last executing test programs: 3.368736882s ago: executing program 3 (id=732): ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x1, @bcast, @bpq0, 0x0, 'syz1\x00', @default, 0x1, 0x0, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @default]}) 2.962454994s ago: executing program 1 (id=734): r0 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000080)) bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x15, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0xa, 0x5, 0x2, 0x7, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000300)=ANY=[@ANYBLOB="18010000120000000000000000000000850000006d000000180100002020642500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000240)={&(0x7f0000000280)='contention_end\x00', r1}, 0x10) pipe(&(0x7f0000019480)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r2, &(0x7f00000000c0)=[{&(0x7f0000000180)='\b\x00', 0x2}], 0x1, 0x1) close(r3) 2.874028767s ago: executing program 3 (id=736): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000029c0)={0x0, 0x0, 0x0}, 0x0) recvmmsg(r0, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmmsg(r0, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f00000011c0)=""/70, 0x46}, {&(0x7f00000000c0)=""/43, 0x2b}, {&(0x7f0000002a00)=""/4106, 0x104d}, {&(0x7f00000015c0)=""/4096, 0x1000}], 0x4}, 0x1801}], 0x1, 0x0, 0x0) 2.709943676s ago: executing program 1 (id=739): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='veno\x00', 0x5) sendmmsg$inet(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000001340)="3d5136517e6d6f3d7b532cb3b812c99d129612dc72eba664456fdb4533a1df257242", 0x22}, {&(0x7f0000001440)="b03f676da2aae108c6249068277e5c6b1b010ed2ee7b52dbd37d947f2113c269a306e3628246ccfd6fd90207ff7767f45d8bb74e7ad3d5cccf0244bb8329901b8f9376cedf", 0x45}, {&(0x7f0000001580)="7ee036ac7621abc268ee", 0xa}, {0x0}], 0x4}}, {{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1, &(0x7f0000000440)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xc0}}], 0x18}}], 0x2, 0xc014) 1.974703205s ago: executing program 2 (id=748): r0 = socket$nl_route(0x10, 0x3, 0x0) socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'pim6reg0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=@RTM_NEWMDB={0x38, 0x54, 0x1e5, 0x0, 0x0, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {r1, 0x0, 0x0, 0x0, {@ip4=@broadcast}}}]}, 0x38}}, 0x30000090) 1.905979712s ago: executing program 3 (id=749): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 1.898397969s ago: executing program 0 (id=750): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r1, 0x0, 0x0) setsockopt$SO_TIMESTAMPING(r1, 0x1, 0x25, &(0x7f00000000c0)=0x62b8, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x585d, 0xc101}, [@IFLA_AF_SPEC={0x10, 0x1a, 0x0, 0x1, [@AF_INET6={0xc, 0xa, 0x0, 0x1, [@IFLA_INET6_ADDR_GEN_MODE={0x5}]}]}, @IFLA_IFNAME={0x14, 0x3, 'ipvlan1\x00'}]}, 0x44}, 0x1, 0x0, 0x0, 0x4844}, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000bc0)={0x14, 0x1d, 0x1, 0x0, 0x0, {0x7}}, 0x14}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x38, 0x0, 0xa, 0x101, 0x0, 0x0, {0x5}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x4}, @NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x101, 0x0, 0x0, {0x2}, @NFT_OBJECT_CT_TIMEOUT=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWCHAIN={0x128, 0x3, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x5}, [@NFTA_CHAIN_USERDATA={0x8a, 0xc, "4052757a69bba5fd43f8e7b22d6d982bf8ae80d2cf219f5315791b9db9690a75cc400a19b5a9a0ed2e17b498380bfc0bd2b3a4fe4546fb0fe6ff3457f5620b2ca1ccec36b0170758aad71caa7972d0c578aa82750d44cc991ab8f0aa7bcb7d206e5fdcfc995a52cc910efd427fa4c7d2ef5c2bb443ea17d5ed614d6f2807ad3cc5475bf1a0e7"}, @NFTA_CHAIN_FLAGS={0x8, 0xa, 0x1, 0x0, 0x6}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x3}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x4}, @NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x2}, @NFTA_CHAIN_USERDATA={0x41, 0xc, "be6e4da96c08d2dd564373c5d89eeae629ebd3ff2e9df1f49c82b5663c46fe42062821652d763c839c9be710b613b70d889128b034bc04084d4c217bd7"}, @NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x34, 0x16, 0xa, 0x3, 0x0, 0x0, {0xa, 0x0, 0xa}, [@NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x3}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_DELTABLE={0x30, 