last executing test programs: 2m27.135593158s ago: executing program 1 (id=827): r0 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0x161042, 0x0) ioctl$PPPIOCNEWUNIT(r0, 0xc004743e, &(0x7f0000000140)) ioctl$PPPIOCSDEBUG(r0, 0x40047440, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0xb, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'poly1305\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$alg(r3, &(0x7f0000008dc0)={0x0, 0x0, &(0x7f0000008cc0)=[{&(0x7f0000008a40)="7c72bf03f7d9c0fd0826786ffcfb99e55c1272594d5be5c7f1de9562bbf652", 0x1f}, {&(0x7f0000008c80)="9d", 0x7fffefe1}], 0x2}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e22, @dev}}, 0x8c, &(0x7f0000000140)=[{&(0x7f0000000ac0)="ee", 0xfffffdef}], 0x1, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000000040500002b24ec10064b6f2f000000fb718aef932f3889d1fdda5b57000000860f5878c37ffe36e1165814d435be5b317c6c8189587d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988ab013f40afe403041323110f62055394412158e7a3adb148d641aa40d4ab077fe34232aa8b31851466d0998a61d7da0c86d70000001010"], 0x10b8}, 0xff4c) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'bond0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000040)=@newlink={0x24, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x4, r5, 0x1bc60}, [@IFLA_VF_PORTS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x11}, 0x4040044) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}}, 0x0) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000000f8c0000000c0a01080000000000000000010000000900020073797a3200000000600003805c000080080003400000000250000b80200001800a00010071756f7461000000100002800c0001400000000000000000140001800c000100636f756e74657200000000000000058011e70000666c6f775f6f66666c6f6164000000000900010073797a30"], 0x110}}, 0x0) r8 = socket$l2tp6(0xa, 0x2, 0x73) sendto$l2tp6(r8, 0x0, 0x0, 0x4890, &(0x7f0000000040)={0xa, 0x0, 0xfffffffd, @dev={0xfe, 0x80, '\x00', 0x3}, 0x0, 0x4}, 0x20) socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$sock_void(r7, 0x1, 0x48, 0x0, 0x0) r9 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f00000004c0)={'batadv_slave_1\x00', 0x0}) r11 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r11, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$inet6_IPV6_PKTINFO(r11, 0x29, 0x32, &(0x7f0000000440)={@private1, r10}, 0x14) setsockopt$inet6_IPV6_PKTINFO(r8, 0x29, 0x32, &(0x7f0000000200)={@empty, r10}, 0x14) 2m26.835675274s ago: executing program 1 (id=831): syz_open_procfs$namespace(0x0, &(0x7f0000000540)='ns/cgroup\x00') syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/cgroup\x00') r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=@base={0xe, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x20, 0x1405, 0x100, 0x70bd25, 0x25dfdbfd, "", [{{0x8, 0x1, 0x1}, {0x8}}]}, 0x20}, 0x1, 0x0, 0x0, 0x20000004}, 0x4c005) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="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", @ANYRES32=0x0, @ANYRES64=r0, @ANYRESDEC=r0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) unshare(0x4000400) close(0xffffffffffffffff) listen(0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0xb, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="18080000281c0000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000005000000bf0900000000000035090100000000009500000000070000b7020000000000007b9a00fe00000000b6090000000000a80700000050000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffff550000000800000018220000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7050000080000004608f0ff760000005d9800000000000056080000000000008500000007000000b70000000000000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback=0x11, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 2m26.773004763s ago: executing program 1 (id=834): mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x0, 0xb8410608002e4972, 0xffffffffffffffff, 0x0) r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xc, 0xc, 0x2, [@struct]}}, 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r1, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x3}, 0x8) sendto$inet6(r1, &(0x7f0000000400)='$', 0x1, 0x40480c0, 0x0, 0x0) writev(r1, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) (async) writev(r1, &(0x7f0000001300)=[{&(0x7f0000000100)='^', 0x34000}], 0x1) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0xc, &(0x7f0000000cc0)=ANY=[@ANYBLOB="18000000000000000000000000000000851000000300000018200000", @ANYRES32, @ANYBLOB='\x00\x00\x00\f\x00', @ANYRES32, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000009500000000000000"], &(0x7f0000000280)='GPL\x00', 0xa, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f00000004c0), 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 2m25.77156393s ago: executing program 1 (id=850): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'wpan3\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0xbc, r1, 0x200, 0x70bd2c, 0x25dfdbff, {}, [@NL802154_ATTR_SEC_KEY={0x28, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_USAGE_FRAMES={0x5, 0x2, 0x8}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "43d3cd977d237e87d48f4b110001611f"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_IFINDEX={0x8}, @NL802154_ATTR_SEC_KEY={0x64, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x30, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x2}]}, @NL802154_KEY_ATTR_ID={0x30, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x24, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa2}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xfffe}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa3}]}]}]}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}]}, 0xbc}, 0x1, 0x0, 0x0, 0x20000000}, 0x0) (async) sendmsg$NL802154_CMD_GET_SEC_DEV(r0, &(0x7f0000000300)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)={0x44, r1, 0x100, 0x70bd2d, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x44}, 0x1, 0x0, 0x0, 0x81be6fb30c200722}, 0x0) (async) sendmsg$NL802154_CMD_SET_WPAN_PHY_NETNS(r0, &(0x7f0000000400)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x14, 0x0, 0x400, 0x70bd28, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x44800) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000005c0)={0x11, 0x4, &(0x7f0000000480)=@raw=[@ringbuf_query], &(0x7f00000004c0)='GPL\x00', 0x2, 0x16, &(0x7f0000000500)=""/22, 0x41100, 0x8, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000540)={0x1, 0x2}, 0x8, 0x10, &(0x7f0000000580)={0x4, 0xe, 0x40, 0x7}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8001, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000680)={&(0x7f0000000440)='io_uring_create\x00', r3, 0x0, 0x7}, 0x18) r4 = socket$nl_generic(0x10, 0x3, 0x10) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000700), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(r4, &(0x7f0000000900)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000740)={0x14c, r5, 0x4, 0x70bd26, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_REKEY_DATA={0xa8, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "0b5800f90818419f"}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="f4e836119e2378b38f6ad6018aa8de131c1488140a6880ed"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x26dd}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="8b0217cc41f8098031f75fcef57dcfa5d9553783ebc733a5"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "0a99bc2dfd2faab6"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0xb1}, @NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="adb0ca698d5de457935d2976636ea7e308a9755ac2fdcc5d"}, @NL80211_REKEY_DATA_KEK={0x14, 0x1, @kek="a4f2da163a9dbe55131c4609884e140c"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="52de5e17228686bf4997b1ffbed1f547"}]}, @NL80211_ATTR_REKEY_DATA={0x90, 0x7a, 0x0, 0x1, [@NL80211_REKEY_DATA_KCK={0x1c, 0x2, @kck_ext="3f91ea69048def6bf69be58f2188ff4b466b6ed97bb7e224"}, @NL80211_REKEY_DATA_REPLAY_CTR={0xc, 0x3, "9ee4785a6e1338d1"}, @NL80211_REKEY_DATA_KCK={0x14, 0x2, @kck="c97488911b40492fbcf0e22dcf9de610"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="8beb964a3b4a4d2c39229df8fba09cdbbf1fb165809e4c6c0dcf8ca7ecb50a7e"}, @NL80211_REKEY_DATA_KEK={0x24, 0x1, @kek_ext="f0bcf8bef5e39a095c7c420ebd55bda19575e24e69187deb2aee758c056b2ebc"}, @NL80211_REKEY_DATA_AKM={0x8, 0x4, 0x302103d0}]}]}, 0x14c}, 0x1, 0x0, 0x0, 0x8801}, 0x4900) r6 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000980), r0) sendmsg$NET_DM_CMD_START(r0, &(0x7f0000000a40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0xc111802}, 0xc, &(0x7f0000000a00)={&(0x7f00000009c0)={0x14, r6, 0x100, 0x70bd28, 0x25dfdbfb, {}, ["", "", "", "", "", "", ""]}, 0x14}}, 0x40000) (async) r7 = accept(r4, 0x0, &(0x7f0000000a80)) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000b00), r4) (async) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000bc0)={'syztnl1\x00', &(0x7f0000000b40)={'syztnl0\x00', 0x0, 0x4, 0x4, 0x90, 0x800, 0x48, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x40, 0x8000, 0x1, 0x9}}) sendmsg$MPTCP_PM_CMD_GET_ADDR(r7, &(0x7f0000000d00)={&(0x7f0000000ac0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c00)={0x90, r8, 0x0, 0x70bd2a, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private1={0xfc, 0x1, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x8}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x1}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x10}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0xff}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r9}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0xd}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x7}]}, 0x90}, 0x1, 0x0, 0x0, 0x20000080}, 0x40400c0) (async) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_RECVRCVINFO(r10, 0x84, 0x20, &(0x7f0000000d40), &(0x7f0000000d80)=0x4) (async) getsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000dc0)={{{@in6=@private2, @in=@remote}}, {{@in=@private}, 0x0, @in=@empty}}, &(0x7f0000000ec0)=0xe8) (async) sendmsg$netlink(r7, &(0x7f00000011c0)={&(0x7f0000000f00)=@kern={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001180)=[{&(0x7f0000000f40)={0x20c, 0x3b, 0x20, 0x70bd25, 0x25dfdbfb, "", [@nested={0x1fa, 0xbb, 0x0, 0x1, [@generic="c6604f7b28d049de2a0326520cef95d7d45f8d5748e60b2cde95e91c0e2e7fdf62baa6ec8c5f39af6a85e6174c0adfc0570ed018dc8017754203034495f7a7198334ad3bbd81b8b31a5b640bfad947a568a57e2caef24a3f2939b64c26cb62703eb1ff68abc5d1e727cba5e68a0aec4621d1eb05323fd0e49ee7247233a2c02cb73742dc5baabc75e87c2b857047a7a9216919f591c9adeac11045abddb6ff6b0668a5703251a3a50238bdbc467a09fbc4df4c6c8fcc95e2b1bd9d1bb0d87f4ef07c5dca460859", @generic="d1da2516b91f3897e2080bcf8cccf92e9d2af52d96e6934fa1f580bf2003d7518c8d5cdfdd95d5bb97a5211d9ea44b8734a4f26e1f8e5236d290792d83a9653367cc0649f6f51fb9bb735115f3416df7a72d9857a0b0215d1eab15ccd7b0c30d080f82971711618ed86c8bab02c54f696eb28bcb586e6f24ac85146f95f4170e08a1797a6f9e5081715396261fb66d3eac0831a439c30aeba08532661b21924996fcc32ae0116ca0a8d12121b05c63173baa55d4930d1e789de7b155caedc484db21ae193f84759194a6c84bff972a4a9b4a2b0565d50a109288412b0d885d233907f80ec0b7c95f53fc43554a24e9594767e5c306d683ee18e0", @generic="547375698870271483a445575a8f0e372bb514d2c6b195e2611dbb337fbf26224e67927708c816f55b3ebaae0e24835dcb1b665373"]}]}, 0x20c}], 0x1, 0x0, 0x0, 0x20008801}, 0x4000) r11 = socket$inet6(0xa, 0x6, 0x9) (async) r12 = accept(r7, &(0x7f0000001200)=@sco={0x1f, @none}, &(0x7f0000001280)=0x80) ioctl$ifreq_SIOCGIFINDEX_vcan(r11, 0x8933, &(0x7f00000012c0)={'vcan0\x00'}) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), r12) (async) getpid() syz_init_net_socket$llc(0x1a, 0x0, 0x0) (async) sendmsg$NL80211_CMD_JOIN_OCB(r7, &(0x7f0000001400)={&(0x7f0000001340)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000013c0)={&(0x7f0000001380)={0x34, r5, 0xc20, 0x70bd27, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_FREQ_OFFSET={0x8, 0x122, 0xb9}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7048}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) r13 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r13, &(0x7f0000001440)={0x1f, 0xffffffffffffffff, 0x2}, 0x6) 2m25.547864127s ago: executing program 1 (id=853): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$packet(0x11, 0x3, 0x300) ioctl$SIOCGSTAMPNS(r1, 0x8907, 0x0) recvmmsg(r1, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0x8}], 0x1, 0x0, 0x0) shutdown(r0, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="660a000000000000000000000085000000c40000009500"/32], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000940)={0x50, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x50}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010007000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000048000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f0c00098008000140000000075c0000000e0a01020000000000000000010000000900020073797a3200000000090001"], 0xec}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f0000000040)=[@in6={0xa, 0x4e21, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x4}]}, &(0x7f0000000440)=0x10) setsockopt$SO_BINDTODEVICE_wg(r1, 0x1, 0x19, 0xffffffffffffffff, 0x0) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r4, 0xec8, 0x11}, &(0x7f00000000c0)=0x8) r5 = socket$inet_udp(0x2, 0x2, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) getsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000100), &(0x7f0000000140)=0x4) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r5, 0x89f3, &(0x7f0000000000)={'sit0\x00', &(0x7f00000004c0)={'syztnl1\x00', 0x0, 0x80, 0x8700, 0x2, 0x0, {{0x5, 0x4, 0x0, 0x18, 0x14, 0x0, 0x0, 0x5, 0x0, 0x0, @broadcast, @remote}}}}) 2m24.543478186s ago: executing program 1 (id=868): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@ipmr_newroute={0x0, 0x18, 0x400, 0x70bd27, 0x25dfdbfd, {0x80, 0xb220ac7d7d1715f1, 0x383761ebfe2bd70f, 0xf2, 0xff, 0x0, 0xc8, 0xb, 0x2000}, [@RTA_IP_PROTO={0x0, 0x1b, 0x11}, @RTA_DPORT={0x0, 0x1d, 0x4e23}]}, 0x47}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b680000000000000000a45b4e00", "0000ff00", "dfa27021fe106750"}, 0x38) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b680000000000000000a45b4e00", "0000ff00", "dfa27021fe106750"}, 0x38) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000040), 0x4) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f00000001c0), 0x37) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f00000005c0)={0x2, 0x4e24, @multicast2}, 0x10) (async) bind$inet(r3, &(0x7f00000005c0)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r3, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x1, 0x20004000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='net_prio.prioidx\x00', 0x0, 0x0) openat$cgroup_ro(r5, &(0x7f0000000180)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) (async) openat$cgroup_ro(r5, &(0x7f0000000180)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r6, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @dev={0xfe, 0x80, '\x00', 0x13}, 0x1}}, 0x24) setsockopt$RXRPC_SECURITY_KEYRING(r6, 0x110, 0x2, 0x0, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x34, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x24000800) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x34, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x24000800) r8 = socket$inet(0x2, 0x2, 0x1) unshare(0x2000400) bind$inet(r8, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) 2m9.340316989s ago: executing program 32 (id=868): socket$netlink(0x10, 0x3, 0x0) (async) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=@ipmr_newroute={0x0, 0x18, 0x400, 0x70bd27, 0x25dfdbfd, {0x80, 0xb220ac7d7d1715f1, 0x383761ebfe2bd70f, 0xf2, 0xff, 0x0, 0xc8, 0xb, 0x2000}, [@RTA_IP_PROTO={0x0, 0x1b, 0x11}, @RTA_DPORT={0x0, 0x1d, 0x4e23}]}, 0x47}}, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) (async) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) (async) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r1, 0x6, 0x1f, &(0x7f0000000540), 0x3c) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b680000000000000000a45b4e00", "0000ff00", "dfa27021fe106750"}, 0x38) (async) setsockopt$inet6_tcp_TLS_TX(r1, 0x11a, 0x1, &(0x7f0000000000)=@gcm_256={{0x304}, "41328ac34a4ad2ba", "e8582491a0c4050000000000f6542a9b680000000000000000a45b4e00", "0000ff00", "dfa27021fe106750"}, 0x38) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000040), 0x4) (async) setsockopt$sock_int(r1, 0x1, 0x7, &(0x7f0000000040), 0x4) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r2, &(0x7f00000001c0), 0x37) socket$inet_mptcp(0x2, 0x1, 0x106) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r3, &(0x7f00000005c0)={0x2, 0x4e24, @multicast2}, 0x10) (async) bind$inet(r3, &(0x7f00000005c0)={0x2, 0x4e24, @multicast2}, 0x10) sendmmsg$inet(r3, &(0x7f0000002f00)=[{{&(0x7f0000000000)={0x2, 0x4e24, @local}, 0x10, 0x0}}], 0x1, 0x20004000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='net_prio.prioidx\x00', 0x0, 0x0) openat$cgroup_ro(r5, &(0x7f0000000180)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) (async) openat$cgroup_ro(r5, &(0x7f0000000180)='cpuacct.usage_percpu_user\x00', 0x0, 0x0) r6 = socket$rxrpc(0x21, 0x2, 0xa) connect$rxrpc(r6, &(0x7f0000000000)=@in6={0x21, 0x2, 0x2, 0x1c, {0xa, 0x4e20, 0x200, @dev={0xfe, 0x80, '\x00', 0x13}, 0x1}}, 0x24) setsockopt$RXRPC_SECURITY_KEYRING(r6, 0x110, 0x2, 0x0, 0x0) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x34, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x24000800) (async) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x34, r7, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @ipv4={'\x00', '\xff\xff', @local}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x24000800) r8 = socket$inet(0x2, 0x2, 0x1) unshare(0x2000400) bind$inet(r8, &(0x7f0000000000)={0x2, 0x6e24, @empty}, 0x10) socket$nl_route(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) close(0x3) 1m45.629765094s ago: executing program 0 (id=1056): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x7, 0x10012, r0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000600)={0x24, r3, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_BEACON_INTERVAL={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r1, 0x800, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @broadcast}]}, 0x28}, 0x1, 0x0, 0x0, 0x4000}, 0x44008801) pipe(&(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r5, 0x84, 0x13, &(0x7f0000000080)={0x0, 0xbc4}, &(0x7f00000000c0)=0x8) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r9 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$int_in(r9, 0x5452, &(0x7f0000000040)=0x2) bind$inet(r9, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) connect$inet(r9, &(0x7f0000000000)={0x2, 0x4e20, @empty}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=ANY=[@ANYBLOB="340000001c000100000000000000000007000000", @ANYRES32=r8, @ANYBLOB="4000a2000a000200ffffffffffff000004000e80060005"], 0x34}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0xd, 0x7, &(0x7f0000000200)=@framed={{}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r5}}], {0x95, 0x0, 0x700}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', r8, 0xc, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1m45.183918036s ago: executing program 0 (id=1061): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1e, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1e, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0x2e, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, &(0x7f0000000500)) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0xc040}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r4}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000a00"}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a00)={r1}, 0x4) 1m32.411198009s ago: executing program 0 (id=1061): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1e, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1e, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0x2e, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, &(0x7f0000000500)) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0xc040}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r4}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000a00"}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a00)={r1}, 0x4) 1m15.388419052s ago: executing program 0 (id=1061): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1e, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1e, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0x2e, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, &(0x7f0000000500)) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0xc040}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r4}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000a00"}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a00)={r1}, 0x4) 55.327030115s ago: executing program 0 (id=1061): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1e, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1e, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0x2e, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, &(0x7f0000000500)) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0xc040}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r4}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000a00"}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a00)={r1}, 0x4) 45.643938649s ago: executing program 4 (id=1271): r0 = socket$inet6(0xa, 0x3, 0x7) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000100)={@loopback, 0x800, 0x0, 0x3, 0x1, 0x0, 0x3}, 0x20) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) (async) write$tun(r1, &(0x7f0000000380)={@val={0x1c, 0xf5}, @void, @mpls={[{}], @ipv4=@igmp={{0x5, 0x4, 0x1, 0x3b, 0x1c, 0x68, 0x0, 0x1, 0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}, {0x15, 0xf, 0x0, @multicast1}}}}, 0x24) (async) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000001380)=ANY=[@ANYBLOB="8500000062000000660000000000000016000000ffffffff9500000000000000bd013f2755ac44ed976b5452165249753b10ad6f120f07a9645d62b69afe2e10772606696a2223d1b4ffffff7f000000007d3dd227bd388d99db7ef75d51b090729ef7ebb669afc4caf49d4cd1fcbdb4f7792dd759564d40819bb243b0e7989c7f047adba9793d44f274b1602135fb822cfb2793ac4b49c7fb09cc493dba49000000000000d1a30fdd"], &(0x7f0000000140)='GPL\x00', 0x4, 0xa, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff4e, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x23) (async) setsockopt$inet6_int(r0, 0x29, 0x1000000000021, &(0x7f00000005c0)=0x7fff, 0x4) (async) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x4e20, 0x8, @private2, 0x5}, 0x1c) (async) r3 = socket$netlink(0x10, 0x3, 0x4) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f00000015c0)={'wg1\x00'}) (async) writev(r3, &(0x7f0000000300)=[{&(0x7f0000000340)="580000001500192340834b80040d8c560a117436c379000000000000000058000b4824ca945f6400940f6a0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100090c100000000000224e0000", 0x58}], 0x1) (async) r4 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) setsockopt$inet6_mreq(r4, 0x29, 0x1b, &(0x7f0000000040)={@dev}, 0x14) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) setsockopt$inet6_mreq(r4, 0x29, 0x1c, &(0x7f00000001c0)={@remote, r5}, 