last executing test programs: 51.525283128s ago: executing program 1 (id=1123): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48102, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000500)={0xffffffffffffffff}) write(r2, &(0x7f0000000100)="f165e6331208fcc8b765efff234a962272f8dd77fc763083e61f4528ef852ed193e580e3b52a6720bee31da47e08efdbf6e61beeb01a44f32d862bd80e15e4a8162453593aaf0a806974cc7741159ce58028c4e4748027ad7cc12730f458012ec173a92005d09847028233258c095b6a4ba94635cd2c270fc8268d197e6d2f7460e3ed8ea1bca7afd955ee", 0x8b) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1c1842, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, 0x0) (async) ioctl$TUNSETFILTEREBPF(r1, 0x800454e1, 0x0) write$cgroup_devices(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="1e0306003c5c980128846360864666702c1f"], 0xffdd) 51.242600411s ago: executing program 1 (id=1127): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@delchain={0x8c, 0x65, 0x8, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xffe0, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0xba41}, @filter_kind_options=@f_bpf={{0x8}, {0x58, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x1, 0x9, 0xb1, 0x7f}]}}, @TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1e0b, 0x1, 0x9, 0x10, 0xcf1, {0x3, 0x0, 0x7c2, 0x0, 0x6, 0xffffffff}, {0x6, 0x1, 0x7, 0x79, 0x3, 0x4064}, 0x1, 0x80, 0x3341}}]}]}}]}, 0x8c}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001c40)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000600)="a90900000000746400006277000000003552bde5c064c6", 0x17}, {&(0x7f0000000640)}], 0x2}}], 0x1, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x2d0, 0x0, 0x7203, 0x148, 0x0, 0x148, 0x268, 0x240, 0x240, 0x268, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x4}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0xa8, 0x108, 0x0, {}, [@common=@unspec=@quota={{0x38}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r2, &(0x7f0000000400)={&(0x7f0000000540)={0xa, 0x4e23, 0x1000000080000, @remote, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000029000000360000002c0000000000000018000000000000002900000036000000000000000000000089c2a872f3b7894eaa6782a5ab5b74804f3051de70917193ec338a18c20a560f2662ae8f93e486749450d0ef718d5a865d3f23d4356b3bf25955396eb5e5c0db77489cf4c55b7876fe734aff31c4cde5d02268e6f672cbe5532999bb20184d95eb97b40a43e910c1b32688ef41786977c9d29ff54a39cc41ac195a07b66f8744ce56bed09fd6eaabc24c9cdd5b0c702d306e4f212d9face8400dda66c89ae0d89af6a4e397e1bc3eba3ead0de32b2338025bfb10af339d15b2678595"], 0x30}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xec22}]}}}}}}}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x28, 0x0, 0x7, 0x301, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_emit_ethernet(0xf99, &(0x7f0000003780)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0xf63, 0x3a, 0x0, @private2, @mcast2, {[@hopopts={0x33, 0xd, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @enc_lim={0x4, 0x1, 0x4}, @calipso={0x7, 0x38, {0x1, 0xc, 0xfe, 0x200, [0x8000000000000001, 0x8, 0x7fff, 0xe, 0x5, 0x81]}}, @jumbo={0xc2, 0x4, 0x4}, @calipso={0x7, 0x20, {0x1, 0x6, 0x7, 0x91c, [0x1, 0x2, 0x5]}}]}, @srh={0x2f, 0x0, 0x4, 0x0, 0x0, 0x40, 0x80}, @dstopts={0xff, 0x23, '\x00', [@ra={0x5, 0x2, 0x7f}, @calipso={0x7, 0x8, {0x2, 0x0, 0x6, 0x4}}, @jumbo={0xc2, 0x4, 0xb}, @generic={0xf4, 0xff, "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"}, @pad1, @enc_lim={0x4, 0x1, 0x9}, @padn={0x1, 0x2, [0x0, 0x0]}]}, @fragment={0x8, 0x0, 0xff, 0x0, 0x0, 0x7, 0x68}, @dstopts={0x33, 0x1ad, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @generic={0xb, 0xd5a, "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"}]}], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0xff, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "17c17f0791710007008400"}}}}}}}, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001440)=ANY=[@ANYBLOB="140100002c0001ffffe000000000000001"], 0x114}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0xfe, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fec0000000000e1208000f0100810401a80016ea1f0006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000900)=r9, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) 42.484313074s ago: executing program 1 (id=1127): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@delchain={0x8c, 0x65, 0x8, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xffe0, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0xba41}, @filter_kind_options=@f_bpf={{0x8}, {0x58, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x1, 0x9, 0xb1, 0x7f}]}}, @TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1e0b, 0x1, 0x9, 0x10, 0xcf1, {0x3, 0x0, 0x7c2, 0x0, 0x6, 0xffffffff}, {0x6, 0x1, 0x7, 0x79, 0x3, 0x4064}, 0x1, 0x80, 0x3341}}]}]}}]}, 0x8c}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001c40)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000600)="a90900000000746400006277000000003552bde5c064c6", 0x17}, {&(0x7f0000000640)}], 0x2}}], 0x1, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x2d0, 0x0, 0x7203, 0x148, 0x0, 0x148, 0x268, 0x240, 0x240, 0x268, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x4}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0xa8, 0x108, 0x0, {}, [@common=@unspec=@quota={{0x38}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r2, &(0x7f0000000400)={&(0x7f0000000540)={0xa, 0x4e23, 0x1000000080000, @remote, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000029000000360000002c0000000000000018000000000000002900000036000000000000000000000089c2a872f3b7894eaa6782a5ab5b74804f3051de70917193ec338a18c20a560f2662ae8f93e486749450d0ef718d5a865d3f23d4356b3bf25955396eb5e5c0db77489cf4c55b7876fe734aff31c4cde5d02268e6f672cbe5532999bb20184d95eb97b40a43e910c1b32688ef41786977c9d29ff54a39cc41ac195a07b66f8744ce56bed09fd6eaabc24c9cdd5b0c702d306e4f212d9face8400dda66c89ae0d89af6a4e397e1bc3eba3ead0de32b2338025bfb10af339d15b2678595"], 0x30}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xec22}]}}}}}}}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x28, 0x0, 0x7, 0x301, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_emit_ethernet(0xf99, &(0x7f0000003780)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0xf63, 0x3a, 0x0, @private2, @mcast2, {[@hopopts={0x33, 0xd, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @enc_lim={0x4, 0x1, 0x4}, @calipso={0x7, 0x38, {0x1, 0xc, 0xfe, 0x200, [0x8000000000000001, 0x8, 0x7fff, 0xe, 0x5, 0x81]}}, @jumbo={0xc2, 0x4, 0x4}, @calipso={0x7, 0x20, {0x1, 0x6, 0x7, 0x91c, [0x1, 0x2, 0x5]}}]}, @srh={0x2f, 0x0, 0x4, 0x0, 0x0, 0x40, 0x80}, @dstopts={0xff, 0x23, '\x00', [@ra={0x5, 0x2, 0x7f}, @calipso={0x7, 0x8, {0x2, 0x0, 0x6, 0x4}}, @jumbo={0xc2, 0x4, 0xb}, @generic={0xf4, 0xff, "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"}, @pad1, @enc_lim={0x4, 0x1, 0x9}, @padn={0x1, 0x2, [0x0, 0x0]}]}, @fragment={0x8, 0x0, 0xff, 0x0, 0x0, 0x7, 0x68}, @dstopts={0x33, 0x1ad, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @generic={0xb, 0xd5a, "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"}]}], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0xff, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "17c17f0791710007008400"}}}}}}}, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001440)=ANY=[@ANYBLOB="140100002c0001ffffe000000000000001"], 0x114}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0xfe, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fec0000000000e1208000f0100810401a80016ea1f0006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000900)=r9, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) 31.501089605s ago: executing program 1 (id=1127): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@delchain={0x8c, 0x65, 0x8, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xffe0, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0xba41}, @filter_kind_options=@f_bpf={{0x8}, {0x58, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x1, 0x9, 0xb1, 0x7f}]}}, @TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1e0b, 0x1, 0x9, 0x10, 0xcf1, {0x3, 0x0, 0x7c2, 0x0, 0x6, 0xffffffff}, {0x6, 0x1, 0x7, 0x79, 0x3, 0x4064}, 0x1, 0x80, 0x3341}}]}]}}]}, 0x8c}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001c40)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000600)="a90900000000746400006277000000003552bde5c064c6", 0x17}, {&(0x7f0000000640)}], 0x2}}], 0x1, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x2d0, 0x0, 0x7203, 0x148, 0x0, 0x148, 0x268, 0x240, 0x240, 0x268, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x4}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0xa8, 0x108, 0x0, {}, [@common=@unspec=@quota={{0x38}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r2, &(0x7f0000000400)={&(0x7f0000000540)={0xa, 0x4e23, 0x1000000080000, @remote, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000029000000360000002c0000000000000018000000000000002900000036000000000000000000000089c2a872f3b7894eaa6782a5ab5b74804f3051de70917193ec338a18c20a560f2662ae8f93e486749450d0ef718d5a865d3f23d4356b3bf25955396eb5e5c0db77489cf4c55b7876fe734aff31c4cde5d02268e6f672cbe5532999bb20184d95eb97b40a43e910c1b32688ef41786977c9d29ff54a39cc41ac195a07b66f8744ce56bed09fd6eaabc24c9cdd5b0c702d306e4f212d9face8400dda66c89ae0d89af6a4e397e1bc3eba3ead0de32b2338025bfb10af339d15b2678595"], 0x30}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xec22}]}}}}}}}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x28, 0x0, 0x7, 0x301, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_emit_ethernet(0xf99, &(0x7f0000003780)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0xf63, 0x3a, 0x0, @private2, @mcast2, {[@hopopts={0x33, 0xd, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @enc_lim={0x4, 0x1, 0x4}, @calipso={0x7, 0x38, {0x1, 0xc, 0xfe, 0x200, [0x8000000000000001, 0x8, 0x7fff, 0xe, 0x5, 0x81]}}, @jumbo={0xc2, 0x4, 0x4}, @calipso={0x7, 0x20, {0x1, 0x6, 0x7, 0x91c, [0x1, 0x2, 0x5]}}]}, @srh={0x2f, 0x0, 0x4, 0x0, 0x0, 0x40, 0x80}, @dstopts={0xff, 0x23, '\x00', [@ra={0x5, 0x2, 0x7f}, @calipso={0x7, 0x8, {0x2, 0x0, 0x6, 0x4}}, @jumbo={0xc2, 0x4, 0xb}, @generic={0xf4, 0xff, "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"}, @pad1, @enc_lim={0x4, 0x1, 0x9}, @padn={0x1, 0x2, [0x0, 0x0]}]}, @fragment={0x8, 0x0, 0xff, 0x0, 0x0, 0x7, 0x68}, @dstopts={0x33, 0x1ad, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @generic={0xb, 0xd5a, "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"}]}], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0xff, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "17c17f0791710007008400"}}}}}}}, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001440)=ANY=[@ANYBLOB="140100002c0001ffffe000000000000001"], 0x114}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0xfe, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fec0000000000e1208000f0100810401a80016ea1f0006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000900)=r9, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) 20.517195071s ago: executing program 1 (id=1127): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@delchain={0x8c, 0x65, 0x8, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xffe0, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0xba41}, @filter_kind_options=@f_bpf={{0x8}, {0x58, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x1, 0x9, 0xb1, 0x7f}]}}, @TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1e0b, 0x1, 0x9, 0x10, 0xcf1, {0x3, 0x0, 0x7c2, 0x0, 0x6, 0xffffffff}, {0x6, 0x1, 0x7, 0x79, 0x3, 0x4064}, 0x1, 0x80, 0x3341}}]}]}}]}, 0x8c}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001c40)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000600)="a90900000000746400006277000000003552bde5c064c6", 0x17}, {&(0x7f0000000640)}], 0x2}}], 0x1, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x2d0, 0x0, 0x7203, 0x148, 0x0, 0x148, 0x268, 0x240, 0x240, 0x268, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x4}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0xa8, 0x108, 0x0, {}, [@common=@unspec=@quota={{0x38}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r2, &(0x7f0000000400)={&(0x7f0000000540)={0xa, 0x4e23, 0x1000000080000, @remote, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000029000000360000002c0000000000000018000000000000002900000036000000000000000000000089c2a872f3b7894eaa6782a5ab5b74804f3051de70917193ec338a18c20a560f2662ae8f93e486749450d0ef718d5a865d3f23d4356b3bf25955396eb5e5c0db77489cf4c55b7876fe734aff31c4cde5d02268e6f672cbe5532999bb20184d95eb97b40a43e910c1b32688ef41786977c9d29ff54a39cc41ac195a07b66f8744ce56bed09fd6eaabc24c9cdd5b0c702d306e4f212d9face8400dda66c89ae0d89af6a4e397e1bc3eba3ead0de32b2338025bfb10af339d15b2678595"], 0x30}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xec22}]}}}}}}}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x28, 0x0, 0x7, 0x301, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_emit_ethernet(0xf99, &(0x7f0000003780)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0xf63, 0x3a, 0x0, @private2, @mcast2, {[@hopopts={0x33, 0xd, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @enc_lim={0x4, 0x1, 0x4}, @calipso={0x7, 0x38, {0x1, 0xc, 0xfe, 0x200, [0x8000000000000001, 0x8, 0x7fff, 0xe, 0x5, 0x81]}}, @jumbo={0xc2, 0x4, 0x4}, @calipso={0x7, 0x20, {0x1, 0x6, 0x7, 0x91c, [0x1, 0x2, 0x5]}}]}, @srh={0x2f, 0x0, 0x4, 0x0, 0x0, 0x40, 0x80}, @dstopts={0xff, 0x23, '\x00', [@ra={0x5, 0x2, 0x7f}, @calipso={0x7, 0x8, {0x2, 0x0, 0x6, 0x4}}, @jumbo={0xc2, 0x4, 0xb}, @generic={0xf4, 0xff, "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"}, @pad1, @enc_lim={0x4, 0x1, 0x9}, @padn={0x1, 0x2, [0x0, 0x0]}]}, @fragment={0x8, 0x0, 0xff, 0x0, 0x0, 0x7, 0x68}, @dstopts={0x33, 0x1ad, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @generic={0xb, 0xd5a, "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"}]}], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0xff, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "17c17f0791710007008400"}}}}}}}, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001440)=ANY=[@ANYBLOB="140100002c0001ffffe000000000000001"], 0x114}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0xfe, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fec0000000000e1208000f0100810401a80016ea1f0006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000900)=r9, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) 10.214802793s ago: executing program 1 (id=1127): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000000)=@delchain={0x8c, 0x65, 0x8, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {}, {}, {0xffe0, 0xd}}, [@TCA_CHAIN={0x8, 0xb, 0xba41}, @filter_kind_options=@f_bpf={{0x8}, {0x58, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x1}, {0xc, 0x5, [{0x1, 0x9, 0xb1, 0x7f}]}}, @TCA_BPF_POLICE={0x40, 0x2, [@TCA_POLICE_TBF={0x3c, 0x1, {0x1e0b, 0x1, 0x9, 0x10, 0xcf1, {0x3, 0x0, 0x7c2, 0x0, 0x6, 0xffffffff}, {0x6, 0x1, 0x7, 0x79, 0x3, 0x4064}, 0x1, 0x80, 0x3341}}]}]}}]}, 0x8c}}, 0x0) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000001c40)=[{{&(0x7f0000000080)={0x2, 0x0, @remote}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000600)="a90900000000746400006277000000003552bde5c064c6", 0x17}, {&(0x7f0000000640)}], 0x2}}], 0x1, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000006c0)=@raw={'raw\x00', 0x4001, 0x3, 0x2d0, 0x0, 0x7203, 0x148, 0x0, 0x148, 0x268, 0x240, 0x240, 0x268, 0x240, 0x7fffffe, 0x0, {[{{@uncond, 0x0, 0xd0, 0x130, 0x0, {}, [@common=@unspec=@devgroup={{0x38}, {0x4}}, @inet=@rpfilter={{0x28}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0xa8, 0x108, 0x0, {}, [@common=@unspec=@quota={{0x38}}]}, @common=@CLUSTERIP={0x60, 'CLUSTERIP\x00', 0x0, {0x0, @local}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x330) r1 = socket(0x10, 0x803, 0x0) sendto(r1, &(0x7f0000000740)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r2, 0x29, 0x20, &(0x7f00000000c0)={@mcast1, 0x800, 0x0, 0x103, 0x1}, 0x20) setsockopt$inet6_int(r2, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x1, 0x4) sendmsg$inet6(r2, &(0x7f0000000400)={&(0x7f0000000540)={0xa, 0x4e23, 0x1000000080000, @remote, 0x3}, 0x1c, 0x0, 0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="180000000000000029000000360000002c0000000000000018000000000000002900000036000000000000000000000089c2a872f3b7894eaa6782a5ab5b74804f3051de70917193ec338a18c20a560f2662ae8f93e486749450d0ef718d5a865d3f23d4356b3bf25955396eb5e5c0db77489cf4c55b7876fe734aff31c4cde5d02268e6f672cbe5532999bb20184d95eb97b40a43e910c1b32688ef41786977c9d29ff54a39cc41ac195a07b66f8744ce56bed09fd6eaabc24c9cdd5b0c702d306e4f212d9face8400dda66c89ae0d89af6a4e397e1bc3eba3ead0de32b2338025bfb10af339d15b2678595"], 0x30}, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r3) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r4, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000040)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0xc2, 0x0, 0x0, 0x0, {[@mss={0x2, 0x4, 0xec22}]}}}}}}}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000380)={0x28, 0x0, 0x7, 0x301, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFACCT_FLAGS={0x8, 0x5, 0x1, 0x0, 0x2}, @NFACCT_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) syz_emit_ethernet(0xf99, &(0x7f0000003780)={@local, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "e400ff", 0xf63, 0x3a, 0x0, @private2, @mcast2, {[@hopopts={0x33, 0xd, '\x00', [@jumbo={0xc2, 0x4, 0x5}, @enc_lim={0x4, 0x1, 0x4}, @calipso={0x7, 0x38, {0x1, 0xc, 0xfe, 0x200, [0x8000000000000001, 0x8, 0x7fff, 0xe, 0x5, 0x81]}}, @jumbo={0xc2, 0x4, 0x4}, @calipso={0x7, 0x20, {0x1, 0x6, 0x7, 0x91c, [0x1, 0x2, 0x5]}}]}, @srh={0x2f, 0x0, 0x4, 0x0, 0x0, 0x40, 0x80}, @dstopts={0xff, 0x23, '\x00', [@ra={0x5, 0x2, 0x7f}, @calipso={0x7, 0x8, {0x2, 0x0, 0x6, 0x4}}, @jumbo={0xc2, 0x4, 0xb}, @generic={0xf4, 0xff, "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"}, @pad1, @enc_lim={0x4, 0x1, 0x9}, @padn={0x1, 0x2, [0x0, 0x0]}]}, @fragment={0x8, 0x0, 0xff, 0x0, 0x0, 0x7, 0x68}, @dstopts={0x33, 0x1ad, '\x00', [@hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @generic={0xb, 0xd5a, "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"}]}], @param_prob={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, '\x00', 0x0, 0x11, 0xff, @empty, @ipv4={'\x00', '\xff\xff', @multicast1}, [], "17c17f0791710007008400"}}}}}}}, 0x0) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000001440)=ANY=[@ANYBLOB="140100002c0001ffffe000000000000001"], 0x114}], 0x1}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000080)={0x0, 0xfe, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b9040a1d08020a000000040000a118000200fec0000000000e1208000f0100810401a80016ea1f0006400303000806600cfab94dcf5c0461c1d67f6f94007134cf6ee08002a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, 