0x2, 0xa, 0x401, 0x0, 0x0, {0xb, 0x0, 0x6}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x1}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x2}]}, @NFT_MSG_NEWTABLE={0x34, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1e, 0x0, 0x3}, [@NFTA_TABLE_FLAGS={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWTABLE={0xa8, 0x0, 0xa, 0x401, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_TABLE_HANDLE={0xc, 0x4, 0x1, 0x0, 0x5}, @NFTA_TABLE_USERDATA={0x6d, 0x6, "17e007384cf960b78ce14bcf6bc0ac39bc647a3d1d9db67016b631eb7bd347f3c68df5b70351e9fad486bef350c14499c5d7eb32ac6ae53039b6cf5631366b7af705a18c613676ded30117bbf47c1e2b59679a5caf514f7df8c179c1ebb33d16527de7461cd5ddd80a"}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSET={0x44, 0xb, 0xa, 0x801, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_POLICY={0x8}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x5}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x8000}]}], {0x14}}, 0x328}, 0x1, 0x0, 0x0, 0x10}, 0x4) 1.828307967s ago: executing program 1 (id=751): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000003c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(serpent)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, 0x0, 0x0) r1 = accept4(r0, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$fou(&(0x7f0000000040), r1) sendmmsg$inet(r1, &(0x7f0000003f00)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000080)="3a18018ac1386635", 0x8}, {&(0x7f0000000540)="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", 0xfd8}], 0x2}}], 0x1, 0x40) 1.757214266s ago: executing program 3 (id=752): socket$inet6_sctp(0xa, 0x5, 0x84) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7, 0x0, 0x4}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x50, 0xc, 0xa, 0x301, 0x0, 0x0, {0x7, 0x0, 0xfffe}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x24, 0x3, 0x0, 0x1, [{0x20, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPR={0x14, 0x7, 0x0, 0x1, @counter={{0xc}, @val={0x4}}}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe4}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001300)=@newtfilter={0x24, 0x2c, 0xd2b, 0x0, 0x0, {0x0, 0x0, 0x0, r5, {0x6}, {0x0, 0x2}, {0x7}}}, 0x24}}, 0x4044040) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r7) socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r7, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r7, 0x9) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) sendmmsg(r8, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}], 0x1, 0x20000800) connect$inet(r8, &(0x7f0000000000)={0x2, 0x4e22, @empty}, 0x10) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r9, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000a40)={&(0x7f0000000980)=ANY=[@ANYBLOB="84000000", @ANYRES16=r10, @ANYBLOB="010000020c00fbdbdf25010000000800020000000000050005000000000008000300010000004800018005000200200000000600010002000000080006000a000000080003"], 0x84}}, 0x0) 1.703960904s ago: executing program 0 (id=753): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r1}, 0x18) nanosleep(&(0x7f0000000bc0)={0x0, 0x3938700}, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) r2 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r2, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) 1.703340243s ago: executing program 4 (id=754): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000002000000b704000000000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0xffffff7a, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='percpu_alloc_percpu\x00', r1}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0a00000004000000040000000c"], 0x48) socket(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$vsock_stream(0x28, 0x1, 0x0) epoll_create1(0x0) socket$l2tp6(0xa, 0x2, 0x73) socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1, 0x803, 0x0) pipe(&(0x7f0000000100)) getsockname$packet(r3, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="6000000010000304f500"/20, @ANYRES32=0x0, @ANYBLOB="00050000000000003000128009000100766c616e00000000200002800c0002000a0000001f00000006000100000000000600050088a8000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32], 0x60}}, 0x4000000) 1.569826075s ago: executing program 2 (id=755): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0xa, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xffffffffffffffc2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmmsg$inet6(r0, &(0x7f0000000540)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) sendmmsg$inet6(r0, &(0x7f0000000580)=[{{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000080)="e451919903c7f4f86844509f8f3aa8a54357431a858531f5df3034db48035ebe08e19b7c37502ff47c71025a7f1ad9fd21c160f93e84383ef6c132b8b3b260d6f6d568fec3569ce989648c6c69b897d958908de793", 0x55}], 0x1}}], 0x1, 0x40) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r1, 0x8946, &(0x7f0000000000)="8d557fd094c38f748ec33512ef3a") r2 = socket$inet(0x2, 0x3, 0xa) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x280, 0x0, 0x11, 0x148, 0x0, 0x10, 0x570, 0x2a8, 0x2a8, 0x570, 0x2a8, 0x7fffffe, 0x0, {[{{@uncond, 0x10, 0xc8, 0x130, 0x1c, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip6gretap0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x8}}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x19, 0x0, 0x0, 0x0, 'syz0\x00', 'syz1\x00'}}}, {{@ip={@multicast1, @rand_addr, 0x0, 0x0, 'syzkaller0\x00', 'veth1_to_batadv\x00'}, 0x0, 0x70, 0xb8}, @common=@inet=@TEE={0x48, 'TEE\x00', 0x1, {@ipv6=@dev, 'macsec0\x00'}}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x2e0) setsockopt$inet_msfilter(r2, 0x0, 0x29, 0x0, 0x1c) syz_emit_ethernet(0x0, 0x0, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(0x0, r3) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r4, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r6, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) r7 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r7, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000100)=0x8) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r9 = openat$cgroup_ro(r8, &(0x7f0000000200)='blkio.throttle.io_serviced_recursive\x00', 0x275a, 0x0) write$tun(r9, 0x0, 0xfdef) setsockopt$inet6_tcp_TLS_TX(r9, 0x6, 0x1, &(0x7f00000012c0)=@gcm_256={{0x303}, "7dc0510842089120", "07d2a91727a6cf63c538648c6047b69438e06c7ca73feb385f127014f94ee081", "6714e4a5", "c257e7d7def9c82e"}, 0x38) 1.469035458s ago: executing program 4 (id=756): r0 = accept4$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00'}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000080)={0x1e, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x2, 0x2, 0x1, 0xffffffffffffffe0}]}, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) listen(r1, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405"], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r2 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r2, &(0x7f0000000000)={0x27}, 0x62) 1.437878708s ago: executing program 0 (id=757): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x6c, 0x2, 0x6, 0x1, 0x6000000, 0x0, {}, [@IPSET_ATTR_TYPENAME={0xe, 0x3, 'bitmap:ip\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_DATA={0x24, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @empty=0x80ffffff}}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0x2}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}]}, 0x6c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a3200000000140000001100"], 0x7c}}, 0x4000) r2 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x28, 0x5, 0x0) bind$vsock_stream(0xffffffffffffffff, &(0x7f0000000040)={0x28, 0x0, 0x0, @local}, 0x10) listen(0xffffffffffffffff, 0x0) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) ppoll(&(0x7f0000000500)=[{r3}], 0x1, 0x0, 0x0, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, 0x0, 0x24008011) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000080)={0x54, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xd, 0x3, 'hash:net\x00'}]}, 0x54}}, 0x0) sendmsg$IPSET_CMD_ADD(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_LINENO={0x8, 0x9, 0x1, 0x0, 0x39}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_ADT={0x14, 0x8, 0x0, 0x1, [{0x10, 0x7, 0x0, 0x1, @IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000082}, 0x4000080) getsockname$packet(r2, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) 1.301967784s ago: executing program 2 (id=758): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000040), 