last executing test programs: 2.638802491s ago: executing program 2 (id=744): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x1, &(0x7f0000000080)=[{0x6, 0x37, 0x0, 0x9}]}, 0x10) syz_emit_ethernet(0x5e, &(0x7f0000000200)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb86dd60f91e2e00283c00fe880000000000000000000000000001ff02000000000000000000000000000188"], 0x0) 2.256689643s ago: executing program 2 (id=749): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000001100000000000000000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@local, @random="8614df9adb24", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "084418", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 2.059218724s ago: executing program 2 (id=752): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}}}}]}, 0x4c}}, 0x0) r3 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r3, &(0x7f0000000080)={0xa, 0x4e23}, 0x1c) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0e00000004000000080000000c"], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000e00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x16, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r6}, 0x10) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=ANY=[], 0x138}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) listen(r3, 0x5) r7 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r7, &(0x7f0000772000)={0x2, 0x4e23}, 0x10) r8 = accept4(r3, 0x0, 0x0, 0x80000) sendmmsg(r8, &(0x7f0000001500), 0x588, 0x20) 1.930971506s ago: executing program 0 (id=754): r0 = openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001300)=@newtfilter={0x10e4, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r3, {0x0, 0x1}, {}, {0x8}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xc, 0x2, [@TCA_CGROUP_EMATCHES={0x8, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}]}]}}, @filter_kind_options=@f_route={{0xa}, {0x1094, 0x2, [@TCA_ROUTE4_POLICE={0x1080, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x100, 0xa, 0xa83f, 0xd, 0xc, 0x101, 0x6, 0x9, 0x6, 0x100, 0x3ff, 0xa, 0x1, 0x2, 0xe, 0xfffffff9, 0x3, 0x2, 0x2, 0x1, 0x2, 0x1, 0x8, 0x101, 0xfffffff7, 0x3, 0x7cb, 0x8020000, 0x7ff, 0x2, 0x7, 0x6, 0x3, 0xff, 0x7fff, 0x5, 0x0, 0xd, 0x6, 0x9, 0x6, 0x7, 0xbb1, 0xb, 0xffffffff, 0x6, 0xded4, 0x5, 0xff, 0xc2f9, 0x6, 0x6, 0x2, 0x8000, 0x40, 0x1, 0x1, 0xffffffff, 0xfffffffa, 0x2, 0x0, 0x3, 0x5, 0x7, 0x5, 0x8, 0x7, 0x80010000, 0xc, 0x220, 0x7fffffff, 0x5, 0x8, 0x2, 0x3ff, 0xd, 0x6, 0x5, 0x8001, 0x3, 0x400, 0x6, 0x4, 0x59e, 0x3, 0x4, 0x7, 0x9, 0x88000, 0x80000000, 0x101, 0x3, 0xe, 0x7bc, 0x8, 0x3, 0x2, 0x3, 0x6, 0x10000, 0x7, 0x5, 0x8001, 0x5, 0x3, 0x7fffffff, 0x4, 0xa6f8, 0x9, 0x7fff, 0x0, 0xfffffffa, 0xccf, 0x6, 0x779, 0xad, 0x2, 0xb0e, 0x255e, 0x9, 0x4, 0x9, 0x5, 0x400, 0x7f, 0x8, 0x7, 0x2, 0x22ba, 0x9, 0x80000001, 0xff, 0x8, 0x1, 0x5, 0x6, 0x1, 0x415, 0x4, 0x401, 0x1c000000, 0x1, 0xba6f, 0xf, 0x5, 0xb1f5, 0xcc8f, 0x4, 0x8, 0x100, 0x7, 0x3, 0xfff, 0x7, 0x1, 0x8, 0xffffffff, 0x5, 0x7, 0xa, 0x8, 0x0, 0x8, 0x6, 0xfffffff7, 0x2, 0x3, 0x1, 0x0, 0x5, 0x7ff, 0x800, 0xfffffff7, 0x4, 0x1, 0xffff7fff, 0x3, 0x2, 0x3, 0xffffff39, 0x8, 0x0, 0x0, 0x1, 0x7, 0xed97, 0x1, 0x101, 0x9, 0x1, 0x4, 0x2, 0x5, 0xfff, 0x6, 0x9, 0x3, 0x6e0, 0x0, 0x10000, 0x470f, 0x2, 0x9, 0x979, 0x0, 0xffffff39, 0x2, 0x4, 0x7, 0x5, 0x7fffffff, 0x9, 0x8, 0x0, 0x80000001, 0x4, 0x80, 0x1, 0x5, 0x2, 0x1c, 0x800, 0x5, 0x81, 0x8, 0x0, 0x4, 0xc, 0x7, 0x7fffffff, 0x1, 0x2, 0x1000, 0x7, 0x8, 0x43, 0x8b5569d, 0x1d, 0x0, 0x9, 0xd, 0x4, 0x3, 0x5, 0x80000001, 0x7, 0x1, 0x8, 0x80000001, 0x9, 0xcf0, 0x9, 0x8, 0x2, 0x7, 0x6]}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0xfffffbff, 0xe, 0x6, 0x3, 0x9, 0x5, 0x8, 0x5, 0x5, 0x0, 0xfffffe01, 0x1000, 0x7f, 0x4, 0xfffffffb, 0xf, 0x0, 0x4, 0x4, 0x8, 0x5, 0xa08, 0x230, 0x80000000, 0x5, 0x9, 0x101, 0x8001, 0x285e2a45, 0x423, 0x5, 0x6, 0x6, 0xe0000000, 0x9, 0x2b0, 0x1, 0x9, 0xfffffffa, 0x7366, 0x7fff, 0x0, 0x1, 0x8a, 0x8000, 0xff, 0x1000, 0x7, 0xffffffff, 0x3, 0x7fff, 0x0, 0xfffff6a1, 0x401, 0x1, 0x9, 0x3, 0x1000, 0x124f93a9, 0x1, 0x0, 0x40, 0x8, 0x400, 0x80000001, 0x8, 0x3, 0x5, 0x2, 0x0, 0x8a1, 0x9, 0x1, 0x5, 0xdde, 0xffff, 0x3, 0x5, 0x6, 0x7ff, 0x3, 0x0, 0x5, 0x4c73631, 0x8, 0x450, 0x2, 0x80000000, 0x6, 0x8000, 0x0, 0x6, 0x51, 0x1, 0x6, 0x7, 0x6, 0x3, 0xd, 0x6, 0x800, 0x8001, 0xcf, 0xffff, 0xd, 0xeae6b1e, 0x7, 0x9, 0x574d, 0x7fffffff, 0x3, 0xfffffffa, 0x4, 0x300000, 0x7f, 0x1, 0x8, 0x7, 0x54, 0xa8, 0x1, 0x1, 0xa0, 0x9, 0x1c, 0xe6, 0x2, 0x1, 0x7, 0xfff, 0x6230, 0x5, 0x4, 0x6, 0x7, 0x101, 0x800, 0x98e, 0x2, 0xbe3, 0x8, 0x100, 0x0, 0x5, 0x3e12, 0x800, 0xb5ee, 0x1, 0x3, 0x5, 0x0, 0x8, 0x7, 0x401, 0x5, 0x4, 0x401, 0x2, 0xcd, 0x7100f8fd, 0x7, 0x9, 0x0, 0x2, 0x5bc, 0x4, 0x3, 0xe8, 0x7fffffff, 0xfffffffc, 0x5, 0x7, 0x9, 0xbafa, 0x9, 0x6, 0x400, 0x401, 0x2, 0x7, 0xb, 0x0, 0xffffffff, 0x7, 0x6, 0x9, 0x7, 0x8, 0x6, 0x0, 0x8, 0x6, 0x7, 0xfffffff9, 0xfffff000, 0xeeb1, 0x75, 0x2, 0x100, 0x1, 0x4, 0x10, 0x7, 0x0, 0x401, 0xd15f, 0x7fff, 0xd, 0x10000, 0x2, 0x10, 0x7, 0x5, 0x1, 0x3, 0x8, 0xffffffff, 0x3, 0x1, 0x800, 0x401, 0x6, 0x0, 0x200, 0xfffffffe, 0xb39, 0x7, 0xfffffff2, 0x6, 0x0, 0x3, 0x10000, 0x5080000, 0x7, 0x2, 0xa, 0x4, 0x0, 0x10001, 0x7, 0x59, 0x10000, 0xff, 0x3, 0x57b, 0x4, 0x3, 0x0, 0x8, 0x3, 0x8, 0x0, 0x8000, 0x0, 0xfffffffa, 0xca]}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0xcf5}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x5}, @TCA_POLICE_RATE64={0xc, 0x8, 0xa}, @TCA_POLICE_RATE={0x404, 0x2, [0x26d3, 0x800, 0x0, 0x4, 0x0, 0x9, 0x7, 0x10000, 0x200, 0x6, 0x7fff, 0x4, 0x6c2, 0xaec, 0x5, 0xee75, 0x3b, 0x841, 0x4, 0x6, 0xffff0001, 0x40, 0xf, 0x8, 0x3, 0x0, 0x5, 0x9, 0x5, 0xfffffffd, 0x3, 0x8, 0x4, 0x4, 0x0, 0x1, 0xb0e, 0x1000, 0x8, 0x6, 0x5, 0x2, 0x6, 0x416553ea, 0x9, 0x4, 0xffffffff, 0x1000, 0x8, 0x9, 0x3c6c, 0xff, 0x0, 0x3ff, 0x2, 0x9, 0xe, 0x2, 0x9, 0x101, 0xa3, 0x1ff, 0x0, 0xfffffff7, 0x8, 0x1, 0xc0000000, 0x5, 0x80, 0x8, 0x3, 0x6, 0xb, 0x9, 0x10, 0x1ff, 0x5, 0x4, 0x9, 0xdc, 0x9, 0x1, 0x0, 0xc69, 0x6, 0xce, 0x4cbf, 0x4, 0x1, 0x400, 0x2, 0x0, 0xffffffff, 0xfa9, 0x6f8, 0x32b7, 0xb, 0x3, 0x1, 0x2, 0x7, 0x2, 0x4, 0x7, 0x782, 0x3, 0x94, 0xfffffffc, 0x8001, 0x8000, 0x6, 0xfffffffc, 0x6, 0xfffffffc, 0x2, 0x8, 0x7, 0x4, 0xffff, 0x5, 0x4, 0x5822, 0x2, 0x71e, 0x6, 0xef9, 0x3, 0x3f2d6d45, 0x4, 0xa2, 0x9, 0x0, 0x400, 0xffffff4d, 0xff, 0x3, 0x1, 0x8001, 0x400, 0x7fff, 0x1, 0x7, 0x8, 0xfff, 0x271, 0xfff, 0x0, 0x0, 0x9, 0x7, 0xa986a84, 0x2, 0xffff, 0x7, 0x2, 0x3, 0x8, 0x4, 0x0, 0xa4e, 0x9, 0x8001, 0x3, 0x4, 0xde, 0x6, 0x1f, 0x1, 0xef6, 0x3ff, 0x7, 0x3, 0x1, 0x80000001, 0xfffffffe, 0x9, 0x3, 0x9, 0x8, 0x40e9c40b, 0x477160a7, 0x1, 0xd, 0x10, 0x200, 0x75e, 0x7, 0x58bf, 0xffff7ce9, 0xfffffffc, 0x6, 0x9, 0x5, 0x200, 0x5, 0x101, 0x2, 0x441f05b9, 0xfffff73a, 0xfe, 0x8, 0x6, 0x40, 0x200, 0x4, 0x8, 0x7, 0xe, 0x400, 0x52, 0x3, 0x5, 0xfff, 0x7fff, 0x6, 0x5, 0xa, 0x4, 0x2, 0x5, 0x30, 0x9, 0x6, 0x6, 0x6, 0x200, 0x7, 0x8, 0x10000, 0x5, 0x1df60eb8, 0x5, 0x10000, 0x1ff, 0xfffffffe, 0xc, 0x4, 0x0, 0x2, 0x3, 0x80, 0x8, 0xddf, 0x5, 0x3, 0xed3, 0x1, 0x98c, 0x4, 0x4, 0x7, 0xe6e, 0x1, 0x1, 0x6, 0x95a]}, @TCA_POLICE_TBF={0x3c, 0x1, {0x1, 0x20000006, 0x6, 0x0, 0x8, {0x7, 0x0, 0x2, 0xe, 0x9, 0x80}, {0x9, 0x2, 0x8, 0x43, 0x3}, 0x9, 0xbc, 0xffffffff}}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x0, 0x3, 0xe5, 0x3, 0x1, 0x8, 0x5, 0x8, 0xcf7, 0x5, 0x2, 0x8, 0xfffffffe, 0x1, 0x9aff, 0x5, 0x7, 0x1, 0x5, 0x1ff, 0x3, 0x8, 0x3, 0x8, 0x1, 0x4, 0x0, 0xa, 0xd595, 0x4, 0x7fffffff, 0x5, 0x5, 0x1, 0x2, 0x6, 0x7, 0x2, 0x4, 0x8, 0x2, 0x8, 0x8, 0x3, 0x475, 0x753adaaf, 0x8, 0x10001, 0xd, 0x6, 0x0, 0xe, 0xc1d4, 0x0, 0x8, 0x8, 0x1, 0xffffffff, 0x0, 0x80000001, 0x10001, 0x1, 0x5, 0x10, 0xa, 0x7f, 0x69, 0x101, 0x0, 0xc, 0x3, 0x80000000, 0xffff0000, 0x2, 0x9, 0xffffffff, 0x5, 0x2, 0x3a, 0x1, 0x7e5b, 0x84, 0x3, 0x4, 0x6, 0x81, 0x3, 0x2, 0x1c, 0xc50c, 0x5, 0x5, 0x6, 0x1, 0x957, 0x9, 0x4, 0x2, 0x5, 0x0, 0x4, 0x6, 0x4, 0x0, 0xff, 0x2, 0x2, 0x1, 0x8, 0x95, 0x9, 0x4, 0xe591, 0x2, 0x3, 0x4, 0x100, 0x1, 0x8000007, 0x2, 0x2, 0x3, 0x200, 0x3, 0xffffffff, 0xa, 0x6, 0x87c, 0x3, 0x1, 0x0, 0x80000000, 0x1, 0x7, 0x9, 0x400, 0x8, 0x6, 0x8001, 0x0, 0x9, 0x0, 0xfffff801, 0x6, 0x9, 0x3, 0x47, 0x6, 0x0, 0x10001, 0x1, 0x1, 0x6, 0x401, 0xb129, 0x5ce8, 0x8, 0x7, 0x3, 0x101, 0x8, 0x400, 0xc, 0x7, 0x6, 0x9, 0x86bc, 0x5, 0x7fff, 0x1, 0x7, 0x4, 0x3ff, 0xcc51, 0x0, 0x8, 0x1, 0x6, 0x0, 0x3, 0x9, 0x16, 0x4, 0x2, 0x7fffffff, 0x7fff, 0x1, 0x8, 0x4, 0x3, 0x76, 0xff, 0xdf69, 0x9, 0x7fff, 0x5, 0x7, 0x2, 0x3, 0x40000000, 0x4, 0x6, 0x8, 0xf359, 0x3, 0x39b0, 0x9, 0x6a, 0x91a2, 0xcd, 0xe, 0x4, 0x0, 0x624, 0xffff, 0x5, 