0x2}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r10 = socket$kcm(0x11, 0x200000000000002, 0x300) setsockopt$sock_attach_bpf(r10, 0x1, 0x32, &(0x7f0000000900)=r9, 0x4) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) 1.381678466s ago: executing program 4 (id=1626): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000ffff0018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000280), 0x75, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000000)='workqueue_queue_work\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 1.193551521s ago: executing program 4 (id=1629): bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000002000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000f00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.13211592s ago: executing program 3 (id=1631): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x4, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000020b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000006c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f00000008c0)='page_pool_state_hold\x00', r2}, 0x10) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r1, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.001598746s ago: executing program 4 (id=1633): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000640), &(0x7f0000000740), 0x75, r1}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000818110000", @ANYRES32=r1], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r2}, 0x10) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000940)={&(0x7f0000000640)='console\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) 958.456883ms ago: executing program 3 (id=1634): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000002300)={&(0x7f0000001040)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x4, [@enum={0x2}]}, {0x0, [0x0, 0x5f]}}, &(0x7f00000011c0)=""/205, 0x28, 0xcd, 0x1, 0x0, 0x0, @void, @value}, 0x28) 935.23411ms ago: executing program 0 (id=1635): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b000000080000000c000000ffffffff01"], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000140), 0x80, r0}, 0x38) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x9, 0x2000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r2}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f0000000280)) 821.55405ms ago: executing program 3 (id=1636): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb01001800000000000000240000002400000002000000000000000000000400000003000000000000000604000000000000000200000d020000000000"], 0xffffffffffffffff, 0x3e, 0xb1, 0x2, 0x0, 0x0, @void, @value}, 0x20) 821.279891ms ago: executing program 2 (id=1637): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="9feb01001800000000000000200000002000000007000000030000000100000f040000000a0000000000000000a475000000000c00000000000000612e"], &(0x7f0000000f80)=""/4115, 0x3f, 0x1013, 0x1, 0x0, 0x0, @void, @value}, 0x28) 810.405191ms ago: executing program 2 (id=1638): socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000200)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r0, &(0x7f0000000580)={&(0x7f00000002c0)=@nameseq={0x1e, 0x1, 0x2, {0x43, 0x2, 0x3}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x8000}, 0x0) 798.121833ms ago: executing program 3 (id=1639): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x1e, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r1}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f00000006c0)) 693.664736ms ago: executing program 2 (id=1640): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x50}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r0}, 0x10) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000280)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000200b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='fib_table_lookup\x00', r2}, 0x18) 693.320739ms ago: executing program 0 (id=1641): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, 0x0, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f00000005c0)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000fcffffff850000007300000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x500d, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 669.797649ms ago: executing program 4 (id=1642): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000140)='cgroup.procs\x00', 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000080)='contention_end\x00', r3}, 0x10) write$cgroup_pid(r1, &(0x7f0000000380), 0x12) 543.78645ms ago: executing program 2 (id=1643): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r0, 0xc004743e, 0x20001401) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0xc, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000080021850000006d00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r2}, 0xd) close(r0) 497.681887ms ago: executing program 0 (id=1644): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000006918000000000000000000791020000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 497.104242ms ago: executing program 3 (id=1645): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000010000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000260018110000", @ANYRES32, @ANYBLOB="0000000000000000b7"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @broadcast}) 496.639831ms ago: executing program 4 (id=1646): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, 0x0, &(0x7f00000002c0)}, 0x20) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000500)='page_pool_state_release\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f00000007c0)=ANY=[@ANYBLOB="18020000000000000000000000000000850000002c00000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r2, 0x27, 0x0, 0x0, 0x0, 0x0, 0x0, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 349.895908ms ago: executing program 0 (id=1647): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=@base={0xb, 0x5, 0x2, 0x4, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x80000001}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x2, @void, @value}, 0x94) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, 0x0, 0x38}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='page_pool_release\x00', r1}, 0x10) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x6, 0x7, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000003000000850000008600000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x21, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000002c0)={r3}, 0x69) 314.546499ms ago: executing program 4 (id=1648): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018010000646c6c2500000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000040)='qdisc_destroy\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000140)={'pim6reg1\x00', 0x1}) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000100)={'pim6reg1\x00', @broadcast}) close(r1) 189.616259ms ago: executing program 0 (id=1649): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18090000000000000000000000000000850000006d0000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x18, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000040)='mm_page_alloc\x00', r0}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000180)={0xffffffffffffffff}) sendmsg(r1, &(0x7f0000000ac0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000b00)=ANY=[], 0x2008}, 0x20000844) 172.990713ms ago: executing program 2 (id=1650): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r1}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r2}, 0x10) 132.851171ms ago: executing program 3 (id=1651): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r0, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000067dfb4a518110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000060000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000880)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='timer_start\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000940)) 33.604843ms ago: executing program 2 (id=1652): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001070000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x502, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r2}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='module_request\x00', r1}, 0x10) socketpair(0x0, 0x0, 0x0, &(0x7f00000006c0)) 0s ago: executing program 0 (id=1653): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x5, 0x400, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4f, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000000000000000000004b64ffec850000006d000000850000000500000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r1}, 0x10) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000180)='tlb_flush\x00', r2}, 0x10) kernel console output (not intermixed with test programs): ewly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.798756][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.809101][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.820078][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.830572][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.842642][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.854824][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.875308][ T5835] veth0_macvtap: entered promiscuous mode [ 63.920546][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.922011][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.949223][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.954992][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.963867][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.977188][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.987459][ T5852] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.998409][ T5852] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.009231][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.020934][ T5835] veth1_macvtap: entered promiscuous mode [ 64.028373][ T5924] netlink: 12 bytes leftover after parsing attributes in process `syz.2.6'. [ 64.056171][ T5852] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.066130][ T5852] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.075405][ T5852] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.084815][ T5852] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.162088][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.178538][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.191096][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.201668][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.211523][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.222063][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.231898][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.242395][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.253688][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.280707][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.282309][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.299817][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.309885][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.311544][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.327834][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.337878][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.349279][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.359163][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.369794][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.380820][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.411605][ T5927] netlink: 256 bytes leftover after parsing attributes in process `syz.2.7'. [ 64.412075][ T5835] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.435439][ T5835] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.444345][ T5835] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.453651][ T5835] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.512852][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.563060][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.627838][ T5931] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.657115][ T5935] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 64.668525][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.680676][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.694092][ T5931] netlink: 'syz.1.2': attribute type 4 has an invalid length. [ 64.846200][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.861219][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.884701][ T5940] netlink: 8 bytes leftover after parsing attributes in process `syz.2.9'. [ 64.904039][ T5845] Bluetooth: hci2: command tx timeout [ 64.904943][ T5842] Bluetooth: hci0: command tx timeout [ 64.909555][ T53] Bluetooth: hci3: command tx timeout [ 64.940428][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.952522][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.966663][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.974607][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.983783][ T53] Bluetooth: hci1: command tx timeout [ 65.051424][ T5941] 8021q: adding VLAN 0 to HW filter on device bond1 [ 65.072666][ T5947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 65.083477][ T53] Bluetooth: hci4: command tx timeout [ 65.100543][ T5947] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 65.111876][ T5906] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.134927][ T5906] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.584726][ T5969] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.615801][ T5969] ieee802154 phy0 wpan0: encryption failed: -22 [ 65.709007][ T5983] atomic_op ffff888032026198 conn xmit_atomic 0000000000000000 [ 66.105878][ T5998] netlink: 8 bytes leftover after parsing attributes in process `syz.1.21'. [ 66.151157][ T6000] netlink: 88 bytes leftover after parsing attributes in process `syz.4.22'. [ 66.398333][ T6012] netlink: 8 bytes leftover after parsing attributes in process `syz.4.25'. [ 66.421154][ T6013] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20000 [ 66.695173][ T6026] Bluetooth: MGMT ver 1.23 [ 66.838291][ T6032] syz.1.32 uses obsolete (PF_INET,SOCK_PACKET) [ 66.943841][ T6036] A link change request failed with some changes committed already. Interface vlan0 may have been left with an inconsistent configuration, please check. [ 66.984067][ T53] Bluetooth: hci3: command tx timeout [ 66.984084][ T5842] Bluetooth: hci2: command tx timeout [ 66.984117][ T5842] Bluetooth: hci0: command tx timeout [ 67.003245][ T6045] netlink: 68 bytes leftover after parsing attributes in process `syz.0.35'. [ 67.063237][ T5842] Bluetooth: hci1: command tx timeout [ 67.143612][ T5842] Bluetooth: hci4: command tx timeout [ 67.205126][ T6052] netlink: 'syz.2.36': attribute type 30 has an invalid length. [ 67.303973][ T6055] netlink: 'syz.2.36': attribute type 30 has an invalid length. [ 67.350778][ T6059] netlink: 8 bytes leftover after parsing attributes in process `syz.1.40'. [ 68.439595][ T6100] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 68.484748][ T6100] vlan2: entered promiscuous mode [ 68.812396][ T6116] netlink: 'syz.0.54': attribute type 13 has an invalid length. [ 68.971927][ T6127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.984823][ T6127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.013020][ T6127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.024333][ T6127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.034288][ T6127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.052753][ T6127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.063840][ T6127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.075235][ T6127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.086010][ T6127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.096835][ T6127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.141126][ T6119] netlink: 'syz.1.55': attribute type 10 has an invalid length. [ 69.202320][ T6119] team0: Port device netdevsim0 added [ 69.236768][ T6130] netlink: 'syz.1.55': attribute type 10 has an invalid length. [ 69.280578][ T6130] team0: Port device netdevsim0 removed [ 69.307013][ T6130] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 69.328309][ T6129] __nla_validate_parse: 4 callbacks suppressed [ 69.328326][ T6129] netlink: 4 bytes leftover after parsing attributes in process `syz.0.57'. [ 69.539542][ T6152] netlink: 8 bytes leftover after parsing attributes in process `syz.0.61'. [ 69.590436][ T6152] netlink: 32 bytes leftover after parsing attributes in process `syz.0.61'. [ 69.676207][ T6152] gtp0: entered promiscuous mode [ 69.681213][ T6152] gtp0: entered allmulticast mode [ 69.689962][ T6152] Zero length message leads to an empty skb [ 69.739892][ T6149] netlink: 28 bytes leftover after parsing attributes in process `syz.4.60'. [ 69.755990][ T6164] netlink: 20 bytes leftover after parsing attributes in process `syz.2.66'. [ 69.780888][ T6159] netlink: 12 bytes leftover after parsing attributes in process `syz.1.65'. [ 69.941562][ T6169] netlink: 'syz.0.67': attribute type 1 has an invalid length. [ 69.961416][ T6169] netlink: 224 bytes leftover after parsing attributes in process `syz.0.67'. [ 70.357968][ T6200] netlink: 8 bytes leftover after parsing attributes in process `syz.2.73'. [ 70.367347][ T6198] netlink: 12 bytes leftover after parsing attributes in process `syz.1.75'. [ 70.369750][ T6200] netlink: 16 bytes leftover after parsing attributes in process `syz.2.73'. [ 70.931127][ T6225] warning: `syz.2.83' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 70.970862][ T6225] veth0_to_team: entered promiscuous mode [ 71.316422][ T6246] sctp: [Deprecated]: syz.4.89 (pid 6246) Use of int in max_burst socket option. [ 71.316422][ T6246] Use struct sctp_assoc_value instead [ 71.547121][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.895065][ T6271] syzkaller0: entered promiscuous mode [ 71.900732][ T6271] syzkaller0: entered allmulticast mode [ 73.703154][ T5842] Bluetooth: hci4: command tx timeout [ 73.935030][ C0] Illegal XDP return value 16128 on prog (id 34) dev bond_slave_0, expect packet loss! [ 74.795472][ T6361] __nla_validate_parse: 48 callbacks suppressed [ 74.795490][ T6361] netlink: 256 bytes leftover after parsing attributes in process `syz.2.126'. [ 75.126985][ T6377] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 75.386510][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.538169][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.634135][ T5933] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 75.786999][ T5845] Bluetooth: hci4: command tx timeout [ 75.834838][ T6387] netlink: 16 bytes leftover after parsing attributes in