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan1\x00', 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000c80)={0x0, 0x0, &(0x7f0000000c40)={&(0x7f0000000480)=@setlink={0x40, 0x13, 0x1, 0x0, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'vlan0\x00'}, @IFLA_VFINFO_LIST={0xc, 0x16, 0x0, 0x1, [{0x8, 0x1, 0x0, 0x1, [@IFLA_VF_VLAN_LIST={0x4}]}]}]}, 0x40}}, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendmmsg$inet6(r0, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}], 0x1, 0x4044050) 1.29072895s ago: executing program 4 (id=759): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="600030800500040040"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000002c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x3c, r5, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x20, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x20, r9, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_KEY={0x4}]}, 0x20}}, 0x0) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1001020}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x234, r1, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVKEY={0x74, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x4c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0xb4, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xffff3004}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_ID={0x50, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xb}]}, @NL802154_ATTR_SEC_DEVKEY={0xb4, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x38, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x248}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x12c2}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x200}, @NL802154_DEVKEY_ATTR_ID={0x4c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xdacb}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffff}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x234}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan1\x00'}) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000000c0)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r2, @ANYBLOB="600030800500040040"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x0) (async) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000040)={'wpan1\x00'}) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$sock_SIOCGIFINDEX_802154(r6, 0x8933, &(0x7f00000002c0)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000480)={0x3c, r5, 0x1, 0x70bd25, 0x25dfdbfb, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_SEC_OUT_KEY_ID={0x20, 0x2b, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x14, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0xffff}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_MODE={0x8}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4090}, 0x0) (async) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_802154(r8, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) (async) sendmsg$NL802154_CMD_NEW_SEC_KEY(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000280)={0x20, r9, 0x5eae78d9c54e9d3f, 0x0, 0x25dfdbfe, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_SEC_KEY={0x4}]}, 0x20}}, 0x0) (async) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1001020}, 0xc, &(0x7f0000000080)={&(0x7f0000000400)={0x234, r1, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x3}, @NL802154_ATTR_SEC_DEVKEY={0x74, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x4c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x2c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0002}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x3}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0202}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}]}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}]}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x8}, @NL802154_DEVKEY_ATTR_ID={0x10, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x3}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r7}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r2}, @NL802154_ATTR_SEC_DEVKEY={0xb4, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xffff3004}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0302}}, @NL802154_DEVKEY_ATTR_ID={0x3c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x6}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x5}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x9}, @NL802154_DEVKEY_ATTR_ID={0x50, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0x1c, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_SHORT={0x6, 