0xfffffc00, 0x101, 0x7, 0x1, 0xffffffcc, 0x100, 0x0, 0xff, 0x6, 0x59, 0x7, 0x3c89, 0xffffff01, 0x9, 0x3ff, 0x2, 0x2, 0x2, 0x1, 0x8001, 0x401, 0x0, 0x4, 0x400, 0x6, 0x1, 0x16, 0xcba, 0x6, 0x318e6784, 0x3, 0x9e, 0x1ff, 0xc268, 0x101, 0x462a, 0x400, 0x100, 0x401, 0x9]}, @TCA_POLICE_RESULT={0x8, 0x5, 0x6}]}, @TCA_ROUTE4_TO={0x8, 0x2, 0xdb}, @TCA_ROUTE4_IIF={0x8, 0x4, r3}]}}, @TCA_RATE={0x6, 0x5, {0x1, 0x2}}]}, 0x10e4}}, 0x0) 1.930344049s ago: executing program 1 (id=755): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000680)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x200000, 0x0, 0x0, 0xffffffff, 0x8003}}}}]}, 0x4c}}, 0x0) 1.694319452s ago: executing program 1 (id=757): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00'}) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) 1.678143998s ago: executing program 4 (id=759): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x3, &(0x7f0000000340)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000300009116144f782db44b904021d08000500142603600e120900210000000401a8001600a400014006000000036010fab94dcf4f0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e012dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5d00040000d6e4edef3d93452a92954b43370e97", 0xcb}], 0x1}, 0x0) 1.5784701s ago: executing program 0 (id=760): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r0, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) recvmsg(r0, 0x0, 0x20) 1.446077237s ago: executing program 1 (id=761): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, 0x0, &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 1.445110418s ago: executing program 4 (id=762): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$packet(r0, &(0x7f0000000040)={0x10, 0x0, 0x0, 0x1, 0x0, 0x6, @random="b6c1c02b5fbb"}, 0x14) socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)={{0x14}, [@NFT_MSG_NEWRULE={0x40, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x14, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @masq={{0x9}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x68}}, 0x0) r2 = socket$kcm(0x2, 0x3, 0x84) sendmsg$inet(r2, &(0x7f0000001000)={&(0x7f0000000000)={0x2, 0x0, @multicast2}, 0x10, &(0x7f0000000080)=[{&(0x7f0000001040)="5346f7f875528ef24043c68e04180a332e94ee4784fffee263c06f2d924e8699b6af71aa257b5a316af31628e5148c7012f4d55ce4c29fea9e5b0b61fdf0b2dc866fa81b4e775e235eaebe330e16114548f147b8a966bf1f1fc6c24b9d47d349c87c3f789d2ba608cd25b17b6c80a7f0ceb4a06ff270ff8c9f0d3a19133f1fdfd51b767b8cef1f36e5490c5df5fcb378a6fb6eb5d8aaf7791ce81f61a05e1ebdd1789eb70ac1f3dfed378f6f3e237120052113a75ab977796117f7e7b2d6ee499f51dc070c820d10a0eaef4fc94ddc648bafae070caf70c465267497b3de963df649e113e2060c82b057abfae0798d424c", 0xf1}], 0x1, &(0x7f0000000580)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @loopback}}}], 0x20}, 0x0) 1.324111146s ago: executing program 3 (id=763): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="19000000040000000800000006"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000019007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2f, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) r2 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000080)={'vxcan1\x00', 0x0}) sendmsg$can_raw(r2, &(0x7f0000000000)={&(0x7f00000000c0)={0x1d, r3}, 0x10, &(0x7f0000000140)={&(0x7f0000000180)=@can={{0x0, 0x0, 0x1}, 0x0, 0x0, 0x4, 0x0, "9000"}, 0x10}, 0x2}, 0x810) 1.323683033s ago: executing program 0 (id=764): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0xa, 0xfffffff3}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x70bd2d, 0x25dfdbf3, {0x0, 0x0, 0x0, r2, {0x9}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x11, 0x6}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2404c044}, 0x24044094) 1.257314307s ago: executing program 4 (id=765): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a18010000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000002cd40009800800014000000006c80002800c0001800800014000"], 0x140}}, 0x0) 1.179892101s ago: executing program 3 (id=766): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 1.035874534s ago: executing program 2 (id=767): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYBLOB="0000000000000000b7020000f1ffffff850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='page_pool_state_hold\x00', r1, 0x0, 0x5}, 0x18) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.035416367s ago: executing program 3 (id=768): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="380000005400e5012bbd70000000000007000000", @ANYRES32=r2, @ANYBLOB="20000100", @ANYRES32=r2, @ANYBLOB="001501"], 0x38}, 0x1, 0x0, 0x0, 0x8804}, 0x0) 1.025027962s ago: executing program 0 (id=769): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="0e000000040000000800000008"], 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000850000005000000018110000", @ANYRES32=r1, @ANYBLOB], &(0x7f0000001b80)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x19, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='kfree\x00', r2}, 0x10) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) 1.024149682s ago: executing program 1 (id=770): bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(0xffffffffffffffff, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000001100000000000000000000850000000500000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r0}, 0x10) syz_emit_ethernet(0x4a, &(0x7f00000007c0)={@local, @random="8614df9adb24", @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "084418", 0x14, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x2}}}}}}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000140)={@local, @link_local, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x4, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010101, @local}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x6, 0x5, 0x2}}}}}}, 0x0) 824.178861ms ago: executing program 4 (id=771): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000080)='percpu_create_chunk\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000001010000ff7f0000cc"], 0x48) 794.518113ms ago: executing program 1 (id=772): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x3, &(0x7f0000000340)=@framed, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000001c0)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="d8000000300009116144f782db44b904021d08000500142603600e120900210000000401a8001600a400014006000000036010fab94dcf4f0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e012dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5d00040000d6e4edef3d93452a92954b43370e97", 0xcb}], 0x1}, 0x0) 617.676398ms ago: executing program 1 (id=773): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0xa00) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 505.411582ms ago: executing program 2 (id=774): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0xb, 0x0, 0xa00) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0xc9100120, 0x0, 0xfffffffffffffd25) 503.480128ms ago: executing program 3 (id=775): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_opts(r0, 0x29, 0x4d, &(0x7f0000000140)=ANY=[@ANYRESDEC], 0x8) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendto$inet6(r1, &(0x7f0000000300), 0x5aa, 0x0, 0x0, 0xfffffffffffffdfd) recvmsg(r0, 0x0, 0x20) 409.044645ms ago: executing program 0 (id=776): bpf$MAP_CREATE(0x0, 0x0, 0x0) bind$inet6(0xffffffffffffffff, &(0x7f0000000040)={0xa, 0x4e20, 0xffffffff}, 0x1c) listen(0xffffffffffffffff, 0x80080400) r0 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r0, &(0x7f0000e5c000)={0x2, 0x4e20, @remote}, 0x10) getsockopt$inet_int(r0, 0x10d, 0xf8, &(0x7f0000000000), &(0x7f0000000280)=0x1a) 267.539591ms ago: executing program 3 (id=777): syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYRES32=0x41424344], 0x0) 266.504795ms ago: executing program 2 (id=778): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000008500000006000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000740)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='rxrpc_recvmsg\x00', r1}, 0x10) r2 = socket$kcm(0x21, 0x2, 0x2) recvmsg$kcm(r2, &(0x7f0000001a80)={0x0, 0x0, 0x0, 0x0, 0xfffffffffffffffe}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000002c0)='contention_begin\x00', r0, 0x0, 0xd}, 0x18) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r3, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmsg$NL80211_CMD_NEW_STATION(0xffffffffffffffff, 0x0, 0x4) r4 