last executing test programs: 5m7.487685042s ago: executing program 3 (id=1827): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000c829f168b70200000800000018230000", @ANYRES8=r0, @ANYBLOB="0000000000000000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_POWER(r3, 0x112, 0x9, 0x0, &(0x7f00000001c0)) sendmsg$nl_route_sched(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0x50, 0x24, 0xd0f, 0x70bd2a, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0x3}}, [@qdisc_kind_options=@q_fq_codel={{0xd}, {0x1c, 0x2, [@TCA_FQ_CODEL_CE_THRESHOLD_SELECTOR={0x5, 0xa, 0xed}, @TCA_FQ_CODEL_TARGET={0x8, 0x1, 0xad7}, @TCA_FQ_CODEL_CE_THRESHOLD={0x8, 0x7, 0x10001}]}}]}, 0x50}}, 0x20040080) r4 = openat$cgroup(0xffffffffffffffff, &(0x7f0000000040)='syz1\x00', 0x200002, 0x0) openat$cgroup_subtree(r4, &(0x7f0000000080), 0x2, 0x0) 5m7.291679667s ago: executing program 3 (id=1830): socket$inet(0x2, 0x3, 0x2) r0 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000080)=0x80000049, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xa0}, 0x4000004) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0xe}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$inet(0x2, 0x3, 0x2) (async) socket$inet_tcp(0x2, 0x1, 0x0) (async) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) (async) setsockopt$inet_tcp_int(r0, 0x6, 0xc, &(0x7f0000000080)=0x80000049, 0x4) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000002c00)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) (async) socket$packet(0x11, 0x3, 0x300) (async) setsockopt$packet_int(r1, 0x107, 0x16, &(0x7f0000000000)=0x4, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$NL80211_CMD_FLUSH_PMKSA(r2, &(0x7f0000000600)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000580)={0x1c, 0x0, 0x1, 0x70bd2b, 0x25dfdbfc, {{}, {@val={0x8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0xa0}, 0x4000004) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x18, 0x4, &(0x7f0000000080)=@framed={{}, [@jmp={0x5, 0x0, 0xe}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) 5m7.060580091s ago: executing program 3 (id=1834): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0xffffffffffffff20, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r1 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f0000"], 0x48) r2 = socket$packet(0x11, 0x3, 0x300) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) accept4$nfc_llcp(r4, &(0x7f00000002c0), &(0x7f0000000240)=0x60, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0xa) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0x5, &(0x7f0000000000)=0xffffffff, 0x4) sendmsg$NL80211_CMD_LEAVE_MESH(r5, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=ANY=[], 0x33fe0}}, 0x0) sendmsg$TCPDIAG_GETSOCK(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)={0x4c}, 0x4c}}, 0x0) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) r6 = socket$inet6_udp(0xa, 0x2, 0x0) sendmmsg$inet6(r6, &(0x7f0000004bc0)=[{{&(0x7f0000000200)={0xa, 0x4e21, 0xa4de, @loopback, 0x91}, 0x1c, 0x0, 0x0, &(0x7f0000000900)=[@rthdrdstopts={{0x18, 0x29, 0x37, {0x16}}}, @dontfrag={{0x18, 0x29, 0x3e, 0xfff}}], 0x30}}], 0x1, 0x0) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x7, '\x00', 0x0, r1, 0x3, 0x4, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x8001, 0x8, 0xf, 0x800, r7, 0x3, '\x00', 0x0, r1, 0x2, 0x1, 0x0, 0x6, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x1f, 0x2, &(0x7f0000000200)=ANY=[@ANYBLOB="85000000aa00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt$sock_int(r9, 0x1, 0xb, 0x0, &(0x7f0000002340)) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0), 0x0, 0xe, r8}, 0x38) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xb, &(0x7f0000000080)=@framed={{0x18, 0x3}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd, @generic={0x66}, @initr0, @exit, @alu={0x4, 0x0, 0x5, 0x3}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x0, 0xa, &(0x7f0000000080)=ANY=[@ANYBLOB="18080000000000000000000000000000851000000200000018000000000000000000000000000090cd58562a15002c000064a6693bad8900000000001800"/75], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) 5m6.051660799s ago: executing program 3 (id=1847): r0 = accept4$llc(0xffffffffffffffff, &(0x7f0000000080)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, &(0x7f00000000c0)=0x10, 0x180800) setsockopt$llc_int(r0, 0x10c, 0x3, &(0x7f0000000100)=0x4, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r1}, 0x10) connect$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)={0x18, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}, @typed={0x4, 0x12}]}, 0x18}], 0x1}, 0x0) 5m3.38274819s ago: executing program 3 (id=1851): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00'}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x18) r3 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000a00)={&(0x7f00000001c0)='sched_process_wait\x00', r4}, 0x18) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r6) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r3, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$LINK_DETACH(0x22, 0x0, 0x0) r7 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) sendto$x25(r7, &(0x7f0000000d40)="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", 0x1000, 0x20040000, &(0x7f0000000400), 0x12) close(r7) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_ADD_IFACE(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB='(\x00\x00\x00'], 0x28}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f00000000c0), r9) r10 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000140), r9) sendmsg$NLBL_CIPSOV4_C_LIST(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="141c0000", @ANYRES16=r10, @ANYBLOB="0100000000000000000005000000"], 0x14}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000380)={'sit0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB="54000000100003040100"/20, @ANYRES32=r11, @ANYBLOB="365eadfd000000002c00128009000100766c616e000000001c0002800400048006000100000000000c000200000000000e00000008000500", @ANYRES32=r11, @ANYBLOB="97fc32e59116e6698a45f9ffc354bf97b0e59165933e51e96285f4fabb61e1504a23fdc17a9a3a47f95f12be84d9ca527c2f06dd87b71239c43f034591292b6462e423cd1388448d967e7c32fc80a3b13f768718e1589fe73bfa324769f2446242386e4c42d92be2af5e1e7b41194ced4976aa81a51b3ab96b772df8de88e6f98dbbb8178e8667169f6b72a0a92faea99d201f76ed55f0f3eaefdb010679accb1225e063b992ebf071bdc1bb4748ee119148cd7d1f8eefffef26f5c3cffdb78c5a7c93b59657ed3fae0108afd7d8e7b14dfe0c16ceb2850383839fc0d9dcf996592fc624523b58ed0050ceffddc0284f"], 0x54}, 0x1, 0xba01, 0x0, 0x4005}, 0x0) 5m3.210848257s ago: executing program 3 (id=1856): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) (async) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) (async) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000240), 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000240), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="a21428c6c085", @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "bcc1d7", 0x0, 0x6c, 0xff, @loopback, @empty}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = epoll_create1(0x0) r4 = socket$unix(0x1, 0x1, 0x0) close(r4) socket$vsock_stream(0x28, 0x1, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) (async) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r5, 0x0, 0x8000000000000000}, 0x18) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000080)={0xa002a008}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) accept4$bt_l2cap(r0, 0x0, 0x0, 0x800) 4m48.087004184s ago: executing program 32 (id=1856): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) shutdown(r0, 0x0) (async) shutdown(r0, 0x0) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) (async) recvmmsg(r0, &(0x7f00000055c0), 0x400023c, 0x300, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000240), 0x8) (async) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(r1, 0x84, 0x19, &(0x7f0000000240), 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xfffffffe, @void, @value}, 0x90) syz_emit_ethernet(0x36, &(0x7f0000000000)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @random="a21428c6c085", @void, {@ipv6={0x86dd, @generic={0x1, 0x6, "bcc1d7", 0x0, 0x6c, 0xff, @loopback, @empty}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000080)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = epoll_create1(0x0) r4 = socket$unix(0x1, 0x1, 0x0) close(r4) socket$vsock_stream(0x28, 0x1, 0x0) (async) socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) (async) setsockopt$sock_int(r4, 0x1, 0x2e, &(0x7f0000000040)=0x80, 0x4) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x3, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r5, 0x0, 0x8000000000000000}, 0x18) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000080)={0xa002a008}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) accept4$bt_l2cap(r0, 0x0, 0x0, 0x800) 1m8.805644012s ago: executing program 5 (id=3652): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/9, 0x9}, 0x1}], 0x1, 0x20, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x400c000}, 0x840) 55.869778132s ago: executing program 5 (id=3652): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/9, 0x9}, 0x1}], 0x1, 0x20, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x400c000}, 0x840) 42.367958553s ago: executing program 5 (id=3652): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/9, 0x9}, 0x1}], 0x1, 0x20, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x400c000}, 0x840) 29.228291478s ago: executing program 5 (id=3652): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/9, 0x9}, 0x1}], 0x1, 0x20, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x400c000}, 0x840) 17.477674967s ago: executing program 5 (id=3652): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/9, 0x9}, 0x1}], 0x1, 0x20, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x400c000}, 0x840) 5.90032371s ago: executing program 5 (id=3652): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/9, 0x9}, 0x1}], 0x1, 0x20, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x400c000}, 0x840) 5.162803692s ago: executing program 33 (id=3652): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000480)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=""/9, 0x9}, 0x1}], 0x1, 0x20, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000600), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_SET(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[], 0x4c}, 0x1, 0x0, 0x0, 0x400c000}, 0x840) 4.669107214s ago: executing program 4 (id=4234): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000100)={0x2, 0x5, 0x0, 0x7, 0xe, 0x0, 0x0, 0x25dfdbfc, [@sadb_address={0x5, 0x6, 0xff, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x3a}}}]}, 0x70}, 0x1, 0x7}, 0x0) 4.668679485s ago: executing program 4 (id=4235): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r4 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r4, 0x107, 0xd, &(0x7f0000000040)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) sendmmsg$sock(r4, &(0x7f0000000380)=[{{&(0x7f0000000080)=@phonet={0x23, 0x0, 0x8, 0x7}, 0x14, 0x0}}], 0x1, 0x1) r5 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r5, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10) bind$tipc(r3, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x20000003}}}, 0x10) bind$tipc(r5, &(0x7f0000000140)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) bind$tipc(r3, 0x0, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000300)='dctcp-reno\x00', 0xb) r6 = socket$inet_icmp_raw(0x2, 0x3, 0x1) sendmsg$inet(r6, &(0x7f0000000780)={&(0x7f0000000100)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000180)=[{&(0x7f0000000140)="be38", 0x2}, {0x0}], 0x2, &(0x7f0000000000)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @local, @dev}}}], 0x20}, 0x0) select(0x40, &(0x7f0000000040)={0x0, 0x0, 0x0, 0x700}, 0x0, 0x0, &(0x7f0000000100)) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x4000040}, 0x4c) r7 = socket$nl_generic(0x11, 0x3, 0x10) sendmsg(r7, &(0x7f0000000640)={&(0x7f0000000040)=@caif=@dgm={0x25, 0xd, 0x9}, 0x80, &(0x7f00000005c0)=[{&(0x7f0000000000)="4ba72c4cfd81685544f46c3f0800", 0xe}], 0x1, 0x0, 0x0, 0x11000000}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000100), 0xffffffffffffffff) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r8, 0x0) connect$inet(r8, &(0x7f0000000340)={0x2, 0x4e22, @multicast1}, 0x10) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4800000010003b1500"/20, @ANYRES32=0x0, @ANYBLOB="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"], 0x48}}, 0x0) 4.34694498s ago: executing program 4 (id=4238): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000001c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x9, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x50) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'batadv_slave_0\x00'}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000300)={&(0x7f0000000240)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x38, 0x38, 0xa, [@int={0x9, 0x0, 0x0, 0x1, 0x0, 0x69, 0x0, 0x3d, 0x6}, @typedef={0x5, 0x0, 0x0, 0x8, 0x3}, @float={0xb, 0x0, 0x0, 0x10, 0x10}, @int={0x5, 0x0, 0x0, 0x1, 0x0, 0x51, 0x0, 0x67, 0x2}]}, {0x0, [0x5f, 0x5f, 0x30, 0x61, 0x2e, 0x2e, 0x61, 0x30]}}, &(0x7f00000002c0)=""/27, 0x5a, 0x1b, 0x1, 0x3e0e, 0x10000, @value}, 0x28) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=@bloom_filter={0x1e, 0x8, 0x5, 0x5, 0x20002, r0, 0x49, '\x00', 0x0, r1, 0x3, 0x4, 0x3, 0x6, @void, @value, @void, @value}, 0x50) close(0x3) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="020100030e00000000000000000000000500060000003a000a00000000000000fc020000000000000000000000000000000000000000000005000500000000000a0000000000000000000000000000000000ffffffffffff0000000000000000020013000200"], 0x70}, 0x1, 0x7}, 0x0) (async) sendmsg$key(r3, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f0000000400)=ANY=[@ANYBLOB="020100030e00000000000000000000000500060000003a000a00000000000000fc020000000000000000000000000000000000000000000005000500000000000a0000000000000000000000000000000000ffffffffffff0000000000000000020013000200"], 0x70}, 0x1, 0x7}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00'}) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000580)=ANY=[@ANYBLOB="1802000000000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b7030000000000fd850000007300000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000680)='sys_exit\x00', r4}, 0x10) socket$nl_crypto(0x10, 0x3, 0x15) (async) r5 = socket$nl_crypto(0x10, 0x3, 0x15) ioctl$sock_SIOCGIFBR(r5, 0x8940, &(0x7f0000000000)=@get={0x1, &(0x7f0000000a40)=""/4096, 0x8}) 3.552030841s ago: executing program 4 (id=4242): socket$key(0xf, 0x3, 0x2) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x3, &(0x7f0000000080)={&(0x7f0000000280)={0x2, 0x4, 0x0, 0x0, 0xd, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0xe, @in={0x2, 0x0, @empty}}, @sadb_x_kmaddress={0x5, 0x19, 0x0, @in={0x2, 0x4e23, @private=0xa010101}, @in={0x2, 0x4e20, @remote}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @multicast1}}]}, 0x68}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)) (async) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000400)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x1, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000080)=ANY=[@ANYBLOB="1400000013000104000000000000000003"], 0x14}], 0x1}, 0x0) syz_emit_ethernet(0x142, &(0x7f0000000600)=ANY=[@ANYBLOB="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"/322], 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="480000001000010400"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00('], 0x48}}, 0x0) socket$inet6(0xa, 0x2, 0x0) (async) r4 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x33, &(0x7f0000000040)=0x80000000, 0x1a) bind$inet6(r4, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r5, &(0x7f0000000240)={0x0, 0xfffffffffffffe1a, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB='l\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000100000008000100400000000c000200700f0000000000000c00060003000000000000000a000a00272d5d29212b0000140007"], 0x6c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = socket(0x10, 0x3, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @mcast1, @loopback={0xff000000, 0xffff8881a56043d8}, 0x700, 0x0, 0x0, 0x3}}) (async) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r9, 0x89f1, &(0x7f0000000300)={'ip6gre0\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x4, 0x0, 0x0, 0x0, 0x0, @mcast1, @loopback={0xff000000, 0xffff8881a56043d8}, 0x700, 0x0, 0x0, 0x3}}) socket$inet6_sctp(0xa, 0x1, 0x84) (async) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_INITMSG(r10, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) (async) setsockopt$inet_sctp6_SCTP_INITMSG(r10, 0x84, 0x2, &(0x7f00000000c0)={0xfffc}, 0x8) sendto$inet6(r10, &(0x7f00000004c0)='W', 0x1, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @loopback, 0x8}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_REM(r10, 0x84, 0x65, 0x0, 0x0) connect$unix(r7, &(0x7f0000000380)=@abs, 0x6e) (async) connect$unix(r7, &(0x7f0000000380)=@abs, 0x6e) sendmmsg$unix(r8, &(0x7f0000001ec0)=[{{&(0x7f0000000500)=@abs={0x0, 0x0, 0x4e22}, 0x6e, &(0x7f0000000340)=[{&(0x7f0000000780)="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", 0x1000}], 0x1, &(0x7f0000001780)=[@cred={{0x1c, 0x1, 0x2, {0x0, 0xee01}}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x14, 0x1, 0x1, [r8]}}, @rights={{0x14, 0x1, 0x1, [r7]}}, @rights={{0x2c, 0x1, 0x1, [r1, r9, r2, r4, r2, r0, 0xffffffffffffffff]}}], 0xc0, 0x4000000}}, {{&(0x7f0000001840)=@file={0x0, './file0\x00'}, 0x6e, &(0x7f0000001ac0)=[{&(0x7f00000018c0)="7296a639c3af87c2db03684778c4e5813dbff93f0f41435c98717601aae4a2e6cb893911e78cd57cf7df74aa0361e148d14bdb7f3bd42f3e4f9494ce5ccf4f182b2fb5384a360ca91c62d1c15d8beed1d2d14ce3ea03e0eaa9a3ec2852f89e81282771ef5385a7187bd9732dd1f7dbd48909ae994889eaf2a491f8278ed089da6cc3a2ee17f425a14040df5aa675cbbd7c81a889fae4d5fde5a228de93dc957056e58d5eb4079ab16b9170d7f3cad16383184900000000000000b6a17143513e01844cb58612302c0845996144b4929ee508a461c63a141bd7", 0xd9}, {&(0x7f00000019c0)="729de0960845542e53f66dfc09ebc0a187dc5b7daa5241c276f8b693153f178ffad0de1c00d9f5e75b9ccb90fe8b150f", 0x30}, {&(0x7f00000053c0)="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", 0x1000}, {&(0x7f0000001a00)="db47686e5845e42a4e55b89c9124179a", 0x10}, {&(0x7f0000001a40)="db26d06e584873dc6b84ab753d32014891e2c6cdbd44055ece64138e7977409a18f660b70a640b76ff3d8d4a91149a069d6a9cc37a5f2ffd90184e072e78b25593ce3fa1b9abf31bab2c5e799097a1875580678f8cc36c1cecc01df77d00cfed0118e537bf7a9129f4876a327059150072dc0c801a2c1560502c5e2430e465", 0x7f}], 0x5, &(0x7f0000001d80)=[@cred={{0x1c}}, @rights={{0x1c, 0x1, 0x1, [r7, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [r10, r2]}}, @cred={{0x1c}}, @cred={{0x1c, 0x1, 0x2, {0x0, 0xffffffffffffffff, 0xffffffffffffffff}}}, @cred={{0x1c}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, r0]}}, @rights={{0x10}}], 0x120, 0x48090}}], 0x2, 0x0) recvmmsg(r7, &(0x7f00000000c0), 0x10106, 0x0, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[], 0x6c}}, 0x0) recvmmsg(r4, &(0x7f0000000040), 0x400000000000284, 0x2, 0x0) setsockopt$inet6_int(r4, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) (async) setsockopt$inet6_int(r4, 0x29, 0x42, &(0x7f0000000100)=0x1e79, 0x4) 3.539428691s ago: executing program 1 (id=4243): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) (async) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x24004015}, 0x448d0) r4 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400000014000306000000000000edff10000d000100bc0a5a"], 0x24}}, 0x0) 3.538556641s ago: executing program 2 (id=4244): socket$inet6(0xa, 0x2, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x4, 0x5, &(0x7f0000000000)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x22}, @call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x0, 0xfffffffffffffdef, 0x0, &(0x7f00000004c0)="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", 0x0, 0x7c, 0x0, 0x0, 0xebbcb7787f198784, 0x0, 0x0, 0x0, 0x0, 0x7}, 0x5a) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @mcast1}, 0x1b) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0xcc15, @dev={0xfe, 0x80, '\x00', 0xff}, 0x7}, 0x1c) (async) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x4e20, 0xcc15, @dev={0xfe, 0x80, '\x00', 0xff}, 0x7}, 0x1c) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000004d80), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000004d80), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)={0x14, r3, 0x4, 0x0, 0x25dfdbfb}, 0x14}}, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000001c0)={0x20, r4, 0x9, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}]}]}, 0x20}}, 0x0) r6 = socket$l2tp(0x2, 0x2, 0x73) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r2) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000240), r2) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x7}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private1}]}}}]}, 0x5c}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000800)=@newlink={0x5c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x3c, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x2c, 0x2, 0x0, 0x1, [@IFLA_GENEVE_LABEL={0x8, 0xb, 0x1, 0x0, 0x7}, @IFLA_GENEVE_COLLECT_METADATA={0x4}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}, @IFLA_GENEVE_REMOTE6={0x14, 0x7, @private1}]}}}]}, 0x5c}}, 0x0) bind$l2tp(r6, &(0x7f00000000c0), 0x10) sendto$l2tp(r6, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000100)={0x2, 0x0, @loopback}, 0x10) recvfrom$l2tp(r6, 0x0, 0xc00, 0x40010062, 0x0, 0x0) (async) recvfrom$l2tp(r6, 0x0, 0xc00, 0x40010062, 0x0, 0x0) 3.337803755s ago: executing program 2 (id=4245): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) syz_extract_tcp_res(&(0x7f0000000040)={0x41424344}, 0x5, 0xe) write$tun(r0, &(0x7f00000001c0)={@void, @void, @eth={@empty, @random="1f00bc0e00", @val={@void, {0x8100, 0x0, 0x0, 0x400}}, {@mpls_mc={0x8848, {[], @ipv4=@tcp={{0x2b, 0x4, 0x0, 0x5, 0x104, 0x64, 0x0, 0x9, 0x6, 0x0, @multicast1, @loopback, {[@timestamp={0x44, 0x8, 0x56, 0x0, 0x7, [0x80000000]}, @end, @ssrr={0x89, 0x13, 0x2b, [@multicast2, @multicast2, @loopback, @multicast2]}, @timestamp_prespec={0x44, 0xc, 0x5f, 0x3, 0x7, [{@loopback, 0x4}]}, @cipso={0x86, 0x16, 0x3, [{0x7, 0x10, "7ffcffdeb8abc76c090430807509"}]}, @end, @generic={0x94, 0x3, "9f"}, @timestamp_addr={0x44, 0x54, 0xca, 0x1, 0xd, [{@broadcast, 0x8385}, {@remote, 0xe77b}, {@broadcast, 0xc9}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010100}, {@broadcast, 0x6b356891}, {@dev={0xac, 