0x3, 0xaaa0}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x7}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x3}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0xb}]}, @NL802154_ATTR_SEC_DEVKEY={0xb4, 0x2f, 0x0, 0x1, [@NL802154_DEVKEY_ATTR_ID={0x38, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8, 0x4, 0x248}, @NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x3}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x2}, @NL802154_KEY_ID_ATTR_INDEX={0x5}]}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x7}, @NL802154_DEVKEY_ATTR_EXTENDED_ADDR={0xc, 0x2, {0xaaaaaaaaaaaa0202}}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x4}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x12c2}, @NL802154_DEVKEY_ATTR_FRAME_COUNTER={0x8, 0x1, 0x200}, @NL802154_DEVKEY_ATTR_ID={0x4c, 0x3, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x1}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x10, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0102}}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xdacb}, @NL802154_KEY_ID_ATTR_MODE={0x8, 0x1, 0x3}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0xffffffff}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}]}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}]}, 0x234}, 0x1, 0x0, 0x0, 0x4000}, 0x4000) (async) 1.198248933s ago: executing program 3 (id=760): ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f0000000600)={'syztnl1\x00', &(0x7f0000000480)={'syztnl0\x00', 0x0, 0x40, 0x20, 0x4, 0x800, {{0xa, 0x4, 0x0, 0x8, 0x28, 0x65, 0x0, 0xff, 0x4, 0x0, @remote, @multicast1, {[@timestamp_addr={0x44, 0x14, 0xb1, 0x1, 0x7, [{@multicast1, 0x669}, {@initdev={0xac, 0x1e, 0x1, 0x0}, 0x7fffffff}]}]}}}}}) r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x2, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=@newtfilter={0x64, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0xc}, {0x8}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0x38, 0x2, [@TCA_BPF_ACT={0x34, 0x1, [@m_vlan={0x30, 0x9, 0x0, 0x0, {{0x9}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}}]}, 0x64}}, 0x0) 1.101910906s ago: executing program 4 (id=761): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000780)='veno\x00', 0x5) sendmmsg$inet(r0, &(0x7f00000004c0)=[{{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000001340)="3d5136517e6d6f3d7b532cb3b812c99d129612dc72eba664456fdb4533a1df257242", 0x22}, {&(0x7f0000001440)="b03f676da2aae108c6249068277e5c6b1b010ed2ee7b52dbd37d947f2113c269a306e3628246ccfd6fd90207ff7767f45d8bb74e7ad3d5cccf0244bb8329901b8f9376cedf", 0x45}, {&(0x7f0000001580)="7ee036ac7621abc268ee", 0xa}, {0x0}], 0x4}}, {{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1, &(0x7f0000000440)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0xc0}}], 0x18}}], 0x2, 0xc014) 1.101664108s ago: executing program 2 (id=762): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) sendmsg$nl_route_sched(r0, 0x0, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0xffff, 0xfff1}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x0) 1.003720201s ago: executing program 2 (id=763): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={0x0}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)={0x44, 0x9, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x1c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast1=0xe0004001}}]}]}, 0x44}, 0x1, 0x0, 0x0, 0x10000047}, 0x0) sendmsg$IPSET_CMD_DESTROY(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000580)=ANY=[@ANYBLOB="28000000030605000000008000000000050000040900022673797a31030000000500010007"], 0x28}, 0x1, 0x0, 0x0, 0x1}, 0x4000080) 1.002896597s ago: executing program 3 (id=764): getsockopt$inet_sctp_SCTP_GET_ASSOC_NUMBER(0xffffffffffffffff, 0x84, 0x1c, &(0x7f0000000100), &(0x7f0000000440)=0x4) r0 = accept(0xffffffffffffffff, &(0x7f0000000180)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff}}, &(0x7f00000000c0)=0x80) getsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000200)={0x0, 