process `syz.0.136'. [ 75.844785][ T6387] netlink: 16 bytes leftover after parsing attributes in process `syz.0.136'. [ 75.884321][ T6390] smc: net device bond0 applied user defined pnetid SYZ0 [ 75.892520][ T6390] smc: net device bond0 erased user defined pnetid SYZ0 [ 76.028805][ T5885] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 76.224062][ T6407] netlink: 8 bytes leftover after parsing attributes in process `syz.3.142'. [ 76.683387][ T1200] cfg80211: failed to load regulatory.db [ 77.759027][ T6442] netdevsim netdevsim2 netdevsim0: set [1, 1] type 2 family 0 port 20000 - 0 [ 77.791737][ T6442] netdevsim netdevsim2 netdevsim1: set [1, 1] type 2 family 0 port 20000 - 0 [ 77.817571][ T6442] netdevsim netdevsim2 netdevsim2: set [1, 1] type 2 family 0 port 20000 - 0 [ 77.845288][ T6442] netdevsim netdevsim2 netdevsim3: set [1, 1] type 2 family 0 port 20000 - 0 [ 77.872402][ T6442] geneve2: entered promiscuous mode [ 77.893163][ T6442] geneve2: entered allmulticast mode [ 77.922823][ T6442] netdevsim netdevsim2 netdevsim0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 77.950044][ T6442] netdevsim netdevsim2 netdevsim1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 77.975304][ T6442] netdevsim netdevsim2 netdevsim2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 78.005414][ T6442] netdevsim netdevsim2 netdevsim3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 78.338916][ T6450] netlink: 16 bytes leftover after parsing attributes in process `syz.1.156'. [ 78.803878][ T6458] bond_slave_0: entered promiscuous mode [ 78.809823][ T6458] bond_slave_1: entered promiscuous mode [ 78.843782][ T6458] vlan2: entered promiscuous mode [ 78.873089][ T6458] bond0: entered promiscuous mode [ 78.903330][ T6458] bond0: left promiscuous mode [ 78.913793][ T6458] bond_slave_0: left promiscuous mode [ 78.919384][ T6458] bond_slave_1: left promiscuous mode [ 78.968036][ T6466] netlink: 20 bytes leftover after parsing attributes in process `syz.2.164'. [ 78.984820][ T6471] tun0: tun_chr_ioctl cmd 2147767511 [ 79.012363][ T6471] netlink: 4 bytes leftover after parsing attributes in process `syz.4.165'. [ 79.201137][ T6473] netlink: 28 bytes leftover after parsing attributes in process `syz.0.166'. [ 79.800984][ T6515] netlink: 8 bytes leftover after parsing attributes in process `syz.3.177'. [ 80.519637][ T6561] netlink: 'syz.2.190': attribute type 10 has an invalid length. [ 80.520330][ T6556] netlink: 60 bytes leftover after parsing attributes in process `syz.3.189'. [ 80.542805][ T6561] team0: Port device netdevsim0 added [ 80.661821][ T6567] netlink: 76 bytes leftover after parsing attributes in process `syz.0.193'. [ 80.739158][ T6566] netlink: 76 bytes leftover after parsing attributes in process `syz.0.193'. [ 80.798617][ T6577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.196'. [ 80.829030][ T6577] netlink: 8 bytes leftover after parsing attributes in process `syz.2.196'. [ 80.879757][ T6577] xt_bpf: check failed: parse error [ 81.321875][ T6603] vxcan3: entered promiscuous mode [ 81.340457][ T6603] vxcan3: entered allmulticast mode [ 81.391803][ T6609] netlink: 240 bytes leftover after parsing attributes in process `syz.0.206'. [ 81.429106][ T6609] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 81.477708][ T6615] netlink: 4 bytes leftover after parsing attributes in process `syz.4.208'. [ 81.529952][ T6614] netlink: 12 bytes leftover after parsing attributes in process `syz.4.208'. [ 81.647394][ T6626] netlink: 8 bytes leftover after parsing attributes in process `syz.1.211'. [ 81.788520][ T6632] netlink: 8 bytes leftover after parsing attributes in process `syz.0.214'. [ 81.929772][ T6643] netlink: 'syz.0.217': attribute type 1 has an invalid length. [ 81.940242][ T6643] nbd: error processing sock list [ 82.072321][ T6648] IPVS: set_ctl: invalid protocol: 43 10.1.1.0:20002 [ 82.271164][ T6664] gretap0: entered promiscuous mode [ 82.421723][ T6625] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 82.621179][ T6686] IPVS: set_ctl: invalid protocol: 11612 172.20.20.11:21 [ 82.681161][ T6684] bridge_slave_0: left allmulticast mode [ 82.689701][ T6684] bridge_slave_0: left promiscuous mode [ 82.724780][ T6684] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.758809][ T6684] bridge_slave_1: left allmulticast mode [ 82.765291][ T6684] bridge_slave_1: left promiscuous mode [ 82.771555][ T6684] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.793142][ T6684] bond0: (slave bond_slave_0): Releasing backup interface [ 82.807078][ T6684] bond0: (slave bond_slave_1): Releasing backup interface [ 82.842531][ T6684] team0: Port device team_slave_0 removed [ 82.856414][ T6684] team0: Port device team_slave_1 removed [ 82.863791][ T6684] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.871399][ T6684] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.881700][ T6684] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.890548][ T6684] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.078702][ T6713] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 83.720497][ T6748] sit0: entered promiscuous mode [ 83.755899][ T6748] netlink: 'syz.0.246': attribute type 1 has an invalid length. [ 84.515679][ T6794] IPv6: Can't replace route, no match found [ 84.898283][ T6820] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 85.071620][ T6820] netlink: 'syz.4.261': attribute type 10 has an invalid length. [ 85.101863][ T6820] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 85.137438][ T6820] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 85.720283][ T6835] __nla_validate_parse: 12 callbacks suppressed [ 85.720305][ T6835] netlink: 28 bytes leftover after parsing attributes in process `syz.0.266'. [ 85.747184][ T6835] netlink: 28 bytes leftover after parsing attributes in process `syz.0.266'. [ 86.622255][ T6901] netlink: 12 bytes leftover after parsing attributes in process `syz.0.284'. [ 86.699485][ T6900] netlink: 12 bytes leftover after parsing attributes in process `syz.4.283'. [ 87.250279][ T6915] netlink: 24 bytes leftover after parsing attributes in process `syz.0.288'. [ 87.719323][ T6935] netlink: 'syz.4.293': attribute type 2 has an invalid length. [ 87.771891][ T6935] netlink: 'syz.4.293': attribute type 2 has an invalid length. [ 87.813259][ T6935] netlink: 'syz.4.293': attribute type 2 has an invalid length. [ 87.821054][ T6935] netlink: 'syz.4.293': attribute type 2 has an invalid length. [ 87.873865][ T6935] netlink: 'syz.4.293': attribute type 1 has an invalid length. [ 87.881560][ T6935] netlink: 'syz.4.293': attribute type 2 has an invalid length. [ 87.922973][ T6935] netlink: 'syz.4.293': attribute type 1 has an invalid length. [ 88.102847][ T6950] netlink: 40 bytes leftover after parsing attributes in process `syz.4.297'. [ 88.237364][ T6950] tipc: Started in network mode [ 88.242353][ T6950] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 88.281892][ T6950] tipc: Enabled bearer , priority 10 [ 88.339797][ T6948] dccp_close: ABORT with 1268 bytes unread [ 88.670909][ T6979] netlink: 8 bytes leftover after parsing attributes in process `syz.4.303'. [ 88.848073][ T6993] netlink: 'syz.0.306': attribute type 3 has an invalid length. [ 88.874376][ T6996] netlink: 24 bytes leftover after parsing attributes in process `syz.4.305'. [ 88.946458][ T6985] netlink: 8 bytes leftover after parsing attributes in process `syz.4.305'. [ 88.947457][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.4.305'. [ 89.079982][ T6996] netlink: 'syz.4.305': attribute type 1 has an invalid length. [ 89.274330][ T5933] tipc: Node number set to 4269801488 [ 89.563366][ T7022] netlink: 'syz.3.313': attribute type 13 has an invalid length. [ 89.638487][ T6985] syz.4.305 (6985) used greatest stack depth: 17904 bytes left [ 89.804594][ T7029] sctp: [Deprecated]: syz.3.314 (pid 7029) Use of struct sctp_assoc_value in delayed_ack socket option. [ 89.804594][ T7029] Use struct sctp_sack_info instead [ 89.918595][ T7033] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 90.303858][ T7045] x_tables: duplicate underflow at hook 3 [ 90.509578][ T7045] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.801523][ T7045] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.957583][ T7045] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.255735][ T7045] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 91.450687][ T7045] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.580319][ T7045] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.625802][ T7045] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.627504][ T7128] __nla_validate_parse: 4 callbacks suppressed [ 91.627519][ T7128] netlink: 12 bytes leftover after parsing attributes in process `syz.4.331'. [ 91.740611][ T7045] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.961709][ T7146] netlink: 56 bytes leftover after parsing attributes in process `syz.0.334'. [ 92.066146][ T7159] netlink: 88 bytes leftover after parsing attributes in process `syz.4.338'. [ 92.192061][ T7159] netlink: 12 bytes leftover after parsing attributes in process `syz.4.338'. [ 92.291200][ T7159] netlink: 8 bytes leftover after parsing attributes in process `syz.4.338'. [ 92.408762][ T7180] netlink: 36 bytes leftover after parsing attributes in process `syz.2.341'. [ 92.655235][ T7203] netlink: 4 bytes leftover after parsing attributes in process `syz.2.348'. [ 92.831500][ T7198] netlink: 20 bytes leftover after parsing attributes in process `syz.4.345'. [ 92.831805][ T7212] netlink: 16 bytes leftover after parsing attributes in process `syz.2.348'. [ 93.048686][ T7234] netlink: 12 bytes leftover after parsing attributes in process `syz.3.350'. [ 93.049894][ T7230] sock: sock_timestamping_bind_phc: sock not bind to device [ 93.925731][ T7275] dvmrp5: entered allmulticast mode [ 93.941996][ T7277] dvmrp5: left allmulticast mode [ 94.315817][ T7294] validate_nla: 1 callbacks suppressed [ 94.315837][ T7294] netlink: 'syz.0.365': attribute type 10 has an invalid length. [ 94.407894][ T7294] team0: Device veth1_macvtap failed to register rx_handler [ 94.664778][ T7305] atomic_op ffff88807b5e9198 conn xmit_atomic 0000000000000000 [ 94.772695][ T7311] netlink: 'syz.4.369': attribute type 4 has an invalid length. [ 94.910954][ T7311] ax25_connect(): syz.4.369 uses autobind, please contact jreuter@yaina.de [ 95.484870][ T7341] pim6reg1: entered allmulticast mode [ 95.541757][ T7346] netlink: 'syz.4.378': attribute type 1 has an invalid length. [ 96.052085][ T7364] netlink: 'syz.1.381': attribute type 1 has an invalid length. [ 96.131708][ T7364] bond2: (slave xfrm1): The slave device specified does not support setting the MAC address [ 96.154320][ T7364] bond2: (slave xfrm1): Setting fail_over_mac to active for active-backup mode [ 96.205301][ T7364] bond2: (slave xfrm1): making interface the new active one [ 96.282635][ T7364] bond2: (slave xfrm1): Enslaving as an active interface with an up link [ 96.462706][ T7381] bond2 (unregistering): (slave xfrm1): Releasing backup interface [ 96.496463][ T7381] bond2 (unregistering): Released all slaves [ 96.795168][ T7392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.821086][ T7392] __nla_validate_parse: 9 callbacks suppressed [ 96.821104][ T7392] netlink: 20 bytes leftover after parsing attributes in process `syz.3.387'. [ 96.880575][ T7392] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 96.914103][ T7396] netlink: 12 bytes leftover after parsing attributes in process `syz.0.388'. [ 96.947412][ T7396] netlink: 36 bytes leftover after parsing attributes in process `syz.0.388'. [ 96.987050][ T7406] netlink: 12 bytes leftover after parsing attributes in process `syz.4.391'. [ 97.692821][ T7439] netlink: 164 bytes leftover after parsing attributes in process `syz.4.401'. [ 98.187678][ T7462] netlink: 40 bytes leftover after parsing attributes in process `syz.3.405'. [ 98.314689][ T7459] delete_channel: no stack [ 99.223391][ T7509] geneve2: entered promiscuous mode [ 99.236781][ T7509] geneve2: entered allmulticast mode [ 100.286107][ T7538] xt_policy: input policy not valid in POSTROUTING and OUTPUT [ 101.329397][ T7212] syz.2.348: vmalloc error: size 2101248, failed to allocated page array size 4104, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 101.347561][ T7212] CPU: 0 UID: 0 PID: 7212 Comm: syz.2.348 Not tainted 6.12.0-rc5-syzkaller-01164-gccb35037c48a #0 [ 101.358208][ T7212] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 101.368295][ T7212] Call Trace: [ 101.371579][ T7212] [ 101.374533][ T7212] dump_stack_lvl+0x241/0x360 [ 101.379274][ T7212] ? __pfx_dump_stack_lvl+0x10/0x10 [ 101.384594][ T7212] ? __pfx__printk+0x10/0x10 [ 101.389673][ T7212] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 101.396197][ T7212] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 101.402741][ T7212] warn_alloc+0x278/0x410 [ 101.407093][ T7212] ? __pfx_warn_alloc+0x10/0x10 [ 101.411990][ T7212] ? nf_tables_newset+0x1770/0x2ee0 [ 101.417212][ T7212] ? __get_vm_area_node+0x23d/0x270 [ 101.422517][ T7212] __vmalloc_node_range_noprof+0x691/0x13f0 [ 101.428438][ T7212] ? __kmalloc_cache_node_noprof+0x1d3/0x300 [ 101.434637][ T7212] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 101.441089][ T7212] ? nf_tables_newset+0x1770/0x2ee0 [ 101.446311][ T7212] ? __get_vm_area_node+0x23d/0x270 [ 101.451596][ T7212] __vmalloc_node_range_noprof+0x59c/0x13f0 [ 101.457625][ T7212] ? nf_tables_newset+0x1770/0x2ee0 [ 101.462854][ T7212] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 101.468630][ T7212] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 101.474986][ T7212] ? rcu_is_watching+0x15/0xb0 [ 101.479771][ T7212] ? trace_kmalloc+0x1f/0xd0 [ 101.484388][ T7212] ? __kmalloc_node_noprof+0x247/0x440 [ 101.489872][ T7212] ? __kvmalloc_node_noprof+0x72/0x190 [ 101.495348][ T7212] __kvmalloc_node_noprof+0x142/0x190 [ 101.500750][ T7212] ? nf_tables_newset+0x1770/0x2ee0 [ 101.505974][ T7212] nf_tables_newset+0x1770/0x2ee0 [ 101.511057][ T7212] ? __pfx_nf_tables_newset+0x10/0x10 [ 101.516458][ T7212] ? __pfx_lock_release+0x10/0x10 [ 101.521537][ T7212] ? __nla_parse+0x40/0x60 [ 101.526047][ T7212] nfnetlink_rcv+0x14dc/0x2ab0 [ 101.530933][ T7212] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 101.536167][ T7212] ? netlink_deliver_tap+0x2e/0x1b0 [ 101.541432][ T7212] ? skb_clone+0x240/0x390 [ 101.545870][ T7212] ? __pfx_lock_release+0x10/0x10 [ 101.551018][ T7212] ? netlink_deliver_tap+0x2e/0x1b0 [ 101.556267][ T7212] netlink_unicast+0x7f6/0x990 [ 101.561151][ T7212] ? __pfx_netlink_unicast+0x10/0x10 [ 101.566447][ T7212] ? __virt_addr_valid+0x183/0x530 [ 101.571656][ T7212] ? __check_object_size+0x48e/0x900 [ 101.577056][ T7212] netlink_sendmsg+0x8e4/0xcb0 [ 101.581841][ T7212] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.587178][ T7212] ? aa_sock_msg_perm+0x91/0x160 [ 101.592430][ T7212] ? __pfx_netlink_sendmsg+0x10/0x10 [ 101.597772][ T7212] __sock_sendmsg+0x221/0x270 [ 101.602713][ T7212] ____sys_sendmsg+0x52a/0x7e0 [ 101.607556][ T7212] ? __pfx_____sys_sendmsg+0x10/0x10 [ 101.612972][ T7212] __sys_sendmsg+0x292/0x380 [ 101.617607][ T7212] ? __pfx___sys_sendmsg+0x10/0x10 [ 101.622858][ T7212] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 101.629335][ T7212] ? do_syscall_64+0x100/0x230 [ 101.634315][ T7212] ? do_syscall_64+0xb6/0x230 [ 101.639091][ T7212] do_syscall_64+0xf3/0x230 [ 101.643638][ T7212] ? clear_bhb_loop+0x35/0x90 [ 101.648330][ T7212] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 101.654523][ T7212] RIP: 0033:0x7f006497e719 [ 101.659310][ T7212] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 101.679391][ T7212] RSP: 002b:00007f006583e038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 101.688224][ T7212] RAX: ffffffffffffffda RBX: 00007f0064b36058 RCX: 00007f006497e719 [ 101.696414][ T7212] RDX: 0000000000000000 RSI: 0000000020000440 RDI: 000000000000000c [ 101.704407][ T7212] RBP: 00007f00649f139e R08: 0000000000000000 R09: 0000000000000000 [ 101.712422][ T7212] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 101.720432][ T7212] R13: 0000000000000000 R14: 00007f0064b36058 R15: 00007ffca6a56e08 [ 101.728439][ T7212] [ 101.732687][ T7212] Mem-Info: [ 101.736506][ T7212] active_anon:10507 inactive_anon:0 isolated_anon:0 [ 101.736506][ T7212] active_file:1249 inactive_file:38198 isolated_file:0 [ 101.736506][ T7212] unevictable:768 dirty:170 writeback:0 [ 101.736506][ T7212] slab_reclaimable:9835 slab_unreclaimable:103125 [ 101.736506][ T7212] mapped:23816 shmem:7201 pagetables:799 [ 101.736506][ T7212] sec_pagetables:0 bounce:0 [ 101.736506][ T7212] kernel_misc_reclaimable:0 [ 101.736506][ T7212] free:1311873 free_pcp:1636 free_cma:0 [ 101.782527][ T7212] Node 0 active_anon:44228kB inactive_anon:0kB active_file:4996kB inactive_file:152716kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:97464kB dirty:676kB writeback:0kB shmem:29468kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10920kB pagetables:3196kB sec_pagetables:0kB all_unreclaimable? no [ 101.815747][ T7212] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 101.846765][ T7212] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 101.875299][ T7212] lowmem_reserve[]: 0 2463 2464 0 0 [ 101.881307][ T7212] Node 0 DMA32 free:1316332kB boost:0kB min:34184kB low:42728kB high:51272kB reserved_highatomic:0KB active_anon:49388kB inactive_anon:0kB active_file:4996kB inactive_file:152160kB unevictable:1536kB writepending:676kB present:3129332kB managed:2550484kB mlocked:0kB bounce:0kB free_pcp:6564kB local_pcp:5492kB free_cma:0kB [ 101.912744][ T7212] lowmem_reserve[]: 0 0 0 0 0 [ 101.917845][ T7212] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:556kB unevictable:0kB writepending:0kB present:1048580kB managed:620kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 101.944931][ T7212] lowmem_reserve[]: 0 0 0 0 0 [ 101.949811][ T7212] Node 1 Normal free:3907828kB boost:0kB min:55708kB low:69632kB high:83556kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:4kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB [ 101.979627][ T7212] lowmem_reserve[]: 0 0 0 0 0 [ 101.984946][ T7212] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 101.997909][ T7212] Node 0 DMA32: 2*4kB (ME) 10*8kB (UME) 12*16kB (E) 22*32kB (ME) 10*64kB (ME) 3*128kB (UME) 3*256kB (UME) 65*512kB (UME) 71*1024kB (UM) 28*2048kB (UM) 280*4096kB (UM) = 1312984kB [ 102.016144][ T7212] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 102.029577][ T7212] Node 1 Normal: 195*4kB (UME) 57*8kB (UME) 52*16kB (UME) 209*32kB (UME) 77*64kB (UME) 25*128kB (UE) 13*256kB (UME) 7*512kB (UM) 3*1024kB (UM) 1*2048kB (E) 947*4096kB (UM) = 3907828kB [ 102.048625][ T7212] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 102.058335][ T7212] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 102.069026][ T7212] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 102.079466][ T7212] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 102.089404][ T7212] 49306 total pagecache pages [ 102.094250][ T7212] 6 pages in swap cache [ 102.098421][ T7212] Free swap = 124728kB [ 102.102669][ T7212] Total swap = 124996kB [ 102.107077][ T7212] 2097051 pages RAM [ 102.110912][ T7212] 0 pages HighMem/MovableOnly [ 102.115791][ T7212] 427644 pages reserved [ 102.119976][ T7212] 0 pages cma reserved [ 102.334091][ T7569] lo speed is unknown, defaulting to 1000 [ 102.407456][ T7569] lo speed is unknown, defaulting to 1000 [ 102.419676][ T7569] lo speed is unknown, defaulting to 1000 [ 102.654611][ T7212] syz.2.348 (7212) used greatest stack depth: 15728 bytes left [ 102.771233][ T7578] dvmrp0: entered allmulticast mode [ 102.819683][ T7577] dvmrp0: left allmulticast mode [ 102.887460][ T7569] infiniband syz0: set active [ 102.896473][ T7569] infiniband syz0: added lo [ 102.946810][ T7583] netlink: 24 bytes leftover after parsing attributes in process `syz.1.438'. [ 103.022952][ T7580] netlink: 'syz.1.438': attribute type 21 has an invalid length. [ 103.044276][ T9] lo speed is unknown, defaulting to 1000 [ 103.085426][ T7569] RDS/IB: syz0: added [ 103.090077][ T7569] smc: adding ib device syz0 with port count 1 [ 103.098604][ T7569] smc: ib device syz0 port 1 has pnetid [ 103.106747][ T9] lo speed is unknown, defaulting to 1000 [ 103.118818][ T7569] lo speed is unknown, defaulting to 1000 [ 103.653636][ T7569] lo speed is unknown, defaulting to 1000 [ 103.958425][ T5888] IPVS: starting estimator thread 0... [ 104.054366][ T7630] IPVS: using max 25 ests per chain, 60000 per kthread [ 104.122740][ T7569] lo speed is unknown, defaulting to 1000 [ 104.231679][ T7642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.300821][ T7642] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.358576][ T7646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 104.455132][ T7657] netlink: 8 bytes leftover after parsing attributes in process `syz.4.459'. [ 104.488430][ T7657] netlink: 4 bytes leftover after parsing attributes in process `syz.4.459'. [ 104.521209][ T7569] lo speed is unknown, defaulting to 1000 [ 104.592853][ T7662] tipc: Enabling of bearer rejected, failed to enable media [ 104.850406][ T7669] netlink: 8 bytes leftover after parsing attributes in process `syz.1.461'. [ 104.889306][ T7669] netlink: 4 bytes leftover after parsing attributes in process `syz.1.461'. [ 104.901066][ T7672] raw_sendmsg: syz.2.462 forgot to set AF_INET. Fix it! [ 105.099065][ T7569] lo speed is unknown, defaulting to 1000 [ 105.191337][ T7680] netlink: 132 bytes leftover after parsing attributes in process `syz.3.465'. [ 105.684028][ T7693] netlink: 36 bytes leftover after parsing attributes in process `syz.1.469'. [ 105.785506][ T7696] netlink: 'syz.0.470': attribute type 4 has an invalid length. [ 105.870442][ T7696] infiniband syz0: set down [ 105.905056][ T7702] netlink: 'syz.1.469': attribute type 4 has an invalid length. [ 106.043864][ T7703] netlink: 'syz.0.470': attribute type 4 has an invalid length. [ 106.047968][ T5888] lo speed is unknown, defaulting to 1000 [ 106.055332][ T7703] infiniband syz0: set active [ 106.076553][ T7706] netlink: 'syz.2.473': attribute type 2 has an invalid length. [ 106.085747][ T7701] netlink: 52 bytes leftover after parsing attributes in process `syz.0.470'. [ 106.115690][ T968] lo speed is unknown, defaulting to 1000 [ 106.116867][ T7706] netlink: 'syz.2.473': attribute type 39 has an invalid length. [ 106.307058][ T5885] lo speed is unknown, defaulting to 1000 [ 106.403636][ T7716] netdevsim netdevsim3 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.412392][ T7716] netdevsim netdevsim3 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.421129][ T7716] netdevsim netdevsim3 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.431671][ T7716] netdevsim netdevsim3 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 106.810161][ T7732] netlink: 48 bytes leftover after parsing attributes in process `syz.3.479'. [ 107.218063][ T7746] lo speed is unknown, defaulting to 1000 [ 107.872662][ T7769] tipc: Enabling of bearer rejected, failed to enable media [ 108.136766][ T7776] netlink: 4 bytes leftover after parsing attributes in process `syz.2.493'. [ 108.282197][ T7783] netlink: 8 bytes leftover after parsing attributes in process `syz.2.493'. [ 108.307231][ T7784] bridge0: entered promiscuous mode [ 108.313557][ T7784] bridge0: entered allmulticast mode [ 108.327765][ T7784] team0: Port device bridge0 added [ 108.336854][ T7788] netlink: 'syz.0.497': attribute type 10 has an invalid length. [ 108.409814][ T7788] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 108.457188][ T7792] netlink: 44 bytes leftover after parsing attributes in process `syz.1.498'. [ 108.731154][ T7798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.856986][ T7798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 108.955258][ T7798] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.282087][ T7818] netlink: 'syz.1.504': attribute type 7 has an invalid length. [ 109.493547][ T7833] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 109.533477][ T7833] infiniband syz0: set active [ 109.569221][ T7833] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 109.644400][ T7832] tipc: Enabling of bearer rejected, already enabled [ 109.663125][ T8] lo speed is unknown, defaulting to 1000 [ 109.822787][ T7846] netlink: 8 bytes leftover after parsing attributes in process `syz.1.510'. [ 110.020059][ T7859] netlink: 16 bytes leftover after parsing attributes in process `syz.2.514'. [ 110.078329][ T7859] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 110.170881][ T7868] tipc: Enabling of bearer rejected, failed to enable media [ 110.267040][ T7872] tipc: Can't bind to reserved service type 0 [ 110.311884][ T7877] netlink: 24 bytes leftover after parsing attributes in process `syz.3.520'. [ 110.613986][ T7885] Unsupported ieee802154 address type: 0 [ 110.661883][ T7882] xt_connbytes: Forcing CT accounting to be enabled [ 110.696468][ T7888] netlink: 'syz.3.524': attribute type 3 has an invalid length. [ 111.229476][ T7917] netlink: 76 bytes leftover after parsing attributes in process `syz.0.530'. [ 111.405221][ T7918] netlink: 76 bytes leftover after parsing attributes in process `syz.0.530'. [ 111.958929][ T7959] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.543'. [ 112.191547][ T5842] Bluetooth: hci4: command 0x0405 tx timeout [ 112.272115][ T7974] netlink: 'syz.0.547': attribute type 8 has an invalid length. [ 113.334862][ T8000] 8021q: adding VLAN 0 to HW filter on device bond1 [ 113.809437][ T8043] netlink: 112 bytes leftover after parsing attributes in process `syz.1.568'. [ 113.823761][ T8039] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 113.893831][ T8037] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 114.041382][ T8059] x_tables: duplicate underflow at hook 1 [ 114.048703][ T8055] xt_l2tp: v2 doesn't support IP mode [ 114.247212][ T8055] xt_limit: Overflow, try lower: 65536/2147483648 [ 114.390014][ T8072] netlink: 16 bytes leftover after parsing attributes in process `syz.0.575'. [ 114.433411][ T8072] netlink: 'syz.0.575': attribute type 2 has an invalid length. [ 114.505689][ T8079] tipc: Enabling of bearer rejected, failed to enable media [ 114.565334][ T8077] netlink: 'syz.1.576': attribute type 1 has an invalid length. [ 114.598397][ T8072] netlink: 12 bytes leftover after parsing attributes in process `syz.0.575'. [ 114.616867][ T8081] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 114.847844][ T8095] netlink: 8 bytes leftover after parsing attributes in process `syz.0.581'. [ 114.899692][ T8095] netlink: 32 bytes leftover after parsing attributes in process `syz.0.581'. [ 115.086796][ T8110] netlink: 8 bytes leftover after parsing attributes in process `syz.2.584'. [ 115.279407][ T8116] netlink: 'syz.0.588': attribute type 1 has an invalid length. [ 115.330039][ T8114] xt_ecn: cannot match TCP bits for non-tcp packets [ 115.613404][ T8130] siw: device registration error -23 [ 115.705413][ T8130] syz.3.589 (8130) used obsolete PPPIOCDETACH ioctl [ 115.811754][ T8138] xt_cgroup: path and classid specified [ 116.129594][ T8134] batadv_slave_1: entered promiscuous mode [ 116.142015][ T8139] lo: entered promiscuous mode [ 116.150168][ T8146] netlink: 24 bytes leftover after parsing attributes in process `syz.1.595'. [ 116.224276][ T8132] lo: left promiscuous mode [ 116.229007][ T8132] batadv_slave_1: left promiscuous mode [ 116.270054][ T8154] dccp_invalid_packet: P.Data Offset(4) too small [ 116.576478][ T8163] (unnamed net_device) (uninitialized): option min_links: invalid value (18446744073709551612) [ 116.605631][ T8163] (unnamed net_device) (uninitialized): option min_links: allowed values 0 - 2147483647 [ 116.897716][ T8184] Cannot find set identified by id 632 to match [ 117.015310][ T8191] netlink: 4 bytes leftover after parsing attributes in process `syz.2.608'. [ 117.669074][ T8223] netlink: 36 bytes leftover after parsing attributes in process `syz.3.619'. [ 117.753807][ T8223] netlink: 12 bytes leftover after parsing attributes in process `syz.3.619'. [ 117.969583][ T8236] lo speed is unknown, defaulting to 1000 [ 119.013020][ T8273] netlink: 'syz.1.633': attribute type 1 has an invalid length. [ 119.036446][ T8273] __nla_validate_parse: 12 callbacks suppressed [ 119.036466][ T8273] netlink: 224 bytes leftover after parsing attributes in process `syz.1.633'. [ 119.324503][ T8288] vcan0: tx drop: invalid da for name 0x0000000000000001 [ 119.379516][ T8288] netlink: 75 bytes leftover after parsing attributes in process `syz.1.640'. [ 119.484307][ T8240] netlink: 28 bytes leftover after parsing attributes in process `syz.2.623'. [ 119.598580][ T8298] netlink: 4 bytes leftover after parsing attributes in process `syz.4.642'. [ 119.618172][ T8298] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.641990][ T8298] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.667023][ T8298] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.680980][ T8298] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.933060][ T8303] netlink: 28 bytes leftover after parsing attributes in process `syz.3.643'. [ 119.953333][ T8303] netlink: 28 bytes leftover after parsing attributes in process `syz.3.643'. [ 120.033087][ T8298] netlink: 'syz.4.642': attribute type 64 has an invalid length. [ 121.003529][ T8357] xt_addrtype: ipv6 PROHIBIT (THROW, NAT ..) matching not supported [ 121.030616][ T8361] netlink: 8 bytes leftover after parsing attributes in process `syz.2.662'. [ 121.064138][ T8359] netlink: 20 bytes leftover after parsing attributes in process `syz.4.660'. [ 121.109285][ T8359] dummy0: entered promiscuous mode [ 121.173956][ T8359] dummy0: left promiscuous mode [ 121.755039][ T8389] netlink: 20 bytes leftover after parsing attributes in process `syz.4.670'. [ 121.778756][ T8389] ip6gretap0: entered promiscuous mode [ 121.805974][ T8389] ip6gretap0: left promiscuous mode [ 121.828571][ T8400] x_tables: ip_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 121.859988][ T8396] netlink: 56 bytes leftover after parsing attributes in process `syz.2.669'. [ 122.078938][ T8407] af_packet: tpacket_rcv: packet too big, clamped from 4296 to 3952. macoff=96 [ 122.474022][ T8421] x_tables: duplicate underflow at hook 1 [ 122.647187][ T8430] netpci0: tun_chr_ioctl cmd 1074025672 [ 122.652821][ T8430] netpci0: ignored: set checksum disabled [ 123.031856][ T8450] bridge_slave_0: left allmulticast mode [ 123.116860][ T8450] bridge_slave_0: left promiscuous mode [ 123.144003][ T8450] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.245821][ T8450] bridge_slave_1: left allmulticast mode [ 123.281062][ T8450] bridge_slave_1: left promiscuous mode [ 123.298116][ T8450] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.488479][ T8450] bond0: (slave bond_slave_0): Releasing backup interface [ 123.542302][ T8450] bond0: (slave bond_slave_1): Releasing backup interface [ 123.665384][ T8450] team0: Port device team_slave_0 removed [ 123.681039][ T8474] trusted_key: syz.2.689 sent an empty control message without MSG_MORE. [ 123.720716][ T8450] team0: Port device team_slave_1 removed [ 123.780097][ T8450] bond0: (slave wlan1): Releasing backup interface [ 123.839458][ T8451] wg2: entered promiscuous mode [ 123.870296][ T8451] team0: Port device wg2 added [ 124.298940][ T8486] __nla_validate_parse: 7 callbacks suppressed [ 124.298961][ T8486] netlink: 64 bytes leftover after parsing attributes in process `syz.4.693'. [ 124.316758][ T8486] netlink: 64 bytes leftover after parsing attributes in process `syz.4.693'. [ 124.654720][ T54] tipc: Subscription rejected, illegal request [ 125.228619][ T8521] tipc: Enabled bearer , priority 10 [ 125.250811][ T8526] netlink: 'syz.0.706': attribute type 11 has an invalid length. [ 125.261325][ T8528] netlink: 'syz.0.706': attribute type 11 has an invalid length. [ 125.325879][ T8526] geneve2: entered promiscuous mode [ 125.336748][ T8526] geneve2: entered allmulticast mode [ 125.519126][ T8539] netlink: 80 bytes leftover after parsing attributes in process `syz.3.708'. [ 125.606053][ T8536] syzkaller1: entered promiscuous mode [ 125.634808][ T8536] syzkaller1: entered allmulticast mode [ 125.835652][ T8554] netlink: 8 bytes leftover after parsing attributes in process `syz.2.714'. [ 125.845067][ T8552] netlink: 24 bytes leftover after parsing attributes in process `syz.4.713'. [ 125.853211][ T8554] netlink: 24 bytes leftover after parsing attributes in process `syz.2.714'. [ 125.880173][ T8552] netlink: 24 bytes leftover after parsing attributes in process `syz.4.713'. [ 126.353466][ T5842] Bluetooth: hci0: command 0x0c1a tx timeout [ 126.360280][ T5845] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 126.494767][ T8582] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.503661][ T8582] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.711805][ T8598] netlink: 1 bytes leftover after parsing attributes in process `syz.0.722'. [ 126.738493][ T8595] Cannot find set identified by id 632 to match [ 127.007450][ T8614] tipc: Enabling of bearer rejected, failed to enable media [ 127.322097][ T8632] netlink: 28 bytes leftover after parsing attributes in process `syz.0.735'. [ 127.502401][ T8643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.740'. [ 127.559844][ T8641] lo speed is unknown, defaulting to 1000 [ 127.752462][ T8649] IPVS: Unknown mcast interface: pim6reg0 [ 127.831002][ T8656] IPVS: sync thread started: state = MASTER, mcast_ifn = vlan0, syncid = 3, id = 0 [ 127.959447][ T8662] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 127.986424][ T8662] macvlan3: entered allmulticast mode [ 128.010214][ T8662] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 128.056338][ T8662] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 128.112039][ T8664] netlink: 'syz.2.743': attribute type 1 has an invalid length. [ 128.766381][ T8690] vlan2: entered allmulticast mode [ 128.916797][ T8695] ip6tnl2: entered allmulticast mode [ 128.985881][ T8700] macsec1: entered promiscuous mode [ 128.991151][ T8700] macvlan1: entered promiscuous mode [ 129.329889][ T8712] __nla_validate_parse: 10 callbacks suppressed [ 129.329911][ T8712] netlink: 4 bytes leftover after parsing attributes in process `syz.0.756'. [ 129.360464][ T8719] netlink: 56 bytes leftover after parsing attributes in process `syz.4.758'. [ 129.370702][ T8719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.758'. [ 129.662022][ T8720] lo speed is unknown, defaulting to 1000 [ 130.046317][ T8739] netlink: 'syz.3.763': attribute type 39 has an invalid length. [ 130.148531][ T8741] netlink: 'syz.4.764': attribute type 58 has an invalid length. [ 130.160618][ T8741] netlink: 20 bytes leftover after parsing attributes in process `syz.4.764'. [ 130.444707][ T8763] pim6reg1: entered promiscuous mode [ 130.452115][ T8763] pim6reg1: entered allmulticast mode [ 130.561964][ T8765] netlink: 52 bytes leftover after parsing attributes in process `syz.4.771'. [ 130.728338][ T8770] netlink: 4 bytes leftover after parsing attributes in process `syz.0.773'. [ 130.771633][ T8774] netlink: 8 bytes leftover after parsing attributes in process `syz.2.775'. [ 130.967993][ T8784] netlink: 28 bytes leftover after parsing attributes in process `syz.2.776'. [ 130.980357][ T8784] netlink: 28 bytes leftover after parsing attributes in process `syz.2.776'. [ 131.015788][ T8784] xt_TCPMSS: Only works on TCP SYN packets [ 131.019154][ T8785] netlink: 'syz.0.777': attribute type 8 has an invalid length. [ 131.086691][ T8785] tipc: Started in network mode [ 131.122598][ T8785] tipc: Node identity 101, cluster identity 4711 [ 131.153166][ T8785] tipc: Node number set to 257 [ 131.159132][ T8785] tipc: Cannot configure node identity twice [ 131.187908][ T8793] pim6reg: entered allmulticast mode [ 131.446721][ T8801] netlink: 16 bytes leftover after parsing attributes in process `syz.3.782'. [ 131.464103][ T8806] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 131.620958][ T8812] netlink: 'syz.3.786': attribute type 30 has an invalid length. [ 131.661105][ T8812] SET target dimension over the limit! [ 131.771569][ T8819] tls_set_device_offload: netdev not found [ 131.805218][ T8815] tun0: tun_chr_ioctl cmd 1074025677 [ 131.833309][ T8815] tun0: linktype set to 825 [ 132.134610][ T8842] netlink: 'syz.2.796': attribute type 18 has an invalid length. [ 132.161296][ T8842] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.170529][ T8842] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.179549][ T8842] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.189730][ T8842] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 132.236346][ T8837] lo speed is unknown, defaulting to 1000 [ 132.258361][ T8842] ip6gretap0: entered promiscuous mode [ 132.308242][ T8842] ip6gretap0: left promiscuous mode [ 132.774138][ T8839] lo speed is unknown, defaulting to 1000 [ 132.987601][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.369731][ T8893] unsupported nlmsg_type 40 [ 133.857151][ T8899] 8021q: adding VLAN 0 to HW filter on device bond1 [ 134.352210][ T8946] netlink: 'syz.1.819': attribute type 8 has an invalid length. [ 134.390403][ T8947] __nla_validate_parse: 7 callbacks suppressed [ 134.390424][ T8947] netlink: 16 bytes leftover after parsing attributes in process `syz.2.817'. [ 134.852768][ T8971] netlink: 'syz.0.823': attribute