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000780)=ANY=[@ANYBLOB="38000000031401002abd7000f6dbdf250900020073397a3100000000080041007369770014003300626f6e6430"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x20000000) ioctl$sock_bt_hidp_HIDPCONNADD(r4, 0x400448c8, &(0x7f0000000340)={r3, r3, 0x8, 0x0, 0x0, 0x82, 0x4a, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz1\x00'}) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)=ANY=[@ANYBLOB="0300000004000000040000000a"], 0x48) syz_emit_ethernet(0x5a, &(0x7f0000000140)={@local, @multicast, @void, {@ipv4={0x800, @tcp={{0xe, 0x4, 0x0, 0x0, 0x4c, 0x0, 0x0, 0x0, 0x6, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@rr={0x7, 0xf, 0x5, [@remote, @rand_addr, @rand_addr]}, @timestamp={0x44, 0x10, 0x5, 0x3, 0x0, [0x0, 0x0, 0x0]}, @timestamp={0x44, 0x4}]}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x17, 0x8, &(0x7f0000000400)=ANY=[@ANYBLOB="1806000002000000000000000000000018120000", @ANYRES32=r6, @ANYBLOB="0000000000000000b70300000037000085000000bb000000b700000000000000abfbe4eacef0b198a46d8859496cb16955a1901c85f27c6306edaee7bced08d0badcd7d991cb1b37b71c816d51b101c851032819c03836dd672baf2a0c4f3381c22000debb8daa502c018fcd991ac9f88afa01da80133505b72075e13fe8667eeed2f5fdc40b78b90e51e4001eba"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x13, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) setsockopt$IP_VS_SO_SET_TIMEOUT(r7, 0x0, 0x48a, &(0x7f0000000040)={0x2, 0x4, 0x7fffffff}, 0xc) shutdown(r3, 0x1) ioctl$sock_bt_hidp_HIDPCONNDEL(r4, 0x400448c9, &(0x7f0000000000)={@any, 0x1}) 202.038829ms ago: executing program 4 (id=779): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="02000000040000000600000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008bd6000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x23, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000180)='workqueue_activate_work\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)={0xffffffffffffffff}) setsockopt$sock_attach_bpf(r2, 0x1, 0x1d, &(0x7f00000001c0), 0x4) 144.214312ms ago: executing program 0 (id=780): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x8, 0xf}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_RSC={0x10, 0x1, {0x7, 0xa, 0xfffffff3}}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x3c, 0x2c, 0xd2b, 0x70bd2d, 0x25dfdbf3, {0x0, 0x0, 0x0, r2, {0x9}, {}, {0x7, 0xf}}, [@filter_kind_options=@f_basic={{0xa}, {0xc, 0x2, [@TCA_BASIC_CLASSID={0x8, 0x1, {0x11, 0x6}}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x2404c044}, 0x24044094) 20.434235ms ago: executing program 3 (id=781): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000002c0)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x0, 0x10, &(0x7f0000000580)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000001000000850000007800000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x10, &(0x7f0000000580)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000280)='sched_switch\x00', r1}, 0x18) bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@base={0x1, 0xb, 0x100005, 0x2, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x48) 0s ago: executing program 4 (id=782): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000980)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[@ANYBLOB="60812876ef15f6592addd4", @ANYRES32=0x0, @ANYBLOB="c40200000250000008000500", @ANYRES32=0x0, @ANYBLOB], 0x28}, 0x1, 0x0, 0x0, 0x4040005}, 0x45) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket(0x15, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x2, 0x31, 0xffffffffffffffff, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, 0x0}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000003c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x8, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r5}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r3, 0x0, 0xe, 0x0, &(0x7f0000000640)="0cffffdf71c8afefeba000dee560", 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) pipe(0x0) pselect6(0x40, &(0x7f00000000c0)={0x0, 0x40000000, 0x0, 0x0, 0x0, 0x97b}, 0x0, &(0x7f0000000140)={0x1ff, 0xfffffffffffffffc, 0x101}, 0x0, 0x0) getsockopt$inet_pktinfo(r3, 0x0, 0x8, &(0x7f0000000440)={0x0, @private, @local}, &(0x7f0000000500)=0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000700)={0x6, 0x6, &(0x7f0000000180)=@raw=[@initr0={0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0xa}, @map_val={0x18, 0x8, 0x2, 0x0, r3, 0x0, 0x0, 0x0, 0x2}, @cb_func={0x18, 0x7, 0x4, 0x0, 0x6}], &(0x7f00000001c0)='GPL\x00', 0x8, 0x80, &(0x7f00000002c0)=""/128, 0x41000, 0x2, '\x00', r6, 0x25, r3, 0x8, &(0x7f0000000540)={0x4, 0xbb}, 0x8, 0x10, &(0x7f00000005c0)={0x2, 0x2, 0x7fe4800, 0x1ff}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000680)=[{0x0, 0x3, 0x9, 0xa}, {0x2, 0x1, 0x1, 0x3}, {0x3, 0x4, 0x1, 0xa}, {0x2, 0x2, 0xe, 0x3}, {0x5, 0x2, 0xb, 0x2}, {0x0, 0x2, 0xa, 0x6}], 0x10, 0x7, @void, @value}, 0x94) ppoll(&(0x7f0000000480)=[{r4}], 0x1, &(0x7f0000000100)={0x77359400}, 0x0, 0x0) r7 = socket$netlink(0x10, 0x3, 0x4) write(r7, &(0x7f0000000100), 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0xfdae) close(0xffffffffffffffff) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000e00)=@mangle={'mangle\x00', 0x2, 0x6, 0x810, 0x510, 0x350, 0x350, 0x0, 0x188, 0x740, 0x740, 0x740, 0x740, 0x740, 0x6, 0x0, {[{{@ipv6={@mcast1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], 'veth1_vlan\x00', 'macvtap0\x00', {}, {}, 0x21}, 0x0, 0x160, 0x188, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2, @empty, [], [], [], 0x1404}}, @common=@inet=@socket1={{0x28}, 0x1}]}, @HL={0x28}}, {{@uncond, 0x0, 0x190, 0x1c8, 0x0, {}, [@common=@inet=@dscp={{0x28}, {0x7}}, @common=@unspec=@conntrack2={{0xc0}, {{@ipv4=@remote, [0xff, 0xff, 0xffffffff, 0xffffff00], @ipv4=@private=0xa010102, [0x0, 0x0, 0xff], @ipv4=@local, [0xffffff00, 0xffffffff, 0xffffffff, 0xff000000], @ipv4=@loopback, [0x0, 0xff, 0xffffff00, 0xff], 0x52, 0x7f, 0x1d, 0x4e21, 0x4e22, 0x4e21, 0x4e21, 0x88, 0x80}, 0x82, 0x2444}}]}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0x8000}}}}, {{@ipv6={@ipv4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [], [], '\x00', 'bond_slave_0\x00', {}, {}, 0x32}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xa8, 0xf0}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@empty, @ipv4=@loopback, 0x0, 0x32}}}, {{@uncond, 0x0, 0x208, 0x230, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0={0xfc, 0x0, '\x00', 0x1}, @mcast2, @mcast2, @private1, @rand_addr=' \x01\x00', @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @private1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @private0]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x870) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) getsockopt(r2, 0x200000000114, 0x2710, &(0x7f0000c35fff)=""/1, &(0x7f0000000000)=0xf002) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20004050}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.133' (ED25519) to the list of known hosts. [ 83.223957][ T5829] cgroup: Unknown subsys name 'net' [ 83.402293][ T5829] cgroup: Unknown subsys name 'cpuset' [ 83.411839][ T5829] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.011251][ T5829] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.794804][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.808814][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.820886][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.847535][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.855561][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.863936][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.913943][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.921799][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.930072][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.938108][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 89.038008][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 89.046594][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 89.054364][ T56] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 89.062745][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 89.070283][ T56] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 89.078936][ T56] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 89.086763][ T56] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 89.095701][ T56] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 89.110579][ T56] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 89.124254][ T56] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 89.147418][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 