0x200}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(r0, 0x84, 0x6d, &(0x7f00000004c0)={r2, 0x8f, "d9d33496ebbae7bc43635eb06f0580d65c8bb86c93ccf478d66eb7763b54398ad3661431ed4725bdcfd0100e6c4d8b8cb33e04805c040268d2478c930e50a653194e7a2cfe67f22b2ad4742ad9d42b7b7f2d2537b79da5dd43efc84041e0b217f156bc3c124a430a2e58fe4e55692c1f9d678a2995856a64b2778eb881258dd188609fcf922bdb71d6befb259409f9"}, &(0x7f0000000040)=0x97) getsockopt$inet_sctp_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000002c0)=@assoc_value={r2, 0x7fffffff}, &(0x7f0000000300)=0x8) r3 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_group_source_req(r3, 0x0, 0x2e, 0x0, 0x0) socket(0x200000000000011, 0x2, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8914, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x143082, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r5) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$FS_IOC_READ_VERITY_METADATA(r3, 0xc0286687, &(0x7f0000000580)={0x3, 0x0, 0x1000, &(0x7f0000000d40)=""/4096}) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r4, &(0x7f0000000d00)=[{&(0x7f0000000100)="89e7ee2c7cdad9b4b47380c988ca", 0x280}], 0x1) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$smc(&(0x7f0000000080), r8) sendmsg$SMC_PNETID_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000480)={0x3c, r9, 0x1, 0x0, 0x4, {0x2, 0x2, 0x2}, [@SMC_PNETID_ETHNAME={0x14, 0x2, 'ip_vti0\x00'}, @SMC_PNETID_NAME={0x9, 0x1, 'syz2\x00'}, @SMC_PNETID_IBPORT={0x5, 0x4, 0x1}]}, 0x3c}, 0x1, 0x40030000000000}, 0x0) getsockopt$inet_sctp_SCTP_LOCAL_AUTH_CHUNKS(r1, 0x84, 0x1b, &(0x7f0000000340)={0x0, 0x9f, "7eb6d439a5ee1efbf43c7d8a53b40025092c3b4e2b96c2028171f2bdb2e638e2559d75acb5bdb2e3e770b75ed7a5ecb6c9351bb4719e29164c52903c56da9ed1ba08cf396e7d47d07f8d9a64655eb9a05638dd1c7c8b685c3058079f816f93de175dca44276765eac03206a699f4c1d5e450dc392f6a905e1dcfe388b14bac4e7d8f75a403d6f5c51b1e29951610686f40cae83ed02d0d134d66f878e87e62"}, &(0x7f0000000400)=0xa7) 843.665675ms ago: executing program 1 (id=765): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa00, 0x40800000000000, 0x800000000000000}}, [@tmpl={0x44, 0x5, [{{@in=@local, 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x0, 0x3}]}]}, 0xfc}}, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000009c0)=@migrate={0xac, 0x21, 0x1, 0x0, 0x4, {{@in6=@private2, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa}}, [@migrate={0x50, 0x11, [{@in6=@mcast2, @in=@private=0xa010100, @in=@private=0xa010100, @in=@rand_addr=0x6, 0x3c, 0x0, 0x0, 0x0, 0xa, 0xa}]}, @lastused={0xc, 0xf, 0x1}]}, 0xac}}, 0x0) 801.967264ms ago: executing program 2 (id=766): ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="800000001000030400000000fedbdf2500007400", @ANYRES32=r0, @ANYBLOB="0008000007500500600012800b000100627269646765000050000280050019000200000005001700000000000a0014002328c7669a9c00000c0022000600000000000000080004008100000005002400c400000005001600010000000a0014000180c20000000000"], 0x80}, 0x1, 0x0, 0x0, 0x800}, 0x0) 722.636627ms ago: executing program 1 (id=767): r0 = socket$vsock_stream(0x28, 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000003c0)='sys_enter\x00', r1}, 0x18) nanosleep(&(0x7f0000000bc0)={0x0, 0x3938700}, 0x0) bind$vsock_stream(r0, &(0x7f0000000440), 0x10) listen(r0, 0x0) socket$vsock_stream(0x28, 0x1, 0x0) 546.451529ms ago: executing program 1 (id=768): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'veth1\x00'}) r2 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_VIF(r2, 0x0, 0xca, &(0x7f00000002c0)={0x0, 0x1, 0x0, 0x0, @vifc_lcl_addr=@broadcast, @multicast1}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000001680)={0x24, 0x3d, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@nested={0x8, 0x145, 0x0, 0x1, [@nested={0x4, 0x8}]}, @nested={0x8, 0x1, 0x0, 0x1, [@nested={0x4, 0x24}]}]}, 0x24}}, 0x4040040) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) connect$inet6(r4, &(0x7f0000000080)={0xa, 0x0, 0xc7}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r4, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r4, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc86a00", "4617a9f6040839230fb7fead776dd8dc", "c6db0872", "a44a883fca4400"}, 0x28) recvmmsg(r4, &(0x7f0000001240)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000140)=""/183, 