type 3 has an invalid length. [ 135.026669][ T8980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.826'. [ 135.157377][ T8980] netlink: 4 bytes leftover after parsing attributes in process `syz.1.826'. [ 135.314361][ T8997] tipc: Enabling of bearer rejected, failed to enable media [ 135.426912][ T9002] netlink: 40 bytes leftover after parsing attributes in process `syz.3.831'. [ 135.553150][ T9002] tipc: Enabling of bearer rejected, failed to enable media [ 135.721483][ T9024] x_tables: duplicate underflow at hook 1 [ 135.735069][ T9024] netlink: 20 bytes leftover after parsing attributes in process `syz.0.839'. [ 135.936807][ T9041] netlink: 'syz.4.844': attribute type 13 has an invalid length. [ 135.947869][ T9041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.844'. [ 135.958482][ T9041] netlink: 48 bytes leftover after parsing attributes in process `syz.4.844'. [ 136.418930][ T9071] netlink: 276 bytes leftover after parsing attributes in process `syz.4.851'. [ 136.497576][ T9081] netlink: 24 bytes leftover after parsing attributes in process `syz.1.855'. [ 136.545954][ T9072] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.555663][ T9072] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.565277][ T9072] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.574856][ T9072] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.609526][ T9072] vxlan0: entered promiscuous mode [ 136.620993][ T9072] vxlan0: entered allmulticast mode [ 136.656382][ T9072] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.667400][ T9072] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.677083][ T9072] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.688673][ T9072] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.754876][ T9071] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.764559][ T9071] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.774900][ T9071] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.784495][ T9071] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 136.795778][ T9071] vxlan0: entered promiscuous mode [ 136.801392][ T9071] vxlan0: entered allmulticast mode [ 136.810626][ T9071] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.821567][ T9071] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.831855][ T9071] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 136.842144][ T9071] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 137.114880][ T9106] tls_set_device_offload_rx: netdev not found [ 137.257152][ T9113] x_tables: ip6_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 137.432113][ T9128] (unnamed net_device) (uninitialized): option mode: invalid value (254) [ 137.535175][ T9133] tipc: Enabling of bearer rejected, failed to enable media [ 137.535308][ T9134] xt_cgroup: path and classid specified [ 137.610380][ T9134] batadv_slave_0: entered allmulticast mode [ 137.818421][ T9148] netlink: 104 bytes leftover after parsing attributes in process `syz.0.874'. [ 137.869579][ T9148] bond_slave_0: entered promiscuous mode [ 138.820355][ T9198] xt_TPROXY: Can be used only with -p tcp or -p udp [ 138.961944][ T9198] dvmrp5: entered allmulticast mode [ 138.983980][ T9202] dvmrp5: left allmulticast mode [ 139.701288][ T9247] __nla_validate_parse: 2 callbacks suppressed [ 139.701308][ T9247] netlink: 8 bytes leftover after parsing attributes in process `syz.0.903'. [ 140.004970][ T9266] xt_addrtype: ipv6 does not support BROADCAST matching [ 140.021181][ T9264] netlink: 28 bytes leftover after parsing attributes in process `syz.3.907'. [ 140.037141][ T9270] netlink: 20 bytes leftover after parsing attributes in process `syz.2.910'. [ 140.053935][ T9271] netlink: 'syz.4.909': attribute type 11 has an invalid length. [ 140.093804][ T9271] netlink: 'syz.4.909': attribute type 13 has an invalid length. [ 140.108821][ T9270] netlink: 'syz.2.910': attribute type 21 has an invalid length. [ 140.120934][ T9271] netlink: 32 bytes leftover after parsing attributes in process `syz.4.909'. [ 140.130535][ T9270] netlink: 132 bytes leftover after parsing attributes in process `syz.2.910'. [ 140.235754][ T9277] netlink: 'syz.3.912': attribute type 10 has an invalid length. [ 140.259394][ T9277] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.267428][ T9277] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.382730][ T9277] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.389949][ T9277] bridge0: port 2(bridge_slave_1) entered forwarding state [ 140.397570][ T9277] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.405451][ T9277] bridge0: port 1(bridge_slave_0) entered forwarding state [ 140.449817][ T9277] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 140.664722][ T9306] netlink: 'syz.3.918': attribute type 11 has an invalid length. [ 140.679189][ T9306] netlink: 'syz.3.918': attribute type 11 has an invalid length. [ 140.690939][ T9306] netlink: 224 bytes leftover after parsing attributes in process `syz.3.918'. [ 140.855425][ T9320] netlink: 28 bytes leftover after parsing attributes in process `syz.1.922'. [ 141.247214][ T9337] lo speed is unknown, defaulting to 1000 [ 141.253468][ T9337] lo speed is unknown, defaulting to 1000 [ 141.260766][ T9337] lo speed is unknown, defaulting to 1000 [ 141.271032][ T9337] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 141.285539][ T9337] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 141.327047][ T9337] lo speed is unknown, defaulting to 1000 [ 141.334399][ T9337] lo speed is unknown, defaulting to 1000 [ 141.341292][ T9337] lo speed is unknown, defaulting to 1000 [ 141.348616][ T9337] lo speed is unknown, defaulting to 1000 [ 141.355720][ T9337] lo speed is unknown, defaulting to 1000 [ 141.606533][ T9352] IPVS: Error joining to the multicast group [ 141.662018][ T9352] x_tables: duplicate underflow at hook 1 [ 141.817237][ T9370] netlink: 80 bytes leftover after parsing attributes in process `syz.1.935'. [ 141.826605][ T9370] netlink: 12 bytes leftover after parsing attributes in process `syz.1.935'. [ 141.835995][ T9370] netlink: 20 bytes leftover after parsing attributes in process `syz.1.935'. [ 141.846870][ T9370] xt_CT: You must specify a L4 protocol and not use inversions on it [ 142.182204][ T9389] netlink: 'syz.3.941': attribute type 33 has an invalid length. [ 142.268448][ T9395] netlink: 'syz.1.940': attribute type 4 has an invalid length. [ 142.277356][ T9395] netlink: 'syz.1.940': attribute type 4 has an invalid length. [ 142.378926][ T9399] tipc: Started in network mode [ 142.407904][ T9399] tipc: Node identity 800000, cluster identity 6 [ 142.443161][ T9399] tipc: Node number set to 8388608 [ 142.534061][ T9402] xt_cgroup: invalid path, errno=-2 [ 142.699633][ T9420] lo speed is unknown, defaulting to 1000 [ 143.110811][ T9420] lo speed is unknown, defaulting to 1000 [ 143.542158][ T9469] pimreg3: entered allmulticast mode [ 143.560824][ T9459] pimreg3: left allmulticast mode [ 143.982989][ T9485] netlink: 'syz.4.959': attribute type 29 has an invalid length. [ 144.001477][ T9485] netlink: 'syz.4.959': attribute type 29 has an invalid length. [ 144.007854][ T968] hid-generic 0005:0458:FFF9.0001: unknown main item tag 0xe [ 144.043071][ T968] hid-generic 0005:0458:FFF9.0001: item fetching failed at offset 3/5 [ 144.062519][ T968] hid-generic 0005:0458:FFF9.0001: probe with driver hid-generic failed with error -22 [ 144.196588][ T9497] lo speed is unknown, defaulting to 1000 [ 144.229390][ T9497] netlink: 'syz.1.961': attribute type 23 has an invalid length. [ 144.264849][ T9497] netlink: 'syz.1.961': attribute type 11 has an invalid length. [ 144.363328][ T9505] lo speed is unknown, defaulting to 1000 [ 144.678512][ T9528] bM1®NuëöÉÑ30Ê: renamed from lo (while UP) [ 144.746873][ T9528] bM1®NuëöÉÑ30Ê: entered allmulticast mode [ 144.769744][ T9531] __nla_validate_parse: 6 callbacks suppressed [ 144.769763][ T9531] netlink: 8 bytes leftover after parsing attributes in process `syz.2.971'. [ 144.769848][ T9530] netlink: 8 bytes leftover after parsing attributes in process `syz.3.969'. [ 144.793237][ T9531] netlink: 24 bytes leftover after parsing attributes in process `syz.2.971'. [ 145.130650][ T9549] netlink: 20 bytes leftover after parsing attributes in process `syz.2.976'. [ 145.211588][ T9555] netlink: 16 bytes leftover after parsing attributes in process `syz.1.973'. [ 145.306465][ T9560] netlink: 8 bytes leftover after parsing attributes in process `syz.2.976'. [ 145.322257][ T9505] lo speed is unknown, defaulting to 1000 [ 145.333597][ T9555] netlink: 24 bytes leftover after parsing attributes in process `syz.1.973'. [ 145.480328][ T9559] netlink: 'syz.3.981': attribute type 3 has an invalid length. [ 145.507908][ T9562] netlink: 304 bytes leftover after parsing attributes in process `syz.3.981'. [ 145.681493][ T9572] netlink: 40 bytes leftover after parsing attributes in process `syz.1.973'. [ 145.854703][ T9580] netlink: 24 bytes leftover after parsing attributes in process `syz.0.986'. [ 146.054498][ T9587] xt_hashlimit: max too large, truncated to 1048576 [ 146.163361][ C0] hrtimer: interrupt took 1142128 ns [ 146.433423][ T9603] netlink: 'syz.4.992': attribute type 7 has an invalid length. [ 146.871929][ T9627] netlink: 'syz.2.999': attribute type 1 has an invalid length. [ 147.388631][ T9657] netlink: 'syz.0.1008': attribute type 1 has an invalid length. [ 147.414262][ T9657] Bluetooth: MGMT ver 1.23 [ 147.884924][ T9682] lo speed is unknown, defaulting to 1000 [ 148.425217][ T9682] lo speed is unknown, defaulting to 1000 [ 148.592589][ T9714] bridge2: entered promiscuous mode [ 149.199833][ T9727] lo speed is unknown, defaulting to 1000 [ 149.207319][ T9732] netlink: 'syz.1.1028': attribute type 1 has an invalid length. [ 149.367062][ T9734] xt_cgroup: invalid path, errno=-2 [ 149.887283][ T9727] lo speed is unknown, defaulting to 1000 [ 150.906426][ T9785] ebt_limit: overflow, try lower: 0/0 [ 152.751747][ T9762] __nla_validate_parse: 13 callbacks suppressed [ 152.751768][ T9762] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1039'. [ 152.819672][ T9766] bridge0: port 1(bridge_slave_0) entered disabled state [ 152.867979][ T9766] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.003566][ T9785] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 153.105939][ T9788] lo speed is unknown, defaulting to 1000 [ 153.132459][ T9801] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1048'. [ 153.309879][ T9806] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1049'. [ 153.380000][ T9811] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1051'. [ 153.415357][ T9811] netlink: 112 bytes leftover after parsing attributes in process `syz.1.1051'. [ 153.440222][ T9811] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1051'. [ 153.458740][ T9811] bond0: option ad_select: unable to set because the bond device is up [ 153.595834][ T9788] lo speed is unknown, defaulting to 1000 [ 153.662498][ T9830] xt_l2tp: invalid flags combination: 4 [ 153.700227][ T9833] xt_l2tp: invalid flags combination: 4 [ 153.858390][ T9844] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1059'. [ 155.134012][ T9889] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 155.244185][ T9893] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 155.244967][ T9894] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 155.254966][ T9905] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1068'. [ 155.335558][ T9888] netdevsim netdevsim0 netdevsim0: left promiscuous mode [ 155.364164][ T9900] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1071'. [ 155.462736][ T9913] netlink: 'syz.1.1074': attribute type 10 has an invalid length. [ 155.688378][ T9911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1075'. [ 155.781450][ T9932] sctp: [Deprecated]: syz.0.1077 (pid 9932) Use of int in max_burst socket option deprecated. [ 155.781450][ T9932] Use struct sctp_assoc_value instead [ 156.109706][ T9948] gre0: entered promiscuous mode [ 156.407633][ T9956] netlink: 'syz.4.1084': attribute type 1 has an invalid length. [ 157.077850][ T9972] lo speed is unknown, defaulting to 1000 [ 157.320600][ T9973] lo speed is unknown, defaulting to 1000 [ 157.332607][ T9972] lo speed is unknown, defaulting to 1000 [ 157.415448][T10001] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 157.422748][T10001] IPv6: NLM_F_CREATE should be set when creating new route [ 157.679415][ T9973] lo speed is unknown, defaulting to 1000 [ 157.902331][T10018] lo speed is unknown, defaulting to 1000 [ 158.150968][T10018] lo speed is unknown, defaulting to 1000 [ 159.368012][T10073] team0: Device wg2 is of different type [ 159.427581][T10074] team0: Device wg2 is of different type [ 159.442405][T10070] __nla_validate_parse: 5 callbacks suppressed [ 159.442421][T10070] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1118'. [ 159.496934][ T8] IPVS: starting estimator thread 0... [ 159.586425][T10080] IPVS: using max 19 ests per chain, 45600 per kthread [ 159.694709][T10079] lo speed is unknown, defaulting to 1000 [ 159.751257][T10085] netlink: 'syz.2.1120': attribute type 1 has an invalid length. [ 159.885881][T10100] sit0: entered promiscuous mode [ 159.934729][T10100] netlink: 'syz.3.1124': attribute type 1 has an invalid length. [ 159.970255][T10100] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1124'. [ 160.284625][T10115] netdevsim netdevsim3 eth0: set [1, 1] type 2 family 0 port 20000 - 0 [ 160.297480][T10115] netdevsim netdevsim3 eth1: set [1, 1] type 2 family 0 port 20000 - 0 [ 160.313628][T10115] netdevsim netdevsim3 eth2: set [1, 1] type 2 family 0 port 20000 - 0 [ 160.339395][T10115] netdevsim netdevsim3 eth3: set [1, 1] type 2 family 0 port 20000 - 0 [ 160.366267][T10115] geneve3: entered promiscuous mode [ 160.371692][T10115] geneve3: entered allmulticast mode [ 160.395715][T10115] netdevsim netdevsim3 eth0: unset [1, 1] type 2 family 0 port 20000 - 0 [ 160.431194][T10128] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1130'. [ 160.440870][T10115] netdevsim netdevsim3 eth1: unset [1, 1] type 2 family 0 port 20000 - 0 [ 160.458131][T10115] netdevsim netdevsim3 eth2: unset [1, 1] type 2 family 0 port 20000 - 0 [ 160.481305][T10115] netdevsim netdevsim3 eth3: unset [1, 1] type 2 family 0 port 20000 - 0 [ 160.547038][T10125] netdevsim netdevsim0 netdevsim0: entered allmulticast mode [ 160.571896][T10125] bond0: (slave netdevsim0): Releasing backup interface [ 160.585168][T10125] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 160.617747][T10124] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1130'. [ 160.643200][T10124] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1130'. [ 160.668462][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 160.675869][T10079] lo speed is unknown, defaulting to 1000 [ 160.685907][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 160.694184][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 160.704670][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 160.724909][ T5842] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 160.743679][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 160.833454][T10138] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1132'. [ 160.875258][T10138] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1132'. [ 160.941817][T10138] netlink: 'syz.3.1132': attribute type 10 has an invalid length. [ 161.034883][T10138] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 161.071371][T10138] team0: Port device batadv0 added [ 161.139951][T10132] lo speed is unknown, defaulting to 1000 [ 161.163147][T10150] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 161.382180][T10166] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1140'. [ 161.483726][T10171] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1139'. [ 161.515445][T10132] lo speed is unknown, defaulting to 1000 [ 161.539693][T10166] ip6t_rpfilter: unknown options [ 161.623358][T10171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1139'. [ 161.743262][T10175] mac80211_hwsim hwsim7 ˆªŒDáT: renamed from wlan1 (while UP) [ 162.084307][T10132] chnl_net:caif_netlink_parms(): no params data found [ 162.120342][T10204] RDS: rds_bind could not find a transport for 2001::1, load rds_tcp or rds_rdma? [ 162.147867][T10201] team0: Device gtp1 is of different type [ 162.597640][T10132] bridge0: port 1(bridge_slave_0) entered blocking state [ 162.605456][T10132] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.613684][T10132] bridge_slave_0: entered allmulticast mode [ 162.621946][T10132] bridge_slave_0: entered promiscuous mode [ 162.629881][T10132] bridge0: port 2(bridge_slave_1) entered blocking state [ 162.631487][T10234] x_tables: duplicate underflow at hook 3 [ 162.637286][T10132] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.650541][T10132] bridge_slave_1: entered allmulticast mode [ 162.657882][T10132] bridge_slave_1: entered promiscuous mode [ 162.728542][T10132] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 162.765588][T10132] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.823334][ T5845] Bluetooth: hci0: command tx timeout [ 162.913392][T10255] openvswitch: netlink: Message has 4 unknown bytes. [ 163.191154][T10132] team0: Port device team_slave_0 added [ 163.213896][T10132] team0: Port device team_slave_1 added [ 163.347571][T10132] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 163.370217][T10132] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.439338][T10132] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 163.523956][T10132] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 163.559998][T10132] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 163.608974][T10132] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 163.792763][T10132] hsr_slave_0: entered promiscuous mode [ 163.822535][T10132] hsr_slave_1: entered promiscuous mode [ 163.859594][T10132] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 163.879353][T10132] Cannot create hsr debugfs directory [ 164.195799][T10334] netlink: 'syz.2.1173': attribute type 3 has an invalid length. [ 164.299233][T10339] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.316600][T10132] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.417175][T10343] netlink: 'syz.4.1176': attribute type 3 has an invalid length. [ 164.476455][T10342] team0: Port device wg2 removed [ 164.542453][T10132] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.662745][T10343] (unnamed net_device) (uninitialized): option miimon: invalid value (18446744073709551615) [ 164.673906][T10343] (unnamed net_device) (uninitialized): option miimon: allowed values 0 - 2147483647 [ 164.687043][T10336] lo speed is unknown, defaulting