last executing test programs: 4.141961115s ago: executing program 2 (id=542): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000a00000a80000000060a0b0400000000000000000200000054000480500001800a000100696e6e65720000004000028008000240000000840800034000000007080004400000000f08000140000000001c0005800cf20c007061796c6f6164000c00028008000240000000020900010073797a30000000000900020073797a32"], 0xa8}}, 0x0) 3.970024808s ago: executing program 3 (id=544): r0 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r0, 0x4000000000000, 0x40, &(0x7f00000002c0)=@raw={'raw\x00', 0x4001, 0x3, 0x208, 0x0, 0x0, 0x148, 0xd8, 0x148, 0x170, 0x240, 0x240, 0x170, 0x240, 0x7fffffe, 0x0, {[{{@ip={@private, @broadcast, 0x0, 0x0, 'vcan0\x00', 'veth1_to_batadv\x00', {}, {}, 0x0, 0x0, 0x6f}, 0x0, 0x70, 0xd8}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, '\x00', 'syz1\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'pimreg\x00'}, 0x0, 0x70, 0x98}, @common=@unspec=@NFQUEUE1={0x28}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) 3.901480964s ago: executing program 3 (id=545): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x9c, &(0x7f0000000c40)=""/156, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xdb) r2 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r2, 0x0) ioctl$SIOCX25CALLACCPTAPPRV(r2, 0x89e8) syz_init_net_socket$ax25(0x3, 0x3, 0x7) r3 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r3, &(0x7f0000000000)={0x24, @long}, 0x8) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000007200a143000000000000000007"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r5 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r5, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) close(r5) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000005c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r7 = accept4(r6, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) r8 = syz_init_net_socket$ax25(0x3, 0x3, 0x6) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000040)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$SIOCAX25GETINFOOLD(r8, 0x89e9, &(0x7f0000000340)) r9 = socket$inet6(0xa, 0x4, 0x6) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r9, 0x84, 0x17, &(0x7f0000000d00)=ANY=[@ANYRES32=0x0, @ANYBLOB="0400bc0002379c89d271f8463a9099af06028879635d2c5f9e26c9f0fc472212dc86c9ec9414b664c13c14a4a6d0d8d0934df014f6aada2f4d0ddc6ef3a1c6891d84eda26dd18063615cac7a328404a74fec1b6b473d25c95401b097a39931365fefd9a13ac8c53fc90ecb8f961910f2b3a7d01581a8abed5a7536c4900ab12968971aaf460a6b21aff1cbb56554680f3546f2013cbf82c8c7a7bafeba2e614af4d3f67c9507c58393dd6c562d6796e0e526dd5b57f7e16cc9328bfed13389ab"], 0xc4) 3.741889288s ago: executing program 2 (id=547): socket$nl_route(0x10, 0x3, 0x0) socket$inet6_icmp(0xa, 0x2, 0x3a) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000000)=@framed={{0xffffff85, 0x0, 0x0, 0x0, 0x8, 0x76}, [@call={0x27}]}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000001240)=@base={0xf, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x37) close(r0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000012c0)={0xe, 0xe, &(0x7f0000001580)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000820000001800000001000000000000000000000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000240)={{r1}, &(0x7f0000000100), &(0x7f0000000140)=r0}, 0x20) sendmsg(r2, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000001400)='H', 0x20001401}], 0x1}, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet(0x2, 0x4000000000000001, 0x0) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r4) r5 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r4, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r4, 0x9) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) r7 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'ipvlan1\x00', 0x0}) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000001c0)=@newneigh={0x30, 0x1c, 0x401, 0x0, 0x0, {0x2, 0x0, 0x0, r8, 0x81}, [@NDA_DST_MAC={0xa, 0x1, @link_local}, @NDA_FLAGS_EXT={0x8, 0xf, 0x1}]}, 0x30}}, 0x4) connect$inet(r6, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) accept$inet6(r5, 0x0, 0x0) 3.241057999s ago: executing program 4 (id=549): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_rdma(0x10, 0x3, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), 0xffffffffffffffff) socket$kcm(0x10, 0x2, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={0x1, 0xffffffffffffffff}, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000002b40), r5) sendmsg$NLBL_MGMT_C_ADD(r5, &(0x7f0000002c40)={0x0, 0x0, &(0x7f0000002c00)={&(0x7f0000002b80)={0x34, r6, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@NLBL_MGMT_A_IPV4ADDR={0x8, 0x7, @empty}, @NLBL_MGMT_A_DOMAIN={0xe, 0x1, 'net/l2cap\x00'}, @NLBL_MGMT_A_PROTOCOL={0x8, 0x2, 0x3}]}, 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x4000080) r7 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x6, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=@newlink={0x28, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0xfe}, [@IFLA_GROUP={0x8}]}, 0x28}}, 0x0) r8 = socket(0x15, 0x5, 0x0) connect$netrom(r8, &(0x7f00000000c0)={{0xa, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}, 0x48) getpeername$packet(r8, 0x0, 0x0) ioctl$IMHOLD_L1(r8, 0x80044948, 0x0) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={0x0, &(0x7f00000002c0)=""/121, 0x0, 0x79, 0x0, 0x6, 0x10000, @value}, 0x28) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@bloom_filter={0x1e, 0x60a8, 0x7, 0x5, 0x40000, r4, 0x80000001, '\x00', 0x0, r9, 0x0, 0x1, 0x1, 0xb, @void, @value, @void, @value}, 0x50) socket$packet(0x11, 0x2, 0x300) r10 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) syz_emit_ethernet(0x3e, &(0x7f0000000100)={@local, @broadcast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0xa, 0x30, 0x0, 0x0, 0x0, 0x21, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @redirect={0x5, 0x0, 0x0, @remote={0x5}, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @multicast2, @dev}}}}}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r10, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_emit_ethernet(0x46, &(0x7f0000000000)={@broadcast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "120008", 0x10, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_ra={0x86, 0x0, 0x0, 0x1, 0x0, 0x2}}}}}}, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000002e40)={@local, @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "7428dd", 0x28, 0x3a, 0xff, @remote, @mcast2, {[], @ndisc_na={0x89, 0x0, 0x0, 0x0, '\x00', @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [{0x0, 0x2, "122b472e41e24b11f34b608816e5"}]}}}}}}, 0x0) socket$nl_route(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r3, @ANYBLOB="030700006200190000000b0000000800030048"], 0x1c}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001400)=@newlink={0x4c, 0x10, 0x49920d862a92153b, 0x800, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x1b400}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bond={{0x9}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BOND_MODE={0x5, 0x1, 0x6}, @IFLA_BOND_MIIMON={0x8}]}}}, @IFLA_MASTER={0x8, 0xa, r11}]}, 0x4c}}, 0x0) 2.851297978s ago: executing program 1 (id=552): bpf$MAP_CREATE_RINGBUF(0x0, 0x0, 0x0) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) bind$rose(r0, &(0x7f00000012c0)=@short={0xb, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @null, 0x1, @bcast}, 0x1c) 2.691027881s ago: executing program 1 (id=553): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a48000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000001c0008800c000240000000000000b0800c0001400000000000000101140000dea5b3b900"/110], 0x70}}, 0x0) 2.677913762s ago: executing program 3 (id=554): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x2, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000500000001890000b362000095000000000000001800000020646c2500000000002020207b1af8ffccf3be86bd21ffff0000000007010000f8ffffffb5f97b0a43000000000085000000ae00000095000000000000002ed3ab"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000001340)=',', 0x1, 0x0, &(0x7f0000001400)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0xfffffffe}, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000000201cc0f01d56bd36703529f2a13b66ab30b689f4295e0a6ba7a0400"], 0x18}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xeccc) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000020000100000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r5, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0xfcffffff00000000}, 0x0) 2.554723788s ago: executing program 1 (id=555): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), r0) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)={0x24, r1, 0x1, 0x2, 0x25dfdbfb, {}, [@TIPC_NLA_NET={0x10, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xfffffffffffffff7}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x400c090}, 0x0) 2.177593459s ago: executing program 1 (id=557): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x2c, &(0x7f0000000580)=0x3ff, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000002c0)={0x0, 0x0}, 0x10) r4 = socket$inet(0x2, 0x4000000805, 0x0) listen(r4, 0x5) sendmmsg(r4, 0x0, 0x0, 0x844) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000800)=@mgmt_frame=@probe_response={{{}, {}, @broadcast, @device_a, @random="3d0fd811a354"}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, [{0xdd, 0xc5, "e88abcc7dae16d0e57815c14b3aed932558389a19a04794a5dad89cd7ecfd9d9aef9a1a49abc82658e6cfb1cd6b9c6fac63562c43f4d783dfb19d212016a563e70f3480c4128a706119afccbc587e6e573240744b498aa816ff6d733b77b270d71ffd2bf90c2b07b248a081b111a7da07a6b5dc3e606b7a5d0c09c55549488024f349c4fa02252785be3cf345fc2fe51298a26ebc5ab52c9b3e16fc7580d78504f66b81c95677f7455abea3fcae55cbb12aa74f0709d8aa6b2e743763d00a2f3160d5bd8ef"}]}, 0xfc) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x5, [{0x4, 0x1}, {0xb, 0x1}, {0xc}, {0x12}, {0x18}]}, @void}, 0x25) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 2.087766447s ago: executing program 4 (id=558): socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='memory.events\x00', 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01d90000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="00f7ffffffffffff130012800b00010062617461647600000400028008000a00", @ANYRES32=r3], 0x3c}}, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f00000038c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) close(r5) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha256-avx2\x00'}, 0x58) accept4(r6, 0x0, 0x0, 0x0) socket$inet(0x2, 0xa, 0x7) socket$nl_route(0x10, 0x3, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="500000001000010400"/19, @ANYRES32=r7, @ANYBLOB="0000000000000000300012800b00010065727370616e0000200002800400120005001600020000000500170000000000060018"], 0x50}, 0x1, 0x0, 0x0, 0x4000}, 0x4080) r8 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_SET(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)={0x38, 0x1410, 0x1, 0x70bd2c, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_PORT_INDEX={0x8, 0x3, 0x1}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8, 0x4a, 0x1}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_AUTO_MODE_MASK={0x8, 0x4c, 0x1}, @RDMA_NLDEV_ATTR_STAT_RES={0x8}]}, 0x38}, 0x1, 0x0, 0x0, 0x24044836}, 0xc094) r9 = socket$nl_route(0x10, 0x3, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_META_KEY={0x8, 0x2, 0x1, 0x0, 0x23}]}}}]}]}], {0x14}}, 0x7c}, 0x1, 0x0, 0x0, 0x24044800}, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x0, 0x30000001}, 0x1}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x8847}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) 1.940038266s ago: executing program 2 (id=559): unshare(0x28040600) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r0, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) 1.859775472s ago: executing program 2 (id=560): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x3, 0x40000004, 0x0, 0xffffffffffffffff, 0x47, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000008c0)={0x1}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0xa, &(0x7f0000000000), 0x4) syz_80211_join_ibss(&(0x7f00000001c0)='wlan0\x00', &(0x7f0000000200)=@default_ap_ssid, 0x6, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000280)={0x0, 0x0}, 0x10) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x1404, 0x8, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r6) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff07000700263a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000002c00010026bd7000fedbdf250400007ae893464dea8d00f9f4b9041f0715e02cfc7ac51bc8915bc13a9661c7aa94634b93f2e52e8af11bcaf964d63d414b6a5bf9402c912abfd4ed667c3050f07016aac4a830d84fb35a24528ac8b56ba2150bb2e9e9f535c2b5a82c7cfd0d81d2781ae190c826e795fbe8b280e31562ecbf21696999cee4c23b6e4a8a89d93f9f9a3e4b2fcf557af969"], 0x14}, 0x1, 0x0, 0x0, 0x409d}, 0x50) 1.727714123s ago: executing program 3 (id=561): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0f000000040000000400000088"], 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000401f000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800001a0000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.598016531s ago: executing program 3 (id=562): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x9, 0x3, 0x8, 0x4, 0x2, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x11, 0xd, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4000000}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}, @call={0x85, 0x0, 0x0, 0xe}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ac0)={{r0}, &(0x7f0000000a40), &(0x7f0000000a80)='%pB \x00'}, 0x20) 1.597276434s ago: executing program 4 (id=563): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_FLUSH(r0, &(0x7f00000003c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x3088}, 0xc, &(0x7f0000000280)={&(0x7f0000000480)={0x28, 0x4, 0x6, 0x101, 0x0, 0x0, {0x3, 0x0, 0xa}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.553845737s ago: executing program 2 (id=564): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003900)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd120000000000008500000006000000b70000000000000095000000000000003faf4f1e7f2aa3d9b18ed81c0c869b51ec6c0af4e0e4a9446c7670568982b4e020f698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f13905ea23c22624c9f87f9793f50bb546040677b0c5077da80fb982c1e9400e693146cea484a415b76966118b64f751a0f241b07080008002d75593a286cecc93e64c227c95aa0b784625704f07a72c234664c0af9360a1f7a5e6b607130c89f18c0c1089d8b853289e01aa27ae8b09e00e79ab20b0b8e1148f49faf2ad0000000000000006fa03c6468972089b302d7bf6023cdcedb5e0125ebbc08dee510cb2364149215108333719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad2300000080006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f4ab87b1bfeda7be586602d985430cea0162ab3fcf4591c926abfb0767192302000000b0eea24492a660583eecb42cbcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c95c25a573dc2edcaea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d605ffff9c4d2ec7c32f2095e63c80aff9fa740b5b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142ba11de6c5d50b83bae613402216b5054d1e7c13b1355d6f4a8245ffa4997da9c77af4c0eb97fca585ec6bf5af51d564beb6d952aab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a326eea31ae4e0f7505ebf6c9d13330ca005ace1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57000000009700cf0b4b8bc2294133000000000000000000030000000000000000000000000010008bc0d9559711e6e8861c46495ba585a4b2d02edc3e28dd271c896249ed85b980680b00002b435ac15fc0288d9b2a169cdcacc413038dafb7a2c8cb482bac0ac502d9ba96ffffff7f0000100000000000007d5ad897ef3b7cda42013d53046da21b40216e14ba2d6ad5656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff729433282830689da6b53b263339863297771429d120000003341bf4abacac95900fca0493cf29b33dcc9ffffffffffffffd39fec2271ff01589646efd1cf870cd7bb2366fde41f94290c2a5ff870ce41fd3467decb05cfd9fcb32c8ed1dbd9d10a64c1083d5e71b5565b1768ee58969c41595229df17bcad70fb4021428ce970275d13b78100788f11f76161d46ea3abe0fa4d30dc94ef241875f3b4ce0232fcea69c271d7fa29822aea68a660e717a04becff0f719197724f4fce1093b62d7e8c7123d8ec571be54c72d978cf906df0042e36acd37d7f9e119f2c06f815312e0cfe222a06f56dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef2ae582786105c7df8be5877050c91301bb997316dbf17866fb84d4173731efe895ff2e1c5560926e90109b598502d3e959efc71f665c4d75cf2458e3546c1c776da64fb5abee0acfd235f2f4632c9062ece84c99a061887a20639b41c8c12ee86c50804042b3fb5aac518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad05573af40326993947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457acf37331766e472391e358c3b377327ac9ecc34f24c9ae153ec60ac0694dc55bff9f5f45f90400000000000000d6b2c5ea1393fdf24285bf16b99c9cc0ad1857216f1a985f369191ae954febb3df464bfe0f7f3ee9afe7befb89d2777399f5874c553aeb3729cffe86e66964ae09bb6d163118e4cbe024fd4500f8ff0700000000cc9d8046c216c1f895778cb25122a2a9f9b444aeadea2a40da8daccf080842a486721737390cbf3a74cb2003016f1514216bdf57d2a40d40b51ab63e96ec8485b3b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde8a168c3f5db2fea6f26e4a4304e50c349f4f9ecee27defc93871c5f99b355b72d538ba4958ea8e4aa37094191e10096e7e60fc3541a2c905a1a95e9571bf38ae1981c4238ecaee6f75cd0a6881bd1517a8250ddc8674152f94e3a409e2a3bce109b60000000000000000d6d5210d7503000000a87a27602b81f76386f1535bef1497f92186086e29c6bc5a1fad6ec9a31137abf9a404abde7750898b1bd627e873f8703be8