0x14) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000500)=@newtaction={0x6c, 0x30, 0x9, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_BOS={0x5, 0x8, 0x1}, @TCA_MPLS_PARMS={0x1c, 0x2, {{0x10000, 0x1, 0x6, 0x9c, 0xfffffffe}, 0x4}}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) (async) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000080)='cpuacct.usage_percpu_sys\x00', 0x0, 0x0) recvmsg$kcm(r7, &(0x7f0000001580)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f00000000c0)=""/109, 0x6d}, {&(0x7f00000003c0)=""/4096, 0x1000}, {&(0x7f0000000140)=""/157, 0x9d}, {&(0x7f0000000200)=""/108, 0x6c}, {&(0x7f00000013c0)=""/207, 0xcf}], 0x5, &(0x7f00000014c0)=""/129, 0x81}, 0x40010043) (async) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) ioctl(r0, 0x4, &(0x7f00000025c0)="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") 44.549715952s ago: executing program 4 (id=1275): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) (async, rerun: 64) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)=ANY=[@ANYBLOB="c80000005200010000000000000000001c000000b1000700"], 0xc8}}, 0x0) (rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000001ac0)={&(0x7f0000000080)={0x1c, 0x2c, 0x1, 0x70bd26, 0x25dfdbfc, {0x4}, [@typed={0x8, 0x17, 0x0, 0x0, @uid}]}, 0x1c}, 0x1, 0x0, 0x0, 0x4000d}, 0x20000000) 44.420961225s ago: executing program 5 (id=1277): r0 = socket$netlink(0x10, 0x3, 0x0) socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x0, @dev}, 0x2}}, 0x2e) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x20001439) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000001440)={{}, 0x0, &(0x7f0000001400)}, 0x20) openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xb0e0815010feb943, 0x0) (async) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000040), 0xb0e0815010feb943, 0x0) ioctl$TUNSETOFFLOAD(r6, 0xc004743e, 0x20001401) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x20001400) (async) ioctl$TUNSETOFFLOAD(r7, 0xc004743e, 0x20001400) close(r5) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x2c, r3, 0x1, 0x70bd2b, 0x5, {0x5}, [@L2TP_ATTR_L2SPEC_TYPE, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaac}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0xffffffffffffff0c}}, 0x10) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(cipher_null)\x00'}, 0x58) r9 = socket$nl_rdma(0x10, 0x3, 0x14) r10 = accept4(r9, 0x0, 0x0, 0x80000) sendmsg$AUDIT_DEL_RULE(r10, &(0x7f0000001100)={0x0, 0x0, &(0x7f00000010c0)={0x0, 0x420}}, 0x2008004) sendmsg$kcm(r10, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000740)=[{&(0x7f00000001c0)="f8155f", 0x3}], 0x1}, 0x20040000) ioctl$sock_SIOCSIFVLAN_GET_VLAN_VID_CMD(r0, 0x8983, 0x0) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) (async) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000000)={0x1, 'vlan1\x00', {}, 0xfe01}) socket$tipc(0x1e, 0x2, 0x0) (async) r11 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r11, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) (async) bind$tipc(r11, &(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) socket$tipc(0x1e, 0x2, 0x0) (async) r12 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r12, &(0x7f00000006c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x10000001}}}, 0x10) (async) bind$tipc(r12, &(0x7f00000006c0)=@name={0x1e, 0x2, 0x0, {{0x42, 0x10000001}}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r12, 0x10f, 0x87, &(0x7f00000003c0)={0x42, 0x100001}, 0x10) socket$tipc(0x1e, 0x5, 0x0) (async) r13 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r13, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x2, {0x42, 0x0, 0x104}}, 0x10, 0x0}, 0x0) 44.11946822s ago: executing program 4 (id=1279): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000003d0003010000000000000000017c0000040008800c00018006000600800a000008000280040015"], 0x76}, 0x1, 0x0, 0x0, 0x10}, 0xc000) r1 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r1, &(0x7f0000000080), 0x10) socket$inet6_tcp(0xa, 0x1, 0x0) 43.442484015s ago: executing program 4 (id=1283): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$net_dm(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NET_DM_CMD_START(r0, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r1, 0x800, 0x70bd27, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", "", ""]}, 0x14}}, 0x20000010) r2 = socket$inet(0x10, 0x3, 0xc) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600), 0x1e) sendmsg(r2, &(0x7f0000011fc8)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000100)="2400000001031f001cfffd946fa2830020200a800900010001e700000000a3a20404ff7e", 0x24}], 0x1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$L2TP_CMD_SESSION_DELETE(r3, &(0x7f0000000280)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000240)={&(0x7f0000000200)={0x1c, 0x0, 0x10, 0x70bd28, 0x25dfdbff, {}, [@L2TP_ATTR_SEND_SEQ={0x5, 0x13, 0x7}]}, 0x1c}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$TIPC_CMD_GET_NETID(r3, &(0x7f0000000180)={&(0x7f0000000040), 0xc, &(0x7f0000000140)={&(0x7f00000000c0)={0x1c, r4, 0x8, 0x70bd27, 0x25dfdbff, {}, ["", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x4000024) 43.007978082s ago: executing program 5 (id=1284): openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x0) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f0000000100)={0x40000000, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="021800001b000000000000000000000005000600000000000a000000000000000000000000000000000000000000000000000000000a00000800120000000000000000000000000006000000000000000000000000000000ac1e0001000000000000000000000000e000000200000000000000000000000005000500000000000a00000000000000fc0000000000000000000000000000000000000000000000070019"], 0xd8}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, 0x0, 0x4) ioctl$sock_SIOCBRDELBR(r0, 0x89a3, &(0x7f0000000200)='veth1_to_hsr\x00') r3 = socket(0x26, 0x3, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, 0x0, 0x2, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="050000000200000000000000c9faa171b5b8d398fe4b3b210000005f00001701000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_GET_NEXT_KEY(0x15, &(0x7f0000000580)={r6, &(0x7f0000001600), 0x0}, 0x20) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.current\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) getsockopt$EBT_SO_GET_ENTRIES(r3, 0x0, 0x81, 0x0, &(0x7f0000000500)) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r7, &(0x7f0000000200), 0x806000) ioctl$FS_IOC_RESVSP(r7, 0x4030582a, &(0x7f0000000380)={0x0, 0x0, 0x10, 0x80000000}) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) socket$netlink(0x10, 0x3, 0x2) r8 = socket$nl_generic(0x10, 0x3, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYRES32=r8], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) write$cgroup_int(r5, 0x0, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x34, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r9}, 0x10) 43.006905035s ago: executing program 4 (id=1285): bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="00011000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=@newlink={0x40, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r2}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @gretap={{0xb}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x800}, 0x4000) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018010000756c6c2f00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000005000000b7030000000000008500000006000000850000000700000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f00000005c0)='sys_enter\x00', r3}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000100)='xprtrdma_post_recvs_err\x00', r3, 0x0, 0x7}, 0x18) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000640)=ANY=[], 0x20}}, 0x4000800) 42.612686017s ago: executing program 5 (id=1287): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$inet(0x2, 0x3, 0x2) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000580)=@base={0x12, 0x4, 0x4, 0xa4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000400)={r5, &(0x7f0000000300), 0x0}, 0x20) setsockopt$inet_mreqsrc(r4, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local}, 0xc) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r7, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r6, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8}}, 0x24}}, 0x0) 41.923265338s ago: executing program 4 (id=1289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000002940)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x80, 0x0, 0x200, 0x70bd28, 0x5, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x7, 0x4, "efb1e4"}]}]}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x100, {0x2, 0x8d0, 0x1, 0x9}}}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_KEYS={0x10, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}]}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x400, {0x5, 0x101, 0x6, 0x8000}}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000080}, 0x4040000) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd63"], 0xfdef) 39.248000555s ago: executing program 5 (id=1295): r0 = socket$inet(0x2b, 0x801, 0x0) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001480)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f00000000c0), &(0x7f00000001c0)='%-5lx \x00'}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000001540)={{r1}, &(0x7f00000014c0), &(0x7f0000001500)='%pK \x00'}, 0x20) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000100)={'batadv0\x00', 0x0}) (async) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_MESH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="010000000000000000000f00000005002a000000000008000300", @ANYRES32=r3, @ANYBLOB='\b\x002\x00'], 0x4c}}, 0x0) (async) setsockopt$IP_VS_SO_SET_TIMEOUT(r0, 0x0, 0x48a, &(0x7f0000000040)={0xc, 0x0, 0x2}, 0xc) (async) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r0, 0x81f8943c, &(0x7f0000000280)={0x0, ""/256, 0x0, 0x0, 0x0, 0x0, ""/16, ""/16, ""/16, 0x0, 0x0, 0x0, 0x0}) ioctl$BTRFS_IOC_SNAP_DESTROY_V2(r0, 0x5000943f, &(0x7f0000000480)={{r2}, r5, 0xa, @inherit={0x58, &(0x7f0000000140)={0x0, 0x2, 0x40, 0x0, {0x10, 0xffffffff, 0xffffffffffffffca, 0xdcfa, 0x8}, [0x8, 0x7640]}}, @subvolid=0x100}) 38.937192536s ago: executing program 5 (id=1297): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000600)=0x1, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r1}, 0x10) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r2}, 0x8) close(r3) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000002c0)={0x20, 0x0, 0x9, 0x5, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFCTH_NAME={0x9, 0x1, 'syz0\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x840}, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0xc, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) getsockopt$inet6_tcp_int(r0, 0x6, 0x7, &(0x7f0000000140), &(0x7f0000000240)=0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6, 0x0, 0xfffffffd}, 0x39) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000100)=@gcm_256={{0x303}, "0f78fbc54b6c106c", "75fd7583f127c5c356354c80ea765edaa15f377fb214e20fda1b0241bed67dc4", "b1726789", "fb442565fb00"}, 0x38) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r6, &(0x7f0000000340)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r6, 0x0) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(r6, 0x6, 0x1d, &(0x7f0000000580)={0x3fc6, 0x0, 0x1dcd, 0x40, 0x2}, 0x14) sendto$inet6(r0, &(0x7f00000001c0), 0xfffffffffffffede, 0x0, 0x0, 0x3000137) setsockopt$inet6_tcp_int(r0, 0x6, 0x1b, &(0x7f0000000080)=0x40003, 0x4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000000), r7) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="3103000000000000000008000000060003"], 0x24}}, 0x0) setsockopt$inet6_tcp_TLS_TX(r6, 0x6, 0x1, &(0x7f0000000040)=@gcm_256={{0x304}, "38f3d3a24212718f", "9bcf33b177dac1e633b43bcae4e4b275843526491fcc10e915dd1ee2ee38baa6", "99397002", "805db61e465d8410"}, 0x38) socket$pppl2tp(0x18, 0x1, 0x1) 38.061060543s ago: executing program 5 (id=1299): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newqdisc={0x2c, 0x24, 0x400, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x3, 0x4}, {0xf, 0xf}, {0x6, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x0, 0xf}}]}, 0x2c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000500), 0x12) unshare(0x22020600) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f00000001c0), 0x12) readv(r8, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/151, 0x97}], 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r11, @ANYBLOB="08000b000000000008000200ac14143f080009"], 0x54}}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x0, r3}, 0x18) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000064000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000208000140000000000900010073797a300000000008000a40000000021c0008800c00024000000000000000000c0001"], 0xac}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000731136000000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 26.814641071s ago: executing program 33 (id=1289): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x1c, 0x15, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) unshare(0x68040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0xfffff000) socket$inet_tcp(0x2, 0x1, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) close(r2) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000940), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000002940)={0x34, r5, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_CQM={0x18, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_TXE_RATE={0x8}, @NL80211_ATTR_CQM_TXE_PKTS={0x8}, @NL80211_ATTR_CQM_RSSI_THOLD={0x4}]}]}, 0x34}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000340)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f00000001c0)={&(0x7f00000002c0)={0x80, 0x0, 0x200, 0x70bd28, 0x5, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_KEYS={0x24, 0x51, 0x0, 0x1, [{0x14, 0x0, 0x0, 0x1, [@NL80211_KEY_TYPE={0x8, 0x7, 0x2}, @NL80211_KEY_MODE={0x5, 0x9, 0x1}]}, {0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_SEQ={0x7, 0x4, "efb1e4"}]}]}, @NL80211_ATTR_VHT_CAPABILITY={0x10, 0x9d, {0x100, {0x2, 0x8d0, 0x1, 0x9}}}, @NL80211_ATTR_USE_RRM={0x4}, @NL80211_ATTR_KEYS={0x10, 0x51, 0x0, 0x1, [{0xc, 0x0, 0x0, 0x1, [@NL80211_KEY_MODE={0x5, 0x9, 0x2}]}]}, @NL80211_ATTR_PBSS={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_VHT_CAPABILITY_MASK={0x10, 0xb0, {0x400, {0x5, 0x101, 0x6, 0x8000}}}, @NL80211_ATTR_DISABLE_VHT={0x4}]}, 0x80}, 0x1, 0x0, 0x0, 0x4000080}, 0x4040000) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd63"], 0xfdef) 22.801837916s ago: executing program 34 (id=1299): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000680)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000009c0)=@newqdisc={0x2c, 0x24, 0x400, 0x70bd29, 0x25dfdbfe, {0x0, 0x0, 0x0, r1, {0x3, 0x4}, {0xf, 0xf}, {0x6, 0xffe0}}, [@TCA_RATE={0x6, 0x5, {0x0, 0xf}}]}, 0x2c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_procs(r5, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000500), 0x12) unshare(0x22020600) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r9 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r10 = openat$cgroup_procs(r9, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r10, &(0x7f00000001c0), 0x12) readv(r8, &(0x7f00000003c0)=[{&(0x7f0000000280)=""/151, 0x97}], 0x1) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000001000)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="540000001400090525bd70000003000002180d00", @ANYRES32=r11, @ANYBLOB="08000b000000000008000200ac14143f080009"], 0x54}}, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@o_path={&(0x7f0000000080)='./file0\x00', 0x0, 0x0, r3}, 0x18) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r12, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000064000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000208000140000000000900010073797a300000000008000a40000000021c0008800c00024000000000000000000c0001"], 0xac}}, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000731136000000000016000000000000009500740000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 22.017122997s ago: executing program 0 (id=1061): socket$packet(0x11, 0x2, 0x300) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1e, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1e, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_lookup=0x24, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000040)={r0, 0x2e, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xe, 0x0, 0x0, 0x0}}, 0x10) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r2) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) getsockopt$EBT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x81, 0x0, &(0x7f0000000500)) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000600)={&(0x7f00000003c0)={0x50, 0x2, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_TYPENAME={0x15, 0x3, 'hash:ip,port,net\x00'}]}, 0x50}, 0x1, 0x0, 0x0, 0xc040}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000001280)={0x18, 0x3, &(0x7f0000000940)=ANY=[@ANYBLOB="1800000008000000000000000000000095"], &(0x7f0000000440)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r4}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f0000000780)='contention_end\x00', r4}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="01000a00"}) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000a00)={r1}, 0x4) 4.247912504s ago: executing program 2 (id=1351): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$nl_crypto(0x10, 0x3, 0x15) bind$netlink(r0, &(0x7f0000000000)={0x10, 0x0, 0x25dfdbfb, 0x8}, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6_sctp(0xa, 0x801, 0x84) getsockopt$inet6_mreq(r1, 0x29, 0x8, 0x0, &(0x7f00000002c0)) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = socket$inet6(0xa, 0x2, 0x3a) sendto$inet6(r2, 0x0, 0x0, 0x0, 0x0, 0x0) r3 = socket$inet6(0xa, 0x2, 0x40004) bind$inet6(r3, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r3, 0x0, 0x0, 0x48080, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r6 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="2fd90200000000000000100000000800a261", @ANYRES32=0x0, @ANYBLOB="08000300", @ANYRES32=r5, @ANYBLOB], 0x24}}, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r8}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) ppoll(&(0x7f0000000500)=[{r7, 0xd304}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r10, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) 2.870611648s ago: executing program 2 (id=1356): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000100)={0xffffffffffffffff}, 0x4) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0x0, 0xc1, 0x1000, &(0x7f0000000240)="971f6a67815814f603c74fcf786a4c1e5a65aecb5d5ed416fce39c3a4883e5499fcea026b1f9c911cb254c178ebfff519ed9eed7710b9fd48be9993d6f9082b58e7010e06e74bc21bf01d05460dd8cc18d63da3b4b2aa67122e7972ca2e926ce7609b0f5d00d287f41ce6fec8e2b49d209fcfb230a899e188154a4fa008bef6da4fee086415c9c9530118c4e936a276bc01e54c8b86264547c0f0ce1d4182f28dc8b6cbf05592a7c6bea15d77b9d0f464c390366e13e479f460ed8db792b718bf5", &(0x7f0000000500)=""/4096, 0x1, 0x0, 0x1000, 0xbd, &(0x7f0000001500)="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", &(0x7f0000000140)="3d81880fa778f54a79d58ab6305981321d7786574aa32f291142f6c7fe35da8036508d44c804b4e7d78ed29696310ed8dcafde229fcc481f625ae124eecde64f1af4ebe7ee712a32e1957d18189ca50e2abb931b47dec2bceeffe0956ca25eceb97feae473ca34e7e37f0200000000000000d73d2c4e06ae177ffe94c906861477ceda5c5c0a6156973dfa01d7eb3caf3aad94b7d0d7ad7dea7091150ef691cf0868921be732ab8e4d65c28501828aca8a3fdd30e6d8297b0939bb76ad", 0x6, 0x0, 0x2}, 0x50) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) setsockopt$SO_BINDTODEVICE_wg(r0, 0x1, 0x19, &(0x7f0000000000)='wg2\x00', 0x4) 2.596328457s ago: executing program 2 (id=1358): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xa, 0x8031, 0xffffffffffffffff, 0xffffe000) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x3b, &(0x7f0000000000)='/proc/sys/net/ipv4\x00\x00s/sync_\x00le\xf44.\xab%\xf8\xff\xff\xff\xff\xff\xff\xff?