2a, &(0x7f0000000000)={@local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x2b, 0x0, 0x0, 0x0, 0x2, 0x0, @rand_addr, @multicast1}, @address_request}}}}, 0x0) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_LOCAL_AUTH_CHUNKS(0xffffffffffffffff, 0x84, 0x1b, 0x0, 0x0) (async) sendmsg$SMC_PNETID_ADD(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB='\t\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000000000000000000020000000900010073797a30000000001400020077673000"/46], 0x34}}, 0x0) 546.75804ms ago: executing program 3 (id=1499): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x5, 0x7) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000000)={'ipvlan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x10, 0x2, [@TCA_CAKE_BASE_RATE64={0x5}]}}]}, 0x40}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), 0xffffffffffffffff) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}]}, 0x58}}, 0x24000044) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000000ffdbdf255100000008000300", @ANYRES32=r7, @ANYBLOB="05008a00048c0000"], 0x24}}, 0x8000) 461.560806ms ago: executing program 5 (id=1500): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000040)={'vxcan0\x00', 0x0}) (async, rerun: 64) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) (rerun: 64) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@can_newroute={0x24, 0x18, 0x1, 0x0, 0x0, {0x1d, 0x1, 0x8}, [@CGW_LIM_HOPS={0x5, 0xd, 0x1}, @CGW_SRC_IF={0x8, 0x9, r2}]}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x200400c4) (async) sendmsg$nl_route(r0, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=@dellink={0x28, 0x11, 0x1, 0x70bd30, 0x25dfdbfb, {0x0, 0x0, 0x0, r1, 0x28483, 0x40520}, [@IFLA_PROTO_DOWN={0x5, 0x27, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x810}, 0x400a) (async, rerun: 64) syz_emit_ethernet(0x1466, &(0x7f0000000540)={@local, @link_local, @void, {@ipv6={0x86dd, @udp={0xb, 0x6, "6959b7", 0x1430, 0x11, 0x1, @rand_addr=' \x01\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, {[@srh={0xc, 0x2, 0x4, 0x1, 0x6, 0x40, 0xfffa, [@mcast1]}, @routing={0x2f, 0x6, 0x2, 0x2, 0x0, [@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @ipv4={'\x00', '\xff\xff', @empty}, @dev={0xfe, 0x80, '\x00', 0x32}]}, @dstopts={0xc, 0x1, '\x00', [@padn, @enc_lim={0x4, 0x1, 0x1}, @pad1]}, @routing={0x2c, 0x8, 0x1, 0x3, 0x0, [@dev={0xfe, 0x80, '\x00', 0x1a}, @private0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x33}}, @private1={0xfc, 0x1, '\x00', 0x1}]}, @fragment={0x2, 0x0, 0x55, 0x0, 0x0, 0x1, 0x66}, @fragment={0x5c, 0x0, 0x5, 0x1, 0x0, 0x8, 0x68}, @dstopts={0x32, 0x31, '\x00', [@enc_lim={0x4, 0x1, 0x5}, @jumbo={0xc2, 0x4, 0x5}, @hao={0xc9, 0x10, @private1}, @pad1, @ra={0x5, 0x2, 0x8000}, @hao={0xc9, 0x10, @loopback}, @padn={0x1, 0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x2, 0xa7, "6931483249dd14e958827000921ba87cc2efa9d95ce58892933025d58e4c5deeab61d76fa73039bcced39113fea4ac3500da17d611e2c7b8527ad25385bde112f86a32b392de5ce2ecdc90f894ea155f4348653fdb965b6929561e56c572abcd70a604a36dbd91cb4458c2c952d40f719e6ace4bf887ab6b9f6cca711d0260319fb826db1e3166008e545c36777634105e9fc0c1c884d0a75e3e1a59bbf85d12048ae7335c7f52"}, @generic={0x5e, 0xa1, "3387c336ec51e562ec11d51d0379015a3ef05842716f240e55230f57c5c4e41bf48304dd75d6529c9f08d6934db6eea87e037d3f6f1f5544659eebc328b80279975f009bfc088f98366e2be1182855e226e5168d57e6f57d362d987ab068ba45a2d732392912c9b265cdfa63572c267c4e37de8162d2e3bcbe08266c4305e84c1b2c9c5ad46a2aac4450fb0bf2be61987dfacb22d365dc3e2d92c9d9ca2b2e79aa"}]}, @hopopts={0x1d, 0xa, '\x00', [@calipso={0x7, 0x10, {0x0, 0x2, 0x10, 0x31d8, [0x80000000]}}, @padn={0x1, 0x1, [0x0]}, @calipso={0x7, 0x20, {0x2, 0x6, 0x6, 0x200, [0x80000000, 0x6, 0x4f9c]}}, @pad1, @hao={0xc9, 0x10, @local}, @jumbo={0xc2, 0x4, 0x7}]}, @routing={0x3c, 0x8, 0x2, 0x6, 0x0, [@remote, @mcast1, @private2={0xfc, 0x2, '\x00', 0x1}, @remote]}, @hopopts={0xf0, 0x22, '\x00', [@generic={0x4, 0x9a, "ba03c60a9e398d5de843acf790c56d53a1dbef5fadce8f0c768703b217d96ea9b4c7d8cc6d22ce1a846e9be353a2c6abac208609848213f56919123b0c4a9454b169df1e539112872fb4c93fe203f36a7affa84ffa4146522c4faf690a954d35b87a3d2bf0fe51603364f304e527b5eeacf676bd8a3d8ed56c3268cc7549719460c1dc48d1ce2de5d87dcde51f6d3cb4275ef7e45a31c7e2f392"}, @calipso={0x7, 0x40, {0x1, 0xe, 0x8, 0x4, [0xd2, 0x2, 0x100, 0xe, 0xfffffffffffffff8, 0x8, 0x8]}}, @hao={0xc9, 0x10, @ipv4={'\x00', '\xff\xff', @private=0xa010100}}, @calipso={0x7, 0x20, {0x0, 0x6, 0x9, 0x2, [0xfff, 0x6, 0x1]}}]}], {0x4e22, 0x4e21, 0x1018, 0x0, @wg=@data={0x4, 0x0, 0x4, "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"}}}}}}}, 0x0) (rerun: 64) 388.95261ms ago: executing program 2 (id=1501): r0 = socket$tipc(0x1e, 0x5, 0x0) writev(r0, &(0x7f0000000240)=[{&(0x7f0000000000)="8c", 0x1}], 0x1) (async) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r1, &(0x7f0000000200)={&(0x7f0000000080)=@kern={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)=[{&(0x7f00000000c0)={0xac, 0x3d, 0x2, 0x70bd27, 0x25dfdbff, "", [@generic="51d4d0f8cc7e2d18ec665eac05626b1c90675471c04ed72fe6b7ed309234438d201b9f201017df40061aadd5d498bf6dc51f934611ad5921eafe9e03e2d5744490c2afcace0112b31b484633962168165dfe9a42c307a6df6f65ddac30af23f1e33ddbae51446d90ab143c082d6576919b8218c5fe7b951a18d68f9ce0cb9855809ad41bb33f7a634fa24c6c1f752b4f6d4c1ccb0451bad5d3"]}, 0xac}], 0x1, &(0x7f00000001c0)=[@rights={{0x1c, 0x1, 0x1, [r1, r1, r1]}}], 0x20, 0x4000800}, 0x8000) (async) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000d80)=ANY=[@ANYBLOB="240000002c00010000000000000000000400008010000c"], 0x24}], 0x1}, 0x0) 172.618927ms ago: executing program 5 (id=1502): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000002080001400000001408000240000000120400048008000640000000050900010073797a30"], 0x10c}}, 0x0) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x8) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4001, 0x0, @loopback}, 0x1c) getsockopt$inet6_buf(r1, 0x29, 0x32, 0x0, &(0x7f0000000040)) r2 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000080)=0x1, 0x4) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000098000000060a010400000000000000000100000008000b400000000070000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000380001800c0001006269747769736500280002800800034000000002080001400000001408000240000000120400048008000640000000050900010073797a30"], 0x10c}}, 0x0) (async) ioctl$FS_IOC_SETVERSION(r0, 0x40087602, &(0x7f0000000000)=0x8) (async) socket$inet6_tcp(0xa, 0x1, 0x0) (async) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x4001, 0x0, @loopback}, 0x1c) (async) getsockopt$inet6_buf(r1, 0x29, 0x32, 0x0, &(0x7f0000000040)) (async) socket$can_raw(0x1d, 0x3, 0x1) (async) setsockopt$CAN_RAW_RECV_OWN_MSGS(r2, 0x65, 0x4, &(0x7f0000000080)=0x1, 0x4) (async) 83.964292ms ago: executing program 2 (id=1503): r0 = socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = syz_init_net_socket$ax25(0x3, 0x5, 0xce) setsockopt$ax25_SO_BINDTODEVICE(r2, 0x101, 0x19, &(0x7f0000000040)=@rose={'rose', 0x0}, 0x10) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, 0x0) setsockopt$packet_add_memb(r1, 0x107, 0x1, &(0x7f0000000100)={0x0, 0x2, 0x6, @local}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=ANY=[@ANYBLOB="4c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0010000000000000240012800b000100697036746e6c000014000280050009002900000008000100", @ANYRES32, @ANYBLOB="08000400000058"], 0x4c}}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(0xffffffffffffffff, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="01000800030078927d25abed0e301ccd166d4dc6132f5a8be8732db249182ad8b21e037bc2807ead14faead63a4c3cc2706e6956c677c18f5e65f57a0048a32bce8d337942c54f511e67af33bd4ca129", @ANYRES32, @ANYBLOB="0c009900ff0700007100000008000500040000001400040073797a6b616c6c657230000000000000"], 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_RESET_ASSOC(r6, 0x84, 0x78, 0x0, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r8 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$SIOCRSSL2CALL(r8, 0x89e2, 0x0) 0s ago: executing program 3 (id=1504): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r0, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r1, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r1], 0x40}, 0x1, 0x0, 0x0, 0x4014}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x3, 0x0) getsockname$packet(r0, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x44, 0x24, 0x5820a61ca228659, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0x9}, {0xffff, 0xffff}, {0x0, 0x7}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0xffffffffffffffdb, 0x3, {0x6, 0x2}}}}]}, 0x44}}, 0x800) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000b00)=@newtfilter={0x38, 0x28, 0xd27, 0x1000001, 0x0, {0x0, 0x0, 0x0, r5, {0xd, 0x9}, {0x8}, {0x0, 0x7}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x8, 0x2, [@TCA_CGROUP_EMATCHES={0x4}]}}]}, 0x38}}, 0x4000) kernel console output (not intermixed with test programs): ][ T8354] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.651564][ T8354] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.677030][ T8354] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.724300][ T8597] delete_channel: no stack [ 141.726920][ T8354] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 141.962856][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 141.999370][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.033885][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 142.068000][ T8368] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 142.075079][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 142.321954][ T8368] veth0_vlan: entered promiscuous mode [ 142.360380][ T8368] veth1_vlan: entered promiscuous mode [ 142.421482][ T8368] veth0_macvtap: entered promiscuous mode [ 142.436299][ T8368] veth1_macvtap: entered promiscuous mode [ 142.514007][ T8368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.526819][ T8626] netlink: 'syz.2.751': attribute type 3 has an invalid length. [ 142.547967][ T8368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.558618][ T8368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.569728][ T8368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.580390][ T8368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.591550][ T8368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.601652][ T8368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.612283][ T8368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.617355][ T5831] Bluetooth: hci0: command tx timeout [ 142.622450][ T8368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 142.638417][ T8368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.643994][ T8638] RDS: rds_bind could not find a transport for fe80::bb, load rds_tcp or rds_rdma? [ 142.649860][ T8368] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 142.669234][ T8368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.680540][ T8368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.691471][ T8368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.702060][ T8368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.712098][ T8368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.722762][ T8368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.732824][ T8368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.743441][ T8368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.753460][ T8368] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 142.764133][ T8368] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 142.776233][ T8368] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 142.806427][ T8368] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.815602][ T8368] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.826030][ T8368] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.897196][ T8368] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 142.934714][ T5831] Bluetooth: hci5: command tx timeout [ 143.251915][ T3446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.275864][ T3446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.346026][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 143.377759][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 143.583740][ T8675] netlink: 'syz.5.766': attribute type 1 has an invalid length. [ 143.765617][ T8681] __nla_validate_parse: 3 callbacks suppressed [ 143.765637][ T8681] netlink: 8 bytes leftover after parsing attributes in process `syz.2.769'. [ 143.803109][ T8681] netlink: 16 bytes leftover after parsing attributes in process `syz.2.769'. [ 143.831700][ T8683] netlink: 9 bytes leftover after parsing attributes in process `syz.2.769'. [ 143.857918][ T8683] 0·: renamed from hsr_slave_1 (while UP) [ 143.881276][ T8683] 0·: entered allmulticast mode [ 143.887943][ T8683] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 143.922474][ T8687] netlink: 16178 bytes leftover after parsing attributes in process `syz.1.771'. [ 143.922917][ T8693] netlink: 'syz.5.772': attribute type 1 has an invalid length. [ 144.261216][ T1904] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.368404][ T1904] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.484656][ T8706] netlink: 12 bytes leftover after parsing attributes in process `syz.5.780'. [ 144.491178][ T8713] sctp: [Deprecated]: syz.3.779 (pid 8713) Use of int in maxseg socket option. [ 144.491178][ T8713] Use struct sctp_assoc_value instead [ 144.599403][ T1904] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.763066][ T1904] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.854673][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 144.865043][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 144.879642][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 144.888233][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 144.895886][ T5843] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 144.903812][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 145.073139][ T1904] bridge_slave_1: left allmulticast mode [ 145.084424][ T1904] bridge_slave_1: left promiscuous mode [ 145.097685][ T1904] bridge0: port 2(bridge_slave_1) entered disabled state [ 145.184751][ T1904] bridge_slave_0: left allmulticast mode [ 145.190536][ T1904] bridge_slave_0: left promiscuous mode [ 145.196876][ T1904] bridge0: port 1(bridge_slave_0) entered disabled state [ 145.406789][ T8751] netlink: 4 bytes leftover after parsing attributes in process `syz.1.787'. [ 145.720339][ T1904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 145.731981][ T1904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 145.743731][ T1904] bond0 (unregistering): Released all slaves [ 145.753987][ T8734] netlink: 8 bytes leftover after parsing attributes in process `syz.5.782'. [ 145.766225][ T8734] bridge: RTM_NEWNEIGH with invalid state 0x0 [ 146.007907][ T8760] netlink: 8 bytes leftover after parsing attributes in process `syz.5.788'. [ 146.122034][ T8770] netlink: 4 bytes leftover after parsing attributes in process `syz.1.790'. [ 146.301618][ T8772] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 146.571610][ T1904] hsr_slave_0: left promiscuous mode [ 146.645305][ T1904] hsr_slave_1: left promiscuous mode [ 146.653706][ T1904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.663629][ T1904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.697260][ T1904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.705628][ T1904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.751658][ T1904] veth1_macvtap: left promiscuous mode [ 146.764618][ T1904] veth0_macvtap: left promiscuous mode [ 146.785376][ T1904] veth1_vlan: left promiscuous mode [ 146.791491][ T1904] veth0_vlan: left promiscuous mode [ 146.809855][ T8804] netlink: 40 bytes leftover after parsing attributes in process `syz.1.796'. [ 147.008321][ T5831] Bluetooth: hci5: command tx timeout [ 147.444850][ T1904] team0 (unregistering): Port device team_slave_1 removed [ 147.501328][ T1904] team0 (unregistering): Port device team_slave_0 removed [ 147.979805][ T8815] netlink: 'syz.1.799': attribute type 8 has an invalid length. [ 148.021579][ T8723] chnl_net:caif_netlink_parms(): no params data found [ 148.287040][ T5831] Bluetooth: hci0: command 0x0c20 tx timeout [ 148.487222][ T8723] bridge0: port 1(bridge_slave_0) entered blocking state [ 148.494371][ T8723] bridge0: port 1(bridge_slave_0) entered disabled state [ 148.512135][ T8723] bridge_slave_0: entered allmulticast mode [ 148.569715][ T8723] bridge_slave_0: entered promiscuous mode [ 148.614668][ T8723] bridge0: port 2(bridge_slave_1) entered blocking state [ 148.664751][ T8723] bridge0: port 2(bridge_slave_1) entered disabled state [ 148.672890][ T8723] bridge_slave_1: entered allmulticast mode [ 148.680643][ T8723] bridge_slave_1: entered promiscuous mode [ 148.794102][ T8723] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 148.842401][ T8723] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 148.878698][ T8862] __nla_validate_parse: 1 callbacks suppressed [ 148.878716][ T8862] netlink: 36 bytes leftover after parsing attributes in process `syz.1.812'. [ 148.994216][ T8723] team0: Port device team_slave_0 added [ 149.049252][ T8723] team0: Port device team_slave_1 added [ 149.087393][ T5831] Bluetooth: hci5: command tx timeout [ 149.160292][ T8723] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 149.205252][ T8723] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.218154][ T8873] netlink: 256 bytes leftover after parsing attributes in process `syz.3.814'. [ 149.276238][ T8873] netlink: 72 bytes leftover after parsing attributes in process `syz.3.814'. [ 149.318561][ T8723] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 149.358920][ T8723] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 149.386399][ T8723] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 149.456882][ T8723] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 149.514247][ T8878] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 149.564320][ T8878] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 149.810492][ T8723] hsr_slave_0: entered promiscuous mode [ 149.826756][ T8723] hsr_slave_1: entered promiscuous mode [ 149.848437][ T8723] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 149.856053][ T8723] Cannot create hsr debugfs directory [ 150.290184][ T8914] openvswitch: netlink: Message has 1219 unknown bytes. [ 150.305371][ T8914] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.391109][ T8922] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 150.572491][ T8928] netlink: 12 bytes leftover after parsing attributes in process `syz.3.831'. [ 150.749545][ T8930] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 150.757066][ T8936] openvswitch: netlink: nsh attribute has 65524 unknown bytes. [ 150.757101][ T8936] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 150.843190][ T8723] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 150.907408][ T8723] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 150.934960][ T8723] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 150.951585][ T8941] netlink: 'syz.2.837': attribute type 4 has an invalid length. [ 150.975501][ T8723] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 151.142906][ T8950] xt_hashlimit: max too large, truncated to 1048576 [ 151.170421][ T5831] Bluetooth: hci5: command tx timeout [ 151.177716][ T8950] netlink: 'syz.2.839': attribute type 1 has an invalid length. [ 151.182896][ T8723] 8021q: adding VLAN 0 to HW filter on device bond0 [ 151.199852][ T8723] 8021q: adding VLAN 0 to HW filter on device team0 [ 151.214975][ T3446] bridge0: port 1(bridge_slave_0) entered blocking state [ 151.222432][ T3446] bridge0: port 1(bridge_slave_0) entered forwarding state [ 151.244879][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 151.252461][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 151.528301][ T8965] netlink: 4 bytes leftover after parsing attributes in process `syz.1.843'. [ 151.710438][ T8973] netlink: 12 bytes leftover after parsing attributes in process `syz.5.846'. [ 151.791098][ T8985] netlink: 68 bytes leftover after parsing attributes in process `syz.1.850'. [ 151.890968][ T8723] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 151.970969][ T8994] netlink: 4 bytes leftover after parsing attributes in process `syz.3.853'. [ 152.079803][ T8994] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.092529][ T8994] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.126327][ T8994] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.146559][ T8994] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.229386][ T8723] veth0_vlan: entered promiscuous mode [ 152.264186][ T9003] netlink: 36 bytes leftover after parsing attributes in process `syz.1.857'. [ 152.303444][ T8723] veth1_vlan: entered promiscuous mode [ 152.393467][ T8723] veth0_macvtap: entered promiscuous mode [ 152.428629][ T8723] veth1_macvtap: entered promiscuous mode [ 152.469139][ T8723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.480029][ T8723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.490470][ T8723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.501472][ T8723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.532954][ T8723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.552530][ T8723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.563834][ T8723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 152.575339][ T8723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.598614][ T8723] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 152.642674][ T8723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.680776][ T8723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.716936][ T8723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.748517][ T8723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.760217][ T8723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.771669][ T8723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.782070][ T8723] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 152.792894][ T8723] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 152.804040][ T8723] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 152.824247][ T9032] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 152.869795][ T8723] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.904392][ T8723] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.923654][ T8723] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 152.947039][ T8723] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.042291][ T9042] 8021q: adding VLAN 0 to HW filter on device bond1 [ 153.088819][ T9050] veth1_to_hsr: entered promiscuous mode [ 153.103950][ T9042] netlink: 16 bytes leftover after parsing attributes in process `syz.3.867'. [ 153.219209][ T9041] veth1_to_hsr: left promiscuous mode [ 153.257044][ T5831] Bluetooth: hci5: command tx timeout [ 153.289106][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.317730][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.408205][ T3446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 153.447256][ T3446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 153.467772][ T9073] IPVS: set_ctl: invalid protocol: 46 0.0.0.0:20004 [ 153.608961][ T9077] netlink: 'syz.2.876': attribute type 3 has an invalid length. [ 153.845545][ T9091] 8021q: adding VLAN 0 to HW filter on device bond8 [ 153.899485][ T9091] bond8: (slave bridge4): Enslaving as an active interface with an up link [ 154.258112][ T9123] __nla_validate_parse: 4 callbacks suppressed [ 154.258135][ T9123] netlink: 896 bytes leftover after parsing attributes in process `syz.1.889'. [ 154.299500][ T9125] netlink: 4 bytes leftover after parsing attributes in process `syz.2.888'. [ 154.309517][ T9125] bridge_slave_1: left allmulticast mode [ 154.315572][ T9125] bridge_slave_1: left promiscuous mode [ 154.322050][ T9125] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.336344][ T9125] bridge_slave_0: left allmulticast mode [ 154.346153][ T9125] bridge_slave_0: left promiscuous mode [ 154.355501][ T9125] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.644599][ T9137] netlink: 'syz.2.895': attribute type 2 has an invalid length. [ 154.901301][ T9151] netdevsim netdevsim1: Direct firmware load for ./file0 failed with error -2 [ 154.922881][ T9151] netdevsim netdevsim1: Falling back to sysfs fallback for: ./file0 [ 154.934322][ T9153] dvmrp1: entered allmulticast mode [ 154.954514][ T9153] dvmrp1: left allmulticast mode [ 155.090280][ T5092] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.512390][ T5092] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.527091][ T9176] netlink: 32 bytes leftover after parsing attributes in process `syz.5.907'. [ 155.533247][ T9177] netlink: 165 bytes leftover after parsing attributes in process `syz.2.905'. [ 155.699759][ T5092] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.778527][ T5843] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 155.795025][ T9187] netlink: 'syz.2.909': attribute type 1 has an invalid length. [ 155.795874][ T5843] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 155.812923][ T5843] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 155.825831][ T5843] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 155.837755][ T5843] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 155.840765][ T9187] netlink: 'syz.2.909': attribute type 2 has an invalid length. [ 155.856254][ T5843] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 155.901842][ T9193] netlink: 20 bytes leftover after parsing attributes in process `syz.3.911'. [ 155.902709][ T9187] netlink: 'syz.2.909': attribute type 1 has an invalid length. [ 155.919019][ T9187] netlink: 'syz.2.909': attribute type 2 has an invalid length. [ 155.927161][ T9187] netlink: 'syz.2.909': attribute type 1 has an invalid length. [ 155.935287][ T9187] netlink: 'syz.2.909': attribute type 2 has an invalid length. [ 155.944887][ T9187] netlink: 'syz.2.909': attribute type 1 has an invalid length. [ 155.952714][ T9187] netlink: 'syz.2.909': attribute type 2 has an invalid length. [ 155.959521][ T5092] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 156.175132][ T9203] openvswitch: netlink: Key type 162 is out of range max 32 [ 156.360109][ T9207] netlink: 24 bytes leftover after parsing attributes in process `syz.3.917'. [ 156.394340][ T5092] bridge_slave_1: left allmulticast mode [ 156.406436][ T5092] bridge_slave_1: left promiscuous mode [ 156.451096][ T5092] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.507888][ T5092] bridge_slave_0: left allmulticast mode [ 156.532740][ T5092] bridge_slave_0: left promiscuous mode [ 156.535184][ T9223] netlink: 4 bytes leftover after parsing attributes in process `syz.3.921'. [ 156.554952][ T5092] bridge0: port 1(bridge_slave_0) entered disabled state [ 156.699679][ T9233] netlink: 224 bytes leftover after parsing attributes in process `syz.1.922'. [ 156.845223][ T9237] netlink: 4 bytes leftover after parsing attributes in process `syz.3.924'. [ 157.021858][ T5092] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.035290][ T5092] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.045932][ T5092] bond0 (unregistering): Released all slaves [ 157.079995][ T9225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 157.109202][ T9227] netlink: 4 bytes leftover after parsing attributes in process `syz.1.922'. [ 157.444416][ T9249] batadv_slave_1: entered promiscuous mode [ 157.592906][ T9249] batadv_slave_1: left promiscuous mode [ 157.705046][ T9186] chnl_net:caif_netlink_parms(): no params data found [ 157.751961][ T5092] hsr_slave_0: left promiscuous mode [ 157.790658][ T5092] hsr_slave_1: left promiscuous mode [ 157.806445][ T5092] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 157.819659][ T5092] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 157.847032][ T5092] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 157.863236][ T5092] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 157.887847][ T5831] Bluetooth: hci5: command tx timeout [ 157.939595][ T5092] veth1_macvtap: left promiscuous mode [ 157.965362][ T5092] veth0_macvtap: left promiscuous mode [ 157.990844][ T5092] veth1_vlan: left promiscuous mode [ 158.022178][ T5092] veth0_vlan: left promiscuous mode [ 158.802866][ T5092] team0 (unregistering): Port device team_slave_1 removed [ 158.856566][ T5092] team0 (unregistering): Port device team_slave_0 removed [ 159.308516][ T9285] __nla_validate_parse: 2 callbacks suppressed [ 159.308536][ T9285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.938'. [ 159.324470][ T9293] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 159.567551][ T9318] validate_nla: 60 callbacks suppressed [ 159.567574][ T9318] netlink: 'syz.2.944': attribute type 27 has an invalid length. [ 159.668567][ T9186] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.692225][ T9186] bridge0: port 1(bridge_slave_0) entered disabled state [ 159.722854][ T9186] bridge_slave_0: entered allmulticast mode [ 159.762291][ T9186] bridge_slave_0: entered promiscuous mode [ 159.774910][ T9186] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.783504][ T9186] bridge0: port 2(bridge_slave_1) entered disabled state [ 159.791171][ T9186] bridge_slave_1: entered allmulticast mode [ 159.798957][ T9186] bridge_slave_1: entered promiscuous mode [ 159.865892][ T9332] ipt_rpfilter: unknown options [ 159.880215][ T9186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 159.910162][ T9186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 159.948244][ T9332] netlink: 48 bytes leftover after parsing attributes in process `syz.1.948'. [ 159.977266][ T5831] Bluetooth: hci5: command tx timeout [ 160.068888][ T9186] team0: Port device team_slave_0 added [ 160.077904][ T9186] team0: Port device team_slave_1 added [ 160.189242][ T9186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 160.203332][ T9186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.230266][ T9186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 160.244382][ T9186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 160.251587][ T9186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 160.279411][ T9186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 160.370395][ T9186] hsr_slave_0: entered promiscuous mode [ 160.378583][ T9186] hsr_slave_1: entered promiscuous mode [ 160.385708][ T9186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 160.395795][ T9186] Cannot create hsr debugfs directory [ 160.507098][ T9361] netlink: 4 bytes leftover after parsing attributes in process `syz.1.957'. [ 160.536716][ T9361] nbd: couldn't find device at index -1 [ 160.585726][ T9365] IPVS: Unknown mcast interface: vcan0 [ 161.032114][ T9387] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 161.145218][ T9186] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 161.175952][ T9186] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 161.218266][ T9186] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 161.234682][ T9186] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 161.533656][ T9186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 161.571790][ T9186] 8021q: adding VLAN 0 to HW filter on device team0 [ 161.683889][ T1904] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.691079][ T1904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 161.738267][ T1904] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.745505][ T1904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 161.776068][ T9408] team_slave_0: entered promiscuous mode [ 161.782163][ T9408] team_slave_1: entered promiscuous mode [ 161.792846][ T9408] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 161.814674][ T9418] netlink: 24 bytes leftover after parsing attributes in process `syz.1.974'. [ 161.819841][ T9415] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 161.856663][ T9186] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 161.867248][ T9186] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 161.976607][ T9424] netlink: zone id is out of range [ 162.006261][ T9426] netlink: zone id is out of range [ 162.011704][ T9424] netlink: zone id is out of range [ 162.030994][ T9426] netlink: zone id is out of range [ 162.036196][ T9426] netlink: zone id is out of range [ 162.043520][ T9422] netlink: 76 bytes leftover after parsing attributes in process `syz.1.977'. [ 162.053096][ T5831] Bluetooth: hci5: command tx timeout [ 162.062640][ T9424] netlink: zone id is out of range [ 162.358218][ T9186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 162.433345][ T9186] veth0_vlan: entered promiscuous mode [ 162.474419][ T9186] veth1_vlan: entered promiscuous mode [ 162.582365][ T9447] netlink: 'syz.1.983': attribute type 1 has an invalid length. [ 162.605565][ T9447] netlink: 'syz.1.983': attribute type 2 has an invalid length. [ 162.620262][ T9455] netlink: 12 bytes leftover after parsing attributes in process `syz.2.985'. [ 162.648445][ T9186] veth0_macvtap: entered promiscuous mode [ 162.661927][ T9455] geneve2: entered promiscuous mode [ 162.703294][ T9186] veth1_macvtap: entered promiscuous mode [ 162.724163][ T9186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.752281][ T9186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.776137][ T9186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.793445][ T9186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.803718][ T9186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.855331][ T9186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.873362][ T9186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 162.884214][ T9186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.896130][ T9467] netlink: 24 bytes leftover after parsing attributes in process `syz.2.989'. [ 162.901877][ T9186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 162.916045][ T9186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.931919][ T9186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.942097][ T9186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.953922][ T9186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.964862][ T9186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.975866][ T9186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 162.986107][ T9186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 162.997028][ T9186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 163.008987][ T9186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 163.106011][ T9186] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.114862][ T9186] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.123945][ T9186] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.133034][ T9186] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.151483][ T9472] bridge0: port 1(hsr_slave_1) entered blocking state [ 163.174809][ T9472] bridge0: port 1(hsr_slave_1) entered disabled state [ 163.202792][ T9472] hsr_slave_1: entered allmulticast mode [ 163.214456][ T9472] hsr_slave_1: left allmulticast mode [ 163.222122][ T9477] xt_HMARK: proto mask must be zero with L3 mode [ 163.248366][ T9473] bridge0: port 1(hsr_slave_1) entered blocking state [ 163.275796][ T9473] bridge0: port 1(hsr_slave_1) entered disabled state [ 163.294324][ T9473] hsr_slave_1: entered allmulticast mode [ 163.311752][ T9473] hsr_slave_1: left allmulticast mode [ 163.561767][ T1032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.593433][ T1032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.664598][ T3446] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.699737][ T3446] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.203365][ T9522] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1005'. [ 164.248491][ T9524] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1006'. [ 164.328100][ T9526] netlink: 'syz.2.1005': attribute type 49 has an invalid length. [ 164.379451][ T9507] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1002'. [ 164.430358][ T9526] can: request_module (can-proto-3) failed. [ 165.040406][ T3446] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.181370][ T3446] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.292355][ T3446] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.365186][ T3446] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.455137][ T3446] bridge_slave_1: left allmulticast mode [ 165.461026][ T3446] bridge_slave_1: left promiscuous mode [ 165.466681][ T3446] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.478675][ T3446] bridge_slave_0: left allmulticast mode [ 165.484462][ T3446] bridge_slave_0: left promiscuous mode [ 165.493120][ T3446] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.668087][ T9560] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1011'. [ 165.697868][ T9565] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1013'. [ 165.951646][ T9575] openvswitch: netlink: Key type 34 is out of range max 32 [ 165.983648][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 166.002495][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 166.016046][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 166.031374][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 166.052140][ T5831] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 166.060015][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 166.253152][ T9589] syz.3.1020: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 166.275772][ T9589] CPU: 1 UID: 0 PID: 9589 Comm: syz.3.1020 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 166.286517][ T9589] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 166.296612][ T9589] Call Trace: [ 166.299886][ T9589] [ 166.302813][ T9589] dump_stack_lvl+0x241/0x360 [ 166.307562][ T9589] ? __pfx_dump_stack_lvl+0x10/0x10 [ 166.312895][ T9589] ? __pfx__printk+0x10/0x10 [ 166.317497][ T9589] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 166.324023][ T9589] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 166.330564][ T9589] warn_alloc+0x278/0x410 [ 166.334937][ T9589] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 166.341139][ T9589] ? __pfx_warn_alloc+0x10/0x10 [ 166.346073][ T9589] ? kasan_save_track+0x3f/0x80 [ 166.350961][ T9589] ? __kasan_kmalloc+0x98/0xb0 [ 166.355905][ T9589] ? xsk_setsockopt+0x4ea/0x950 [ 166.360973][ T9589] ? do_sock_setsockopt+0x3af/0x720 [ 166.366217][ T9589] ? __x64_sys_setsockopt+0x1ee/0x280 [ 166.371775][ T9589] ? do_syscall_64+0xf3/0x230 [ 166.376468][ T9589] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.382645][ T9589] __vmalloc_node_range_noprof+0x126/0x1380 [ 166.388657][ T9589] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 166.394998][ T9589] ? __kasan_kmalloc+0x98/0xb0 [ 166.399785][ T9589] vmalloc_user_noprof+0x74/0x80 [ 166.404728][ T9589] ? xskq_create+0xb6/0x170 [ 166.409232][ T9589] xskq_create+0xb6/0x170 [ 166.413741][ T9589] xsk_init_queue+0xa1/0x100 [ 166.418427][ T9589] xsk_setsockopt+0x4ea/0x950 [ 166.423186][ T9589] ? __pfx_xsk_setsockopt+0x10/0x10 [ 166.428389][ T9589] ? __pfx_aa_sk_perm+0x10/0x10 [ 166.433385][ T9589] ? aa_sock_opt_perm+0x79/0x120 [ 166.438504][ T9589] ? __pfx_xsk_setsockopt+0x10/0x10 [ 166.443794][ T9589] do_sock_setsockopt+0x3af/0x720 [ 166.449063][ T9589] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 166.454630][ T9589] ? __fget_files+0x395/0x410 [ 166.459348][ T9589] ? __fget_files+0x2a/0x410 [ 166.463961][ T9589] __x64_sys_setsockopt+0x1ee/0x280 [ 166.469176][ T9589] do_syscall_64+0xf3/0x230 [ 166.473725][ T9589] ? clear_bhb_loop+0x35/0x90 [ 166.478615][ T9589] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 166.484720][ T9589] RIP: 0033:0x7fc2e6f85d29 [ 166.489277][ T9589] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 166.508912][ T9589] RSP: 002b:00007fc2e6df9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 166.517464][ T9589] RAX: ffffffffffffffda RBX: 00007fc2e7175fa0 RCX: 00007fc2e6f85d29 [ 166.525448][ T9589] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000004 [ 166.533520][ T9589] RBP: 00007fc2e7001aa8 R08: 0000000000000004 R09: 0000000000000000 [ 166.541595][ T9589] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 166.549595][ T9589] R13: 0000000000000000 R14: 00007fc2e7175fa0 R15: 00007ffc4ce97c38 [ 166.557589][ T9589] [ 166.577419][ T9589] Mem-Info: [ 166.581040][ T9589] active_anon:4985 inactive_anon:0 isolated_anon:0 [ 166.581040][ T9589] active_file:1225 inactive_file:38291 isolated_file:0 [ 166.581040][ T9589] unevictable:768 dirty:55 writeback:25 [ 166.581040][ T9589] slab_reclaimable:10619 slab_unreclaimable:107357 [ 166.581040][ T9589] mapped:33679 shmem:1418 pagetables:778 [ 166.581040][ T9589] sec_pagetables:0 bounce:0 [ 166.581040][ T9589] kernel_misc_reclaimable:0 [ 166.581040][ T9589] free:1320821 free_pcp:457 free_cma:0 [ 166.634218][ T9589] Node 0 active_anon:19940kB inactive_anon:0kB active_file:4900kB inactive_file:153088kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:134716kB dirty:220kB writeback:0kB shmem:4136kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11988kB pagetables:3112kB sec_pagetables:0kB all_unreclaimable? no [ 166.670266][ T9589] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 166.701535][ T9589] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 166.729596][ T3446] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 166.734175][ T9589] lowmem_reserve[]: 0 2465 2466 0 0 [ 166.744915][ T9589] Node 0 DMA32 free:1359664kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:19904kB inactive_anon:0kB active_file:4900kB inactive_file:152256kB unevictable:1536kB writepending:216kB present:3129332kB managed:2552784kB mlocked:0kB bounce:0kB free_pcp:1640kB local_pcp:840kB free_cma:0kB [ 166.775554][ T9589] lowmem_reserve[]: 0 0 0 0 0 [ 166.781714][ T3446] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 166.782752][ T9589] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:4kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 166.818919][ T9589] lowmem_reserve[]: 0 0 0 0 0 [ 166.823851][ T9589] Node 1 Normal free:3908260kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:116kB local_pcp:112kB free_cma:0kB [ 166.825323][ T3446] bond0 (unregistering): Released all slaves [ 166.861173][ T9589] lowmem_reserve[]: 0 0 0 0 0 [ 166.866232][ T9589] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 166.879636][ T9589] Node 0 DMA32: 5*4kB (U) 17*8kB (UME) 12*16kB (UME) 97*32kB (UME) 62*64kB (UME) 78*128kB (UME) 152*256kB (UME) 164*512kB (UM) 73*1024kB (UME) 5*2048kB (UM) 277*4096kB (UM) = 1359868kB [ 166.900388][ T9589] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 166.915446][ T9589] Node 1 Normal: 193*4kB (UE) 40*8kB (UME) 32*16kB (UME) 193*32kB (UME) 91*64kB (UME) 27*128kB (UME) 12*256kB (UME) 6*512kB (UM) 6*1024kB (UME) 4*2048kB (UE) 945*4096kB (UM) = 3908260kB [ 166.942083][ T9589] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 166.978548][ T9589] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 166.991305][ T9589] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 167.003643][ T9589] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 167.020190][ T9589] 40934 total pagecache pages [ 167.025034][ T9589] 0 pages in swap cache [ 167.029450][ T9589] Free swap = 124996kB [ 167.033728][ T9589] Total swap = 124996kB [ 167.038745][ T9589] 2097051 pages RAM [ 167.042757][ T9589] 0 pages HighMem/MovableOnly [ 167.048308][ T9589] 427005 pages reserved [ 167.052569][ T9589] 0 pages cma reserved [ 167.180307][ T9594] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 167.229244][ T9594] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 167.348163][ T29] audit: type=1107 audit(1735182674.510:2): pid=9611 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='kÁnZb Æô¨/÷Û*GF”' [ 167.532383][ T9618] netem: unknown loss type 0 [ 167.538590][ T9618] netem: change failed [ 167.548421][ T9572] chnl_net:caif_netlink_parms(): no params data found [ 167.599054][ T9622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1030'. [ 167.658749][ T9618] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1030'. [ 167.682231][ T3446] hsr_slave_0: left promiscuous mode [ 167.693760][ T3446] hsr_slave_1: left promiscuous mode [ 167.701586][ T3446] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 167.709373][ T3446] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.717322][ T3446] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 167.724867][ T3446] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.747735][ T3446] veth1_macvtap: left promiscuous mode [ 167.753287][ T3446] veth0_macvtap: left promiscuous mode [ 167.759175][ T3446] veth1_vlan: left promiscuous mode [ 167.764769][ T3446] veth0_vlan: left promiscuous mode [ 168.116698][ T9630] netlink: 1280 bytes leftover after parsing attributes in process `syz.5.1032'. [ 168.131163][ T5831] Bluetooth: hci5: command tx timeout [ 168.132051][ T9630] openvswitch: netlink: Flow actions attr not present in new flow. [ 168.435571][ T3446] team0 (unregistering): Port device team_slave_1 removed [ 168.483277][ T3446] team0 (unregistering): Port device team_slave_0 removed [ 169.054899][ T9644] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1039'. [ 169.099025][ T9572] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.115757][ T9572] bridge0: port 1(bridge_slave_0) entered disabled state [ 169.126022][ T9650] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1037'. [ 169.129122][ T9572] bridge_slave_0: entered allmulticast mode [ 169.151783][ T9650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1037'. [ 169.165547][ T9572] bridge_slave_0: entered promiscuous mode [ 169.180781][ T9644] bridge0: port 1(bridge_slave_0) entered blocking state [ 169.188074][ T9644] bridge0: port 1(bridge_slave_0) entered forwarding state [ 169.217284][ T9572] bridge0: port 2(bridge_slave_1) entered blocking state [ 169.224872][ T9572] bridge0: port 2(bridge_slave_1) entered disabled state [ 169.281553][ T9572] bridge_slave_1: entered allmulticast mode [ 169.304237][ T9572] bridge_slave_1: entered promiscuous mode [ 169.450022][ T9663] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.474188][ T9663] bond0: (slave bond1): Enslaving as an active interface with an up link [ 169.508310][ T9572] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 169.588801][ T9572] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 169.749274][ T9572] team0: Port device team_slave_0 added [ 169.782576][ T9572] team0: Port device team_slave_1 added [ 169.876582][ T9695] sctp: [Deprecated]: syz.3.1047 (pid 9695) Use of struct sctp_assoc_value in delayed_ack socket option. [ 169.876582][ T9695] Use struct sctp_sack_info instead [ 169.930118][ T9572] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 169.945144][ T9572] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 169.993895][ T9572] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 170.040122][ T9572] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 170.062807][ T9572] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 170.110551][ T9572] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 170.142097][ T9699] team0: entered promiscuous mode [ 170.149824][ T9699] team_slave_0: entered promiscuous mode [ 170.161098][ T9699] team_slave_1: entered promiscuous mode [ 170.168373][ T9699] team0: left promiscuous mode [ 170.175017][ T9699] team_slave_0: left promiscuous mode [ 170.181012][ T9699] team_slave_1: left promiscuous mode [ 170.207208][ T5831] Bluetooth: hci5: command tx timeout [ 170.243074][ T9699] team0: entered promiscuous mode [ 170.273469][ T9699] team_slave_0: entered promiscuous mode [ 170.300285][ T9699] team_slave_1: entered promiscuous mode [ 170.306778][ T9699] team0: left promiscuous mode [ 170.317967][ T9699] team_slave_0: left promiscuous mode [ 170.327938][ T9699] team_slave_1: left promiscuous mode [ 170.354011][ T9705] netlink: 'syz.2.1051': attribute type 1 has an invalid length. [ 170.470675][ T9572] hsr_slave_0: entered promiscuous mode [ 170.485693][ T9572] hsr_slave_1: entered promiscuous mode [ 170.507196][ T9572] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 170.516343][ T9572] Cannot create hsr debugfs directory [ 170.527158][ T9699] team0: entered promiscuous mode [ 170.547009][ T9699] team_slave_0: entered promiscuous mode [ 170.561469][ T9699] team_slave_1: entered promiscuous mode [ 170.587547][ T9699] team0: left promiscuous mode [ 170.592579][ T9699] team_slave_0: left promiscuous mode [ 170.603785][ T9699] team_slave_1: left promiscuous mode [ 170.644560][ T9727] ebt_among: src integrity fail: 30a [ 170.850058][ T9736] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1060'. [ 171.287718][ T9756] af_packet: tpacket_rcv: packet too big, clamped from 245 to 4294967272. macoff=96 [ 171.302194][ T9758] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1066'. [ 171.325005][ T9758] netlink: 72 bytes leftover after parsing attributes in process `syz.1.1066'. [ 171.476481][ T9572] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 171.507979][ T9572] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 171.539776][ T9572] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 171.573219][ T9775] netlink: 'syz.1.1069': attribute type 1 has an invalid length. [ 171.600954][ T9572] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 171.612354][ T9775] netlink: 236 bytes leftover after parsing attributes in process `syz.1.1069'. [ 171.811738][ T9572] 8021q: adding VLAN 0 to HW filter on device bond0 [ 171.844235][ T9572] 8021q: adding VLAN 0 to HW filter on device team0 [ 171.876739][ T9114] bridge0: port 1(bridge_slave_0) entered blocking state [ 171.884236][ T9114] bridge0: port 1(bridge_slave_0) entered forwarding state [ 172.013024][ T9791] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1075'. [ 172.013768][ T9114] bridge0: port 2(bridge_slave_1) entered blocking state [ 172.029151][ T9114] bridge0: port 2(bridge_slave_1) entered forwarding state [ 172.269183][ T9805] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1077'. [ 172.289795][ T5831] Bluetooth: hci5: command tx timeout [ 172.540329][ T9572] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 172.643049][ T9572] veth0_vlan: entered promiscuous mode [ 172.665522][ T9572] veth1_vlan: entered promiscuous mode [ 172.729094][ T9572] veth0_macvtap: entered promiscuous mode [ 172.745880][ T9572] veth1_macvtap: entered promiscuous mode [ 172.766505][ T9572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.780641][ T9572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.793994][ T9572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.806542][ T9572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.817253][ T9572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.828386][ T9572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.838952][ T9572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 172.854719][ T9572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.874170][ T9572] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 172.882632][ T9825] netlink: 1256 bytes leftover after parsing attributes in process `syz.1.1083'. [ 172.894319][ T9825] openvswitch: netlink: nsh attribute has 4 unknown bytes. [ 172.909827][ T9572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.922014][ T9572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.965518][ T9572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 172.982668][ T9572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 172.993545][ T9572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.005426][ T9572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.017873][ T9572] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 173.028850][ T9572] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 173.041303][ T9572] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 173.066537][ T9572] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.079022][ T9572] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.089555][ T9572] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.099355][ T9572] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 173.210332][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.220499][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.271053][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 173.290917][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 173.477812][ T9840] netlink: 'syz.2.1088': attribute type 11 has an invalid length. [ 173.575426][ T9849] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1089'. [ 173.656141][ T9849] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1089'. [ 173.819077][ T9865] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1093'. [ 174.366995][ T5831] Bluetooth: hci5: command 0x0419 tx timeout [ 174.372111][ T9889] netlink: 'syz.2.1099': attribute type 29 has an invalid length. [ 174.481993][ T9889] netlink: 'syz.2.1099': attribute type 29 has an invalid length. [ 175.015015][ T9916] openvswitch: netlink: Missing key (keys=40, expected=80) [ 175.159060][ T9928] netlink: 'syz.1.1108': attribute type 10 has an invalid length. [ 175.294540][ T9928] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 175.350524][ T9928] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 175.457145][ T9934] : renamed from bond0 (while UP) [ 175.630463][ T1904] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.702435][ T1904] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.745486][ T1904] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.805070][ T1904] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 175.904904][ T1904] bridge_slave_1: left allmulticast mode [ 175.912627][ T1904] bridge_slave_1: left promiscuous mode [ 175.921426][ T1904] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.930920][ T1904] bridge_slave_0: left allmulticast mode [ 175.936695][ T1904] bridge_slave_0: left promiscuous mode [ 175.942597][ T1904] bridge0: port 1(bridge_slave_0) entered disabled state [ 176.255013][ T9946] netlink: 'syz.1.1113': attribute type 1 has an invalid length. [ 176.264604][ T9946] __nla_validate_parse: 3 callbacks suppressed [ 176.264623][ T9946] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1113'. [ 176.287200][ T9953] netlink: 'syz.3.1115': attribute type 10 has an invalid length. [ 176.505029][ T1904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 176.521791][ T1904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 176.535178][ T1904] bond0 (unregistering): Released all slaves [ 176.556299][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 176.574345][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 176.589020][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 176.612832][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 176.623428][ T5831] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 176.633217][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 176.680059][ T9958] dvmrp1: entered allmulticast mode [ 176.697416][ T9959] dvmrp1: left allmulticast mode [ 177.011737][ T9970] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1121'. [ 177.042120][ T9970] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1121'. [ 177.157128][ T1904] hsr_slave_0: left promiscuous mode [ 177.161480][ T9974] xt_time: invalid argument - start or stop time greater than 23:59:59 [ 177.188811][ T1904] hsr_slave_1: left promiscuous mode [ 177.207988][ T1904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 177.215518][ T1904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 177.237794][ T1904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 177.246207][ T1904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 177.294440][ T1904] veth1_macvtap: left promiscuous mode [ 177.317654][ T1904] veth0_macvtap: left promiscuous mode [ 177.323763][ T1904] veth1_vlan: left promiscuous mode [ 177.334892][ T1904] veth0_vlan: left promiscuous mode [ 177.699837][ T9995] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1127'. [ 177.868752][ T1904] team0 (unregistering): Port device team_slave_1 removed [ 177.920102][ T1904] team0 (unregistering): Port device team_slave_0 removed [ 178.382352][ T9988] netlink: 72 bytes leftover after parsing attributes in process `syz.2.1126'. [ 178.583094][ T9960] chnl_net:caif_netlink_parms(): no params data found [ 178.689283][ T5831] Bluetooth: hci5: command tx timeout [ 178.853129][T10018] ipt_REJECT: TCP_RESET invalid for non-tcp [ 178.903522][T10022] netlink: 'syz.3.1136': attribute type 1 has an invalid length. [ 178.917017][T10022] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1136'. [ 179.035413][ T9960] bridge0: port 1(bridge_slave_0) entered blocking state [ 179.043367][ T9960] bridge0: port 1(bridge_slave_0) entered disabled state [ 179.057160][ T9960] bridge_slave_0: entered allmulticast mode [ 179.092805][ T9960] bridge_slave_0: entered promiscuous mode [ 179.119233][ T9960] bridge0: port 2(bridge_slave_1) entered blocking state [ 179.126533][ T9960] bridge0: port 2(bridge_slave_1) entered disabled state [ 179.146774][ T9960] bridge_slave_1: entered allmulticast mode [ 179.154940][ T9960] bridge_slave_1: entered promiscuous mode [ 179.228101][ T9960] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 179.276416][ T9960] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 179.354213][ T9960] team0: Port device team_slave_0 added [ 179.364429][ T9960] team0: Port device team_slave_1 added [ 179.498741][ T9960] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 179.505956][ T9960] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.574359][ T9960] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 179.625590][ T9960] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 179.637373][ T9960] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 179.673788][ T9960] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 180.012958][ T9960] hsr_slave_0: entered promiscuous mode [ 180.031507][ T9960] hsr_slave_1: entered promiscuous mode [ 180.055038][ T9960] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 180.073638][ T9960] Cannot create hsr debugfs directory [ 180.641398][T10107] ieee802154 phy0 wpan0: encryption failed: -22 [ 180.759970][T10114] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 180.777172][ T5831] Bluetooth: hci5: command tx timeout [ 180.845518][ T9960] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 180.881360][ T9960] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 180.901313][ T9960] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 180.925324][ T9960] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 180.977223][T10124] netlink: 'syz.3.1164': attribute type 5 has an invalid length. [ 181.096070][ T9960] 8021q: adding VLAN 0 to HW filter on device bond0 [ 181.159489][ T9960] 8021q: adding VLAN 0 to HW filter on device team0 [ 181.203574][ T1904] bridge0: port 1(bridge_slave_0) entered blocking state [ 181.210794][ T1904] bridge0: port 1(bridge_slave_0) entered forwarding state [ 181.268315][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 181.275470][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 181.747742][ T9960] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 181.763684][T10158] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1176'. [ 181.901207][ T974] hid (null): unknown global tag 0xe [ 181.913674][ T974] hid-generic 0005:10CF:5504.0001: unknown global tag 0xe [ 181.931859][ T9960] veth0_vlan: entered promiscuous mode [ 181.939129][ T974] hid-generic 0005:10CF:5504.0001: item 0 2 1 14 parsing failed [ 181.948419][ T974] hid-generic 0005:10CF:5504.0001: probe with driver hid-generic failed with error -22 [ 181.999063][ T9960] veth1_vlan: entered promiscuous mode [ 182.052339][ T9960] veth0_macvtap: entered promiscuous mode [ 182.062815][ T9960] veth1_macvtap: entered promiscuous mode [ 182.078544][ T9960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.089115][ T9960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.099084][ T9960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.110005][ T9960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.120523][ T9960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.131654][ T9960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.141926][ T9960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 182.152927][ T9960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.164759][ T9960] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.174714][ T9960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.185402][ T9960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.195315][ T9960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.206221][ T9960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.216512][ T9960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.227338][ T9960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.237350][ T9960] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 182.248067][ T9960] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 182.259008][ T9960] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.275940][ T9960] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.284768][ T9960] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.293851][ T9960] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.302633][ T9960] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.466391][T10176] netlink: 71 bytes leftover after parsing attributes in process `syz.2.1179'. [ 182.485935][T10161] netlink: 60 bytes leftover after parsing attributes in process `syz.1.1174'. [ 182.518209][T10161] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1174'. [ 182.568162][T10161] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1174'. [ 182.621398][T10185] veth0: entered promiscuous mode [ 182.631920][T10187] netlink: 'syz.2.1182': attribute type 4 has an invalid length. [ 182.647018][T10187] netlink: 17 bytes leftover after parsing attributes in process `syz.2.1182'. [ 182.707342][T10184] veth0: left promiscuous mode [ 182.757056][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.795990][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.847124][ T5831] Bluetooth: hci5: command tx timeout [ 182.870744][T10181] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1180'. [ 182.945638][ T1032] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.965246][ T1032] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.609158][T10228] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1188'. [ 183.825514][T10247] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1197'. [ 183.836182][T10247] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-tlb(5) [ 