to 1000 [ 164.776003][T10132] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.831439][T10347] caif0: entered promiscuous mode [ 164.837076][T10347] caif0: entered allmulticast mode [ 164.847313][T10351] __nla_validate_parse: 7 callbacks suppressed [ 164.847332][T10351] netlink: 5 bytes leftover after parsing attributes in process `syz.4.1178'. [ 164.873459][T10351] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 164.882304][T10351] 0ªX¹¦Dö»: entered allmulticast mode [ 164.903453][ T5845] Bluetooth: hci0: command tx timeout [ 164.922347][T10132] bond0: (slave netdevsim0): Releasing backup interface [ 164.959614][T10132] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 164.977404][T10336] lo speed is unknown, defaulting to 1000 [ 165.338045][T10132] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 165.400089][T10132] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 165.463807][T10132] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 165.580731][T10132] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 165.948768][T10132] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.991546][T10132] 8021q: adding VLAN 0 to HW filter on device team0 [ 166.012376][T10401] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 166.040241][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state [ 166.047644][ T5901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 166.115534][ T5901] bridge0: port 2(bridge_slave_1) entered blocking state [ 166.122830][ T5901] bridge0: port 2(bridge_slave_1) entered forwarding state [ 166.212647][T10414] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1197'. [ 166.419327][T10429] netlink: 48 bytes leftover after parsing attributes in process `syz.2.1198'. [ 166.635571][T10132] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.792840][T10132] veth0_vlan: entered promiscuous mode [ 166.807634][T10132] veth1_vlan: entered promiscuous mode [ 166.879384][T10132] veth0_macvtap: entered promiscuous mode [ 166.919656][T10132] veth1_macvtap: entered promiscuous mode [ 166.966338][T10132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 166.983257][ T5845] Bluetooth: hci0: command tx timeout [ 166.998243][T10132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.011402][T10132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.022285][T10132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.050021][T10132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 167.064187][T10132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.085112][T10132] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 167.202754][T10452] lo speed is unknown, defaulting to 1000 [ 167.216147][T10132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.273285][T10132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.298740][T10132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.321203][T10132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.353979][T10132] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 167.392512][T10132] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 167.410840][T10132] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 167.423249][T10132] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.432098][T10132] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.441666][T10132] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.450935][T10132] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 167.471980][T10452] lo speed is unknown, defaulting to 1000 [ 167.716942][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.763523][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 167.820274][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 167.835584][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 168.171568][T10459] netlink: 204 bytes leftover after parsing attributes in process `syz.4.1201'. [ 168.314036][T10508] : renamed from ipvlan1 [ 168.417637][T10518] xt_HMARK: spi-set and port-set can't be combined [ 168.686961][T10533] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1220'. [ 169.104749][ T1099] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.364759][T10548] sctp: [Deprecated]: syz.0.1223 (pid 10548) Use of int in max_burst socket option. [ 169.364759][T10548] Use struct sctp_assoc_value instead [ 169.404186][ T1099] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.559917][T10555] netlink: 'syz.3.1225': attribute type 11 has an invalid length. [ 169.602328][T10555] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1225'. [ 169.696917][ T1099] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.772012][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 169.780772][T10560] netlink: 'syz.4.1227': attribute type 4 has an invalid length. [ 169.790027][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 169.803860][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 169.821403][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 169.829914][ T5842] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 169.840998][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 169.933687][ T1099] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.970944][T10564] lo speed is unknown, defaulting to 1000 [ 170.303864][T10579] netlink: 'syz.2.1230': attribute type 11 has an invalid length. [ 170.330827][ T1099] bridge_slave_1: left allmulticast mode [ 170.342289][ T1099] bridge_slave_1: left promiscuous mode [ 170.363563][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state [ 170.394975][ T1099] bridge_slave_0: left allmulticast mode [ 170.417538][ T1099] bridge_slave_0: left promiscuous mode [ 170.443318][ T1099] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.043092][ T1099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 171.056679][ T1099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 171.068538][ T1099] bond0 (unregistering): Released all slaves [ 171.080234][T10564] lo speed is unknown, defaulting to 1000 [ 171.083365][T10588] tipc: Enabling of bearer rejected, already enabled [ 171.434096][T10604] veth1_macvtap: left promiscuous mode [ 171.508862][T10613] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1238'. [ 171.940496][T10638] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1244'. [ 171.943548][ T5842] Bluetooth: hci0: command tx timeout [ 171.951398][T10638] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 171.970575][T10638] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 171.980219][T10638] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 171.998220][T10638] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.066410][T10638] team0: Port device batadv0 removed [ 172.080988][T10637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1244'. [ 172.098889][T10564] chnl_net:caif_netlink_parms(): no params data found [ 172.168856][ T1099] hsr_slave_0: left promiscuous mode [ 172.182652][ T1099] hsr_slave_1: left promiscuous mode [ 172.228642][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 172.255741][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 172.266463][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 172.274624][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 172.301878][ T1099] veth1_macvtap: left promiscuous mode [ 172.314428][ T1099] veth0_macvtap: left promiscuous mode [ 172.320186][ T1099] veth1_vlan: left promiscuous mode [ 172.326827][ T1099] veth0_vlan: left promiscuous mode [ 172.913579][ T1099] team0 (unregistering): Port device team_slave_1 removed [ 172.959372][ T1099] team0 (unregistering): Port device team_slave_0 removed [ 173.380732][T10643] tipc: Enabling of bearer rejected, failed to enable media [ 173.600972][T10674] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 173.670213][T10680] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1251'. [ 173.846060][T10564] bridge0: port 1(bridge_slave_0) entered blocking state [ 173.875265][T10564] bridge0: port 1(bridge_slave_0) entered disabled state [ 173.889377][T10564] bridge_slave_0: entered allmulticast mode [ 173.897341][T10564] bridge_slave_0: entered promiscuous mode [ 173.911799][T10684] netlink: 'syz.2.1250': attribute type 10 has an invalid length. [ 173.946257][T10564] bridge0: port 2(bridge_slave_1) entered blocking state [ 173.956081][T10564] bridge0: port 2(bridge_slave_1) entered disabled state [ 173.973769][T10564] bridge_slave_1: entered allmulticast mode [ 174.001972][T10564] bridge_slave_1: entered promiscuous mode [ 174.023497][ T5842] Bluetooth: hci0: command tx timeout [ 174.123965][T10704] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1255'. [ 174.154963][T10564] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 174.199213][T10564] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 174.330922][T10564] team0: Port device team_slave_0 added [ 174.360219][T10564] team0: Port device team_slave_1 added [ 174.379519][T10719] x_tables: ip_tables: osf match: only valid for protocol 6 [ 174.427190][T10711] lo speed is unknown, defaulting to 1000 [ 174.516199][T10564] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 174.539625][T10727] netlink: 'syz.2.1259': attribute type 2 has an invalid length. [ 174.548211][T10564] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.584760][T10727] netlink: 'syz.2.1259': attribute type 1 has an invalid length. [ 174.592542][T10727] netlink: 224 bytes leftover after parsing attributes in process `syz.2.1259'. [ 174.637890][T10564] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 174.731116][T10732] tipc: Enabling of bearer rejected, already enabled [ 174.754120][T10564] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 174.761117][T10564] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 174.821497][T10564] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 174.887857][T10711] lo speed is unknown, defaulting to 1000 [ 175.023848][T10564] hsr_slave_0: entered promiscuous mode [ 175.040043][T10564] hsr_slave_1: entered promiscuous mode [ 175.061868][T10564] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 175.075832][T10564] Cannot create hsr debugfs directory [ 175.462266][T10764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1267'. [ 175.652051][T10771] netlink: 44 bytes leftover after parsing attributes in process `syz.4.1269'. [ 175.698276][T10778] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1271'. [ 175.709369][T10778] nbd: couldn't find device at index 0 [ 175.850550][T10784] netlink: 'syz.0.1270': attribute type 4 has an invalid length. [ 175.876299][T10784] netlink: 17 bytes leftover after parsing attributes in process `syz.0.1270'. [ 175.981268][T10796] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 176.103341][ T5842] Bluetooth: hci0: command tx timeout [ 176.509410][T10564] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 176.541069][T10564] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 176.553492][T10564] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 176.602326][T10840] __nla_validate_parse: 1 callbacks suppressed [ 176.602344][T10840] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1282'. [ 176.617741][T10564] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 176.753597][T10851] netlink: 'syz.2.1286': attribute type 9 has an invalid length. [ 176.768482][T10851] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1286'. [ 176.829389][T10849] netlink: 6 bytes leftover after parsing attributes in process `syz.0.1285'. [ 176.927493][T10854] lo speed is unknown, defaulting to 1000 [ 176.997226][T10564] 8021q: adding VLAN 0 to HW filter on device bond0 [ 177.081732][T10564] 8021q: adding VLAN 0 to HW filter on device team0 [ 177.106882][T10870] netlink: zone id is out of range [ 177.127591][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 177.134789][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 177.146564][T10870] netlink: zone id is out of range [ 177.169089][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 177.176327][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 177.272982][T10854] lo speed is unknown, defaulting to 1000 [ 177.431041][T10880] tipc: Enabling of bearer rejected, failed to enable media [ 177.824145][T10564] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 177.993922][T10564] veth0_vlan: entered promiscuous mode [ 178.018602][T10564] veth1_vlan: entered promiscuous mode [ 178.097477][T10564] veth0_macvtap: entered promiscuous mode [ 178.129903][T10564] veth1_macvtap: entered promiscuous mode [ 178.170302][T10564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.183974][ T5842] Bluetooth: hci0: command tx timeout [ 178.193437][T10564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.242946][T10564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 178.277729][T10564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.306969][T10564] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 178.409641][T10933] tipc: Enabling of bearer rejected, failed to enable media [ 178.445263][T10564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.489787][T10564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.501415][T10564] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 178.525536][T10564] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 178.550405][T10564] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 178.561608][T10927] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1304'. [ 178.568621][T10944] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1309'. [ 178.614127][T10944] netlink: 'syz.3.1309': attribute type 10 has an invalid length. [ 178.628850][T10944] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1309'. [ 178.688998][T10564] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.712791][T10564] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.732922][T10564] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.761998][T10564] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 178.892830][ T54] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.905959][ T54] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 178.919647][T10962] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1315'. [ 178.934594][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 178.948242][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 179.178524][T10968] Bluetooth: MGMT ver 1.23 [ 179.210898][T10968] vlan2: entered promiscuous mode [ 179.228154][T10970] netlink: 11562 bytes leftover after parsing attributes in process `syz.0.1317'. [ 179.351884][T10983] IPVS: Error connecting to the multicast addr [ 179.382165][T10985] tipc: Enabling of bearer rejected, failed to enable media [ 179.482475][T10989] lo speed is unknown, defaulting to 1000 [ 179.734954][T10989] lo speed is unknown, defaulting to 1000 [ 179.963506][ T54] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.191011][T11009] lo speed is unknown, defaulting to 1000 [ 180.248676][T11019] IPVS: sync thread started: state = MASTER, mcast_ifn = macsec0, syncid = 3, id = 0 [ 180.374243][T11009] lo speed is unknown, defaulting to 1000 [ 180.510526][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 180.524674][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 180.544345][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 180.561979][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 180.578031][ T5843] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 180.588566][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 180.723136][ T54] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.931549][ T54] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.940293][T11054] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1339'. [ 181.075481][T11024] lo speed is unknown, defaulting to 1000 [ 181.143743][ T5850] Bluetooth: hci2: command 0x0406 tx timeout [ 181.150352][ T5843] Bluetooth: hci1: command 0x0406 tx timeout [ 181.150367][ T5150] Bluetooth: hci3: command 0x0406 tx timeout [ 181.236654][ T54] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 181.388397][ T54] bridge_slave_1: left allmulticast mode [ 181.398728][ T54] bridge_slave_1: left promiscuous mode [ 181.451790][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 181.561454][ T54] bridge_slave_0: left allmulticast mode [ 181.567259][ T54] bridge_slave_0: left promiscuous mode [ 181.574431][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 181.989073][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 182.000416][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 182.012537][ T54] bond0 (unregistering): Released all slaves [ 182.021997][T11024] lo speed is unknown, defaulting to 1000 [ 182.026630][T11071] lo speed is unknown, defaulting to 1000 [ 182.297869][T11094] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1351'. [ 182.382222][T11100] x_tables: duplicate underflow at hook 1 [ 182.424522][T11092] netlink: 'syz.3.1348': attribute type 4 has an invalid length. [ 182.448838][T11096] netlink: 68 bytes leftover after parsing attributes in process `syz.4.1350'. [ 182.467361][T11098] A link change request failed with some changes committed already. Interface batadv_slave_1 may have been left with an inconsistent configuration, please check. [ 182.484858][T11071] lo speed is unknown, defaulting to 1000 [ 182.594361][ T5888] lo speed is unknown, defaulting to 1000 [ 182.618581][T11104] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 182.645991][T11104] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1352'. [ 182.660019][T11107] (unnamed net_device) (uninitialized): Unable to set peer notification delay as MII monitoring is disabled [ 182.672246][ T5842] Bluetooth: hci0: command tx timeout [ 182.689674][T11108] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 182.750445][T11105] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 182.769912][T11114] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1355'. [ 182.992239][ T54] hsr_slave_0: left promiscuous mode [ 183.008458][ T54] hsr_slave_1: left promiscuous mode [ 183.021858][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 183.029904][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 183.043141][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 183.050909][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 183.083369][ T54] veth1_macvtap: left promiscuous mode [ 183.093075][ T54] veth0_macvtap: left promiscuous mode [ 183.098764][ T54] veth1_vlan: left promiscuous mode [ 183.113149][ T54] veth0_vlan: left promiscuous mode [ 183.638061][ T54] team0 (unregistering): Port device team_slave_1 removed [ 183.676996][ T54] team0 (unregistering): Port device team_slave_0 removed [ 184.098473][T11024] chnl_net:caif_netlink_parms(): no params data found [ 184.113217][T11141] netlink: 