0x14, 0x14, 0x35}, 0x1}, {@remote, 0xea7e}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x8}, {@private=0xa010101, 0xe467}]}, @noop]}}, {{0x4e22, 0x4e24, 0x41424344, r2, 0x1, 0x0, 0x6, 0x20, 0x6, 0x0, 0x2f12, {[@generic={0x8, 0x4, '6R'}]}}, {"a6ac3c923f2a9aad814799f6f1225230b010819a1b1655cc5c22b1d2bb05326e3a8076735a26eae1a4fec7e4f761cee0652169cc3d2171608f41d195849b0909"}}}}}}}}, 0x116) 3.102228063s ago: executing program 1 (id=4247): r0 = socket$inet_sctp(0x2, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1b, &(0x7f0000000040)=[@in6={0xa, 0x4e22, 0x5, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0xfffffffe}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp_SCTP_RTOINFO(r0, 0x84, 0x0, &(0x7f0000000000)={r2, 0x2, 0x24, 0x7ff}, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x54, r6, 0x1, 0x0, 0x0, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_DEVKEY={0x38, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0002}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x6f4d}, @NL802154_DEVKEY_ATTR_ID={0x20, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}]}]}]}]}, 0x54}}, 0x20000000) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r3, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x1c, r6, 0x20, 0x70bd2a, 0x25dfdbfb, {}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) 2.919093442s ago: executing program 0 (id=4248): bpf$ENABLE_STATS(0x20, 0x0, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xc, &(0x7f0000000540)=ANY=[@ANYBLOB="180000000000000000000000020000008500000023000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000ff030000850000007200000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_int(r1, &(0x7f00000000c0)='cpu.weight.nice\x00', 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000040)=@raw={'raw\x00', 0x4001, 0x3, 0x278, 0x140, 0x0, 0x148, 0x140, 0x148, 0x1e0, 0x240, 0x240, 0x1e0, 0x240, 0x7fffffe, 0x0, {[{{@ip={@empty, @local, 0x0, 0x0, 'ip6gretap0\x00', 'veth1_to_batadv\x00'}, 0x0, 0xd8, 0x140, 0x0, {}, [@common=@unspec=@mac={{0x30}, {@multicast}}, @common=@unspec=@statistic={{0x38}, {0x2}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x70, 0xa0}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x2d8) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000780)={0x2, 0x400000000000003, 0x0, 0x0, 0x1b, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x6c, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_lifetime={0x4, 0x4, 0x0, 0x7}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x0, 0x0, 0x3}, @sadb_address={0x5, 0x5, 0x0, 0x80, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}, @sadb_address={0x3, 0x7, 0x0, 0x0, 0x0, @in={0x2, 0x4e20, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_x_sa2={0x2, 0x13, 0x3}]}, 0xd8}}, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) write$tun(0xffffffffffffffff, &(0x7f00000000c0)=ANY=[], 0xffe) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_vlan={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{}, 0x3}}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000980)={&(0x7f0000000940)='sched_kthread_work_execute_end\x00', r0, 0x0, 0x6}, 0x18) sendmsg$IPSET_CMD_RENAME(r5, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000440)={0x48, 0x5, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0x8001}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME2={0x9, 0x3, 'syz1\x00'}]}, 0x48}}, 0x10) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[@ANYRES8=r2], 0x9) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) recvmsg$qrtr(0xffffffffffffffff, &(0x7f00000007c0)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)=[{&(0x7f00000002c0)=""/231, 0xe7}, {&(0x7f00000003c0)=""/194, 0xc2}, {&(0x7f0000000100)}, {&(0x7f0000000180)=""/41, 0x29}], 0x4, &(0x7f00000004c0)=[{0x100, 0x0, 0x0, ""/235}, {0x18, 0x0, 0x0, ""/8}, {0x20, 0x0, 0x0, ""/16}, {0x88, 0x0, 0x0, ""/119}, {0xc8, 0x0, 0x0, ""/184}, {0x60, 0x0, 0x0, ""/73}], 0x2e8, 0x2100}, 0x38, 0x40000000) r7 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb010018000000000000002000000020000000070000000bedffffffffff10020000000a0000000700000000000011040000000600165b55a01c1264e9e0"], &(0x7f0000000040)=""/41, 0x3f, 0x29, 0x1, 0x3, 0x10000, @value}, 0x28) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a010d0000000000000000010000000900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a32000000009c000000060a010400000000000000000100000008000b400000000074000480340001800b000100657874686472000024000280080001400000000c0800034000000000080004400000002205000200070000003c0001800c00010062697477697365002c000280080001400000001408000340000000020800024000000012080001400000000c08000640000000130900010073797a30"], 0x110}}, 0x0) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000900)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f00000008c0)={&(0x7f0000000800)=ANY=[@ANYBLOB="ac0000000206010800000000000000000700000605000400030000000900020073797a3200000000240007800500030060000000080009400000000908001740000000000500140005000000050005000000000016000300686173683a6e65742c740500150003000000060004404e240040060004404e2420000c000180080001407f000001080013400000010005001500c4000000050007006600"/165], 0xac}, 0x1, 0x0, 0x0, 0x80}, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x2, 0x4, &(0x7f0000000180)=ANY=[], &(0x7f0000000140)='syzkaller\x00', 0xb, 0x0, 0x0, 0x41100, 0x2d, '\x00', 0x0, @fallback=0x6, r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x80000001, @void, @value}, 0x94) 1.223511633s ago: executing program 1 (id=4249): r0 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x18, &(0x7f0000000000)=0x8, 0x4) (async) setsockopt$inet_int(r1, 0x0, 0x7, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000007c0)={0x18, 0xf, &(0x7f0000000340)=@ringbuf={{0x18, 0x3, 0x0, 0x0, 0xffffffff}, {{0x18, 0x1, 0x1, 0x0, r0}, {}, {0x5, 0x0, 0xb, 0x2}, {}, {0x4}}}, &(0x7f0000000200)='syzkaller\x00', 0x6, 0x1003, &(0x7f0000001e40)=""/4099, 0x40f00, 0x9, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff, @void, @value}, 0x94) 1.185311145s ago: executing program 0 (id=4250): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0xfc0, 0x0, 0x0) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x5, 0x0}, 0x6}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)}, 0x80000000}], 0x4, 0x20, 0x0) 1.107275037s ago: executing program 4 (id=4251): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000080), r0) sendmsg$NFC_CMD_GET_SE(0xffffffffffffffff, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, r2, 0x800, 0x70bd27, 0x25dfdbfb, {}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x4014}, 0x20004000) r3 = syz_genetlink_get_family_id$net_dm(&(0x7f00000001c0), r0) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x28313421}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x14, r3, 0x83c7c3e571cd13cb, 0x70bd27, 0x25dfdbfd, {}, ["", "", "", "", "", ""]}, 0x14}}, 0x2000000) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000340)={'wpan4\x00', 0x0}) sendmsg$NL802154_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x1c, r4, 0x4, 0x70bd27, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000000}, 0x48804) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_MGMT_C_PROTOCOLS(r6, &(0x7f0000000500)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000004c0)={&(0x7f0000000480)={0x40, r1, 0x100, 0x70bd2a, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV6ADDR={0x14, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_CV4DOI={0x8, 0x4, 0xffffffffffffffff}, @NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x3}]}, 0x40}, 0x1, 0x0, 0x0, 0x880}, 0x405) r7 = syz_genetlink_get_family_id$devlink(&(0x7f0000000580), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(0xffffffffffffffff, &(0x7f0000000880)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000840)={&(0x7f00000005c0)={0x244, r7, 0x4, 0x70bd26, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x7}, {0x6, 0x11, 0xc9b9}, {0x8, 0x15, 0x10001}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xd5aa}, {0x6, 0x11, 0x96cf}, {0x8, 0x15, 0x5}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x1}, {0x6, 0x11, 0x59}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x4}, {0x8}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xfffffff8}, {0x6, 0x11, 0xffc0}, {0x8, 0x15, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0xffff}, {0x6, 0x11, 0x9d8}, {0x8}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0xcd}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0xcb4}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x8fb1}, {0x8, 0x15, 0x6}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x1}}, {0x8, 0xb, 0x8}, {0x6}, {0x8, 0x15, 0x1}}]}, 0x244}, 0x1, 0x0, 0x0, 0x8840}, 0x20000000) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000008c0), 0x0, 0x0) ioctl$F2FS_IOC_MOVE_RANGE(r8, 0xc020f509, &(0x7f0000000900)={r8, 0x4, 0x104c72ae, 0x8d}) pipe(&(0x7f0000000940)={0xffffffffffffffff}) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000980)={r9, r10, 0x4, r8}, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f00000009c0), r0) sendmsg$NL80211_CMD_GET_PROTOCOL_FEATURES(r9, &(0x7f0000000a80)={&(0x7f0000000a00)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000a40)={0xfffffffffffffffc}, 0x1, 0x0, 0x0, 0x4090}, 0x10) r11 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000b00), r6) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r0, &(0x7f0000000bc0)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000b80)={&(0x7f0000000b40)={0x1c, r11, 0x200, 0x70bd2c, 0x25dfdbfb, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x200508c1}, 0x804) sendmsg$NFT_MSG_GETRULE(r10, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0xa687a1625c0e00b7}, 0xc, &(0x7f0000000c80)={&(0x7f0000000c40)={0x2c, 0x7, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$NLBL_UNLABEL_C_LIST(r6, &(0x7f0000000dc0)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000d80)={&(0x7f0000000d40)={0x14, r11, 0x100, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x10040094}, 0x4) socket$rds(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r12 = accept4$inet6(r9, 0x0, &(0x7f0000000e00), 0x0) readv(r12, &(0x7f0000000ec0)=[{&(0x7f0000000e40)=""/120, 0x78}], 0x1) socket$inet(0x2, 0x5, 0x4) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000001040)={&(0x7f0000000f00), 0xc, &(0x7f0000001000)={&(0x7f0000000f40)={0xa4, 0x2, 0x6, 0x101, 0x0, 0x0, {0x5, 0x0, 0x5}, [@IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e21}, @IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x1a}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xa}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x8}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x1, 0x0, 0x7}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e20}, @IPSET_ATTR_MAXELEM={0x8, 0x13, 0x1, 0x0, 0x2}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @local}}]}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0xa4}, 0x1, 0x0, 0x0, 0x40000}, 0x4) pipe(&(0x7f0000001080)) 1.106701685s ago: executing program 2 (id=4252): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000000)={0x16, 0x18, &(0x7f00000000c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018030000", @ANYRES32, @ANYBLOB="0000000000000d00b70500000800000085000000730000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r1, 0x0, 0x10, 0x38, &(0x7f00000006c0)='\x00\x00\x00\x00\x00\x00\x00\x00', &(0x7f0000000700)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x4c) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000e40)={0x2c, 0x2a, 0xb, 0x0, 0x0, {0x9}, [@typed={0x4, 0x3}, @nested={0xc, 0x1, 0x0, 0x1, [@typed={0x6, 0x0, 0x0, 0x0, @str='\x88H'}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r0}]}, 0x2c}}, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x50, r2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r3, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) 966.546958ms ago: executing program 1 (id=4253): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) (async) ioctl$TUNSETSNDBUF(r0, 0x400454d4, &(0x7f0000000040)=0x1) ioctl$VFAT_IOCTL_READDIR_SHORT(r0, 0x82307202, &(0x7f0000000240)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) 881.823864ms ago: executing program 0 (id=4254): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r0) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000540)={'wlan0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000080)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000340)={0x2c, r6, 0x1, 0x0, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_CQM={0x10, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_TXE_RATE={0x8, 0x5, 0x1}]}]}, 0x2c}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000400)=ANY=[@ANYBLOB='`\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010800000000000000000b00000008000300", @ANYRES32=r3, @ANYBLOB="0a000600080211000000000038005080080003000cac0f0011000100cabee339084eeef109002471f40000000800070000000000050002"], 0x60}}, 0x24004094) 764.1248ms ago: executing program 2 (id=4255): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000000)={@loopback, @private, 0x0}, &(0x7f0000000080)=0xc) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f00000001c0)={'tunl0\x00', &(0x7f00000000c0)={'ip_vti0\x00', r2, 0x700, 0x8000, 0x4110, 0x2a09, {{0x33, 0x4, 0x2, 0x1a, 0xcc, 0x64, 0x0, 0x7f, 0x29, 0x0, @rand_addr=0x64010100, @dev={0xac, 0x14, 0x14, 0x18}, {[@cipso={0x86, 0x38, 0xffffffffffffffff, [{0x2, 0xf, "45c5ca3cf4c13c7ebcffc486f5"}, {0x2, 0xc, "62b2ea33874b94e5465e"}, {0x7, 0xf, "b8d0c6c7e4b1bb91dc4bbee7dd"}, {0x6, 0x8, "56172ce2ea33"}]}, @timestamp={0x44, 0x10, 0xc7, 0x0, 0x3, [0x10, 0x4, 0x4]}, @lsrr={0x83, 0x1b, 0x66, [@dev={0xac, 0x14, 0x14, 0x3d}, @local, @broadcast, @dev={0xac, 0x14, 0x14, 0x2e}, @multicast2, @dev={0xac, 0x14, 0x14, 0x33}]}, @timestamp_addr={0x44, 0x54, 0x21, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8}, {@remote, 0x1}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x8000}, {@private=0xa010101, 0x1}, {@broadcast, 0x300000}, {@remote, 0x8}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x9}, {@empty, 0x1}, {@dev={0xac, 0x14, 0x14, 0x36}, 0x7}]}]}}}}}) sendmsg$nl_route(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000001800090000000000000000000200000cfffe00010000000008000500ac1414ff"], 0x24}}, 0x0) 607.736369ms ago: executing program 0 (id=4256): pipe(&(0x7f0000000100)) (async) pipe(&(0x7f0000000100)={0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="0100000007000000060000000900000000000000", @ANYRES32, @ANYBLOB="000100"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000000600"/28], 0x50) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=ANY=[@ANYBLOB="0c00000004000000040000000900000000000000", @ANYRES32=r1, @ANYBLOB='\r\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000e10300000000100000080000227516f28c951314746dede6e11cdb41165414a3e0365f9238fa04cdb003c1e7df486c43ffae52bbbe51323bcb0d38a3de8990d9285025a7e6daa7e035c75f5a6ed11a91a6f4628a13a6c51a2a879142a755e1aaf80a002cc2c6c4225ca692369aaa4601b86d758152eb32486463d874d9cf24d0f58db59c722c3e5df5a9ee48a70aa457809062eaedde921798304059558cc6bc3c7347eaf0ee47bb1198c31036292501c1e64e5f64f0dffce5cb7f41720946b7c8be4795e2"], 0x50) bpf$BPF_MAP_LOOKUP_AND_DELETE_BATCH(0x19, &(0x7f00000000c0)={0x0, 0x0, 0x0, 0x0, 0xff, r2, 0x4}, 0x38) openat$cgroup_ro(r0, &(0x7f0000000180)='blkio.bfq.io_merged\x00', 0x0, 0x0) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000540)={0x3a0, r3, 0x4, 0x70bd29, 0x25dfdbfc, {}, [@TIPC_NLA_MEDIA={0x100, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x16}]}, @TIPC_NLA_MEDIA_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xf}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb268}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1ff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1d}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000001}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x26aa}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1a}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8b19}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x80000000}]}, @TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}]}]}, @TIPC_NLA_BEARER={0xb0, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0x44, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7fffffff}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xb8}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xa}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xe1a0}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}]}, @TIPC_NLA_BEARER_UDP_OPTS={0x2c, 0x4, {{0x14, 0x1, @in={0x2, 0x4e24, @broadcast}}, {0x14, 0x2, @in={0x2, 0x4e23, @private=0xa010102}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x6}]}, @TIPC_NLA_MON={0x2c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2f98}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x401}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xe}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x80}]}, @TIPC_NLA_MEDIA={0x6c, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0xfffffffc}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x400}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x3}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x80000000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd3dc}, @TIPC_NLA_PUBL_TYPE={0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x4}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_LOWER={0x8}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_PROP={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x20}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}]}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}]}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x7fff}]}, @TIPC_NLA_SOCK={0xa8, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_CON={0x4c, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0xffff}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x8}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x4}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0xfffffc01}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x2272}, @TIPC_NLA_CON_FLAG={0x8, 0x1, 0x6}, @TIPC_NLA_CON_NODE={0x8}]}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5419360}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_CON={0x24, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_FLAG={0x8, 0x1, 0x1decffb0}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x101}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x3277fac5}, @TIPC_NLA_CON_NODE={0x8, 0x2, 0x1000}]}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x800}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x5}, @TIPC_NLA_SOCK_CON={0xc, 0x3, 0x0, 0x1, [@TIPC_NLA_CON_NODE={0x8, 0x2, 0x7}]}]}]}, 0x3a0}, 0x1, 0x0, 0x0, 0x45}, 0x80800) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r4) (async) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000000c0), r4) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x2c, r5, 0x4a3e4f761dcd662d, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x2c}}, 0x4008000) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000500)=@deltaction={0x34, 0x18, 0x1, 0x0, 0x0, {0xa}, [@TCA_ACT_TAB={0x20, 0x1, [{0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}]}, 0x34}}, 0x20000000) 585.804761ms ago: executing program 1 (id=4257): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bind$netlink(r0, &(0x7f0000000200)={0x10, 0x0, 0x0, 0x80065c9}, 0xc) r1 = socket$inet6_dccp(0xa, 0x6, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x368, 0x118, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x298, 0xffffffff, 0xffffffff, 0x298, 0xffffffff, 0x3, 0x0, {[{{@uncond, 0x0, 0xd0, 0x118, 0x60030000, {0x0, 0xff000000}, [@common=@hl={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x100, 0x4, 0x7fffffff, '\x00', {0x4}}}}, {{@uncond, 0x0, 0x118, 0x180, 0x0, {}, [@common=@dst={{0x48}, {0x0, 0x6, 0x0, [0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x3]}}, @inet=@rpfilter={{0x28}, {0xa}}]}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0xfffd, 0x0, 0x0, 'netbios-ns\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3c8) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x54, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x28, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}]}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xe8}}, 0x0) 507.740577ms ago: executing program 4 (id=4258): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) getsockopt$MRT(r0, 0x0, 0x0, &(0x7f0000000040), &(0x7f0000000080)=0x4) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000240), 0xffffffffffffffff) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r5, 0x8933, &(0x7f0000000400)={'wpan0\x00', 0x0}) r7 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r8 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r8, 0x0, 0x2}, 0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x14, 0x37, 0x301, 0x270bd24, 0x25dfdbf9, {0x5}}, 0x14}}, 0x0) ioctl$sock_bt_hci(r7, 0x800448d3, &(0x7f00000000c0)) sendmsg$NL802154_CMD_DEL_SEC_KEY(r3, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000001c0)={&(0x7f00000005c0)={0xb8, r4, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_SEC_KEY={0x7c, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x18, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}]}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x3}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "1c36ab5f2a6300c2e64a4f65155fe7e32535261293074fadeab7cef6b3052911"}, @NL802154_KEY_ATTR_ID={0x10, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x8000}]}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "a81bf69996f32193c46ca122eec8f0886a679b96ece4876688247f3c8fe65186"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}]}, 0xb8}, 0x1, 0x0, 0x0, 0x1000}, 0x20000000) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x40, r4, 0x1, 0x70bd2b, 0x25dfdbfd, {}, [@NL802154_ATTR_SEC_LEVEL={0x24, 0x2d, 0x0, 0x1, [@NL802154_SECLEVEL_ATTR_FRAME={0x8, 0x2, 0x3}, @NL802154_SECLEVEL_ATTR_DEV_OVERRIDE={0x5, 0x4, 0x1}, @NL802154_SECLEVEL_ATTR_LEVELS={0x5, 0x1, 0x8}, @NL802154_SECLEVEL_ATTR_CMD_FRAME={0x8, 0x3, 0xfffffffc}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x84) sendmsg$NL80211_CMD_REGISTER_BEACONS(r0, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)={0x1c, r1, 0x7, 0x0, 0x0, {{0x8}, {@void, @val={0x8, 0x3, r2}, @void}}}, 0x1c}}, 0x0) 474.959119ms ago: executing program 2 (id=4259): r0 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$SOCK_DIAG_BY_FAMILY(r1, &(0x7f0000000500)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="2400000014000306000000000000edff10000d000100bc0a5a"], 