89.155727][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 89.168332][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 89.176941][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 89.184751][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.452846][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 89.767112][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.775437][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.783871][ T5840] bridge_slave_0: entered allmulticast mode [ 89.792336][ T5840] bridge_slave_0: entered promiscuous mode [ 89.862433][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.870883][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.878506][ T5840] bridge_slave_1: entered allmulticast mode [ 89.885744][ T5840] bridge_slave_1: entered promiscuous mode [ 89.946237][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 90.006482][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 90.018107][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 90.040211][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.081748][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.107368][ T5850] chnl_net:caif_netlink_parms(): no params data found [ 90.254338][ T5840] team0: Port device team_slave_0 added [ 90.301163][ T5840] team0: Port device team_slave_1 added [ 90.400031][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.407313][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.417296][ T5851] bridge_slave_0: entered allmulticast mode [ 90.425307][ T5851] bridge_slave_0: entered promiscuous mode [ 90.434750][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.441990][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.449231][ T5851] bridge_slave_1: entered allmulticast mode [ 90.456670][ T5851] bridge_slave_1: entered promiscuous mode [ 90.477338][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.484734][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.510969][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.522672][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.532914][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.540711][ T5844] bridge_slave_0: entered allmulticast mode [ 90.548253][ T5844] bridge_slave_0: entered promiscuous mode [ 90.593507][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.601079][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.608656][ T5854] bridge_slave_0: entered allmulticast mode [ 90.615859][ T5854] bridge_slave_0: entered promiscuous mode [ 90.624185][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.633121][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.660078][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.679866][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.687058][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.694470][ T5844] bridge_slave_1: entered allmulticast mode [ 90.702702][ T5844] bridge_slave_1: entered promiscuous mode [ 90.725718][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.735331][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.742742][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.750262][ T5854] bridge_slave_1: entered allmulticast mode [ 90.757548][ T5854] bridge_slave_1: entered promiscuous mode [ 90.826569][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.855294][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.879591][ T5850] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.886822][ T5850] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.895242][ T56] Bluetooth: hci0: command tx timeout [ 90.901195][ T5850] bridge_slave_0: entered allmulticast mode [ 90.908991][ T5850] bridge_slave_0: entered promiscuous mode [ 90.960706][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.969995][ T56] Bluetooth: hci1: command tx timeout [ 90.981812][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.991679][ T5850] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.999383][ T5850] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.006602][ T5850] bridge_slave_1: entered allmulticast mode [ 91.013836][ T5850] bridge_slave_1: entered promiscuous mode [ 91.026901][ T5840] hsr_slave_0: entered promiscuous mode [ 91.033679][ T5840] hsr_slave_1: entered promiscuous mode [ 91.043979][ T5851] team0: Port device team_slave_0 added [ 91.067078][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.107091][ T5850] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 91.121988][ T5851] team0: Port device team_slave_1 added [ 91.127885][ T56] Bluetooth: hci3: command tx timeout [ 91.188070][ T5850] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 91.208339][ T56] Bluetooth: hci2: command tx timeout [ 91.208362][ T5845] Bluetooth: hci4: command tx timeout [ 91.225634][ T5854] team0: Port device team_slave_0 added [ 91.250578][ T5844] team0: Port device team_slave_0 added [ 91.270429][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.277407][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.304769][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.318512][ T5854] team0: Port device team_slave_1 added [ 91.334303][ T5844] team0: Port device team_slave_1 added [ 91.366957][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.376213][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.402468][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.456274][ T5850] team0: Port device team_slave_0 added [ 91.495120][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.503042][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.530131][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.543270][ T5850] team0: Port device team_slave_1 added [ 91.552219][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.559646][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.585751][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.604164][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.611214][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.637552][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.671407][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.678709][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.705539][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.804244][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.811589][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.838800][ T5850] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.851919][ T5850] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.854128][ T24] cfg80211: failed to load regulatory.db [ 91.862341][ T5850] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.890790][ T5850] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.907356][ T5851] hsr_slave_0: entered promiscuous mode [ 91.914174][ T5851] hsr_slave_1: entered promiscuous mode [ 91.920424][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.928208][ T5851] Cannot create hsr debugfs directory [ 91.996680][ T5854] hsr_slave_0: entered promiscuous mode [ 92.003142][ T5854] hsr_slave_1: entered promiscuous mode [ 92.010471][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.018900][ T5854] Cannot create hsr debugfs directory [ 92.036290][ T5844] hsr_slave_0: entered promiscuous mode [ 92.042991][ T5844] hsr_slave_1: entered promiscuous mode [ 92.049486][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.057057][ T5844] Cannot create hsr debugfs directory [ 92.155212][ T5850] hsr_slave_0: entered promiscuous mode [ 92.162466][ T5850] hsr_slave_1: entered promiscuous mode [ 92.169273][ T5850] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 92.177012][ T5850] Cannot create hsr debugfs directory [ 92.654500][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.674805][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.685657][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.706668][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.771126][ T5851] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.793120][ T5851] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.824755][ T5851] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.844408][ T5851] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.880846][ T5844] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.913155][ T5844] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.937007][ T5844] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.957590][ T5844] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.967938][ T56] Bluetooth: hci0: command tx timeout [ 93.048322][ T56] Bluetooth: hci1: command tx timeout [ 93.096625][ T5850] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 93.152593][ T5850] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 93.163861][ T5850] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 93.179021][ T5850] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 93.208201][ T56] Bluetooth: hci3: command tx timeout [ 93.232696][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.246691][ T5854] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 93.256993][ T5854] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 93.283951][ T5854] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 93.291315][ T56] Bluetooth: hci2: command tx timeout [ 93.298088][ T56] Bluetooth: hci4: command tx timeout [ 93.331263][ T5854] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.372723][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.395322][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.412915][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.420242][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.462912][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.470123][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.513957][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.537411][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.545025][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.603041][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.623637][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.630857][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.706735][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.731378][ T5850] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.781351][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.788579][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.831162][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.838427][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.866824][ T5850] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.952531][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.959750][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.042438][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.049697][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.136458][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 94.219058][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.231492][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.245640][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.285816][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.293014][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.342073][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.349290][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.566233][ T5854] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 94.613844][ T5840] veth0_vlan: entered promiscuous mode [ 94.630786][ T5851] veth0_vlan: entered promiscuous mode [ 94.692418][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.716665][ T5851] veth1_vlan: entered promiscuous mode [ 94.730542][ T5840] veth1_vlan: entered promiscuous mode [ 94.750954][ T5850] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.886112][ T5851] veth0_macvtap: entered promiscuous mode [ 94.923214][ T5851] veth1_macvtap: entered promiscuous mode [ 95.015327][ T5840] veth0_macvtap: entered promiscuous mode [ 95.043663][ T5840] veth1_macvtap: entered promiscuous mode [ 95.049531][ T56] Bluetooth: hci0: command tx timeout [ 95.060581][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.080327][ T5850] veth0_vlan: entered promiscuous mode [ 95.113181][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.128231][ T56] Bluetooth: hci1: command tx timeout [ 95.145132][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 95.156780][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.169139][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.182117][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.192592][ T5851] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.202163][ T5851] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.212055][ T5851] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.220856][ T5851] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.246619][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.257435][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.269564][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.280961][ T5840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.289434][ T56] Bluetooth: hci3: command tx timeout [ 95.295470][ T5840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.304373][ T5840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.313141][ T5840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.354738][ T5850] veth1_vlan: entered promiscuous mode [ 95.369121][ T56] Bluetooth: hci4: command tx timeout [ 95.369130][ T5845] Bluetooth: hci2: command tx timeout [ 95.453751][ T5844] veth0_vlan: entered promiscuous mode [ 95.476993][ T5854] veth0_vlan: entered promiscuous mode [ 95.506844][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.528353][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.534585][ T5854] veth1_vlan: entered promiscuous mode [ 95.574009][ T5844] veth1_vlan: entered promiscuous mode [ 95.630436][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.631853][ T5850] veth0_macvtap: entered promiscuous mode [ 95.657574][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.688841][ T5854] veth0_macvtap: entered promiscuous mode [ 95.712639][ T5850] veth1_macvtap: entered promiscuous mode [ 95.733899][ T5854] veth1_macvtap: entered promiscuous mode [ 95.748607][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.756498][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.800005][ T5844] veth0_macvtap: entered promiscuous mode [ 95.837257][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.874683][ T5844] veth1_macvtap: entered promiscuous mode [ 95.903023][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.914349][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.929503][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.940380][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.952730][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.965152][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.970121][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.998077][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.018325][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.030739][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.041782][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.051959][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.058082][ T5920] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1'. [ 96.062990][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.083190][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.104592][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.158237][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.168549][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.179447][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.194353][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.210191][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.227058][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.240357][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.273947][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.289486][ T5850] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.301389][ T5850] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.316466][ T5850] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 96.334762][ T5925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.7'. [ 96.343704][ T5925] netlink: 152 bytes leftover after parsing attributes in process `syz.0.7'. [ 96.363338][ T5850] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.393151][ T5850] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.417740][ T5850] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.427102][ T5850] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.458882][ T5854] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.482112][ T5854] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.503241][ T5854] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.513749][ T5854] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 