'syz.3.1360': attribute type 12 has an invalid length. [ 184.121067][T11141] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1360'. [ 184.130653][T11145] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1361'. [ 184.223542][T11144] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1361'. [ 184.282626][T11151] FAULT_INJECTION: forcing a failure. [ 184.282626][T11151] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 184.350250][T11151] CPU: 0 UID: 0 PID: 11151 Comm: syz.4.1364 Not tainted 6.12.0-rc5-syzkaller-01164-gccb35037c48a #0 [ 184.361085][T11151] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 184.371605][T11151] Call Trace: [ 184.374902][T11151] [ 184.377846][T11151] dump_stack_lvl+0x241/0x360 [ 184.382566][T11151] ? __pfx_dump_stack_lvl+0x10/0x10 [ 184.387782][T11151] ? __pfx__printk+0x10/0x10 [ 184.392409][T11151] ? snprintf+0xda/0x120 [ 184.396818][T11151] should_fail_ex+0x3b0/0x4e0 [ 184.401526][T11151] _copy_to_user+0x31/0xb0 [ 184.405973][T11151] simple_read_from_buffer+0xca/0x150 [ 184.411373][T11151] proc_fail_nth_read+0x1e9/0x250 [ 184.416783][T11151] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 184.422542][T11151] ? rw_verify_area+0x55e/0x6f0 [ 184.427404][T11151] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 184.432958][T11151] vfs_read+0x1fc/0xb70 [ 184.437129][T11151] ? fdget_pos+0x24e/0x320 [ 184.441669][T11151] ? __pfx_vfs_read+0x10/0x10 [ 184.446369][T11151] ? __fget_files+0x3f3/0x470 [ 184.451224][T11151] ? fdget_pos+0x24e/0x320 [ 184.455674][T11151] ksys_read+0x183/0x2b0 [ 184.459943][T11151] ? __pfx_ksys_read+0x10/0x10 [ 184.464730][T11151] ? do_syscall_64+0x100/0x230 [ 184.469505][T11151] ? do_syscall_64+0xb6/0x230 [ 184.474198][T11151] do_syscall_64+0xf3/0x230 [ 184.478695][T11151] ? clear_bhb_loop+0x35/0x90 [ 184.483367][T11151] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 184.489275][T11151] RIP: 0033:0x7f675477d15c [ 184.493724][T11151] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 69 8e 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 bf 8e 02 00 48 [ 184.513526][T11151] RSP: 002b:00007f6755618030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 184.521972][T11151] RAX: ffffffffffffffda RBX: 00007f6754935f80 RCX: 00007f675477d15c [ 184.529949][T11151] RDX: 000000000000000f RSI: 00007f67556180a0 RDI: 0000000000000005 [ 184.537942][T11151] RBP: 00007f6755618090 R08: 0000000000000000 R09: 0000000000000000 [ 184.545933][T11151] R10: 0000000020000100 R11: 0000000000000246 R12: 0000000000000001 [ 184.553922][T11151] R13: 0000000000000000 R14: 00007f6754935f80 R15: 00007fff75e00478 [ 184.561910][T11151] [ 184.593950][T11149] tipc: Enabling of bearer rejected, failed to enable media [ 184.709054][T11024] bridge0: port 1(bridge_slave_0) entered blocking state [ 184.718687][T11024] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.731166][T11024] bridge_slave_0: entered allmulticast mode [ 184.739848][T11024] bridge_slave_0: entered promiscuous mode [ 184.746133][ T5842] Bluetooth: hci0: command tx timeout [ 184.755052][T11160] netlink: 'syz.0.1365': attribute type 2 has an invalid length. [ 184.773300][T11024] bridge0: port 2(bridge_slave_1) entered blocking state [ 184.780696][T11024] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.791737][T11165] netlink: 'syz.4.1367': attribute type 3 has an invalid length. [ 184.810630][T11024] bridge_slave_1: entered allmulticast mode [ 184.817809][T11024] bridge_slave_1: entered promiscuous mode [ 184.925471][T11171] hsr0: entered promiscuous mode [ 184.935180][T11024] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 185.017287][T11174] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 185.064951][T11024] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 185.256852][T11180] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1372'. [ 185.299268][T11024] team0: Port device team_slave_0 added [ 185.309456][T11024] team0: Port device team_slave_1 added [ 185.411912][T11188] tipc: Enabling of bearer rejected, failed to enable media [ 185.431461][T11024] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 185.451858][T11024] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.488394][T11024] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 185.520025][T11024] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 185.527492][T11024] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 185.555897][T11024] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 185.857027][T11024] hsr_slave_0: entered promiscuous mode [ 185.874769][T11024] hsr_slave_1: entered promiscuous mode [ 185.886235][T11024] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 185.898809][T11024] Cannot create hsr debugfs directory [ 185.915061][T11207] netlink: 'syz.0.1383': attribute type 4 has an invalid length. [ 186.241603][T11229] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1388'. [ 186.666904][T11246] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1393'. [ 186.825007][ T5842] Bluetooth: hci0: command tx timeout [ 187.233596][T11024] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 188.037508][T11024] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 188.070716][T11265] netlink: 'syz.4.1399': attribute type 10 has an invalid length. [ 188.109616][T11265] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 188.125979][T11265] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 188.137856][T11024] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 188.156241][T11024] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 188.290812][T11276] netlink: 'syz.0.1404': attribute type 22 has an invalid length. [ 188.327100][T11278] tipc: Enabling of bearer rejected, failed to enable media [ 188.366252][T11024] 8021q: adding VLAN 0 to HW filter on device bond0 [ 188.418793][T11024] 8021q: adding VLAN 0 to HW filter on device team0 [ 188.452626][ T54] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.459815][ T54] bridge0: port 1(bridge_slave_0) entered forwarding state [ 188.484180][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 188.491490][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 188.596191][T11290] __nla_validate_parse: 2 callbacks suppressed [ 188.596212][T11290] netlink: 220 bytes leftover after parsing attributes in process `syz.4.1411'. [ 188.615857][T11024] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 188.709676][T11295] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 188.773626][T11295] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 188.841172][T11024] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 188.908029][ T5842] Bluetooth: hci0: command tx timeout [ 188.948210][T11024] veth0_vlan: entered promiscuous mode [ 188.958640][T11306] netem: change failed [ 188.969638][T11024] veth1_vlan: entered promiscuous mode [ 188.997507][T11312] netlink: 368 bytes leftover after parsing attributes in process `syz.2.1419'. [ 189.002004][T11313] netlink: 368 bytes leftover after parsing attributes in process `syz.2.1419'. [ 189.030980][T11313] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1419'. [ 189.040228][T11024] veth0_macvtap: entered promiscuous mode [ 189.051371][T11024] veth1_macvtap: entered promiscuous mode [ 189.066594][T11024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.077637][T11024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.087852][T11024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 189.098549][T11024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.111165][T11024] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 189.133368][ C0] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 189.148066][T11306] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1417'. [ 189.149242][T11024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.182718][T11024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.193445][T11024] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 189.208637][T11024] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 189.232820][T11024] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 189.264035][T11024] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.282962][T11024] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.291719][T11024] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.333048][T11024] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 189.358780][T11322] lo speed is unknown, defaulting to 1000 [ 189.590463][ T1099] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.601657][ T1099] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.646080][ T1099] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 189.658625][ T1099] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 189.706058][T11322] lo speed is unknown, defaulting to 1000 [ 189.905151][T11341] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1428'. [ 189.939983][T11340] lo speed is unknown, defaulting to 1000 [ 190.145293][T11340] lo speed is unknown, defaulting to 1000 [ 190.426380][T11369] IPVS: sync thread started: state = BACKUP, mcast_ifn = veth1_to_team, syncid = 0, id = 0 [ 190.678255][T11381] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1439'. [ 190.701153][T11380] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1439'. [ 190.784113][T11387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1438'. [ 190.807117][T11387] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1438'. [ 191.182035][ T54] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 191.877866][ T53] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 191.887579][ T53] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 191.888269][T11417] lo speed is unknown, defaulting to 1000 [ 191.902802][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 191.918215][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 191.933899][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 191.945039][T11424] tun0: tun_chr_ioctl cmd 1074025677 [ 191.950571][T11424] tun0: linktype set to 825 [ 191.955793][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 192.152512][T11429] tap0: tun_chr_ioctl cmd 1074812118 [ 192.251701][ T54] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.289833][T11417] lo speed is unknown, defaulting to 1000 [ 192.296441][T11421] lo speed is unknown, defaulting to 1000 [ 192.572673][ T54] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.594652][T11421] lo speed is unknown, defaulting to 1000 [ 192.658873][ T54] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 192.825890][T11421] chnl_net:caif_netlink_parms(): no params data found [ 192.843334][ T54] bridge_slave_1: left allmulticast mode [ 192.849044][ T54] bridge_slave_1: left promiscuous mode [ 192.859029][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 192.871562][ T54] bridge_slave_0: left allmulticast mode [ 192.880239][ T54] bridge_slave_0: left promiscuous mode [ 192.889248][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.361050][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 193.373077][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 193.385378][ T54] bond0 (unregistering): Released all slaves [ 193.604504][T11421] bridge0: port 1(bridge_slave_0) entered blocking state [ 193.620340][T11421] bridge0: port 1(bridge_slave_0) entered disabled state [ 193.628931][T11421] bridge_slave_0: entered allmulticast mode [ 193.643684][T11421] bridge_slave_0: entered promiscuous mode [ 193.651320][T11421] bridge0: port 2(bridge_slave_1) entered blocking state [ 193.659577][T11421] bridge0: port 2(bridge_slave_1) entered disabled state [ 193.667565][T11421] bridge_slave_1: entered allmulticast mode [ 193.675306][T11421] bridge_slave_1: entered promiscuous mode [ 193.734146][T11421] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 193.853614][T11421] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 193.927408][T11421] team0: Port device team_slave_0 added [ 193.947967][T11421] team0: Port device team_slave_1 added [ 194.113247][ T53] Bluetooth: hci0: command tx timeout [ 194.167725][ T54] hsr_slave_0: left promiscuous mode [ 194.175218][ T54] hsr_slave_1: left promiscuous mode [ 194.181696][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 194.189907][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 194.204120][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 194.212627][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 194.262669][ T54] veth1_macvtap: left promiscuous mode [ 194.273319][ T54] veth0_macvtap: left promiscuous mode [ 194.278958][ T54] veth1_vlan: left promiscuous mode [ 194.289572][ T54] veth0_vlan: left promiscuous mode [ 194.364001][T11488] can: request_module (can-proto-4) failed. [ 194.384612][T11495] ieee802154 phy1 wpan1: encryption failed: -90 [ 194.431777][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.971756][ T54] team0 (unregistering): Port device team_slave_1 removed [ 195.029281][ T54] team0 (unregistering): Port device team_slave_0 removed [ 195.487533][T11421] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 195.512935][T11421] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.575980][T11421] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 195.611431][T11511] __nla_validate_parse: 5 callbacks suppressed [ 195.611451][T11511] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1470'. [ 195.614457][T11421] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 195.634315][T11421] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 195.674651][T11421] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 195.812127][T11508] lo speed is unknown, defaulting to 1000 [ 195.829560][T11421] hsr_slave_0: entered promiscuous mode [ 195.857997][T11421] hsr_slave_1: entered promiscuous mode [ 195.884484][T11421] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 195.918216][T11421] Cannot create hsr debugfs directory [ 196.074101][T11508] lo speed is unknown, defaulting to 1000 [ 196.105882][T11526] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1477'. [ 196.193406][ T53] Bluetooth: hci0: command tx timeout [ 196.597764][T11554] netlink: 148 bytes leftover after parsing attributes in process `syz.4.1480'. [ 196.945665][T11570] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1488'. [ 197.312816][T11421] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 197.381968][T11587] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1492'. [ 197.405746][T11587] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1492'. [ 197.450703][T11586] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1492'. [ 197.468801][T11586] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1492'. [ 197.491491][T11421] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 197.556357][T11421] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 197.581241][T11421] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 197.646576][T11603] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1495'. [ 197.666281][T11604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.685784][T11603] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1495'. [ 197.704389][T11604] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 197.915254][T11421] 8021q: adding VLAN 0 to HW filter on device bond0 [ 197.952272][T11421] 8021q: adding VLAN 0 to HW filter on device team0 [ 197.976391][T11621] netlink: 'syz.3.1499': attribute type 3 has an invalid length. [ 198.010066][ T5901] bridge0: port 1(bridge_slave_0) entered blocking state [ 198.017318][ T5901] bridge0: port 1(bridge_slave_0) entered forwarding state [ 198.070229][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 198.077495][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 198.263191][ T53] Bluetooth: hci0: command tx timeout [ 198.371471][T11638] lo speed is unknown, defaulting to 1000 [ 198.389017][T11421] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 198.465777][T11421] veth0_vlan: entered promiscuous mode [ 198.525377][T11421] veth1_vlan: entered promiscuous mode [ 198.572259][T11421] veth0_macvtap: entered promiscuous mode [ 198.591319][T11421] veth1_macvtap: entered promiscuous mode [ 198.678614][T11421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.722987][T11421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.743370][T11421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 198.754409][T11421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.766092][T11421] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.776513][T11421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.787171][T11421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.810102][T11421] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 198.824401][T11421] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 198.844682][T11421] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.879430][T11638] lo speed is unknown, defaulting to 1000 [ 198.889912][T11421] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.915933][T11421] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.934371][T11421] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.963684][T11421] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 199.315925][ T5906] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.339260][ T5906] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.455877][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 199.483379][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 199.663777][T11669] pimreg3: entered allmulticast mode [ 199.695478][T11668] pimreg3: left allmulticast mode [ 200.209311][T11690] bridge_slave_0: left allmulticast mode [ 200.233217][T11690] bridge_slave_0: left promiscuous mode [ 200.239157][T11690] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.277850][T11690] bridge_slave_1: left allmulticast mode [ 200.292203][T11690] bridge_slave_1: left promiscuous mode [ 200.301199][T11690] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.329507][T11690] bond0: (slave bond_slave_0): Releasing backup interface [ 200.346830][T11690] bond0: (slave bond_slave_1): Releasing backup interface [ 200.379739][T11690] team0: Port device team_slave_0 removed [ 200.408198][T11690] team0: Port device team_slave_1 removed [ 200.415188][T11690] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 200.422734][T11690] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 200.437024][T11700] sctp: [Deprecated]: syz.0.1515 (pid 11700) Use of int in max_burst socket option deprecated. [ 200.437024][T11700] Use struct sctp_assoc_value instead [ 200.453149][T11690] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 200.462111][T11690] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 200.482428][T11690] team0: Port device netdevsim0 removed [ 