0x24}}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0xf, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r2}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r4, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) close(r4) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, 0x0, 0x4000) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, 0x0, &(0x7f0000000180)) r6 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r6, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x482, &(0x7f0000000000)={0x6, @empty, 0x4e22, 0x0, 'sed\x00', 0x0, 0x5, 0x11}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r7, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00', 0x3a, 0x0, 0x7f}, 0x2c) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x10) r8 = socket$inet6(0xa, 0x40000080806, 0x0) bind$inet6(r8, &(0x7f000047b000)={0xa, 0x4e20, 0x0, @loopback}, 0x1c) listen(r8, 0x20000005) 310.962664ms ago: executing program 0 (id=4260): socket$nl_xfrm(0x10, 0x3, 0x6) r0 = syz_init_net_socket$ax25(0x3, 0x5, 0xcf) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) socket$nl_route(0x10, 0x3, 0x0) sendmsg$inet(r2, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r1, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg(r7, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001dc0)=""/4096, 0x1000}, 0x0) close(r7) syz_init_net_socket$x25(0xb, 0x5, 0x0) setsockopt$CAN_RAW_ERR_FILTER(0xffffffffffffffff, 0x65, 0x2, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB, @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa2000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000280)={&(0x7f0000000200)='tlb_flush\x00', r9}, 0x10) ioctl$SIOCAX25GETINFO(r0, 0x89ed, &(0x7f0000000000)) getsockopt$rose(0xffffffffffffffff, 0x104, 0x0, 0x0, 0x0) r10 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="180000002c000100000000000000000004000080040010"], 0x18}], 0x1}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'lo\x00'}) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f00000000c0)={r10}) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) 308.005768ms ago: executing program 2 (id=4261): mmap(&(0x7f0000200000/0x4000)=nil, 0x4000, 0x4, 0x200000006c832, 0xffffffffffffffff, 0x0) r0 = socket$caif_seqpacket(0x25, 0x5, 0x0) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="1400000016000b63d25a80648c2594f90124fc60", 0x14}], 0x1}, 0x0) recvmsg$kcm(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000c00)=[{&(0x7f0000000c40)=""/4066, 0xfe2}, {&(0x7f0000000200)=""/132, 0x97}, {&(0x7f0000000100)=""/63, 0x40}], 0x3}, 0x0) sendmmsg$inet(r0, &(0x7f0000000400)=[{{&(0x7f00000001c0)={0x2, 0x4e25, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}}], 0x1, 0x20000810) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(0xffffffffffffffff, &(0x7f0000000040)={0x2, 0x4e20, @multicast2}, 0x10) r3 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r3, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000ff0f000007"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x2, 0xc, &(0x7f0000000380)=ANY=[@ANYRESDEC=r4, @ANYRESHEX=r3, @ANYRES64=r3], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0xe, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r6 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r6, &(0x7f0000000440), 0x10) listen(r6, 0x0) r7 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r7, &(0x7f0000000000), 0x10) setsockopt$sock_linger(r7, 0x1, 0xd, &(0x7f0000000140)={0x5, 0x9}, 0x8) close(r7) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r5, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x3000) sendmsg$rds(r2, &(0x7f0000001600)={&(0x7f0000000000)={0x2, 0x0, @remote}, 0x10, 0x0, 0x0, &(0x7f0000000780)=[@rdma_args={0x48, 0x114, 0x1, {{}, {0x0}, &(0x7f00000006c0)=[{&(0x7f00000003c0)=""/39, 0x27}], 0x1}}], 0x48}, 0x20008801) r8 = socket$inet6_sctp(0xa, 0x5, 0x84) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x1c, &(0x7f0000000000)=[@in6={0xa, 0x1, 0x2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r9, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000340)=0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000300)={r10, 0x2}, 0x8) sendto$inet6(r8, &(0x7f0000001c40)="5ef298bd20c5b603c8419f7fd73d1eff229d48bc2c5052c94084053678c7f6b3237ec9294813031ce4f8b533e0f323bf1c6a9458a0a2ef5b55fa04c953f96c45226d277337be3081f7a99efdb747ffe436d39556937c59e660dd5ba5843140fd955b1b3dfcc416c04aa50ec79ca7190192ec7d34f343922885221830017946fbc5186d6e2fa5367382bbc979e0f369772f4fedc24848bc61e5bd07154ece7f6c163acb936ceaa14c0678162b4abcad9c10dd1ad26a7e7f9712efcccc95b2609e3d9781a1e309725a23748cf90c488ffb1a843978c87c362c0b6465c7ce858caf6b4f30c09bfd780df0bdde27fc7f3acb00739cb8f51ce6a5c7dc9ecfa7b957418641cae0589b4047053c88895b9bc4c4e97a2ad7a7f87de78117f086687023e6dea3ee963bb2b1cb885b7a4f41f3013904b3c656c63e326f37b7819749826b37952344801c162a193918b2278379aa95eb6d65c65d11941b91c28044354395c1e42c81169bbb29089345d129226705d1d5cd435b2d9aaec78c17b504d4f28369cc16df248342bd68c87d3f65a2758d8c2d12ca69e560ec1073c301048838b5168ebac194557496212c8b6b6afada25b8b506e57bbb8fe4650b7c63507ccc71e88e96ee6dbedcdd4becddc20da580002ab2fdd5c7aac7d8afc4052f54f1347788ab5d5743f5917eff0a091fd733ec9e994287e6543914207d15c36c954f4de5186a3add7f36f51964d32b46331886a980444d492b3198f9b01d1bb1700856d8c0017d1e3e9c32ac9b6f95d14d63cb713ad48b16424c7287ec06b4062ae24a8e930243025133d28425dbd5cfb208f251e7001d77485ed1e4e3e037c019f4589b0888832a868b13145d5d304257815342b75f2ce8ad67ed85698c987b4af1181b294f9ef68b6f30b793c0424a95f7f8b2a0d4606f7fc6729e1363cc47925f0fbab0f95585012816e1e3b912c0b84b871dece923105411af5bf6fe8731f09b3bd7ba13d043e140d24f2e0b1a44fff895ce03d50bcae2b15104626e050ec386ec7cc5421f6c056de03a5b6b8e7e0f475aaca6d89820a08bb1f264bd111f6da5b358b4d40d1a533eda6026f62befb652fce9f6f5850c48feb58d2b549ff8dbe57824e617c6ef2c34a3f31d25aa15bdb89751f3453af6e7bbd25fb7ffd55c9fd3ef7add89054bb240c47f77aae4dc03aa1c168e069efbf76d1a774c0179a5766b5f33d728cbfdd0e39f18e92069c01cb4b91d8483b35bd27e09fa95744db7aac8a53a215a4dc3246018b90ec406e8bc3ef2521fdc16f5bccaa1a0ef4b42d99417633047c319e18c96f18bd72b15f4cb0c0aa4a51e5e1be312bd3173a63a56f5fbe04902186a3aac103ab8ee3bd0b15357a00cac87562c717cef99db45c01e18f27cff9a1ab52f4e246fb9cde0ad6bb0381478a9d80d89526559f1ae1e6c920748fd713a61992d761422d21ff0297b1a47cb6b0dbab989d6e223406ca3597c6b83c3e5778de3f3cb24db01790916ad9d5ce6a3d7e4ed8e99f40d53b72355ff06f22f20fd509d7deb783ad26ac11eac908c7189bc65705985c76042943b167a2b508f3580c9e41e32ed877e4a7748adbdfc15df782571f62f68dd503605d1d9c9728d791e02a2f1f7052aa46a2a469a1a7539df0fac71901096e705c0c2cb31ca07cc865463de67298f4ec77cc51af4e186694a30653b613f5d7ad56c0eec2fe823a7122c2949e4a7f7271a8ea3e891d8493d98a82f0118a19a96a44487b71ba26c72ca5c4b7ee29ca134825a1e90561611a41cd4fb8a35f5c1c2821d9a2740cac0f3c471fe5d0eb168473daac0de25dd8f66ea5a5d72ee3f256f18d1a6211917551f857fdefe9bc9a831514c86e759750151c6bb8258c5a41c293e6f7f17da348ad8ace5f651f3fb7a2e68be45a16546619ed6f896703d099d6b9e8f7be08b5243e4265dca80c39860288739c02acccc283a862a06d52c1de77ab3d2ea6f23933621fbf73e149e2bd25bfa76e01a8f9260c480bf59f889acca64e1a43f87e66d09f0176914f823d1d5165eafa59ecfdbe71d5b8cf35fd6d543069ac8f66a916041b94172fb630b45df7664f5d6cf08e4a1412b96df851b62b1f1bc8fdb5b935a7d835ff2f6f22678ba53a4694b6f745995be92a673413bac3d4223cd9cf7256e7941ece0eedc16cbe74d9aae328ef24cd46499e2d01a41216e99bae3e517d320bed86802c5971efe7ade5e54a2587471b862cc0dd60a6f17b8420d970ca4004bf101ece170b1a6ea13d6f61e1deac81348028284f280a359546bdd862bd7a9ad44d2d93891c3e6522b708a8fb8f7fad31daef2e0165356a6bba1942a933c964f8f0eb1130ef9a050f8e9f3bce9970d807ad9f8e0e5ccad923826131ecbdf2081c180c1d05dd7e302e79ccea2c2eb1772de93ac7cda6d7eeb3217ab99c51fca206b1d9e24711191c35dc1501210a4278d75213266e3f292742330ac69c6af997a711b602e38d17d218d555ce7d5757509945d930b638703bc5fc01467357d3a7c261b12f585da6acafb05bee8e891d9abd7c372511b501c7345bcbaa89a627616f4e791c22cb5c1384889285ecb77f01c5e56809704dd39b8941e23e50cbdfbe0e482bf178cb8a6114c3a9d2b2862bb12ef0dd6e76ba5a768ac96f390455db488060d7480e201310ca092169d6550b538142e2d37aa7f030cc2444131b0d10f4ff2a22ed0dfb11dffd70ced1a12ecb197a156c9346cd49dbd7a375872d4c3cc985826beef31d8c727c1a0e458c030268120987957419be0816d852b4a834e3d5b5704f076fc9d05de13b9506bc492ebf35af247a4fa9d2e783d10943a8234375daf7119707a821d65d01ea68d835641f93ff1dbb926c17e47856ef99b6ebbe27ff9abc7a7048758d8d3be6fb9060459229a81a806545bb0add096cdb45379f11a6519356eb52796fce9aab19078a2461858207d71474718732a051803b95fd16da0bd49778a2a56f40c39886f558117919f76283259c765e4536f0839234dd03453dcedc4c381708fb54644261f38a989ed9ff0459b2323a0a55b75fbb4397174107d31f2cfc87e7deb2098e38a2543c7b1beb004db4ec9d542e5a3fabf1238a2988d3739e612beb1937055755d9cd6149bdaaab16fd5311c929e27103069de6b54f9d00a1b28ed0cf1f815e4427d225a0a4ae507ca5343c080a7e3e3a75ae17b010c06569d9aee276231cd7dd290b4b136a752fe3c2814558ce33c726da4d7037a00c238900ac365e35411bc86862ec112a528a11482728af07f5835d9d025c53f39a61917e51e0d6f21a9de597b07673c977f1960479cb92c96137840111db734b84eb643c568a5c886eced792f6865cb34c9acfe8de7b5b420a0bdec8ffd3dacb26cae0cc39161e91258f0cafcf9a8f8c62d0914e0f5b64b6fefde88964f9e707e621cfa5d5b6b29ceba4172a456cfcb911436d00880129c0e05a5a18506274970d63cbd82601610df11cc5c7a2528b06e75a2de8e7b6a4887019bd31125dc220f5b8db2a1e1d2aea93b8c60e6a1f29a81307a891f35af51332ac6b651cc14fd381ac4b9e7531bcd6ec2f6d058f283d1ca40722a3b58685ebaa3a2409e280dd8f59684d70450d5f6713cfca29425f79cf35804d4718b31eb0f9f950bc4e185c6031c243e1a61864341ea1dc7c5c37fb787dea0b7465e5c1e045b2b1390d8b6d85508fa9c7ead6cd7d22396ce820b5ca90f727477c10cee14c2215ba95cae611092dbcd345665ba7424daa6c246b298bf55b8c109bc7162f7b7c7ac69bc175fc22e35e231abdcdf60fdff6881cfafa7beeef0aa6412d0867141d174a04312f68d14089f6026fd8c4c257d5a26b816a59d72a22f042366b3861819341a2daf78049e3339244f1d30b18cad21d37d9b127c1255f6b0d541872e24a4f0c5d15ab16fcc73ff43079d20cfe917b4ebf9187ed3ae3cf61383bd96007168810908fb8a1009032685e8edebd9b430013e16b3c3e883a706590821e3741d816c65810079f16dfe742cc17e7c2a00f4e2122d1fecd0ab0be77882dbe12e27259277a940c48cbddd7c3ba56ec08deb812ebbc8420f5e2b534523b0d439501445913aa685865d6b48037e3b26f043267fa8e1d71dc0073933f04fa7e15639cd59b377e70bf1d1656ed0a728cae183a1952027702353f74248962ace640875737540799f87e3600ca4336fcdb8990c5d2f4ba308a8de2a57c1062c48dcb2adece36aea24f6c3570a20aff3958450c5de09e33113d6a73f31a748191905689fa16b36b7231b0b91de2f50540c416a55e96516951ba1254384024308c31a392fd58fb839f22062efa9ebfa787399cd75113dc5fb2e30abf986abe2b400533573db4f031264f3d5d3431059a73adbcf8cafaae15207739afa21e888936271cfb054c6aa33df421d24eb70c4cecc9da84ff01df5eb6a2c128fcd3007b7930ecd7b318ec2cce4d51a05f5af2a4a7386caaa8c10e725609e227ab66f1c740a6d12ffe2bb8b6dc35de3c4245e720ab02d259724ea20783a67c379af0626160684e8e5dfcca9b10027fca9ff3de414d83a3cdb990a44c285fb30f2d2801cf47bbbcc5b2eb8d9a7516ab9700624f55c920250d68793a5b09cbcb51810cb2a6c65f77c088d8a73a0497298d67414d9f3f5f966659f09ec0566cad9fa818893632492b2ac275d0659a8122e394b2363690550675fac2fb5715098bed491d9ef1ddf271fe68f4657f3aba734492dbfcf31d23004c120fc2380ad766fe8283ac02fe8c209f430a070b3acb9e3676e212b90308341b9c708b2a34c5d15cb61e183488b629e19b77127fee6f43d1b93f4b5f0a47fe781ac32ccd980a8be9eacfb08336b56fae72cf8766825da8f8f782b9cdef3879712f3c5cdb98caf2d8ecf0bd6f4e6925c4cbcb662c9b9fff380562c42cb85c711d4660d8871f3108527fc456094e8128a50202a45ea480b599c3bd5ff581b6cfff2dbd79ab0c41271f2a3f6749d3ee83c1e2f3a0a8dbb8e8e1b87e0725336467a1d9eadb2e3c39d69db1e0a3fa758fe6fdadbdf838c8d4a2be59fb4f8601bbd9f10dc72010f02863d86fa5150ab46b8fd5342161ada6713efc8f541cd85a230edfef073776bc953e666f176d8e9373ad0a52d57b4469bb9074d17798fcd715317f25a46368b54d2fc6769b229eeab6ab216488041a5c4ae4dbfb75b5af7e259d7b0567d6d552e91eec3c775a9b543d9f2c3d1af4431cc557b02ae06a2430e3be2aa920e4b7ddcc0d5b17700bffe4fc237ebd99ef8adfbaad419fe94d9a2918ee24c6ab1a1ccf5cc8fc0b05ee3d6da5242426229da6c470e157ad6278fd41bb2bd17610850a5886a85100c574a09c52d6be2ad66445e0ea7d69550160125cb638061084fb345f47e073e21adf679d71f2b5aea475eb20bbf466918021f17e294da08e41fa20887be3dfd66bba9731ce719cdc9b5195279bcf744aaf0aee3ae968e84e6e8c6b6961c2c009420ae327c1f387a896313c0dd62295b7bcb69cee29da070af1a5d1b1175b488d6abdcb36024003e5060a0de9e830b478bcc1b2f3e12ca5e46fef1923d8383de99a679391e013f67f6ae7018fc63db1c8297a67be6489b13bff430f2a73c3da43d6f368b05182f124b02c1f836c02743d2a290ef81907bfef38c42450a117635fa82dc650430a79abd91af88c132e822b4664e8855c1d4ef742f025a1405acc275df5afb2a159ae910d771758017fafe3ba9363d905d405fa77b1fd10e3c36a6a1270ae7b727b03c186b196d44e8ff5e6a6379", 0x1000, 0x8000, &(0x7f0000000180)={0xa, 0x4e21, 0x500, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}, 0x1c) 255.613108ms ago: executing program 1 (id=4262): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000fa0300"/28], 0x48) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180200000000000000000000000000008500000020000000850000002a00000095"], &(0x7f0000000080)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$netlink(0x10, 0x3, 0x0) writev(r3, &(0x7f0000000000)=[{&(0x7f0000000040)="39000000130003474cbb65e1c3e4ffff06000d00010000000700000025000000040016000c0014000000001f000006060400180000008cdb25", 0x39}], 0x1) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r2, 0x0, 0xe, 0x0, &(0x7f0000000400)="e0b9547ed387dbe9abc89b6f5b7e", 0x0, 0x10001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='ext4_allocate_blocks\x00', r1, 0x0, 0x63be}, 0x18) bpf$PROG_LOAD(0x5, &(0x7f0000001180)={0x4, 0x10, &(0x7f00000008c0)=ANY=[@ANYBLOB="18050000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b704000000000000850000001c00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 0s ago: executing program 0 (id=4263): unshare(0x62040200) r0 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r0, 0x5452, &(0x7f0000000100)=0xb) (async) setsockopt$inet_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000380)=0x1, 0x4) close(r0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000005c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000007c0)=@report={0x104, 0x20, 0x200, 0x70bd2d, 0x25dfdbff, {0x32, {@in=@dev={0xac, 0x14, 0x14, 0x40}, @in=@local, 0x4e24, 0x0, 0x4e20, 0x0, 0xa, 0x20}}, [@policy={0xac, 0x7, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in=@empty, 0x4e24, 0x7, 0x4e22, 0x0, 0xa, 0xa0, 0x0, 0x6341134fe845bb4d}, {0x5, 0x2, 0x2, 0xaa0e, 0x5, 0x6, 0x9, 0x1}, {0x7, 0xffffffffffffb5d3, 0x401}, 0x1, 0x6e6bb1, 0x2, 0x1, 0x0, 0x1}}, @XFRMA_SET_MARK_MASK={0x8, 0x1e, 0x5}, @migrate={0x4}]}, 0x104}, 0x1, 0x0, 0x0, 0x8000}, 0x0) (async) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x6535f20f43ca3a6d, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000190001030000000000000000fc0100000000000000000000000000003ed30000000000000000000000000000000000000000000002"], 0xb8}}, 0x0) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000140)=ANY=[@ANYBLOB="0001000014"], 0x188}}, 0x0) write(0xffffffffffffffff, &(0x7f0000000300)="038126a49c604ba34d27d9eead4036d85f581274bb8d7eaa98e5be9bf788883b7a7c6416e1f9024f2c1e52129f936bd97a722d3f35b1108e9e64cad83c977b09c7f1b6e102adb9fdbea3928df3799f24639bbce4b107d3b2a3e41fe366b36bc6d2a8ff77af7720fa5fd1d80bde7b5620501692ed", 0x74) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, 0x0, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000240)={'geneve1\x00', 0x0}) (async) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r6) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r6, &(0x7f0000000500)={0x0, 0xfffffffffffffdfc, &(0x7f00000000c0)={&(0x7f0000000640)={0x14, r7, 0xc8036ab6d6cbef07, 0x4000, 0xfffffffe, {}, [@NLBL_UNLABEL_A_IPV4MASK={0x0, 0x5, @loopback}, @NLBL_UNLABEL_A_IPV6ADDR={0x0, 0x2, @mcast2}, @NLBL_UNLABEL_A_IPV6ADDR={0x0, 0x2, @private1}, @NLBL_UNLABEL_A_IPV6MASK={0x0, 0x3, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0xb}}}, @NLBL_UNLABEL_A_IPV6MASK={0x0, 0x3, @private0}, @NLBL_UNLABEL_A_ACPTFLG, @NLBL_UNLABEL_A_IPV6MASK={0x0, 0x3, @mcast2}, @NLBL_UNLABEL_A_IPV4ADDR={0x0, 0x4, @multicast1}]}, 0x14}, 0x1, 0x0, 0x0, 0x2000c014}, 0x4000) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r6) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=@getchain={0x24, 0x66, 0xfcd66a900070b359, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) r8 = socket(0x2b, 0x80801, 0x1) (async) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="2c0000001800010000000000000000000a00000000000000060015000600000008001700ffffffff"], 0x2c}}, 0x0) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r8, 0x29, 0x41, 0x0, 0x78) (async) socket$nl_route(0x10, 0x3, 0x0) kernel console output (not intermixed with test programs): .3393'. [ 452.769356][T17948] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3393'. [ 453.032502][T17955] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 453.084580][T17955] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 453.092350][T17955] gretap1: entered promiscuous mode [ 453.118776][T17955] gretap1: entered allmulticast mode [ 453.160766][T17958] (unnamed net_device) (uninitialized): option lacp_rate: invalid value (64) [ 454.004952][T17968] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3400'. [ 454.023738][T17969] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3401'. [ 454.141341][T17969] vlan2: entered allmulticast mode [ 454.165266][T17969] veth0_to_batadv: entered allmulticast mode [ 454.181052][T17969] veth0_to_batadv: left allmulticast mode [ 454.207566][T17973] nbd: must specify an index to disconnect [ 454.573449][T17984] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3407'. [ 454.734905][T17989] lo speed is unknown, defaulting to 1000 [ 455.101791][T18000] delete_channel: no stack [ 455.641730][T18021] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 456.426006][T18036] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3421'. [ 456.921870][T18057] sctp: [Deprecated]: syz.5.3425 (pid 18057) Use of struct sctp_assoc_value in delayed_ack socket option. [ 456.921870][T18057] Use struct sctp_sack_info instead [ 456.952155][T18056] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3427'. [ 456.963474][T18056] sctp: [Deprecated]: syz.2.3427 (pid 18056) Use of struct sctp_assoc_value in delayed_ack socket option. [ 456.963474][T18056] Use struct sctp_sack_info instead [ 456.981809][T18056] sctp: [Deprecated]: syz.2.3427 (pid 18056) Use of struct sctp_assoc_value in delayed_ack socket option. [ 456.981809][T18056] Use struct sctp_sack_info instead [ 457.078677][T18051] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.094259][T18057] netlink: 'syz.5.3425': attribute type 10 has an invalid length. [ 457.499271][T18069] netlink: 'syz.4.3428': attribute type 10 has an invalid length. [ 457.750254][T18051] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 457.861927][T18069] 8021q: adding VLAN 0 to HW filter on device team0 [ 457.881506][T18069] bond0: (slave team0): Enslaving as an active interface with an up link [ 457.907500][T18070] lo speed is unknown, defaulting to 1000 [ 458.076263][T18051] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.288568][T18051] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 458.436121][T18051] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.481891][T18051] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.630113][T18087] netlink: 'syz.5.3433': attribute type 1 has an invalid length. [ 458.649984][T18051] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.695440][T18087] 8021q: adding VLAN 0 to HW filter on device bond3 [ 458.719418][T18051] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 458.912653][T18093] xt_CT: You must specify a L4 protocol and not use inversions on it [ 459.010132][T18100] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.030010][T18089] bond3: (slave gretap2): making interface the new active one [ 459.037050][T18101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 459.050141][T18104] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3435'. [ 459.055928][T18089] bond3: (slave gretap2): Enslaving as an active interface with an up link [ 459.068282][T18104] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3435'. [ 459.118728][T18091] bridge_slave_0: left allmulticast mode [ 459.144528][T18091] bridge_slave_0: left promiscuous mode [ 459.163675][T18107] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3435'. [ 459.171325][T18091] bridge0: port 1(bridge_slave_0) entered disabled state [ 459.206114][T18091] bridge_slave_1: left allmulticast mode [ 459.222179][T18091] bridge_slave_1: left promiscuous mode [ 459.232501][T18091] bridge0: port 2(bridge_slave_1) entered disabled state [ 459.255127][T18091] bond0: (slave bond_slave_0): Releasing backup interface [ 459.278114][T18091] bond0: (slave bond_slave_1): Releasing backup interface [ 459.315140][T18091] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 459.335196][T18091] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 459.346457][T18091] bond3: (slave gretap2): Releasing active interface [ 459.360651][T18093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3435'. [ 459.378923][T18089] syz.5.3433 (18089) used greatest stack depth: 16624 bytes left [ 459.581971][T18114] lo speed is unknown, defaulting to 1000 [ 459.783354][T18121] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3440'. [ 459.845447][T18119] lo speed is unknown, defaulting to 1000 [ 459.863415][T18126] netlink: 'syz.2.3438': attribute type 4 has an invalid length. [ 459.933130][T18129] ip6t_srh: unknown srh invflags 4000 [ 460.139366][T18131] lo speed is unknown, defaulting to 1000 [ 460.630046][T18119] lo speed is unknown, defaulting to 1000 [ 460.806736][T18124] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3441'. [ 461.338734][T18160] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3448'. [ 461.426495][T18131] lo speed is unknown, defaulting to 1000 [ 461.483949][T18156] lo speed is unknown, defaulting to 1000 [ 462.301057][T18178] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3452'. [ 462.849604][T18204] ip6gretap0: entered promiscuous mode [ 462.878497][T18204] ip6gretap0: left promiscuous mode [ 463.186401][T18219] netlink: 20 bytes leftover after parsing attributes in process `syz.2.3464'. [ 463.234241][T18219] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3464'. [ 463.603217][T18236] lo speed is unknown, defaulting to 1000 [ 463.706323][T18239] ipt_ECN: cannot use operation on non-tcp rule [ 463.825820][T18244] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 464.399760][T18236] lo speed is unknown, defaulting to 1000 [ 464.535104][T18267] __nla_validate_parse: 1 callbacks suppressed [ 464.535131][T18267] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3476'. [ 464.683463][T18274] netlink: 'syz.1.3477': attribute type 10 has an invalid