\x11\xc8\xdd\x15\xcc\xd2\xf1\xff\'%\xa0\x00\x00\x00,'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) 2.592139428s ago: executing program 3 (id=1359): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="740000001200030600"/20, @ANYRES32=0x0, @ANYBLOB="2fedaa88000000003800128009000100766c616e000000002800028006000100000000000c0002000000000000000000100004800c00010000000000", @ANYRES32, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x74}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000300)=@base={0xb, 0x8, 0x10001, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) close(0x3) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000080)='./cgroup.cpu/syz0\x00', 0x200002, 0x0) openat$cgroup_ro(r2, &(0x7f0000000240)='rdma.current\x00', 0x0, 0x0) (async) close(0xffffffffffffffff) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0x1, 0x40, 0x20, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180), &(0x7f0000000180)="0b1b94bb7938ee1532c9fc8e2e5364503fd41c8393f9f266e766c323f7c441dc6078e9f3c2c530303a9251e0f307ef5478f13aac17d1f164f8e7fc38", 0x1003, r3}, 0x38) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000725e850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000680)={r4}, 0xc) 2.290955216s ago: executing program 3 (id=1360): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) getpeername$packet(r1, &(0x7f0000000e80)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000ec0)=0x14) r3 = socket(0x10, 0x3, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'ip6tnl0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x14, 0x2, [@TCA_CODEL_CE_THRESHOLD={0x8}, @TCA_CODEL_INTERVAL={0x8}]}}]}, 0x44}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r1, 0x89f0, &(0x7f0000002580)={'syztnl2\x00', &(0x7f0000002500)={'syztnl2\x00', r2, 0x29, 0xae, 0x40, 0x1ef, 0x26, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x10, 0x20, 0x6, 0xf80c0000}}) sendmmsg$inet(r1, &(0x7f0000002800)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000000440)="a1f9319ecd957aec51b028ec2f2964a4c62f359bae5a5db3ac7d66251d867e2701ff67684102373a003f117bb4a1f71237911e7a87679ea325d5d949", 0x3c}], 0x1}}, {{0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000840)="8b46631cd54eb8d7f03d5660ddf0db079b092a35736ebfd539ba61a5585bae566047dd26cd55d4f58b175a3e1aa0194437f838f3a2b6238b47177aaf8c0e4c75f8a55d9ff68f48f92ab6a21149377e135f052ff97e52b969e4", 0x59}, {&(0x7f0000000a40)="de5ec5d04df414658f0f4baaed9eee6d9ec3d78aa7facd50921a9b84762e5d57a38f80254fcbc1cfab0f77c4eb1aa72412279cb49c5c91d001b675714224", 0xffffffffffffff07}, {&(0x7f0000000b40)="de7fe68d66", 0x5}, {&(0x7f0000000d80)="6e4ce123ac", 0x5}, {&(0x7f0000000dc0)="a7", 0x1}], 0x5}}, {{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="e7216ff123a87e34f57f317287ec79fa15d778fc064fed3e75b16fe586c339ac01941a48d3555ab72dd4586fb73fe4e2d968c650a187faea8f148d8d01bb21d803217fb86a024277c4fb4b9ccd98ab8c2eb5878f1c2d25131d7eb4dcc6fb7b9c4fe1d761ce59cffe6094d46f96456a5e53d4df6356d599e78c4abb1db52342c46d15ecde79f9e4c1e95e22e81cba0956ca394d6ae776b857ef83488fc7908ffee56cb21933a4cb996de59c0779c5cadbe14a4ad6ca88723f28824cad7fe764f0f9feaa0dd2d45cacabb04af3bd56b7ab7a0e4d1154b9cf79ccca9e81"}, {&(0x7f0000000180)="7e638ba15878d9f8c8d4a056a0bf40a3f0f00e171c9e2bc695290172ab8a4760d836f2ae48f730dba447cc0ab790edeb68539d6db03cdf3fca26fe18df44b5c798d889ad177662fc97f9068a01947a429bacf414afe8aa37d184cbf84bf178b6ab099b087955c6b2f29d73eeb93251177f9c946d148fc5b82a09cbaecfbab4cef6c055bd8c442128cb3a2af02c6cce922765295c21b8a75b1a90da69ee061dea4c7a287de822f37e"}], 0x0, &(0x7f00000002c0)=[@ip_retopts={{0x0, 0x0, 0x7, {[@timestamp={0x44, 0x0, 0x4d, 0x0, 0xc, [0x401, 0x3, 0x5, 0x3, 0x3, 0x7, 0xa, 0x2]}, @ra, @ssrr={0x89, 0x0, 0x94, [@remote, @local, @empty]}, @ssrr={0x89, 0x0, 0xfc, [@empty, @remote, @multicast1, @loopback, @private=0xa010101, @private=0xa010101, @remote, @initdev={0xac, 0x1e, 0x1, 0x0}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}]}}}, @ip_retopts={{0x0, 0x0, 0x7, {[@lsrr={0x83, 0x0, 0x59, [@private=0xa010100, @empty, @multicast1, @remote]}, @ssrr={0x89, 0x0, 0x4a, [@broadcast, @local, @empty]}, @timestamp_addr={0x44, 0x0, 0xa6, 0x1, 0x6, [{@loopback}]}]}}}, @ip_ttl={{0x0, 0x0, 0x2, 0x101}}]}}, {{&(0x7f00000003c0)={0x2, 0x4e21, @local}, 0x0, &(0x7f0000000980)=[{&(0x7f0000000480)="cf303a2effa10c8690bd0dfaaea93a3d36bc34afe3ce3852c4db32609d7ca91076f0a67a93bb80713076125f89eee84a212deaffc3b541781e701ddd0dad416ca46e7cd511103630a795f2a7ddad12f98792dec0a28afbdeb417821f4352ecdbf29d8e841c5b170013cf885746e2ebf2a392f27b1fd922c14ed7005545ff57b13161386bc01698ab0e0ed300d5bf16816296ab30ee7c1c75dfc6fa866957f31fd983a4615a8c2d67bb2fe543236ae7b29b940f3da059f210a262ab6a30db486a07cd0e028f4aec309562c0dc5fe5438b9995822f"}, {&(0x7f0000000400)="915501ace1981d075760dd5df7bcf3551a70ff747e4323281d20a527299e5eff184e7cbbf32c174ca008134c10df5ca52a2849dd7f4041"}, {&(0x7f0000000580)="bc1ca2829d0ebcc26ffdd821acc11982ec83cc876c7b50c826d7c95aa407aba4f032412788d03059daade3e354e7343b9ae495095fbebbcde522107a819bfb9ff585fc72a57d4bc06c4e1cb0a95ce1b33c60d580f8478823d63f4d596d421947c02fb5e9"}, {&(0x7f0000000600)="b8bb2ba3e7214cd9f8c07d3ff647570be34155980924a2090c2e6f272238522b5a3d2885c7317910b4960b81a43e1406d2ebeccebf698394"}, {&(0x7f0000000640)="1ea0fad1a3201416345aa677343ab95f1480fe51f577101c6006c4568660ae200eae5bdf021fd34e21d0f82a202e73b9c5ff165787d4847c808c282ffa6bc2527d720a7be1341ab5fac9ee45f6628264"}, {&(0x7f0000000700)="36d951798513efe99f32491aa99952021f338e59fd1278d81d8340e94c6d8d029d55992a3b5042f7acd9cffb44ec814964a1cc7e955b9bd7056b2fdd9f822a24392224b6dec4bed8d2b32073434e8ceb90d7bda9de974a38556a2cd924859d7e2c0e08cd66fcc6ebe6939ee7eb44a3b94a0c635636ddca037db80aee3bc37169b7e8aecb1ab492d06b6e06e2c041f437c0757b011e63454a914677880480385869f9c04de40533d92a00a39357ae0ba01dc81d540b2f21ac447531c0456d79b7fae473a96b5d1745981bc72d347feda2c0a0cd776662605d75"}, {&(0x7f00000008c0)="19e0244706ed10f2d423e0e7798cb7daa3a8421c8b374ecf0be5d77f48097e1024ad09a07236101a5ed865b0a1e18a72bf058fc4e9d83cfde3b6ee3754a7ff571d39e33e33b4954e365cf7bc64b619c21856ccc494f357450cd46d494e0cb62cf201dfd664d4a041fdd97ec3f5251156063ee1293d889fdfaa0adc0b78dac66c8323ab3216b9219a281fd98faeba26487ca623ab3bee7e05"}]}}, {{&(0x7f0000000800)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x0, &(0x7f0000000a00)=[{&(0x7f0000000a80)="21a93c2f634c429a10c35caefe097904a709eb78caa0b2f28e5b9e1199e4e045303cfd847726b5a329660f6995af90bbde3c0468d7a75228419e5ca2659c63c58c3661762fb231f0b3a09e4c537e631f90db456c2ac744ada3e2230f6f87036681b657c03c197772612a38789b5559f72e23c25b48e656225e223b9eca4e5a147acacf2fc4a7db44924b274fb87edce4dc9aea863f04e1b960e9585ee97a45beb4552066cc94c3405287e46f0654"}]}}, {{&(0x7f0000000b80)={0x2, 0x4e20, @multicast2}, 0x0, &(0x7f0000000d40)=[{&(0x7f0000000bc0)="fc9d44bacf09aa650b5bb899ef563cc6c7c4ba57a7768cd81717038f0124f399f47b3dc1f57006d525ca65a4121eada1f7f613eea372b609a9c001d519b955e87f5461d464c40e35bd15c1d692c996bb67863dddff49bf59878564bec7a1216dd7db2c251a4c3905b63189b0373a365cd23a4b7109608322f652c4acf7cd0b3080952359c528480c91f25f8b97d53a6c681a1ccf7a7125e899"}, {&(0x7f0000000c80)="7eba52de23ead225729c86616287ba29a5018655ba1849de0abad7f895827033ae0f3eab747f5a9ac27a7166e8041f3fb32d6abf7693cf463b0f3ca87ca2bfb73cb68566fe16f7ac0ace6974e2c48286d84fbabe47f0cca64d6f008b139bb051445b0750edceaf946dce7bca33f85b9b3882b99d1845a6c3caf3b6b3057e91c9b34d2ea17669a544ca677b1c9c01f03f8ce5dbe1d148233d1912a9e91459"}, {&(0x7f0000000fc0)="497aa45e5cad2cb0bcc982ce3db4581b258dc332cd61180156c6ed0c21ea61188fa2157f5cac4e340587a083c50d039e71abfd784fb6f3929e6fe537ccebaa4a60590feb80f471ba8507a6cd324042b19e55b3b885fea37b7a9bfa2c9b0592c7b765bc3d173cc50caad4712a337addfb2db95b582892db10ea672714551516c7b69a6b36ff4886dc8f31feae39acd74218a4ee3c305d969f2b5218b91045be9c559207223c2005a7b23eeeda6c555f55890904ca1da7d3f176f931b8906864aae7be42c2ae7183fe0dac1a0286fddb8abdf65caae5fdd257c816622155577ed6d64d08f82dc07092f9b85e8e4a10ddf00206"}], 0x0, &(0x7f00000010c0)=[@ip_tos_u8={{0x0, 0x0, 0x1, 0x2}}, @ip_ttl={{0x0, 0x0, 0x2, 0xe}}, @ip_pktinfo={{0x0, 0x0, 0x8, {r2, @initdev={0xac, 0x1e, 0x0, 0x0}, @empty}}}, @ip_tos_int={{0x0, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x0, 0x0, 0x1, 0x6}}, @ip_ttl={{0x0, 0x0, 0x2, 0x4}}, @ip_retopts={{0x0, 0x0, 0x7, {[@ssrr={0x89, 0x0, 0x59, [@multicast1, @local]}, @timestamp_prespec={0x44, 0x0, 0x70, 0x3, 0x4, [{@multicast2, 0x5}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x5}, {@rand_addr=0x64010101, 0xfffffff9}, {@local, 0x8}]}, @noop]}}}, @ip_tos_u8, @ip_pktinfo={{0x0, 0x0, 0x8, {r5, @private=0xa010102, @private=0xa010100}}}]}}, {{&(0x7f0000000f00)={0x2, 0x4e21, @rand_addr=0x64010102}, 0x0, &(0x7f0000002480)=[{&(0x7f0000001200)="bbf4885f0d13cacd13ed54988f8221b3c28acde267d8ddf64302b994219976"}, {&(0x7f0000001240)="70495d591182c330f514e09627cfb89732a0ead3ccb6164f9879307f2db95c557f1cc63964"}, {&(0x7f0000001280)="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"}, {&(0x7f0000002280)="05c4c67874e12bce196488dd59ebb5bed394f086bddafc2709d20ecd61a38a2ca3fa523caabbe7c72ffb9787a0377a790870208d2da1a3e025520eb5ff61d5e150d81f93b180e7f8a0fab2392cf799481508296908f8441293d093d8a8764dcb3e01ddafeb30c3f59afddac6f343b5623a3d0da042eeb9e886f37d451e3085b28f0e8dbc8e1d21499550b8344622993f2cd571c23a6ddcbe32f379b5f3e8f7343cc1a193cadcca6dbda4c0aa871280a1912301800d68ab6b0b61cedfcda13b918957f34e041623f1bb72b26dd3b89d006d532002a34864a0b0be07493470eb5797300be9e52bc65218cc9abbc9bca96046f6"}, {&(0x7f0000002380)="845d4edb845cca7c57c4b19fa3febdf62f28a0c8ff0e4f209bd8718fa930c74b66568b470024ba844ec07fdb1c8012d21f2e0a2e98e3f7808d763a9cf24816fc9f5392bf8e906fbfcc40057684adec8c2a44046535a244dacad042f76ca92dff16be97d9e441e343fbf0843eeb5d6e5150ff05fbfeb6057085814edaf4fdc10d5e8f041d68809f2f28cc0007a5b720b678d69e84a5e61306fc0962c6cd28ee8e3261d05af3306b"}, {&(0x7f0000002440)="0e2914aebd7c1989f5bf714b6f2f1f5e351a672c6297101c132801"}], 0x0, &(0x7f00000025c0)=[@ip_ttl={{0x0, 0x0, 0x2, 0x7f}}, @ip_pktinfo={{0x0, 0x0, 0x8, {r6, @private=0xa010102, @multicast1}}}, @ip_retopts={{0x0, 0x0, 0x7, {[@rr={0x7, 0x0, 0xd0, [@dev={0xac, 0x14, 0x14, 0x18}, @rand_addr=0x64010102, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x0, 0xf8, [@empty, @empty, @remote]}, @ra, @ssrr={0x89, 0x0, 0xae, [@remote]}, @timestamp_addr={0x44, 0x0, 0x10, 0x1, 0x1, [{@initdev={0xac, 0x1e, 0x0, 0x0}, 0x4}, {@local, 0x3}, {@multicast1}, {@broadcast, 0x101}, {@empty, 0x6}, {@empty, 0x6}]}, @generic={0x86, 0x0, "083017537d"}]}}}, @ip_tos_u8={{0x0, 0x0, 0x1, 0x9}}, @ip_retopts={{0x0, 0x0, 0x7, {[@cipso={0x86, 0x0, 0x1, [{0x6, 0x0, "b61102c80a284060063eb83e9450"}, {0x7, 0x0, "7aee876bd0"}, {0x0, 0x0, "201c426d8f7616e67e4903"}, {0x7, 0x0, "da512aaea0a6db"}]}, @generic={0x83, 0x0, "fa7a7e"}, @timestamp_prespec={0x44, 0x0, 0x5d, 0x3, 0xa, [{@broadcast, 0xe}, {@private=0xa010101, 0x7}, {@broadcast, 0x1ff}]}, @rr={0x7, 0x0, 0xc1, [@multicast1, @multicast1, @dev={0xac, 0x14, 0x14, 0x39}, @rand_addr=0x64010101, @empty, @local]}, @ssrr={0x89, 0x0, 0x43, [@remote, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @rr={0x7, 0x0, 0xac, [@rand_addr=0x64010100, @remote, @initdev={0xac, 0x1e, 0x0, 0x0}, @private=0xa010100, @initdev={0xac, 0x1e, 0x0, 0x0}, @remote, @rand_addr=0x64010100]}, @ra={0x94, 0x0, 0x1}, @ssrr={0x89, 0x0, 0x24, [@local, @private=0xa010101, @remote, @empty, @empty, @multicast1, @local, @multicast1]}]}}}, @ip_pktinfo={{0x0, 0x0, 0x8, {r2, @broadcast, @rand_addr=0x64010101}}}, @ip_ttl={{0x0, 0x0, 0x2, 0x7}}, @ip_pktinfo={{0x0, 0x0, 0x8, {r2, @remote, @dev={0xac, 0x14, 0x14, 0xa}}}}, @ip_ttl={{0x0, 0x0, 0x2, 0x9}}]}}], 0x2, 0x0) 1.964075412s ago: executing program 3 (id=1361): unshare(0x68040200) r0 = syz_init_net_socket$rose(0xb, 0x5, 0x0) mmap(&(0x7f0000a50000/0x4000)=nil, 0x4000, 0x0, 0x8010, r0, 0xffffe000) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x2000001, 0x2010, 0xffffffffffffffff, 0xb63b2000) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={0x0, 0x24}}, 0x8004) write(r1, &(0x7f0000000000)="240000001a005f0214f9f407000901000000000000000005000000000800040001000000", 0x24) 1.452003278s ago: executing program 2 (id=1362): setsockopt$SO_J1939_ERRQUEUE(0xffffffffffffffff, 0x6b, 0x4, 0x0, 0x0) 1.045480495s ago: executing program 3 (id=1363): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x42ddde77681dfe00, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$alg(0x26, 0x5, 0x0) r2 = accept4(r1, 0x0, 0x0, 0x0) recvmsg$kcm(r2, 0x0, 0x100) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0xffffffff, 0x40, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1dc9564eab44f5cc}, [@FRA_GENERIC_POLICY=@FRA_L3MDEV={0x5, 0x13, 0x1}]}, 0x24}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, 0x0, 0x0) setsockopt$inet_sctp_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) 763.934435ms ago: executing program 2 (id=1364): ioctl$BTRFS_IOC_START_SYNC(0xffffffffffffffff, 0x80089418, &(0x7f0000000440)=0x0) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x275a, 0x0) unshare(0x28000600) (async, rerun: 32) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000400)={@ifindex, r1, 0x37, 0x0, 0x0, @void, @value}, 0x20) (async, rerun: 32) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f0000000740)={"8c3ef01be86258108b331b07f91efab2", 0x0, r0, {0x6, 0x40}, {0x3, 0x1}, 0x6, [0x3, 0x5, 0x9, 0x7, 0x7, 0x5, 0x10, 0x953, 0x1, 0x4, 0x8, 0x9000000000000000, 0x2, 0x4, 0x2, 0x5]}) (async) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) (async) r3 = socket$kcm(0xa, 0x6, 0x0) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async, rerun: 32) setsockopt$sock_attach_bpf(r3, 0x10d, 0x2, &(0x7f00000009c0), 0x4) (async, rerun: 32) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) (async) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, 0x0, 0x0) (async) socket$l2tp6(0xa, 0x2, 0x73) (async) unshare(0x20000400) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000), 0x4) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000840)=ANY=[@ANYBLOB="0a00000004000000ff0f00000700000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="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"], 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='sched_switch\x00', r5}, 0x10) (async) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async, rerun: 32) ioctl$TUNSETQUEUE(0xffffffffffffffff, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r6) (async) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f00000004c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000600)={&(0x7f0000000040)={0x3c, r7, 0x1, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r8}, @void}}, [@NL80211_ATTR_CQM={0x20, 0x5e, 0x0, 0x1, [@NL80211_ATTR_CQM_RSSI_THOLD={0x4}, @NL80211_ATTR_CQM_RSSI_HYST={0x8, 0x2, 0x2}, @NL80211_ATTR_CQM_TXE_PKTS={0x8, 0x6, 0x2}, @NL80211_ATTR_CQM_TXE_INTVL={0x8, 0x7, 0x4ad}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4080}, 0x4004000) (async) socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000100)=ANY=[@ANYBLOB="b40000001900010000000000000000001d0109004d0011806f9886ff8308eb1d7c1bbdbe3160578f5aa421ea2a089f6ab00ada4e5605b2e72655b3cc4c48e6405c0cf5329cb7f1821ec7ecca1d3ffb2d7144f29af11fe6557f8a74d923d12c43bc0000004d0012"], 0xb4}}, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0xf, 0x200000005c832, 0xffffffffffffffff, 0x0) (async) socket$inet6_sctp(0xa, 0x1, 0x84) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) 464.393906ms ago: executing program 3 (id=1365): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x16, 0x4, &(0x7f0000000740)=ANY=[@ANYBLOB="660a00000000000061114e0000000000850000008c00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x80002, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4e23, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2e}}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, 0x0, 0x0) 394.296786ms ago: executing program 3 (id=1366): r0 = syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$inet(0xa, 0x801, 0x84) connect$inet(r1, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r1, 0x8) r2 = accept4(r1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r2, 0x84, 0x9, &(0x7f0000000280)={0x0, @in={{0x2, 0x4e23, @empty}}, 0x9, 0x7f, 0xfffffffb, 0x3f1, 0x63, 0x0, 0x9}, &(0x7f00000003c0)=0x9c) sendmsg$DEVLINK_CMD_RATE_GET(r2, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="200028bd7000fe000000080001007063690011000200303030303a30303a31302e30000000000800010031302e8a978000"/66], 0x54}}, 0x40000) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r3, 0x0, 0x2a, &(0x7f0000000600)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) setsockopt$inet6_group_source_req(0xffffffffffffffff, 0x29, 0x2e, &(0x7f0000000200)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0x7}}}, {{0xa, 0x2, 0x0, @loopback}}}, 0x108) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000180)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000001c0)=ANY=[@ANYBLOB="200000001100010125bd70000000000000000000", @ANYRES32=r6], 0x20}}, 0x0) setsockopt$inet_MCAST_MSFILTER(r3, 0x0, 0x30, &(0x7f0000000940)=ANY=[@ANYBLOB="020000000000000002000000e0000002000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000500000002000000e00000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000200000064010102000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000e000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002"], 0x310) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r7, 0x0, 0x2a, &(0x7f0000000180)={0x2, {{0x2, 0x0, @multicast2}}}, 0x88) socket$inet(0x2, 0x2, 0x0) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)={0x88, 0x2, 0x6, 0x401, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x16, 0x3, 'hash:net,port,net\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x28, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0xa}, @IPSET_ATTR_PORT_TO={0x6, 0x5, 0x1, 0x0, 0x4e22}]}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:net,net\x00'}, @IPSET_ATTR_REVISION={0x5, 0x4, 0x3}]}, 0x88}, 0x1, 0x0, 0x0, 0x8000}, 0x4a004) ioctl$sock_SIOCGIFINDEX_80211(r8, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000780), r12) sendmsg$NL802154_CMD_DEL_SEC_LEVEL(r12, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000880)={&(0x7f0000000800)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r13, @ANYBLOB="01002dbd7000fbdbdf25210000000c002d8005080100fa0000000c0006000100000001000000"], 0x2c}, 0x1, 0x0, 0x0, 0x40804}, 0x0) sendmsg$NL80211_CMD_JOIN_IBSS(r8, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x34, r9, 0x101, 0x0, 0x80000000, {{}, {@val={0x8, 0x3, r11}, @void}}, [@NL80211_ATTR_SSID={0x5, 0x34, @random="c4"}, @chandef_params=[@NL80211_ATTR_WIPHY_CHANNEL_TYPE={0x8, 0x27, 0x4}, @NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}}, 0x80) pselect6(0x40, &(0x7f0000000400)={0x5, 0x7, 0x3, 0xffffffffffffffff, 0x800, 0x8, 0xfffffffffffffffb, 0x80000000}, &(0x7f0000000440)={0x8000, 0xca5, 0x0, 0x6, 0x8, 0x9, 0x2, 0x40}, &(0x7f0000000480)={0x9, 0x1000, 0x226e, 0x3, 0x4, 0x5, 0xffffffff, 0x2e}, &(0x7f00000004c0)={0x77359400}, &(0x7f0000000540)={&(0x7f0000000500)={[0x8]}, 0x8}) socket$inet6_tcp(0xa, 0x1, 0x0) 0s ago: executing program 2 (id=1367): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt(r0, 0x84, 0x81, &(0x7f00000002c0)="1a00000002000000", 0x8) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000800)={&(0x7f0000000500)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0xa, [{0x0, 0x1}]}, @enum]}}, &(0x7f0000000f40)=""/4089, 0x3a, 0xff9, 0x8, 0x0, 0x0, @void, @value}, 0x28) setsockopt$inet_sctp_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000000)=[@in6={0xa, 0x4e23, 0x0, @empty, 0xb}], 0x1c) setsockopt$inet_sctp6_SCTP_AUTH_CHUNK(r0, 0x84, 0x15, &(0x7f00000000c0)={0x7}, 0x1) sendto$inet6(r0, &(0x7f0000000040)='l', 0x1, 0x810, &(0x7f0000000100)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) shutdown(r0, 0x1) kernel console output (not intermixed with test programs): 2][ T5840] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 109.647805][ T6857] batadv_slave_1 (unregistering): left promiscuous mode [ 110.002479][ T6886] netlink: 16 bytes leftover after parsing attributes in process `syz.1.260'. [ 110.381639][ T6897] validate_nla: 1 callbacks suppressed [ 110.381670][ T6897] netlink: 'syz.2.263': attribute type 3 has an invalid length. [ 110.420248][ T6897] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.263'. [ 111.167231][ T6921] syz.2.270: vmalloc error: size 16777216, failed to allocated page array size 32768, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 111.210194][ T6933] netlink: 'syz.3.272': attribute type 1 has an invalid length. [ 111.241887][ T6921] CPU: 0 UID: 0 PID: 6921 Comm: syz.2.270 Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 111.252580][ T6921] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 111.262819][ T6921] Call Trace: [ 111.266156][ T6921] [ 111.269232][ T6921] dump_stack_lvl+0x241/0x360 [ 111.274006][ T6921] ? __pfx_dump_stack_lvl+0x10/0x10 [ 111.279373][ T6921] ? __pfx__printk+0x10/0x10 [ 111.284043][ T6921] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 111.290540][ T6921] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 111.297153][ T6921] warn_alloc+0x278/0x410 [ 111.301560][ T6921] ? __pfx_warn_alloc+0x10/0x10 [ 111.306486][ T6921] ? packet_set_ring+0x6da/0x2450 [ 111.311580][ T6921] ? __get_vm_area_node+0x1c8/0x2d0 [ 111.316821][ T6921] ? __get_vm_area_node+0x25c/0x2d0 [ 111.322091][ T6921] __vmalloc_node_range_noprof+0x62f/0x1380 [ 111.328025][ T6921] ? alloc_pages_mpol_noprof+0x417/0x680 [ 111.333873][ T6921] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 111.340323][ T6921] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 111.346342][ T6921] ? rcu_is_watching+0x15/0xb0 [ 111.351247][ T6921] ? packet_set_ring+0x6da/0x2450 [ 111.356311][ T6921] vzalloc_noprof+0x79/0x90 [ 111.360870][ T6921] ? packet_set_ring+0x6da/0x2450 [ 111.366031][ T6921] packet_set_ring+0x6da/0x2450 [ 111.370956][ T6921] ? __pfx_packet_set_ring+0x10/0x10 [ 111.376367][ T6921] ? __might_fault+0xaa/0x120 [ 111.381420][ T6921] ? __might_fault+0xc6/0x120 [ 111.386243][ T6921] packet_setsockopt+0x1140/0x1970 [ 111.391423][ T6921] ? __pfx_packet_setsockopt+0x10/0x10 [ 111.396997][ T6921] ? __lock_acquire+0x1397/0x2100 [ 111.402074][ T6921] ? aa_sk_perm+0x96d/0xab0 [ 111.406616][ T6921] ? __pfx_aa_sk_perm+0x10/0x10 [ 111.411501][ T6921] ? __pfx_lock_acquire+0x10/0x10 [ 111.416549][ T6921] ? aa_sock_opt_perm+0x79/0x120 [ 111.421516][ T6921] ? __pfx_packet_setsockopt+0x10/0x10 [ 111.427089][ T6921] do_sock_setsockopt+0x3af/0x720 [ 111.432147][ T6921] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 111.437722][ T6921] ? __fget_files+0x395/0x410 [ 111.442600][ T6921] ? __fget_files+0x2a/0x410 [ 111.447248][ T6921] __x64_sys_setsockopt+0x1ee/0x280 [ 111.452749][ T6921] do_syscall_64+0xf3/0x230 [ 111.457455][ T6921] ? clear_bhb_loop+0x35/0x90 [ 111.462246][ T6921] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 111.468269][ T6921] RIP: 0033:0x7fa348b85d29 [ 111.472757][ T6921] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 111.493794][ T6921] RSP: 002b:00007fa3489f9038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 111.502246][ T6921] RAX: ffffffffffffffda RBX: 00007fa348d75fa0 RCX: 00007fa348b85d29 [ 111.510603][ T6921] RDX: 0000000000000005 RSI: 0000000000000107 RDI: 0000000000000009 [ 111.518988][ T6921] RBP: 00007fa348c01b08 R08: 000000000000001c R09: 0000000000000000 [ 111.527363][ T6921] R10: 00000000200000c0 R11: 0000000000000246 R12: 0000000000000000 [ 111.535448][ T6921] R13: 0000000000000000 R14: 00007fa348d75fa0 R15: 00007ffc0a145dd8 [ 111.543568][ T6921] [ 111.565824][ T6921] Mem-Info: [ 111.569228][ T6921] active_anon:4922 inactive_anon:0 isolated_anon:0 [ 111.569228][ T6921] active_file:1178 inactive_file:38260 isolated_file:0 [ 111.569228][ T6921] unevictable:768 dirty:114 writeback:0 [ 111.569228][ T6921] slab_reclaimable:9911 slab_unreclaimable:98180 [ 111.569228][ T6921] mapped:28615 shmem:1480 pagetables:805 [ 111.569228][ T6921] sec_pagetables:0 bounce:0 [ 111.569228][ T6921] kernel_misc_reclaimable:0 [ 111.569228][ T6921] free:1343866 free_pcp:367 free_cma:0 [ 111.578547][ T6941] netlink: 28 bytes leftover after parsing attributes in process `syz.3.272'. [ 111.646870][ T6921] Node 0 active_anon:19468kB inactive_anon:0kB active_file:4712kB inactive_file:152964kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:118360kB dirty:464kB writeback:0kB shmem:4372kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:11236kB pagetables:3056kB sec_pagetables:0kB all_unreclaimable? no [ 111.671345][ T6933] bond0: entered promiscuous mode [ 111.685730][ T6933] 8021q: adding VLAN 0 to HW filter on device bond0 [ 111.695069][ T6921] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 111.727124][ T6921] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 111.754924][ T6921] lowmem_reserve[]: 0 2465 2466 0 0 [ 111.770863][ T6921] Node 0 DMA32 free:1452628kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:19428kB inactive_anon:0kB active_file:4712kB inactive_file:152140kB unevictable:1536kB writepending:464kB present:3129332kB managed:2552760kB mlocked:0kB bounce:0kB free_pcp:1544kB local_pcp:804kB free_cma:0kB [ 111.849584][ T6921] lowmem_reserve[]: 0 0 0 0 0 [ 111.880907][ T6921] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:824kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:12kB local_pcp:8kB free_cma:0kB [ 111.911545][ T6921] lowmem_reserve[]: 0 0 0 0 0 [ 111.918242][ T6921] Node 1 Normal free:3907848kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB [ 111.966506][ T6921] lowmem_reserve[]: 0 0 0 0 0 [ 112.026748][ T6921] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 112.112587][ T6921] Node 0 DMA32: 4*4kB (ME) 48*8kB (UME) 243*16kB (UME) 127*32kB (UME) 70*64kB (UME) 20*128kB (UME) 9*256kB (M) 7*512kB (UM) 4*1024kB (UM) 3*2048kB (M) 347*4096kB (UM) = 1452832kB [ 112.206460][ T6921] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 112.243551][ T6921] Node 1 Normal: 208*4kB (U) 57*8kB (UME) 54*16kB (UME) 229*32kB (UME) 92*64kB (UME) 34*128kB (UME) 10*256kB (UM) 9*512kB (UM) 4*1024kB (UME) 3*2048kB (UE) 945*4096kB (M) = 3907848kB [ 112.301365][ T6921] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 112.453869][ T6921] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 112.575832][ T6921] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 112.638556][ T6921] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 112.671096][ T6921] 40867 total pagecache pages [ 112.695909][ T6921] 0 pages in swap cache [ 112.730038][ T6921] Free swap = 124996kB [ 112.755846][ T6921] Total swap = 124996kB [ 112.769076][ T6921] 2097051 pages RAM [ 112.772973][ T6921] 0 pages HighMem/MovableOnly [ 112.797858][ T6921] 427011 pages reserved [ 112.802447][ T6921] 0 pages cma reserved [ 112.848470][ T6989] can: request_module (can-proto-5) failed. [ 113.079394][ T6994] syz_tun: entered promiscuous mode [ 113.120296][ T6994] macsec1: entered allmulticast mode [ 113.125707][ T6994] syz_tun: entered allmulticast mode [ 113.287637][ T6994] syz_tun: left allmulticast mode [ 113.294016][ T6994] syz_tun: left promiscuous mode [ 113.835028][ T7037] ksmbd: Unknown IPC event: 1, ignore. [ 114.058251][ C1] Dead loop on virtual device ipvlan1, fix it urgently! [ 114.217820][ T7043] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 114.245024][ T7054] netlink: 20 bytes leftover after parsing attributes in process `syz.2.293'. [ 114.272682][ T7048] x_tables: duplicate underflow at hook 2 [ 114.515328][ T7067] netlink: 8 bytes leftover after parsing attributes in process `syz.4.296'. [ 114.622244][ T7073] netlink: 8 bytes leftover after parsing attributes in process `syz.1.295'. [ 114.643203][ T7073] netlink: 12 bytes leftover after parsing attributes in process `syz.1.295'. [ 114.848301][ T7076] netlink: 64 bytes leftover after parsing attributes in process `syz.3.299'. [ 115.105193][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 115.158077][ T7095] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.302'. [ 115.195683][ T7097] netlink: 212408 bytes leftover after parsing attributes in process `syz.0.302'. [ 115.226512][ T7095] netlink: zone id is out of range [ 115.253313][ T7097] netlink: zone id is out of range [ 115.253430][ T7108] netlink: 260 bytes leftover after parsing attributes in process `syz.1.305'. [ 115.272501][ T7095] netlink: zone id is out of range [ 115.289337][ T7097] netlink: zone id is out of range [ 115.309366][ T7095] netlink: zone id is out of range [ 115.326293][ T7108] netlink: 260 bytes leftover after parsing attributes in process `syz.1.305'. [ 115.327975][ T7097] netlink: zone id is out of range [ 115.373074][ T7095] netlink: zone id is out of range [ 115.495559][ T7118] sctp: [Deprecated]: syz.4.306 (pid 7118) Use of struct sctp_assoc_value in delayed_ack socket option. [ 115.495559][ T7118] Use struct sctp_sack_info instead [ 115.976803][ T7138] veth0_virt_wifi: entered promiscuous mode [ 116.026146][ T7138] veth0_virt_wifi: left promiscuous mode [ 116.521939][ T7160] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 116.636364][ T7160] netdevsim netdevsim3 netdevsim0: left promiscuous mode [ 117.317095][ T7195] netlink: 36 bytes leftover after parsing attributes in process `syz.4.321'. [ 117.638451][ T7207] netlink: 'syz.3.324': attribute type 11 has an invalid length. [ 118.480384][ T7221] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 118.864164][ T7221] syzkaller1: entered promiscuous mode [ 118.870170][ T7221] syzkaller1: entered allmulticast mode [ 119.299471][ T7248] __nla_validate_parse: 4 callbacks suppressed [ 119.299496][ T7248] netlink: 8 bytes leftover after parsing attributes in process `syz.2.334'. [ 119.452576][ T7254] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.476330][ T7256] warning: `syz.1.338' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 119.592900][ T7259] netlink: 'syz.2.339': attribute type 1 has an invalid length. [ 119.627508][ T7259] netlink: 'syz.2.339': attribute type 2 has an invalid length. [ 119.673127][ T7253] netlink: 'syz.2.339': attribute type 1 has an invalid length. [ 119.684792][ T7253] netlink: 'syz.2.339': attribute type 2 has an invalid length. [ 119.700161][ T7253] netlink: 112 bytes leftover after parsing attributes in process `syz.2.339'. [ 120.085551][ T7284] netlink: 44 bytes leftover after parsing attributes in process `syz.1.346'. [ 120.114025][ T7284] --map-set only usable from mangle table [ 120.192757][ T7284] sctp: [Deprecated]: syz.1.346 (pid 7284) Use of struct sctp_assoc_value in delayed_ack socket option. [ 120.192757][ T7284] Use struct sctp_sack_info instead [ 120.484406][ T7304] netlink: 20 bytes leftover after parsing attributes in process `syz.0.353'. [ 120.510308][ T7305] netlink: 4 bytes leftover after parsing attributes in process `syz.0.353'. [ 120.519251][ T7306] netlink: 8 bytes leftover after parsing attributes in process `syz.4.354'. [ 120.544176][ T7309] netlink: 4 bytes leftover after parsing attributes in process `syz.0.353'. [ 120.554409][ T7304] netlink: 20 bytes leftover after parsing attributes in process `syz.0.353'. [ 120.571654][ T7304] netlink: 20 bytes leftover after parsing attributes in process `syz.0.353'. [ 120.598511][ T7304] netlink: 20 bytes leftover after parsing attributes in process `syz.0.353'. [ 120.608966][ T7309] syz_tun: left allmulticast mode [ 120.628759][ T7309] syz_tun: left promiscuous mode [ 120.642812][ T7309] bridge0: port 3(syz_tun) entered disabled state [ 120.654066][ T7309] bridge_slave_1: left allmulticast mode [ 120.662092][ T7309] bridge_slave_1: left promiscuous mode [ 120.675272][ T7309] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.685415][ T7309] bridge_slave_0: left allmulticast mode [ 120.692076][ T7309] bridge_slave_0: left promiscuous mode [ 120.706337][ T7309] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.879199][ T7319] netlink: 'syz.3.357': attribute type 21 has an invalid length. [ 121.003647][ T7315] net_ratelimit: 5 callbacks suppressed [ 121.003660][ T7315] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 122.026733][ T7393] ebt_limit: overflow, try lower: 0/0 [ 123.761872][ T7473] team0 (unregistering): Port device team_slave_0 removed [ 123.836059][ T7473] team0 (unregistering): Port device team_slave_1 removed [ 123.919671][ T7478] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 123.929616][ T7478] macsec2: entered allmulticast mode [ 123.946357][ T7478] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 123.967230][ T7478] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 123.983401][ T7478] netdevsim netdevsim2 netdevsim0: left promiscuous mode [ 124.068694][ T5142] Bluetooth: hci4: command 0x0405 tx timeout [ 124.482726][ T7497] skbuff: bad partial csum: csum=65506/2 headroom=160 headlen=65526 [ 124.808023][ T7508] __nla_validate_parse: 128 callbacks suppressed [ 124.808045][ T7508] netlink: 8 bytes leftover after parsing attributes in process `syz.2.391'. [ 124.955145][ T7516] netlink: set zone limit has 8 unknown bytes [ 125.071217][ T7524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.396'. [ 125.090039][ T7524] bond0: option coupled_control: mode dependency failed, not supported in mode balance-rr(0) [ 125.191179][ T7531] netlink: 176 bytes leftover after parsing attributes in process `syz.0.398'. [ 125.392573][ T7544] netlink: 64 bytes leftover after parsing attributes in process `syz.2.400'. [ 125.495512][ T7549] netlink: 'syz.3.403': attribute type 49 has an invalid length. [ 125.524852][ T7547] team0 (unregistering): Port device team_slave_0 removed [ 125.556334][ T7547] team0 (unregistering): Port device team_slave_1 removed [ 125.744802][ T7561] netlink: 8 bytes leftover after parsing attributes in process `syz.3.406'. [ 125.804801][ T7559] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 125.851290][ T7559] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 126.107458][ T7582] netlink: 24 bytes leftover after parsing attributes in process `syz.0.412'. [ 126.879369][ T7615] netlink: 20 bytes leftover after parsing attributes in process `syz.3.421'. [ 126.899434][ T7615] tipc: Started in network mode [ 126.904483][ T7615] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 126.946698][ T7615] tipc: Enabled bearer , priority 10 [ 127.346219][ T7648] netlink: 1 bytes leftover after parsing attributes in process `syz.3.432'. [ 127.357665][ T7650] netlink: 8 bytes leftover after parsing attributes in process `syz.0.431'. [ 127.411746][ T7648] netlink: 20 bytes leftover after parsing attributes in process `syz.3.432'. [ 127.731445][ T7673] xt_nfacct: accounting object `syz1' does not exists [ 127.914046][ T7681] tipc: Failed to remove unknown binding: 66,1,1/0:1912747256/1912747258 [ 127.975746][ T7685] netlink: 'syz.4.441': attribute type 21 has an invalid length. [ 128.050037][ T46] tipc: Node number set to 15444650 [ 128.393763][ T7697] TCP: tcp_parse_options: Illegal window scaling value 254 > 14 received [ 128.588334][ T7681] tipc: Failed to remove unknown binding: 66,1,1/0:1912747256/1912747258 [ 128.626511][ T7681] tipc: Failed to remove unknown binding: 66,1,1/0:1912747256/1912747258 [ 129.127569][ T7745] netlink: 'syz.4.452': attribute type 1 has an invalid length. [ 129.916187][ T7779] openvswitch: netlink: Missing key (keys=40, expected=100) [ 129.985606][ T5844] Bluetooth: hci0: command 0x0401 tx timeout [ 130.059509][ T7787] syzkaller1: entered promiscuous mode [ 130.084300][ T7787] syzkaller1: entered allmulticast mode [ 130.194768][ T7788] __nla_validate_parse: 6 callbacks suppressed [ 130.194796][ T7788] netlink: 8 bytes leftover after parsing attributes in process `syz.1.465'. [ 130.220402][ T7788] netlink: 24 bytes leftover after parsing attributes in process `syz.1.465'. [ 130.337894][ T7798] xt_CT: No such helper "snmp" [ 130.403787][ T7803] netlink: 12 bytes leftover after parsing attributes in process `syz.2.470'. [ 130.643322][ T7816] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.474'. [ 130.666254][ T7816] netlink: zone id is out of range [ 130.671947][ T7816] netlink: zone id is out of range [ 130.691177][ T7816] netlink: get zone limit has 8 unknown bytes [ 130.713717][ T7816] netlink: 8 bytes leftover after parsing attributes in process `syz.4.474'. [ 130.964168][ T7832] x_tables: duplicate underflow at hook 1 [ 132.001832][ T7864] vlan2: entered allmulticast mode [ 132.007054][ T7864] macvlan1: entered allmulticast mode [ 132.016007][ T7866] netlink: 12 bytes leftover after parsing attributes in process `syz.2.490'. [ 132.019759][ T7864] veth1_vlan: entered allmulticast mode [ 132.067974][ T7864] macvlan1: left allmulticast mode [ 132.076299][ T7864] veth1_vlan: left allmulticast mode [ 132.213580][ T7866] 8021q: adding VLAN 0 to HW filter on device bond2 [ 132.398333][ T7889] netlink: 100 bytes leftover after parsing attributes in process `syz.4.496'. [ 132.547464][ T7896] netlink: 84 bytes leftover after parsing attributes in process `syz.2.498'. [ 132.569067][ T7896] netem: invalid attributes len -16 [ 132.580139][ T7896] netem: change failed [ 132.627422][ T7902] netlink: 44 bytes leftover after parsing attributes in process `syz.3.500'. [ 132.768508][ T7910] netlink: 1152 bytes leftover after parsing attributes in process `syz.0.502'. [ 132.795728][ T7910] openvswitch: netlink: ufid size 109 bytes exceeds the range (1, 16) [ 132.855604][ T7910] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 132.892367][ T7910] netlink: 'syz.0.502': attribute type 5 has an invalid length. [ 133.159409][ T7921] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 133.178213][ T7932] netlink: 'syz.1.508': attribute type 1 has an invalid length. [ 133.187473][ T7921] syzkaller1: Linktype set failed because interface is up [ 133.187772][ T118] syzkaller1: tun_net_xmit 90 [ 133.222550][ T5896] syzkaller1: tun_net_xmit 86 [ 133.232539][ T7932] netlink: 'syz.1.508': attribute type 1 has an invalid length. [ 133.349178][ T7935] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 133.356292][ T46] IPVS: starting estimator thread 0... [ 133.427929][ T7941] pim6reg1: entered promiscuous mode [ 133.436336][ T7941] pim6reg1: entered allmulticast mode [ 133.478390][ T7939] IPVS: using max 23 ests per chain, 55200 per kthread [ 134.252655][ T7371] tipc: Subscription rejected, illegal request [ 134.814807][ T7988] macsec0: entered promiscuous mode [ 134.826011][ T7988] macsec0: entered allmulticast mode [ 134.835413][ T7988] veth1_macvtap: entered allmulticast mode [ 135.184520][ T7988] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 135.206806][ T7988] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 135.230666][ T8010] netlink: 'syz.0.527': attribute type 1 has an invalid length. [ 135.238801][ T8010] __nla_validate_parse: 5 callbacks suppressed [ 135.238822][ T8010] netlink: 224 bytes leftover after parsing attributes in process `syz.0.527'. [ 135.420690][ T7988] veth1_macvtap: left allmulticast mode [ 135.462791][ T7988] tipc: Resetting bearer [ 135.473888][ T7988] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.488240][ T7988] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.497205][ T7988] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.947984][ T8027] netlink: 'syz.4.532': attribute type 1 has an invalid length. [ 136.002443][ T8027] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 136.086504][ T8030] syzkaller0: entered promiscuous mode [ 136.119605][ T8039] netlink: 'syz.0.534': attribute type 16 has an invalid length. [ 136.161246][ T8030] syzkaller0: entered allmulticast mode [ 136.196348][ T8044] x_tables: unsorted underflow at hook 3 [ 136.199103][ T8036] netlink: 176 bytes leftover after parsing attributes in process `syz.0.534'. [ 136.213061][ T8037] netlink: 176 bytes leftover after parsing attributes in process `syz.0.534'. [ 136.230576][ T8037] netlink: 180 bytes leftover after parsing attributes in process `syz.0.534'. [ 136.243933][ T8044] netlink: 'syz.2.536': attribute type 29 has an invalid length. [ 136.253733][ T8044] netlink: 4 bytes leftover after parsing attributes in process `syz.2.536'. [ 136.269158][ T8036] netlink: 180 bytes leftover after parsing attributes in process `syz.0.534'. [ 136.290069][ T8038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.533'. [ 136.345032][ T8052] netlink: 80 bytes leftover after parsing attributes in process `syz.2.538'. [ 139.023458][ T8089] sctp: [Deprecated]: syz.4.549 (pid 8089) Use of struct sctp_assoc_value in delayed_ack socket option. [ 139.023458][ T8089] Use struct sctp_sack_info instead [ 139.040443][ T8090] sctp: [Deprecated]: syz.4.549 (pid 8090) Use of struct sctp_assoc_value in delayed_ack socket option. [ 139.040443][ T8090] Use struct sctp_sack_info instead [ 139.101970][ T8093] sctp: [Deprecated]: syz.0.550 (pid 8093) Use of int in maxseg socket option. [ 139.101970][ T8093] Use struct sctp_assoc_value instead [ 139.127342][ T8093] netlink: 16 bytes leftover after parsing attributes in process `syz.0.550'. [ 139.330063][ T8106] pim6reg: entered allmulticast mode [ 139.854732][ T8089] Bluetooth: hci0: Opcode 0x080f failed: -4 [ 140.016315][ T8148] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 140.023660][ T8148] IPv6: NLM_F_CREATE should be set when creating new route [ 140.104308][ T8148] netlink: 'syz.4.564': attribute type 29 has an invalid length. [ 141.097517][ T5844] Bluetooth: hci0: command 0x0401 tx timeout [ 155.261272][ T8162] netlink: 8 bytes leftover after parsing attributes in process `syz.0.568'. [ 155.522687][ T8175] netlink: 4 bytes leftover after parsing attributes in process `syz.0.576'. [ 155.539926][ T8177] netlink: 12 bytes leftover after parsing attributes in process `syz.2.574'. [ 155.573517][ T8175] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 155.598464][ T8177] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 155.788890][ T8191] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 155.957457][ T8206] netlink: 24 bytes leftover after parsing attributes in process `syz.1.579'. [ 155.977537][ T8206] netlink: 'syz.1.579': attribute type 2 has an invalid length. [ 157.699677][ T8256] openvswitch: netlink: nsh attr 9472 is out of range max 3 [ 157.830164][ T8261] macsec1: entered allmulticast mode [ 157.893140][ T8262] netlink: 8 bytes leftover after parsing attributes in process `syz.4.596'. [ 158.602606][ T8276] netlink: 'syz.1.600': attribute type 1 has an invalid length. [ 158.679703][ T8288] netlink: 8 bytes leftover after parsing attributes in process `syz.3.601'. [ 158.779756][ T8295] netlink: 12 bytes leftover after parsing attributes in process `syz.0.605'. [ 158.941318][ T8301] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 159.068993][ T8312] sch_tbf: burst 3631 is lower than device lo mtu (65550) ! [ 159.070742][ T5844] Bluetooth: hci4: link tx timeout [ 159.083057][ T5844] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 159.305048][ T8320] vlan2: entered allmulticast mode [ 159.612689][ T8336] netlink: 4 bytes leftover after parsing attributes in process `syz.4.614'. [ 159.917557][ T8354] x_tables: ip6_tables: TPROXY target: used from hooks FORWARD, but only usable from PREROUTING [ 160.076919][ T8359] netlink: 8 bytes leftover after parsing attributes in process `syz.1.620'. [ 160.089287][ T8354] x_tables: ip6_tables: rpfilter.0 match: invalid size 8 (kernel) != (user) 48 [ 160.296144][ T8368] netdevsim netdevsim1 »»»»»»: renamed from netdevsim0 (while UP) [ 160.765612][ T8383] netlink: 12 bytes leftover after parsing attributes in process `syz.3.626'. [ 160.823425][ T8389] netlink: 'syz.1.628': attribute type 1 has an invalid length. [ 160.842485][ T8383] 8021q: adding VLAN 0 to HW filter on device bond2 [ 160.851405][ T8390] pim6reg: left allmulticast mode [ 160.889006][ T8393] netlink: 3 bytes leftover after parsing attributes in process `syz.1.628'. [ 161.003444][ T8389] bond1: entered promiscuous mode [ 161.039278][ T8389] 8021q: adding VLAN 0 to HW filter on device bond1 [ 161.098770][ T5142] Bluetooth: hci4: command 0x0405 tx timeout [ 161.173943][ T8393] batadv1: entered promiscuous mode [ 161.220631][ T8393] batadv1: entered allmulticast mode [ 161.250878][ T8393] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 161.305419][ T8393] bond1: (slave batadv1): making interface the new active one [ 161.358748][ T8393] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 161.411928][ T8412] netlink: 'syz.2.633': attribute type 4 has an invalid length. [ 161.439824][ T8412] netlink: 'syz.2.633': attribute type 4 has an invalid length. [ 161.626011][ T8419] netlink: 8 bytes leftover after parsing attributes in process `syz.0.635'. [ 161.708645][ T8424] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 161.710814][ T8425] ICMPv6: Received fragmented ndisc packet. Carefully consider disabling suppress_frag_ndisc. [ 161.796265][ T8419] netlink: 20 bytes leftover after parsing attributes in process `syz.0.635'. [ 161.919572][ T8429] netlink: 156 bytes leftover after parsing attributes in process `syz.4.638'. [ 162.043812][ T8445] netlink: 4 bytes leftover after parsing attributes in process `syz.0.641'. [ 162.066096][ T8436] netlink: 20 bytes leftover after parsing attributes in process `syz.4.638'. [ 162.198138][ T8449] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 162.245225][ T8450] netlink: 12 bytes leftover after parsing attributes in process `syz.1.642'. [ 162.288727][ T8452] dccp_v4_rcv: dropped packet with invalid checksum [ 162.478658][ T8462] netlink: 'syz.0.647': attribute type 1 has an invalid length. [ 162.513347][ T8463] IPVS: set_ctl: invalid protocol: 51 172.20.20.187:20003 [ 162.735359][ T8468] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 162.762787][ T8468] netlink: 8 bytes leftover after parsing attributes in process `syz.0.649'. [ 162.836908][ T8475] netlink: 'syz.2.652': attribute type 6 has an invalid length. [ 163.038034][ T8450] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 163.381439][ T8501] batadv_slave_1: entered promiscuous mode [ 163.411748][ T8501] : renamed from bond0 (while UP) [ 163.432894][ T8504] netlink: 8 bytes leftover after parsing attributes in process `syz.3.661'. [ 163.456517][ T8500] batadv_slave_1: left promiscuous mode [ 164.297840][ T5844] Bluetooth: hci0: command 0x0401 tx timeout [ 164.417181][ T8545] vlan3: entered promiscuous mode [ 164.424781][ T8545] team0: Device vlan3 is already an upper device of the team interface [ 164.951055][ T8568] PF_CAN: dropped non conform CAN FD skbuff: dev type 65534, len 40 [ 165.120251][ T8574] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 165.792415][ T8607] __nla_validate_parse: 9 callbacks suppressed [ 165.792438][ T8607] netlink: 76 bytes leftover after parsing attributes in process `syz.2.683'. [ 165.923435][ T8607] netlink: 48 bytes leftover after parsing attributes in process `syz.2.683'. [ 165.950772][ T8597] netlink: 20 bytes leftover after parsing attributes in process `syz.2.683'. [ 166.294901][ T8628] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.690'. [ 166.324952][ T8628] openvswitch: netlink: Missing key (keys=40, expected=80) [ 166.408845][ T8629] syzkaller0: entered promiscuous mode [ 166.429875][ T8629] syzkaller0: entered allmulticast mode [ 166.534971][ T8633] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.555892][ T8638] netlink: 72 bytes leftover after parsing attributes in process `syz.4.693'. [ 166.640863][ T8639] netlink: 4 bytes leftover after parsing attributes in process `syz.1.691'. [ 166.678591][ T8648] netlink: 8 bytes leftover after parsing attributes in process `syz.0.695'. [ 166.710152][ T8633] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.731289][ T8652] netlink: 4 bytes leftover after parsing attributes in process `syz.0.695'. [ 166.918778][ T8633] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 167.132007][ T8633] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 169.554773][ T8633] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.626567][ T8633] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.648127][ T8633] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.664647][ T8633] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 169.857889][ T8687] netlink: 64 bytes leftover after parsing attributes in process `syz.3.708'. [ 169.919569][ T8687] netlink: 28 bytes leftover after parsing attributes in process `syz.3.708'. [ 170.129482][ T8700] syz.2.709 uses old SIOCAX25GETINFO [ 170.837758][ T8725] 8021q: adding VLAN 0 to HW filter on device bond2 [ 170.848459][ T8725] __nla_validate_parse: 6 callbacks suppressed [ 170.848483][ T8725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.717'. [ 170.865620][ T8725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.717'. [ 170.876827][ T8725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.717'. [ 170.888479][ T8725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.717'. [ 170.898954][ T8725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.717'. [ 170.909013][ T8725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.717'. [ 170.920004][ T8725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.717'. [ 170.930096][ T8725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.717'. [ 170.941812][ T8725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.717'. [ 170.953019][ T8725] netlink: 12 bytes leftover after parsing attributes in process `syz.1.717'. [ 170.962587][ T8730] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 171.718859][ T8749] syzkaller0: entered promiscuous mode [ 171.738763][ T8749] syzkaller0: entered allmulticast mode [ 172.114226][ T8757] veth0_vlan (unregistering): left allmulticast mode [ 174.466053][ T8799] x_tables: ip_tables: udp match: only valid for protocol 17 [ 174.891231][ T8822] IPVS: sync thread started: state = BACKUP, mcast_ifn = hsr0, syncid = 2, id = 0 [ 175.220075][ T8833] bridge_slave_0: left allmulticast mode [ 175.225815][ T8833] bridge_slave_0: left promiscuous mode [ 175.306808][ T8833] bridge0: port 1(bridge_slave_0) entered disabled state [ 175.364034][ T8833] bridge_slave_1: left allmulticast mode [ 175.382939][ T8833] bridge_slave_1: left promiscuous mode [ 175.399639][ T8833] bridge0: port 2(bridge_slave_1) entered disabled state [ 175.485386][ T8833] bond0: (slave bond_slave_0): Releasing backup interface [ 175.531404][ T8833] bond0: (slave bond_slave_1): Releasing backup interface [ 175.570039][ T8833] team_slave_0: left promiscuous mode [ 175.652308][ T8833] team0: Port device team_slave_0 removed [ 175.667659][ T8833] team_slave_1: left promiscuous mode [ 175.698606][ T8833] team0: Port device team_slave_1 removed [ 175.725600][ T8833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 175.742475][ T8833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 176.054741][ T8851] A link change request failed with some changes committed already. Interface bond0 may have been left with an inconsistent configuration, please check. [ 176.525086][ T8875] vlan2: entered promiscuous mode [ 176.612210][ T8876] vlan2: entered promiscuous mode [ 176.896085][ T8890] bridge0: entered promiscuous mode [ 176.965335][ T8879] bridge0: left promiscuous mode [ 176.968633][ T8896] __nla_validate_parse: 32 callbacks suppressed [ 176.968657][ T8896] netlink: 44 bytes leftover after parsing attributes in process `syz.0.763'. [ 177.166183][ T8896] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 177.231289][ T8905] netlink: 16 bytes leftover after parsing attributes in process `syz.3.765'. [ 177.285878][ T8909] netlink: 8 bytes leftover after parsing attributes in process `syz.4.767'. [ 177.349235][ T8909] tls_set_device_offload: netdev not found [ 177.432560][ T8919] netlink: 8 bytes leftover after parsing attributes in process `syz.4.767'. [ 177.472577][ T8917] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 177.525060][ T8918] netlink: 72 bytes leftover after parsing attributes in process `syz.2.769'. [ 177.557955][ T8918] netlink: 92 bytes leftover after parsing attributes in process `syz.2.769'. [ 177.577988][ T8918] netlink: 92 bytes leftover after parsing attributes in process `syz.2.769'. [ 177.625475][ T8924] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 177.672769][ T8924] bridge0: entered promiscuous mode [ 177.686804][ T8924] bridge0: entered allmulticast mode [ 177.714455][ T5985] IPVS: starting estimator thread 0... [ 177.837028][ T8931] IPVS: using max 19 ests per chain, 45600 per kthread [ 177.956088][ T8938] netlink: 8 bytes leftover after parsing attributes in process `syz.3.776'. [ 177.989190][ T8946] netlink: 44 bytes leftover after parsing attributes in process `syz.1.775'. [ 178.001571][ T8942] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 178.074200][ T8946] netlink: 'syz.1.775': attribute type 1 has an invalid length. [ 178.089035][ T8946] netlink: 56 bytes leftover after parsing attributes in process `syz.1.775'. [ 178.178364][ T8959] veth1_virt_wifi: entered promiscuous mode [ 178.681089][ T8974] bond_slave_0: entered promiscuous mode [ 178.687470][ T8974] bond_slave_1: entered promiscuous mode [ 178.719102][ T8974] vlan2: entered promiscuous mode [ 178.724240][ T8974] bond0: entered promiscuous mode [ 178.753545][ T8974] vlan2: entered allmulticast mode [ 178.769034][ T8974] bond0: entered allmulticast mode [ 178.774627][ T8974] bond_slave_0: entered allmulticast mode [ 178.792890][ T8974] bond_slave_1: entered allmulticast mode [ 178.908663][ T8974] bond0: left allmulticast mode [ 178.914274][ T8974] bond_slave_0: left allmulticast mode [ 178.921136][ T8974] bond_slave_1: left allmulticast mode [ 178.931363][ T8974] bond0: left promiscuous mode [ 178.945976][ T8974] bond_slave_0: left promiscuous mode [ 178.951665][ T8974] bond_slave_1: left promiscuous mode [ 179.484683][ T9003] openvswitch: netlink: EtherType 0 is less than min 600 [ 179.621398][ T9023] IPVS: Error connecting to the multicast addr [ 179.706413][ T9021] ebtables: ebtables: counters copy to user failed while replacing table [ 180.169170][ T9028] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 180.191529][ T9028] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 180.295147][ T9028] netdevsim netdevsim1 »»»»»»: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.305188][ T9028] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.316381][ T9028] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.325896][ T9028] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 180.562661][ T9058] nicvf0: tun_chr_ioctl cmd 1074025676 [ 180.587843][ T9058] nicvf0: owner set to 0 [ 180.620478][ T9065] bridge0: port 3(hsr0) entered blocking state [ 180.649845][ T9065] bridge0: port 3(hsr0) entered disabled state [ 180.656378][ T9065] hsr0: entered allmulticast mode [ 180.686914][ T9065] hsr_slave_0: entered allmulticast mode [ 180.695481][ T9065] hsr_slave_1: entered allmulticast mode [ 180.712066][ T9065] hsr0: entered promiscuous mode [ 180.724136][ T9065] bridge0: port 3(hsr0) entered blocking state [ 180.730532][ T9065] bridge0: port 3(hsr0) entered forwarding state [ 180.748783][ T9064] syzkaller1: entered promiscuous mode [ 180.754667][ T9064] syzkaller1: entered allmulticast mode [ 181.076474][ T9095] tipc: Can't bind to reserved service type 1 [ 181.125613][ T9097] netlink: 'syz.1.814': attribute type 4 has an invalid length. [ 181.279547][ T9102] netlink: 'syz.3.818': attribute type 4 has an invalid length. [ 181.985170][ T9139] __nla_validate_parse: 16 callbacks suppressed [ 181.985204][ T9139] netlink: 8 bytes leftover after parsing attributes in process `syz.2.828'. [ 182.223414][ T9150] syzkaller1: entered promiscuous mode [ 182.232509][ T9164] set match dimension is over the limit! [ 182.239195][ T9150] syzkaller1: entered allmulticast mode [ 182.413693][ T9164] pim6reg: entered allmulticast mode [ 183.003650][ T9202] netlink: 8 bytes leftover after parsing attributes in process `syz.3.846'. [ 183.096192][ T9209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.849'. [ 183.124337][ T9209] netlink: 8 bytes leftover after parsing attributes in process `syz.0.849'. [ 183.146665][ T9209] netlink: 4 bytes leftover after parsing attributes in process `syz.0.849'. [ 183.306898][ T9222] IPVS: rr: UDP 224.0.0.2:0 - no destination available [ 183.360920][ T9228] netlink: 48 bytes leftover after parsing attributes in process `syz.1.853'. [ 183.430273][ T9232] xt_ecn: cannot match TCP bits for non-tcp packets [ 183.481264][ T9237] netlink: 'syz.4.856': attribute type 11 has an invalid length. [ 183.846092][ T9248] netlink: 20 bytes leftover after parsing attributes in process `syz.4.861'. [ 183.996409][ T9252] syzkaller0: entered promiscuous mode [ 184.037582][ T9252] syzkaller0: entered allmulticast mode [ 184.305931][ T7015] wlan1: Trigger new scan to find an IBSS to join [ 185.611200][ T9296] netlink: 32 bytes leftover after parsing attributes in process `syz.0.874'. [ 187.257622][ T8621] wlan1: Trigger new scan to find an IBSS to join [ 188.251783][ T9301] netlink: 'syz.4.875': attribute type 10 has an invalid length. [ 188.269876][ T9301] syz_tun: entered promiscuous mode [ 188.320804][ T9301] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 188.591647][ T9320] netlink: 4 bytes leftover after parsing attributes in process `syz.2.882'. [ 189.005771][ T9339] syz.4.887[9339] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.005888][ T9339] syz.4.887[9339] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 189.019371][ T9339] syz.4.887[9339] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 190.201672][ T9384] netlink: 24 bytes leftover after parsing attributes in process `syz.2.896'. [ 190.258846][ T9384] tipc: Enabling of bearer <Þ|i³:æ0> rejected, media not registered [ 190.297995][ T7371] wlan1: Trigger new scan to find an IBSS to join [ 190.387576][ T9392] netlink: 'syz.0.900': attribute type 1 has an invalid length. [ 190.455593][ T9392] bond2: entered promiscuous mode [ 190.467773][ T9392] bond2: entered allmulticast mode [ 190.542595][ T9395] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 190.585193][ T9395] bond2: (slave batadv1): making interface the new active one [ 191.087508][ T9395] batadv1: entered promiscuous mode [ 191.093830][ T9395] batadv1: entered allmulticast mode [ 191.112872][ T9395] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 191.543359][ T5985] IPVS: starting estimator thread 0... [ 191.627822][ T7013] wlan1: Creating new IBSS network, BSSID 56:21:5a:b0:6d:cc [ 191.667282][ T9403] IPVS: using max 21 ests per chain, 50400 per kthread [ 192.451843][ T9411] syzkaller1: entered promiscuous mode [ 192.487442][ T9411] syzkaller1: entered allmulticast mode [ 192.520141][ T9413] bridge0: port 1(bridge_slave_0) entered learning state [ 192.528779][ T9414] netlink: 80 bytes leftover after parsing attributes in process `syz.0.904'. [ 192.580984][ T9411] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 194.192929][ T9435] syzkaller0: entered promiscuous mode [ 194.218602][ T9435] syzkaller0: entered allmulticast mode [ 199.384630][ T9474] netlink: 4 bytes leftover after parsing attributes in process `syz.2.921'. [ 199.441867][ T9474] IPv6: sit3: Disabled Multicast RS [ 199.709034][ T9481] netlink: 'syz.4.925': attribute type 10 has an invalid length. [ 199.780856][ T9481] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 199.905631][ T9481] netlink: 4 bytes leftover after parsing attributes in process `syz.4.925'. [ 201.078042][ T9509] netlink: 12 bytes leftover after parsing attributes in process `syz.4.931'. [ 201.141546][ T5849] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 201.152339][ T5849] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 201.160894][ T5849] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 201.170705][ T5849] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 201.179141][ T5849] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 201.187032][ T5849] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 201.399413][ T9518] netlink: 'syz.3.934': attribute type 1 has an invalid length. [ 201.455776][ T9512] netlink: 'syz.3.934': attribute type 1 has an invalid length. [ 201.465488][ T9512] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 201.473375][ T9512] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 201.845433][ T9523] netlink: 8 bytes leftover after parsing attributes in process `syz.3.937'. [ 201.901729][ T54] Bluetooth: hci0: command 0x0401 tx timeout [ 201.908373][ T5849] Bluetooth: hci2: command 0x0406 tx timeout [ 201.914426][ T5849] Bluetooth: hci1: command 0x0406 tx timeout [ 201.920562][ T5849] Bluetooth: hci3: command 0x0406 tx timeout [ 202.098369][ T9523] netlink: 4 bytes leftover after parsing attributes in process `syz.3.937'. [ 202.304188][ T9536] netlink: 64 bytes leftover after parsing attributes in process `syz.2.938'. [ 202.565449][ T9550] netlink: 4 bytes leftover after parsing attributes in process `syz.2.938'. [ 202.666304][ T9550] ipvlan2: entered promiscuous mode [ 203.107803][ T9490] chnl_net:caif_netlink_parms(): no params data found [ 203.257428][ T5844] Bluetooth: hci5: command tx timeout [ 203.628307][ T9576] openvswitch: netlink: Duplicate or invalid key (type 0). [ 203.635612][ T9576] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 203.695579][ T9576] xt_CONNSECMARK: invalid mode: 0 [ 203.718509][ T9569] netlink: 4 bytes leftover after parsing attributes in process `syz.0.946'. [ 204.144246][ T9490] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.209621][ T9490] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.277903][ T9490] bridge_slave_0: entered allmulticast mode [ 204.327840][ T9490] bridge_slave_0: entered promiscuous mode [ 204.359991][ T9490] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.411401][ T9490] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.446046][ T9490] bridge_slave_1: entered allmulticast mode [ 204.487772][ T9490] bridge_slave_1: entered promiscuous mode [ 204.516920][ T9604] netlink: 20 bytes leftover after parsing attributes in process `syz.0.952'. [ 204.606178][ T9604] netlink: 'syz.0.952': attribute type 1 has an invalid length. [ 204.666616][ T9608] netlink: 128 bytes leftover after parsing attributes in process `syz.0.952'. [ 204.730267][ T9490] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.829450][ T9490] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 205.100552][ T9620] netlink: 'syz.2.955': attribute type 12 has an invalid length. [ 205.117573][ T9490] team0: Port device team_slave_0 added [ 205.213532][ T9490] team0: Port device team_slave_1 added [ 205.338253][ T5844] Bluetooth: hci5: command tx timeout [ 205.362882][ T9617] netlink: 'syz.2.955': attribute type 5 has an invalid length. [ 205.462514][ T9627] sch_fq: defrate 0 ignored. [ 205.554742][ T9490] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.587187][ T9490] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.738587][ T9490] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.819751][ T9490] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.867569][ T9490] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.997534][ T9490] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 206.057919][ T9637] netlink: 260 bytes leftover after parsing attributes in process `syz.4.959'. [ 206.078847][ T9638] netlink: 'syz.2.960': attribute type 1 has an invalid length. [ 206.223632][ T9643] netlink: 260 bytes leftover after parsing attributes in process `syz.4.959'. [ 206.414202][ T9490] hsr_slave_0: entered promiscuous mode [ 206.456710][ T9490] hsr_slave_1: entered promiscuous mode [ 206.477838][ T9490] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 206.502715][ T9490] Cannot create hsr debugfs directory [ 206.546532][ T9648] bond4: (slave gretap1): making interface the new active one [ 206.582485][ T9648] bond4: (slave gretap1): Enslaving as an active interface with an up link [ 206.988570][ T9663] netlink: 96 bytes leftover after parsing attributes in process `syz.3.966'. [ 207.016374][ T9663] netlink: 12 bytes leftover after parsing attributes in process `syz.3.966'. [ 207.070821][ T9663] netlink: 20 bytes leftover after parsing attributes in process `syz.3.966'. [ 207.223420][ T9672] veth1_macvtap: left promiscuous mode [ 207.237412][ T9672] macsec0: entered allmulticast mode [ 207.277166][ T9676] netlink: 32 bytes leftover after parsing attributes in process `syz.4.969'. [ 207.303644][ T9672] veth1_macvtap: entered promiscuous mode [ 207.310391][ T9672] veth1_macvtap: entered allmulticast mode [ 207.328206][ T9672] macsec0: left allmulticast mode [ 207.360387][ T9672] veth1_macvtap: left allmulticast mode [ 207.417496][ T5844] Bluetooth: hci5: command tx timeout [ 207.428107][ T9490] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 207.738030][ T9490] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 207.883308][ T9684] netlink: 20 bytes leftover after parsing attributes in process `syz.2.972'. [ 207.956551][ T9490] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 208.005931][ T9490] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 208.429747][ T9490] 8021q: adding VLAN 0 to HW filter on device bond0 [ 208.524022][ T9490] 8021q: adding VLAN 0 to HW filter on device team0 [ 208.582422][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.590780][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 208.691635][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.698869][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.358367][ T9715] netlink: 5 bytes leftover after parsing attributes in process `syz.2.979'. [ 209.497812][ T5844] Bluetooth: hci5: command tx timeout [ 209.736638][ T9701] xt_policy: output policy not valid in PREROUTING and INPUT [ 210.397580][ T9711] netlink: 'syz.4.980': attribute type 4 has an invalid length. [ 210.577993][ T9715] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 210.607382][ T9701] netlink: 'syz.3.976': attribute type 21 has an invalid length. [ 210.615545][ T9701] netlink: 128 bytes leftover after parsing attributes in process `syz.3.976'. [ 210.627919][ T9701] netlink: 'syz.3.976': attribute type 5 has an invalid length. [ 210.635634][ T9701] netlink: 'syz.3.976': attribute type 6 has an invalid length. [ 210.647923][ T9701] netlink: 3 bytes leftover after parsing attributes in process `syz.3.976'. [ 210.693046][ T9719] xt_CT: You must specify a L4 protocol and not use inversions on it [ 210.806691][ T9724] netlink: 16 bytes leftover after parsing attributes in process `syz.4.982'. [ 211.010533][ T9490] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.194518][ T9490] veth0_vlan: entered promiscuous mode [ 212.291431][ T9490] veth1_vlan: entered promiscuous mode [ 212.422651][ T9769] netlink: 4 bytes leftover after parsing attributes in process `syz.2.994'. [ 212.468820][ T9490] veth0_macvtap: entered promiscuous mode [ 212.477875][ T9773] netlink: 'syz.2.994': attribute type 16 has an invalid length. [ 212.515897][ T9773] netlink: 64138 bytes leftover after parsing attributes in process `syz.2.994'. [ 212.728642][ T9490] veth1_macvtap: entered promiscuous mode [ 212.856217][ T9490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 212.916672][ T9490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 212.970946][ T9490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 213.016090][ T9490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.079737][ T9490] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 213.157966][ T9490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.225941][ T9490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.277158][ T9490] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 213.324330][ T9490] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 213.367854][ T9490] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 213.460700][ T9490] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.500456][ T9490] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.554914][ T9490] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 213.615374][ T9490] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 214.197597][ T8621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.230635][ T8621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 214.343068][ T8621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 214.377536][ T8621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.360192][ T9830] syz_tun: left promiscuous mode [ 215.440529][ T9830] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 215.549438][ T9841] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1011'. [ 215.751780][ T9834] batadv_slave_1: entered promiscuous mode [ 216.057766][ T9839] batadv_slave_1: left promiscuous mode [ 216.741623][ T9858] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1014'. [ 216.965427][ T9866] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1016'. [ 217.099376][ T9856] delete_channel: no stack [ 217.290853][ T9870] netlink: 1 bytes leftover after parsing attributes in process `syz.0.1017'. [ 217.338271][ T9870] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 217.771758][ T9875] netlink: 'syz.4.1019': attribute type 4 has an invalid length. [ 218.076976][ T9891] team0: Port device ip6gretap1 added [ 218.529855][ T9904] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1025'. [ 218.948836][ T9916] netlink: 'syz.3.1027': attribute type 3 has an invalid length. [ 218.986280][ T9918] netlink: 'syz.2.1029': attribute type 6 has an invalid length. [ 219.008514][ T9916] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1027'. [ 219.036698][ T9918] netlink: 176 bytes leftover after parsing attributes in process `syz.2.1029'. [ 219.498559][ T9932] netlink: 'syz.4.1033': attribute type 29 has an invalid length. [ 219.689988][ T9931] netlink: 'syz.4.1033': attribute type 29 has an invalid length. [ 220.854966][ T9935] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.925931][ T9935] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 221.135341][ T9935] bond0 (unregistering): Released all slaves [ 221.670515][ T9970] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1047'. [ 221.696457][ T7013] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 221.707372][ T9971] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1046'. [ 221.773381][ T9973] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1048'. [ 221.837095][ T9975] netlink: 88 bytes leftover after parsing attributes in process `syz.0.1048'. [ 221.868284][ T9977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1047'. [ 221.903850][ T9975] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1048'. [ 222.000909][ T9975] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1048'. [ 222.018125][ T9968] syz.4.1046 (9968) used greatest stack depth: 18424 bytes left [ 222.070049][ T9975] netlink: 80 bytes leftover after parsing attributes in process `syz.0.1048'. [ 222.780791][ T9994] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1053'. [ 222.818112][ T9997] x_tables: duplicate underflow at hook 2 [ 222.900665][ T9992] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1053'. [ 222.969227][ T9992] netlink: 'syz.2.1053': attribute type 3 has an invalid length. [ 223.347383][ T5844] Bluetooth: hci5: command tx timeout [ 223.635409][T10014] tipc: Started in network mode [ 223.673826][T10014] tipc: Node identity 6, cluster identity 4711 [ 223.712675][T10014] tipc: Node number set to 6 [ 223.987097][T10017] 8021q: adding VLAN 0 to HW filter on device bond1 [ 224.068655][T10017] bond0: (slave bond1): Enslaving as an active interface with an up link [ 224.125767][T10023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1058'. [ 224.149805][T10023] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1058'. [ 224.542129][T10031] netlink: 'syz.5.1063': attribute type 39 has an invalid length. [ 225.145893][T10049] netlink: 'syz.4.1068': attribute type 9 has an invalid length. [ 225.878460][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 225.891848][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 225.902851][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 225.912641][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 225.921222][ T5841] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 225.928947][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 226.438383][T10078] team0: No ports can be present during mode change [ 226.829878][T10056] chnl_net:caif_netlink_parms(): no params data found [ 227.661001][T10110] Cannot find del_set index 3 as target [ 227.679009][T10056] bridge0: port 1(bridge_slave_0) entered