672d70d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e6c257a45319f18101288d139bd3da20fed05a8fe64680b0a3fc22dd70400000000946912d6c98cd1a9fbe1e7d58c08acaf30235b918a31d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69993e9960ff5f76015e6009556237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff854352cb4900000000000000000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66418d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a53f1c96e0d4b3bc19faa5449209b083dbd334b47f067bbab40743b2a42010082008df75cf43f8ecc8d3726602111b40e761fd21081920382f14d12ca3c3431ee97471c7868dcda7eaa69eb7f7f80572fdd11bb1d0d1280fbc22bf73468788df51710d7d31c632fc5ed1762eb0b428ee751c47d8e894f745a868404a0bf35f0121008b722b1eaa6aedfa1bf2e7ccb2d61d5d76331945ecefa26b8471d42645288d7226bbd9ccd628ab84875f2c50ba891cea592b0430a537a395dc73bda367bf12cb7d81691a5fe8c47be395656a297e9df0e71f96756ea5cce7daac4be290159f6bcd75f0dda9de5532e71ae9e48b0ed0254a83100000000f6fbb869604d51a36a54c832e45b2569dc0d90b075225fde44c4e0973171ad47d6b0fdf9743af932cd6db49a47613808bad959710300000000000000832d0a45fa4242e24c7e800003c9e8095e02985f28e678f66422436f949e2ab8f162d7e3f855e378f4a1f40b0c6fb2d4b205a800b6d713acebc5b014e61a543a5a194f9ac18d76b5440e3b1a569e7397f6cafa86966d7ba19e720413267a6ccea9c439671d2c680f2753ca184eeeb843450368acb4383a01d25eb3d1e23e0f2645d1cdfa9fa410632f95a5f622f851c66ee7e30393cd7a4d67ff2a49c4f93c0984b5c2d4523497e4d64f95f08493564a1df87111c9bf3194fef97dcecc467ace45feeb685c5870d05f88a0f463db88d377442e1349acaf766218b54a9d624778e1c4e064c98e494198276eb2df7766411bef0ebb5000000000006065d635b0b7a00ee767221d8af9753387e0cd8d718f54a29df6eba3bd4c440e6e2172e3fcc01b8babb757b5c59217b80d0db3ba582814a604e4ef7a803e9ca7c85b35c9b93a9e0885e238b44ae1c2e64cce3b27083b8246829e64056000302bffff15405bd5f2eba20000000000000000000000000000000000009a9823fd8fbc5aa16509945ed032b48ea12d8e0588dc52702e4084913a06d468d0928bad76d697e1f85ab030e788d38788ee5b5428d4a971cc97db9fd231088e570735ce129e7e77fc2777692664a1488fd8d6dff4dad618fd54f529d4555c6507009ee69dd1bc55258789b24052137e9637f3efbab71720f88c3c44b3b7486f979e8a3174b531f573fe0e5239c000be2733c49546f6e8a9175ec6f14dbf72cac91643b2fd99c29eca28a3c2e60d5e5b8795fae16a7c3ea57e728eca35eaf0155a39f97580e079175426c088a0208040982a0000000000000000000000000051ceaaf0159fe61f2eade7603d0a7a56fb09cd119ac06adb6597155ae47846892bb423c024d8cbe9240b71ec6dc2124d3a19e2d714b273d95d1d3aa737cb04a33615ff2a730e51067d5d675d7122361c37c61a43b5afd865b60d4cae891b73220f17d25985a7f76834995e53a93a1c7b9eef267df691ca983a0b15bda7f6c5c1ca7aa50261a3089a1ebf0734c9b07e8951ff023263ad5aed8cfb49b49e128c697724c057d22c5df5aef27ce3db11d5ad5527d149d076e1a87e2df27c0cb8a67ad026bf953e88f10447e125c2c0f1aebee1f3390a9e3ddad4e2a6e0f6e4569fdefa19e870e04acf9493b963f98e23cfc665e4f465fa3f801e1957c399e45f61d3459b1c606204368bb931345af2823c487d2fd99db6ea6e008e7ffa06ca861551189d155bd077a79fe2c7e961352e56824f727d21d41eae78bfec4a2d7a7edbc8ef958c5ea599f7c25bf71c2340558aa12fdd24a88aaad5921aee7dae6a2f3009d9cb43ab4898d0f0aa565431b6abe585d75db04d1c9ba0b9de4ae8b0d3132bc6810cc9a693979f55174a72e1df9fdef35bc470f9e6e591982757f45c52c645d891bf63bb21fb66926ebe1a8525611fc3e8bb8795c36dc2a86b5ab46ff33cc74f61751b2dae92676db85c8d0c721b7ea4544bf51c95c86fcac1f434d09d1ee4928aafe23de66fed972e0dddfb33f64e48701b049239e7f552d816441d11c4c2647c014462344359198d97c4b6e9ed31ca18987b64de079b2bed641e8a92f13ca70844c65cb423d01950b0ebf44bd28e09c05d9ae5dd689fb880fb18d042219f5ac60c3a03b085abf3e8e3efc842a8d328733461f04c99607061c65ed14c61322a5ac2d371a95b8ad867ec92d13a4fa4ae033a09673866cd77f4bcdaaa05207166b19a8758d8855400d8c6a7242dc207251e8797eca24ea4f487663e60f2f5e1f1424958fd148f846830e88a42d93e1fe9c0b4a4a268921738938aa9f3cb3811ac87c54c8ebc8bcfb4613cc3a997ff1579edbd4ade8020e3ad001b072b1a751b588ac4639f35a58e00a50c0270608c7a7f10132b1c25b9ea81232fbef665f6212f875b2a0000000000000000000000000000cf7b6c4ba9bec153d6834bfef080df374703a8ff56a63ec1fe5f2e05a79e3cace7283dd68d41e94420c325fe4dae144fde5ec25a87d625cab20753a77b323fa3783c8b675859b9012647885a242adfee2fe812ecbe5191e0a15142f7349e7627cc39d724e2e34e7a24154f26ae3125b36d0504965295d0453902ac7079b11a3a1e655e482331e3dc35b2e7e4e3ea99064fe5b9c8ae0ca3e5fd653f3286a99d81ce4eba765c38d097391ad4babac38ce5b4344e24a361cd54e5"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) r2 = bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000001240)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x9c, &(0x7f0000000c40)=""/156, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xdb) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) listen(r3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r2, 0x18000000000002a0, 0x16, 0x0, &(0x7f0000000000)="b9ff03076044238c9e9e15f088a84cb688a84d720800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x50) syz_init_net_socket$ax25(0x3, 0x3, 0x7) r4 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bind$802154_raw(r4, &(0x7f0000000000)={0x24, @long}, 0x8) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000002c0)=ANY=[@ANYBLOB="200000007200a143000000000000000007"], 0x20}, 0x1, 0x0, 0x0, 0x40000}, 0x40) r6 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) close(r6) r7 = socket$alg(0x26, 0x5, 0x0) bind$alg(r7, &(0x7f00000005c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog256-generic\x00'}, 0x58) r8 = accept4(r7, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000013a40)={0x0, 0x0, &(0x7f0000013a00)={&(0x7f00000158c0), 0x10b8c}}, 0x0) r9 = syz_init_net_socket$ax25(0x3, 0x3, 0x6) ioctl$TUNSETVNETBE(0xffffffffffffffff, 0x400454de, &(0x7f0000000040)=0x1) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xfffffffffffffd00, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) ioctl$SIOCAX25GETINFOOLD(r9, 0x89e9, &(0x7f0000000340)) r10 = socket$inet6(0xa, 0x4, 0x6) setsockopt$inet_sctp6_SCTP_AUTH_KEY(r10, 0x84, 0x17, &(0x7f0000000d00)=ANY=[@ANYRES32=0x0, @ANYBLOB="0400bc0002379c89d271f8463a9099af06028879635d2c5f9e26c9f0fc472212dc86c9ec9414b664c13c14a4a6d0d8d0934df014f6aada2f4d0ddc6ef3a1c6891d84eda26dd18063615cac7a328404a74fec1b6b473d25c95401b097a39931365fefd9a13ac8c53fc90ecb8f961910f2b3a7d01581a8abed5a7536c4900ab12968971aaf460a6b21aff1cbb56554680f3546f2013cbf82c8c7a7bafeba2e614af4d3f67c9507c58393dd6c562d6796e0e526dd5b57f7e16cc9328bfed13389ab"], 0xc4) 1.495373009s ago: executing program 0 (id=565): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000140)={0x6, 0x6, &(0x7f0000000480)=ANY=[@ANYBLOB="18020000faffffff0000000000004000850000002c0000001800000004000000000000000700000095"], &(0x7f0000000200)='syzkaller\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000000c0)={r0, 0x27, 0xed, 0x0, &(0x7f00000004c0)="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", 0x0, 0x1, 0xf2ffffff, 0x0, 0x0, 0x0, 0x0, 0x4, 0x0, 0x7fffffff}, 0x2b) 1.445968798s ago: executing program 4 (id=566): r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) bind$802154_dgram(r0, &(0x7f0000000040)={0x24, @long={0x3, 0x0, {0xaaaaaaaaaaaa0102}}}, 0x14) connect$802154_dgram(r0, &(0x7f0000000000)={0x24, @none={0x0, 0xffff}}, 0x14) 1.442573164s ago: executing program 0 (id=567): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCBRDELBR(r0, 0x89a2, 0x0) syz_emit_ethernet(0x2a, &(0x7f00000000c0)={@link_local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xfe}, @void, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x3, 0x32, 0x1c, 0x66, 0x0, 0x6, 0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x1b}, @multicast1}, {0x22, 0xe, 0x0, @private=0xa010101}}}}}, 0x0) 1.373902989s ago: executing program 3 (id=568): unshare(0x42000000) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) r1 = socket$inet_dccp(0x2, 0x6, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x38, 0x9, 0x6, 0x201, 0x0, 0x0, {0x5, 0x0, 0x7}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x800}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0x18, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV6={0x14, 0x2, 0x1, 0x0, @remote}}]}]}, 0x38}, 0x1, 0x0, 0x0, 0x8081}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) r3 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$ipvs(&(0x7f0000000500), r3) sendmsg$IPVS_CMD_NEW_DAEMON(r1, &(0x7f0000000600)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000540)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYBLOB="00042abd7000ffdbdf250900000030000180070006006c630000080009007d0000000c0007002400000018000000080008000600000008000b007369700008000500ff010000080004000100"], 0x54}, 0x1, 0x0, 0x0, 0x20000000}, 0x10) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x200000d, 0x4008031, 0xffffffffffffffff, 0xf6c52000) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r3) syz_genetlink_get_family_id$tipc(&(0x7f0000000040), r3) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000340)=ANY=[], 0x0, 0x56, 0x0, 0x1, 0x0, 0x0, @void, @value}, 0x28) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r3) connect$inet(r1, &(0x7f00000002c0)={0x2, 0x4e20, @loopback}, 0x10) mmap(&(0x7f0000164000/0x2000)=nil, 0x2000, 0x1000005, 0x10, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000010000000000000a20000000000a03000000000000000000070000000900010073797a30000000007c000000090a010400000000000000000700000008000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d38001280140001800c000100636f756e7465720004000280200001800e000100636f6e6e6c696d69740000000c0002800800014000"], 0xc4}}, 0x20050800) r4 = socket(0x40000000015, 0x5, 0x0) bind$inet(r4, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) 1.357066003s ago: executing program 0 (id=569): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) pipe(&(0x7f0000000000)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) r4 = socket$netlink(0x10, 0x3, 0x6) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000980)={@cgroup, 0xffffffffffffffff, 0x18, 0x10, 0x0, @void, @value}, 0x20) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@gettclass={0x24, 0x25, 0x1}, 0x24}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000240)={'macvlan0\x00', 0x0}) r7 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r7, &(0x7f0000000dc0)="d0b4163e964573", 0x7, 0x48001, &(0x7f00000001c0)={0x11, 0x9, r6, 0x1, 0x70, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, 0x14) sendmsg$BATADV_CMD_GET_DAT_CACHE(r1, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x64, r2, 0x200, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x5}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MARK={0x8, 0x2b, 0x3}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x4}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x1dc}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r6}, @BATADV_ATTR_NETWORK_CODING_ENABLED={0x5, 0x38, 0x1}]}, 0x64}, 0x1, 0x0, 0x0, 0x4004840}, 0x400c4) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a010300000000000000000100fffd0900010073797a300000000040000000030a01020000000000000000010000000900030073797a3200000000140004800800024032658aeb08000140000000010900010073797a300000000044000000060a010400000000000001040100000008000b40000000000900010073797a30000000001c000480180001800d000100"], 0xcc}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x10, 0xc, &(0x7f00000005c0)=@framed={{}, [@ringbuf_output={{}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x8a}}]}, &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, 0x14}}, 0x0) r9 = socket$kcm(0x29, 0x2, 0x0) write$cgroup_pressure(r9, &(0x7f0000000140)={'full'}, 0xfffffdef) ioctl$sock_kcm_SIOCKCMATTACH(r9, 0x5452, &(0x7f0000000000)) ioctl$int_in(r9, 0x5452, &(0x7f0000000040)=0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x4000, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000140), 0x4) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = syz_genetlink_get_family_id$team(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_team(r12, 0x8933, &(0x7f0000001300)={'team0\x00', 0x0}) sendmsg$TEAM_CMD_OPTIONS_SET(r10, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x5c, r11, 0x1, 0x0, 0x0, {}, [{{0x8, 0x1, r13}, {0x1a, 0x2, 0x0, 0x1, [{0x4, 0x1, @user_linkup_enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x5c}}, 0x0) 1.261867306s ago: executing program 1 (id=570): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="640000000206050000000000000000000000000015000300686173683a69702c706f72742c6e6574000000000900020073797a30000000000500040000400000050005000a000000050001000600000014000780080006400000000008001340"], 0x64}}, 0x24002800) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r1, 0x29, 0x36, &(0x7f00000000c0)=ANY=[], 0x8) connect$inet6(r1, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r1, &(0x7f0000000140)="c5cbff3b2e626ab0f365245510bf38c7fcf9f78fdad9e04464", 0x19, 0x3b00, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r2, &(0x7f0000f5dfe4)={0xa, 0x4e20}, 0x1c) syz_emit_ethernet(0xbe, &(0x7f0000000000)={@local, @link_local, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e20, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "7b4b143b7461fd777b1c012bd14efb9f49fcdb8f080c26a04883ad5c8c82b8af", "584cbf2649a50f2dbc43efa8698dfa871c51852e4451b57d037ad3c045942824251d7d17b5191584cdd4fbe40a27424d", "bcfd56f1373669caaa2f19935e6996c7096ffe4f3a4745a8f762b964", {"9a3bfbc1f39cb307b3472eb9cdb042d2", "643fcbb2c5a57df67d544af6e8dafe09"}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x3, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x16, 0x0, 0x4, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket(0x1e, 0x4, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000040)='kmem_cache_free\x00'}, 0x10) pselect6(0x40, &(0x7f0000000200)={0x0, 0xfffffffffffffffe, 0xfffffffffffffffc, 0x3, 0x0, 0x0, 0x0, 0x1}, 0x0, &(0x7f0000000380)={0x1ff, 0x0, 0x0, 0x0, 0x8000000000000001, 0x1}, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r3, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) recvmmsg(r2, &(0x7f00000057c0)=[{{0x0, 0x0, 0x0}, 0xa1}], 0x1, 0x0, 0x0) 1.138874122s ago: executing program 4 (id=571): r0 = socket$inet6(0xa, 0x806, 0x0) bind$inet6(r0, &(0x7f0000000100)={0xa, 0x4e23}, 0x1c) listen(r0, 0x3) socket$inet6_sctp(0xa, 0x801, 0x84) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(aes-aesni)\x00'}, 0x58) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x2, 0xd, &(0x7f0000000000)=ANY=[@ANYBLOB="1802000000000000000000000500000001890000b362000095000000000000001800000020646c2500000000002020207b1af8ffccf3be86bd21ffff0000000007010000f8ffffffb5f97b0a43000000000085000000ae00000095000000000000002ed3ab"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r2, &(0x7f0000001340)=',', 0x1, 0x0, &(0x7f0000001400)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c) sendto$inet6(r2, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0xfffffffe}, 0x14) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_DELETE(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="180000000201cc0f01d56bd36703529f2a13b66ab30b689f4295e0a6ba7a0400"], 0x18}, 0x1, 0x0, 0x0, 0x20000011}, 0x4000000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r7, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xeccc) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="010000000000000020000100000014000180060001000200000008000300ac1414aa"], 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_REMOVE(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r5, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0xfcffffff00000000}, 0x0) 1.068469333s ago: executing program 0 (id=572): setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, &(0x7f0000000040)={0x7fffffff}, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000016c0)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000040)="1c0000004a009157e00f80ecdb4cb9020a", 0x11}, {&(0x7f0000000440)='\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00!', 0xb}], 0x2, 0x0, 0x0, 0x10}, 0x0) socket$kcm(0x10, 0x3, 0x10) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWSETELEM={0x1c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x3}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWRULE={0x20, 0x6, 0xa, 0x900, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0xa, 0x0, 0x6}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x2}}, @NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x301, 0x0, 0x0, {0x2, 0x0, 0x7}}, @NFT_MSG_DELSET={0x14, 0xb, 0xa, 0x201, 0x0, 0x0, {0x2, 0x0, 0x3}}, @NFT_MSG_NEWFLOWTABLE={0x14, 0x16, 0xa, 0x801, 0x0, 0x0, {0x7, 0x0, 0x8}}, @NFT_MSG_NEWFLOWTABLE={0x30, 0x16, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x4}]}], {0x14}}, 0x104}}, 0x20008000) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmsg$inet6(r1, &(0x7f0000002280)={&(0x7f0000001e40)={0xa, 0x4e24, 0x0, @mcast1}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="b005000000000000290000003600000000b2"], 0x5b0}, 0x20008001) sendmsg$inet6(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000140)="376cd97cb39285495ddf4bd660c811b4dca74500799dac8f26884d6d4cc781a3b510574bd853ed8eae31de87a5", 0x2d}], 0x1}, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000080)='X', 0x1, 0x0, &(0x7f0000000140)={0xa, 0x0, 0x0, @private0}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r2, 0x84, 0xb, &(0x7f0000000100)={0x66, 0xfe, 0x4, 0x0, 0x40, 0x0, 0x0, 0x4, 0x0, 0x0, 0x8, 0x0, 0x0, 0x9}, 0xe) shutdown(r2, 0x1) r3 = socket$inet(0xa, 0x801, 0x84) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f0000000cc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) ioctl$int_in(0xffffffffffffffff, 0x5452, &(0x7f0000000040)=0x891c) shutdown(0xffffffffffffffff, 