length. [ 464.723953][T18274] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3477'. [ 464.978109][T18280] ref_tracker: memory allocation failure, unreliable refcount tracker. [ 465.224396][T18288] netlink: 248 bytes leftover after parsing attributes in process `syz.1.3482'. [ 465.460645][T18291] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3483'. [ 465.461655][T18293] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3483'. [ 465.527412][T18291] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3483'. [ 465.534640][T18293] netlink: 32 bytes leftover after parsing attributes in process `syz.5.3483'. [ 465.757292][T18304] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 465.838979][T18300] lo speed is unknown, defaulting to 1000 [ 466.125344][T18317] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3492'. [ 466.135774][T18317] netlink: 'syz.4.3492': attribute type 30 has an invalid length. [ 466.158951][T18314] bond_slave_0: entered promiscuous mode [ 466.164797][T18314] bond_slave_1: entered promiscuous mode [ 466.204808][T18314] vlan2: entered promiscuous mode [ 466.214792][T18317] netlink: 'syz.4.3492': attribute type 13 has an invalid length. [ 466.232073][T18314] bond0: entered promiscuous mode [ 466.295499][T18314] bond0: left promiscuous mode [ 466.302158][T18314] bond_slave_0: left promiscuous mode [ 466.307828][T18314] bond_slave_1: left promiscuous mode [ 466.476082][T18323] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3493'. [ 466.536945][T18323] vlan2: entered promiscuous mode [ 466.545707][T18325] openvswitch: netlink: nsh attribute has 3 unknown bytes. [ 466.562621][T18323] team0: entered promiscuous mode [ 466.574399][T18323] vlan2: entered allmulticast mode [ 466.585809][T18323] team0: entered allmulticast mode [ 466.600075][T18325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 466.631028][T18300] lo speed is unknown, defaulting to 1000 [ 466.802122][T18336] netlink: 16215 bytes leftover after parsing attributes in process `syz.4.3498'. [ 466.841893][T18338] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -107 0 [ 467.115750][T18347] netlink: 'syz.1.3502': attribute type 12 has an invalid length. [ 467.177114][T18347] netlink: 'syz.1.3502': attribute type 11 has an invalid length. [ 467.271304][T18342] lo speed is unknown, defaulting to 1000 [ 467.597355][T18357] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20003 [ 467.604870][T18358] IPVS: set_ctl: invalid protocol: 135 10.1.1.2:20003 [ 468.588279][T18393] netlink: 'syz.5.3514': attribute type 10 has an invalid length. [ 468.614212][T18393] netlink: 'syz.5.3514': attribute type 10 has an invalid length. [ 468.990260][T18406] veth1_macvtap: left promiscuous mode [ 468.998133][T18406] macsec0: entered promiscuous mode [ 469.011304][T18406] macsec0: entered allmulticast mode [ 469.279237][T18420] lo speed is unknown, defaulting to 1000 [ 469.685652][T18436] __nla_validate_parse: 9 callbacks suppressed [ 469.685676][T18436] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3527'. [ 470.010813][T18454] netlink: 52 bytes leftover after parsing attributes in process `syz.5.3532'. [ 470.042851][T18454] netlink: 212408 bytes leftover after parsing attributes in process `syz.5.3532'. [ 470.057657][T18454] netlink: zone id is out of range [ 470.078312][T18454] netlink: zone id is out of range [ 470.083523][T18454] netlink: zone id is out of range [ 470.090285][T18454] netlink: zone id is out of range [ 470.096206][T18454] netlink: zone id is out of range [ 470.125932][T18454] netlink: zone id is out of range [ 470.131115][T18454] netlink: zone id is out of range [ 470.136743][T18454] netlink: zone id is out of range [ 470.277667][T18458] lo speed is unknown, defaulting to 1000 [ 470.613511][T18472] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3540'. [ 470.641756][T18470] netlink: 24 bytes leftover after parsing attributes in process `syz.5.3539'. [ 470.840090][T18481] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3542'. [ 470.878548][T18479] IPVS: Scheduler module ip_vs_sip not found [ 471.177079][T18491] netlink: 1256 bytes leftover after parsing attributes in process `syz.2.3544'. [ 471.320857][T18495] lo speed is unknown, defaulting to 1000 [ 471.377688][T18502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3547'. [ 471.479665][T18502] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3547'. [ 471.699695][T18512] RDS: rds_bind could not find a transport for ::ffff:172.30.1.6, load rds_tcp or rds_rdma? [ 471.741239][T18513] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 471.759407][T18506] bridge3: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 472.098947][T18524] net_ratelimit: 13 callbacks suppressed [ 472.098968][T18524] batadv_slave_0: mtu less than device minimum [ 472.664436][T18548] netlink: 20 bytes leftover after parsing attributes in process `syz.4.3563'. [ 472.705418][T18548] veth1_vlan: left allmulticast mode [ 472.732140][T18550] openvswitch: netlink: Key type 29 is not supported [ 472.758090][T18550] netlink: 'syz.2.3564': attribute type 1 has an invalid length. [ 472.892442][T18555] netlink: 'syz.0.3566': attribute type 2 has an invalid length. [ 472.949665][T18555] Cannot find add_set index 0 as target [ 472.959591][T18557] openvswitch: netlink: Message has 7 unknown bytes. [ 473.113148][T18560] netlink: 'syz.0.3568': attribute type 29 has an invalid length. [ 473.181747][T18560] netlink: 'syz.0.3568': attribute type 29 has an invalid length. [ 473.295303][T18566] IPv6: sit1: Disabled Multicast RS [ 473.318089][T18566] sit1: entered allmulticast mode [ 473.803746][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880275e5800: rx timeout, send abort [ 474.312176][ C1] vcan0: j1939_tp_rxtimer: 0xffff8880275e5800: abort rx timeout. Force session deactivation [ 474.649757][T18609] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 474.933803][T18625] __nla_validate_parse: 8 callbacks suppressed [ 474.933825][T18625] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3584'. [ 475.144436][T18632] lo speed is unknown, defaulting to 1000 [ 475.193681][T18635] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 475.329131][T18638] bridge_slave_0: left allmulticast mode [ 475.336094][T18638] bridge_slave_0: left promiscuous mode [ 475.342191][T18638] bridge0: port 1(bridge_slave_0) entered disabled state [ 475.369291][T18640] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3590'. [ 475.411969][T18638] bridge_slave_1: left allmulticast mode [ 475.419804][T18638] bridge_slave_1: left promiscuous mode [ 475.466764][T18638] bridge0: port 2(bridge_slave_1) entered disabled state [ 475.544160][T18638] bond0: (slave bond_slave_0): Releasing backup interface [ 475.626214][T18638] bond0: (slave bond_slave_1): Releasing backup interface [ 475.640745][T18652] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3591'. [ 475.769313][T18638] team0: Port device team_slave_0 removed [ 475.776309][T18655] netlink: 'syz.5.3594': attribute type 1 has an invalid length. [ 475.799225][T18655] netlink: 4 bytes leftover after parsing attributes in process `syz.5.3594'. [ 475.823362][T18638] team0: Port device team_slave_1 removed [ 475.831684][T18638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 475.861616][T18638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 476.350461][T18638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 476.364550][T18638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 476.461499][T18641] vlan2: entered allmulticast mode [ 476.478015][T18641] bond0: entered allmulticast mode [ 476.504882][T18641] bridge0: port 1(vlan2) entered blocking state [ 476.511460][T18641] bridge0: port 1(vlan2) entered disabled state [ 476.526467][T18641] vlan2: entered promiscuous mode [ 476.531592][T18641] bond0: entered promiscuous mode [ 476.546612][T18643] netlink: 'syz.4.3591': attribute type 6 has an invalid length. [ 476.565494][T18643] netlink: 'syz.4.3591': attribute type 7 has an invalid length. [ 476.591832][T18659] netlink: 112 bytes leftover after parsing attributes in process `syz.5.3595'. [ 476.601326][T18643] netlink: 'syz.4.3591': attribute type 8 has an invalid length. [ 476.601353][T18643] netlink: 'syz.4.3591': attribute type 13 has an invalid length. [ 476.668593][T18663] netlink: 36 bytes leftover after parsing attributes in process `syz.1.3596'. [ 476.714472][T18652] team0: left allmulticast mode [ 476.719439][T18652] team0: left promiscuous mode [ 477.219945][T18652] bond0: (slave team0): Releasing backup interface [ 477.247222][T18682] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 477.535718][T18690] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3604'. [ 477.959961][T18710] Bluetooth: MGMT ver 1.23 [ 478.116780][T18715] netlink: 'syz.0.3613': attribute type 39 has an invalid length. [ 478.363616][T18728] netlink: 72 bytes leftover after parsing attributes in process `syz.4.3616'. [ 478.384815][T18727] macsec0: left promiscuous mode [ 478.389887][T18727] macsec0: left allmulticast mode [ 478.632015][T18744] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3621'. [ 478.750450][T18742] delete_channel: no stack [ 478.843904][T18750] netlink: 'syz.1.3622': attribute type 21 has an invalid length. [ 479.114284][ T5148] Bluetooth: hci3: command tx timeout [ 479.194650][ T5148] Bluetooth: hci0: command 0x0405 tx timeout [ 479.200968][ T9882] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 479.610483][T18779] netlink: 'syz.4.3623': attribute type 1 has an invalid length. [ 479.618724][T18779] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3623'. [ 479.732955][T18791] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 479.764640][T18791] syzkaller1: linktype set to 780 [ 479.936390][T18795] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3637'. [ 480.004328][T18795] netlink: 8 bytes leftover after parsing attributes in process `syz.5.3637'. [ 480.029992][T18800] IPVS: ip_vs_add_dest(): server weight less than zero [ 480.058960][T18805] ip6gretap0: entered promiscuous mode [ 480.094737][T18805] ip6gretap0: left promiscuous mode [ 480.530721][T18829] bond2: entered promiscuous mode [ 480.541791][T18829] bond2: entered allmulticast mode [ 480.548616][T18829] 8021q: adding VLAN 0 to HW filter on device bond2 [ 481.274574][ T9882] Bluetooth: hci0: command 0x0405 tx timeout [ 481.349846][T18829] bond2 (unregistering): Released all slaves [ 481.551757][T18842] lo speed is unknown, defaulting to 1000 [ 481.644378][T18840] lo speed is unknown, defaulting to 1000 [ 481.757624][T18850] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3648'. [ 482.181909][T18855] lo speed is unknown, defaulting to 1000 [ 482.574469][T18866] xt_hashlimit: size too large, truncated to 1048576 [ 482.591347][ T5148] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 482.605066][T18867] xt_hashlimit: size too large, truncated to 1048576 [ 482.610025][ T5148] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 482.621049][ T5148] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 482.630048][ T5148] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 482.638149][ T5148] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 482.645922][ T5148] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 482.743818][T18866] syz.0.3654: vmalloc error: size 8392704, failed to allocated page array size 16392, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 482.794248][T18866] CPU: 1 UID: 0 PID: 18866 Comm: syz.0.3654 Not tainted 6.14.0-rc1-syzkaller-00272-gae9b3c0e79bc #0 [ 482.794281][T18866] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 482.794295][T18866] Call Trace: [ 482.794303][T18866] [ 482.794312][T18866] dump_stack_lvl+0x241/0x360 [ 482.794344][T18866] ? __pfx_dump_stack_lvl+0x10/0x10 [ 482.794368][T18866] ? __pfx__printk+0x10/0x10 [ 482.794410][T18866] ? __rcu_read_unlock+0xa1/0x110 [ 482.794442][T18866] warn_alloc+0x278/0x410 [ 482.794477][T18866] ? __pfx_warn_alloc+0x10/0x10 [ 482.794521][T18866] ? htable_create+0x102/0x880 [ 482.794544][T18866] ? __get_vm_area_node+0x1c8/0x2d0 [ 482.794570][T18866] ? __get_vm_area_node+0x25c/0x2d0 [ 482.794604][T18866] __vmalloc_node_range_noprof+0x62f/0x1380 [ 482.794665][T18866] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 482.794705][T18866] ? htable_create+0x102/0x880 [ 482.794727][T18866] vmalloc_noprof+0x79/0x90 [ 482.794755][T18866] ? htable_create+0x102/0x880 [ 482.794776][T18866] htable_create+0x102/0x880 [ 482.794806][T18866] hashlimit_mt_check_common+0x710/0xa40 [ 482.794839][T18866] hashlimit_mt_check_v1+0x2ea/0x540 [ 482.794865][T18866] ? __pfx_hashlimit_mt_check_v1+0x10/0x10 [ 482.794890][T18866] ? trace_contention_end+0x3c/0x120 [ 482.794917][T18866] ? cpus_read_unlock+0xa6/0x140 [ 482.794942][T18866] ? __mutex_unlock_slowpath+0x227/0x800 [ 482.794984][T18866] xt_check_match+0x368/0xa40 [ 482.795021][T18866] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 482.795053][T18866] ? __pfx_xt_check_match+0x10/0x10 [ 482.795103][T18866] ? xt_find_match+0x1d3/0x210 [ 482.795145][T18866] translate_table+0x1671/0x2330 [ 482.795202][T18866] ? __pfx_translate_table+0x10/0x10 [ 482.795228][T18866] ? __might_fault+0xaa/0x120 [ 482.795257][T18866] ? __pfx_lock_release+0x10/0x10 [ 482.795293][T18866] ? __virt_addr_valid+0x183/0x530 [ 482.795330][T18866] ? __might_fault+0xc6/0x120 [ 482.795364][T18866] ? copy_from_sockptr_offset+0x6b/0xb0 [ 482.795393][T18866] do_ip6t_set_ctl+0xe4c/0x1270 [ 482.795425][T18866] ? nf_setsockopt+0x240/0x2c0 [ 482.795445][T18866] ? aa_label_sk_perm+0x4f3/0x6c0 [ 482.795472][T18866] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 482.795506][T18866] ? rcu_is_watching+0x15/0xb0 [ 482.795528][T18866] ? trace_contention_end+0x3c/0x120 [ 482.795560][T18866] ? __mutex_unlock_slowpath+0x227/0x800 [ 482.795602][T18866] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 482.795651][T18866] nf_setsockopt+0x295/0x2c0 [ 482.795682][T18866] rawv6_setsockopt+0x327/0x740 [ 482.795711][T18866] ? __pfx_aa_sk_perm+0x10/0x10 [ 482.795738][T18866] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 482.795768][T18866] ? __pfx_lock_acquire+0x10/0x10 [ 482.795794][T18866] ? aa_sock_opt_perm+0x79/0x120 [ 482.795822][T18866] ? sock_common_setsockopt+0x37/0xc0 [ 482.795852][T18866] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 482.795879][T18866] do_sock_setsockopt+0x3af/0x720 [ 482.795919][T18866] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 482.795957][T18866] ? __fget_files+0x395/0x410 [ 482.795979][T18866] ? __fget_files+0x2a/0x410 [ 482.796012][T18866] __x64_sys_setsockopt+0x1ee/0x280 [ 482.796053][T18866] do_syscall_64+0xf3/0x230 [ 482.796083][T18866] ? clear_bhb_loop+0x35/0x90 [ 482.796118][T18866] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 482.796147][T18866] RIP: 0033:0x7f9ebab8cde9 [ 482.796166][T18866] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 482.796184][T18866] RSP: 002b:00007f9ebb96e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 482.796207][T18866] RAX: ffffffffffffffda RBX: 00007f9ebada5fa0 RCX: 00007f9ebab8cde9 [ 482.796223][T18866] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 000000000000000c [ 482.796235][T18866] RBP: 00007f9ebac0e2a0 R08: 00000000000004c0 R09: 0000000000000000 [ 482.796249][T18866] R10: 00004000000004c0 R11: 0000000000000246 R12: 0000000000000000 [ 482.796262][T18866] R13: 0000000000000000 R14: 00007f9ebada5fa0 R15: 00007fff8e684c18 [ 482.796296][T18866] [ 482.796304][T18866] Mem-Info: [ 483.209984][T18866] active_anon:8610 inactive_anon:0 isolated_anon:0 [ 483.209984][T18866] active_file:1750 inactive_file:38474 isolated_file:0 [ 483.209984][T18866] unevictable:773 dirty:175 writeback:0 [ 483.209984][T18866] slab_reclaimable:11999 slab_unreclaimable:133605 [ 483.209984][T18866] mapped:29706 shmem:4127 pagetables:695 [ 483.209984][T18866] sec_pagetables:0 bounce:0 [ 483.209984][T18866] kernel_misc_reclaimable:0 [ 483.209984][T18866] free:1296575 free_pcp:3343 free_cma:0 [ 483.256045][T18866] Node 0 active_anon:29740kB inactive_anon:0kB active_file:7000kB inactive_file:153820kB unevictable:1556kB isolated(anon):0kB isolated(file):0kB mapped:118824kB dirty:700kB writeback:0kB shmem:10272kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:14304kB pagetables:2780kB sec_pagetables:0kB all_unreclaimable? no [ 483.288908][T18868] lo speed is unknown, defaulting to 1000 [ 483.344632][T18866] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 483.443678][T18866] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 483.488586][T18866] lowmem_reserve[]: 0 2491 2491 0 0 [ 483.494104][T18866] Node 0 DMA32 free:1269624kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:23396kB inactive_anon:0kB active_file:7000kB inactive_file:153244kB unevictable:1536kB writepending:648kB present:3129332kB managed:2551076kB mlocked:0kB bounce:0kB free_pcp:19376kB local_pcp:17420kB free_cma:0kB [ 483.529396][T18866] lowmem_reserve[]: 0 0 0 0 0 [ 483.534580][T18866] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:576kB unevictable:0kB writepending:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:4kB free_cma:0kB [ 483.562389][T18866] lowmem_reserve[]: 0 0 0 0 0 [ 483.567436][T18866] Node 1 Normal free:3905996kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:1000kB local_pcp:0kB free_cma:0kB [ 483.597549][T18866] lowmem_reserve[]: 0 0 0 0 0 [ 483.602557][T18866] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 483.615962][T18866] Node 0 DMA32: 42*4kB (UE) 90*8kB (UME) 242*16kB (UM) 145*32kB (UME) 147*64kB (UME) 79*128kB (UME) 13*256kB (UME) 11*512kB (UME) 24*1024kB (UME) 4*2048kB (UE) 293*4096kB (UM) = 1270776kB [ 483.663984][T18866] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 483.722023][T18866] Node 1 Normal: 3*4kB (UE) 22*8kB (UME) 41*16kB (UME) 176*32kB (UME) 98*64kB (UME) 26*128kB (UME) 15*256kB (UME) 10*512kB (UME) 4*1024kB (UME) 5*2048kB (UE) 944*4096kB (M) = 3905996kB [ 483.825596][T18866] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 483.856967][T18866] Node 0 hugepages_total=6 hugepages_free=0 hugepages_surp=4 hugepages_size=2048kB [ 483.867820][T18866] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 483.875728][T18868] chnl_net:caif_netlink_parms(): no params data found [ 483.878192][T18866] Node 1 hugepages_total=2 hugepages_free=0 hugepages_surp=0 hugepages_size=2048kB [ 483.897035][T18866] 41638 total pagecache pages [ 483.901785][T18866] 0 pages in swap cache [ 483.907302][T18866] Free swap = 124996kB [ 483.913776][T18866] Total swap = 124996kB [ 483.918876][T18866] 2097051 pages RAM [ 483.922722][T18866] 0 pages HighMem/MovableOnly [ 483.929422][T18866] 427496 pages reserved [ 483.933715][T18866] 0 pages cma reserved [ 483.949403][T18887] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3659'. [ 484.096675][T18868] bridge0: port 1(bridge_slave_0) entered blocking state [ 484.105217][T18868] bridge0: port 1(bridge_slave_0) entered disabled state [ 484.132148][T18868] bridge_slave_0: entered allmulticast mode [ 484.146541][T18868] bridge_slave_0: entered promiscuous mode [ 484.175189][T18868] bridge0: port 2(bridge_slave_1) entered blocking state [ 484.190972][T18868] bridge0: port 2(bridge_slave_1) entered disabled state [ 484.208706][T18868] bridge_slave_1: entered allmulticast mode [ 484.225738][T18868] bridge_slave_1: entered promiscuous mode [ 484.398152][T18868] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 484.439694][T18868] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 484.550151][T18868] team0: Port device team_slave_0 added [ 484.590612][T18868] team0: Port device team_slave_1 added [ 484.714406][ T9882] Bluetooth: hci4: command tx timeout [ 484.752807][T18868] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 484.804057][T18868] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 484.804339][T18913] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3667'. [ 484.894840][T18868] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 485.182951][T18868] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 485.202731][T18868] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 485.259094][T18868] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 485.531399][T18868] hsr_slave_0: entered promiscuous mode [ 485.538948][T18868] hsr_slave_1: entered promiscuous mode [ 485.545590][T18868] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 485.553550][T18868] Cannot create hsr debugfs directory [ 485.561125][T18939] netlink: 'syz.4.3673': attribute type 4 has an invalid length. [ 485.625661][T18939] netlink: 'syz.4.3673': attribute type 4 has an invalid length. [ 485.721721][T18944] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 486.104373][T18963] tipc: Failed to remove unknown binding: 66,1,1/1847575557:2471910962/2471910964 [ 486.687757][T18985] netlink: 3 bytes leftover after parsing attributes in process `syz.2.3686'. [ 486.718787][T18985] batadv1: entered promiscuous mode [ 486.725663][T18985] batadv1: entered allmulticast mode [ 486.794883][ T9882] Bluetooth: hci4: command tx timeout [ 486.827401][T18992] tipc: Failed to remove unknown binding: 66,1,1/1847575557:2471910962/2471910964 [ 486.888265][T18992] tipc: Failed to remove unknown binding: 66,1,1/1847575557:2471910962/2471910964 [ 486.927635][T18995] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 487.046464][T18868] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 487.092743][T18868] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 487.140115][T18868] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 487.159308][T19000] netlink: 'syz.1.3688': attribute type 10 has an invalid length. [ 487.185101][T18868] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 487.227708][T19000] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 487.423875][T19007] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3690'. [ 487.487527][T19007] 8021q: adding VLAN 0 to HW filter on device team1 [ 487.707839][T18868] 8021q: adding VLAN 0 to HW filter on device bond0 [ 487.769200][T18868] 8021q: adding VLAN 0 to HW filter on device team0 [ 487.813319][T11229] bridge0: port 1(bridge_slave_0) entered blocking state [ 487.820623][T11229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 487.827731][T19021] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3695'. [ 487.882720][T11229] bridge0: port 2(bridge_slave_1) entered blocking state [ 487.889962][T11229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 488.046131][T19025] netlink: 'syz.0.3696': attribute type 1 has an invalid length. [ 488.080748][T19027] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3697'. [ 