blocking state [ 227.702006][T10056] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.740120][T10056] bridge_slave_0: entered allmulticast mode [ 227.779711][T10056] bridge_slave_0: entered promiscuous mode [ 227.816236][T10056] bridge0: port 2(bridge_slave_1) entered blocking state [ 227.867820][T10056] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.881764][T10116] __nla_validate_parse: 7 callbacks suppressed [ 227.881788][T10116] netlink: 36 bytes leftover after parsing attributes in process `syz.5.1084'. [ 227.928141][T10056] bridge_slave_1: entered allmulticast mode [ 227.943021][T10056] bridge_slave_1: entered promiscuous mode [ 228.058567][ T5841] Bluetooth: hci1: command tx timeout [ 228.099678][T10056] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 228.125961][T10056] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 228.230963][T10056] team0: Port device team_slave_0 added [ 228.273749][T10056] team0: Port device team_slave_1 added [ 228.365915][T10129] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1087'. [ 228.398293][T10116] netlink: 48 bytes leftover after parsing attributes in process `syz.5.1084'. [ 228.420137][T10129] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1087'. [ 228.465350][T10129] netlink: 'syz.2.1087': attribute type 5 has an invalid length. [ 228.503982][T10129] netlink: 43 bytes leftover after parsing attributes in process `syz.2.1087'. [ 228.564990][T10133] syzkaller1: entered promiscuous mode [ 228.585053][T10133] syzkaller1: entered allmulticast mode [ 228.614255][T10056] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 228.632281][T10056] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 228.837716][T10056] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 228.852633][T10056] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 228.909638][T10056] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 229.036757][T10056] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 229.420650][T10152] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1090'. [ 229.846957][T10056] hsr_slave_0: entered promiscuous mode [ 229.870261][T10056] hsr_slave_1: entered promiscuous mode [ 229.893635][T10056] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 229.926505][T10056] Cannot create hsr debugfs directory [ 230.137883][ T5841] Bluetooth: hci1: command tx timeout [ 230.659318][T10184] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1097'. [ 230.717625][T10184] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1097'. [ 230.963127][T10056] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.176094][T10056] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.449634][T10056] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.588236][T10200] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1105'. [ 231.622405][T10056] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 231.962298][ T5886] hid-generic 0005:10CF:1500.0001: item fetching failed at offset 0/1 [ 231.988555][T10207] netlink: 60 bytes leftover after parsing attributes in process `syz.4.1106'. [ 232.008234][ T5886] hid-generic 0005:10CF:1500.0001: probe with driver hid-generic failed with error -22 [ 232.138914][T10056] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 232.161643][T10056] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 232.182241][T10056] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 232.217638][ T5841] Bluetooth: hci1: command tx timeout [ 232.250247][T10056] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 232.672812][T10056] 8021q: adding VLAN 0 to HW filter on device bond0 [ 232.774741][T10056] 8021q: adding VLAN 0 to HW filter on device team0 [ 232.830184][ T7365] bridge0: port 1(bridge_slave_0) entered blocking state [ 232.837447][ T7365] bridge0: port 1(bridge_slave_0) entered forwarding state [ 233.215694][ T7015] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.222993][ T7015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 234.011256][T10056] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 234.195282][T10056] veth0_vlan: entered promiscuous mode [ 234.254321][T10056] veth1_vlan: entered promiscuous mode [ 234.300347][ T5841] Bluetooth: hci1: command tx timeout [ 234.486999][T10056] veth0_macvtap: entered promiscuous mode [ 234.530184][T10056] veth1_macvtap: entered promiscuous mode [ 234.567892][T10245] netlink: 92 bytes leftover after parsing attributes in process `syz.5.1116'. [ 234.585347][T10056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.627460][T10056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.667783][T10056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.691775][T10056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.727891][T10056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 234.761847][T10056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.789523][T10056] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 234.835006][T10056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.870050][T10056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.894410][T10056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.920653][T10056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.943850][T10056] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 234.972528][T10056] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 234.996763][T10056] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 235.028870][T10253] vlan0: entered promiscuous mode [ 235.056187][T10253] vlan0: entered allmulticast mode [ 235.081585][T10251] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1118'. [ 235.144250][T10056] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.168299][T10056] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.188322][T10056] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.206581][T10056] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 235.538547][ T2114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.546437][ T2114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 235.875833][T10259] syzkaller1: entered promiscuous mode [ 235.908245][T10259] syzkaller1: entered allmulticast mode [ 235.937523][ T8621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 235.950664][ T8621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.415846][T10273] tipc: Failed to obtain node identity [ 236.435289][T10273] tipc: Enabling of bearer rejected, failed to enable media [ 236.758162][ T7371] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 236.930262][ T7371] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.035930][T10279] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1123'. [ 237.110633][ T7371] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.365474][ T7371] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 237.406616][T10293] netlink: 'syz.4.1127': attribute type 4 has an invalid length. [ 237.670692][ T7371] bridge_slave_1: left allmulticast mode [ 237.707565][ T7371] bridge_slave_1: left promiscuous mode [ 237.720605][T10293] netlink: 'syz.4.1127': attribute type 4 has an invalid length. [ 237.749649][ T7371] bridge0: port 2(bridge_slave_1) entered disabled state [ 237.786042][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 237.796835][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 237.805989][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 237.923524][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 237.924422][ T7371] bridge_slave_0: left allmulticast mode [ 237.936436][ T7371] bridge_slave_0: left promiscuous mode [ 237.944433][ T7371] bridge0: port 1(bridge_slave_0) entered disabled state [ 238.019477][ T5844] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 238.027876][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 238.130990][T10315] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1133'. [ 238.136867][T10313] netlink: 'syz.3.1132': attribute type 1 has an invalid length. [ 238.936003][ T7371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 238.976172][ T7371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 239.003746][ T7371] bond0 (unregistering): Released all slaves [ 239.326792][T10328] openvswitch: netlink: Tunnel attr 54 out of range max 16 [ 239.450634][T10331] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1135'. [ 239.484456][T10324] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1136'. [ 239.648884][T10331] 8021q: adding VLAN 0 to HW filter on device bond3 [ 239.947297][T10342] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 239.962907][T10303] chnl_net:caif_netlink_parms(): no params data found [ 239.985853][T10341] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1138'. [ 240.015113][T10342] Cannot find add_set index 0 as target [ 240.056392][ T7371] hsr_slave_0: left promiscuous mode [ 240.097093][ T7371] hsr_slave_1: left promiscuous mode [ 240.139275][ T5844] Bluetooth: hci1: command tx timeout [ 240.201312][ T7371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 240.244929][ T7371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 240.318891][ T7371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 240.326595][ T7371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 240.961103][ T7371] veth1_macvtap: left promiscuous mode [ 240.993468][ T7371] veth0_macvtap: left promiscuous mode [ 241.016616][ T7371] veth1_vlan: left promiscuous mode [ 241.039110][ T7371] veth0_vlan: left promiscuous mode [ 242.151245][ T7371] team0 (unregistering): Port device team_slave_1 removed [ 242.226028][ T5844] Bluetooth: hci1: command tx timeout [ 242.241231][ T7371] team0 (unregistering): Port device team_slave_0 removed [ 243.408852][T10381] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1148'. [ 243.943344][T10303] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.964822][T10303] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.993899][T10303] bridge_slave_0: entered allmulticast mode [ 244.040144][T10303] bridge_slave_0: entered promiscuous mode [ 244.063042][T10303] bridge0: port 2(bridge_slave_1) entered blocking state [ 244.096172][T10303] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.124417][T10303] bridge_slave_1: entered allmulticast mode [ 244.142875][T10303] bridge_slave_1: entered promiscuous mode [ 244.173808][T10404] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1153'. [ 244.298090][ T5844] Bluetooth: hci1: command tx timeout [ 244.517136][T10404] netlink: 'syz.3.1153': attribute type 1 has an invalid length. [ 244.591521][T10303] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.621338][T10404] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1153'. [ 244.678010][T10303] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.830673][T10303] team0: Port device team_slave_0 added [ 244.893935][T10303] team0: Port device team_slave_1 added [ 245.078687][T10303] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 245.137047][T10423] netlink: 'syz.2.1157': attribute type 9 has an invalid length. [ 245.146028][T10303] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 245.246651][T10303] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 245.705053][T10441] openvswitch: netlink: IP tunnel attribute has 4 unknown bytes. [ 245.909508][T10303] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 245.916821][T10303] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.030574][T10303] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.046576][T10445] sctp: [Deprecated]: syz.3.1163 (pid 10445) Use of int in max_burst socket option deprecated. [ 246.046576][T10445] Use struct sctp_assoc_value instead [ 246.385909][ T5844] Bluetooth: hci1: command tx timeout [ 246.798608][T10303] hsr_slave_0: entered promiscuous mode [ 246.812664][T10457] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1165'. [ 246.838203][T10303] hsr_slave_1: entered promiscuous mode [ 246.880224][T10303] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 246.909991][T10303] Cannot create hsr debugfs directory [ 247.292004][T10465] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1166'. [ 247.758531][T10470] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1167'. [ 247.924550][T10472] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1169'. [ 247.985163][T10473] openvswitch: netlink: Unknown nsh attribute 0 [ 248.011429][T10473] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 248.447626][T10303] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 248.510281][T10303] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 248.561003][T10303] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 248.607879][T10303] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 248.989219][T10303] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.060584][T10303] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.157645][ T7015] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.164822][ T7015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.193457][ T7015] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.200704][ T7015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.591075][T10502] netlink: 'syz.4.1176': attribute type 15 has an invalid length. [ 249.629864][T10303] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 249.725334][T10303] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 249.901679][T10511] xt_CT: You must specify a L4 protocol and not use inversions on it [ 250.614103][T10303] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.708005][T10303] veth0_vlan: entered promiscuous mode [ 250.720394][T10303] veth1_vlan: entered promiscuous mode [ 250.744762][T10303] veth0_macvtap: entered promiscuous mode [ 250.754352][T10303] veth1_macvtap: entered promiscuous mode [ 250.773185][T10303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.784051][T10303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.794133][T10303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.805018][T10303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.815092][T10303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 250.825652][T10303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.837299][T10303] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 250.847412][T10303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.858610][T10303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.868567][T10303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.887580][T10303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.901709][T10303] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 250.912631][T10303] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 250.924212][T10303] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 250.934461][T10303] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.943612][T10303] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.952781][T10303] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 250.967337][T10303] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.091081][T10528] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1183'. [ 251.656253][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.674724][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 251.746173][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 251.775631][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.713844][ T7371] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 252.736393][T10564] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1190'. [ 253.241965][T10580] netlink: 'syz.4.1193': attribute type 1 has an invalid length. [ 253.524933][ T7371] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.831303][ T7371] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 253.993166][ T7371] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.212932][ T7371] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 254.548766][ T7371] bridge_slave_1: left allmulticast mode [ 254.564260][ T7371] bridge_slave_1: left promiscuous mode [ 254.589128][ T7371] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.615368][ T7371] bridge_slave_0: left allmulticast mode [ 254.632176][ T7371] bridge_slave_0: left promiscuous mode [ 254.654917][ T7371] bridge0: port 1(bridge_slave_0) entered disabled state [ 255.696012][T10594] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1198'. [ 255.757998][T10594] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1198'. [ 255.840648][T10595] netlink: 'syz.2.1198': attribute type 2 has an invalid length. [ 256.883390][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 256.895310][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 256.904913][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 257.070651][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 257.079320][ T5841] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 257.118511][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 257.938958][ T7371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 257.999464][ T7371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.031152][ T7371] bond0 (unregistering): Released all slaves [ 258.096979][T10595] : entered promiscuous mode [ 259.178813][ T5841] Bluetooth: hci1: command tx timeout [ 259.299918][T10633] openvswitch: netlink: ufid size 20 bytes exceeds the range (1, 16) [ 259.378356][T10633] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 259.540452][T10612] chnl_net:caif_netlink_parms(): no params data found [ 260.533832][T10648] netlink: 3 bytes leftover after parsing attributes in process `syz.3.1209'. [ 260.590019][T10649] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1209'. [ 260.901746][T10648] 0ªX¹¦À: renamed from caif0 [ 260.944590][T10656] netlink: 240 bytes leftover after parsing attributes in process `syz.2.1211'. [ 261.169875][T10659] netlink: 'syz.2.1212': attribute type 10 has an invalid length. [ 261.223695][T10659] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1212'. [ 261.233893][T10648] 0ªX¹¦À: entered allmulticast mode [ 261.240254][T10648] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 261.259071][ T5841] Bluetooth: hci1: command tx timeout [ 261.760504][T10612] bridge0: port 1(bridge_slave_0) entered blocking state [ 261.793571][T10612] bridge0: port 1(bridge_slave_0) entered disabled state [ 261.829963][T10612] bridge_slave_0: entered allmulticast mode [ 261.872593][T10612] bridge_slave_0: entered promiscuous mode [ 261.912863][T10612] bridge0: port 2(bridge_slave_1) entered blocking state [ 261.955097][T10612] bridge0: port 2(bridge_slave_1) entered disabled state [ 262.004586][T10612] bridge_slave_1: entered allmulticast mode [ 262.048880][T10612] bridge_slave_1: entered promiscuous mode [ 262.241278][T10612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 262.301326][T10659] bridge0: port 4(macvlan1) entered blocking state [ 262.309195][T10659] bridge0: port 4(macvlan1) entered disabled state [ 262.341096][T10659] macvlan1: entered allmulticast mode [ 262.366922][T10659] veth1_vlan: entered allmulticast mode [ 262.419463][T10659] macvlan1: entered promiscuous mode [ 262.443802][T10659] bridge0: port 4(macvlan1) entered blocking state [ 262.450574][T10659] bridge0: port 4(macvlan1) entered forwarding state [ 262.559849][T10612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 262.881424][T10677] netlink: 'syz.3.1215': attribute type 1 has an invalid length. [ 263.338599][ T5841] Bluetooth: hci1: command tx timeout [ 263.523459][T10678] bond4 (unregistering): Released all slaves [ 263.709460][T10685] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1216'. [ 263.746751][T10677] bond4: entered promiscuous mode [ 263.789385][T10677] 8021q: adding VLAN 0 to HW filter on device bond4 [ 263.953051][T10685] macvlan1: left allmulticast mode [ 263.968808][T10685] veth1_vlan: left allmulticast mode [ 263.975407][T10685] macvlan1: left promiscuous mode [ 263.985566][T10685] bridge0: port 4(macvlan1) entered disabled state [ 263.996043][T10685] hsr0: left allmulticast mode [ 264.015154][T10685] hsr_slave_0: left allmulticast mode [ 264.025298][T10685] hsr_slave_1: left allmulticast mode [ 264.103796][T10685] hsr0: left promiscuous mode [ 264.123182][T10685] bridge0: port 3(hsr0) entered disabled state [ 264.162624][T10685] bridge_slave_1: left allmulticast mode [ 264.184931][T10685] bridge_slave_1: left promiscuous mode [ 264.215150][T10685] bridge0: port 2(bridge_slave_1) entered disabled state [ 264.280151][T10685] bridge_slave_0: left allmulticast mode [ 264.310497][T10685] bridge_slave_0: left promiscuous mode [ 264.339352][T10685] bridge0: port 1(bridge_slave_0) entered disabled state [ 264.714930][T10612] team0: Port device team_slave_0 added [ 264.761222][T10612] team0: Port device team_slave_1 added [ 264.896536][T10612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.945795][T10612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.057963][T10612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 265.130352][T10612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 265.154166][T10612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 265.239252][T10701] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1220'. [ 265.249553][T10612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 265.418709][ T5841] Bluetooth: hci1: command tx timeout [ 265.599407][T10612] hsr_slave_0: entered promiscuous mode [ 265.636873][T10612] hsr_slave_1: entered promiscuous mode [ 265.655957][T10612] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 265.685422][T10612] Cannot create hsr debugfs directory [ 266.010433][T10712] netlink: 596 bytes leftover after parsing attributes in process `syz.4.1222'. [ 266.580471][T10718] tipc: Enabling of bearer rejected, failed to enable media [ 266.972056][T10727] netem: change failed [ 267.009681][T10726] x_tables: duplicate underflow at hook 1 [ 267.143639][T10726] xt_connbytes: Forcing CT accounting to be enabled [ 267.206651][T10731] x_tables: duplicate underflow at hook 2 [ 267.635668][T10612] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 267.718157][T10737] veth4: entered allmulticast mode [ 267.770610][T10612] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 267.828431][T10612] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 267.896165][T10612] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 268.316942][T10612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 268.341909][T10745] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 268.396090][T10748] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 268.443464][T10612] 8021q: adding VLAN 0 to HW filter on device team0 [ 268.521471][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 268.528725][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 268.608821][ T7365] bridge0: port 2(bridge_slave_1) entered blocking state [ 268.616156][ T7365] bridge0: port 2(bridge_slave_1) entered forwarding state [ 268.954908][T10757] bridge: RTM_NEWNEIGH with invalid ether address [ 269.946050][T10612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 270.160791][T10612] veth0_vlan: entered promiscuous mode [ 270.245546][T10612] veth1_vlan: entered promiscuous mode [ 270.324303][T10779] sctp: [Deprecated]: syz.5.1237 (pid 10779) Use of struct