184.115612][T10265] erspan0: hsr_addr_subst_dest: Unknown node [ 184.122447][T10265] batadv_slave_1: hsr_addr_subst_dest: Unknown node [ 184.189926][T10267] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1205'. [ 184.583474][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.556534][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.726231][T10322] netlink: 'syz.2.1222': attribute type 1 has an invalid length. [ 185.784491][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 185.823727][ T5841] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 185.835181][ T5841] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 185.862021][ T5841] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 185.870369][ T5841] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 185.878233][ T5841] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 185.885817][ T5841] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 185.999715][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 186.371189][ T11] bridge_slave_1: left allmulticast mode [ 186.377199][ T11] bridge_slave_1: left promiscuous mode [ 186.389513][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 186.442124][ T11] bridge_slave_0: left allmulticast mode [ 186.454083][ T11] bridge_slave_0: left promiscuous mode [ 186.471232][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 186.536632][ T5841] Bluetooth: hci2: command 0x0406 tx timeout [ 186.537126][ T5845] Bluetooth: hci3: command 0x0406 tx timeout [ 186.543092][ T5841] Bluetooth: hci1: command 0x0406 tx timeout [ 186.987789][T10376] __nla_validate_parse: 5 callbacks suppressed [ 186.987812][T10376] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1237'. [ 187.005246][T10375] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1237'. [ 187.145123][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 187.164461][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 187.178376][ T11] bond0 (unregistering): Released all slaves [ 187.202358][T10366] netlink: 88 bytes leftover after parsing attributes in process `syz.3.1233'. [ 187.225546][T10366] netem: invalid attributes len -24 [ 187.237002][T10366] netem: change failed [ 187.494449][T10323] chnl_net:caif_netlink_parms(): no params data found [ 187.967350][ T5831] Bluetooth: hci5: command tx timeout [ 187.988553][T10413] netlink: 'syz.5.1245': attribute type 3 has an invalid length. [ 188.068502][T10417] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1247'. [ 188.088676][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 188.099758][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 188.108634][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 188.119390][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 188.148874][T10323] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.185439][ T5843] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 188.194976][ T5843] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 188.198382][T10323] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.257160][T10323] bridge_slave_0: entered allmulticast mode [ 188.264196][T10323] bridge_slave_0: entered promiscuous mode [ 188.288492][T10323] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.345032][T10323] bridge0: port 2(bridge_slave_1) entered disabled state [ 188.367811][T10323] bridge_slave_1: entered allmulticast mode [ 188.378431][T10323] bridge_slave_1: entered promiscuous mode [ 188.412416][ T11] hsr_slave_0: left promiscuous mode [ 188.444227][ T11] hsr_slave_1: left promiscuous mode [ 188.478206][T10438] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1252'. [ 188.488062][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 188.495617][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.508326][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.515955][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.551457][ T11] veth1_macvtap: left promiscuous mode [ 188.557386][ T11] veth0_macvtap: left promiscuous mode [ 188.567280][ T11] veth1_vlan: left promiscuous mode [ 188.572810][ T11] veth0_vlan: left promiscuous mode [ 189.060500][ T11] team0 (unregistering): Port device team_slave_1 removed [ 189.123422][ T11] team0 (unregistering): Port device team_slave_0 removed [ 189.743234][T10323] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.788598][T10323] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.894109][T10449] netlink: 'syz.3.1258': attribute type 21 has an invalid length. [ 189.902161][T10449] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1258'. [ 189.959579][T10323] team0: Port device team_slave_0 added [ 189.997963][T10323] team0: Port device team_slave_1 added [ 190.057031][ T5843] Bluetooth: hci5: command tx timeout [ 190.081833][T10323] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.094629][T10323] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.121696][T10323] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.170550][T10323] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.177472][T10461] netlink: 'syz.5.1259': attribute type 1 has an invalid length. [ 190.182325][T10323] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.192379][T10461] netlink: 'syz.5.1259': attribute type 1 has an invalid length. [ 190.219586][T10323] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.287361][ T5843] Bluetooth: hci4: command tx timeout [ 190.333316][T10467] netlink: 'syz.3.1261': attribute type 1 has an invalid length. [ 190.364006][T10467] netlink: 'syz.3.1261': attribute type 1 has an invalid length. [ 190.396545][T10418] chnl_net:caif_netlink_parms(): no params data found [ 190.480791][T10323] hsr_slave_0: entered promiscuous mode [ 190.501673][T10323] hsr_slave_1: entered promiscuous mode [ 190.540574][T10323] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 190.553268][T10323] Cannot create hsr debugfs directory [ 190.595813][T10473] netlink: 'syz.3.1263': attribute type 1 has an invalid length. [ 190.762785][T10418] bridge0: port 1(bridge_slave_0) entered blocking state [ 190.787716][T10418] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.825224][T10418] bridge_slave_0: entered allmulticast mode [ 190.845080][T10418] bridge_slave_0: entered promiscuous mode [ 190.893259][T10418] bridge0: port 2(bridge_slave_1) entered blocking state [ 190.909915][T10418] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.918628][T10418] bridge_slave_1: entered allmulticast mode [ 190.929655][T10418] bridge_slave_1: entered promiscuous mode [ 191.075941][T10498] dvmrp1: entered allmulticast mode [ 191.092682][T10418] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 191.105983][T10418] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 191.319878][T10418] team0: Port device team_slave_0 added [ 191.329049][T10418] team0: Port device team_slave_1 added [ 191.449442][T10418] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 191.465371][T10418] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.498716][T10418] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 191.500074][T10515] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1277'. [ 191.512207][T10418] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.533380][T10418] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.563410][T10418] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.703965][T10520] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1279'. [ 191.755101][T10418] hsr_slave_0: entered promiscuous mode [ 191.773185][T10418] hsr_slave_1: entered promiscuous mode [ 191.780019][T10418] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.789586][T10418] Cannot create hsr debugfs directory [ 191.806483][T10520] vlan2: entered allmulticast mode [ 191.821417][T10520] vlan1: entered allmulticast mode [ 191.826576][T10520] veth0_vlan: entered allmulticast mode [ 191.841787][T10522] tipc: Failed to obtain node identity [ 191.854717][T10522] tipc: Enabling of bearer rejected, failed to enable media [ 192.127834][ T5843] Bluetooth: hci5: command tx timeout [ 192.133507][T10323] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 192.185903][T10323] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 192.287405][T10323] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 192.306615][T10323] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 192.372430][ T5843] Bluetooth: hci4: command tx timeout [ 192.423753][T10553] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1286'. [ 192.434771][T10553] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1286'. [ 192.507252][T10418] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.533442][T10553] gretap0: entered promiscuous mode [ 192.572975][T10560] bridge0: port 1(vlan3) entered blocking state [ 192.587273][T10560] bridge0: port 1(vlan3) entered disabled state [ 192.598056][T10560] vlan3: entered allmulticast mode [ 192.625231][T10560] vlan3: left allmulticast mode [ 192.690265][T10418] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.856652][T10573] x_tables: ip6_tables: REDIRECT target: used from hooks INPUT, but only usable from PREROUTING/OUTPUT [ 192.859803][T10418] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.983236][T10323] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.033901][T10418] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 193.110227][T10323] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.135318][ T9112] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.142614][ T9112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.174871][ T5092] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.182091][ T5092] bridge0: port 2(bridge_slave_1) entered forwarding state [ 193.423408][T10323] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 193.436737][T10586] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1296'. [ 193.466669][T10418] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 193.482816][T10418] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 193.520491][T10418] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 193.561097][T10418] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 193.802415][T10418] 8021q: adding VLAN 0 to HW filter on device bond0 [ 193.937900][T10418] 8021q: adding VLAN 0 to HW filter on device team0 [ 193.955627][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.962847][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 193.991794][ T1904] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.998974][ T1904] bridge0: port 2(bridge_slave_1) entered forwarding state [ 194.134243][T10323] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.207311][ T5831] Bluetooth: hci5: command tx timeout [ 194.448290][ T5831] Bluetooth: hci4: command tx timeout [ 194.613997][T10323] veth0_vlan: entered promiscuous mode [ 194.614922][T10628] xt_cgroup: invalid path, errno=-2 [ 194.635752][T10418] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 194.680003][T10323] veth1_vlan: entered promiscuous mode [ 194.692619][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.721445][T10631] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1308'. [ 194.745759][T10630] netem: change failed [ 194.777430][T10631] netlink: 272 bytes leftover after parsing attributes in process `syz.2.1308'. [ 194.781906][T10323] veth0_macvtap: entered promiscuous mode [ 194.787872][T10631] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1308'. [ 194.804103][T10323] veth1_macvtap: entered promiscuous mode [ 194.843682][T10323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.869394][T10323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.924731][T10323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.938387][T10323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.949239][T10323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.961186][T10323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 194.980971][T10323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 194.992118][T10323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.003529][T10323] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.081594][T10323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.092437][T10323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.102795][T10323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.114112][T10323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.124505][T10323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.135020][T10323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.145065][T10323] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.155796][T10323] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.167454][T10323] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.178970][T10323] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.187869][T10323] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.196592][T10323] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.205969][T10323] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.356471][T10418] veth0_vlan: entered promiscuous mode [ 195.368214][T10651] netlink: 'syz.3.1314': attribute type 3 has an invalid length. [ 195.427350][T10418] veth1_vlan: entered promiscuous mode [ 195.461199][ T9112] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.489768][ T9112] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.586147][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 195.599702][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 195.669983][T10418] veth0_macvtap: entered promiscuous mode [ 195.685675][T10418] veth1_macvtap: entered promiscuous mode [ 195.701612][T10418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.712251][T10418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.722764][T10418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.733618][T10418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.744289][T10418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.754831][T10418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.765299][T10418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.775843][T10418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.786272][T10418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 195.797126][T10418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.808458][T10418] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 195.819919][T10418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.830821][T10418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.841034][T10418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.851581][T10418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.861470][T10418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.871980][T10418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.881902][T10418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.892674][T10418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.902584][T10418] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 195.913181][T10418] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 195.924796][T10418] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 195.934708][T10418] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.943540][T10418] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.952518][T10418] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 195.961331][T10418] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 196.056006][T10675] openvswitch: netlink: VXLAN extension message has 2 unknown bytes. [ 196.447933][ T1904] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.523709][ T1032] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.532032][ T5831] Bluetooth: hci4: command 0x0419 tx timeout [ 196.545801][ T1032] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.612512][ T1904] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.665034][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 196.681691][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 196.711730][ T1904] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.867386][ T1904] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 196.990430][ T1904] bridge_slave_1: left allmulticast mode [ 196.996131][ T1904] bridge_slave_1: left promiscuous mode [ 197.004904][ T1904] bridge0: port 2(bridge_slave_1) entered disabled state [ 197.016455][ T1904] bridge_slave_0: left allmulticast mode [ 197.022808][ T1904] bridge_slave_0: left promiscuous mode [ 197.029089][ T1904] bridge0: port 1(bridge_slave_0) entered disabled state [ 197.354704][T10693] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1327'. [ 197.563081][ T1904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 197.597623][ T1904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 197.632402][ T1904] bond0 (unregistering): Released all slaves [ 197.684437][T10703] tipc: Enabling of bearer rejected, failed to enable media [ 197.739791][T10706] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1329'. [ 197.867938][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 197.885375][ T5831] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 197.901291][ T5831] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 197.917508][ T5831] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 197.942916][ T5831] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 197.954172][ T5831] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 198.259242][T10717] wg0: entered allmulticast mode [ 198.260098][T10723] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1332'. [ 198.407092][ T1904] hsr_slave_0: left promiscuous mode [ 198.437246][T10723] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1332'. [ 198.468172][ T1904] hsr_slave_1: left promiscuous mode [ 198.504499][ T1904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 198.522161][ T1904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 198.578006][ T1904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 198.603893][ T1904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 198.623019][ T5831] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 198.634892][ T5831] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 198.644617][ T5831] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 198.661584][ T5831] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 198.673299][ T5831] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 198.682345][ T5831] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 198.735311][ T1904] veth1_macvtap: left promiscuous mode [ 198.789494][ T1904] veth0_macvtap: left promiscuous mode [ 198.814763][ T1904] veth1_vlan: left promiscuous mode [ 198.839397][ T1904] veth0_vlan: left promiscuous mode [ 199.505716][ T1904] team0 (unregistering): Port device team_slave_1 removed [ 199.558477][ T1904] team0 (unregistering): Port device team_slave_0 removed [ 200.047168][ T5843] Bluetooth: hci4: command tx timeout [ 200.694741][T10709] chnl_net:caif_netlink_parms(): no params data found [ 200.733023][T10763] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x9 [ 200.775005][ T5843] Bluetooth: hci5: command tx timeout [ 200.959041][T10734] chnl_net:caif_netlink_parms(): no params data found [ 200.971506][T10709] bridge0: port 1(bridge_slave_0) entered blocking state [ 200.984164][T10709] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.992364][T10709] bridge_slave_0: entered allmulticast mode [ 201.009261][T10709] bridge_slave_0: entered promiscuous mode [ 201.030161][T10709] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.045297][T10709] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.060374][T10709] bridge_slave_1: entered allmulticast mode [ 201.069066][T10709] bridge_slave_1: entered promiscuous mode [ 201.301935][T10709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.336312][T10709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.392215][T10795] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1350'. [ 201.432854][T10789] tipc: Cannot configure node identity twice [ 201.457821][T10709] team0: Port device team_slave_0 added [ 201.464324][T10734] bridge0: port 1(bridge_slave_0) entered blocking state [ 201.475006][T10734] bridge0: port 1(bridge_slave_0) entered disabled state [ 201.483032][T10734] bridge_slave_0: entered allmulticast mode [ 201.491807][T10734] bridge_slave_0: entered promiscuous mode [ 201.500899][T10734] bridge0: port 2(bridge_slave_1) entered blocking state [ 201.508919][T10734] bridge0: port 2(bridge_slave_1) entered disabled state [ 201.516416][T10734] bridge_slave_1: entered allmulticast mode [ 201.524026][T10734] bridge_slave_1: entered promiscuous mode [ 201.539369][T10789] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1349'. [ 201.637344][ T1904] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.664338][T10709] team0: Port device team_slave_1 added [ 201.705989][T10801] ip_vti0: entered allmulticast mode [ 201.827060][T10709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 201.834193][T10709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 201.863387][T10804] sock: sock_timestamping_bind_phc: sock not bind to device [ 201.871118][T10802] sock: sock_timestamping_bind_phc: sock not bind to device [ 201.878477][T10709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 201.882734][T10734] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 201.902547][T10734] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 201.932538][T10734] team0: Port device team_slave_0 added [ 201.946486][T10734] team0: Port device team_slave_1 added [ 202.028195][ T1904] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.045976][T10709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.089308][T10709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.133437][T10709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.147048][ T5843] Bluetooth: hci4: command tx timeout [ 202.212079][T10821] IPVS: length: 8 != 1152 [ 202.272347][ T1904] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.288916][T10734] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 202.314388][T10734] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.350920][T10734] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 202.448619][ T1904] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.479618][T10734] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 202.493057][T10734] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 202.560897][T10734] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 202.677022][T10837] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1360'. [ 202.708763][T10709] hsr_slave_0: entered promiscuous mode [ 202.718278][T10709] hsr_slave_1: entered promiscuous mode [ 202.727818][T10709] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.735463][T10709] Cannot create hsr debugfs directory [ 202.788104][T10844] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1363'. [ 202.849275][ T5843] Bluetooth: hci5: command tx timeout [ 202.891506][T10734] hsr_slave_0: entered promiscuous mode [ 202.923654][T10734] hsr_slave_1: entered promiscuous mode [ 202.934505][T10734] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 202.943935][T10734] Cannot create hsr debugfs directory [ 203.083460][ T1904] bridge_slave_1: left allmulticast mode [ 203.090212][ T1904] bridge_slave_1: left promiscuous mode [ 203.091581][T10855] Bluetooth: MGMT ver 1.23 [ 203.097244][ T1904] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.109336][T10852] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1366'. [ 203.120554][ T1904] bridge_slave_0: left allmulticast mode [ 203.120603][T10855] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1365'. [ 203.126446][ T1904] bridge_slave_0: left promiscuous mode [ 203.126646][ T1904] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.499386][T10857] netlink: 'syz.2.1367': attribute type 1 has an invalid length. [ 203.512208][T10857] netlink: 'syz.2.1367': attribute type 4 has an invalid length. [ 203.524587][T10857] netlink: 15334 bytes leftover after parsing attributes in process `syz.2.1367'. [ 203.585276][ T1904] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.605227][ T1904] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.623140][ T1904] bond0 (unregistering): Released all slaves [ 203.637236][T10859] netlink: 'syz.2.1368': attribute type 2 has an invalid length. [ 203.945126][T10871] netlink: 192 bytes leftover after parsing attributes in process `syz.5.1372'. [ 204.207873][ T5843] Bluetooth: hci4: command tx timeout [ 204.393236][ T1904] hsr_slave_0: left promiscuous mode [ 204.405181][ T1904] hsr_slave_1: left promiscuous mode [ 204.415462][ T1904] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.431705][ T1904] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.441358][T10890] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 204.441636][ T1904] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.456080][ T1904] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.482053][ T1904] veth1_macvtap: left promiscuous mode [ 204.487840][ T1904] veth0_macvtap: left promiscuous mode [ 204.493513][ T1904] veth1_vlan: left promiscuous mode [ 204.498902][ T1904] veth0_vlan: left promiscuous mode [ 204.932460][ T5843] Bluetooth: hci5: command tx timeout [ 205.086483][ T1904] team0 (unregistering): Port device team_slave_1 removed [ 205.144303][ T1904] team0 (unregistering): Port device team_slave_0 removed [ 205.725400][T10897] C: renamed from team_slave_0 (while UP) [ 205.778760][T10897] netlink: 'syz.3.1381': attribute type 1 has an invalid length. [ 205.787214][T10897] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 205.898661][T10902] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1383'. [ 206.150173][T10709] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 206.174458][T10709] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 206.191108][T10709] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 206.220457][T10709] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 206.288407][ T5843] Bluetooth: hci4: command tx timeout [ 206.410116][T10709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 206.470401][T10917] dvmrp1: entered allmulticast mode [ 206.480038][T10709] 8021q: adding VLAN 0 to HW filter on device team0 [ 206.525683][ T1032] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.532897][ T1032] bridge0: port 1(bridge_slave_0) entered forwarding state [ 206.575679][ T1032] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.583000][ T1032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 206.601317][T10917] dvmrp1: left allmulticast mode [ 206.827442][T10734] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 206.879081][T10734] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 206.890249][T10734] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 206.958318][T10734] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 207.007348][ T5843] Bluetooth: hci5: command tx timeout [ 207.165718][T10734] 8021q: adding VLAN 0 to HW filter on device bond0 [ 207.217168][T10734] 8021q: adding VLAN 0 to HW filter on device team0 [ 207.280069][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 207.287261][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 207.354486][ T1032] bridge0: port 2(bridge_slave_1) entered blocking state [ 207.361797][ T1032] bridge0: port 2(bridge_slave_1) entered forwarding state [ 207.413408][T10947] pim6reg: entered allmulticast mode [ 207.425622][T10946] sctp: [Deprecated]: syz.2.1394 (pid 10946) Use of int in max_burst socket option. [ 207.425622][T10946] Use struct sctp_assoc_value instead [ 207.493461][T10950] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1392'. [ 207.592096][T10953] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1395'. [ 207.599548][T10709] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 207.670295][T10953] bridge_slave_0: entered allmulticast mode [ 207.768503][T10709] veth0_vlan: entered promiscuous mode [ 207.823184][T10709] veth1_vlan: entered promiscuous mode [ 207.870490][T10965] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1397'. [ 207.903227][T10709] veth0_macvtap: entered promiscuous mode [ 207.936507][T10709] veth1_macvtap: entered promiscuous mode [ 207.986102][T10709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 207.998890][T10709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.009503][T10709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.020137][T10709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.030133][T10709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.043023][T10709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.054086][T10709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.065984][T10709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.078527][T10709] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.089091][T10709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.099820][T10709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.110121][T10709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.113112][T10973] netlink: 253 bytes leftover after parsing attributes in process `syz.3.1399'. [ 208.121098][T10709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.140792][T10709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.151686][T10709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.161754][T10709] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.172970][T10709] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.184434][T10709] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.212076][T10709] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.221262][T10709] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.231081][T10709] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.241062][T10709] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.280695][T10734] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 208.343577][T10979] atomic_op ffff88805e3fd198 conn xmit_atomic 0000000000000000 [ 208.425954][T10734] veth0_vlan: entered promiscuous mode [ 208.436495][T10734] veth1_vlan: entered promiscuous mode [ 208.454188][T10734] veth0_macvtap: entered promiscuous mode [ 208.462393][T10734] veth1_macvtap: entered promiscuous mode [ 208.475565][T10734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.486203][T10734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.496143][T10734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.507070][T10734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.517219][T10734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.528716][T10734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.538789][T10734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.549634][T10734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.559601][T10734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 208.571417][T10734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.584331][T10734] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 208.708431][T10987] syzkaller1: entered promiscuous mode [ 208.714149][T10987] syzkaller1: entered allmulticast mode [ 