96.563588][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.591552][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.615780][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.627160][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.638083][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.649318][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.659573][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 96.670473][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.683071][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 96.784871][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.813898][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.842423][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.875737][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.885788][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.896568][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.906470][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 96.917239][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 96.946990][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 97.001130][ T5844] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.017405][ T5844] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.043512][ T5844] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.088213][ T5844] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 97.127996][ T56] Bluetooth: hci0: command tx timeout [ 97.198843][ T83] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.207138][ T5945] sch_tbf: burst 0 is lower than device ip6gre0 mtu (1448) ! [ 97.209330][ T56] Bluetooth: hci1: command tx timeout [ 97.220255][ T83] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.368929][ T56] Bluetooth: hci3: command tx timeout [ 97.376903][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.389318][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.448446][ T56] Bluetooth: hci4: command tx timeout [ 97.451063][ T5845] Bluetooth: hci2: command tx timeout [ 97.482567][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.505181][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.712402][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.732011][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 97.878362][ T5962] Zero length message leads to an empty skb [ 97.900085][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 97.924426][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.098125][ T83] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 98.115841][ T83] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 98.828079][ T5994] netlink: 24 bytes leftover after parsing attributes in process `syz.2.32'. [ 99.131014][ T6005] netlink: 12 bytes leftover after parsing attributes in process `syz.2.36'. [ 99.159853][ T6005] netlink: 152 bytes leftover after parsing attributes in process `syz.2.36'. [ 99.678335][ T6024] netlink: 24 bytes leftover after parsing attributes in process `syz.4.46'. [ 100.150369][ T6039] netlink: 12 bytes leftover after parsing attributes in process `syz.3.54'. [ 100.164355][ T6039] netlink: 152 bytes leftover after parsing attributes in process `syz.3.54'. [ 100.977888][ T6070] netlink: 12 bytes leftover after parsing attributes in process `syz.0.69'. [ 101.871047][ T6106] __nla_validate_parse: 2 callbacks suppressed [ 101.871067][ T6106] netlink: 12 bytes leftover after parsing attributes in process `syz.0.85'. [ 101.910677][ T6106] netlink: 152 bytes leftover after parsing attributes in process `syz.0.85'. [ 102.622591][ T6137] netlink: 'syz.0.98': attribute type 20 has an invalid length. [ 102.662495][ T6137] netlink: 16 bytes leftover after parsing attributes in process `syz.0.98'. [ 103.397003][ T6169] netlink: 'syz.4.114': attribute type 20 has an invalid length. [ 103.418089][ T6168] syz.2.113 uses obsolete (PF_INET,SOCK_PACKET) [ 103.429574][ T6169] netlink: 16 bytes leftover after parsing attributes in process `syz.4.114'. [ 104.535914][ T6197] netlink: 16 bytes leftover after parsing attributes in process `syz.3.127'. [ 106.479360][ T6264] netlink: 8 bytes leftover after parsing attributes in process `syz.0.158'. [ 106.908483][ T6281] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.733379][ T6309] netlink: 16 bytes leftover after parsing attributes in process `syz.3.180'. [ 107.757864][ T6309] netlink: 16 bytes leftover after parsing attributes in process `syz.3.180'. [ 107.771367][ T6306] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 107.903547][ T6306] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.085126][ T6306] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.215409][ T6306] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 108.869787][ T6341] netlink: 8 bytes leftover after parsing attributes in process `syz.3.195'. [ 108.929857][ T6341] ip6gre1: entered allmulticast mode [ 110.820807][ T6407] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 111.638343][ T6437] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 111.883627][ T6449] netlink: 108 bytes leftover after parsing attributes in process `syz.4.246'. [ 111.948121][ T6449] netlink: 44 bytes leftover after parsing attributes in process `syz.4.246'. [ 113.087527][ T6489] netlink: 264 bytes leftover after parsing attributes in process `syz.1.267'. [ 113.828933][ T6517] netlink: 32 bytes leftover after parsing attributes in process `syz.1.280'. [ 113.972952][ T6519] netlink: 36 bytes leftover after parsing attributes in process `syz.3.281'. [ 114.005763][ T6522] bridge0: entered promiscuous mode [ 114.016608][ T6522] macvlan2: entered promiscuous mode [ 114.030569][ T6522] bridge0: port 3(macvlan2) entered blocking state [ 114.037334][ T6522] bridge0: port 3(macvlan2) entered disabled state [ 114.056942][ T6522] macvlan2: entered allmulticast mode [ 114.078056][ T6522] bridge0: entered allmulticast mode [ 114.117092][ T6522] macvlan2: left allmulticast mode [ 114.126653][ T6522] bridge0: left allmulticast mode [ 114.139500][ T6522] bridge0: left promiscuous mode [ 114.925888][ T6562] sch_tbf: burst 3092 is lower than device lo mtu (65550) ! [ 114.973020][ T6564] netlink: 24 bytes leftover after parsing attributes in process `syz.2.300'. [ 114.994081][ T6564] netlink: 24 bytes leftover after parsing attributes in process `syz.2.300'. [ 115.247018][ T6572] A link change request failed with some changes committed already. Interface bridge_slave_0 may have been left with an inconsistent configuration, please check. [ 116.029154][ T6603] netlink: 40 bytes leftover after parsing attributes in process `syz.2.320'. [ 116.048203][ T6607] netlink: 'syz.0.319': attribute type 10 has an invalid length. [ 116.101513][ T6607] batman_adv: batadv0: Adding interface: team0 [ 116.104243][ T6610] netlink: 'syz.0.319': attribute type 10 has an invalid length. [ 116.110463][ T6607] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 116.158191][ T6611] netlink: 4 bytes leftover after parsing attributes in process `syz.2.320'. [ 116.174114][ T6610] netlink: 2 bytes leftover after parsing attributes in process `syz.0.319'. [ 116.192228][ T6607] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 116.205489][ T6612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.320'. [ 116.231349][ T6612] netlink: 8 bytes leftover after parsing attributes in process `syz.2.320'. [ 116.258593][ T6610] team0: entered promiscuous mode [ 116.263922][ T6610] team_slave_0: entered promiscuous mode [ 116.274381][ T6610] team_slave_1: entered promiscuous mode [ 116.288878][ T6610] 8021q: adding VLAN 0 to HW filter on device team0 [ 116.296036][ T6610] batman_adv: batadv0: Interface activated: team0 [ 116.303371][ T6610] batman_adv: batadv0: Interface deactivated: team0 [ 116.310792][ T6610] batman_adv: batadv0: Removing interface: team0 [ 116.331777][ T6610] bridge0: port 3(team0) entered blocking state [ 116.346926][ T6610] bridge0: port 3(team0) entered disabled state [ 116.366842][ T6610] team0: entered allmulticast mode [ 116.384277][ T6610] team_slave_0: entered allmulticast mode [ 116.396239][ T6610] team_slave_1: entered allmulticast mode [ 116.441773][ T6610] bridge0: port 3(team0) entered blocking state [ 116.448735][ T6610] bridge0: port 3(team0) entered forwarding state [ 116.493716][ T6603] ipvlan2: entered promiscuous mode [ 117.924562][ T6676] tipc: Started in network mode [ 117.942795][ T6676] tipc: Node identity ac14140f, cluster identity 4711 [ 117.971767][ T6676] tipc: New replicast peer: 255.255.255.255 [ 118.009536][ T6676] tipc: Enabled bearer , priority 10 [ 118.632282][ T6698] xt_CT: You must specify a L4 protocol and not use inversions on it [ 118.826853][ T6707] __nla_validate_parse: 2 