488.103770][T19025] netlink: 'syz.0.3696': attribute type 1 has an invalid length. [ 488.375645][T18868] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 488.453724][T19047] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3702'. [ 488.874288][ T9882] Bluetooth: hci4: command tx timeout [ 488.939637][T19062] vlan2: left promiscuous mode [ 488.955513][T19062] bond0: left promiscuous mode [ 488.960956][T19062] bridge0: port 1(vlan2) entered disabled state [ 488.970090][T19068] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3708'. [ 489.147268][T19077] bridge5: entered promiscuous mode [ 489.163705][T19077] bridge5: entered allmulticast mode [ 489.176498][T19079] netlink: 'syz.4.3710': attribute type 8 has an invalid length. [ 489.187970][T18868] veth0_vlan: entered promiscuous mode [ 489.208619][T19077] netlink: 'syz.1.3709': attribute type 10 has an invalid length. [ 489.267007][T19077] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 489.335787][T18868] veth1_vlan: entered promiscuous mode [ 489.361194][T19077] bridge0: port 1(ip6gretap0) entered blocking state [ 489.370374][T19077] bridge0: port 1(ip6gretap0) entered disabled state [ 489.398324][T19077] ip6gretap0: entered allmulticast mode [ 489.410002][T19077] ip6gretap0: entered promiscuous mode [ 489.418959][T19077] bridge0: port 1(ip6gretap0) entered blocking state [ 489.426083][T19077] bridge0: port 1(ip6gretap0) entered forwarding state [ 489.558864][T18868] veth0_macvtap: entered promiscuous mode [ 489.586912][T18868] veth1_macvtap: entered promiscuous mode [ 489.651422][T18868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 489.684792][T18868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.706027][T18868] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 489.729271][T18868] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 489.754703][T18868] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 489.786060][T18868] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 489.837173][T18868] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.867708][T18868] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.904798][T18868] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 489.913957][T18868] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 490.201576][T19114] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3719'. [ 490.356104][T19116] mac80211_hwsim hwsim49 syzkaller0: left allmulticast mode [ 490.403858][ T6319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.428009][T19118] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3721'. [ 490.442628][T19118] netdevsim netdevsim0 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 490.452351][T19118] netdevsim netdevsim0 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 490.461163][T19118] netdevsim netdevsim0 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 490.470348][T19118] netdevsim netdevsim0 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 490.474758][ T6319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.622863][T11695] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 490.634645][T19123] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3721'. [ 490.663588][T11695] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 490.692870][T19126] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3724'. [ 490.955021][ T9882] Bluetooth: hci4: command tx timeout [ 490.968997][T19136] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 490.996754][T19136] syzkaller1: linktype set to 780 [ 491.153242][T19139] lo speed is unknown, defaulting to 1000 [ 491.551012][T11708] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 491.742194][T19156] __nla_validate_parse: 6 callbacks suppressed [ 491.742216][T19156] netlink: 1672 bytes leftover after parsing attributes in process `syz.2.3732'. [ 491.776003][T19157] IPVS: set_ctl: invalid protocol: 1 127.0.0.1:20002 [ 491.804305][T19156] netlink: 1672 bytes leftover after parsing attributes in process `syz.2.3732'. [ 491.874693][T19162] netlink: zone id is out of range [ 491.880123][T19162] netlink: zone id is out of range [ 491.890275][T19162] netlink: zone id is out of range [ 491.900889][T19162] netlink: zone id is out of range [ 491.921431][T19162] netlink: zone id is out of range [ 491.941035][T19162] netlink: zone id is out of range [ 491.954448][T19162] netlink: zone id is out of range [ 491.967124][T19162] netlink: zone id is out of range [ 491.984617][T19162] netlink: zone id is out of range [ 491.994746][T19162] netlink: zone id is out of range [ 492.095079][T11708] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.218887][T11708] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.239614][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 492.253793][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 492.263786][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 492.302833][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 492.323509][ T5845] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 492.334485][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 492.359182][T19168] Bluetooth: hci4: Opcode 0x0c1a failed: -4 [ 492.361176][T19171] netlink: 211456 bytes leftover after parsing attributes in process `syz.1.3735'. [ 492.568660][T11708] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 492.935450][T19182] netlink: 2 bytes leftover after parsing attributes in process `syz.4.3739'. [ 492.976788][T11708] bridge_slave_1: left allmulticast mode [ 492.982693][T19184] netlink: 'syz.1.3737': attribute type 7 has an invalid length. [ 492.994259][T11708] bridge_slave_1: left promiscuous mode [ 493.002759][T11708] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.014811][T19184] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3737'. [ 493.089926][T11708] bridge_slave_0: left allmulticast mode [ 493.106608][T11708] bridge_slave_0: left promiscuous mode [ 493.112424][T11708] bridge0: port 1(bridge_slave_0) entered disabled state [ 493.132201][T19189] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3740'. [ 493.729925][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 493.746208][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 493.755540][ T5845] Bluetooth: hci1: command 0x0401 tx timeout [ 493.764723][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 493.788054][ T9882] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 493.796451][ T9882] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 493.806465][ T9882] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 494.237318][T11708] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 494.265516][T11708] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 494.287696][T11708] bond0 (unregistering): Released all slaves [ 494.356648][T19214] 8021q: adding VLAN 0 to HW filter on device bond4 [ 494.417278][T19214] bond4: entered allmulticast mode [ 494.423325][T19214] bond0: (slave bond4): Enslaving as an active interface with an up link [ 494.760164][T19235] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3751'. [ 494.815652][T19235] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3751'. [ 494.920045][T19210] lo speed is unknown, defaulting to 1000 [ 495.118375][T11708] hsr_slave_0: left promiscuous mode [ 495.157640][T11708] hsr_slave_1: left promiscuous mode [ 495.164529][T11708] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 495.172108][T11708] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 495.179669][T19254] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3758'. [ 495.227562][T11708] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 495.235581][T11708] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 495.307049][T11708] veth1_macvtap: left promiscuous mode [ 495.313613][T11708] veth0_macvtap: left promiscuous mode [ 495.333808][T11708] veth1_vlan: left promiscuous mode [ 495.346804][T11708] veth0_vlan: left promiscuous mode [ 495.835311][ T9882] Bluetooth: hci4: command tx timeout [ 496.423441][T11708] team0 (unregistering): Port device team_slave_1 removed [ 496.496773][T11708] team0 (unregistering): Port device team_slave_0 removed [ 497.267642][T19264] hsr0: entered allmulticast mode [ 497.272745][T19264] hsr_slave_0: entered allmulticast mode [ 497.283410][T19264] hsr_slave_1: entered allmulticast mode [ 497.292611][T19265] hsr_slave_0: left promiscuous mode [ 497.300184][T19265] hsr_slave_1: left promiscuous mode [ 497.322140][T19265] hsr0 (unregistering): left allmulticast mode [ 497.557979][T19277] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3764'. [ 497.646148][T19281] tipc: Enabling of bearer rejected, failed to enable media [ 497.720594][T19210] chnl_net:caif_netlink_parms(): no params data found [ 497.781837][T19287] netlink: 'syz.2.3767': attribute type 11 has an invalid length. [ 497.812475][T19281] lo speed is unknown, defaulting to 1000 [ 497.914500][ T9882] Bluetooth: hci4: command tx timeout [ 498.097295][T19210] bridge0: port 1(bridge_slave_0) entered blocking state [ 498.127491][T19210] bridge0: port 1(bridge_slave_0) entered disabled state [ 498.135209][T19210] bridge_slave_0: entered allmulticast mode [ 498.147431][T19210] bridge_slave_0: entered promiscuous mode [ 498.171209][T19299] netlink: 'syz.0.3768': attribute type 10 has an invalid length. [ 498.172368][T19286] lo speed is unknown, defaulting to 1000 [ 498.207123][T19210] bridge0: port 2(bridge_slave_1) entered blocking state [ 498.217298][T19210] bridge0: port 2(bridge_slave_1) entered disabled state [ 498.225355][T19210] bridge_slave_1: entered allmulticast mode [ 498.233128][T19210] bridge_slave_1: entered promiscuous mode [ 498.254310][T19301] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3768'. [ 498.350973][T19210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 498.393268][T19210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 498.540699][T19210] team0: Port device team_slave_0 added [ 498.575455][T19210] team0: Port device team_slave_1 added [ 498.753693][T19210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 498.771552][T19210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.819610][T19316] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3774'. [ 498.833236][T19210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 498.853520][T19210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 498.904253][T19210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 498.982003][T19210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 499.163263][T19333] x_tables: duplicate underflow at hook 2 [ 499.170774][T19315] bridge0: entered promiscuous mode [ 499.223143][T19316] bridge0 (unregistering): left promiscuous mode [ 499.290863][T19324] netlink: 2 bytes leftover after parsing attributes in process `syz.2.3776'. [ 499.378947][T19335] IPVS: Error connecting to the multicast addr [ 499.417820][T19210] hsr_slave_0: entered promiscuous mode [ 499.435422][T19210] hsr_slave_1: entered promiscuous mode [ 499.441802][T19210] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 499.463009][T19210] Cannot create hsr debugfs directory [ 499.491502][T19338] netlink: 'syz.4.3779': attribute type 4 has an invalid length. [ 499.500153][T19338] netlink: 3657 bytes leftover after parsing attributes in process `syz.4.3779'. [ 499.714754][T19344] IPVS: length: 60 != 24 [ 499.750072][T19344] xt_CT: You must specify a L4 protocol and not use inversions on it [ 499.995259][ T9882] Bluetooth: hci4: command tx timeout [ 500.058906][T19362] netlink: 'syz.0.3785': attribute type 1 has an invalid length. [ 500.067048][T19362] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3785'. [ 500.120598][T19364] netlink: 'syz.4.3786': attribute type 2 has an invalid length. [ 500.149999][T19364] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3786'. [ 500.287896][T19371] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3788'. [ 500.344393][T19371] bridge_slave_1: left allmulticast mode [ 500.354372][T19371] bridge_slave_1: left promiscuous mode [ 500.383325][T19371] bridge0: port 2(bridge_slave_1) entered disabled state [ 500.473651][T19379] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3792'. [ 500.655985][T19371] bridge_slave_0: left allmulticast mode [ 500.671361][T19371] bridge_slave_0: left promiscuous mode [ 500.684949][T19371] bridge0: port 1(bridge_slave_0) entered disabled state [ 501.317912][T19391] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3796'. [ 501.549396][T19393] netlink: 'syz.4.3797': attribute type 1 has an invalid length. [ 501.586339][T19394] netlink: 'syz.4.3797': attribute type 1 has an invalid length. [ 501.935610][T19210] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 501.995655][T19403] xt_hashlimit: invalid rate [ 502.027272][T19210] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 502.074418][ T9882] Bluetooth: hci4: command tx timeout [ 502.338210][ T9882] block nbd1: Receive control failed (result -107) [ 502.384475][T19413] nbd1: detected capacity change from 0 to 256 [ 502.707853][T19402] bond0: left allmulticast mode [ 502.712790][T19402] bond4: left allmulticast mode [ 502.886924][T19402] wg1: left promiscuous mode [ 502.891605][T19402] wg1: left allmulticast mode [ 503.674920][T19402] netdevsim netdevsim0 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.683338][T19402] netdevsim netdevsim0 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.714201][T19402] netdevsim netdevsim0 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.722628][T19402] netdevsim netdevsim0 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 503.866839][T19402] ip6gre2: left allmulticast mode [ 504.035500][T19402] vlan2: left allmulticast mode [ 504.041583][T19402] netdevsim netdevsim0 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 504.060796][T19402] netdevsim netdevsim0 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 504.070027][T19402] netdevsim netdevsim0 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 504.078914][T19402] netdevsim netdevsim0 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 504.116307][T19210] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 504.132131][T19210] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 504.260646][T19412] lo speed is unknown, defaulting to 1000 [ 504.485941][T19428] __nla_validate_parse: 7 callbacks suppressed [ 504.485964][T19428] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3807'. [ 504.575015][T19210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 504.630887][T19210] 8021q: adding VLAN 0 to HW filter on device team0 [ 504.686104][T11694] bridge0: port 1(bridge_slave_0) entered blocking state [ 504.693342][T11694] bridge0: port 1(bridge_slave_0) entered forwarding state [ 504.729383][T11694] bridge0: port 2(bridge_slave_1) entered blocking state [ 504.736764][T11694] bridge0: port 2(bridge_slave_1) entered forwarding state [ 504.829272][T19210] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 504.881276][T19438] netlink: 280 bytes leftover after parsing attributes in process `syz.4.3809'. [ 505.115444][T19450] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3813'. [ 505.247061][T19460] syzkaller1: entered promiscuous mode [ 505.273141][T19460] syzkaller1: entered allmulticast mode [ 505.345082][T19210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 506.047568][T19210] veth0_vlan: entered promiscuous mode [ 506.070709][T19210] veth1_vlan: entered promiscuous mode [ 506.162401][T19210] veth0_macvtap: entered promiscuous mode [ 506.211003][T19210] veth1_macvtap: entered promiscuous mode [ 506.285931][T19210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 506.324043][T19210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.358382][T19210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 506.410833][T19210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 506.417525][T19501] netlink: 'syz.2.3827': attribute type 10 has an invalid length. [ 506.454742][T19210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.477330][T19210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 506.505643][T19210] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.524106][T19210] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.543260][T19210] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.577538][T19210] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.603631][T19504] netlink: 10 bytes leftover after parsing attributes in process `syz.1.3828'. [ 506.648247][T19501] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 506.674973][T19501] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 506.953236][T11694] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.984306][T11694] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.101186][T11232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 507.115400][T11232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 507.217239][T19523] (unnamed net_device) (uninitialized): option active_slave: mode dependency failed, not supported in mode balance-xor(2) [ 507.422940][T19530] netlink: 'syz.2.3836': attribute type 1 has an invalid length. [ 507.496609][T19534] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3836'. [ 507.530652][T19530] bond2: entered promiscuous mode [ 507.536295][T19530] bond2: entered allmulticast mode [ 507.542996][T19525] xt_bpf: check failed: parse error [ 507.565047][ T7151] IPVS: starting estimator thread 0... [ 507.627094][T19539] netlink: 7084 bytes leftover after parsing attributes in process `syz.4.3837'. [ 507.674629][T19538] IPVS: using max 22 ests per chain, 52800 per kthread [ 507.903828][T19547] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3840'. [ 507.996339][T19547] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3840'. [ 508.051985][T19548] netlink: 'syz.1.3840': attribute type 10 has an invalid length. [ 508.099582][ T6319] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.160061][T19548] netlink: 132 bytes leftover after parsing attributes in process `syz.1.3840'. [ 508.256613][ T6319] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.448823][ T6319] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.530000][ T6319] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 508.634506][ T6319] bridge_slave_1: left allmulticast mode [ 508.640463][ T6319] bridge_slave_1: left promiscuous mode [ 508.646786][ T6319] bridge0: port 2(bridge_slave_1) entered disabled state [ 508.656587][ T6319] bridge_slave_0: left allmulticast mode [ 508.662344][ T6319] bridge_slave_0: left promiscuous mode [ 508.668383][ T6319] bridge0: port 1(bridge_slave_0) entered disabled state [ 508.985657][T19561] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3841'. [ 509.122752][ T5148] Bluetooth: hci0: command 0x0405 tx timeout [ 509.429158][ T5148] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 509.458644][ T5148] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 509.495477][ T5148] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 509.515180][ T5148] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 509.537951][ T5148] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 509.557355][ T5148] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 509.656846][ T6319] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 509.672392][ T6319] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 509.693194][ T6319] bond0 (unregistering): Released all slaves [ 509.732543][T19569] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3841'. [ 509.903100][T19573] lo speed is unknown, defaulting to 1000 [ 509.904681][T19576] netlink: 'syz.4.3847': attribute type 1 has an invalid length. [ 509.917747][T19576] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3847'. [ 509.999783][T19578] net_ratelimit: 12 callbacks suppressed [ 509.999806][T19578] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 510.234690][T19591] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3853'. [ 510.257608][T19591] netlink: 'syz.4.3853': attribute type 21 has an invalid length. [ 511.578082][T19610] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3857'. [ 511.594479][ T9882] Bluetooth: hci4: command tx timeout [ 511.614483][T19611] netlink: 'syz.1.3857': attribute type 1 has an invalid length. [ 512.439751][ T6319] hsr_slave_0: left promiscuous mode [ 512.474174][ T6319] hsr_slave_1: left promiscuous mode [ 512.480854][ T6319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 512.494775][ T6319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 512.513613][ T6319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 512.533290][ T6319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 512.632267][T19618] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3859'. [ 512.642668][ T6319] veth1_macvtap: left promiscuous mode [ 512.652390][T19618] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3859'. [ 512.654132][ T6319] veth0_macvtap: left promiscuous mode [ 512.684497][ T6319] veth1_vlan: left promiscuous mode [ 512.694425][ T6319] veth0_vlan: left promiscuous mode [ 512.766814][T19624] netlink: 16 bytes leftover after parsing attributes in process `syz.0.3859'. [ 513.507618][ T6319] team0 (unregistering): Port device team_slave_1 removed [ 513.576394][ T6319] team0 (unregistering): Port device team_slave_0 removed [ 513.682110][ T9882] Bluetooth: hci4: command tx timeout [ 514.495137][T19573] chnl_net:caif_netlink_parms(): no params data found [ 514.522569][T19628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3862'. [ 514.553697][T19628] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3862'. [ 514.597742][T19632] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3863'. [ 514.860387][T19573] bridge0: port 1(bridge_slave_0) entered blocking state [ 514.875350][T19573] bridge0: port 1(bridge_slave_0) entered disabled state [ 514.893048][T19573] bridge_slave_0: entered allmulticast mode [ 514.935429][T19573] bridge_slave_0: entered promiscuous mode [ 514.972049][T19573] bridge0: port 2(bridge_slave_1) entered blocking state [ 515.004832][T19573] bridge0: port 2(bridge_slave_1) entered disabled state [ 515.012205][T19573] bridge_slave_1: entered allmulticast mode [ 515.034680][T19573] bridge_slave_1: entered promiscuous mode [ 515.156055][T19573] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 515.210529][T19573] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 515.396366][T19573] team0: Port device team_slave_0 added [ 515.413760][T19630] tun0: tun_chr_ioctl cmd 1074812117 [ 515.429591][T19573] team0: Port device team_slave_1 added [ 515.444976][T19630] netlink: 52 bytes leftover after parsing