0x0) shutdown(r3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{0x0}], 0x1}, 0x4040850) socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$kcm(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000001340)=[{&(0x7f0000000040)="2e00000010008188040f46ecdb4cb9cca7480ef410000000e3bd6efb010511000b000a000d000000ba8000001201", 0x2e}], 0x1, 0x0, 0x0, 0xc9e}, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3, 0xfffffffffffffffd}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x9, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) 249.751344ms ago: executing program 2 (id=573): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newqdisc={0x30, 0x28, 0x4ee4e6a52ff56541, 0x4001, 0xfffffdfc, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x4, 0x1}}, [@TCA_INGRESS_BLOCK={0x8, 0xd, 0xe}, @TCA_STAB={0x4}]}, 0x30}, 0x1, 0x0, 0x0, 0x400dc}, 0x4000080) 176.339359ms ago: executing program 0 (id=574): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x5, 0x3, 0x40000004, 0x0, 0xffffffffffffffff, 0x47, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000000), 0x4) r1 = epoll_create1(0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f00000008c0)={0x1}) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000000)) r3 = socket$packet(0x11, 0x2, 0x300) r4 = socket$rds(0x15, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0xa, &(0x7f0000000000), 0x4) syz_80211_join_ibss(&(0x7f00000001c0)='wlan0\x00', &(0x7f0000000200)=@default_ap_ssid, 0x6, 0x0) setsockopt$packet_fanout(r3, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r3, 0x107, 0x16, &(0x7f0000000280)={0x0, 0x0}, 0x10) sendmsg$RDMA_NLDEV_CMD_DELLINK(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x20, 0x1404, 0x8, 0x70bd2a, 0x25dfdbfc, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x20}, 0x1, 0x0, 0x0, 0x800}, 0x0) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r0, 0x10e, 0x4, &(0x7f0000000640)=0x1800, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r6) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="410000000000000001000603000014000300060a0004090300f006e8ffffffffffff07000700263a0909140002"], 0x44}, 0x1, 0x1000000}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000002c0), r0) r8 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000002c00010026bd7000fedbdf250400007ae893464dea8d00f9f4b9041f0715e02cfc7ac51bc8915bc13a9661c7aa94634b93f2e52e8af11bcaf964d63d414b6a5bf9402c912abfd4ed667c3050f07016aac4a830d84fb35a24528ac8b56ba2150bb2e9e9f535c2b5a82c7cfd0d81d2781ae190c826e795fbe8b280e31562ecbf21696999cee4c23b6e4a8a89d93f9f9a3e4b2fcf557af969"], 0x14}, 0x1, 0x0, 0x0, 0x409d}, 0x50) 143.583619ms ago: executing program 4 (id=575): bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$sock_int(r3, 0x1, 0x2c, &(0x7f0000000580)=0x3ff, 0x4) setsockopt$SO_ATTACH_FILTER(r3, 0x1, 0x1a, &(0x7f00000002c0)={0x0, 0x0}, 0x10) r4 = socket$inet(0x2, 0x4000000805, 0x0) listen(r4, 0x5) sendmmsg(r4, 0x0, 0x0, 0x844) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CONNECT(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x38, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x38}}, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000800)=@mgmt_frame=@probe_response={{{}, {}, @broadcast, @device_a, @random="3d0fd811a354"}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x2, 0x1}, {0x4, 0x1}, {0xb, 0x1}, {0xc}, {0x12}, {0x18}, {0x24}]}, @void, @void, @void, @void, @void, @void, [{0xdd, 0xc5, "e88abcc7dae16d0e57815c14b3aed932558389a19a04794a5dad89cd7ecfd9d9aef9a1a49abc82658e6cfb1cd6b9c6fac63562c43f4d783dfb19d212016a563e70f3480c4128a706119afccbc587e6e573240744b498aa816ff6d733b77b270d71ffd2bf90c2b07b248a081b111a7da07a6b5dc3e606b7a5d0c09c55549488024f349c4fa02252785be3cf345fc2fe51298a26ebc5ab52c9b3e16fc7580d78504f66b81c95677f7455abea3fcae55cbb12aa74f0709d8aa6b2e743763d00a2f3160d5bd8ef"}]}, 0xfc) syz_80211_inject_frame(&(0x7f00000003c0)=@device_b, &(0x7f0000000400)=@mgmt_frame=@auth={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x1}}, 0x0, 0x2, 0x0, @void}, 0x1e) nanosleep(&(0x7f0000000440)={0x0, 0x2faf080}, &(0x7f0000000480)) syz_80211_inject_frame(&(0x7f00000004c0)=@device_b, &(0x7f0000000500)=@mgmt_frame=@assoc_resp={{{}, {}, @device_b, @device_a, @from_mac, {0x0, 0x2}}, 0x1, 0x0, @default, @val={0x1, 0x5, [{0x4, 0x1}, {0xb, 0x1}, {0xc}, {0x12}, {0x18}]}, @void}, 0x25) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) 136.891546ms ago: executing program 1 (id=576): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000000)="82", 0x1}, {0x0, 0x500}], 0x2}}], 0x1, 0x4400c800) 0s ago: executing program 0 (id=577): pwritev(0xffffffffffffffff, &(0x7f0000000340), 0x100000000000023f, 0x48, 0x7) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) connect$rose(r0, &(0x7f0000000080)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, 0x1, @default}, 0x1c) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.13' (ED25519) to the list of known hosts. [ 57.163814][ T5821] cgroup: Unknown subsys name 'net' [ 57.277175][ T5821] cgroup: Unknown subsys name 'cpuset' [ 57.285252][ T5821] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 58.520142][ T5821] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 60.666131][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.674847][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 60.682751][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 60.692297][ T5839] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 60.702048][ T5844] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 60.713123][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 60.720991][ T5846] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 60.729328][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 60.737667][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 60.746243][ T5846] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 60.754129][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 60.762496][ T5846] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 60.763646][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 60.770650][ T5846] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 60.784213][ T5846] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 60.790632][ T5851] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 60.794322][ T5147] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 60.799379][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 60.806083][ T5147] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 60.813188][ T5850] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 60.823789][ T5147] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 60.826714][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 60.839994][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 60.846128][ T5147] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 60.854332][ T5850] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 60.854866][ T5835] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 60.869494][ T5835] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 60.878893][ T5852] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 60.882895][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 60.893168][ T5852] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 61.273960][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 61.392607][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 61.413307][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 61.456941][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 61.480270][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 61.541462][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.549459][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.556930][ T5837] bridge_slave_0: entered allmulticast mode [ 61.564512][ T5837] bridge_slave_0: entered promiscuous mode [ 61.572471][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.579638][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.587116][ T5837] bridge_slave_1: entered allmulticast mode [ 61.594062][ T5837] bridge_slave_1: entered promiscuous mode [ 61.612359][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.619552][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.627074][ T5841] bridge_slave_0: entered allmulticast mode [ 61.634063][ T5841] bridge_slave_0: entered promiscuous mode [ 61.668194][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.678124][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.685411][ T5841] bridge_slave_1: entered allmulticast mode [ 61.691928][ T5841] bridge_slave_1: entered promiscuous mode [ 61.739467][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.777322][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 61.788910][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.804094][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 61.813239][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.820800][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.828276][ T5840] bridge_slave_0: entered allmulticast mode [ 61.835441][ T5840] bridge_slave_0: entered promiscuous mode [ 61.842777][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.850195][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.857589][ T5831] bridge_slave_0: entered allmulticast mode [ 61.864757][ T5831] bridge_slave_0: entered promiscuous mode [ 61.896351][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.903573][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.910850][ T5840] bridge_slave_1: entered allmulticast mode [ 61.917831][ T5840] bridge_slave_1: entered promiscuous mode [ 61.932475][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.939880][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.947309][ T5831] bridge_slave_1: entered allmulticast mode [ 61.954326][ T5831] bridge_slave_1: entered promiscuous mode [ 62.009546][ T5837] team0: Port device team_slave_0 added [ 62.015752][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.022891][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.030935][ T5833] bridge_slave_0: entered allmulticast mode [ 62.037869][ T5833] bridge_slave_0: entered promiscuous mode [ 62.047807][ T5841] team0: Port device team_slave_0 added [ 62.055968][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.068789][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.079865][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.090263][ T5837] team0: Port device team_slave_1 added [ 62.096581][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.103816][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 62.110965][ T5833] bridge_slave_1: entered allmulticast mode [ 62.117817][ T5833] bridge_slave_1: entered promiscuous mode [ 62.126346][ T5841] team0: Port device team_slave_1 added [ 62.139802][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.203165][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.210558][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.236849][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.271599][ T5840] team0: Port device team_slave_0 added [ 62.282201][ T5840] team0: Port device team_slave_1 added [ 62.290369][ T5831] team0: Port device team_slave_0 added [ 62.300038][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.307051][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.333316][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.351470][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 62.365974][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 62.375834][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.383258][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.409524][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.422305][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.429439][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.455445][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.478101][ T5831] team0: Port device team_slave_1 added [ 62.530179][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.537332][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.564017][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.596700][ T5837] hsr_slave_0: entered promiscuous mode [ 62.603095][ T5837] hsr_slave_1: entered promiscuous mode [ 62.614401][ T5833] team0: Port device team_slave_0 added [ 62.620775][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.628470][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.654494][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.666412][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.673373][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.700190][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.719645][ T5833] team0: Port device team_slave_1 added [ 62.735535][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.742867][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.768914][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 62.840527][ T5831] hsr_slave_0: entered promiscuous mode [ 62.846725][ T5831] hsr_slave_1: entered promiscuous mode [ 62.852593][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.861031][ T5831] Cannot create hsr debugfs directory [ 62.870293][ T5841] hsr_slave_0: entered promiscuous mode [ 62.877340][ T5841] hsr_slave_1: entered promiscuous mode [ 62.883320][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 62.891007][ T5841] Cannot create hsr debugfs directory [ 62.897943][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 62.905691][ T53] Bluetooth: hci4: command tx timeout [ 62.905698][ T5852] Bluetooth: hci2: command tx timeout [ 62.911514][ T53] Bluetooth: hci0: command tx timeout [ 62.917298][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.948549][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 62.961017][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 62.968075][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 62.994918][ T53] Bluetooth: hci1: command tx timeout [ 62.995151][ T53] Bluetooth: hci3: command tx timeout [ 63.000476][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 63.079374][ T5840] hsr_slave_0: entered promiscuous mode [ 63.085666][ T5840] hsr_slave_1: entered promiscuous mode [ 63.091556][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.099728][ T5840] Cannot create hsr debugfs directory [ 63.179167][ T5833] hsr_slave_0: entered promiscuous mode [ 63.185668][ T5833] hsr_slave_1: entered promiscuous mode [ 63.191522][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 63.199237][ T5833] Cannot create hsr debugfs directory [ 63.459265][ T5837] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 63.474497][ T5837] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 63.495453][ T5837] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 63.517426][ T5837] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 63.560288][ T5831] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 63.571677][ T5831] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 63.581526][ T5831] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 63.606036][ T5831] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 63.641870][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 63.651123][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 63.665150][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 63.677977][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 63.740348][ T5840] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 63.752706][ T5840] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 63.763486][ T5840] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 63.782593][ T5840] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 63.850345][ T5833] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 63.868504][ T5833] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 63.880536][ T5833] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 63.896302][ T5833] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 63.915509][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.008788][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.029657][ T437] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.036903][ T437] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.048338][ T437] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.055447][ T437] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.106196][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.139166][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.158811][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.183201][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.200146][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.223109][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 64.239903][ T3477] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.247059][ T3477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.256667][ T3477] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.264416][ T3477] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.279006][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.295017][ T5837] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.321548][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.328666][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.342222][ T1161] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.349380][ T1161] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.363188][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 64.379345][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.386494][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.420695][ T1161] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.427874][ T1161] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.442660][ T3422] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.449829][ T3422] bridge0: port 1(bridge_slave_0) entered forwarding state [ 64.498260][ T3422] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.505468][ T3422] bridge0: port 2(bridge_slave_1) entered forwarding state [ 64.570268][ T5841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.675607][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.702325][ T5833] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 64.723948][ T5833] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 64.846110][ T5837] veth0_vlan: entered promiscuous mode [ 64.886498][ T5837] veth1_vlan: entered promiscuous mode [ 64.953217][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.989554][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 64.990499][ T53] Bluetooth: hci0: command tx timeout [ 64.997945][ T5852] Bluetooth: hci2: command tx timeout [ 65.001913][ T53] Bluetooth: hci4: command tx timeout [ 65.047435][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.064771][ T53] Bluetooth: hci1: command tx timeout [ 65.065698][ T5852] Bluetooth: hci3: command tx timeout [ 65.091819][ T5837] veth0_macvtap: entered promiscuous mode [ 65.139764][ T5837] veth1_macvtap: entered promiscuous mode [ 65.170043][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 65.192207][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.239467][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.261944][ T5841] veth0_vlan: entered promiscuous mode [ 65.270269][ T5837] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.280294][ T5837] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.290136][ T5837] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.298933][ T5837] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.353995][ T5831] veth0_vlan: entered promiscuous mode [ 65.367923][ T5841] veth1_vlan: entered promiscuous mode [ 65.420838][ T5840] veth0_vlan: entered promiscuous mode [ 65.440399][ T5833] veth0_vlan: entered promiscuous mode [ 65.476503][ T5831] veth1_vlan: entered promiscuous mode [ 65.489235][ T1161] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.490525][ T5833] veth1_vlan: entered promiscuous mode [ 65.508701][ T1161] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.522630][ T5840] veth1_vlan: entered promiscuous mode [ 65.565849][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.569975][ T5840] veth0_macvtap: entered promiscuous mode [ 65.596064][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.608960][ T5840] veth1_macvtap: entered promiscuous mode [ 65.625337][ T5841] veth0_macvtap: entered promiscuous mode [ 65.635117][ T5841] veth1_macvtap: entered promiscuous mode [ 65.709419][ T5831] veth0_macvtap: entered promiscuous mode [ 65.726210][ T5833] veth0_macvtap: entered promiscuous mode [ 65.740210][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.742118][ T5837] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 65.753181][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.777763][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.796350][ T5831] veth1_macvtap: entered promiscuous mode [ 65.810205][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.822346][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.833011][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.844079][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.857619][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.868894][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.880290][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.891811][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.911669][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.934703][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.946233][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.958400][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.974642][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.982345][ T5833] veth1_macvtap: entered promiscuous mode [ 65.994560][ T5840] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.003297][ T5840] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.015545][ T5840] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.025244][ T5840] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.061505][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.073173][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.083787][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.095202][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.105724][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.116618][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.128118][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.141418][ T5841] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.154730][ T5841] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.165961][ T5841] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.174730][ T5841] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.186885][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.198838][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.208878][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.219492][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.229817][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.240535][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.250422][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 66.261042][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.274182][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 66.287554][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.299067][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.309047][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.319713][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.329640][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.340432][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.352363][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.387176][ T5831] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.396378][ T5831] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.405507][ T5831] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.414640][ T5831] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.448592][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.459853][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.470478][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.480993][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.490925][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.501415][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.511778][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 66.522342][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 66.533263][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 66.563213][ T5833] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.575242][ T5833] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.584216][ T5833] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.592921][ T5833] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 66.701642][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.718911][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.751206][ T68] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.752381][ T5921] syzkaller0: entered promiscuous mode [ 66.765096][ T5921] syzkaller0: entered allmulticast mode [ 66.776605][ T5921] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 65487 [ 66.779561][ T68] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.851871][ T1161] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.862947][ T1161] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.880441][ T3422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.914116][ T3422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.960703][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.981644][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.013890][ T3422] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.042238][ T3422] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.063609][ T5852] Bluetooth: hci4: command tx timeout [ 67.069103][ T53] Bluetooth: hci2: command tx timeout [ 67.069366][ T5835] Bluetooth: hci0: command tx timeout [ 67.092789][ T5924] Zero length message leads to an empty skb [ 67.123295][ T5924] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 67.144187][ T5835] Bluetooth: hci3: command tx timeout [ 67.144198][ T5852] Bluetooth: hci1: command tx timeout [ 67.169298][ T5924] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.177715][ T5924] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.182897][ T5929] Bluetooth: MGMT ver 1.23 [ 67.219588][ T3477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.261416][ T3477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.332645][ T5929] warning: `syz.4.5' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 67.381583][ T5933] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 67.408054][ T437] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 67.447775][ T437] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 67.502700][ T5936] syz.1.2 uses old SIOCAX25GETINFO [ 67.972768][ T5957] netlink: 36 bytes leftover after parsing attributes in process `syz.3.4'. [ 68.236038][ T5965] netlink: 32 bytes leftover after parsing attributes in process `syz.0.10'. [ 68.345629][ T5965] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.119158][ T5962] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 69.140268][ T5962] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 69.148200][ T5852] Bluetooth: hci0: command tx timeout [ 69.154045][ T53] Bluetooth: hci4: command tx timeout [ 69.154277][ T5844] Bluetooth: hci2: command tx timeout [ 69.224371][ T5844] Bluetooth: hci3: command tx timeout [ 69.224434][ T5852] Bluetooth: hci1: command tx timeout [ 69.402222][ T5962] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.424280][ T5962] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.459577][ T5962] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.469847][ T5962] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.932956][ T5993] netlink: 44 bytes leftover after parsing attributes in process `syz.1.17'. [ 70.235144][ T5997] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.243486][ T5997] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.559763][ T6000] netlink: 'syz.3.19': attribute type 10 has an invalid length. [ 70.585092][ T5835] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 70.612128][ T6000] netlink: 40 bytes leftover after parsing attributes in process `syz.3.19'. [ 70.643929][ T5997] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 70.732362][ T5997] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.027636][ T5997] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.073803][ T5997] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.103593][ T5997] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.128898][ T5997] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.233718][ T5835] Bluetooth: hci0: command 0x0401 tx timeout [ 71.357194][ T6002] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.371722][ T6002] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.405796][ T6002] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 71.428449][ T6004] ip6tnl1: entered allmulticast mode [ 71.474891][ T6007] netlink: 12 bytes leftover after parsing attributes in process `syz.4.20'. [ 71.494842][ T6007] tipc: Started in network mode [ 71.506584][ T6007] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 71.534069][ T6007] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:0000 [ 71.538589][ T6011] netlink: 88 bytes leftover after parsing attributes in process `syz.1.21'. [ 71.552019][ T6011] netlink: 16 bytes leftover after parsing attributes in process `syz.1.21'. [ 71.556550][ T6007] tipc: Enabled bearer , priority 10 [ 71.578972][ T6000] veth0_vlan: entered allmulticast mode [ 71.585517][ T6000] bridge0: port 3(veth0_vlan) entered blocking state [ 71.603352][ T6000] bridge0: port 3(veth0_vlan) entered disabled state [ 71.623082][ T6000] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 71.712418][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.729474][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.864611][ T6015] netlink: 36 bytes leftover after parsing attributes in process `syz.2.22'. [ 71.893784][ T6016] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23'. [ 72.684270][ T5848] tipc: Node number set to 1 [ 72.931076][ T6047] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 73.182805][ T6054] __nla_validate_parse: 1 callbacks suppressed [ 73.182825][ T6054] netlink: 32 bytes leftover after parsing attributes in process `syz.1.31'. [ 73.478447][ T3422] syzkaller0: tun_net_xmit 76 [ 73.503906][ T3422] syzkaller0: tun_net_xmit 48 [ 73.516128][ T8] syzkaller0: tun_net_xmit 76 [ 73.559102][ T6052] syzkaller0: create flow: hash 1198043689 index 1 [ 73.602015][ T5915] syzkaller0: tun_net_xmit 76 [ 73.749520][ T6049] syzkaller0: delete flow: hash 1198043689 index 1 [ 74.300685][ T6080] netlink: 124 bytes leftover after parsing attributes in process `syz.0.34'. [ 74.486566][ T6083] netlink: 4 bytes leftover after parsing attributes in process `syz.0.34'. [ 75.065092][ T5844] Bluetooth: hci4: command 0x0405 tx timeout [ 75.387072][ T5844] Bluetooth: hci0: command 0x0401 tx timeout [ 75.387423][ T5852] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 76.656500][ T6073] netlink: 8 bytes leftover after parsing attributes in process `syz.3.33'. [ 76.676329][ T6081] veth0_to_bond: entered promiscuous mode [ 76.776818][ T6083] bond0: (slave bond_slave_0): Releasing backup interface [ 76.848953][ T6090] netlink: 32 bytes leftover after parsing attributes in process `syz.3.35'. [ 76.876998][ T6092] netlink: 36 bytes leftover after parsing attributes in process `syz.4.36'. [ 77.103432][ T6100] netlink: 36 bytes leftover after parsing attributes in process `syz.2.37'. [ 77.201107][ T6089] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.208718][ T6089] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.510454][ T6110] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 77.579281][ T6089] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.611063][ T6089] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 77.769376][ T6089] veth0_vlan: left allmulticast mode [ 77.881484][ T6089] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.903461][ T6089] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.912410][ T6089] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.926739][ T6089] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.985208][ T6089] ip6tnl1: left allmulticast mode [ 78.173317][ T6119] netlink: 'syz.2.40': attribute type 10 has an invalid length. [ 78.217816][ T6119] team0: Device veth1_macvtap failed to register rx_handler [ 78.347256][ T6119] netlink: 'syz.2.40': attribute type 1 has an invalid length. [ 78.383681][ T6119] netlink: 224 bytes leftover after parsing attributes in process `syz.2.40'. [ 78.398016][ T6123] netlink: 8 bytes leftover after parsing attributes in process `syz.1.41'. [ 78.456041][ T6121] netlink: 48 bytes leftover after parsing attributes in process `syz.2.40'. [ 79.063825][ T5844] Bluetooth: hci0: command 0x0401 tx timeout [ 79.071058][ T5852] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 79.072664][ T6136] Bluetooth: MGMT ver 1.23 [ 79.371488][ T6139] Bluetooth: hci0: Opcode 0x0c03 failed: -112 [ 80.114569][ T6148] syz.2.46 uses obsolete (PF_INET,SOCK_PACKET) [ 80.193191][ T6159] sch_tbf: peakrate 8 is lower than or equals to rate 12 ! [ 80.405754][ T6164] netlink: 'syz.2.48': attribute type 2 has an invalid length. [ 80.437478][ T6166] netlink: 36 bytes leftover after parsing attributes in process `syz.0.49'. [ 80.452209][ T6164] netlink: 'syz.2.48': attribute type 5 has an invalid length. [ 80.666124][ T6176] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 80.740025][ T6176] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 80.826967][ T3477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.862280][ T3477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.030924][ T6180] lo speed is unknown, defaulting to 1000 [ 81.288581][ T6180] lo speed is unknown, defaulting to 1000 [ 81.343358][ T6180] lo speed is unknown, defaulting to 1000 [ 81.553757][ T5852] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 81.801599][ T6180] infiniband syz0: set active [ 81.808934][ T6062] lo speed is unknown, defaulting to 1000 [ 81.823535][ T6180] infiniband syz0: added lo [ 81.996269][ T976] cfg80211: failed to load regulatory.db [ 82.052765][ T6180] RDS/IB: syz0: added [ 82.071085][ T6180] smc: adding ib device syz0 with port count 1 [ 82.085823][ T6180] smc: ib device syz0 port 1 has pnetid [ 82.275182][ T6197] netlink: 8 bytes leftover after parsing attributes in process `syz.0.55'. [ 82.458023][ T5836] lo speed is unknown, defaulting to 1000 [ 82.485618][ T6180] lo speed is unknown, defaulting to 1000 [ 82.585061][ T5852] Bluetooth: hci4: command 0x0405 tx timeout [ 83.295267][ T6205] netlink: 24 bytes leftover after parsing attributes in process `syz.0.56'. [ 83.492876][ T6180] lo speed is unknown, defaulting to 1000 [ 83.577078][ T6209] netlink: 'syz.0.57': attribute type 10 has an invalid length. [ 83.589306][ T6209] batman_adv: batadv0: Adding interface: team0 [ 83.603608][ T6209] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.644041][ T6209] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 83.660650][ T6209] netlink: 'syz.0.57': attribute type 10 has an invalid length. [ 83.668596][ T6209] netlink: 2 bytes leftover after parsing attributes in process `syz.0.57'. [ 83.678080][ T6209] team0: entered promiscuous mode [ 83.683144][ T6209] team_slave_0: entered promiscuous mode [ 83.689229][ T6209] team_slave_1: entered promiscuous mode [ 83.696173][ T6209] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.703042][ T6209] batman_adv: batadv0: Interface activated: team0 [ 83.710007][ T6209] batman_adv: batadv0: Interface deactivated: team0 [ 83.717043][ T6209] batman_adv: batadv0: Removing interface: team0 [ 83.724948][ T6209] bridge0: port 3(team0) entered blocking state [ 83.731532][ T6209] bridge0: port 3(team0) entered disabled state [ 83.738184][ T6209] team0: entered allmulticast mode [ 83.743329][ T6209] team_slave_0: entered allmulticast mode [ 83.749266][ T6209] team_slave_1: entered allmulticast mode [ 83.820765][ T6180] lo speed is unknown, defaulting to 1000 [ 83.832215][ T6212] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.57'. [ 84.166038][ T6180] lo speed is unknown, defaulting to 1000 [ 84.318687][ T3422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.328228][ T3422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.699588][ T6180] lo speed is unknown, defaulting to 1000 [ 84.965617][ T6227] netlink: 36 bytes leftover after parsing attributes in process `syz.1.62'. [ 85.298346][ T6234] smc: ib device syz0 ibport 1 applied user defined pnetid SYZ2 [ 85.510672][ T6239] netlink: 8 bytes leftover after parsing attributes in process `syz.4.66'. [ 85.858030][ T6249] netlink: 132 bytes leftover after parsing attributes in process `syz.1.67'. [ 86.421985][ T6164] Set syz1 is full, maxelem 65536 reached [ 86.459765][ T6252] lo speed is unknown, defaulting to 1000 [ 86.536285][ T6251] netlink: 'syz.0.68': attribute type 2 has an invalid length. [ 86.553489][ T6251] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.68'. [ 86.762535][ T6257] netlink: 4 bytes leftover after parsing attributes in process `syz.2.70'. [ 86.910478][ T6263] netlink: 12 bytes leftover after parsing attributes in process `syz.0.72'. [ 86.933630][ T6264] netlink: 8 bytes leftover after parsing attributes in process `syz.1.71'. [ 87.037520][ T6264] netlink: 'syz.1.71': attribute type 39 has an invalid length. [ 87.408057][ T6275] netlink: 4 bytes leftover after parsing attributes in process `syz.0.76'. [ 87.502062][ T6273] lo speed is unknown, defaulting to 1000 [ 87.925623][ T6286] bridge0: port 3(gretap0) entered blocking state [ 87.932334][ T6286] bridge0: port 3(gretap0) entered disabled state [ 87.965530][ T6286] gretap0: entered allmulticast mode [ 88.075681][ T6286] gretap0: entered promiscuous mode [ 88.129495][ T6287] gretap0: left allmulticast mode [ 88.135288][ T6287] gretap0: left promiscuous mode [ 88.161947][ T6287] bridge0: port 3(gretap0) entered disabled state [ 88.460654][ T6296] lo speed is unknown, defaulting to 1000 [ 88.831118][ T6313] ipt_REJECT: TCP_RESET invalid for non-tcp [ 88.888658][ T6310] netlink: 8 bytes leftover after parsing attributes in process `syz.4.84'. [ 88.933274][ T6312] netlink: 16 bytes leftover after parsing attributes in process `syz.3.78'. [ 88.999804][ T6294] lo speed is unknown, defaulting to 1000 [ 89.231206][ T6306] lo: entered allmulticast mode [ 89.564148][ T6313] lo: left allmulticast mode [ 90.434169][ T6330] lo speed is unknown, defaulting to 1000 [ 90.457795][ T29] audit: type=1800 audit(1741041278.984:2): pid=6333 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.89" name="memory.events" dev="tmpfs" ino=131 res=0 errno=0 [ 90.523615][ T29] audit: type=1804 audit(1741041279.044:3): pid=6340 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.0.89" name="/newroot/22/memory.events" dev="tmpfs" ino=131 res=1 errno=0 [ 93.188687][ T6381] netlink: zone id is out of range [ 93.200131][ T6381] netlink: zone id is out of range [ 93.205649][ T6381] netlink: zone id is out of range [ 93.210944][ T6381] netlink: zone id is out of range [ 93.216600][ T6381] netlink: zone id is out of range [ 93.221895][ T6381] netlink: zone id is out of range [ 93.227518][ T6381] netlink: zone id is out of range [ 93.232812][ T6381] netlink: zone id is out of range [ 93.238310][ T6381] netlink: zone id is out of range [ 93.244629][ T6381] netlink: zone id is out of range [ 93.631065][ T6339] netlink: 8 bytes leftover after parsing attributes in process `syz.4.87'. [ 93.822538][ T6393] netlink: 8 bytes leftover after parsing attributes in process `syz.0.97'. [ 93.854324][ T6386] bridge0: port 3(gretap0) entered blocking state [ 93.860857][ T6386] bridge0: port 3(gretap0) entered disabled state [ 93.943110][ T6386] gretap0: entered allmulticast mode [ 93.966347][ T6386] gretap0: entered promiscuous mode [ 94.194515][ T6399] gretap0: left allmulticast mode [ 94.236147][ T6399] gretap0: left promiscuous mode [ 94.290002][ T6399] bridge0: port 3(gretap0) entered disabled state [ 94.969179][ T6407] syzkaller0: tun_chr_ioctl cmd 1074025684 [ 95.013224][ T6407] syzkaller0: create flow: hash 1198043689 index 1 [ 95.171155][ T6406] syzkaller0: delete flow: hash 1198043689 index 1 [ 95.462923][ T6428] netlink: 16 bytes leftover after parsing attributes in process `syz.2.102'. [ 95.520516][ T6427] netlink: 16 bytes leftover after parsing attributes in process `syz.1.101'. [ 95.544770][ T6428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.102'. [ 95.636380][ T6428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.102'. [ 95.835590][ T6428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.102'. [ 95.914185][ T6428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.102'. [ 96.333695][ T6428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.102'. [ 96.362904][ T6428] netlink: 4 bytes leftover after parsing attributes in process `syz.2.102'. [ 97.281316][ T6059] IPVS: starting estimator thread 0... [ 97.389840][ T6483] IPVS: using max 24 ests per chain, 57600 per kthread [ 98.365704][ T6508] netlink: 'syz.0.108': attribute type 4 has an invalid length. [ 98.378963][ T6508] netlink: 20 bytes leftover after parsing attributes in process `syz.0.108'. [ 98.423759][ T6508] netlink: 'syz.0.108': attribute type 1 has an invalid length. [ 98.434919][ T6508] netlink: 224 bytes leftover after parsing attributes in process `syz.0.108'. [ 98.467597][ T6505] lo speed is unknown, defaulting to 1000 [ 99.612581][ T6527] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.620146][ T6527] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.872590][ T6527] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.902795][ T6527] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 100.052996][ T6527] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.073840][ T6527] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.094085][ T6527] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.102992][ T6527] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 100.192356][ T5915] lo speed is unknown, defaulting to 1000 [ 100.251320][ T6546] 8021q: adding VLAN 0 to HW filter on device bond0 [ 100.260350][ T6546] 8021q: adding VLAN 0 to HW filter on device team0 [ 100.270808][ T6546] net_ratelimit: 74 callbacks suppressed [ 100.270814][ T6546] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 100.330339][ T6558] smc: net device bond0 applied user defined pnetid SYZ2 [ 100.441140][ T6579] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 100.496449][ T6579] __nla_validate_parse: 3 callbacks suppressed [ 100.496466][ T6579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.116'. [ 100.513152][ T6579] netlink: 112 bytes leftover after parsing attributes in process `syz.0.116'. [ 100.525301][ T6579] netlink: 12 bytes leftover after parsing attributes in process `syz.0.116'. [ 100.537840][ T5915] lo speed is unknown, defaulting to 1000 [ 100.552031][ T6515] lo speed is unknown, defaulting to 1000 [ 100.582704][ T6059] lo speed is unknown, defaulting to 1000 [ 100.763943][ T6553] lo speed is unknown, defaulting to 1000 [ 101.878157][ T6611] tap0: tun_chr_ioctl cmd 2147767506 [ 102.689728][ T6621] tipc: Failed to remove unknown binding: 66,3,3/1:2153099328/2153099329 [ 102.738215][ T6623] netlink: 60 bytes leftover after parsing attributes in process `syz.3.123'. [ 102.807367][ T6619] Bluetooth: MGMT ver 1.23 [ 103.005381][ T6615] lo speed is unknown, defaulting to 1000 [ 103.321625][ T6634] sctp: [Deprecated]: syz.2.124 (pid 6634) Use of int in max_burst socket option deprecated. [ 103.321625][ T6634] Use struct sctp_assoc_value instead [ 103.393638][ T6640] xt_NFQUEUE: number of total queues is 0 [ 103.771619][ T6654] netlink: 8 bytes leftover after parsing attributes in process `syz.4.128'. [ 103.947809][ T6662] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 103.988966][ T6662] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 104.034879][ T6662] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.073315][ T6662] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 104.526966][ T6672] netlink: 'syz.0.132': attribute type 4 has an invalid length. [ 104.541010][ T6672] netlink: 20 bytes leftover after parsing attributes in process `syz.0.132'. [ 104.602590][ T6672] netlink: 'syz.0.132': attribute type 1 has an invalid length. [ 104.610607][ T6672] netlink: 224 bytes leftover after parsing attributes in process `syz.0.132'. [ 104.767868][ T6677] netlink: 8 bytes leftover after parsing attributes in process `syz.3.131'. [ 104.776935][ T6677] netlink: 52 bytes leftover after parsing attributes in process `syz.3.131'. [ 104.812586][ T6677] rdma_rxe: rxe_newlink: failed to add lo [ 105.359757][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 105.411230][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 105.616068][ T6697] netdevsim netdevsim4: Direct firmware load for / [ 105.616068][ T6697] failed with error -2 [ 105.630245][ T6697] netdevsim netdevsim4: Falling back to sysfs fallback for: / [ 105.630245][ T6697] [ 105.821702][ T6713] netlink: 32 bytes leftover after parsing attributes in process `syz.0.138'. [ 105.832513][ T6713] netlink: 8 bytes leftover after parsing attributes in process `syz.0.138'. [ 106.009864][ T6718] netlink: 248 bytes leftover after parsing attributes in process `syz.1.139'. [ 106.188839][ T6722] netlink: 148 bytes leftover after parsing attributes in process `syz.2.140'. [ 106.200348][ T6722] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 106.232947][ T6722] netlink: 'syz.2.140': attribute type 2 has an invalid length. [ 106.796204][ T6733] netlink: 4 bytes leftover after parsing attributes in process `syz.3.141'. [ 106.797614][ T6741] lo speed is unknown, defaulting to 1000 [ 107.107568][ T6754] netlink: 'syz.0.146': attribute type 29 has an invalid length. [ 107.279276][ T6743] can: request_module (can-proto-3) failed. [ 107.292920][ T6749] netlink: 8 bytes leftover after parsing attributes in process `syz.1.145'. [ 107.367409][ T6757] netlink: 'syz.0.146': attribute type 29 has an invalid length. [ 107.420894][ T6749] xt_TCPMSS: Only works on TCP SYN packets [ 107.512550][ T6757] IPv6: sit1: Disabled Multicast RS [ 107.520523][ T6757] sit1: entered allmulticast mode [ 107.915730][ T6777] lo speed is unknown, defaulting to 1000 [ 108.156515][ T6795] netlink: 48 bytes leftover after parsing attributes in process `syz.1.150'. [ 108.235340][ T6798] netlink: 16 bytes leftover after parsing attributes in process `syz.4.152'. [ 108.273613][ T6795] netlink: 8 bytes leftover after parsing attributes in process `syz.1.150'. [ 108.415837][ T6795] nr0: entered promiscuous mode [ 108.825340][ T5852] Bluetooth: hci4: command 0x0405 tx timeout [ 109.376621][ T6828] netlink: 16 bytes leftover after parsing attributes in process `syz.3.157'. [ 109.378389][ T6824] lo speed is unknown, defaulting to 1000 [ 109.551322][ T6806] Bluetooth: hci0: Opcode 0x0c1a failed: -4 [ 110.113913][ T6846] netlink: 'syz.3.160': attribute type 10 has an invalid length. [ 110.169710][ T6851] netlink: 'syz.3.160': attribute type 10 has an invalid length. [ 110.171676][ T6846] batman_adv: batadv0: Adding interface: team0 [ 110.213623][ T6846] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 110.282804][ T6846] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 110.313639][ T6851] team0: entered promiscuous mode [ 110.355571][ T6851] team_slave_0: entered promiscuous mode [ 110.362733][ T6851] team_slave_1: entered promiscuous mode [ 110.464291][ T6851] 8021q: adding VLAN 0 to HW filter on device team0 [ 110.515088][ T6851] batman_adv: batadv0: Interface activated: team0 [ 110.572677][ T6851] batman_adv: batadv0: Interface deactivated: team0 [ 110.643694][ T6851] batman_adv: batadv0: Removing interface: team0 [ 110.725877][ T6851] bridge0: port 3(team0) entered blocking state [ 110.771622][ T6851] bridge0: port 3(team0) entered disabled state [ 110.883830][ T6851] team0: entered allmulticast mode [ 110.889006][ T6851] team_slave_0: entered allmulticast mode [ 110.975772][ T6873] netlink: 'syz.0.162': attribute type 1 has an invalid length. [ 110.983743][ T6873] __nla_validate_parse: 7 callbacks suppressed [ 110.983758][ T6873] netlink: 228 bytes leftover after parsing attributes in process `syz.0.162'. [ 110.999770][ T6851] team_slave_1: entered allmulticast mode [ 111.068960][ T6862] lo speed is unknown, defaulting to 1000 [ 111.174801][ T6866] lo speed is unknown, defaulting to 1000 [ 111.296593][ T6821] lo speed is unknown, defaulting to 1000 [ 111.329538][ T6821] lo speed is unknown, defaulting to 1000 [ 111.349240][ T6821] lo speed is unknown, defaulting to 1000 [ 111.386087][ T6821] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 111.496363][ T6893] netlink: 16 bytes leftover after parsing attributes in process `syz.0.164'. [ 111.557619][ T6821] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 111.711093][ T6897] netlink: 12 bytes leftover after parsing attributes in process `syz.0.164'. [ 111.721194][ T6821] lo speed is unknown, defaulting to 1000 [ 111.748881][ T6821] lo speed is unknown, defaulting to 1000 [ 111.791452][ T6821] lo speed is unknown, defaulting to 1000 [ 111.803261][ T6821] lo speed is unknown, defaulting to 1000 [ 111.812005][ T6821] lo speed is unknown, defaulting to 1000 [ 111.820329][ T6821] lo speed is unknown, defaulting to 1000 [ 111.836100][ T6821] lo speed is unknown, defaulting to 1000 [ 111.844472][ T6821] lo speed is unknown, defaulting to 1000 [ 111.891872][ T6821] lo speed is unknown, defaulting to 1000 [ 111.927741][ T6899] lo speed is unknown, defaulting to 1000 [ 112.522818][ T6912] netlink: 24 bytes leftover after parsing attributes in process `syz.2.167'. [ 112.600680][ T6897] rdma_rxe: rxe_newlink: failed to add lo [ 112.733970][ T6914] netlink: 24 bytes leftover after parsing attributes in process `syz.2.167'. [ 112.791639][ T6917] lo speed is unknown, defaulting to 1000 [ 112.810101][ T6914] nbd: device at index 64 is going down [ 112.979572][ T6917] lo speed is unknown, defaulting to 1000 [ 113.658959][ T6935] netlink: 'syz.0.171': attribute type 10 has an invalid length. [ 113.697883][ T6939] netlink: 16 bytes leftover after parsing attributes in process `syz.4.170'. [ 113.735616][ T6939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.170'. [ 113.753899][ T6939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.170'. [ 113.990267][ T6939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.170'. [ 114.014277][ T6939] netlink: 4 bytes leftover after parsing attributes in process `syz.4.170'. [ 114.063807][ T6935] team0: Device bridge0 is already an upper device of the team interface [ 114.926729][ T6976] rdma_rxe: rxe_newlink: failed to add lo [ 115.070029][ T6978] smc: removing ib device syz0 [ 115.802281][ T6985] bridge0: port 4(gretap0) entered blocking state [ 115.810140][ T6985] bridge0: port 4(gretap0) entered disabled state [ 115.816948][ T6985] gretap0: entered allmulticast mode [ 115.831192][ T6985] gretap0: entered promiscuous mode [ 115.844346][ T6985] gretap0: left allmulticast mode [ 115.849628][ T6985] gretap0: left promiscuous mode [ 115.856246][ T6985] bridge0: port 4(gretap0) entered disabled state [ 115.987869][ T6989] lo speed is unknown, defaulting to 1000 [ 116.154998][ T6996] __nla_validate_parse: 4 callbacks suppressed [ 116.155020][ T6996] netlink: 148 bytes leftover after parsing attributes in process `syz.4.184'. [ 116.173616][ T6996] A link change request failed with some changes committed already. Interface ip6_vti0 may have been left with an inconsistent configuration, please check. [ 116.600081][ T7000] netlink: 36 bytes leftover after parsing attributes in process `syz.0.185'. [ 116.988686][ T7006] xt_CT: No such helper "snmp" [ 117.179119][ T7006] lo speed is unknown, defaulting