callbacks suppressed [ 118.826874][ T6707] netlink: 12 bytes leftover after parsing attributes in process `syz.0.362'. [ 119.132549][ T1207] tipc: Node number set to 2886997007 [ 119.806979][ T6736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.381'. [ 119.847921][ T6736] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 119.860535][ T6736] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 120.492590][ T6771] netlink: 4 bytes leftover after parsing attributes in process `syz.1.396'. [ 120.661162][ T6773] netlink: 4 bytes leftover after parsing attributes in process `syz.3.397'. [ 120.740496][ T6773] ipvlan2: entered promiscuous mode [ 120.766761][ T6773] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 120.814052][ T6773] team0: Device ipvlan2 is already an upper device of the team interface [ 120.877831][ T6781] IPv6: Can't replace route, no match found [ 121.559450][ T6807] netlink: 4 bytes leftover after parsing attributes in process `syz.1.413'. [ 121.859310][ T6823] IPVS: stopping master sync thread 6825 ... [ 122.970125][ T6864] tipc: Started in network mode [ 122.975379][ T6864] tipc: Node identity ee31dc0bcb49, cluster identity 4711 [ 123.019377][ T6864] tipc: Enabled bearer , priority 0 [ 123.110528][ T6862] syzkaller0: MTU too low for tipc bearer [ 123.116369][ T6862] tipc: Disabling bearer [ 123.569430][ T6887] atomic_op ffff88805af95998 conn xmit_atomic 0000000000000000 [ 123.734944][ T6904] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 123.872094][ T6907] netlink: 36 bytes leftover after parsing attributes in process `syz.4.455'. [ 123.897526][ T6911] IPv6: NLM_F_CREATE should be specified when creating new route [ 123.907324][ T6907] netlink: 36 bytes leftover after parsing attributes in process `syz.4.455'. [ 123.931263][ T6907] netlink: 36 bytes leftover after parsing attributes in process `syz.4.455'. [ 124.077633][ T6907] netlink: 36 bytes leftover after parsing attributes in process `syz.4.455'. [ 124.117693][ T6907] netlink: 36 bytes leftover after parsing attributes in process `syz.4.455'. [ 124.126697][ T6907] netlink: 36 bytes leftover after parsing attributes in process `syz.4.455'. [ 124.437103][ T6907] netlink: 36 bytes leftover after parsing attributes in process `syz.4.455'. [ 124.492473][ T6907] netlink: 36 bytes leftover after parsing attributes in process `syz.4.455'. [ 124.527823][ T6907] netlink: 36 bytes leftover after parsing attributes in process `syz.4.455'. [ 125.327152][ T6966] netlink: 68 bytes leftover after parsing attributes in process `syz.0.482'. [ 126.099865][ T6999] tipc: Started in network mode [ 126.112942][ T6999] tipc: Node identity 520badbc7673, cluster identity 4711 [ 126.126889][ T6999] tipc: Enabled bearer , priority 0 [ 126.140844][ T6999] syzkaller0: MTU too low for tipc bearer [ 126.146691][ T6999] tipc: Disabling bearer [ 126.220601][ T7003] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 128.408911][ T7084] syz_tun: entered allmulticast mode [ 128.438438][ T7084] syz_tun: left allmulticast mode [ 128.901675][ T7104] __nla_validate_parse: 6 callbacks suppressed [ 128.901696][ T7104] netlink: 20 bytes leftover after parsing attributes in process `syz.1.546'. [ 129.002279][ T7108] netlink: 12 bytes leftover after parsing attributes in process `syz.4.548'. [ 129.206251][ T7116] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 129.213606][ T7116] IPv6: NLM_F_CREATE should be set when creating new route [ 129.343967][ T7120] tipc: Enabled bearer , priority 0 [ 129.373162][ T7119] tipc: Disabling bearer [ 129.752241][ T7133] lo: entered promiscuous mode [ 129.757094][ T7133] lo: entered allmulticast mode [ 129.901557][ T7135] bond0: entered promiscuous mode [ 129.906667][ T7135] bond_slave_0: entered promiscuous mode [ 129.948563][ T7135] bond_slave_1: entered promiscuous mode [ 129.974536][ T7135] batadv0: entered promiscuous mode [ 129.985585][ T7135] 8021q: adding VLAN 0 to HW filter on device hsr1 [ 130.014467][ T7135] bond0: left promiscuous mode [ 130.038227][ T7135] bond_slave_0: left promiscuous mode [ 130.059441][ T7135] bond_slave_1: left promiscuous mode [ 130.076512][ T7135] batadv0: left promiscuous mode [ 130.229886][ T7139] netlink: 16 bytes leftover after parsing attributes in process `syz.2.563'. [ 130.287853][ T7139] netlink: 16 bytes leftover after parsing attributes in process `syz.2.563'. [ 130.337809][ T7139] netlink: 16 bytes leftover after parsing attributes in process `syz.2.563'. [ 130.589332][ T7151] tipc: Enabled bearer , priority 0 [ 130.672685][ T7150] tipc: Disabling bearer [ 130.679879][ T7153] netlink: 8 bytes leftover after parsing attributes in process `syz.3.567'. [ 132.108733][ T7196] netlink: 8 bytes leftover after parsing attributes in process `syz.2.590'. [ 132.235995][ T7199] netlink: 8 bytes leftover after parsing attributes in process `syz.4.592'. [ 132.813412][ T1299] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.820219][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.905602][ T7223] netlink: 2256 bytes leftover after parsing attributes in process `syz.2.603'. [ 132.917748][ T7227] netlink: 8 bytes leftover after parsing attributes in process `syz.0.604'. [ 133.181141][ T7235] vlan2: entered promiscuous mode [ 133.215171][ T7235] bridge0: entered promiscuous mode [ 134.312487][ T7278] __nla_validate_parse: 2 callbacks suppressed [ 134.312509][ T7278] netlink: 8 bytes leftover after parsing attributes in process `syz.0.627'. [ 134.322220][ T7281] netlink: 20 bytes leftover after parsing attributes in process `syz.1.626'. [ 134.344072][ T7279] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 134.354412][ T7280] bridge: RTM_NEWNEIGH with invalid ether address [ 135.883425][ T7342] bond1: entered promiscuous mode [ 135.925739][ T7342] bond1: entered allmulticast mode [ 135.970152][ T7342] 8021q: adding VLAN 0 to HW filter on device bond1 [ 136.112223][ T7356] netlink: 12 bytes leftover after parsing attributes in process `syz.1.661'. [ 136.177049][ T7342] bond1 (unregistering): Released all slaves [ 136.568191][ T7371] netlink: 80 bytes leftover after parsing attributes in process `syz.0.670'. [ 136.754563][ T7376] tipc: Enabled bearer , priority 0 [ 136.792313][ T7375] tipc: Disabling bearer [ 137.941446][ T7421] bridge_slave_0: vlans aren't supported yet for dev_uc|mc_add() [ 139.448689][ T7489] netlink: 'syz.1.717': attribute type 11 has an invalid length. [ 139.465555][ T7489] netlink: 224 bytes leftover after parsing attributes in process `syz.1.717'. [ 139.519214][ T7492] netlink: 'syz.1.717': attribute type 1 has an invalid length. [ 141.455569][ T7551] netlink: 4 bytes leftover after parsing attributes in process `syz.0.736'. [ 143.686614][ T7651] netlink: 8 bytes leftover after parsing attributes in process `syz.4.765'. [ 144.866117][ T7689] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 144.902711][ T7689] [ 144.905096][ T7689] ====================================================== [ 144.912132][ T7689] WARNING: possible circular locking dependency detected [ 144.919209][ T7689] 6.15.0-rc1-syzkaller-00207-g0c49baf099ba #0 Not tainted [ 144.926341][ T7689] ------------------------------------------------------ [ 144.933368][ T7689] syz.2.778/7689 is trying to acquire lock: [ 144.939256][ T7689] ffff88805a078f18 (sk_lock-AF_INET){+.+.}-{0:0}, at: sock_set_reuseaddr+0x17/0x60 [ 144.948617][ T7689] [ 144.948617][ T7689] but task is already holding lock: [ 144.955979][ T7689] ffffffff8fe85968 (lock#7){+.+.}-{4:4}, at: cma_add_one+0x6c1/0xce0 [ 144.964108][ T7689] [ 144.964108][ T7689] which lock already depends on the new lock. [ 144.964108][ T7689] [ 144.974508][ T7689] [ 144.974508][ T7689] the existing dependency chain (in reverse order) is: [ 144.983516][ T7689] [ 144.983516][ T7689] -> #3 (lock#7){+.+.}-{4:4}: [ 144.990425][ T7689] lock_acquire+0x116/0x2f0 [ 144.995494][ T7689] __mutex_lock+0x1a5/0x10c0 [ 145.000615][ T7689] cma_init+0x1e/0x140 [ 145.005214][ T7689] do_one_initcall+0x24a/0x940 [ 145.010509][ T7689] do_initcall_level+0x157/0x210 [ 145.015966][ T7689] do_initcalls+0x71/0xd0 [ 145.020812][ T7689] kernel_init_freeable+0x432/0x5d0 [ 145.026534][ T7689] kernel_init+0x1d/0x2b0 [ 145.031399][ T7689] ret_from_fork+0x4b/0x80 [ 145.036335][ T7689] ret_from_fork_asm+0x1a/0x30 [ 145.041621][ T7689] [ 145.041621][ T7689] -> #2 (rtnl_mutex){+.+.