attributes in process `syz.0.3861'. [ 515.488827][T19659] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3871'. [ 515.517376][T19573] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 515.534278][T19573] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.593279][T19573] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 515.667279][T19573] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 515.684846][T19573] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 515.718506][T19573] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 515.754355][ T9882] Bluetooth: hci4: command tx timeout [ 515.830125][T19573] hsr_slave_0: entered promiscuous mode [ 515.837517][T19573] hsr_slave_1: entered promiscuous mode [ 515.843775][T19573] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 515.852288][T19573] Cannot create hsr debugfs directory [ 515.860719][T19672] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3873'. [ 516.149665][T19679] lo speed is unknown, defaulting to 1000 [ 516.263026][T19686] netlink: 1268 bytes leftover after parsing attributes in process `syz.0.3879'. [ 516.272871][T19686] openvswitch: netlink: Flow key attribute not present in set flow. [ 516.493474][T19693] netlink: 16186 bytes leftover after parsing attributes in process `syz.0.3880'. [ 516.506740][T19694] sctp: [Deprecated]: syz.2.3882 (pid 19694) Use of int in maxseg socket option. [ 516.506740][T19694] Use struct sctp_assoc_value instead [ 516.982875][T19573] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 517.017488][T19573] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 517.077673][T19573] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 517.119865][T19573] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 517.376819][T19573] 8021q: adding VLAN 0 to HW filter on device bond0 [ 517.443421][T19573] 8021q: adding VLAN 0 to HW filter on device team0 [ 517.478787][T11706] bridge0: port 1(bridge_slave_0) entered blocking state [ 517.486050][T11706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 517.527862][T11706] bridge0: port 2(bridge_slave_1) entered blocking state [ 517.535074][T11706] bridge0: port 2(bridge_slave_1) entered forwarding state [ 517.835622][ T9882] Bluetooth: hci4: command tx timeout [ 517.992357][T19731] netlink: 'syz.2.3895': attribute type 2 has an invalid length. [ 518.006534][T19573] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 518.040826][T19732] netlink: 32 bytes leftover after parsing attributes in process `syz.2.3895'. [ 518.085784][T19731] fþ²¹¥‰: entered promiscuous mode [ 518.104331][T19738] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3896'. [ 518.568808][T19749] netlink: 'syz.1.3897': attribute type 10 has an invalid length. [ 518.605721][T19749] bond0: (slave wlan1): Releasing backup interface [ 518.737396][T19749] sctp: [Deprecated]: syz.1.3897 (pid 19749) Use of int in maxseg socket option. [ 518.737396][T19749] Use struct sctp_assoc_value instead [ 518.773200][T19573] veth0_vlan: entered promiscuous mode [ 518.806558][T19573] veth1_vlan: entered promiscuous mode [ 518.936510][T19573] veth0_macvtap: entered promiscuous mode [ 518.974973][T19573] veth1_macvtap: entered promiscuous mode [ 519.045214][T19573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 519.084366][T19573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.119694][T19573] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 519.147607][T19573] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 519.186707][T19573] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 519.223856][T19573] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 519.335281][T19573] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.344767][T19573] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.353670][T19573] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.363512][T19573] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 519.568723][T19766] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3903'. [ 519.603494][T11695] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.624546][T11695] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.624765][T19769] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 519.782374][T11229] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 519.806514][T11229] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 519.996791][T19782] netlink: 830 bytes leftover after parsing attributes in process `syz.1.3906'. [ 520.088765][T19792] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3908'. [ 520.420400][T19803] syz.4.3912: vmalloc error: size 33558528, failed to allocated page array size 65544, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 520.439935][T19803] CPU: 1 UID: 0 PID: 19803 Comm: syz.4.3912 Not tainted 6.14.0-rc1-syzkaller-00272-gae9b3c0e79bc #0 [ 520.439978][T19803] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 520.439992][T19803] Call Trace: [ 520.439999][T19803] [ 520.440008][T19803] dump_stack_lvl+0x241/0x360 [ 520.440039][T19803] ? __pfx_dump_stack_lvl+0x10/0x10 [ 520.440062][T19803] ? __pfx__printk+0x10/0x10 [ 520.440109][T19803] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 520.440134][T19803] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 520.440162][T19803] warn_alloc+0x278/0x410 [ 520.440197][T19803] ? __pfx_warn_alloc+0x10/0x10 [ 520.440234][T19803] ? xskq_create+0xb6/0x170 [ 520.440257][T19803] ? __get_vm_area_node+0x1c8/0x2d0 [ 520.440283][T19803] ? __get_vm_area_node+0x25c/0x2d0 [ 520.440316][T19803] __vmalloc_node_range_noprof+0x62f/0x1380 [ 520.440378][T19803] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 520.440413][T19803] ? __kasan_kmalloc+0x98/0xb0 [ 520.440450][T19803] vmalloc_user_noprof+0x74/0x80 [ 520.440477][T19803] ? xskq_create+0xb6/0x170 [ 520.440500][T19803] xskq_create+0xb6/0x170 [ 520.440527][T19803] xsk_init_queue+0xa1/0x100 [ 520.440554][T19803] xsk_setsockopt+0x598/0x950 [ 520.440580][T19803] ? __pfx_xsk_setsockopt+0x10/0x10 [ 520.440604][T19803] ? __pfx_aa_sk_perm+0x10/0x10 [ 520.440634][T19803] ? __pfx_lock_acquire+0x10/0x10 [ 520.440662][T19803] ? aa_sock_opt_perm+0x79/0x120 [ 520.440696][T19803] ? __pfx_xsk_setsockopt+0x10/0x10 [ 520.440717][T19803] do_sock_setsockopt+0x3af/0x720 [ 520.440756][T19803] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 520.440794][T19803] ? __fget_files+0x395/0x410 [ 520.440816][T19803] ? __fget_files+0x2a/0x410 [ 520.440848][T19803] __x64_sys_setsockopt+0x1ee/0x280 [ 520.440892][T19803] do_syscall_64+0xf3/0x230 [ 520.440922][T19803] ? clear_bhb_loop+0x35/0x90 [ 520.440956][T19803] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 520.440984][T19803] RIP: 0033:0x7f58bd18cde9 [ 520.441003][T19803] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 520.441022][T19803] RSP: 002b:00007f58bdf76038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 520.441044][T19803] RAX: ffffffffffffffda RBX: 00007f58bd3a6080 RCX: 00007f58bd18cde9 [ 520.441060][T19803] RDX: 0000000000000003 RSI: 000000000000011b RDI: 0000000000000003 [ 520.441079][T19803] RBP: 00007f58bd20e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 520.441093][T19803] R10: 00004000000001c0 R11: 0000000000000246 R12: 0000000000000000 [ 520.441106][T19803] R13: 0000000000000001 R14: 00007f58bd3a6080 R15: 00007fff274d9868 [ 520.441139][T19803] [ 520.441261][T19803] Mem-Info: [ 520.712640][T19803] active_anon:6381 inactive_anon:0 isolated_anon:0 [ 520.712640][T19803] active_file:1814 inactive_file:38496 isolated_file:0 [ 520.712640][T19803] unevictable:768 dirty:121 writeback:0 [ 520.712640][T19803] slab_reclaimable:11861 slab_unreclaimable:136563 [ 520.712640][T19803] mapped:28667 shmem:1407 pagetables:713 [ 520.712640][T19803] sec_pagetables:0 bounce:0 [ 520.712640][T19803] kernel_misc_reclaimable:0 [ 520.712640][T19803] free:1298018 free_pcp:528 free_cma:0 [ 520.765095][T19811] __nla_validate_parse: 1 callbacks suppressed [ 520.765118][T19811] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3914'. [ 520.804235][T19803] Node 0 active_anon:25624kB inactive_anon:0kB active_file:7256kB inactive_file:153908kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:114768kB dirty:484kB writeback:0kB shmem:4092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:14552kB pagetables:2952kB sec_pagetables:0kB all_unreclaimable? no [ 520.863771][T19803] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 520.907934][T19803] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 520.983833][T19803] lowmem_reserve[]: 0 2491 2491 0 0 [ 521.034357][T19803] Node 0 DMA32 free:1270268kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:24484kB inactive_anon:0kB active_file:7256kB inactive_file:153332kB unevictable:1536kB writepending:484kB present:3129332kB managed:2551076kB mlocked:0kB bounce:0kB free_pcp:7660kB local_pcp:688kB free_cma:0kB [ 521.113050][T19803] lowmem_reserve[]: 0 0 0 0 0 [ 521.134232][T19803] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:576kB unevictable:0kB writepending:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 521.162255][T19803] lowmem_reserve[]: 0 0 0 0 0 [ 521.162364][T11229] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.167457][T19803] Node 1 Normal free:3907080kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:20kB local_pcp:0kB free_cma:0kB [ 521.167525][T19803] lowmem_reserve[]: 0 0 0 0 0 [ 521.167578][T19803] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 521.167737][T19803] Node 0 DMA32: 282*4kB (UM) 314*8kB (UME) 425*16kB (UME) 608*32kB (UME) 1600*64kB (UME) 209*128kB (UME) 37*256kB (UME) 8*512kB (ME) 10*1024kB (UME) 1*2048kB (E) 268*4096kB (M) = 1282632kB [ 521.261784][T19820] Cannot find set identified by id 0 to match [ 521.314456][T19803] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 521.429560][T19803] Node 1 Normal: 185*4kB (UE) 53*8kB (UME) 41*16kB (UME) 178*32kB (UME) 99*64kB (UME) 26*128kB (UME) 15*256kB (UME) 10*512kB (UME) 4*1024kB (UME) 5*2048kB (UE) 944*4096kB (M) = 3907100kB [ 521.456705][T11229] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.515304][T19803] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 521.551464][T19803] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 521.562193][T19803] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 521.572787][T19803] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 521.585264][T19803] 41718 total pagecache pages [ 521.590347][T19803] 0 pages in swap cache [ 521.594845][T19803] Free swap = 124996kB [ 521.604473][T19803] Total swap = 124996kB [ 521.607554][T11229] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.608671][T19803] 2097051 pages RAM [ 521.646566][T19803] 0 pages HighMem/MovableOnly [ 521.651470][T19803] 427496 pages reserved [ 521.694372][T19803] 0 pages cma reserved [ 521.713816][T11229] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 521.944419][T11229] bridge_slave_1: left allmulticast mode [ 521.950135][T11229] bridge_slave_1: left promiscuous mode [ 521.956367][T11229] bridge0: port 2(bridge_slave_1) entered disabled state [ 521.970698][T11229] bridge_slave_0: left allmulticast mode [ 521.976874][T11229] bridge_slave_0: left promiscuous mode [ 521.982774][T11229] bridge0: port 1(bridge_slave_0) entered disabled state [ 522.792890][ T5148] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 522.810839][ T5148] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 522.832398][ T5148] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 522.883770][ T5148] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 522.895400][ T5148] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 522.903285][ T5148] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 523.355530][T11229] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 523.370610][T11229] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 523.380364][T19861] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3926'. [ 523.395502][T11229] bond0 (unregistering): Released all slaves [ 523.418667][T19839] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 523.614129][T19867] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3928'. [ 523.761374][T19853] lo speed is unknown, defaulting to 1000 [ 524.138500][T19888] mac80211_hwsim hwsim49 syzkaller0: entered promiscuous mode [ 524.162628][T19890] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3933'. [ 524.164150][T19888] mac80211_hwsim hwsim49 syzkaller0: entered allmulticast mode [ 524.384534][T11229] hsr_slave_0: left promiscuous mode [ 524.406013][T11229] hsr_slave_1: left promiscuous mode [ 524.434698][T11229] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 524.475084][T11229] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 524.498960][T11229] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 524.517026][T11229] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 524.655938][T11229] veth1_macvtap: left promiscuous mode [ 524.674546][T11229] veth0_macvtap: left promiscuous mode [ 524.680241][T11229] veth1_vlan: left promiscuous mode [ 524.708536][T11229] veth0_vlan: left promiscuous mode [ 524.954866][ T9882] Bluetooth: hci4: command tx timeout [ 525.062272][T19914] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3940'. [ 526.205154][T19910] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 526.422422][T11229] team0 (unregistering): Port device team_slave_1 removed [ 526.500109][T11229] team0 (unregistering): Port device team_slave_0 removed [ 527.034550][ T5148] Bluetooth: hci4: command tx timeout [ 527.247045][T19915] lo speed is unknown, defaulting to 1000 [ 527.436107][T19933] netlink: 'syz.4.3943': attribute type 27 has an invalid length. [ 527.441612][T19853] chnl_net:caif_netlink_parms(): no params data found [ 527.506636][T19937] netlink: 16 bytes leftover after parsing attributes in process `syz.1.3942'. [ 527.517914][T19937] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3942'. [ 527.729999][T19941] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3946'. [ 527.946755][T19853] bridge0: port 1(bridge_slave_0) entered blocking state [ 527.963752][T19853] bridge0: port 1(bridge_slave_0) entered disabled state [ 527.996679][T19853] bridge_slave_0: entered allmulticast mode [ 528.020913][T19853] bridge_slave_0: entered promiscuous mode [ 528.047044][T19853] bridge0: port 2(bridge_slave_1) entered blocking state [ 528.060653][T19853] bridge0: port 2(bridge_slave_1) entered disabled state [ 528.092640][T19853] bridge_slave_1: entered allmulticast mode [ 528.103058][T19853] bridge_slave_1: entered promiscuous mode [ 528.128427][T19952] netlink: 'syz.4.3949': attribute type 4 has an invalid length. [ 528.151272][T19952] netlink: 17 bytes leftover after parsing attributes in process `syz.4.3949'. [ 528.241788][T19853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 528.269595][T19957] netlink: 'syz.4.3949': attribute type 1 has an invalid length. [ 528.289021][T19853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 528.472088][T19853] team0: Port device team_slave_0 added [ 528.473170][T19970] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3955'. [ 528.488325][T19970] netlink: 'syz.4.3955': attribute type 1 has an invalid length. [ 528.518503][T19853] team0: Port device team_slave_1 added [ 528.524742][T19970] netlink: 'syz.4.3955': attribute type 2 has an invalid length. [ 528.692831][T19853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 528.702571][T19853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.815411][T19853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 528.837120][T19853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 528.844644][T19853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 528.876466][T19853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 528.945375][T19985] netlink: 'syz.2.3960': attribute type 6 has an invalid length. [ 529.119417][ T5148] Bluetooth: hci4: command tx timeout [ 529.195433][T19853] hsr_slave_0: entered promiscuous mode [ 529.217014][T19853] hsr_slave_1: entered promiscuous mode [ 529.285318][T19853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 529.312335][T19853] Cannot create hsr debugfs directory [ 529.499327][T20007] ax25_connect(): syz.2.3963 uses autobind, please contact jreuter@yaina.de [ 529.819028][T20023] lo speed is unknown, defaulting to 1000 [ 529.838097][T20022] lo speed is unknown, defaulting to 1000 [ 529.848812][T20030] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.3969'. [ 529.919375][T20033] netlink: 'syz.4.3970': attribute type 10 has an invalid length. [ 530.008952][T20033] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 530.029349][T20033] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 530.038763][T20036] netlink: 52 bytes leftover after parsing attributes in process `syz.1.3971'. [ 530.074447][T20036] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3971'. [ 530.215842][T20039] netlink: 'syz.2.3972': attribute type 10 has an invalid length. [ 530.282290][T20048] xt_TPROXY: Can be used only with -p tcp or -p udp [ 530.292304][T20048] SET target dimension over the limit! [ 530.439836][ T7151] IPVS: starting estimator thread 0... [ 530.535611][T20052] IPVS: using max 21 ests per chain, 50400 per kthread [ 530.626257][T20055] lo speed is unknown, defaulting to 1000 [ 530.697174][T19853] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 530.719041][T19853] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 530.756265][T19853] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 530.803926][T19853] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 530.859283][T20065] bridge0: entered promiscuous mode [ 530.868203][T20067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3978'. [ 530.921862][T20065] netlink: 20 bytes leftover after parsing attributes in process `syz.0.3977'. [ 531.046253][T20064] bridge0: left promiscuous mode [ 531.068174][T20069] pim6reg1: entered promiscuous mode [ 531.093066][T20069] pim6reg1: entered allmulticast mode [ 531.113254][T19853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 531.181058][T20073] openvswitch: netlink: Actions may not be safe on all matching packets [ 531.194804][ T5148] Bluetooth: hci4: command tx timeout [ 531.243706][T19853] 8021q: adding VLAN 0 to HW filter on device team0 [ 531.290089][T11229] bridge0: port 1(bridge_slave_0) entered blocking state [ 531.297405][T11229] bridge0: port 1(bridge_slave_0) entered forwarding state [ 531.336824][T11695] bridge0: port 2(bridge_slave_1) entered blocking state [ 531.344197][T11695] bridge0: port 2(bridge_slave_1) entered forwarding state [ 531.471586][T19853] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 531.496473][T20081] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 531.537688][T19853] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 531.848889][T19853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 532.447935][T20102] lo speed is unknown, defaulting to 1000 [ 532.476365][T19853] veth0_vlan: entered promiscuous mode [ 532.553816][T20115] __nla_validate_parse: 2 callbacks suppressed [ 532.553839][T20115] netlink: 32 bytes leftover after parsing attributes in process `syz.1.3990'. [ 532.577942][T20114] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3989'. [ 532.592236][T19853] veth1_vlan: entered promiscuous mode [ 532.711030][T19853] veth0_macvtap: entered promiscuous mode [ 532.735372][T19853] veth1_macvtap: entered promiscuous mode [ 532.810867][T19853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 532.830109][T20125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3992'. [ 532.830396][T19853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.852385][T19853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 532.896916][T19853] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 532.919120][T19853] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 532.945074][T19853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 532.977183][T19853] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 532.994217][T19853] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.011706][T19853] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.026308][T19853] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 533.195723][T20131] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 533.347433][ T6319] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.404815][ T6319] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.502298][T11232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 533.511161][T11232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 533.556044][T20139] netlink: 'syz.2.3997': attribute type 1 has an invalid length. [ 533.589106][T20139] netlink: 'syz.2.3997': attribute type 2 has an invalid length. [ 534.192714][T20144] lo speed is unknown, defaulting to 1000 [ 534.375530][T20166] netlink: 20 bytes leftover after parsing attributes in process `syz.0.4004'. [ 534.490255][T20169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4005'. [ 534.499211][T20171] netlink: 'syz.2.4006': attribute type 20 has an invalid length. [ 534.534568][T20169] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4005'. [ 534.569055][T20174] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4006'. [ 534.597204][T11708] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.787498][T11708] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.904389][T11708] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 534.988514][T11708] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 535.094511][T11708] bridge_slave_1: left allmulticast mode [ 535.100240][T11708] bridge_slave_1: left promiscuous mode [ 535.110391][T11708] bridge0: port 2(bridge_slave_1) entered disabled state [ 535.122138][T11708] bridge_slave_0: left allmulticast mode [ 535.129280][T11708] bridge_slave_0: left promiscuous mode [ 535.137374][T11708] bridge0: port 1(bridge_slave_0) entered disabled state [ 535.504660][T20184] netlink: 25 bytes leftover after parsing attributes in process `syz.1.4008'. [ 535.558216][T20186] sctp: [Deprecated]: syz.4.4010 (pid 20186) Use of int in max_burst socket option deprecated. [ 535.558216][T20186] Use struct sctp_assoc_value instead [ 535.585374][T20187] netlink: 'syz.1.4008': attribute type 4 has an invalid length. [ 535.626058][T20186] xt_TPROXY: Can be used only with -p tcp or -p udp [ 535.640004][T20189] netlink: 'syz.1.4008': attribute type 1 has an invalid length. [ 536.155356][ T9882] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 536.166243][ T9882] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 536.176187][T11708] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 