200.497832][T11699] bond0: option lacp_active: mode dependency failed, not supported in mode balance-rr(0) [ 200.521618][T11698] wg2: entered promiscuous mode [ 200.540537][T11698] team0: Port device wg2 added [ 200.647844][T11711] netlink: 'syz.3.1522': attribute type 25 has an invalid length. [ 200.944756][T11727] batadv_slave_1: entered promiscuous mode [ 200.970897][T11727] bond0: Unable to set down delay as MII monitoring is disabled [ 201.018854][T11727] lo speed is unknown, defaulting to 1000 [ 201.219237][ T1099] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 201.396485][T11727] lo speed is unknown, defaulting to 1000 [ 201.551989][T11724] batadv_slave_1: left promiscuous mode [ 201.920495][T11744] __nla_validate_parse: 8 callbacks suppressed [ 201.920515][T11744] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1530'. [ 201.933971][T11740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1533'. [ 201.973513][T11744] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1530'. [ 201.991274][T11744] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1530'. [ 202.011194][T11744] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1530'. [ 202.022720][T11744] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1530'. [ 202.063595][T11751] netlink: 332 bytes leftover after parsing attributes in process `syz.2.1535'. [ 202.243478][T11766] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1538'. [ 202.256858][ T1099] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.383318][ T5842] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 202.392437][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 202.411562][ T5842] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 202.427635][ T5842] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 202.439926][ T5842] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 202.447323][ T5842] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 202.462635][ T1099] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.499899][T11771] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1539'. [ 202.655952][T11791] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1542'. [ 202.678998][ T1099] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 202.716604][T11791] netlink: 'syz.3.1542': attribute type 39 has an invalid length. [ 202.757684][T11795] Bluetooth: MGMT ver 1.23 [ 202.767834][T11792] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 202.775834][T11772] lo speed is unknown, defaulting to 1000 [ 203.014349][ T1099] bridge_slave_1: left allmulticast mode [ 203.038086][ T1099] bridge_slave_1: left promiscuous mode [ 203.055837][ T1099] bridge0: port 2(bridge_slave_1) entered disabled state [ 203.131256][ T1099] bridge_slave_0: left allmulticast mode [ 203.146513][ T1099] bridge_slave_0: left promiscuous mode [ 203.173244][ T1099] bridge0: port 1(bridge_slave_0) entered disabled state [ 203.771323][ T1099] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 203.782577][ T1099] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 203.796424][ T1099] bond0 (unregistering): Released all slaves [ 203.809583][T11772] lo speed is unknown, defaulting to 1000 [ 204.505644][ T5842] Bluetooth: hci0: command tx timeout [ 204.516845][T11853] xt_CT: You must specify a L4 protocol and not use inversions on it [ 204.720893][ T1099] hsr_slave_0: left promiscuous mode [ 204.755261][ T1099] hsr_slave_1: left promiscuous mode [ 204.766694][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 204.783388][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 204.811705][ T1099] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 204.823132][ T53] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 204.869193][ T1099] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 204.952147][ T1099] veth1_macvtap: left promiscuous mode [ 204.973711][T11866] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 204.987939][ T1099] veth0_macvtap: left promiscuous mode [ 204.994362][ T1099] veth1_vlan: left promiscuous mode [ 204.999698][ T1099] veth0_vlan: left promiscuous mode [ 205.029696][T11841] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 205.590433][ T1099] team0 (unregistering): Port device team_slave_1 removed [ 205.635118][ T1099] team0 (unregistering): Port device team_slave_0 removed [ 206.157093][T11772] chnl_net:caif_netlink_parms(): no params data found [ 206.230545][T11896] xt_TCPMSS: Only works on TCP SYN packets [ 206.284348][T11904] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 206.415697][T11911] vlan2: entered promiscuous mode [ 206.443210][T11911] vlan2: entered allmulticast mode [ 206.448903][T11911] team0: Device vlan2 is of different type [ 206.484942][T11772] bridge0: port 1(bridge_slave_0) entered blocking state [ 206.492265][T11772] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.500959][T11772] bridge_slave_0: entered allmulticast mode [ 206.533372][T11772] bridge_slave_0: entered promiscuous mode [ 206.552353][T11772] bridge0: port 2(bridge_slave_1) entered blocking state [ 206.568950][T11772] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.583409][T11772] bridge_slave_1: entered allmulticast mode [ 206.590507][T11772] bridge_slave_1: entered promiscuous mode [ 206.705808][T11772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.748544][T11772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.859288][T11772] team0: Port device team_slave_0 added [ 206.893806][T11772] team0: Port device team_slave_1 added [ 206.958635][T11772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 206.971910][T11772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 206.998120][T11943] __nla_validate_parse: 8 callbacks suppressed [ 206.998142][T11943] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1589'. [ 207.019457][T11772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.039584][T11772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.047664][T11772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.079409][T11772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.092322][T11943] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1589'. [ 207.203724][T11952] netlink: 112 bytes leftover after parsing attributes in process `syz.0.1591'. [ 207.387523][T11772] hsr_slave_0: entered promiscuous mode [ 207.421637][T11772] hsr_slave_1: entered promiscuous mode [ 207.447665][T11772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.473791][T11772] Cannot create hsr debugfs directory [ 207.484691][T11967] netlink: 52 bytes leftover after parsing attributes in process `syz.4.1594'. [ 207.503015][T11964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1594'. [ 207.631013][T11974] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 207.667091][T11972] netlink: 'syz.0.1597': attribute type 3 has an invalid length. [ 207.712082][T11976] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1598'. [ 208.050244][T11983] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 208.079308][T11988] vlan3: entered allmulticast mode [ 208.320304][T11991] lo speed is unknown, defaulting to 1000 [ 208.760103][T11772] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 208.798413][T12009] delete_channel: no stack [ 208.811325][T12009] delete_channel: no stack [ 208.824048][T11772] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 208.869134][T11772] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 208.909597][T11991] lo speed is unknown, defaulting to 1000 [ 208.913614][T11772] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 209.216120][T12038] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1605'. [ 209.405970][T11772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.577461][T11772] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.615084][ T1099] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.622201][ T1099] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.637155][T12076] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 209.637200][T12076] llcp: llcp_sock_recvmsg: Recv datagram failed state 4 -11 0 [ 209.656018][ T1099] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.671201][ T1099] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.148240][T11772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.262308][T12102] pim6reg1: entered promiscuous mode [ 210.270142][T12102] pim6reg1: entered allmulticast mode [ 210.338904][T12105] pim6reg1: entered promiscuous mode [ 210.360350][T12105] pim6reg1: entered allmulticast mode [ 210.535320][T11772] veth0_vlan: entered promiscuous mode [ 210.589866][T11772] veth1_vlan: entered promiscuous mode [ 210.741356][T11772] veth0_macvtap: entered promiscuous mode [ 210.758648][T11772] veth1_macvtap: entered promiscuous mode [ 210.776556][T11772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.787201][T11772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.834330][T11772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.867837][T11772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.881489][T11772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.899810][T11772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.937159][T11772] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.957067][T11772] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.978350][T11772] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.001492][T11772] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 211.095251][T12137] pim6reg1: entered promiscuous mode [ 211.101178][T12137] pim6reg1: entered allmulticast mode [ 211.270231][T12143] [ 211.273139][T12143] ====================================================== [ 211.277469][T11772] ieee80211 phy26: Selected rate control algorithm 'minstrel_ht' [ 211.280157][T12143] WARNING: possible circular locking dependency detected [ 211.295674][T12143] 6.12.0-rc5-syzkaller-01164-gccb35037c48a #0 Not tainted [ 211.305463][T12143] ------------------------------------------------------ [ 211.315118][T12143] syz.3.1651/12143 is trying to acquire lock: [ 211.322206][T12143] ffff8880b8729430 (krc.lock){..-.}-{2:2}, at: kvfree_call_rcu+0x18a/0x790 [ 211.332591][T12143] [ 211.332591][T12143] but task is already holding lock: [ 211.343796][T12143] ffff8880b872a718 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 [ 211.353501][T12143] [ 211.353501][T12143] which lock already depends on the new lock. [ 211.353501][T12143] [ 211.364656][T12143] [ 211.364656][T12143] the existing dependency chain (in reverse order) is: [ 211.373687][T12143] [ 211.373687][T12143] -> #1 (&base->lock){-.-.}-{2:2}: [ 211.381023][T12143] lock_acquire+0x1ed/0x550 [ 211.386063][T12143] _raw_spin_lock_irqsave+0xd5/0x120 [ 211.391960][T12143] lock_timer_base+0x112/0x240 [ 211.397264][T12143] __mod_timer+0x1ca/0xeb0 [ 211.402451][T12143] queue_delayed_work_on+0x1ca/0x390 [ 211.408406][T12143] kvfree_call_rcu+0x47f/0x790 [ 211.413765][T12143] pwq_release_workfn+0x664/0x800 [ 211.421588][T12143] kthread_worker_fn+0x500/0xb70 [ 211.427484][T12143] kthread+0x2f0/0x390 [ 211.433389][T12143] ret_from_fork+0x4b/0x80 [ 211.438445][T12143] ret_from_fork_asm+0x1a/0x30 [ 211.445413][T12143] [ 211.445413][T12143] -> #0 (krc.lock){..-.}-{2:2}: [ 211.454478][T12143] validate_chain+0x18ef/0x5920 [ 211.461095][T12143] __lock_acquire+0x1384/0x2050 [ 211.467357][T12143] lock_acquire+0x1ed/0x550 [ 211.473017][T12143] _raw_spin_lock+0x2e/0x40 [ 211.478753][T12143] kvfree_call_rcu+0x18a/0x790 [ 211.484199][T12143] trie_delete_elem+0x546/0x6a0 [ 211.489748][T12143] bpf_prog_ae0c3e605f35524c+0x46/0x4a [ 211.496007][T12143] bpf_trace_run2+0x2ec/0x540 [ 211.502119][T12143] enqueue_timer+0x3ce/0x570 [ 211.508069][T12143] __mod_timer+0xa0e/0xeb0 [ 211.514601][T12143] sk_reset_timer+0x23/0xc0 [ 211.521109][T12143] tipc_sk_finish_conn+0x16b/0x820 [ 211.527560][T12143] tipc_socketpair+0x25c/0x4b0 [ 211.534748][T12143] __sys_socketpair+0x40f/0x720 [ 211.542158][T12143] __x64_sys_socketpair+0x9b/0xb0 [ 211.548969][T12143] do_syscall_64+0xf3/0x230 [ 211.555500][T12143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 211.562749][T12143] [ 211.562749][T12143] other info that might help us debug this: [ 211.562749][T12143] [ 211.573336][T12143] Possible unsafe locking scenario: [ 211.573336][T12143] [ 211.580783][T12143] CPU0 CPU1 [ 211.586445][T12143] ---- ---- [ 211.591884][T12143] lock(&base->lock); [ 211.596052][T12143] lock(krc.lock); [ 211.603107][T12143] lock(&base->lock); [ 211.609876][T12143] lock(krc.lock); [ 211.614240][T12143] [ 211.614240][T12143] *** DEADLOCK *** [ 211.614240][T12143] [ 211.623654][T12143] 2 locks held by syz.3.1651/12143: [ 211.629016][T12143] #0: ffff8880b872a718 (&base->lock){-.-.}-{2:2}, at: lock_timer_base+0x112/0x240 [ 211.639315][T12143] #1: ffffffff8e937da0 (rcu_read_lock){....}-{1:2}, at: bpf_trace_run2+0x1fc/0x540 [ 211.649625][T12143] [ 211.649625][T12143] stack backtrace: [ 211.655640][T12143] CPU: 1 UID: 0 PID: 12143 Comm: syz.3.1651 Not tainted 6.12.0-rc5-syzkaller-01164-gccb35037c48a #0 [ 211.668943][T12143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 211.679272][T12143] Call Trace: [ 211.682710][T12143] [ 211.685683][T12143] dump_stack_lvl+0x241/0x360 [ 211.690484][T12143] ? __pfx_dump_stack_lvl+0x10/0x10 [ 211.696050][T12143] ? __pfx__printk+0x10/0x10 [ 211.701198][T12143] print_circular_bug+0x13a/0x1b0 [ 211.706376][T12143] check_noncircular+0x36a/0x4a0 [ 211.711428][T12143] ? __pfx_check_noncircular+0x10/0x10 [ 211.717105][T12143] ? lockdep_lock+0x123/0x2b0 [ 211.721902][T12143] ? __bfs+0x368/0x6f0 [ 211.726411][T12143] ? __pfx_validate_chain+0x10/0x10 [ 211.732319][T12143] ? lockdep_unlock+0x16a/0x300 [ 211.737257][T12143] validate_chain+0x18ef/0x5920 [ 211.742193][T12143] ? __pfx_validate_chain+0x10/0x10 [ 211.748526][T12143] ? mark_lock+0x9a/0x360 [ 211.753131][T12143] ? __lock_acquire+0x1384/0x2050 [ 211.758489][T12143] ? mark_lock+0x9a/0x360 [ 211.763492][T12143] ? mark_lock+0x9a/0x360 [ 211.770930][T12143] __lock_acquire+0x1384/0x2050 [ 211.776870][T12143] lock_acquire+0x1ed/0x550 [ 211.782193][T12143] ? kvfree_call_rcu+0x18a/0x790 [ 211.787610][T12143] ? __pfx_lock_acquire+0x10/0x10 [ 211.793831][T12143] ? debug_object_active_state+0x239/0x360 [ 211.800187][T12143] ? __pfx_debug_object_active_state+0x10/0x10 [ 211.806394][T12143] ? __virt_addr_valid+0x183/0x530 [ 211.813163][T12143] ? __virt_addr_valid+0x183/0x530 [ 211.818630][T12143] ? __virt_addr_valid+0x45f/0x530 [ 211.823850][T12143] ? __phys_addr+0xba/0x170 [ 211.828534][T12143] _raw_spin_lock+0x2e/0x40 [ 211.833038][T12143] ? kvfree_call_rcu+0x18a/0x790 [ 211.838095][T12143] kvfree_call_rcu+0x18a/0x790 [ 211.843563][T12143] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 211.849564][T12143] ? __pfx_kvfree_call_rcu+0x10/0x10 [ 211.855513][T12143] ? longest_prefix_match+0x49f/0x650 [ 211.861467][T12143] trie_delete_elem+0x546/0x6a0 [ 211.866622][T12143] ? bpf_trace_run2+0x1fc/0x540 [ 211.872324][T12143] bpf_prog_ae0c3e605f35524c+0x46/0x4a [ 211.879164][T12143] bpf_trace_run2+0x2ec/0x540 [ 211.884304][T12143] ? __pfx_bpf_trace_run2+0x10/0x10 [ 211.890235][T12143] ? __pfx_debug_object_activate+0x10/0x10 [ 211.896820][T12143] ? __lock_acquire+0x1384/0x2050 [ 211.902444][T12143] enqueue_timer+0x3ce/0x570 [ 211.907772][T12143] __mod_timer+0xa0e/0xeb0 [ 211.912367][T12143] ? __pfx___mod_timer+0x10/0x10 [ 211.917700][T12143] ? __pfx_lock_acquire+0x10/0x10 [ 211.922763][T12143] ? net_generic+0x1f/0x240 [ 211.928062][T12143] ? __pfx_lock_release+0x10/0x10 [ 211.934622][T12143] sk_reset_timer+0x23/0xc0 [ 211.940116][T12143] tipc_sk_finish_conn+0x16b/0x820 [ 211.945636][T12143] tipc_socketpair+0x25c/0x4b0 [ 211.951054][T12143] __sys_socketpair+0x40f/0x720 [ 211.957084][T12143] ? __pfx___sys_socketpair+0x10/0x10 [ 211.963550][T12143] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 211.970603][T12143] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 211.977449][T12143] ? do_syscall_64+0x100/0x230 [ 211.982494][T12143] __x64_sys_socketpair+0x9b/0xb0 [ 211.987736][T12143] do_syscall_64+0xf3/0x230 [ 211.992754][T12143] ? clear_bhb_loop+0x35/0x90 [ 211.998008][T12143] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 212.004626][T12143] RIP: 0033:0x7f8be557e719 [ 212.009351][T12143] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 212.033311][T12143] RSP: 002b:00007f8be63e2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000035 [ 212.042451][T12143] RAX: ffffffffffffffda RBX: 00007f8be5735f80 RCX: 00007f8be557e719 [ 212.050824][T12143] RDX: 0000000000000000 RSI: 0000000000000005 RDI: 000000000000001e [ 212.061423][T12143] RBP: 00007f8be55f139e R08: 0000000000000000 R09: 0000000000000000 [ 212.071007][T12143] R10: 0000000020000940 R11: 0000000000000246 R12: 0000000000000000 [ 212.081206][T12143] R13: 0000000000000000 R14: 00007f8be5735f80 R15: 00007ffd115ecd58 [ 212.090769][T12143] [ 212.104023][ T1134] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.121139][ T1134] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 212.151713][ T54] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.172306][ T54] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.773766][ T54] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.007477][ T54] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.080151][ T54] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.132039][ T54] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.255917][ T54] bridge_slave_1: left allmulticast mode [ 214.261936][ T54] bridge_slave_1: left promiscuous mode [ 214.269508][ T54] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.279351][ T54] bridge_slave_0: left allmulticast mode [ 214.289126][ T54] bridge_slave_0: left promiscuous mode [ 214.295105][ T54] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.455657][ T54] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 214.471572][ T54] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 214.485237][ T54] bond0 (unregistering): Released all slaves [ 214.768633][ T54] hsr_slave_0: left promiscuous mode [ 214.776105][ T54] hsr_slave_1: left promiscuous mode [ 214.789171][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 214.808294][ T54] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 214.818863][ T54] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 214.833973][ T54] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 214.845750][ T54] veth1_macvtap: left promiscuous mode [ 214.854662][ T54] veth0_macvtap: left promiscuous mode [ 214.861597][ T54] veth1_vlan: left promiscuous mode [ 214.869142][ T54] veth0_vlan: left promiscuous mode [ 215.146367][ T54] team0 (unregistering): Port device team_slave_1 removed [ 215.191826][ T54] team0 (unregistering): Port device team_slave_0 removed