}-{4:4}: [ 145.048932][ T7689] lock_acquire+0x116/0x2f0 [ 145.053963][ T7689] __mutex_lock+0x1a5/0x10c0 [ 145.059101][ T7689] start_sync_thread+0xde/0x2d60 [ 145.064572][ T7689] do_ip_vs_set_ctl+0x48e/0xe50 [ 145.069945][ T7689] nf_setsockopt+0x295/0x2c0 [ 145.075067][ T7689] smc_setsockopt+0x25c/0xd50 [ 145.080282][ T7689] do_sock_setsockopt+0x3b1/0x710 [ 145.085831][ T7689] __x64_sys_setsockopt+0x1ee/0x280 [ 145.091546][ T7689] do_syscall_64+0xf3/0x230 [ 145.096573][ T7689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.102983][ T7689] [ 145.102983][ T7689] -> #1 (&smc->clcsock_release_lock){+.+.}-{4:4}: [ 145.111587][ T7689] lock_acquire+0x116/0x2f0 [ 145.116607][ T7689] __mutex_lock+0x1a5/0x10c0 [ 145.121739][ T7689] smc_switch_to_fallback+0x35/0xda0 [ 145.127544][ T7689] smc_sendmsg+0x11f/0x530 [ 145.132478][ T7689] __sock_sendmsg+0x221/0x270 [ 145.137680][ T7689] __sys_sendto+0x365/0x4c0 [ 145.142703][ T7689] __x64_sys_sendto+0xde/0x100 [ 145.147992][ T7689] do_syscall_64+0xf3/0x230 [ 145.153026][ T7689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.159448][ T7689] [ 145.159448][ T7689] -> #0 (sk_lock-AF_INET){+.+.}-{0:0}: [ 145.167121][ T7689] validate_chain+0xa69/0x24e0 [ 145.172425][ T7689] __lock_acquire+0xad5/0xd80 [ 145.177640][ T7689] lock_acquire+0x116/0x2f0 [ 145.182702][ T7689] lock_sock_nested+0x48/0x100 [ 145.188014][ T7689] sock_set_reuseaddr+0x17/0x60 [ 145.193395][ T7689] siw_create_listen+0x19f/0x1250 [ 145.198960][ T7689] iw_cm_listen+0x15e/0x230 [ 145.203999][ T7689] rdma_listen+0xb51/0xe40 [ 145.208945][ T7689] cma_listen_on_dev+0x3e0/0x6f0 [ 145.214410][ T7689] cma_add_one+0x7dc/0xce0 [ 145.219359][ T7689] add_client_context+0x53e/0x8b0 [ 145.224928][ T7689] enable_device_and_get+0x1de/0x450 [ 145.230753][ T7689] ib_register_device+0x1138/0x1460 [ 145.236477][ T7689] siw_newlink+0x938/0xda0 [ 145.241416][ T7689] nldev_newlink+0x5ed/0x680 [ 145.246528][ T7689] rdma_nl_rcv+0x6e5/0x9e0 [ 145.251462][ T7689] netlink_unicast+0x7f8/0x9a0 [ 145.256758][ T7689] netlink_sendmsg+0x8c3/0xcd0 [ 145.262053][ T7689] __sock_sendmsg+0x221/0x270 [ 145.267261][ T7689] ____sys_sendmsg+0x523/0x860 [ 145.272645][ T7689] __sys_sendmsg+0x271/0x360 [ 145.277775][ T7689] do_syscall_64+0xf3/0x230 [ 145.282802][ T7689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.289220][ T7689] [ 145.289220][ T7689] other info that might help us debug this: [ 145.289220][ T7689] [ 145.299452][ T7689] Chain exists of: [ 145.299452][ T7689] sk_lock-AF_INET --> rtnl_mutex --> lock#7 [ 145.299452][ T7689] [ 145.311301][ T7689] Possible unsafe locking scenario: [ 145.311301][ T7689] [ 145.318745][ T7689] CPU0 CPU1 [ 145.324107][ T7689] ---- ---- [ 145.329473][ T7689] lock(lock#7); [ 145.333128][ T7689] lock(rtnl_mutex); [ 145.339641][ T7689] lock(lock#7); [ 145.345827][ T7689] lock(sk_lock-AF_INET); [ 145.350252][ T7689] [ 145.350252][ T7689] *** DEADLOCK *** [ 145.350252][ T7689] [ 145.358401][ T7689] 6 locks held by syz.2.778/7689: [ 145.363423][ T7689] #0: ffffffff9aafd058 (&rdma_nl_types[idx].sem){.+.+}-{4:4}, at: rdma_nl_rcv+0x32f/0x9e0 [ 145.373461][ T7689] #1: ffffffff8fe71b30 (link_ops_rwsem){++++}-{4:4}, at: nldev_newlink+0x456/0x680 [ 145.382888][ T7689] #2: ffffffff8fe645d0 (devices_rwsem){++++}-{4:4}, at: enable_device_and_get+0x130/0x450 [ 145.392912][ T7689] #3: ffffffff8fe648d0 (clients_rwsem){++++}-{4:4}, at: enable_device_and_get+0x18e/0x450 [ 145.402932][ T7689] #4: ffff88807a8745f0 (&device->client_data_rwsem){++++}-{4:4}, at: add_client_context+0x4fa/0x8b0 [ 145.413846][ T7689] #5: ffffffff8fe85968 (lock#7){+.+.}-{4:4}, at: cma_add_one+0x6c1/0xce0 [ 145.422409][ T7689] [ 145.422409][ T7689] stack backtrace: [ 145.428403][ T7689] CPU: 0 UID: 0 PID: 7689 Comm: syz.2.778 Not tainted 6.15.0-rc1-syzkaller-00207-g0c49baf099ba #0 PREEMPT(full) [ 145.428424][ T7689] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 145.428438][ T7689] Call Trace: [ 145.428446][ T7689] [ 145.428453][ T7689] dump_stack_lvl+0x241/0x360 [ 145.428484][ T7689] ? __pfx_dump_stack_lvl+0x10/0x10 [ 145.428508][ T7689] ? __pfx__printk+0x10/0x10 [ 145.428531][ T7689] ? print_lock+0x171/0x1a0 [ 145.428552][ T7689] print_circular_bug+0x2e1/0x300 [ 145.428576][ T7689] check_noncircular+0x142/0x160 [ 145.428601][ T7689] validate_chain+0xa69/0x24e0 [ 145.428632][ T7689] ? look_up_lock_class+0x7b/0x170 [ 145.428654][ T7689] ? register_lock_class+0x54/0x330 [ 145.428672][ T7689] __lock_acquire+0xad5/0xd80 [ 145.428692][ T7689] lock_acquire+0x116/0x2f0 [ 145.428708][ T7689] ? sock_set_reuseaddr+0x17/0x60 [ 145.428737][ T7689] lock_sock_nested+0x48/0x100 [ 145.428758][ T7689] ? sock_set_reuseaddr+0x17/0x60 [ 145.428782][ T7689] sock_set_reuseaddr+0x17/0x60 [ 145.428805][ T7689] siw_create_listen+0x19f/0x1250 [ 145.428820][ T7689] ? _raw_spin_unlock_irqrestore+0x90/0x140 [ 145.428840][ T7689] ? __pfx_siw_create_listen+0x10/0x10 [ 145.428860][ T7689] iw_cm_listen+0x15e/0x230 [ 145.428885][ T7689] rdma_listen+0xb51/0xe40 [ 145.428905][ T7689] ? __pfx_rdma_listen+0x10/0x10 [ 145.428925][ T7689] ? rdma_restrack_add+0x28a/0x7b0 [ 145.428944][ T7689] ? _cma_attach_to_dev+0x295/0x490 [ 145.428967][ T7689] cma_listen_on_dev+0x3e0/0x6f0 [ 145.428992][ T7689] cma_add_one+0x7dc/0xce0 [ 145.429018][ T7689] ? __pfx_cma_add_one+0x10/0x10 [ 145.429047][ T7689] ? _raw_spin_unlock+0x28/0x50 [ 145.429064][ T7689] add_client_context+0x53e/0x8b0 [ 145.429085][ T7689] ? __pfx_add_client_context+0x10/0x10 [ 145.429103][ T7689] ? __pfx_ib_setup_port_attrs+0x10/0x10 [ 145.429145][ T7689] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 145.429170][ T7689] enable_device_and_get+0x1de/0x450 [ 145.429189][ T7689] ? __pfx_enable_device_and_get+0x10/0x10 [ 145.429208][ T7689] ? device_add+0x460/0xbf0 [ 145.429231][ T7689] ib_register_device+0x1138/0x1460 [ 145.429253][ T7689] ? __pfx_ib_register_device+0x10/0x10 [ 145.429272][ T7689] ? xa_load+0x2df/0x350 [ 145.429293][ T7689] ? xa_load+0x149/0x350 [ 145.429315][ T7689] ? __pfx_xa_load+0x10/0x10 [ 145.429344][ T7689] ? ib_device_set_netdev+0x5c5/0x6c0 [ 145.429364][ T7689] ? __raw_spin_lock_init+0x45/0x100 [ 145.429390][ T7689] siw_newlink+0x938/0xda0 [ 145.429408][ T7689] nldev_newlink+0x5ed/0x680 [ 145.429435][ T7689] ? __pfx_nldev_newlink+0x10/0x10 [ 145.429496][ T7689] ? aa_get_newest_label+0x101/0x6f0 [ 145.429521][ T7689] ? __pfx_aa_get_newest_label+0x10/0x10 [ 145.429545][ T7689] ? __pfx_aa_get_newest_label+0x10/0x10 [ 145.429574][ T7689] ? apparmor_capable+0x13b/0x1b0 [ 145.429592][ T7689] ? bpf_lsm_capable+0x9/0x10 [ 145.429618][ T7689] ? security_capable+0x7e/0x2d0 [ 145.429642][ T7689] ? __pfx_nldev_newlink+0x10/0x10 [ 145.429667][ T7689] rdma_nl_rcv+0x6e5/0x9e0 [ 145.429688][ T7689] ? __pfx_rdma_nl_rcv+0x10/0x10 [ 145.429705][ T7689] ? __lock_acquire+0xad5/0xd80 [ 145.429730][ T7689] ? netlink_deliver_tap+0x2e/0x1b0 [ 145.429756][ T7689] ? netlink_deliver_tap+0x2e/0x1b0 [ 145.429781][ T7689] netlink_unicast+0x7f8/0x9a0 [ 145.429807][ T7689] ? __pfx_netlink_unicast+0x10/0x10 [ 145.429829][ T7689] ? skb_put+0x114/0x1f0 [ 145.429847][ T7689] netlink_sendmsg+0x8c3/0xcd0 [ 145.429878][ T7689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.429905][ T7689] ? aa_sock_msg_perm+0x91/0x160 [ 145.429931][ T7689] ? __pfx_netlink_sendmsg+0x10/0x10 [ 145.429955][ T7689] __sock_sendmsg+0x221/0x270 [ 145.429979][ T7689] ____sys_sendmsg+0x523/0x860 [ 145.430000][ T7689] ? __pfx_____sys_sendmsg+0x10/0x10 [ 145.430016][ T7689] ? __fget_files+0x2a/0x420 [ 145.430032][ T7689] ? __fget_files+0x2a/0x420 [ 145.430050][ T7689] __sys_sendmsg+0x271/0x360 [ 145.430066][ T7689] ? __pfx_futex_wake+0x10/0x10 [ 145.430085][ T7689] ? __pfx___sys_sendmsg+0x10/0x10 [ 145.430125][ T7689] ? do_syscall_64+0xb6/0x230 [ 145.430147][ T7689] do_syscall_64+0xf3/0x230 [ 145.430169][ T7689] ? clear_bhb_loop+0x45/0xa0 [ 145.430193][ T7689] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 145.430214][ T7689] RIP: 0033:0x7f1e38f8d169 [ 145.430234][ T7689] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 145.430248][ T7689] RSP: 002b:00007f1e39de0038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 145.430265][ T7689] RAX: ffffffffffffffda RBX: 00007f1e391a5fa0 RCX: 00007f1e38f8d169 [ 145.430278][ T7689] RDX: 0000000020000000 RSI: 00002000000000c0 RDI: 0000000000000007 [ 145.430289][ T7689] RBP: 00007f1e3900e990 R08: 0000000000000000 R09: 0000000000000000 [ 145.430311][ T7689] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 145.430320][ T7689] R13: 0000000000000000 R14: 00007f1e391a5fa0 R15: 00007ffe21e39958 [ 145.430339][ T7689] [ 145.959602][ T7696] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 145.996927][ T7689] infiniband s9z1: RDMA CMA: cma_listen_on_dev, error -98