208.741544][T10734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.753636][T10734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.776147][T10734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.806905][T10734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.824073][T10734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.835177][T10734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.857949][T10734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.875382][T10734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.893784][T10734] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 208.906831][T10734] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 208.922703][T10734] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 208.948242][ T3446] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 208.956227][ T3446] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 208.976173][T10734] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.985863][T10734] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 208.995200][T10734] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.004612][T10734] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 209.029558][T10993] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 209.079621][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.091528][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.520662][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.544313][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 209.615962][T11007] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1407'. [ 209.630780][T11003] netlink: 40 bytes leftover after parsing attributes in process `syz.5.1408'. [ 209.640646][T11000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.665151][T11000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.697150][T11000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.716692][T11000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.735338][T11000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.755134][T11000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.773831][T11000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.784576][T11000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.798829][T11000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.810242][T11000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.821129][T11000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 209.834941][T11000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 209.901710][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 209.932630][T11014] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 209.943383][T11014] netlink: 32 bytes leftover after parsing attributes in process `syz.3.1410'. [ 209.946276][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.212918][T11026] sctp: [Deprecated]: syz.3.1412 (pid 11026) Use of int in max_burst socket option. [ 210.212918][T11026] Use struct sctp_assoc_value instead [ 210.375071][ T1032] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.525567][ T1032] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 210.986504][T11039] dccp_invalid_packet: P.type (CLOSE) not Data || [Data]Ack, while P.X == 0 [ 211.050575][ T1032] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.229123][ T1032] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 211.459169][ T5831] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 211.555276][ T5838] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 211.588645][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 211.600857][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 211.608426][ T5838] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 211.617475][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 211.632027][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 211.640536][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 211.649311][ T5838] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 211.656658][ T5849] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 211.656723][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 211.671044][ T25] IPVS: starting estimator thread 0... [ 211.678289][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 211.820699][T11065] IPVS: using max 27 ests per chain, 64800 per kthread [ 211.831405][ T1032] bridge_slave_1: left allmulticast mode [ 211.839894][ T1032] bridge_slave_1: left promiscuous mode [ 211.845709][ T1032] bridge0: port 2(bridge_slave_1) entered disabled state [ 211.879002][ T1032] bridge_slave_0: left allmulticast mode [ 211.885130][ T1032] bridge_slave_0: left promiscuous mode [ 211.894683][ T1032] bridge0: port 1(bridge_slave_0) entered disabled state [ 212.510122][ T1032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 212.522719][ T1032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 212.533873][ T1032] bond0 (unregistering): Released all slaves [ 212.558433][T11083] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 212.566032][T11083] IPv6: NLM_F_CREATE should be set when creating new route [ 212.574350][T11086] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 212.862072][ T974] IPVS: starting estimator thread 0... [ 212.887908][T11101] netlink: 'syz.3.1431': attribute type 11 has an invalid length. [ 212.997054][T11102] IPVS: using max 20 ests per chain, 48000 per kthread [ 213.032685][T11059] chnl_net:caif_netlink_parms(): no params data found [ 213.193648][T11056] chnl_net:caif_netlink_parms(): no params data found [ 213.252144][T11125] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 213.291267][ T1032] hsr_slave_0: left promiscuous mode [ 213.318897][ T1032] hsr_slave_1: left promiscuous mode [ 213.354705][ T1032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 213.372519][ T1032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 213.397442][ T1032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 213.404933][ T1032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 213.440434][ T1032] veth1_macvtap: left promiscuous mode [ 213.446088][ T1032] veth0_macvtap: left promiscuous mode [ 213.452974][ T1032] veth1_vlan: left promiscuous mode [ 213.458509][T11133] xt_HMARK: spi-set and port-set can't be combined [ 213.465330][ T1032] veth0_vlan: left promiscuous mode [ 213.730307][ T5838] Bluetooth: hci5: command tx timeout [ 213.736161][ T5849] Bluetooth: hci4: command tx timeout [ 213.986211][T11122] dccp_close: ABORT with 32 bytes unread [ 213.998779][ T1032] team0 (unregistering): Port device team_slave_1 removed [ 214.056715][ T1032] team0 (unregistering): Port device team_slave_0 removed [ 214.592414][T11131] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 214.816029][T11151] openvswitch: netlink: nsh attr 8192 is out of range max 3 [ 214.823783][T11151] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 214.838571][T11056] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.845982][T11056] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.853735][T11056] bridge_slave_0: entered allmulticast mode [ 214.864646][T11056] bridge_slave_0: entered promiscuous mode [ 214.888694][T11151] netlink: 'syz.5.1442': attribute type 4 has an invalid length. [ 214.899064][T11056] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.906279][T11056] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.954251][T11056] bridge_slave_1: entered allmulticast mode [ 214.962023][T11056] bridge_slave_1: entered promiscuous mode [ 215.052919][T11151] netlink: 'syz.5.1442': attribute type 11 has an invalid length. [ 215.112709][T11163] IPVS: set_ctl: invalid protocol: 41 224.0.0.1:20000 [ 215.138972][T11056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.148855][T11059] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.170043][T11059] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.183138][T11059] bridge_slave_0: entered allmulticast mode [ 215.200457][T11059] bridge_slave_0: entered promiscuous mode [ 215.219278][T11056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.268771][T11059] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.276070][T11059] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.296503][T11059] bridge_slave_1: entered allmulticast mode [ 215.328155][T11059] bridge_slave_1: entered promiscuous mode [ 215.355102][T11172] netlink: 80 bytes leftover after parsing attributes in process `syz.2.1449'. [ 215.496300][T11059] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.538950][T11182] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1452'. [ 215.558492][T11056] team0: Port device team_slave_0 added [ 215.579517][T11056] team0: Port device team_slave_1 added [ 215.589535][T11059] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.671023][T11183] netlink: 84 bytes leftover after parsing attributes in process `syz.3.1453'. [ 215.775718][T11194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1454'. [ 215.783678][T11059] team0: Port device team_slave_0 added [ 215.802118][T11194] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1454'. [ 215.812969][ T5849] Bluetooth: hci4: command tx timeout [ 215.818546][ T5849] Bluetooth: hci5: command tx timeout [ 215.843208][T11056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 215.861328][T11056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.909030][T11056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 215.935114][T11059] team0: Port device team_slave_1 added [ 215.953713][T11196] veth0: entered promiscuous mode [ 215.968407][T11056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 215.975452][T11056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 215.980243][T11199] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1457'. [ 216.003394][T11056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.038645][T11195] veth0: left promiscuous mode [ 216.065721][ T5913] hid-generic 0005:15C2:0006.0002: item fetching failed at offset 0/1 [ 216.074952][ T5913] hid-generic 0005:15C2:0006.0002: probe with driver hid-generic failed with error -22 [ 216.106132][T11059] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.134178][T11059] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.173896][T11059] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.329054][ T1032] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.431638][T11059] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.445410][T11059] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 216.476718][T11059] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.550530][ T1032] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.619429][T11056] hsr_slave_0: entered promiscuous mode [ 216.626240][T11056] hsr_slave_1: entered promiscuous mode [ 216.656977][T11056] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.665141][T11056] Cannot create hsr debugfs directory [ 216.758262][T11233] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1467'. [ 216.815774][T11236] openvswitch: netlink: ERSPAN option length err (len 4096, max 255). [ 216.818183][ T1032] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 216.874904][T11233] netlink: 'syz.3.1467': attribute type 29 has an invalid length. [ 216.896370][T11236] x_tables: duplicate underflow at hook 1 [ 216.921667][T11059] hsr_slave_0: entered promiscuous mode [ 216.938840][T11059] hsr_slave_1: entered promiscuous mode [ 216.975880][T11059] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 216.984334][T11059] Cannot create hsr debugfs directory [ 217.046356][ T1032] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 217.134740][T11242] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 217.153340][T11242] infiniband Syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 217.329059][ T1032] bridge_slave_1: left allmulticast mode [ 217.334757][ T1032] bridge_slave_1: left promiscuous mode [ 217.340997][ T1032] bridge0: port 2(bridge_slave_1) entered disabled state [ 217.350955][ T1032] bridge_slave_0: left allmulticast mode [ 217.356643][ T1032] bridge_slave_0: left promiscuous mode [ 217.363643][ T1032] bridge0: port 1(bridge_slave_0) entered disabled state [ 217.792430][ T1032] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 217.803540][ T1032] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 217.814067][ T1032] bond0 (unregistering): Released all slaves [ 217.888660][ T5838] Bluetooth: hci5: command tx timeout [ 217.894171][ T5838] Bluetooth: hci4: command tx timeout [ 218.116244][T11260] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1473'. [ 218.157397][T11256] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1473'. [ 218.362800][ T1032] hsr_slave_0: left promiscuous mode [ 218.375171][ T1032] hsr_slave_1: left promiscuous mode [ 218.391638][ T1032] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 218.399782][ T1032] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 218.413071][ T1032] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 218.421352][ T1032] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 218.443484][ T1032] veth1_macvtap: left promiscuous mode [ 218.449312][ T1032] veth0_macvtap: left promiscuous mode [ 218.455393][ T1032] veth1_vlan: left promiscuous mode [ 218.460964][ T1032] veth0_vlan: left promiscuous mode [ 218.951538][ T1032] team0 (unregistering): Port device team_slave_1 removed [ 218.995859][ T1032] team0 (unregistering): Port device team_slave_0 removed [ 219.628618][T11270] xt_CT: You must specify a L4 protocol and not use inversions on it [ 219.652493][T11270] xt_CT: You must specify a L4 protocol and not use inversions on it [ 219.745613][T11059] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 219.884083][T11059] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 219.908609][T11283] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0xd [ 219.921579][T11059] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 219.945779][T11059] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 219.967508][ T5838] Bluetooth: hci4: command tx timeout [ 219.972983][ T5838] Bluetooth: hci5: command tx timeout [ 220.084138][T11295] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1484'. [ 220.155015][T11295] 8021q: adding VLAN 0 to HW filter on device bond2 [ 220.459749][T11059] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.507875][T11056] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 220.536152][T11056] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 220.545519][T11317] x_tables: duplicate underflow at hook 1 [ 220.560616][T11059] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.575153][T11056] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 220.595675][T11056] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 220.636581][ T9112] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.643885][ T9112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.660960][ T9112] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.668147][ T9112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 220.810985][T11330] __nla_validate_parse: 1 callbacks suppressed [ 220.811005][T11330] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1492'. [ 220.862639][T11056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 220.906239][T11056] 8021q: adding VLAN 0 to HW filter on device team0 [ 220.936098][ T9112] bridge0: port 1(bridge_slave_0) entered blocking state [ 220.943329][ T9112] bridge0: port 1(bridge_slave_0) entered forwarding state [ 220.958275][ T9112] bridge0: port 2(bridge_slave_1) entered blocking state [ 220.965484][ T9112] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.032347][T11335] : entered promiscuous mode [ 221.093713][T11059] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.173396][T11059] veth0_vlan: entered promiscuous mode [ 221.188244][T11059] veth1_vlan: entered promiscuous mode [ 221.242867][T11059] veth0_macvtap: entered promiscuous mode [ 221.256534][T11059] veth1_macvtap: entered promiscuous mode [ 