536.186168][ T9882] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 536.196029][ T9882] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 536.204067][ T9882] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 536.212405][ T9882] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 536.247449][T11708] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 536.263945][T11708] bond0 (unregistering): Released all slaves [ 536.298444][T20193] batadv3: entered promiscuous mode [ 536.411402][T20196] lo speed is unknown, defaulting to 1000 [ 536.583017][T20206] netlink: 4 bytes leftover after parsing attributes in process `syz.0.4013'. [ 536.623886][T20209] netlink: 36 bytes leftover after parsing attributes in process `syz.2.4012'. [ 536.711067][T20208] netlink: 'syz.4.4014': attribute type 13 has an invalid length. [ 537.111417][T11708] hsr_slave_0: left promiscuous mode [ 537.134469][T11708] hsr_slave_1: left promiscuous mode [ 537.151858][T11708] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 537.182822][T11708] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 537.193626][T11708] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 537.214383][T11708] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 537.297137][T11708] veth1_macvtap: left promiscuous mode [ 537.307965][T11708] veth0_macvtap: left promiscuous mode [ 537.323427][T11708] veth1_vlan: left promiscuous mode [ 537.333781][T11708] veth0_vlan: left promiscuous mode [ 538.315351][ T9882] Bluetooth: hci4: command tx timeout [ 538.558295][T11708] team0 (unregistering): Port device team_slave_1 removed [ 538.646912][T11708] team0 (unregistering): Port device team_slave_0 removed [ 539.451512][T20196] chnl_net:caif_netlink_parms(): no params data found [ 539.958108][T20196] bridge0: port 1(bridge_slave_0) entered blocking state [ 539.975349][T20196] bridge0: port 1(bridge_slave_0) entered disabled state [ 539.989098][T20196] bridge_slave_0: entered allmulticast mode [ 540.009873][T20196] bridge_slave_0: entered promiscuous mode [ 540.036771][T20196] bridge0: port 2(bridge_slave_1) entered blocking state [ 540.060870][T20196] bridge0: port 2(bridge_slave_1) entered disabled state [ 540.079229][T20196] bridge_slave_1: entered allmulticast mode [ 540.092696][T20196] bridge_slave_1: entered promiscuous mode [ 540.152018][T20283] __nla_validate_parse: 2 callbacks suppressed [ 540.152040][T20283] netlink: 9 bytes leftover after parsing attributes in process `syz.0.4031'. [ 540.292019][T20196] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 540.314615][T20289] xt_hashlimit: size too large, truncated to 1048576 [ 540.325394][T20196] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 540.404441][ T9882] Bluetooth: hci4: command tx timeout [ 541.249035][T20196] team0: Port device team_slave_0 added [ 541.320241][T20196] team0: Port device team_slave_1 added [ 541.500950][T20196] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 541.543507][T20196] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.596694][T20196] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 541.608549][T20319] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4038'. [ 541.645281][T20317] bond0: option mode: unable to set because the bond device has slaves [ 541.675996][T20196] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 541.703692][T20196] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 541.795171][T20196] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 541.965349][T20196] hsr_slave_0: entered promiscuous mode [ 541.973234][T20196] hsr_slave_1: entered promiscuous mode [ 541.992333][T20196] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 542.049788][T20196] Cannot create hsr debugfs directory [ 542.197215][T20326] lo speed is unknown, defaulting to 1000 [ 542.484600][ T9882] Bluetooth: hci4: command tx timeout [ 543.019710][T20196] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 543.095370][T20196] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 543.147812][T20196] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 543.311900][T20196] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 543.429105][T20350] batadv_slave_1: entered promiscuous mode [ 543.513227][T20349] batadv_slave_1: left promiscuous mode [ 543.573161][T20352] netlink: 252 bytes leftover after parsing attributes in process `syz.4.4047'. [ 543.651489][T20354] netlink: 'syz.2.4049': attribute type 2 has an invalid length. [ 543.659558][T20354] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4049'. [ 543.740439][T20356] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 543.815314][T20196] 8021q: adding VLAN 0 to HW filter on device bond0 [ 543.855444][T20353] delete_channel: no stack [ 543.892702][T20196] 8021q: adding VLAN 0 to HW filter on device team0 [ 543.913126][ T6319] bridge0: port 1(bridge_slave_0) entered blocking state [ 543.920381][ T6319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 543.966369][T20359] netlink: 'syz.4.4050': attribute type 1 has an invalid length. [ 543.974114][ T6319] bridge0: port 2(bridge_slave_1) entered blocking state [ 543.974247][ T6319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 544.051866][T20361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4051'. [ 544.110177][T20361] netlink: 'syz.2.4051': attribute type 10 has an invalid length. [ 544.136540][T20363] bond1: (slave ip6gretap2): Enslaving as a backup interface with an up link [ 544.216019][T20361] 8021q: adding VLAN 0 to HW filter on device team0 [ 544.250419][T20361] bond0: (slave team0): Enslaving as an active interface with an up link [ 544.291839][T20369] 8021q: adding VLAN 0 to HW filter on device bond1 [ 544.296104][T11706] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 544.335302][T20368] netlink: 596 bytes leftover after parsing attributes in process `syz.1.4052'. [ 544.345317][T20359] vlan2: entered promiscuous mode [ 544.365626][T20359] bond1: entered promiscuous mode [ 544.374351][T20359] ip6gretap2: entered promiscuous mode [ 544.412312][T20359] bond1: left promiscuous mode [ 544.417853][T20359] ip6gretap2: left promiscuous mode [ 544.481017][T11229] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 544.564761][ T5148] Bluetooth: hci4: command tx timeout [ 544.637457][T20376] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4054'. [ 544.915085][T20385] netlink: 136 bytes leftover after parsing attributes in process `syz.4.4058'. [ 544.938504][T20385] netlink: 252 bytes leftover after parsing attributes in process `syz.4.4058'. [ 544.968907][T20196] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 544.974378][ T5148] Bluetooth: hci2: command 0x0411 tx timeout [ 545.037790][T20393] netlink: 'syz.2.4059': attribute type 2 has an invalid length. [ 545.076848][T20394] netlink: 'syz.2.4059': attribute type 2 has an invalid length. [ 545.127363][T20393] netlink: 'syz.2.4059': attribute type 9 has an invalid length. [ 545.136208][T20394] netlink: 'syz.2.4059': attribute type 9 has an invalid length. [ 545.144492][T20393] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4059'. [ 545.185234][T20394] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.4059'. [ 545.626242][T20196] veth0_vlan: entered promiscuous mode [ 545.676604][T20196] veth1_vlan: entered promiscuous mode [ 545.777730][T20196] veth0_macvtap: entered promiscuous mode [ 545.816885][T20196] veth1_macvtap: entered promiscuous mode [ 545.856570][T20196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 545.884110][T20196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.911602][T20196] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 545.957851][T20196] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 545.984807][T20196] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 545.999834][T20427] netlink: 165 bytes leftover after parsing attributes in process `syz.4.4068'. [ 546.012075][T20196] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 546.017971][T20427] netlink: 277 bytes leftover after parsing attributes in process `syz.4.4068'. [ 546.038235][T20422] lo speed is unknown, defaulting to 1000 [ 546.049097][T20196] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.074990][T20196] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.104174][T20196] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.113151][T20196] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 546.153877][T20428] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4067'. [ 546.511379][T11229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.534527][T11229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.780849][T20440] netlink: 8 bytes leftover after parsing attributes in process `syz.1.4071'. [ 546.790402][T11708] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 546.803288][T11708] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 546.938677][T20445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4072'. [ 546.960319][T20441] xt_CT: You must specify a L4 protocol and not use inversions on it [ 546.982726][T20445] vlan2: entered allmulticast mode [ 547.055704][T20445] xfrm0: entered allmulticast mode [ 547.100340][T20445] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4072'. [ 547.850131][ T6319] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 547.893187][T20464] »»»»»»: renamed from veth0_vlan (while UP) [ 548.156577][ T6319] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.308527][ T6319] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.446931][ T6319] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 548.867128][ T6319] bridge_slave_1: left allmulticast mode [ 548.872971][ T6319] bridge_slave_1: left promiscuous mode [ 548.895903][ T6319] bridge0: port 2(bridge_slave_1) entered disabled state [ 548.967759][T20481] netlink: 120 bytes leftover after parsing attributes in process `syz.4.4081'. [ 548.979693][ T6319] bridge_slave_0: left allmulticast mode [ 548.994477][T20481] netlink: 'syz.4.4081': attribute type 1 has an invalid length. [ 548.999072][ T6319] bridge_slave_0: left promiscuous mode [ 549.006901][T20481] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4081'. [ 549.029786][ T6319] bridge0: port 1(bridge_slave_0) entered disabled state [ 549.375473][ T5845] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 549.389871][ T5845] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 549.400159][ T5845] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 549.409205][ T5845] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 549.418158][ T5845] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 549.434203][ T5845] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 550.293946][ T6319] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 550.331487][ T6319] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 550.343939][ T6319] bond0 (unregistering): Released all slaves [ 550.357728][T20479] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4081'. [ 550.451515][T20488] lo speed is unknown, defaulting to 1000 [ 550.553184][T20497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4084'. [ 550.579324][T20497] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4084'. [ 550.874344][ T5148] Bluetooth: hci3: command 0x0405 tx timeout [ 550.883356][T20504] xt_CT: You must specify a L4 protocol and not use inversions on it [ 551.042452][T20488] chnl_net:caif_netlink_parms(): no params data found [ 551.124391][ T6319] hsr_slave_0: left promiscuous mode [ 551.154283][ T6319] hsr_slave_1: left promiscuous mode [ 551.164858][ T6319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 551.186283][ T6319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 551.207025][ T6319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 551.224741][ T6319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 551.313653][ T6319] veth1_macvtap: left promiscuous mode [ 551.334351][ T6319] veth0_macvtap: left promiscuous mode [ 551.340043][ T6319] veth1_vlan: left promiscuous mode [ 551.345592][ T6319] veth0_vlan: left promiscuous mode [ 551.515161][ T9882] Bluetooth: hci4: command tx timeout [ 552.078134][T20485] SET target dimension over the limit! [ 552.557220][ T6319] team0 (unregistering): Port device team_slave_1 removed [ 552.624591][ T6319] team0 (unregistering): Port device team_slave_0 removed [ 553.399810][T20512] vxcan11: entered allmulticast mode [ 553.592176][T20529] xt_l2tp: unknown flags: 10 [ 553.599337][ T9882] Bluetooth: hci4: command tx timeout [ 553.629718][T20533] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4095'. [ 553.772419][T20488] bridge0: port 1(bridge_slave_0) entered blocking state [ 553.780123][T20488] bridge0: port 1(bridge_slave_0) entered disabled state [ 553.794587][T20488] bridge_slave_0: entered allmulticast mode [ 553.812407][T20488] bridge_slave_0: entered promiscuous mode [ 553.841048][T20488] bridge0: port 2(bridge_slave_1) entered blocking state [ 553.866369][T20488] bridge0: port 2(bridge_slave_1) entered disabled state [ 553.884850][T20488] bridge_slave_1: entered allmulticast mode [ 553.905867][T20488] bridge_slave_1: entered promiscuous mode [ 553.992330][T20544] sch_tbf: burst 19872 is lower than device lo mtu (11337746) ! [ 554.079052][T20488] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 554.122781][T20488] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 554.206448][T20488] team0: Port device team_slave_0 added [ 554.235576][T20488] team0: Port device team_slave_1 added [ 554.313285][T20488] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 554.321630][T20488] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 554.364389][T20488] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 554.379556][T20488] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 554.388158][T20488] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 554.417461][T20488] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 554.573919][T20488] hsr_slave_0: entered promiscuous mode [ 554.586026][T20488] hsr_slave_1: entered promiscuous mode [ 554.592664][T20488] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 554.600938][T20488] Cannot create hsr debugfs directory [ 554.884917][T20566] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 554.998311][T20569] netdevsim netdevsim1: Direct firmware load for . [ 554.998311][T20569] failed with error -2 [ 555.010206][T20569] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 555.010206][T20569] [ 555.136690][T20573] netlink: 16 bytes leftover after parsing attributes in process `syz.2.4108'. [ 555.147514][T20573] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4108'. [ 555.236112][T20579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4111'. [ 555.246410][T20579] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4111'. [ 555.299121][T20579] netlink: 'syz.4.4111': attribute type 21 has an invalid length. [ 555.308437][T20579] netlink: 128 bytes leftover after parsing attributes in process `syz.4.4111'. [ 555.331827][T20579] netlink: 'syz.4.4111': attribute type 4 has an invalid length. [ 555.355691][T20579] netlink: 'syz.4.4111': attribute type 5 has an invalid length. [ 555.375563][T20579] netlink: 3 bytes leftover after parsing attributes in process `syz.4.4111'. [ 555.665142][T20488] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 555.675779][ T9882] Bluetooth: hci4: command tx timeout [ 555.698460][T20488] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 555.770387][T20600] netlink: 'syz.4.4118': attribute type 1 has an invalid length. [ 555.779245][T20488] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 555.794538][T20600] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4118'. [ 555.819856][T20488] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 555.975430][T20607] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 556.072116][T20488] 8021q: adding VLAN 0 to HW filter on device bond0 [ 556.130603][T20488] 8021q: adding VLAN 0 to HW filter on device team0 [ 556.155729][T11706] bridge0: port 1(bridge_slave_0) entered blocking state [ 556.163109][T11706] bridge0: port 1(bridge_slave_0) entered forwarding state [ 556.220879][T11229] bridge0: port 2(bridge_slave_1) entered blocking state [ 556.228243][T11229] bridge0: port 2(bridge_slave_1) entered forwarding state [ 556.337502][T20609] netlink: 'syz.0.4122': attribute type 10 has an invalid length. [ 556.371144][T20609] netlink: 40 bytes leftover after parsing attributes in process `syz.0.4122'. [ 556.426004][T20609] veth0_vlan: left promiscuous mode [ 556.466172][T20609] veth0_vlan: entered promiscuous mode [ 556.510140][T20609] veth0_vlan: entered allmulticast mode [ 556.555623][T20609] bridge0: port 1(veth0_vlan) entered blocking state [ 556.586659][T20609] bridge0: port 1(veth0_vlan) entered disabled state [ 556.661532][T20609] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 556.690279][T20628] netlink: 4 bytes leftover after parsing attributes in process `syz.4.4128'. [ 557.017413][T20488] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 557.138942][T20640] netlink: 48 bytes leftover after parsing attributes in process `syz.1.4132'. [ 557.440424][T20652] netlink: 12 bytes leftover after parsing attributes in process `syz.1.4135'. [ 557.626953][T20488] veth0_vlan: entered promiscuous mode [ 557.676657][T20488] veth1_vlan: entered promiscuous mode [ 557.745295][T20663] netlink: 680 bytes leftover after parsing attributes in process `syz.4.4136'. [ 557.756204][ T9882] Bluetooth: hci4: command tx timeout [ 557.791974][T20488] veth0_macvtap: entered promiscuous mode [ 557.814407][T20488] veth1_macvtap: entered promiscuous mode [ 557.922350][T20488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 557.963309][T20488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 557.976664][T20488] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 558.022259][T20488] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 558.091166][T20488] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 558.113274][T20488] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 558.170826][T20488] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.185348][T20677] netlink: 'syz.1.4141': attribute type 1 has an invalid length. [ 558.225604][T20488] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.258421][T20488] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.305157][T20681] netlink: 24 bytes leftover after parsing attributes in process `syz.2.4142'. [ 558.315331][T20488] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 558.491445][T20685] netlink: 44 bytes leftover after parsing attributes in process `syz.0.4144'. [ 558.537302][T11229] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.545938][T11229] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 558.619496][T11232] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 558.631739][T11232] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 559.438544][T20698] netlink: 'syz.0.4148': attribute type 8 has an invalid length. [ 559.455810][ T6319] netdevsim netdevsim5 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.598999][ T6319] netdevsim netdevsim5 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.770715][ T6319] netdevsim netdevsim5 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 559.839114][ T6319] netdevsim netdevsim5 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 560.013638][ T6319] bridge_slave_1: left allmulticast mode [ 560.019938][ T6319] bridge_slave_1: left promiscuous mode [ 560.026208][ T6319] bridge0: port 2(bridge_slave_1) entered disabled state [ 560.039109][ T6319] bridge_slave_0: left allmulticast mode [ 560.045462][ T6319] bridge_slave_0: left promiscuous mode [ 560.051221][ T6319] bridge0: port 1(bridge_slave_0) entered disabled state [ 560.624357][T20712] netlink: 256 bytes leftover after parsing attributes in process `syz.1.4150'. [ 561.076326][T20718] openvswitch: netlink: Flow actions attr not present in new flow. [ 561.097068][ T6319] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 561.130784][ T6319] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 561.146649][ T5148] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 561.158603][ T5148] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 561.167641][ T5148] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 561.174977][ T6319] bond0 (unregistering): Released all slaves [ 561.183066][T20729] syz.0.4155: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 561.204858][ T5148] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 561.212864][ T5148] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 561.220704][ T5148] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 561.230024][T20729] CPU: 0 UID: 0 PID: 20729 Comm: syz.0.4155 Not tainted 6.14.0-rc1-syzkaller-00272-gae9b3c0e79bc #0 [ 561.230055][T20729] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 561.230069][T20729] Call Trace: [ 561.230077][T20729] [ 561.230086][T20729] dump_stack_lvl+0x241/0x360 [ 561.230117][T20729] ? __pfx_dump_stack_lvl+0x10/0x10 [ 561.230139][T20729] ? __pfx__printk+0x10/0x10 [ 561.230178][T20729] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 561.230202][T20729] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 561.230230][T20729] warn_alloc+0x278/0x410 [ 561.230262][T20729] ? __vmalloc_node_range_noprof+0x106/0x1380 [ 561.230305][T20729] ? __pfx_warn_alloc+0x10/0x10 [ 561.230333][T20729] ? kasan_save_track+0x3f/0x80 [ 561.230360][T20729] ? __kasan_kmalloc+0x98/0xb0 [ 561.230391][T20729] ? xsk_setsockopt+0x4ea/0x950 [ 561.230412][T20729] ? do_sock_setsockopt+0x3af/0x720 [ 561.230442][T20729] ? __x64_sys_setsockopt+0x1ee/0x280 [ 561.230475][T20729] ? do_syscall_64+0xf3/0x230 [ 561.230505][T20729] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.230543][T20729] __vmalloc_node_range_noprof+0x126/0x1380 [ 561.230603][T20729] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 561.230647][T20729] ? __kasan_kmalloc+0x98/0xb0 [ 561.230684][T20729] vmalloc_user_noprof+0x74/0x80 [ 561.230721][T20729] ? xskq_create+0xb6/0x170 [ 561.230742][T20729] xskq_create+0xb6/0x170 [ 561.230770][T20729] xsk_init_queue+0xa1/0x100 [ 561.230798][T20729] xsk_setsockopt+0x4ea/0x950 [ 561.230825][T20729] ? __pfx_xsk_setsockopt+0x10/0x10 [ 561.230848][T20729] ? __pfx_aa_sk_perm+0x10/0x10 [ 561.230879][T20729] ? aa_sock_opt_perm+0x79/0x120 [ 561.230912][T20710] netlink: 'syz.2.4151': attribute type 4 has an invalid length. [ 561.230913][T20729] ? __pfx_xsk_setsockopt+0x10/0x10 [ 561.230934][T20729] do_sock_setsockopt+0x3af/0x720 [ 561.230972][T20729] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 