sctp_assoc_value in delayed_ack socket option. [ 270.324303][T10779] Use struct sctp_sack_info instead [ 270.415221][T10612] veth0_macvtap: entered promiscuous mode [ 270.460633][ T5841] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 270.469663][ T5841] Bluetooth: hci0: command 0x0401 tx timeout [ 270.490815][T10612] veth1_macvtap: entered promiscuous mode [ 270.535284][T10612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.838694][T10612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.850412][T10612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.886044][T10612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 270.938965][T10612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 270.992570][T10612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.034386][T10612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 271.101516][T10612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.186944][T10612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 271.286478][T10612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.336398][T10612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.403996][T10612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.446493][T10612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.484015][T10612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.532865][T10612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.589595][T10612] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 271.643945][T10612] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 271.678177][T10793] netlink: 52 bytes leftover after parsing attributes in process `syz.2.1241'. [ 271.720043][T10612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 271.773426][T10612] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.845144][T10612] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.912682][T10612] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 271.958274][T10612] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 272.463160][ T8621] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.524275][ T8621] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.682261][T10802] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1243'. [ 272.694174][ T7013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 272.727933][ T7013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 272.741004][T10802] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1243'. [ 272.924933][T10803] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1244'. [ 273.620609][T10815] netlink: 188 bytes leftover after parsing attributes in process `syz.3.1248'. [ 273.912752][T10817] xfrm0: entered allmulticast mode [ 273.930692][T10815] netlink: 'syz.3.1248': attribute type 1 has an invalid length. [ 275.113822][T10824] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1250'. [ 275.405975][T10827] ip6_tunnel: non-ECT from fc02:0000:0000:0000:0000:0000:0000:0000 with DS=0x1 [ 275.436704][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 275.450794][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 275.460407][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 275.470659][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 275.479556][ T5841] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 275.487056][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 275.536286][T10830] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1251'. [ 275.733278][T10830] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1251'. [ 275.781815][ T7371] hsr_slave_0: left promiscuous mode [ 275.802874][ T7371] hsr_slave_1: left promiscuous mode [ 275.831618][ T7371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 275.853795][ T7371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 275.885362][ T7371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 275.906615][ T7371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 275.998879][ T7371] veth1_macvtap: left promiscuous mode [ 276.020555][ T7371] veth0_macvtap: left promiscuous mode [ 276.050850][ T7371] veth1_vlan: left promiscuous mode [ 276.076662][ T7371] veth0_vlan: left promiscuous mode [ 277.588130][ T5841] Bluetooth: hci1: command tx timeout [ 277.952079][ T7371] team0 (unregistering): Port device team_slave_1 removed [ 278.082292][ T7371] team0 (unregistering): Port device team_slave_0 removed [ 279.608650][T10830] (unnamed net_device) (uninitialized): Removing last arp target with arp_interval on [ 279.668779][ T5841] Bluetooth: hci1: command tx timeout [ 280.054892][T10852] netlink: 64 bytes leftover after parsing attributes in process `syz.3.1255'. [ 280.781507][T10826] chnl_net:caif_netlink_parms(): no params data found [ 281.538849][T10826] bridge0: port 1(bridge_slave_0) entered blocking state [ 281.547063][T10872] netlink: 'syz.3.1261': attribute type 39 has an invalid length. [ 281.576548][T10826] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.611568][T10826] bridge_slave_0: entered allmulticast mode [ 281.652853][T10826] bridge_slave_0: entered promiscuous mode [ 281.742382][ T5844] Bluetooth: hci1: command tx timeout [ 281.772146][T10826] bridge0: port 2(bridge_slave_1) entered blocking state [ 281.856180][T10886] xt_CT: No such helper "snmp" [ 281.933501][T10890] netlink: 332 bytes leftover after parsing attributes in process `syz.5.1265'. [ 281.958390][T10826] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.965943][T10826] bridge_slave_1: entered allmulticast mode [ 281.980861][T10826] bridge_slave_1: entered promiscuous mode [ 282.251139][T10826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 282.495656][T10826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 282.806652][T10902] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 282.888744][T10901] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 283.021875][T10826] team0: Port device team_slave_0 added [ 283.059140][T10910] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1269'. [ 283.082661][T10826] team0: Port device team_slave_1 added [ 283.259866][T10826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 283.300578][T10826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.449099][T10826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 283.653889][T10915] tipc: Enabled bearer , priority 0 [ 283.689965][T10826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 283.707945][T10826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 283.796091][T10826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 283.818888][ T5846] Bluetooth: hci4: command 0x0405 tx timeout [ 283.825352][ T5846] Bluetooth: hci1: command tx timeout [ 283.945643][ T7375] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 283.965936][ T7371] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 283.992039][T10932] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 284.002448][T10932] batadv_slave_0: entered promiscuous mode [ 284.058422][T10932] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1270'. [ 284.088282][T10932] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 284.432019][ T7371] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.775603][ T7371] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 284.850572][T10951] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1278'. [ 284.890255][T10826] hsr_slave_0: entered promiscuous mode [ 284.912429][T10955] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 284.951079][T10826] hsr_slave_1: entered promiscuous mode [ 284.998256][T10826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 285.026441][T10826] Cannot create hsr debugfs directory [ 285.183626][ T7371] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.565418][T10964] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1283'. [ 285.623255][T10960] netlink: 'syz.3.1282': attribute type 21 has an invalid length. [ 285.947130][T10970] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1285'. [ 286.335260][T10970] bond2: entered promiscuous mode [ 286.436389][T10978] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1287'. [ 286.563836][T10972] gretap1: entered promiscuous mode [ 286.599098][T10972] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 286.718471][T10980] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1287'. [ 286.830742][ T7371] bridge_slave_1: left allmulticast mode [ 286.836473][ T7371] bridge_slave_1: left promiscuous mode [ 286.898250][ T7371] bridge0: port 2(bridge_slave_1) entered disabled state [ 286.952324][ T7371] bridge_slave_0: left allmulticast mode [ 286.978065][ T7371] bridge_slave_0: left promiscuous mode [ 286.992583][T10988] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1289'. [ 287.023360][ T7371] bridge0: port 1(bridge_slave_0) entered disabled state [ 288.395912][T11012] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1294'. [ 288.863093][T11009] Bluetooth: hci0: Opcode 0x0c20 failed: -4 [ 289.176677][ T7371] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 289.252633][ T7371] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 289.280775][ T7371] bond0 (unregistering): Released all slaves [ 289.715697][T11023] netlink: 32 bytes leftover after parsing attributes in process `syz.5.1295'. [ 290.558472][ T5844] Bluetooth: hci0: command 0x0401 tx timeout [ 296.869656][T11036] IPVS: Unknown mcast interface: macvlan1 [ 297.425699][ T7371] hsr_slave_0: left promiscuous mode [ 297.448803][ T7371] hsr_slave_1: left promiscuous mode [ 297.468401][ T7371] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.475954][ T7371] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.548559][ T7371] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.556077][ T7371] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.664411][T11058] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1303'. [ 297.676940][ T7371] veth1_macvtap: left promiscuous mode [ 297.693853][ T7371] veth0_macvtap: left promiscuous mode [ 297.705706][ T7371] veth1_vlan: left promiscuous mode [ 297.723045][ T7371] veth0_vlan: left promiscuous mode [ 299.225667][ T7371] team0 (unregistering): Port device team_slave_1 removed [ 299.380159][ T7371] team0 (unregistering): Port device team_slave_0 removed [ 300.888308][T11055] bridge0: entered promiscuous mode [ 300.938306][T11055] bridge0: left promiscuous mode [ 301.276498][T10826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 301.316446][T10826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 301.406528][T11063] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1306'. [ 301.458590][T10826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 301.518534][T10826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 301.915707][T10826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 302.191168][T10826] 8021q: adding VLAN 0 to HW filter on device team0 [ 302.211599][ T7015] bridge0: port 1(bridge_slave_0) entered blocking state [ 302.218814][ T7015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 302.483824][ T7015] bridge0: port 2(bridge_slave_1) entered blocking state [ 302.491069][ T7015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 302.627994][T10826] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 302.639372][T10826] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 303.081732][ T5832] bond0: (slave syz_tun): Releasing backup interface [ 303.125078][ T5832] bond0: (slave syz_tun): the permanent HWaddr of slave - aa:aa:aa:aa:aa:aa - is still in use by bond - set the HWaddr of slave to a different address to avoid conflicts [ 303.556401][T10826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 303.721562][ T5841] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 303.734345][ T5841] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 303.744296][ T5841] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 303.752557][ T5841] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 303.762878][ T5841] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 303.771565][ T5841] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 304.224358][T10826] veth0_vlan: entered promiscuous mode [ 304.241409][T10826] veth1_vlan: entered promiscuous mode [ 304.268848][T10826] veth0_macvtap: entered promiscuous mode [ 304.280407][T10826] veth1_macvtap: entered promiscuous mode [ 304.300279][T10826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.312154][T10826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.324263][T10826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 304.335703][T10826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.349586][T10826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 304.360666][T10826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.373029][T10826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.384066][T10826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.395954][T10826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.407090][T10826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 304.428901][T10826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 304.452525][T10826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 304.633383][T10826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.670104][T10826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.707951][T10826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 304.732844][T10826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 305.045730][ T7013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.062385][T11072] chnl_net:caif_netlink_parms(): no params data found [ 305.227894][ T7013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.348584][ T7015] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 305.365267][ T7015] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 305.826825][ T5844] Bluetooth: hci6: command tx timeout [ 306.336898][ T5841] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 306.348991][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 306.359166][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 306.368099][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 306.377070][ T5841] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 306.396464][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 306.655037][T11072] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.663033][T11072] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.670996][T11072] bridge_slave_0: entered allmulticast mode [ 306.680653][T11072] bridge_slave_0: entered promiscuous mode [ 306.689652][T11072] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.706877][T11072] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.715307][T11072] bridge_slave_1: entered allmulticast mode [ 306.723350][T11072] bridge_slave_1: entered promiscuous mode [ 306.754916][T11072] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.776466][T11072] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.791899][T11128] tipc: Started in network mode [ 306.796870][T11128] tipc: Node identity 8acd6ff8fb7b, cluster identity 7 [ 306.880541][T11128] tipc: Enabled bearer , priority 0 [ 307.363139][T11130] syzkaller0: entered promiscuous mode [ 307.472647][T11130] syzkaller0: entered allmulticast mode [ 307.495975][T11130] tipc: Resetting bearer [ 307.681965][ T11] tipc: Resetting bearer [ 307.719526][T11122] tipc: Resetting bearer [ 307.900683][ T5841] Bluetooth: hci6: command tx timeout [ 307.997761][ T8015] tipc: Node number set to 1907781624 [ 308.458868][ T5841] Bluetooth: hci0: command tx timeout [ 309.065446][ T5844] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 309.082121][ T5844] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 309.091930][ T5844] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 309.121694][ T5844] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 309.131403][ T5844] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 309.141326][ T5844] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 309.978671][ T5844] Bluetooth: hci6: command tx timeout [ 310.541880][ T5844] Bluetooth: hci0: command tx timeout [ 311.190643][ T5844] Bluetooth: hci1: command tx timeout [ 312.060614][ T5844] Bluetooth: hci6: command tx timeout [ 312.627023][ T5844] Bluetooth: hci0: command tx timeout [ 313.279758][ T5844] Bluetooth: hci1: command tx timeout [ 314.203606][T11122] tipc: Disabling bearer [ 314.364279][T11072] team0: Port device team_slave_0 added [ 314.417818][T11072] team0: Port device team_slave_1 added [ 314.632384][T11072] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 314.647628][T11072] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.696912][T11072] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 314.708240][ T5844] Bluetooth: hci0: command tx timeout [ 314.820788][T11072] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 314.841284][T11072] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 314.870275][ T7375] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 314.907369][T11072] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 315.000141][ T7015] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.331918][ T7015] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 315.364396][ T5844] Bluetooth: hci1: command tx timeout [ 315.411989][T11072] hsr_slave_0: entered promiscuous mode [ 315.505668][T11072] hsr_slave_1: entered promiscuous mode [ 315.532195][T11072] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 315.540840][T11072] Cannot create hsr debugfs directory [ 315.653459][T11127] chnl_net:caif_netlink_parms(): no params data found [ 316.329249][T11183] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1329'. [ 317.083057][ T7015] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.209059][T11189] netlink: 'syz.2.1331': attribute type 8 has an invalid length. [ 317.232576][T11193] RDS: rds_bind could not find a transport for fec0:ffff::1, load rds_tcp or rds_rdma? [ 317.422764][ T5844] Bluetooth: hci1: command tx timeout [ 317.503712][ T7015] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 317.521887][T11200] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1333'. [ 317.568187][T11127] bridge0: port 1(bridge_slave_0) entered blocking state [ 317.575428][T11127] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.586656][T11127] bridge_slave_0: entered allmulticast mode [ 317.593957][T11127] bridge_slave_0: entered promiscuous mode [ 317.603397][T11127] bridge0: port 2(bridge_slave_1) entered blocking state [ 317.610607][T11127] bridge0: port 2(bridge_slave_1) entered disabled state [ 317.618024][T11127] bridge_slave_1: entered allmulticast mode [ 317.625156][T11127] bridge_slave_1: entered promiscuous mode [ 317.819519][T11127] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 317.831587][T11127] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 317.873654][T11147] chnl_net:caif_netlink_parms(): no params data found [ 317.974208][T11127] team0: Port device team_slave_0 added [ 317.983687][T11127] team0: Port device team_slave_1 added [ 318.100825][T11127] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 318.122544][T11127] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.184075][T11127] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 318.250519][T11127] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 318.256033][T11215] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1337'. [ 318.260212][T11127] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 318.277502][T11216] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1337'. [ 318.316530][T11127] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 318.543872][ T7015] bridge_slave_1: left allmulticast mode [ 318.551093][ T7015] bridge_slave_1: left promiscuous mode [ 318.576635][ T7015] bridge0: port 2(bridge_slave_1) entered disabled state [ 319.235802][ T7015] bridge_slave_0: left allmulticast mode [ 319.250417][ T7015] bridge_slave_0: left promiscuous mode [ 319.264468][ T7015] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.166144][ T7015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 320.180954][ T7015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 320.192222][ T7015] bond0 (unregistering): Released all slaves [ 320.455006][T11236] netlink: 1264 bytes leftover after parsing attributes in process `syz.2.1342'. [ 320.469209][T11127] hsr_slave_0: entered promiscuous mode [ 320.478160][T11127] hsr_slave_1: entered promiscuous mode [ 320.492016][T11127] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 320.517970][T11238] netlink: 1264 bytes leftover after parsing attributes in process `syz.2.1342'. [ 320.518080][T11236] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.538337][T11127] Cannot create hsr debugfs directory [ 320.543907][T11238] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 320.766114][T11147] bridge0: port 1(bridge_slave_0) entered blocking state [ 320.784226][T11147] bridge0: port 1(bridge_slave_0) entered disabled state [ 320.807531][T11147] bridge_slave_0: entered allmulticast mode [ 320.818743][T11147] bridge_slave_0: entered promiscuous mode [ 320.838890][T11147] bridge0: port 2(bridge_slave_1) entered blocking state [ 320.846054][T11147] bridge0: port 2(bridge_slave_1) entered disabled state [ 320.867520][T11147] bridge_slave_1: entered allmulticast mode [ 320.877703][T11147] bridge_slave_1: entered promiscuous mode [ 320.897986][T11072] netdevsim netdevsim6 netdevsim0: renamed from eth0 [ 320.922462][T11072] netdevsim netdevsim6 netdevsim1: renamed from eth1 [ 321.121604][T11072] netdevsim netdevsim6 netdevsim2: renamed from eth2 [ 321.306370][T11147] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 321.333513][T11072] netdevsim netdevsim6 netdevsim3: renamed from eth3 [ 321.370425][T11147] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 321.473252][ T7015] hsr_slave_0: left promiscuous mode [ 321.479891][ T7015] hsr_slave_1: left promiscuous mode [ 321.489518][ T7015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 321.497020][ T7015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 321.544942][ T7015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 321.574525][ T7015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 321.666997][ T7015] veth1_macvtap: left promiscuous mode [ 321.683378][ T7015] veth0_macvtap: left promiscuous mode [ 321.703769][ T7015] veth1_vlan: left promiscuous mode [ 321.713860][ T7015] veth0_vlan: left promiscuous mode [ 321.954804][T11264] netlink: 256 bytes leftover after parsing attributes in process `syz.3.1350'. [ 323.078822][ T7015] team0 (unregistering): Port device team_slave_1 removed [ 323.202226][ T7015] team0 (unregistering): Port device team_slave_0 removed [ 324.724011][T11147] team0: Port device team_slave_0 added [ 324.766419][T11147] team0: Port device team_slave_1 added [ 325.207900][T11147] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 325.220797][T11147] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.284118][T11147] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 325.374332][T11147] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 325.394717][T11147] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 325.517553][T11147] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 