221.274739][T11056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 221.293476][T11059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.305434][T11059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.317282][T11059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.328758][T11059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.339011][T11059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.350276][T11059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.367140][T11059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.385420][T11059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.399107][T11059] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.430498][T11059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.443766][T11059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.454551][T11059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.470046][T11059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.481747][T11059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.492891][T11059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.503090][T11059] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.513980][T11059] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.528319][T11059] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 221.538952][T11059] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.547910][T11059] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.570113][T11059] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.591001][T11059] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 221.738189][T11056] veth0_vlan: entered promiscuous mode [ 221.790038][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 221.792469][T11056] veth1_vlan: entered promiscuous mode [ 221.821544][T11056] veth0_macvtap: entered promiscuous mode [ 221.830670][T11056] veth1_macvtap: entered promiscuous mode [ 221.848271][T11056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.850964][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 221.858798][T11056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.858813][T11056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.858829][T11056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.858842][T11056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.858855][T11056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.858887][T11056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.858900][T11056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.858921][T11056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 221.858934][T11056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.860152][T11056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 221.971736][T11056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 221.982397][T11056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 221.992305][T11056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.002798][T11056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.012727][T11056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.023224][T11056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.033571][T11056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.044160][T11056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.054411][T11056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 222.065040][T11056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 222.076727][T11056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 222.111883][T11056] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.121208][T11056] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.130668][T11056] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.139732][T11056] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 222.318019][T11368] netlink: 'syz.2.1501': attribute type 12 has an invalid length. [ 222.359256][T11362] netlink: 'syz.3.1499': attribute type 2 has an invalid length. [ 222.361770][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.386594][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.571605][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 222.588547][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 222.661439][T11201] ================================================================== [ 222.669653][T11201] BUG: KASAN: slab-use-after-free in __mutex_lock+0x7fb/0xee0 [ 222.671470][T11377] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1504'. [ 222.677146][T11201] Read of size 8 at addr ffff88805d094060 by task khidpd_15c20006/11201 [ 222.677168][T11201] [ 222.677186][T11201] CPU: 0 UID: 0 PID: 11201 Comm: khidpd_15c20006 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 222.677206][T11201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 222.677217][T11201] Call Trace: [ 222.677224][T11201] [ 222.677232][T11201] dump_stack_lvl+0x241/0x360 [ 222.677259][T11201] ? __pfx_dump_stack_lvl+0x10/0x10 [ 222.677281][T11201] ? __pfx__printk+0x10/0x10 [ 222.677304][T11201] ? _printk+0xd5/0x120 [ 222.677323][T11201] ? __virt_addr_valid+0x183/0x530 [ 222.677343][T11201] ? __virt_addr_valid+0x183/0x530 [ 222.677364][T11201] print_report+0x169/0x550 [ 222.677384][T11201] ? __virt_addr_valid+0x183/0x530 [ 222.677404][T11201] ? __virt_addr_valid+0x183/0x530 [ 222.677428][T11201] ? __virt_addr_valid+0x45f/0x530 [ 222.677447][T11201] ? __phys_addr+0xba/0x170 [ 222.777480][T11201] ? __mutex_lock+0x7fb/0xee0 [ 222.782188][T11201] kasan_report+0x143/0x180 [ 222.786791][T11201] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 222.792706][T11201] ? __mutex_lock+0x7fb/0xee0 [ 222.797422][T11201] __mutex_lock+0x7fb/0xee0 [ 222.801929][T11201] ? __mutex_lock+0x5ef/0xee0 [ 222.806603][T11201] ? l2cap_unregister_user+0x6a/0x1c0 [ 222.811973][T11201] ? __pfx___mutex_lock+0x10/0x10 [ 222.817005][T11201] ? __pfx___timer_delete_sync+0x10/0x10 [ 222.822641][T11201] l2cap_unregister_user+0x6a/0x1c0 [ 222.827849][T11201] hidp_session_thread+0x450/0x490 [ 222.833073][T11201] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 222.838994][T11201] ? __pfx_hidp_session_thread+0x10/0x10 [ 222.844813][T11201] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 222.850743][T11201] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 222.857001][T11201] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 222.863248][T11201] ? __kthread_parkme+0x169/0x1d0 [ 222.868277][T11201] ? __pfx_hidp_session_thread+0x10/0x10 [ 222.873906][T11201] kthread+0x2f0/0x390 [ 222.877994][T11201] ? __pfx_hidp_session_thread+0x10/0x10 [ 222.883625][T11201] ? __pfx_kthread+0x10/0x10 [ 222.888213][T11201] ret_from_fork+0x4b/0x80 [ 222.892625][T11201] ? __pfx_kthread+0x10/0x10 [ 222.897223][T11201] ret_from_fork_asm+0x1a/0x30 [ 222.902028][T11201] [ 222.905238][T11201] [ 222.907580][T11201] Allocated by task 11059: [ 222.912003][T11201] kasan_save_track+0x3f/0x80 [ 222.916868][T11201] __kasan_kmalloc+0x98/0xb0 [ 222.921495][T11201] __kmalloc_noprof+0x285/0x4c0 [ 222.926542][T11201] hci_alloc_dev_priv+0x27/0x2030 [ 222.931650][T11201] vhci_create_device+0x116/0x6a0 [ 222.936687][T11201] vhci_write+0x3cf/0x490 [ 222.941010][T11201] vfs_write+0xaeb/0xd30 [ 222.945244][T11201] ksys_write+0x18f/0x2b0 [ 222.949574][T11201] do_syscall_64+0xf3/0x230 [ 222.954155][T11201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 222.960063][T11201] [ 222.962384][T11201] Freed by task 11059: [ 222.966456][T11201] kasan_save_track+0x3f/0x80 [ 222.971136][T11201] kasan_save_free_info+0x40/0x50 [ 222.976165][T11201] __kasan_slab_free+0x59/0x70 [ 222.980922][T11201] kfree+0x196/0x430 [ 222.984825][T11201] hci_release_dev+0x1525/0x16b0 [ 222.989771][T11201] bt_host_release+0x83/0x90 [ 222.994352][T11201] device_release+0x99/0x1c0 [ 222.998941][T11201] kobject_put+0x22f/0x480 [ 223.003356][T11201] vhci_release+0x88/0xd0 [ 223.007682][T11201] __fput+0x23c/0xa50 [ 223.011663][T11201] task_work_run+0x24f/0x310 [ 223.016251][T11201] do_exit+0xa2f/0x28e0 [ 223.020402][T11201] do_group_exit+0x207/0x2c0 [ 223.025004][T11201] __x64_sys_exit_group+0x3f/0x40 [ 223.030053][T11201] x64_sys_call+0x26a8/0x26b0 [ 223.034719][T11201] do_syscall_64+0xf3/0x230 [ 223.039279][T11201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.045289][T11201] [ 223.047604][T11201] Last potentially related work creation: [ 223.053398][T11201] kasan_save_stack+0x3f/0x60 [ 223.058102][T11201] __kasan_record_aux_stack+0xac/0xc0 [ 223.063486][T11201] insert_work+0x3e/0x330 [ 223.067828][T11201] __queue_work+0xb66/0xf50 [ 223.072329][T11201] queue_work_on+0x1c2/0x380 [ 223.076944][T11201] process_scheduled_works+0xa66/0x1840 [ 223.082482][T11201] worker_thread+0x870/0xd30 [ 223.087077][T11201] kthread+0x2f0/0x390 [ 223.091143][T11201] ret_from_fork+0x4b/0x80 [ 223.095592][T11201] ret_from_fork_asm+0x1a/0x30 [ 223.100345][T11201] [ 223.102657][T11201] Second to last potentially related work creation: [ 223.109227][T11201] kasan_save_stack+0x3f/0x60 [ 223.113898][T11201] __kasan_record_aux_stack+0xac/0xc0 [ 223.119276][T11201] insert_work+0x3e/0x330 [ 223.123604][T11201] __queue_work+0xc8b/0xf50 [ 223.128192][T11201] call_timer_fn+0x187/0x650 [ 223.132891][T11201] __run_timer_base+0x695/0x8e0 [ 223.137748][T11201] run_timer_softirq+0xb7/0x170 [ 223.142798][T11201] handle_softirqs+0x2d4/0x9b0 [ 223.147717][T11201] __irq_exit_rcu+0xf7/0x220 [ 223.152324][T11201] irq_exit_rcu+0x9/0x30 [ 223.156574][T11201] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 223.162342][T11201] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 223.168354][T11201] [ 223.170687][T11201] The buggy address belongs to the object at ffff88805d094000 [ 223.170687][T11201] which belongs to the cache kmalloc-8k of size 8192 [ 223.184739][T11201] The buggy address is located 96 bytes inside of [ 223.184739][T11201] freed 8192-byte region [ffff88805d094000, ffff88805d096000) [ 223.199098][T11201] [ 223.201501][T11201] The buggy address belongs to the physical page: [ 223.207905][T11201] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5d090 [ 223.216659][T11201] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 223.225151][T11201] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 223.232688][T11201] page_type: f5(slab) [ 223.236666][T11201] raw: 00fff00000000040 ffff88801ac42280 ffffea0000caee00 dead000000000004 [ 223.245339][T11201] raw: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 223.253925][T11201] head: 00fff00000000040 ffff88801ac42280 ffffea0000caee00 dead000000000004 [ 223.262646][T11201] head: 0000000000000000 0000000000020002 00000001f5000000 0000000000000000 [ 223.271417][T11201] head: 00fff00000000003 ffffea0001742401 ffffffffffffffff 0000000000000000 [ 223.280083][T11201] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 223.288742][T11201] page dumped because: kasan: bad access detected [ 223.295597][T11201] page_owner tracks the page as allocated [ 223.301302][T11201] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5499, tgid 5499 (dhcpcd), ts 114488747756, free_ts 114257622094 [ 223.322328][T11201] post_alloc_hook+0x1f3/0x230 [ 223.327103][T11201] get_page_from_freelist+0x365c/0x37a0 [ 223.332738][T11201] __alloc_pages_noprof+0x292/0x710 [ 223.337958][T11201] alloc_pages_mpol_noprof+0x3e8/0x680 [ 223.343431][T11201] alloc_slab_page+0x6a/0x110 [ 223.348102][T11201] allocate_slab+0x5a/0x2b0 [ 223.352640][T11201] ___slab_alloc+0xc27/0x14a0 [ 223.357337][T11201] __slab_alloc+0x58/0xa0 [ 223.361666][T11201] __kmalloc_node_track_caller_noprof+0x2e9/0x4c0 [ 223.368160][T11201] kmalloc_reserve+0x111/0x2a0 [ 223.373023][T11201] __alloc_skb+0x1f3/0x440 [ 223.377434][T11201] netlink_dump+0x1ee/0xe10 [ 223.381933][T11201] netlink_recvmsg+0x6bb/0x11d0 [ 223.386779][T11201] sock_recvmsg+0x22f/0x280 [ 223.391285][T11201] ____sys_recvmsg+0x1c6/0x480 [ 223.396043][T11201] __sys_recvmsg+0x291/0x390 [ 223.400638][T11201] page last free pid 7316 tgid 7316 stack trace: [ 223.407146][T11201] free_unref_page+0xd3f/0x1010 [ 223.412003][T11201] __put_partials+0x160/0x1c0 [ 223.416678][T11201] put_cpu_partial+0x17c/0x250 [ 223.421435][T11201] __slab_free+0x290/0x380 [ 223.425860][T11201] qlist_free_all+0x9a/0x140 [ 223.430547][T11201] kasan_quarantine_reduce+0x14f/0x170 [ 223.436006][T11201] __kasan_slab_alloc+0x23/0x80 [ 223.441143][T11201] kmem_cache_alloc_noprof+0x1d9/0x380 [ 223.446601][T11201] getname_flags+0xb7/0x540 [ 223.451182][T11201] __x64_sys_symlinkat+0x7a/0xb0 [ 223.456138][T11201] do_syscall_64+0xf3/0x230 [ 223.460669][T11201] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 223.466754][T11201] [ 223.469091][T11201] Memory state around the buggy address: [ 223.474718][T11201] ffff88805d093f00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 223.482864][T11201] ffff88805d093f80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 223.491009][T11201] >ffff88805d094000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 223.499058][T11201] ^ [ 223.506335][T11201] ffff88805d094080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 223.514476][T11201] ffff88805d094100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 223.522613][T11201] ================================================================== [ 223.532343][T11201] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 223.539579][T11201] CPU: 0 UID: 0 PID: 11201 Comm: khidpd_15c20006 Not tainted 6.13.0-rc3-syzkaller-00167-gb3a69c559899 #0 [ 223.550792][T11201] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 223.560847][T11201] Call Trace: [ 223.564209][T11201] [ 223.567134][T11201] dump_stack_lvl+0x241/0x360 [ 223.571906][T11201] ? __pfx_dump_stack_lvl+0x10/0x10 [ 223.577207][T11201] ? __pfx__printk+0x10/0x10 [ 223.581798][T11201] ? vscnprintf+0x5d/0x90 [ 223.586233][T11201] panic+0x349/0x880 [ 223.590134][T11201] ? check_panic_on_warn+0x21/0xb0 [ 223.595332][T11201] ? __pfx_panic+0x10/0x10 [ 223.599828][T11201] ? mark_lock+0x9a/0x360 [ 223.604245][T11201] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 223.610168][T11201] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 223.616089][T11201] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 223.622409][T11201] ? print_report+0x502/0x550 [ 223.627081][T11201] check_panic_on_warn+0x86/0xb0 [ 223.632041][T11201] ? __mutex_lock+0x7fb/0xee0 [ 223.636712][T11201] end_report+0x77/0x160 [ 223.640961][T11201] kasan_report+0x154/0x180 [ 223.645553][T11201] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 223.651538][T11201] ? __mutex_lock+0x7fb/0xee0 [ 223.656211][T11201] __mutex_lock+0x7fb/0xee0 [ 223.660786][T11201] ? __mutex_lock+0x5ef/0xee0 [ 223.665463][T11201] ? l2cap_unregister_user+0x6a/0x1c0 [ 223.670845][T11201] ? __pfx___mutex_lock+0x10/0x10 [ 223.675876][T11201] ? __pfx___timer_delete_sync+0x10/0x10 [ 223.681514][T11201] l2cap_unregister_user+0x6a/0x1c0 [ 223.686727][T11201] hidp_session_thread+0x450/0x490 [ 223.691853][T11201] ? _raw_spin_unlock_irqrestore+0x8f/0x140 [ 223.697765][T11201] ? __pfx_hidp_session_thread+0x10/0x10 [ 223.703401][T11201] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 223.709410][T11201] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 223.715646][T11201] ? __pfx_hidp_session_wake_function+0x10/0x10 [ 223.721882][T11201] ? __kthread_parkme+0x169/0x1d0 [ 223.726913][T11201] ? __pfx_hidp_session_thread+0x10/0x10 [ 223.732636][T11201] kthread+0x2f0/0x390 [ 223.736716][T11201] ? __pfx_hidp_session_thread+0x10/0x10 [ 223.742342][T11201] ? __pfx_kthread+0x10/0x10 [ 223.746928][T11201] ret_from_fork+0x4b/0x80 [ 223.751423][T11201] ? __pfx_kthread+0x10/0x10 [ 223.756177][T11201] ret_from_fork_asm+0x1a/0x30 [ 223.760956][T11201] [ 223.764388][T11201] Kernel Offset: disabled [ 223.768712][T11201] Rebooting in 86400 seconds..