561.231012][T20729] ? __fget_files+0x395/0x410 [ 561.231039][T20729] ? __fget_files+0x2a/0x410 [ 561.231076][T20729] __x64_sys_setsockopt+0x1ee/0x280 [ 561.231122][T20729] do_syscall_64+0xf3/0x230 [ 561.231155][T20729] ? clear_bhb_loop+0x35/0x90 [ 561.231192][T20729] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 561.231223][T20729] RIP: 0033:0x7f9ebab8cde9 [ 561.231244][T20729] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 561.231264][T20729] RSP: 002b:00007f9ebb96e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 561.231289][T20729] RAX: ffffffffffffffda RBX: 00007f9ebada5fa0 RCX: 00007f9ebab8cde9 [ 561.231307][T20729] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000003 [ 561.231321][T20729] RBP: 00007f9ebac0e2a0 R08: 0000000000000004 R09: 0000000000000000 [ 561.231336][T20729] R10: 0000400000000000 R11: 0000000000000246 R12: 0000000000000000 [ 561.231351][T20729] R13: 0000000000000000 R14: 00007f9ebada5fa0 R15: 00007fff8e684c18 [ 561.231385][T20729] [ 561.236851][T20729] Mem-Info: [ 561.243708][T20710] netlink: 3581 bytes leftover after parsing attributes in process `syz.2.4151'. [ 561.361106][T20729] active_anon:5909 inactive_anon:0 isolated_anon:0 [ 561.361106][T20729] active_file:1878 inactive_file:38518 isolated_file:0 [ 561.361106][T20729] unevictable:768 dirty:122 writeback:0 [ 561.361106][T20729] slab_reclaimable:12166 slab_unreclaimable:137601 [ 561.361106][T20729] mapped:30734 shmem:1407 pagetables:692 [ 561.361106][T20729] sec_pagetables:0 bounce:0 [ 561.361106][T20729] kernel_misc_reclaimable:0 [ 561.361106][T20729] free:1287000 free_pcp:1598 free_cma:0 [ 561.486660][T20726] lo speed is unknown, defaulting to 1000 [ 561.533034][T20729] Node 0 active_anon:23356kB inactive_anon:0kB active_file:7512kB inactive_file:154000kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122996kB dirty:504kB writeback:0kB shmem:4092kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:14268kB pagetables:2816kB sec_pagetables:0kB all_unreclaimable? no [ 561.774370][T20729] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 561.858965][T20729] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 561.933663][T20729] lowmem_reserve[]: 0 2491 2491 0 0 [ 561.989992][T20729] Node 0 DMA32 free:1229676kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:23616kB inactive_anon:0kB active_file:7512kB inactive_file:153424kB unevictable:1536kB writepending:504kB present:3129332kB managed:2551076kB mlocked:0kB bounce:0kB free_pcp:2436kB local_pcp:1480kB free_cma:0kB [ 562.044166][T20729] lowmem_reserve[]: 0 0 0 0 0 [ 562.067272][T20729] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:576kB unevictable:0kB writepending:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:4kB local_pcp:0kB free_cma:0kB [ 562.076267][T20748] tipc: Enabled bearer , priority 0 [ 562.108437][T20729] lowmem_reserve[]: 0 0 0 0 0 [ 562.113286][T20729] Node 1 Normal free:3907104kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 562.154700][T20734] netlink: 'syz.1.4157': attribute type 3 has an invalid length. [ 562.158167][T20746] netlink: 92 bytes leftover after parsing attributes in process `syz.1.4157'. [ 562.162691][T20734] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.4157'. [ 562.200234][T20729] lowmem_reserve[]: 0 0 0 0 0 [ 562.220418][T20729] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 562.255958][T20729] Node 0 DMA32: 3*4kB (UME) 76*8kB (UME) 238*16kB (ME) 301*32kB (UME) 1382*64kB (UME) 257*128kB (UME) 55*256kB (UME) 13*512kB (UME) 9*1024kB (UM) 6*2048kB (UME) 257*4096kB (UME) = 1230316kB [ 562.278151][T20729] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 562.290225][T20729] Node 1 Normal: 186*4kB (UE) 53*8kB (UME) 41*16kB (UME) 178*32kB (UME) 99*64kB (UME) 26*128kB (UME) 15*256kB (UME) 10*512kB (UME) 4*1024kB (UME) 5*2048kB (UE) 944*4096kB (M) = 3907104kB [ 562.309492][T20729] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 562.320126][T20729] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 562.330458][T20729] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 562.341533][T20729] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 562.352066][T20729] 41804 total pagecache pages [ 562.357098][T20729] 0 pages in swap cache [ 562.361398][T20729] Free swap = 124996kB [ 562.366220][T20729] Total swap = 124996kB [ 562.370535][T20729] 2097051 pages RAM [ 562.374727][T20729] 0 pages HighMem/MovableOnly [ 562.379540][T20729] 427496 pages reserved [ 562.386446][T20729] 0 pages cma reserved [ 562.653075][ T6319] hsr_slave_0: left promiscuous mode [ 562.663750][ T6319] hsr_slave_1: left promiscuous mode [ 562.692292][T20760] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4162'. [ 562.716582][ T6319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 562.724554][ T6319] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 562.734309][T20760] netlink: 31 bytes leftover after parsing attributes in process `syz.0.4162'. [ 562.756892][T20760] netlink: 'syz.0.4162': attribute type 3 has an invalid length. [ 562.767821][ T6319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 562.776700][T20760] netlink: 'syz.0.4162': attribute type 2 has an invalid length. [ 562.785433][T20760] netlink: 31 bytes leftover after parsing attributes in process `syz.0.4162'. [ 562.795663][ T6319] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 562.838222][T20775] delete_channel: no stack [ 562.991166][ T6319] veth1_macvtap: left promiscuous mode [ 563.015665][ T6319] veth0_macvtap: left promiscuous mode [ 563.034801][ T6319] veth1_vlan: left promiscuous mode [ 563.040376][ T6319] veth0_vlan: left promiscuous mode [ 563.373593][ T5148] Bluetooth: hci4: command tx timeout [ 563.585648][T20800] xt_TPROXY: Can be used only with -p tcp or -p udp [ 564.372919][ T6319] team0 (unregistering): Port device team_slave_1 removed [ 564.460386][ T6319] team0 (unregistering): Port device team_slave_0 removed [ 565.188725][T20803] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6erspan0 [ 565.222685][T20726] chnl_net:caif_netlink_parms(): no params data found [ 565.358268][T20812] netlink: 'syz.0.4174': attribute type 1 has an invalid length. [ 565.402717][T20812] netlink: 'syz.0.4174': attribute type 46 has an invalid length. [ 565.424146][T20812] netlink: 12 bytes leftover after parsing attributes in process `syz.0.4174'. [ 565.434336][ T5148] Bluetooth: hci4: command tx timeout [ 565.556085][T20726] bridge0: port 1(bridge_slave_0) entered blocking state [ 565.563243][T20726] bridge0: port 1(bridge_slave_0) entered disabled state [ 565.588274][T20726] bridge_slave_0: entered allmulticast mode [ 565.606269][T20726] bridge_slave_0: entered promiscuous mode [ 565.618641][T20822] pimreg3: entered allmulticast mode [ 565.637995][T20726] bridge0: port 2(bridge_slave_1) entered blocking state [ 565.674392][T20726] bridge0: port 2(bridge_slave_1) entered disabled state [ 565.681926][T20726] bridge_slave_1: entered allmulticast mode [ 565.719483][T20726] bridge_slave_1: entered promiscuous mode [ 565.768451][T20827] ip6tnl1: entered allmulticast mode [ 565.798569][T20830] sctp: [Deprecated]: syz.4.4177 (pid 20830) Use of struct sctp_assoc_value in delayed_ack socket option. [ 565.798569][T20830] Use struct sctp_sack_info instead [ 565.843220][T20835] netlink: 'syz.2.4178': attribute type 10 has an invalid length. [ 565.879454][T20835] netlink: 40 bytes leftover after parsing attributes in process `syz.2.4178'. [ 565.907670][T20726] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 565.950505][T20726] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 566.017397][T20835] veth0_vlan: entered allmulticast mode [ 566.064142][T20835] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 566.249141][T20726] team0: Port device team_slave_0 added [ 566.278896][T20726] team0: Port device team_slave_1 added [ 566.328532][T20854] netlink: 12 bytes leftover after parsing attributes in process `syz.4.4185'. [ 566.355021][T20726] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 566.382607][T20726] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.424313][T20726] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 566.480075][T20726] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 566.498430][T20726] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 566.526813][T20726] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 566.548880][T20858] erspan1: entered promiscuous mode [ 566.556599][T20858] erspan1: entered allmulticast mode [ 566.637085][T20726] hsr_slave_0: entered promiscuous mode [ 566.652341][T20726] hsr_slave_1: entered promiscuous mode [ 566.668081][T20726] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 566.686099][T20726] Cannot create hsr debugfs directory [ 566.885604][T20866] openvswitch: netlink: Actions may not be safe on all matching packets [ 566.895617][T20866] netlink: 68 bytes leftover after parsing attributes in process `syz.2.4188'. [ 567.056283][T20869] netlink: 1284 bytes leftover after parsing attributes in process `syz.2.4189'. [ 567.074118][T20869] openvswitch: netlink: Missing key (keys=40, expected=80) [ 567.316480][T20875] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4192'. [ 567.441031][T20875] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.515297][ T9882] Bluetooth: hci4: command tx timeout [ 567.598725][T20875] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.758703][T20875] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 567.825208][T20882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 567.928051][T20875] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 568.071267][T20726] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 568.121685][T20726] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 568.148427][T20726] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 568.171962][T20875] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.183286][T20726] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 568.269511][T20875] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.312800][T20875] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.352291][T20875] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 568.529992][T20726] 8021q: adding VLAN 0 to HW filter on device bond0 [ 568.546944][T20900] netlink: 'syz.4.4199': attribute type 2 has an invalid length. [ 568.559258][T20726] 8021q: adding VLAN 0 to HW filter on device team0 [ 568.572846][ T6319] bridge0: port 1(bridge_slave_0) entered blocking state [ 568.580138][ T6319] bridge0: port 1(bridge_slave_0) entered forwarding state [ 568.620662][ T6319] bridge0: port 2(bridge_slave_1) entered blocking state [ 568.628344][ T6319] bridge0: port 2(bridge_slave_1) entered forwarding state [ 568.652179][T20900] : entered promiscuous mode [ 568.778861][T20909] set match dimension is over the limit! [ 568.841440][T20909] pim6reg: entered allmulticast mode [ 569.030122][T20919] netlink: 68 bytes leftover after parsing attributes in process `syz.4.4204'. [ 569.125423][T20726] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 569.347090][T20932] tipc: Started in network mode [ 569.352059][T20932] tipc: Node identity 7, cluster identity 4711 [ 569.359168][T20932] tipc: Node number set to 7 [ 569.364748][T20932] tipc: Cannot configure node identity twice [ 569.425098][T20938] netlink: 7084 bytes leftover after parsing attributes in process `syz.2.4210'. [ 569.605465][ T9882] Bluetooth: hci4: command 0x0419 tx timeout [ 569.664906][T20946] netlink: 4 bytes leftover after parsing attributes in process `syz.1.4212'. [ 569.809650][T20957] gtp0: entered promiscuous mode [ 569.847277][T20726] veth0_vlan: entered promiscuous mode [ 569.879742][T20726] veth1_vlan: entered promiscuous mode [ 569.962547][T20726] veth0_macvtap: entered promiscuous mode [ 570.013782][T20726] veth1_macvtap: entered promiscuous mode [ 570.061599][T20726] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 570.079118][T20726] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 570.091900][T20726] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 570.124237][T20966] netlink: 'syz.1.4217': attribute type 29 has an invalid length. [ 570.142652][T20965] netlink: 'syz.0.4218': attribute type 1 has an invalid length. [ 570.174917][T20965] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 570.272045][T20965] netlink: 36 bytes leftover after parsing attributes in process `syz.0.4218'. [ 570.373517][T20976] netlink: 1280 bytes leftover after parsing attributes in process `syz.0.4220'. [ 570.386589][T20976] openvswitch: netlink: Flow actions attr not present in new flow. [ 570.672142][T20994] Cannot find del_set index 4 as target [ 570.757598][T21000] netlink: 'syz.2.4223': attribute type 21 has an invalid length. [ 570.853239][T21003] tipc: Enabling of bearer <Þ|i³:æ> rejected, media not registered [ 571.686366][T21019] dummy0: vlans aren't supported yet for dev_uc|mc_add() [ 571.695889][T21018] netlink: 28 bytes leftover after parsing attributes in process `syz.2.4231'. [ 571.859309][T21023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4233'. [ 571.879735][T21020] netlink: 12 bytes leftover after parsing attributes in process `syz.2.4231'. [ 571.947007][T21023] netlink: 8 bytes leftover after parsing attributes in process `syz.0.4233'. [ 572.124459][ T3015] bridge_slave_1: left allmulticast mode [ 572.159230][ T3015] bridge_slave_1: left promiscuous mode [ 572.177299][ T3015] bridge0: port 2(bridge_slave_1) entered disabled state [ 572.216863][ T3015] bridge_slave_0: left allmulticast mode [ 572.222735][ T3015] bridge_slave_0: left promiscuous mode [ 572.244442][ T3015] bridge0: port 1(bridge_slave_0) entered disabled state [ 572.356656][ T9882] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 572.368388][ T9882] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 572.378159][ T9882] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 572.407126][ T9882] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 572.417876][ T9882] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 572.425940][ T9882] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 572.588562][T21043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4240'. [ 572.624727][T21043] netlink: 8 bytes leftover after parsing attributes in process `syz.2.4240'. [ 573.054527][ T3015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 573.067308][ T3015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 573.080906][ T3015] bond0 (unregistering): Released all slaves [ 573.164232][T21034] lo speed is unknown, defaulting to 1000 [ 573.334078][T21058] netlink: 24 bytes leftover after parsing attributes in process `syz.4.4242'. [ 573.356013][ T3015] hsr_slave_0: left promiscuous mode [ 573.364320][ T3015] hsr_slave_1: left promiscuous mode [ 573.378487][ T3015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 573.427576][ T3015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.483745][ T3015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.556689][ T3015] veth1_macvtap: left promiscuous mode [ 573.562375][ T3015] veth0_macvtap: left promiscuous mode [ 573.574428][ T3015] veth1_vlan: left promiscuous mode [ 573.596639][ T3015] veth0_vlan: left promiscuous mode [ 574.041589][T21087] netlink: 64 bytes leftover after parsing attributes in process `syz.0.4248'. [ 574.486226][ T5148] Bluetooth: hci4: command tx timeout [ 574.579272][ T3015] team0 (unregistering): Port device team_slave_1 removed [ 574.650237][ T3015] team0 (unregistering): Port device team_slave_0 removed [ 575.641084][T21034] chnl_net:caif_netlink_parms(): no params data found [ 575.739946][T21098] netlink: 'syz.2.4252': attribute type 1 has an invalid length. [ 575.764242][T21098] netlink: 4 bytes leftover after parsing attributes in process `syz.2.4252'. [ 575.997618][T21034] bridge0: port 1(bridge_slave_0) entered blocking state [ 576.051968][T21034] bridge0: port 1(bridge_slave_0) entered disabled state [ 576.084537][T21034] bridge_slave_0: entered allmulticast mode [ 576.104388][T21034] bridge_slave_0: entered promiscuous mode [ 576.131447][T21034] bridge0: port 2(bridge_slave_1) entered blocking state [ 576.156120][T21034] bridge0: port 2(bridge_slave_1) entered disabled state [ 576.163678][T21034] bridge_slave_1: entered allmulticast mode [ 576.176347][T21034] bridge_slave_1: entered promiscuous mode [ 576.236965][T21121] IPv6: NLM_F_CREATE should be specified when creating new route [ 576.273508][T21034] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 576.311711][T21034] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 576.545446][T21138] netlink: 5 bytes leftover after parsing attributes in process `syz.1.4262'. [ 576.563840][ T5148] Bluetooth: hci4: command tx timeout [ 576.630194][T21034] team0: Port device team_slave_0 added [ 576.641273][T21034] team0: Port device team_slave_1 added [ 576.726725][T21141] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000003: 0000 [#1] PREEMPT SMP KASAN PTI [ 576.739613][T21141] KASAN: null-ptr-deref in range [0x0000000000000018-0x000000000000001f] [ 576.748245][T21141] CPU: 0 UID: 0 PID: 21141 Comm: syz.2.4261 Not tainted 6.14.0-rc1-syzkaller-00272-gae9b3c0e79bc #0 [ 576.759044][T21141] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 576.769206][T21141] RIP: 0010:__lock_acquire+0x6a/0x2100 [ 576.774721][T21141] Code: b6 04 30 84 c0 0f 85 f8 16 00 00 45 31 f6 83 3d bb c8 80 0e 00 0f 84 c8 13 00 00 89 54 24 60 89 5c 24 38 4c 89 f8 48 c1 e8 03 <80> 3c 30 00 74 12 4c 89 ff e8 18 37 8b 00 48 be 00 00 00 00 00 fc [ 576.794374][T21141] RSP: 0018:ffffc90004b6f870 EFLAGS: 00010006 [ 576.800906][T21141] RAX: 0000000000000003 RBX: 0000000000000000 RCX: 0000000000000000 [ 576.809069][T21141] RDX: 0000000000000000 RSI: dffffc0000000000 RDI: 0000000000000018 [ 576.817151][T21141] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000001 [ 576.825390][T21141] R10: dffffc0000000000 R11: fffffbfff2036aaf R12: ffff888028151e00 [ 576.833807][T21141] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000018 [ 576.841893][T21141] FS: 00007fcbd6dd56c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 576.850925][T21141] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 576.857706][T21141] CR2: 00007fc1df1e9d08 CR3: 00000000465ca000 CR4: 00000000003526f0 [ 576.865795][T21141] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 576.874116][T21141] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 576.882124][T21141] Call Trace: [ 576.885421][T21141] [ 576.888369][T21141] ? __die_body+0x5f/0xb0 [ 576.892719][T21141] ? die_addr+0xb0/0xe0 [ 576.897045][T21141] ? exc_general_protection+0x3dd/0x5d0 [ 576.902628][T21141] ? asm_exc_general_protection+0x26/0x30 [ 576.908463][T21141] ? __lock_acquire+0x6a/0x2100 [ 576.913334][T21141] ? mark_lock+0x9a/0x360 [ 576.917681][T21141] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 576.923741][T21141] lock_acquire+0x1ed/0x550 [ 576.928270][T21141] ? add_wait_queue+0x46/0x180 [ 576.933227][T21141] ? __pfx_lock_acquire+0x10/0x10 [ 576.938287][T21141] ? queue_work_on+0x25f/0x380 [ 576.943412][T21141] ? __pfx_queue_work_on+0x10/0x10 [ 576.948542][T21141] ? __local_bh_enable_ip+0x168/0x200 [ 576.953926][T21141] ? preempt_schedule_notrace_thunk+0x1a/0x30 [ 576.960088][T21141] ? trace_irq_disable+0x2c/0x120 [ 576.965313][T21141] _raw_spin_lock_irqsave+0xd5/0x120 [ 576.970675][T21141] ? add_wait_queue+0x46/0x180 [ 576.975484][T21141] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 576.981392][T21141] ? virtio_transport_send_pkt_info+0xd13/0x10b0 [ 576.987740][T21141] add_wait_queue+0x46/0x180 [ 576.992350][T21141] virtio_transport_release+0x4c4/0xce0 [ 576.997998][T21141] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 577.004001][T21141] ? __pfx_virtio_transport_release+0x10/0x10 [ 577.010097][T21141] ? __pfx_woken_wake_function+0x10/0x10 [ 577.015754][T21141] ? __local_bh_enable_ip+0x168/0x200 [ 577.021138][T21141] ? __vsock_release+0xa4/0x4f0 [ 577.026015][T21141] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 577.031853][T21141] ? __vsock_release+0x3b/0x4f0 [ 577.036741][T21141] __vsock_release+0xf1/0x4f0 [ 577.041533][T21141] vsock_release+0x97/0x100 [ 577.046054][T21141] sock_close+0xbc/0x240 [ 577.050307][T21141] ? __pfx_sock_close+0x10/0x10 [ 577.055170][T21141] __fput+0x3e9/0x9f0 [ 577.059467][T21141] __x64_sys_close+0x7f/0x110 [ 577.064187][T21141] do_syscall_64+0xf3/0x230 [ 577.068809][T21141] ? clear_bhb_loop+0x35/0x90 [ 577.073675][T21141] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 577.079690][T21141] RIP: 0033:0x7fcbd8f8cde9 [ 577.084120][T21141] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 577.103831][T21141] RSP: 002b:00007fcbd6dd5038 EFLAGS: 00000246 ORIG_RAX: 0000000000000003 [ 577.112289][T21141] RAX: ffffffffffffffda RBX: 00007fcbd91a6160 RCX: 00007fcbd8f8cde9 [ 577.120275][T21141] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000009 [ 577.128261][T21141] RBP: 00007fcbd900e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 577.136252][T21141] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 577.144377][T21141] R13: 0000000000000000 R14: 00007fcbd91a6160 R15: 00007ffc17ecf4f8 [ 577.152541][T21141] [ 577.155566][T21141] Modules linked in: [ 577.159481][T21141] ---[ end trace 0000000000000000 ]--- [ 577.164938][T21141] RIP: 0010:__lock_acquire+0x6a/0x2100 [ 577.170457][T21141] Code: b6 04 30 84 c0 0f 85 f8 16 00 00 45 31 f6 83 3d bb c8 80 0e 00 0f 84 c8 13 00 00 89 54 24 60 89 5c 24 38 4c 89 f8 48 c1 e8 03 <80> 3c 30 00 74 12 4c 89 ff e8 18 37 8b 00 48 be 00 00 00 00 00 fc [ 577.190338][T21141] RSP: 0018:ffffc90004b6f870 EFLAGS: 00010006 [ 577.196418][T21141] RAX: 0000000000000003 RBX: 0000000000000000 RCX: 0000000000000000 [ 577.204408][T21141] RDX: 0000000000000000 RSI: dffffc0000000000 RDI: 0000000000000018 [ 577.212648][T21141] RBP: 0000000000000001 R08: 0000000000000001 R09: 0000000000000001 [ 577.221016][T21141] R10: dffffc0000000000 R11: fffffbfff2036aaf R12: ffff888028151e00 [ 577.229086][T21141] R13: 0000000000000000 R14: 0000000000000000 R15: 0000000000000018 [ 577.237267][T21141] FS: 00007fcbd6dd56c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 577.246378][T21141] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 577.252967][T21141] CR2: 00007fc1df1e9d08 CR3: 00000000465ca000 CR4: 00000000003526f0 [ 577.260957][T21141] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 577.268932][T21141] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 577.277015][T21141] Kernel panic - not syncing: Fatal exception [ 577.283700][T21141] Kernel Offset: disabled [ 577.288044][T21141] Rebooting in 86400 seconds..