to 1000 [ 117.712472][ T7026] af_packet: tpacket_rcv: packet too big, clamped from 36 to 4294967272. macoff=96 [ 118.037729][ T7034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.193'. [ 118.770724][ T7041] netlink: 4 bytes leftover after parsing attributes in process `syz.4.195'. [ 119.039403][ T7041] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 119.090232][ T7049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.196'. [ 119.106569][ T7049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.196'. [ 119.184970][ T7049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.196'. [ 119.201760][ T7049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.196'. [ 119.224734][ T7052] netlink: 36 bytes leftover after parsing attributes in process `syz.4.197'. [ 119.322616][ T7049] netlink: 4 bytes leftover after parsing attributes in process `syz.1.196'. [ 119.608374][ T7067] lo speed is unknown, defaulting to 1000 [ 119.657452][ T7066] netlink: 'syz.2.201': attribute type 13 has an invalid length. [ 119.690690][ T7066] gretap0: refused to change device tx_queue_len [ 119.704584][ T7066] A link change request failed with some changes committed already. Interface gretap0 may have been left with an inconsistent configuration, please check. [ 119.743909][ T5915] lo speed is unknown, defaulting to 1000 [ 119.963660][ T7069] lo speed is unknown, defaulting to 1000 [ 120.059725][ T7075] netlink: 'syz.0.203': attribute type 10 has an invalid length. [ 120.088026][ T7075] team0: left allmulticast mode [ 120.093103][ T7075] team_slave_0: left allmulticast mode [ 120.100174][ T7075] team_slave_1: left allmulticast mode [ 120.105928][ T7075] team0: left promiscuous mode [ 120.110719][ T7075] team_slave_0: left promiscuous mode [ 120.116473][ T7075] team_slave_1: left promiscuous mode [ 120.117776][ T7078] netlink: 'syz.0.203': attribute type 10 has an invalid length. [ 120.122147][ T7075] bridge0: port 3(team0) entered disabled state [ 120.183372][ T7075] batman_adv: batadv0: Adding interface: team0 [ 120.190152][ T7075] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.216321][ T7075] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 120.229456][ T7078] team0: entered promiscuous mode [ 120.235164][ T7078] team_slave_0: entered promiscuous mode [ 120.242081][ T7078] team_slave_1: entered promiscuous mode [ 120.251214][ T7078] 8021q: adding VLAN 0 to HW filter on device team0 [ 120.258767][ T7078] batman_adv: batadv0: Interface activated: team0 [ 120.265937][ T7078] batman_adv: batadv0: Interface deactivated: team0 [ 120.273276][ T7078] batman_adv: batadv0: Removing interface: team0 [ 120.314610][ T7078] bridge0: port 3(team0) entered blocking state [ 120.322004][ T7078] bridge0: port 3(team0) entered disabled state [ 120.330593][ T7078] team0: entered allmulticast mode [ 120.336027][ T7078] team_slave_0: entered allmulticast mode [ 120.344289][ T7078] team_slave_1: entered allmulticast mode [ 120.526982][ T7067] netlink: 'syz.3.200': attribute type 13 has an invalid length. [ 120.731116][ T7086] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 120.950583][ T7098] netlink: 'syz.0.208': attribute type 1 has an invalid length. [ 120.988929][ T7098] bond2: entered promiscuous mode [ 120.995027][ T7098] 8021q: adding VLAN 0 to HW filter on device bond2 [ 121.119325][ T7100] batadv1: entered promiscuous mode [ 121.125029][ T7100] batadv1: entered allmulticast mode [ 121.132287][ T7100] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 121.145034][ T7100] bond2: (slave batadv1): making interface the new active one [ 121.159270][ T7100] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 121.348171][ T7086] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.449844][ T7108] __nla_validate_parse: 6 callbacks suppressed [ 121.449863][ T7108] netlink: 36 bytes leftover after parsing attributes in process `syz.3.209'. [ 121.492283][ T7105] wg1: entered promiscuous mode [ 121.533651][ T7105] wg1: entered allmulticast mode [ 121.836534][ T7086] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.155577][ T7131] netlink: 84 bytes leftover after parsing attributes in process `syz.0.214'. [ 122.334978][ T7086] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.269437][ T7086] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.344145][ T7147] xt_nfacct: accounting object `syz1' does not exists [ 123.385721][ T7139] lo speed is unknown, defaulting to 1000 [ 123.609351][ T7086] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.631854][ T7086] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.782236][ T7086] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.819665][ T7158] bridge_slave_0: left allmulticast mode [ 123.825604][ T7158] bridge_slave_0: left promiscuous mode [ 123.831027][ T7157] netlink: 'syz.1.219': attribute type 10 has an invalid length. [ 123.859822][ T7158] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.879912][ T7158] bridge_slave_1: left allmulticast mode [ 123.893931][ T7158] bridge_slave_1: left promiscuous mode [ 123.900720][ T7158] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.918909][ T7158] bond0: (slave bond_slave_0): Releasing backup interface [ 124.014021][ T7158] bond0: (slave bond_slave_1): Releasing backup interface [ 124.061098][ T7158] team0: Port device team_slave_0 removed [ 124.104383][ T7158] team0: Port device team_slave_1 removed [ 124.113789][ T7158] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.114796][ T7171] netlink: 12 bytes leftover after parsing attributes in process `syz.1.219'. [ 124.144284][ T7158] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.248232][ T7175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.221'. [ 124.262931][ T7157] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 124.279230][ T7164] pim6reg: entered allmulticast mode [ 124.285705][ T7172] pim6reg: left allmulticast mode [ 124.498308][ T7182] netlink: 'syz.0.224': attribute type 16 has an invalid length. [ 124.508192][ T7182] netlink: 64138 bytes leftover after parsing attributes in process `syz.0.224'. [ 124.549114][ T7184] netlink: 36 bytes leftover after parsing attributes in process `syz.2.223'. [ 124.681111][ T7190] netlink: 12 bytes leftover after parsing attributes in process `syz.0.225'. [ 124.721504][ T7190] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 124.753380][ T7193] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.226'. [ 124.762650][ T7193] openvswitch: netlink: Message has 8 unknown bytes. [ 125.198127][ T7200] netlink: 16 bytes leftover after parsing attributes in process `syz.3.227'. [ 125.208674][ T7200] netlink: 4 bytes leftover after parsing attributes in process `syz.3.227'. [ 125.475271][ T7210] lo speed is unknown, defaulting to 1000 [ 125.781516][ T7224] lo speed is unknown, defaulting to 1000 [ 126.135578][ T7230] lo speed is unknown, defaulting to 1000 [ 126.145890][ T7230] lo speed is unknown, defaulting to 1000 [ 126.163134][ T7230] lo speed is unknown, defaulting to 1000 [ 127.027802][ T7248] lo speed is unknown, defaulting to 1000 [ 127.051156][ T7230] infiniband syz0: set active [ 127.073807][ T7230] infiniband syz0: added lo [ 127.082242][ T5885] lo speed is unknown, defaulting to 1000 [ 127.370554][ T7230] RDS/IB: syz0: added [ 127.408738][ T7230] smc: adding ib device syz0 with port count 1 [ 127.441541][ T7230] smc: ib device syz0 port 1 has pnetid SYZ2 (user defined) [ 127.500996][ T7230] lo speed is unknown, defaulting to 1000 [ 127.553096][ T7255] sch_tbf: burst 3631 is lower than device lo mtu (65550) ! [ 127.570231][ T7255] __nla_validate_parse: 9 callbacks suppressed [ 127.570247][ T7255] netlink: 24 bytes leftover after parsing attributes in process `syz.0.237'. [ 127.573515][ T6062] lo speed is unknown, defaulting to 1000 [ 127.577107][ T7255] netlink: 24 bytes leftover after parsing attributes in process `syz.0.237'. [ 127.791079][ T7259] netlink: 'syz.0.237': attribute type 10 has an invalid length. [ 127.801559][ T7259] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 128.113792][ T7230] lo speed is unknown, defaulting to 1000 [ 128.384211][ T7265] lo speed is unknown, defaulting to 1000 [ 128.723487][ T7265] lo speed is unknown, defaulting to 1000 [ 128.995346][ T7230] lo speed is unknown, defaulting to 1000 [ 129.112713][ T7282] netlink: 'syz.1.242': attribute type 5 has an invalid length. [ 129.218542][ T7282] ip6gretap0: entered promiscuous mode [ 129.288581][ T7282] batadv_slave_0: entered promiscuous mode [ 129.347819][ T7230] lo speed is unknown, defaulting to 1000 [ 129.416464][ T7285] netlink: 'syz.0.243': attribute type 10 has an invalid length. [ 129.437910][ T7285] team0: left allmulticast mode [ 129.442811][ T7285] team_slave_0: left allmulticast mode [ 129.454060][ T7285] team_slave_1: left allmulticast mode [ 129.460042][ T7285] team0: left promiscuous mode [ 129.465117][ T7285] team_slave_0: left promiscuous mode [ 129.472423][ T7286] netlink: 'syz.0.243': attribute type 10 has an invalid length. [ 129.472526][ T7285] team_slave_1: left promiscuous mode [ 129.480631][ T7286] netlink: 2 bytes leftover after parsing attributes in process `syz.0.243'. [ 129.486734][ T7285] bridge0: port 3(team0) entered disabled state [ 129.509387][ T7285] batman_adv: batadv0: Adding interface: team0 [ 129.515811][ T7285] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.543549][ T7285] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 129.555344][ T7286] team0: entered promiscuous mode [ 129.560585][ T7286] team_slave_0: entered promiscuous mode [ 129.567283][ T7286] team_slave_1: entered promiscuous mode [ 129.574373][ T7286] 8021q: adding VLAN 0 to HW filter on device team0 [ 129.581190][ T7286] batman_adv: batadv0: Interface activated: team0 [ 129.588009][ T7286] batman_adv: batadv0: Interface deactivated: team0 [ 129.598099][ T7286] batman_adv: batadv0: Removing interface: team0 [ 129.608029][ T7286] bridge0: port 3(team0) entered blocking state [ 129.614616][ T7286] bridge0: port 3(team0) entered disabled state [ 129.621057][ T7286] team0: entered allmulticast mode [ 129.626591][ T7286] team_slave_0: entered allmulticast mode [ 129.632473][ T7286] team_slave_1: entered allmulticast mode [ 129.644378][ T7230] lo speed is unknown, defaulting to 1000 [ 129.758469][ T7286] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.243'. [ 129.823375][ T7230] lo speed is unknown, defaulting to 1000 [ 129.989961][ T7230] lo speed is unknown, defaulting to 1000 [ 129.998674][ T7272] netlink: 28 bytes leftover after parsing attributes in process `syz.3.240'. [ 130.068874][ T7272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 130.112222][ T7272] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 130.279298][ T7230] lo speed is unknown, defaulting to 1000 [ 130.453293][ T7230] lo speed is unknown, defaulting to 1000 [ 130.593079][ T7230] lo speed is unknown, defaulting to 1000 [ 130.672346][ T7274] lo speed is unknown, defaulting to 1000 [ 130.680610][ T7279] lo speed is unknown, defaulting to 1000 [ 130.695689][ T7277] lo speed is unknown, defaulting to 1000 [ 131.162697][ T7302] lo speed is unknown, defaulting to 1000 [ 131.222816][ T7306] wg1: entered promiscuous mode [ 131.235864][ T7306] wg1: entered allmulticast mode [ 131.242837][ T7302] lo speed is unknown, defaulting to 1000 [ 131.487211][ T7313] No such timeout policy "syz0" [ 131.674277][ T7316] lo speed is unknown, defaulting to 1000 [ 131.688875][ T7316] lo speed is unknown, defaulting to 1000 [ 131.819198][ T7315] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 132.403342][ T7324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.419028][ T7324] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.439819][ T7325] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.485649][ T7322] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.494651][ T7325] bridge0: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 132.795328][ T7327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.821286][ T7327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 132.838604][ T7330] netlink: 1284 bytes leftover after parsing attributes in process `syz.3.257'. [ 132.849636][ T7330] openvswitch: netlink: Message has 8 unknown bytes. [ 132.900692][ T7327] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.213380][ T7343] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.239682][ T7343] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.342274][ T7338] tipc: Started in network mode [ 133.349454][ T7338] tipc: Node identity ca1de1dd7a8b, cluster identity 4711 [ 133.365991][ T7338] tipc: Enabled bearer , priority 0 [ 133.458392][ T7344] syzkaller0: entered promiscuous mode [ 133.478219][ T7344] syzkaller0: entered allmulticast mode [ 133.497990][ T7344] tipc: Resetting bearer [ 133.733569][ T7338] sch_fq: defrate 511 ignored. [ 134.018838][ T7361] Cannot find del_set index 4 as target [ 134.046345][ T7360] netlink: 8 bytes leftover after parsing attributes in process `syz.0.265'. [ 134.056347][ T7360] netlink: 4 bytes leftover after parsing attributes in process `syz.0.265'. [ 134.065826][ T7360] netlink: 'syz.0.265': attribute type 1 has an invalid length. [ 134.073852][ T7360] netlink: 10 bytes leftover after parsing attributes in process `syz.0.265'. [ 134.138804][ T5844] block nbd0: Receive control failed (result -107) [ 134.484879][ T5885] tipc: Node number set to 2962678237 [ 134.764656][ T7353] lo speed is unknown, defaulting to 1000 [ 134.787024][ T7333] tipc: Resetting bearer [ 135.185436][ T7393] dccp_v4_rcv: dropped packet with invalid checksum [ 135.240337][ T7389] netlink: 8 bytes leftover after parsing attributes in process `syz.2.269'. [ 135.835668][ T7406] netlink: 28 bytes leftover after parsing attributes in process `syz.2.271'. [ 136.402792][ T7415] netlink: 4 bytes leftover after parsing attributes in process `syz.0.272'. [ 137.072959][ T7333] tipc: Disabling bearer [ 137.081690][ T7353] lo speed is unknown, defaulting to 1000 [ 137.150128][ T7406] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 137.218831][ T7357] lo speed is unknown, defaulting to 1000 [ 137.224883][ T6062] lo speed is unknown, defaulting to 1000 [ 137.258536][ T7387] lo speed is unknown, defaulting to 1000 [ 137.273747][ T7357] lo speed is unknown, defaulting to 1000 [ 137.281218][ T7405] lo speed is unknown, defaulting to 1000 [ 137.386190][ T7407] lo speed is unknown, defaulting to 1000 [ 137.396258][ T7410] lo speed is unknown, defaulting to 1000 [ 137.410304][ T7421] lo speed is unknown, defaulting to 1000 [ 137.462139][ T7387] lo speed is unknown, defaulting to 1000 [ 137.537173][ T7405] lo speed is unknown, defaulting to 1000 [ 137.604673][ T7407] lo speed is unknown, defaulting to 1000 [ 137.668426][ T7410] lo speed is unknown, defaulting to 1000 [ 137.731348][ T7421] lo speed is unknown, defaulting to 1000 [ 139.811528][ T7444] lo speed is unknown, defaulting to 1000 [ 139.938101][ T7444] lo speed is unknown, defaulting to 1000 [ 140.073285][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.098189][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.277179][ T7465] 8021q: adding VLAN 0 to HW filter on device bond0 [ 140.288948][ T7465] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 140.328377][ T7446] netlink: 24 bytes leftover after parsing attributes in process `syz.4.278'. [ 140.615518][ T7481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.658803][ T7481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 140.759797][ T7481] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.582797][ T7511] lo speed is unknown, defaulting to 1000 [ 141.597299][ T7511] lo speed is unknown, defaulting to 1000 [ 141.666688][ T7516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.696425][ T7516] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 141.782070][ T7517] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.251949][ T7523] netlink: 'syz.3.293': attribute type 29 has an invalid length. [ 142.382796][ T7533] netlink: 32 bytes leftover after parsing attributes in process `syz.0.296'. [ 142.625143][ T7531] lo speed is unknown, defaulting to 1000 [ 142.664065][ T7531] lo speed is unknown, defaulting to 1000 [ 142.776582][ T7548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.788724][ T7548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 142.858389][ T7548] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 143.497653][ T7558] netlink: 8 bytes leftover after parsing attributes in process `syz.3.302'. [ 143.537079][ T7558] vlan2: entered allmulticast mode [ 143.552107][ T7558] veth0_to_batadv: entered allmulticast mode [ 143.904713][ T7568] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.931685][ T7568] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 144.626859][ T7575] lo speed is unknown, defaulting to 1000 [ 144.669612][ T7589] netlink: 44 bytes leftover after parsing attributes in process `syz.3.309'. [ 144.717144][ T7575] lo speed is unknown, defaulting to 1000 [ 144.942545][ T7592] veth0_to_batadv: left allmulticast mode [ 144.983618][ T7593] lo speed is unknown, defaulting to 1000 [ 144.990991][ T7593] lo speed is unknown, defaulting to 1000 [ 145.176474][ T7589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 145.184733][ T7589] 8021q: adding VLAN 0 to HW filter on device team0 [ 145.203508][ T7589] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 