325.612475][T11127] netdevsim netdevsim7 netdevsim0: renamed from eth0 [ 325.715104][T11127] netdevsim netdevsim7 netdevsim1: renamed from eth1 [ 325.769060][T11147] hsr_slave_0: entered promiscuous mode [ 325.790959][T11147] hsr_slave_1: entered promiscuous mode [ 325.812261][T11147] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 325.842836][T11147] Cannot create hsr debugfs directory [ 325.935077][T11127] netdevsim netdevsim7 netdevsim2: renamed from eth2 [ 325.989323][T11127] netdevsim netdevsim7 netdevsim3: renamed from eth3 [ 326.190150][T11072] 8021q: adding VLAN 0 to HW filter on device bond0 [ 326.373211][T11288] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1359'. [ 326.464132][T11072] 8021q: adding VLAN 0 to HW filter on device team0 [ 326.661197][ T7015] bridge0: port 1(bridge_slave_0) entered blocking state [ 326.668414][ T7015] bridge0: port 1(bridge_slave_0) entered forwarding state [ 326.870365][ T7013] bridge0: port 2(bridge_slave_1) entered blocking state [ 326.877581][ T7013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 327.456007][T11127] 8021q: adding VLAN 0 to HW filter on device bond0 [ 327.605619][T11072] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 327.616434][T11072] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 327.644321][T11127] 8021q: adding VLAN 0 to HW filter on device team0 [ 327.725815][ T7013] bridge0: port 1(bridge_slave_0) entered blocking state [ 327.733030][ T7013] bridge0: port 1(bridge_slave_0) entered forwarding state [ 327.755031][ T7013] bridge0: port 2(bridge_slave_1) entered blocking state [ 327.762258][ T7013] bridge0: port 2(bridge_slave_1) entered forwarding state [ 328.894275][T11127] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 329.021747][T11147] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 329.098861][T11147] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 329.227989][T11147] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 329.288643][T11147] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 329.345186][T11072] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 330.002286][T11147] 8021q: adding VLAN 0 to HW filter on device bond0 [ 330.122573][T11147] 8021q: adding VLAN 0 to HW filter on device team0 [ 330.182512][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 330.189857][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 330.491292][ T7015] bridge0: port 2(bridge_slave_1) entered blocking state [ 330.498644][ T7015] bridge0: port 2(bridge_slave_1) entered forwarding state [ 330.726644][T11127] veth0_vlan: entered promiscuous mode [ 330.821413][T11127] veth1_vlan: entered promiscuous mode [ 330.932273][T11127] veth0_macvtap: entered promiscuous mode [ 330.988436][T11127] veth1_macvtap: entered promiscuous mode [ 331.083611][T11127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.106307][T11127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.133305][T11127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.156118][T11127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.192981][T11127] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 331.256837][T11127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.298349][T11127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.337982][T11127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.377359][T11127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.407343][T11127] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 331.430064][T11127] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 331.471530][T11127] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 331.552136][T11127] netdevsim netdevsim7 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.562808][T11127] netdevsim netdevsim7 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.588442][T11127] netdevsim netdevsim7 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.607478][T11127] netdevsim netdevsim7 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 331.631865][T11072] veth0_vlan: entered promiscuous mode [ 331.648843][T11147] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 331.699936][T11072] veth1_vlan: entered promiscuous mode [ 331.840714][T11072] veth0_macvtap: entered promiscuous mode [ 331.883018][T11072] veth1_macvtap: entered promiscuous mode [ 331.911616][ T2114] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 331.940269][ T2114] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 331.961132][T11072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 331.987950][T11072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.008315][T11072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.027656][T11072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.047404][T11072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.072696][T11072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.098326][T11072] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 332.154354][T11147] veth0_vlan: entered promiscuous mode [ 332.166031][T11072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.192142][T11072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.218696][T11072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.238594][T11072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.257429][T11072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.277710][T11072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.302963][T11072] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 332.327289][T11072] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.349637][T11072] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 332.414456][ T8621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 332.424454][T11147] veth1_vlan: entered promiscuous mode [ 332.432341][ T8621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 332.444243][T11072] netdevsim netdevsim6 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.468471][T11072] netdevsim netdevsim6 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.485591][T11072] netdevsim netdevsim6 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.504112][T11072] netdevsim netdevsim6 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 332.595201][T11147] veth0_macvtap: entered promiscuous mode [ 332.660047][T11147] veth1_macvtap: entered promiscuous mode [ 332.792220][T11147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.827362][T11147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.853696][T11147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.880006][T11147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.900636][T11147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.924191][T11147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 332.942471][T11147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 332.978020][T11147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.003258][T11147] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 333.054775][T11147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.077061][T11147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.100575][T11147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.127589][T11147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.150617][T11147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.171767][T11147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.192269][T11147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.212995][T11147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.234448][T11147] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 333.254409][T11147] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 333.280524][T11147] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 333.301687][ T7015] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.334485][ T7015] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.368859][T11147] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.392170][T11147] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.444425][T11147] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.472975][T11147] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 333.601437][ T8621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.657807][ T8621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.830621][ T7013] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.867984][ T7013] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 333.952369][ T8621] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 333.973190][ T8621] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 334.294268][T11371] netlink: 32 bytes leftover after parsing attributes in process `syz.6.1307'. [ 334.464578][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.582104][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.750973][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 334.884107][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 335.063655][ T11] bridge_slave_1: left allmulticast mode [ 335.078330][ T11] bridge_slave_1: left promiscuous mode [ 335.088162][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 335.111505][ T11] bridge_slave_0: left allmulticast mode [ 335.127315][ T11] bridge_slave_0: left promiscuous mode [ 335.133136][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 335.916435][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 335.937916][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 335.958073][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 335.978593][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 336.001182][ T5841] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 336.011567][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 336.228821][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 336.241838][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 336.270059][ T11] bond0 (unregistering): Released all slaves [ 336.570220][T11373] chnl_net:caif_netlink_parms(): no params data found [ 336.757091][ T11] hsr_slave_0: left promiscuous mode [ 336.784550][ T11] hsr_slave_1: left promiscuous mode [ 336.798236][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 336.805802][ T11] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 336.814823][ T11] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 336.822386][ T11] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 336.850947][ T11] veth1_macvtap: left promiscuous mode [ 336.856539][ T11] veth0_macvtap: left promiscuous mode [ 336.863361][ T11] veth1_vlan: left promiscuous mode [ 336.868852][ T11] veth0_vlan: left promiscuous mode [ 337.804706][ T11] team0 (unregistering): Port device team_slave_1 removed [ 337.912121][ T11] team0 (unregistering): Port device team_slave_0 removed [ 338.067642][ T5841] Bluetooth: hci1: command tx timeout [ 339.056054][T11373] bridge0: port 1(bridge_slave_0) entered blocking state [ 339.078180][T11373] bridge0: port 1(bridge_slave_0) entered disabled state [ 339.085514][T11373] bridge_slave_0: entered allmulticast mode [ 339.111115][T11373] bridge_slave_0: entered promiscuous mode [ 339.130471][T11373] bridge0: port 2(bridge_slave_1) entered blocking state [ 339.147998][T11373] bridge0: port 2(bridge_slave_1) entered disabled state [ 339.155374][T11373] bridge_slave_1: entered allmulticast mode [ 339.179599][T11373] bridge_slave_1: entered promiscuous mode [ 339.250686][T11373] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 339.277033][T11373] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 339.339460][ T30] INFO: task syz.1.868:9269 blocked for more than 143 seconds. [ 339.349449][ T30] Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 339.368258][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 339.377006][ T30] task:syz.1.868 state:D stack:27328 pid:9269 tgid:9266 ppid:5834 flags:0x00000004 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 339.404878][ T30] Call Trace: [ 339.410980][ T30] [ 339.414016][ T30] __schedule+0x1850/0x4c30 [ 339.419512][ T30] ? __pfx___schedule+0x10/0x10 [ 339.424703][ T30] ? __pfx_lock_release+0x10/0x10 [ 339.430875][ T30] ? __lock_sock+0x1c8/0x330 [ 339.435535][ T30] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 339.442296][ T30] ? schedule+0x90/0x320 [ 339.465431][ T30] schedule+0x14b/0x320 [ 339.470665][ T30] __lock_sock+0x1cd/0x330 [ 339.475155][ T30] ? __pfx___lock_sock+0x10/0x10 [ 339.496276][ T30] ? __pfx_autoremove_wake_function+0x10/0x10 [ 339.572591][ T30] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 339.589516][ T30] ? lock_sock_nested+0x6a/0x100 [ 339.594569][ T30] lock_sock_nested+0x9e/0x100 [ 339.638166][ T30] sk_setsockopt+0xebc/0x3290 [ 339.643135][ T30] ? __pfx_sk_setsockopt+0x10/0x10 [ 339.677905][ T30] ? aa_sk_perm+0x96d/0xab0 [ 339.682564][ T30] ? __pfx_aa_sk_perm+0x10/0x10 [ 339.698138][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 339.703268][ T30] ? aa_sock_opt_perm+0x79/0x120 [ 339.725387][ T30] do_sock_setsockopt+0x2fb/0x720 [ 339.738230][ T30] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 339.743895][ T30] ? __fget_files+0x395/0x410 [ 339.765712][ T30] ? __fget_files+0x2a/0x410 [ 339.770955][ T30] __x64_sys_setsockopt+0x1ee/0x280 [ 339.776226][ T30] do_syscall_64+0xf3/0x230 [ 339.798039][ T30] ? clear_bhb_loop+0x35/0x90 [ 339.802863][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 339.828086][ T30] RIP: 0033:0x7fd890185d29 [ 339.832592][ T30] RSP: 002b:00007fd890ef6038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 339.867924][ T30] RAX: ffffffffffffffda RBX: 00007fd890375fa0 RCX: 00007fd890185d29 [ 339.876010][ T30] RDX: 0000000000000007 RSI: 0000000000000001 RDI: 0000000000000005 [ 339.898446][ T30] RBP: 00007fd890201b08 R08: 0000000000000004 R09: 0000000000000000 [ 339.906507][ T30] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 339.959515][ T30] R13: 0000000000000000 R14: 00007fd890375fa0 R15: 00007ffc3d14e788 [ 339.987860][ T30] [ 339.991083][ T30] [ 339.991083][ T30] Showing all locks held in the system: [ 340.029759][ T30] 3 locks held by kworker/u8:0/11: [ 340.034965][ T30] 1 lock held by khungtaskd/30: [ 340.097972][ T30] #0: ffffffff8e937ae0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 340.138000][ T30] 3 locks held by kworker/u8:6/2114: [ 340.143374][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 340.178504][ T5841] Bluetooth: hci1: command tx timeout [ 340.318099][ T30] #1: ffffc90004b5fd00 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 340.331780][ T30] #2: ffffffff8fcb3988 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 340.340987][ T30] 2 locks held by getty/5587: [ 340.345720][ T30] #0: ffff88814d5170a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 340.355634][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 340.365991][ T30] 3 locks held by syz-executor/5833: [ 340.371871][ T30] #0: ffff888069a9cd80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510 [ 340.382426][ T30] #1: ffff888069a9c078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x5c8/0x11c0 [ 340.392452][ T30] #2: ffffffff8e93cff8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x381/0x830 [ 340.403519][ T30] 2 locks held by kworker/u8:10/7013: [ 340.409006][ T30] 2 locks held by kworker/u8:21/7375: [ 340.414424][ T30] 1 lock held by syz.1.868/9269: [ 340.419483][ T30] #0: ffff888028e98258 (sk_lock-AF_INET6){+.+.}-{0:0}, at: sk_setsockopt+0xebc/0x3290 [ 340.429347][ T30] 1 lock held by syz.1.868/9270: [ 340.434337][ T30] 1 lock held by syz-executor/11072: [ 340.439809][ T30] 2 locks held by syz-executor/11127: [ 340.445250][ T30] #0: ffff888069648d80 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x203/0x510 [ 340.455520][ T30] #1: ffff888069648078 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x5c8/0x11c0 [ 340.465720][ T30] [ 340.468145][ T30] ============================================= [ 340.468145][ T30] [ 340.477060][ T30] NMI backtrace for cpu 0 [ 340.481423][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 340.491945][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 340.502037][ T30] Call Trace: [ 340.505357][ T30] [ 340.508310][ T30] dump_stack_lvl+0x241/0x360 [ 340.513019][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 340.518244][ T30] ? __pfx__printk+0x10/0x10 [ 340.522869][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 340.527839][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 340.533322][ T30] ? _printk+0xd5/0x120 [ 340.537510][ T30] ? __pfx__printk+0x10/0x10 [ 340.542150][ T30] ? __wake_up_klogd+0xcc/0x110 [ 340.547019][ T30] ? __pfx__printk+0x10/0x10 [ 340.551637][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 340.556685][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 340.562686][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 340.568703][ T30] watchdog+0xff6/0x1040 [ 340.572969][ T30] ? watchdog+0x1ea/0x1040 [ 340.577417][ T30] ? __pfx_watchdog+0x10/0x10 [ 340.582137][ T30] kthread+0x2f0/0x390 [ 340.586297][ T30] ? __pfx_watchdog+0x10/0x10 [ 340.590995][ T30] ? __pfx_kthread+0x10/0x10 [ 340.595620][ T30] ret_from_fork+0x4b/0x80 [ 340.600058][ T30] ? __pfx_kthread+0x10/0x10 [ 340.604762][ T30] ret_from_fork_asm+0x1a/0x30 [ 340.609566][ T30] [ 340.613050][ T30] Sending NMI from CPU 0 to CPUs 1: [ 340.620429][ C1] NMI backtrace for cpu 1 [ 340.620445][ C1] CPU: 1 UID: 0 PID: 1 Comm: init Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 340.620466][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 340.620478][ C1] RIP: 0010:__del_page_from_free_list+0x221/0x470 [ 340.620516][ C1] Code: 85 e6 00 00 00 8b 45 00 83 f8 ff 74 24 25 00 00 00 ff 3d 00 00 00 f0 0f 85 f0 01 00 00 42 0f b6 04 3b 84 c0 0f 85 de 00 00 00 45 00 ff ff ff ff 49 83 c5 28 4c 89 e8 48 c1 e8 03 42 80 3c 38 [ 340.620533][ C1] RSP: 0018:ffffc900000677b8 EFLAGS: 00000046 [ 340.620550][ C1] RAX: 0000000000000000 RBX: 1ffffd40002af586 RCX: 0000000000000000 [ 340.620563][ C1] RDX: ffffea000157ac08 RSI: ffff88813fffbc80 RDI: ffffea000157ac10 [ 340.620577][ C1] RBP: ffffea000157ac30 R08: ffffea000157ac37 R09: 1ffffd40002af586 [ 340.620591][ C1] R10: dffffc0000000000 R11: fffff940002af587 R12: ffffea0001837e88 [ 340.620605][ C1] R13: ffffea000157ac00 R14: ffff88813fffbe68 R15: dffffc0000000000 [ 340.620619][ C1] FS: 00007f964eaa4380(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 340.620636][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 340.620649][ C1] CR2: 00007f83386a7d60 CR3: 0000000033c24000 CR4: 00000000003526f0 [ 340.620666][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 340.620677][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 340.620689][ C1] Call Trace: [ 340.620695][ C1] [ 340.620703][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 340.620732][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 340.620756][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 340.620782][ C1] ? nmi_handle+0x2a/0x5a0 [ 340.620812][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 340.620830][ C1] ? nmi_handle+0x14f/0x5a0 [ 340.620851][ C1] ? nmi_handle+0x2a/0x5a0 [ 340.620874][ C1] ? __del_page_from_free_list+0x221/0x470 [ 340.620897][ C1] ? default_do_nmi+0x63/0x160 [ 340.620923][ C1] ? exc_nmi+0x123/0x1f0 [ 340.620949][ C1] ? end_repeat_nmi+0xf/0x53 [ 340.620979][ C1] ? __del_page_from_free_list+0x221/0x470 [ 340.621003][ C1] ? __del_page_from_free_list+0x221/0x470 [ 340.621028][ C1] ? __del_page_from_free_list+0x221/0x470 [ 340.621052][ C1] [ 340.621058][ C1] [ 340.621067][ C1] __free_one_page+0x372/0x9c0 [ 340.621089][ C1] ? __pfx___free_one_page+0x10/0x10 [ 340.621113][ C1] free_pcppages_bulk+0x3c7/0x5e0 [ 340.621148][ C1] free_unref_page_commit+0x582/0x1140 [ 340.621173][ C1] ? __pfx_free_unref_page_commit+0x10/0x10 [ 340.621200][ C1] ? page_ext_get+0x20/0x2a0 [ 340.621221][ C1] ? page_ext_get+0x1d6/0x2a0 [ 340.621246][ C1] free_unref_page+0x711/0x1010 [ 340.621280][ C1] __put_partials+0x160/0x1c0 [ 340.621308][ C1] ? put_cpu_partial+0x14c/0x250 [ 340.621328][ C1] put_cpu_partial+0x17c/0x250 [ 340.621345][ C1] ? put_cpu_partial+0x70/0x250 [ 340.621365][ C1] __slab_free+0x290/0x380 [ 340.621386][ C1] ? __phys_addr+0xba/0x170 [ 340.621409][ C1] qlist_free_all+0x9a/0x140 [ 340.621429][ C1] ? getname_flags+0xb7/0x540 [ 340.621453][ C1] kasan_quarantine_reduce+0x14f/0x170 [ 340.621475][ C1] __kasan_slab_alloc+0x23/0x80 [ 340.621495][ C1] ? do_proc_dopipe_max_size_conv+0x181/0x190 [ 340.621525][ C1] kmem_cache_alloc_noprof+0x1d9/0x380 [ 340.621552][ C1] getname_flags+0xb7/0x540 [ 340.621577][ C1] user_path_at+0x24/0x60 [ 340.621604][ C1] do_faccessat+0x5e2/0xb80 [ 340.621634][ C1] ? __pfx_do_faccessat+0x10/0x10 [ 340.621661][ C1] ? do_syscall_64+0x100/0x230 [ 340.621683][ C1] ? do_syscall_64+0xb6/0x230 [ 340.621706][ C1] do_syscall_64+0xf3/0x230 [ 340.621726][ C1] ? clear_bhb_loop+0x35/0x90 [ 340.621751][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 340.621773][ C1] RIP: 0033:0x7f964ebf8c91 [ 340.621789][ C1] Code: 28 c3 c3 b8 08 00 00 00 0f 05 48 3d 00 f0 ff ff 76 10 48 8b 15 88 a1 0d 00 f7 d8 64 89 02 48 83 c8 ff c3 b8 15 00 00 00 0f 05 <48> 3d 00 f0 ff ff 76 10 48 8b 15 68 a1 0d 00 f7 d8 64 89 02 48 83 [ 340.621804][ C1] RSP: 002b:00007ffeef6181d8 EFLAGS: 00000246 ORIG_RAX: 0000000000000015 [ 340.621822][ C1] RAX: ffffffffffffffda RBX: 00000000000016c4 RCX: 00007f964ebf8c91 [ 340.621835][ C1] RDX: 0000000000000000 RSI: 0000000000000006 RDI: 00007f964ed9ff4d [ 340.621848][ C1] RBP: 00007f964ed9ff4d R08: 0000000000000000 R09: 0000000000000000 [ 340.621859][ C1] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 340.621871][ C1] R13: 0000000000000000 R14: 0000000000000000 R15: 00000000000016c4 [ 340.621890][ C1] [ 340.622436][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 341.067766][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.13.0-rc3-syzkaller-00762-g9268abe611b0 #0 [ 341.078305][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 341.088386][ T30] Call Trace: [ 341.091705][ T30] [ 341.094648][ T30] dump_stack_lvl+0x241/0x360 [ 341.099358][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 341.104582][ T30] ? __pfx__printk+0x10/0x10 [ 341.109189][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 341.115197][ T30] ? vscnprintf+0x5d/0x90 [ 341.119555][ T30] panic+0x349/0x880 [ 341.123474][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 341.129663][ T30] ? __pfx_panic+0x10/0x10 [ 341.134102][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 341.139510][ T30] ? __irq_work_queue_local+0x137/0x410 [ 341.145081][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 341.150605][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 341.156876][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 341.163071][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 341.169286][ T30] watchdog+0x1035/0x1040 [ 341.173639][ T30] ? watchdog+0x1ea/0x1040 [ 341.178164][ T30] ? __pfx_watchdog+0x10/0x10 [ 341.182877][ T30] kthread+0x2f0/0x390 [ 341.186971][ T30] ? __pfx_watchdog+0x10/0x10 [ 341.191677][ T30] ? __pfx_kthread+0x10/0x10 [ 341.196291][ T30] ret_from_fork+0x4b/0x80 [ 341.200741][ T30] ? __pfx_kthread+0x10/0x10 [ 341.205400][ T30] ret_from_fork_asm+0x1a/0x30 [ 341.210201][ T30] [ 341.213526][ T30] Kernel Offset: disabled [ 341.217867][ T30] Rebooting in 86400 seconds..