145.266807][ T7605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.284366][ T7605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.349636][ T7605] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.868871][ T7615] lo speed is unknown, defaulting to 1000 [ 145.937735][ T7615] lo speed is unknown, defaulting to 1000 [ 146.860088][ T7636] lo speed is unknown, defaulting to 1000 [ 146.907434][ T7636] lo speed is unknown, defaulting to 1000 [ 147.364183][ T7647] lo speed is unknown, defaulting to 1000 [ 147.370454][ T7647] lo speed is unknown, defaulting to 1000 [ 147.385768][ T7647] lo speed is unknown, defaulting to 1000 [ 147.407575][ T7644] lo speed is unknown, defaulting to 1000 [ 147.495328][ T7653] netlink: 12 bytes leftover after parsing attributes in process `syz.2.324'. [ 147.677617][ T7644] lo speed is unknown, defaulting to 1000 [ 147.859250][ T7647] infiniband s›z0: RDMA CMA: cma_listen_on_dev, error -98 [ 147.916287][ T7647] lo speed is unknown, defaulting to 1000 [ 147.927405][ T7647] lo speed is unknown, defaulting to 1000 [ 147.935580][ T7647] lo speed is unknown, defaulting to 1000 [ 147.942364][ T7647] lo speed is unknown, defaulting to 1000 [ 147.949742][ T7647] lo speed is unknown, defaulting to 1000 [ 147.956810][ T7647] lo speed is unknown, defaulting to 1000 [ 147.963894][ T7647] lo speed is unknown, defaulting to 1000 [ 148.350979][ T7662] wg1: left promiscuous mode [ 148.358330][ T7662] wg1: left allmulticast mode [ 148.415862][ T7662] bond2: left promiscuous mode [ 148.422892][ T7662] batadv1: left promiscuous mode [ 148.430006][ T7662] batadv1: left allmulticast mode [ 148.468833][ T6061] lo speed is unknown, defaulting to 1000 [ 148.747875][ T7671] lo speed is unknown, defaulting to 1000 [ 148.755914][ T7671] lo speed is unknown, defaulting to 1000 [ 148.820791][ T7678] xt_CT: You must specify a L4 protocol and not use inversions on it [ 148.858924][ T7680] wg1: entered promiscuous mode [ 148.864199][ T7680] wg1: entered allmulticast mode [ 149.052677][ T7690] netlink: 84 bytes leftover after parsing attributes in process `syz.0.334'. [ 149.280756][ T7671] lo speed is unknown, defaulting to 1000 [ 149.802333][ T7699] vlan2: left allmulticast mode [ 149.886166][ T7705] lo speed is unknown, defaulting to 1000 [ 149.919423][ T7708] netlink: 4 bytes leftover after parsing attributes in process `syz.1.338'. [ 149.956582][ T7705] lo speed is unknown, defaulting to 1000 [ 149.986952][ T7709] xt_TCPMSS: Only works on TCP SYN packets [ 150.030655][ T7712] netlink: 7084 bytes leftover after parsing attributes in process `syz.3.339'. [ 150.098359][ T7713] netlink: 16 bytes leftover after parsing attributes in process `syz.2.337'. [ 150.491406][ T7709] lo speed is unknown, defaulting to 1000 [ 150.550945][ T7705] lo speed is unknown, defaulting to 1000 [ 150.583824][ T7719] lo speed is unknown, defaulting to 1000 [ 150.589855][ T7709] lo speed is unknown, defaulting to 1000 [ 150.933201][ T7724] 8021q: adding VLAN 0 to HW filter on device bond1 [ 150.941543][ T7724] bond0: (slave bond1): Enslaving as an active interface with an up link [ 151.238476][ T7709] lo speed is unknown, defaulting to 1000 [ 151.244929][ T7719] lo speed is unknown, defaulting to 1000 [ 151.387868][ T7719] lo speed is unknown, defaulting to 1000 [ 151.619846][ T7730] lo speed is unknown, defaulting to 1000 [ 151.704214][ T5844] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 151.768798][ T7737] netlink: 16 bytes leftover after parsing attributes in process `syz.3.342'. [ 151.841062][ T7740] netlink: 12 bytes leftover after parsing attributes in process `syz.2.344'. [ 151.882413][ T7740] netlink: 31 bytes leftover after parsing attributes in process `syz.2.344'. [ 151.956019][ T7740] netlink: 'syz.2.344': attribute type 3 has an invalid length. [ 151.964599][ T7740] netlink: 'syz.2.344': attribute type 2 has an invalid length. [ 151.984520][ T7740] netlink: 31 bytes leftover after parsing attributes in process `syz.2.344'. [ 152.036702][ T7730] lo speed is unknown, defaulting to 1000 [ 152.341758][ T7730] lo speed is unknown, defaulting to 1000 [ 152.531040][ T7740] lo speed is unknown, defaulting to 1000 [ 152.720974][ T7740] lo speed is unknown, defaulting to 1000 [ 153.286066][ T7740] lo speed is unknown, defaulting to 1000 [ 153.807670][ T7764] netlink: 8 bytes leftover after parsing attributes in process `syz.0.349'. [ 153.852537][ T7764] netlink: 'syz.0.349': attribute type 10 has an invalid length. [ 153.867343][ T7764] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 153.884782][ T7764] netlink: 4 bytes leftover after parsing attributes in process `syz.0.349'. [ 153.895365][ T7764] team0: left allmulticast mode [ 153.900325][ T7764] team_slave_0: left allmulticast mode [ 153.907299][ T7764] team_slave_1: left allmulticast mode [ 153.912955][ T7764] team0: left promiscuous mode [ 153.918932][ T7764] team_slave_0: left promiscuous mode [ 153.925499][ T7764] team_slave_1: left promiscuous mode [ 153.931618][ T7764] bridge0: port 3(team0) entered disabled state [ 153.953001][ T7764] bridge_slave_1: left allmulticast mode [ 153.958825][ T7764] bridge_slave_1: left promiscuous mode [ 153.965135][ T7764] bridge0: port 2(bridge_slave_1) entered disabled state [ 153.986184][ T7764] bridge_slave_0: left allmulticast mode [ 153.993562][ T7764] bridge_slave_0: left promiscuous mode [ 153.999493][ T7764] bridge0: port 1(bridge_slave_0) entered disabled state [ 154.030057][ T7764] bond0: (slave bridge0): Releasing backup interface [ 154.100873][ T7767] bridge0: port 4(gretap0) entered blocking state [ 154.133802][ T7767] bridge0: port 4(gretap0) entered disabled state [ 154.156235][ T7767] gretap0: entered allmulticast mode [ 154.181978][ T7767] gretap0: entered promiscuous mode [ 154.231334][ T7768] gretap0: left allmulticast mode [ 154.301230][ T7768] gretap0: left promiscuous mode [ 154.306722][ T7768] bridge0: port 4(gretap0) entered disabled state [ 154.718022][ T7790] wg1: entered promiscuous mode [ 154.722940][ T7790] wg1: entered allmulticast mode [ 154.797376][ T7778] lo speed is unknown, defaulting to 1000 [ 154.804412][ T7778] lo speed is unknown, defaulting to 1000 [ 154.827535][ T7794] netlink: 68 bytes leftover after parsing attributes in process `syz.1.355'. [ 154.888171][ T7794] netlink: 8 bytes leftover after parsing attributes in process `syz.1.355'. [ 154.908431][ T7774] lo speed is unknown, defaulting to 1000 [ 154.910035][ T7778] lo speed is unknown, defaulting to 1000 [ 154.999523][ T7779] lo speed is unknown, defaulting to 1000 [ 155.000018][ T7774] lo speed is unknown, defaulting to 1000 [ 155.217215][ T7803] netlink: 'syz.0.359': attribute type 2 has an invalid length. [ 155.359507][ T7803] netlink: 830 bytes leftover after parsing attributes in process `syz.0.359'. [ 155.576194][ T7779] lo speed is unknown, defaulting to 1000 [ 155.742351][ T7774] lo speed is unknown, defaulting to 1000 [ 155.767787][ T7779] lo speed is unknown, defaulting to 1000 [ 156.453549][ T437] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 156.461429][ T437] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 157.008335][ T7836] lo speed is unknown, defaulting to 1000 [ 157.054508][ T7836] lo speed is unknown, defaulting to 1000 [ 157.389519][ T7861] lo speed is unknown, defaulting to 1000 [ 157.473983][ T7861] lo speed is unknown, defaulting to 1000 [ 157.486370][ T7836] lo speed is unknown, defaulting to 1000 [ 157.598164][ T7861] lo speed is unknown, defaulting to 1000 [ 158.636215][ T7836] netlink: 12 bytes leftover after parsing attributes in process `syz.2.368'. [ 159.338949][ T7878] lo speed is unknown, defaulting to 1000 [ 159.387676][ T7883] lo speed is unknown, defaulting to 1000 [ 159.529135][ T7896] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.742470][ T7897] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 159.775671][ T7878] lo speed is unknown, defaulting to 1000 [ 159.814623][ T7893] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 160.003334][ T7878] lo speed is unknown, defaulting to 1000 [ 160.020114][ T7883] lo speed is unknown, defaulting to 1000 [ 160.199246][ T7900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.384'. [ 160.208338][ T7900] netlink: 32 bytes leftover after parsing attributes in process `syz.2.384'. [ 160.235141][ T7900] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 160.245752][ T7900] gretap1: entered promiscuous mode [ 160.261020][ T7900] netlink: 4 bytes leftover after parsing attributes in process `syz.2.384'. [ 160.261548][ T7883] lo speed is unknown, defaulting to 1000 [ 160.332255][ T7901] netlink: 'syz.2.384': attribute type 10 has an invalid length. [ 160.428538][ T7900] bond0: (slave bond_slave_0): Releasing backup interface [ 160.480089][ T7901] macvlan0: entered allmulticast mode [ 160.498392][ T7901] veth1_vlan: entered allmulticast mode [ 160.537067][ T7901] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 160.552371][ T7905] netlink: 'syz.4.380': attribute type 30 has an invalid length. [ 160.577680][ T7905] netlink: 20 bytes leftover after parsing attributes in process `syz.4.380'. [ 161.649208][ T7931] Cannot find del_set index 2416 as target [ 161.864657][ T7939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.891442][ T7939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 161.957685][ T7939] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.873317][ T7980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.887048][ T7980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 162.953727][ T7980] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.027109][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 163.036533][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 163.181803][ T7991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.193851][ T7991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.257260][ T7991] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.300309][ T7993] netlink: 12 bytes leftover after parsing attributes in process `syz.2.416'. [ 163.415248][ T7997] wg1: entered promiscuous mode [ 163.420210][ T7997] wg1: entered allmulticast mode [ 163.482316][ T7999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.499237][ T7999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 163.565826][ T7999] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 164.193781][ T8012] netlink: 8 bytes leftover after parsing attributes in process `syz.0.424'. [ 164.514624][ T3477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.588022][ T3477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 165.100707][ T8038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.115315][ T8038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.177524][ T8038] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.342381][ T8042] bridge0: port 2(bridge_slave_1) entered disabled state [ 165.350148][ T8042] bridge0: port 1(bridge_slave_0) entered disabled state [ 165.470412][ T8042] veth1_vlan: left allmulticast mode [ 165.492646][ T8042] netdevsim netdevsim2 eth0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.501465][ T8042] netdevsim netdevsim2 eth1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.510552][ T8042] netdevsim netdevsim2 eth2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.519389][ T8042] netdevsim netdevsim2 eth3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 165.546920][ T6059] lo speed is unknown, defaulting to 1000 [ 165.730554][ T8052] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.750873][ T8052] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.782323][ T8052] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 165.812296][ T8061] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.437'. [ 165.822376][ T8061] openvswitch: netlink: Message has 8 unknown bytes. [ 165.864274][ T8063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.882103][ T8063] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 165.893078][ T6059] lo speed is unknown, defaulting to 1000 [ 165.900668][ T8064] tipc: Started in network mode [ 165.908125][ T8064] tipc: Node identity ac14142f, cluster identity 4711 [ 165.915802][ T8064] tipc: New replicast peer: 0.0.0.0 [ 165.921630][ T8064] tipc: Enabled bearer , priority 10 [ 165.972438][ T8058] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 165.984461][ T8056] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.235495][ T8072] No such timeout policy "syz0" [ 166.286052][ T3477] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 166.316836][ T3477] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.450186][ T8076] netlink: 'syz.0.444': attribute type 27 has an invalid length. [ 166.777838][ T8084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 166.877147][ T8084] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 167.043881][ T5848] tipc: Node number set to 2886997039 [ 167.067623][ T8092] wg1: entered promiscuous mode [ 167.083197][ T8092] wg1: entered allmulticast mode [ 167.369769][ T8104] netlink: 'syz.4.456': attribute type 9 has an invalid length. [ 167.378663][ T8104] netlink: 24 bytes leftover after parsing attributes in process `syz.4.456'. [ 167.416082][ T8107] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 167.445030][ T8107] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 167.627369][ T8116] (unnamed net_device) (uninitialized): option lacp_rate: mode dependency failed, not supported in mode balance-rr(0) [ 167.841260][ T8120] lo speed is unknown, defaulting to 1000 [ 167.907585][ T8127] netlink: 16 bytes leftover after parsing attributes in process `syz.0.466'. [ 167.919112][ T8127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.466'. [ 167.928598][ T8127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.466'. [ 168.020227][ T8127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.466'. [ 168.039204][ T8127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.466'. [ 168.142620][ T8130] netlink: 18 bytes leftover after parsing attributes in process `syz.0.466'. [ 168.143719][ T8122] wg1: left promiscuous mode [ 168.151722][ T8130] netlink: 36 bytes leftover after parsing attributes in process `syz.0.466'. [ 168.213789][ T8127] netlink: 4 bytes leftover after parsing attributes in process `syz.0.466'. [ 168.234773][ T8122] wg1: left allmulticast mode [ 168.247074][ T8122] macvlan0: left allmulticast mode [ 168.257513][ T8122] gretap1: left promiscuous mode [ 168.263361][ T5848] lo speed is unknown, defaulting to 1000 [ 168.263973][ T8120] lo speed is unknown, defaulting to 1000 [ 168.557140][ T8149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.571071][ T8149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.679546][ T8149] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 168.756195][ T8120] lo speed is unknown, defaulting to 1000 [ 168.978009][ T8163] wg1: entered promiscuous mode [ 168.979559][ T8161] netlink: 'syz.4.476': attribute type 1 has an invalid length. [ 168.983313][ T8163] wg1: entered allmulticast mode [ 169.179136][ T8161] bond1: entered promiscuous mode [ 169.265589][ T8161] 8021q: adding VLAN 0 to HW filter on device bond1 [ 169.281671][ T8164] batadv0: entered promiscuous mode [ 169.288177][ T8164] batadv0: entered allmulticast mode [ 169.299780][ T8164] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 169.321848][ T8164] bond1: (slave batadv0): making interface the new active one [ 169.337395][ T8164] bond1: (slave batadv0): Enslaving as an active interface with an up link [ 169.530688][ T8177] lo speed is unknown, defaulting to 1000 [ 169.638536][ T8182] netlink: 'syz.0.481': attribute type 8 has an invalid length. [ 169.698248][ T8177] lo speed is unknown, defaulting to 1000 [ 169.733378][ T8185] nftables ruleset with unbound set [ 170.067457][ T8200] netlink: 'syz.4.490': attribute type 1 has an invalid length. [ 170.156856][ T8200] bond2: entered promiscuous mode [ 170.194789][ T8200] 8021q: adding VLAN 0 to HW filter on device bond2 [ 170.250597][ T8207] batadv1: entered promiscuous mode [ 170.293696][ T8207] batadv1: entered allmulticast mode [ 170.327205][ T8207] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 170.353224][ T8207] bond2: (slave batadv1): making interface the new active one [ 170.372844][ T8207] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 170.455261][ T8177] lo speed is unknown, defaulting to 1000 [ 170.462756][ T8215] netlink: 'syz.2.493': attribute type 1 has an invalid length. [ 170.599393][ T8215] bond1: entered promiscuous mode [ 170.636653][ T8215] 8021q: adding VLAN 0 to HW filter on device bond1 [ 170.776227][ T8220] batadv0: entered promiscuous mode [ 170.781497][ T8220] batadv0: entered allmulticast mode [ 170.902271][ T8220] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 170.928765][ T8220] bond1: (slave batadv0): making interface the new active one [ 170.947100][ T8220] bond1: (slave batadv0): Enslaving as an active interface with an up link [ 171.185637][ T8232] __nla_validate_parse: 10 callbacks suppressed [ 171.185650][ T8232] netlink: 8 bytes leftover after parsing attributes in process `syz.4.497'. [ 171.330576][ T8241] lo speed is unknown, defaulting to 1000 [ 171.342735][ T8241] lo speed is unknown, defaulting to 1000 [ 171.593952][ T3422] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 171.606164][ T3422] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 171.682841][ T8256] syzkaller0: entered promiscuous mode [ 171.689276][ T8256] syzkaller0: entered allmulticast mode [ 171.793580][ T8256] netlink: 20 bytes leftover after parsing attributes in process `syz.0.504'. [ 172.114110][ T8265] netlink: 'syz.4.506': attribute type 10 has an invalid length. [ 172.121944][ T8265] netlink: 2 bytes leftover after parsing attributes in process `syz.4.506'. [ 172.130292][ T8269] netlink: 'syz.2.507': attribute type 1 has an invalid length. [ 172.188784][ T8270] netlink: 3 bytes leftover after parsing attributes in process `syz.2.507'. [ 172.350449][ T8272] netlink: 48 bytes leftover after parsing attributes in process `syz.2.507'. [ 173.552808][ T8265] team0: entered promiscuous mode [ 173.560760][ T8265] team_slave_0: entered promiscuous mode [ 173.567017][ T8265] team_slave_1: entered promiscuous mode [ 173.572849][ T8265] bridge0: port 3(team0) entered blocking state [ 173.579765][ T8265] bridge0: port 3(team0) entered disabled state [ 173.587013][ T8265] team0: entered allmulticast mode [ 173.592125][ T8265] team_slave_0: entered allmulticast mode [ 173.598814][ T8265] team_slave_1: entered allmulticast mode [ 173.608310][ T8269] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 173.650103][ T8270] batadv1: entered promiscuous mode [ 173.684608][ T8270] batadv1: entered allmulticast mode [ 173.709541][ T8241] lo speed is unknown, defaulting to 1000 [ 173.912703][ T8286] netlink: zone id is out of range [ 173.969806][ T8286] netlink: zone id is out of range [ 173.991951][ T8287] lo speed is unknown, defaulting to 1000 [ 174.000131][ T8287] lo speed is unknown, defaulting to 1000 [ 174.076048][ T8286] netlink: zone id is out of range [ 174.087444][ T8286] netlink: zone id is out of range [ 174.102438][ T8286] netlink: zone id is out of range [ 174.118977][ T8286] netlink: zone id is out of range [ 174.129538][ T8286] netlink: zone id is out of range [ 174.137328][ T8287] lo speed is unknown, defaulting to 1000 [ 174.156099][ T8286] netlink: zone id is out of range [ 174.161458][ T8286] netlink: zone id is out of range [ 174.169169][ T8286] netlink: zone id is out of range [ 174.256951][ T8290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.275409][ T8290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.337530][ T8290] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.413295][ T8293] netlink: 'syz.4.515': attribute type 1 has an invalid length. [ 174.474148][ T8298] netlink: 'syz.0.516': attribute type 1 has an invalid length. [ 174.482339][ T8299] netlink: 3 bytes leftover after parsing attributes in process `syz.4.515'. [ 174.488264][ T8293] bond3: entered promiscuous mode [ 174.501446][ T8293] 8021q: adding VLAN 0 to HW filter on device bond3 [ 174.538205][ T8300] netlink: 3 bytes leftover after parsing attributes in process `syz.0.516'. [ 174.596386][ T8298] bond3: entered promiscuous mode [ 174.601986][ T8298] 8021q: adding VLAN 0 to HW filter on device bond3 [ 174.617311][ T8305] netlink: 48 bytes leftover after parsing attributes in process `syz.4.515'. [ 174.620930][ T8299] batadv2: entered promiscuous mode [ 174.639130][ T8299] batadv2: entered allmulticast mode [ 174.650477][ T8298] netlink: 48 bytes leftover after parsing attributes in process `syz.0.516'. [ 174.661737][ T8299] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 174.679835][ T8299] bond3: (slave batadv2): making interface the new active one [ 174.691603][ T8299] bond3: (slave batadv2): Enslaving as an active interface with an up link [ 174.710905][ T8300] batadv0: entered promiscuous mode [ 174.718251][ T8300] batadv0: entered allmulticast mode [ 174.726280][ T8300] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 174.737668][ T8300] bond3: (slave batadv0): making interface the new active one [ 174.747102][ T8300] bond3: (slave batadv0): Enslaving as an active interface with an up link [ 175.195722][ T8320] netlink: 'syz.4.522': attribute type 1 has an invalid length. [ 175.232021][ T8323] netlink: 36 bytes leftover after parsing attributes in process `syz.1.524'. [ 175.260408][ T8318] IPv6: Can't replace route, no match found [ 175.352623][ T8320] bond4: entered promiscuous mode [ 175.376124][ T8320] 8021q: adding VLAN 0 to HW filter on device bond4 [ 175.454871][ T8326] batadv3: entered promiscuous mode [ 175.479735][ T8326] batadv3: entered allmulticast mode [ 175.544474][ T8326] 8021q: adding VLAN 0 to HW filter on device batadv3 [ 175.552106][ T8326] bond4: (slave batadv3): making interface the new active one [ 175.621499][ T8326] bond4: (slave batadv3): Enslaving as an active interface with an up link [ 176.220198][ T8367] __nla_validate_parse: 3 callbacks suppressed [ 176.220217][ T8367] netlink: 36 bytes leftover after parsing attributes in process `syz.4.538'. [ 176.316804][ T8374] lo speed is unknown, defaulting to 1000 [ 176.324993][ T8374] lo speed is unknown, defaulting to 1000 [ 176.473371][ T8374] lo speed is unknown, defaulting to 1000 [ 176.544420][ T8380] netlink: 24 bytes leftover after parsing attributes in process `syz.2.542'. [ 176.581097][ T8383] xt_CT: You must specify a L4 protocol and not use inversions on it [ 176.787113][ T8387] netlink: 8 bytes leftover after parsing attributes in process `syz.3.545'. [ 178.039686][ T8407] wg1: left promiscuous mode [ 178.049341][ T8407] wg1: left allmulticast mode [ 178.082371][ T8407] bond1: left promiscuous mode [ 178.089397][ T8407] batadv0: left promiscuous mode [ 178.102655][ T8407] batadv0: left allmulticast mode [ 178.119813][ T8407] bond2: left promiscuous mode [ 178.135627][ T8407] batadv1: left promiscuous mode [ 178.140618][ T8407] batadv1: left allmulticast mode [ 178.151534][ T8407] bond3: left promiscuous mode [ 178.169366][ T8407] batadv2: left promiscuous mode [ 178.174447][ T8407] batadv2: left allmulticast mode [ 178.188308][ T8407] bond4: left promiscuous mode [ 178.200352][ T8407] batadv3: left promiscuous mode [ 178.210344][ T8407] batadv3: left allmulticast mode [ 178.221596][ T6062] lo speed is unknown, defaulting to 1000 [ 178.221682][ T8412] tipc: Enabling of bearer rejected, failed to enable media [ 178.274550][ T8411] 8021q: adding VLAN 0 to HW filter on device bond5 [ 178.293332][ T8411] bond0: (slave bond5): Enslaving as an active interface with an up link [ 178.375754][ T8431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.386088][ T6062] lo speed is unknown, defaulting to 1000 [ 178.394562][ T8429] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.433302][ T8432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.452503][ T8434] netlink: 'syz.4.558': attribute type 1 has an invalid length. [ 178.461259][ T8431] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.509624][ T8432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.513817][ T8436] netlink: 3 bytes leftover after parsing attributes in process `syz.4.558'. [ 178.589531][ T8432] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 178.612309][ T8434] bond6: entered promiscuous mode [ 178.628104][ T8434] 8021q: adding VLAN 0 to HW filter on device bond6 [ 178.652141][ T8436] batadv4: entered promiscuous mode [ 178.669729][ T8436] batadv4: entered allmulticast mode [ 178.691617][ T8436] 8021q: adding VLAN 0 to HW filter on device batadv4 [ 178.699207][ T8434] netlink: 48 bytes leftover after parsing attributes in process `syz.4.558'. [ 178.706778][ T8436] bond6: (slave batadv4): making interface the new active one [ 178.722120][ T8436] bond6: (slave batadv4): Enslaving as an active interface with an up link [ 179.095683][ T8453] netlink: 8 bytes leftover after parsing attributes in process `syz.2.564'. [ 179.179948][ T8459] netlink: 16 bytes leftover after parsing attributes in process `syz.0.569'. [ 179.190577][ T8459] netlink: 4 bytes leftover after parsing attributes in process `syz.0.569'. [ 179.218333][ T8460] lo speed is unknown, defaulting to 1000 [ 179.281671][ T8460] lo speed is unknown, defaulting to 1000 [ 179.373771][ T8459] netlink: 18 bytes leftover after parsing attributes in process `syz.0.569'. [ 179.382869][ T8459] netlink: 36 bytes leftover after parsing attributes in process `syz.0.569'. [ 179.598656][ T8472] netlink: 'syz.0.572': attribute type 10 has an invalid length. [ 179.606822][ T8472] team0: entered promiscuous mode [ 179.611959][ T8472] team_slave_0: entered promiscuous mode [ 179.618489][ T8472] team_slave_1: entered promiscuous mode [ 179.625944][ T8472] 8021q: adding VLAN 0 to HW filter on device team0 [ 179.654511][ T8460] lo speed is unknown, defaulting to 1000 [ 180.468641][ T8488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.487991][ T8488] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 180.533371][ T8492] ================================================================== [ 180.541484][ T8492] BUG: KASAN: use-after-free in rose_get_neigh+0x1b6/0x6f0 [ 180.548717][ T8492] Read of size 1 at addr ffff8880227cf830 by task syz.0.577/8492 [ 180.556435][ T8492] [ 180.558767][ T8492] CPU: 0 UID: 0 PID: 8492 Comm: syz.0.577 Not tainted 6.14.0-rc4-syzkaller-00859-gf77f12010f67 #0 [ 180.558784][ T8492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 180.558796][ T8492] Call Trace: [ 180.558804][ T8492] [ 180.558810][ T8492] dump_stack_lvl+0x241/0x360 [ 180.558830][ T8492] ? __pfx_dump_stack_lvl+0x10/0x10 [ 180.558844][ T8492] ? __pfx__printk+0x10/0x10 [ 180.558857][ T8492] ? _printk+0xd5/0x120 [ 180.558868][ T8492] ? __virt_addr_valid+0x183/0x530 [ 180.558881][ T8492] ? __virt_addr_valid+0x183/0x530 [ 180.558895][ T8492] print_report+0x16e/0x5b0 [ 180.558910][ T8492] ? __virt_addr_valid+0x183/0x530 [ 180.558921][ T8492] ? __virt_addr_valid+0x183/0x530 [ 180.558933][ T8492] ? __virt_addr_valid+0x45f/0x530 [ 180.558944][ T8492] ? __phys_addr+0xba/0x170 [ 180.558965][ T8492] ? rose_get_neigh+0x1b6/0x6f0 [ 180.558979][ T8492] kasan_report+0x143/0x180 [ 180.558995][ T8492] ? rose_get_neigh+0x1b6/0x6f0 [ 180.559010][ T8492] rose_get_neigh+0x1b6/0x6f0 [ 180.559026][ T8492] rose_connect+0x45a/0x1170 [ 180.559047][ T8492] ? aa_sk_perm+0x96d/0xab0 [ 180.559064][ T8492] ? __pfx_rose_connect+0x10/0x10 [ 180.559082][ T8492] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 180.559101][ T8492] ? __pfx_aa_sk_perm+0x10/0x10 [ 180.559117][ T8492] ? __might_fault+0xc6/0x120 [ 180.559131][ T8492] __sys_connect+0x288/0x2d0 [ 180.559149][ T8492] ? __pfx___sys_connect+0x10/0x10 [ 180.559170][ T8492] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 180.559188][ T8492] ? do_syscall_64+0x100/0x230 [ 180.559208][ T8492] __x64_sys_connect+0x7a/0x90 [ 180.559226][ T8492] do_syscall_64+0xf3/0x230 [ 180.559243][ T8492] ? clear_bhb_loop+0x35/0x90 [ 180.559261][ T8492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.559278][ T8492] RIP: 0033:0x7fe34518d169 [ 180.559294][ T8492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 180.559305][ T8492] RSP: 002b:00007fe346079038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 180.559320][ T8492] RAX: ffffffffffffffda RBX: 00007fe3453a5fa0 RCX: 00007fe34518d169 [ 180.559330][ T8492] RDX: 000000000000001c RSI: 0000400000000080 RDI: 0000000000000004 [ 180.559339][ T8492] RBP: 00007fe34520e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 180.559348][ T8492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 180.559356][ T8492] R13: 0000000000000000 R14: 00007fe3453a5fa0 R15: 00007ffdf2fb70c8 [ 180.559370][ T8492] [ 180.559375][ T8492] [ 180.805365][ T8492] The buggy address belongs to the physical page: [ 180.811775][ T8492] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x2 pfn:0x227cf [ 180.820526][ T8492] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 180.827636][ T8492] raw: 00fff00000000000 0000000000000000 ffffffffffffffff 0000000000000000 [ 180.836210][ T8492] raw: 0000000000000002 0000000000000000 00000000ffffffff 0000000000000000 [ 180.844779][ T8492] page dumped because: kasan: bad access detected [ 180.851191][ T8492] page_owner tracks the page as freed [ 180.856544][ T8492] page last allocated via order 1, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 8078, tgid 8075 (syz.0.444), ts 167064648992, free_ts 171633126890 [ 180.877809][ T8492] post_alloc_hook+0x1f4/0x240 [ 180.882568][ T8492] get_page_from_freelist+0x365c/0x37a0 [ 180.888099][ T8492] __alloc_frozen_pages_noprof+0x292/0x710 [ 180.893892][ T8492] alloc_pages_mpol+0x311/0x660 [ 180.898733][ T8492] allocate_slab+0x8f/0x3a0 [ 180.903220][ T8492] ___slab_alloc+0xc27/0x14a0 [ 180.907887][ T8492] __slab_alloc+0x58/0xa0 [ 180.912209][ T8492] __kmalloc_noprof+0x2e6/0x4c0 [ 180.917048][ T8492] iter_file_splice_write+0x303/0x1510 [ 180.922495][ T8492] direct_splice_actor+0x11b/0x220 [ 180.927595][ T8492] splice_direct_to_actor+0x586/0xc80 [ 180.932952][ T8492] do_splice_direct+0x289/0x3e0 [ 180.937856][ T8492] do_sendfile+0x564/0x8a0 [ 180.942282][ T8492] __se_sys_sendfile64+0x17c/0x1e0 [ 180.947382][ T8492] do_syscall_64+0xf3/0x230 [ 180.951883][ T8492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 180.957774][ T8492] page last free pid 8260 tgid 8257 stack trace: [ 180.964085][ T8492] free_frozen_pages+0xe0d/0x10e0 [ 180.969102][ T8492] __put_partials+0x160/0x1c0 [ 180.973772][ T8492] put_cpu_partial+0x17c/0x250 [ 180.978523][ T8492] __slab_free+0x290/0x380 [ 180.982938][ T8492] qlist_free_all+0x9a/0x140 [ 180.987513][ T8492] kasan_quarantine_reduce+0x14f/0x170 [ 180.992960][ T8492] __kasan_slab_alloc+0x23/0x80 [ 180.997800][ T8492] kmem_cache_alloc_node_noprof+0x1d9/0x380 [ 181.003686][ T8492] kmalloc_reserve+0xa8/0x2a0 [ 181.008353][ T8492] __alloc_skb+0x1f3/0x440 [ 181.012757][ T8492] netlink_sendmsg+0x634/0xcb0 [ 181.017508][ T8492] __sock_sendmsg+0x221/0x270 [ 181.022172][ T8492] __sys_sendto+0x363/0x4c0 [ 181.026666][ T8492] __x64_sys_sendto+0xde/0x100 [ 181.031425][ T8492] do_syscall_64+0xf3/0x230 [ 181.035923][ T8492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.041808][ T8492] [ 181.044123][ T8492] Memory state around the buggy address: [ 181.049737][ T8492] ffff8880227cf700: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 181.057788][ T8492] ffff8880227cf780: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 181.065840][ T8492] >ffff8880227cf800: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 181.073882][ T8492] ^ [ 181.079496][ T8492] ffff8880227cf880: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 181.087541][ T8492] ffff8880227cf900: ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff ff [ 181.095587][ T8492] ================================================================== [ 181.103750][ T8492] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 181.110949][ T8492] CPU: 0 UID: 0 PID: 8492 Comm: syz.0.577 Not tainted 6.14.0-rc4-syzkaller-00859-gf77f12010f67 #0 [ 181.121543][ T8492] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 181.131609][ T8492] Call Trace: [ 181.134883][ T8492] [ 181.137805][ T8492] dump_stack_lvl+0x241/0x360 [ 181.142475][ T8492] ? __pfx_dump_stack_lvl+0x10/0x10 [ 181.147663][ T8492] ? __pfx__printk+0x10/0x10 [ 181.152244][ T8492] ? vscnprintf+0x5d/0x90 [ 181.156566][ T8492] panic+0x349/0x880 [ 181.160450][ T8492] ? check_panic_on_warn+0x21/0xb0 [ 181.165554][ T8492] ? __pfx_panic+0x10/0x10 [ 181.169957][ T8492] ? mark_lock+0x9a/0x360 [ 181.174276][ T8492] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 181.180158][ T8492] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 181.186039][ T8492] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 181.192363][ T8492] ? print_report+0x519/0x5b0 [ 181.197034][ T8492] check_panic_on_warn+0x86/0xb0 [ 181.201967][ T8492] ? rose_get_neigh+0x1b6/0x6f0 [ 181.206813][ T8492] end_report+0x77/0x160 [ 181.211047][ T8492] kasan_report+0x154/0x180 [ 181.215540][ T8492] ? rose_get_neigh+0x1b6/0x6f0 [ 181.220382][ T8492] rose_get_neigh+0x1b6/0x6f0 [ 181.225055][ T8492] rose_connect+0x45a/0x1170 [ 181.229642][ T8492] ? aa_sk_perm+0x96d/0xab0 [ 181.234140][ T8492] ? __pfx_rose_connect+0x10/0x10 [ 181.239155][ T8492] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 181.245126][ T8492] ? __pfx_aa_sk_perm+0x10/0x10 [ 181.249984][ T8492] ? __might_fault+0xc6/0x120 [ 181.254652][ T8492] __sys_connect+0x288/0x2d0 [ 181.259248][ T8492] ? __pfx___sys_connect+0x10/0x10 [ 181.264367][ T8492] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 181.270698][ T8492] ? do_syscall_64+0x100/0x230 [ 181.275464][ T8492] __x64_sys_connect+0x7a/0x90 [ 181.280303][ T8492] do_syscall_64+0xf3/0x230 [ 181.284869][ T8492] ? clear_bhb_loop+0x35/0x90 [ 181.289549][ T8492] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 181.295441][ T8492] RIP: 0033:0x7fe34518d169 [ 181.299859][ T8492] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 181.319463][ T8492] RSP: 002b:00007fe346079038 EFLAGS: 00000246 ORIG_RAX: 000000000000002a [ 181.327894][ T8492] RAX: ffffffffffffffda RBX: 00007fe3453a5fa0 RCX: 00007fe34518d169 [ 181.335862][ T8492] RDX: 000000000000001c RSI: 0000400000000080 RDI: 0000000000000004 [ 181.343824][ T8492] RBP: 00007fe34520e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 181.351785][ T8492] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 181.359774][ T8492] R13: 0000000000000000 R14: 00007fe3453a5fa0 R15: 00007ffdf2fb70c8 [ 181.367749][ T8492] [ 181.371142][ T8492] Kernel Offset: disabled [ 181.375485][ T8492] Rebooting in 86400 seconds..