0xb7}], 0x1}}], 0x1, 0x2, 0x0) recvmmsg(r4, &(0x7f0000001780)=[{{0x0, 0x0, 0x0}, 0x9}], 0x1, 0x0, 0x0) shutdown(r4, 0x0) r5 = socket$tipc(0x1e, 0x2, 0x0) getsockopt$sock_buf(r5, 0x1, 0x1c, 0x0, &(0x7f0000001380)) getsockopt$sock_cred(r1, 0x1, 0x4d, 0x0, &(0x7f0000cab000)=0x2) r6 = socket$inet(0xa, 0x801, 0x84) connect$inet(r6, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r7, 0x81b21000) r8 = socket$vsock_stream(0x28, 0x1, 0x0) setsockopt$SO_ATTACH_FILTER(r8, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) listen(r6, 0x8) r9 = accept4(r6, 0x0, 0x0, 0x0) getsockopt$inet_sctp_SCTP_RTOINFO(r9, 0x84, 0x0, &(0x7f0000000000)={0x0, 0x9, 0x0, 0x5}, &(0x7f0000000040)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r9, 0x84, 0x23, &(0x7f0000000080)={r10, 0xafc}, 0x4) 401.963976ms ago: executing program 0 (id=769): bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x2, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffff97, 0x10, &(0x7f00000000c0), 0xfffffffffffffd27, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 295.325449ms ago: executing program 0 (id=770): r0 = accept(0xffffffffffffffff, 0x0, &(0x7f0000000000)) sendmsg$RDMA_NLDEV_CMD_SET(r0, &(0x7f0000000100)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x20, 0x1402, 0x300, 0x70bd27, 0x25dfdbfe, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x2}, @RDMA_NLDEV_ATTR_DEV_INDEX={0x8}]}, 0x20}, 0x1, 0x0, 0x0, 0x8000}, 0x40001) 204.701953ms ago: executing program 4 (id=771): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x2a, &(0x7f0000000600)={@link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x2}, @remote, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x1c, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0xa00, 0x4e20, 0x8}}}}}, 0x0) r2 = syz_genetlink_get_family_id$fou(&(0x7f0000000200), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000040), r3) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)={0x38, r4, 0x1, 0x0, 0x0, {}, [@NLBL_UNLABEL_A_IPV4ADDR={0x5, 0x4, @multicast1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'veth1_to_team\x00'}, @NLBL_UNLABEL_A_IPV4MASK={0x5, 0x5, @multicast1}]}, 0x38}}, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000000100)='illinois\x00', 0x9) sendmsg$FOU_CMD_ADD(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000080)={0x28, r2, 0x209, 0x0, 0x0, {}, [@FOU_ATTR_TYPE={0x5, 0x4, 0x2}, @FOU_ATTR_TYPE={0x5, 0x4, 0x3}, @FOU_ATTR_REMCSUM_NOPARTIAL={0x4}]}, 0x28}}, 0x0) 153.714748ms ago: executing program 0 (id=772): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x4, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_ARP_ALL_TARGETS={0x8, 0x1e, 0x1}]}}}]}, 0x3c}, 0x1, 0x2000000000000000}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000640)={0x1e, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000f9ffffff60122400000000009500000000000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) bind$bt_hci(r1, &(0x7f0000000000)={0x27}, 0x62) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a31000000002c000000030a01020000000000000000010000000900030028c21624000000000900010073797a310000000038000008050a01010008000000000000010020c119226b4000000073797a31000000000c000480080002401c0050000000000011000100000000000000000000fe0c4b7b0000000000000000cc66f069b7688e99efb89d88efa03f6d5573c117cd282d2d1b5ef17050760894022fd8925eceff7b82f31f3572a09e07e44bd251"], 0xac}}, 0x0) listen(r1, 0x3) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b405"], 0x0, 0x5, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x5, @void, @value}, 0x94) r3 = syz_init_net_socket$nfc_llcp(0x27, 0x1, 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$qrtr(0x2a, 0x2, 0x0) listen(r5, 0x2e81ecb5) r6 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000500)={0x3c, r6, 0x1, 0x0, 0x0, {0x39}, [@DEVLINK_ATTR_PORT_INDEX={0x8, 0x73}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}}, 0x0) bind$bt_hci(r3, &(0x7f0000000000)={0x27}, 0x62) 0s ago: executing program 4 (id=773): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='wlan1\x00', 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendmmsg$inet6(r0, &(0x7f0000001200)=[{{0x0, 0xbffe, 0x0}}], 0x1, 0x4044050) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.142' (ED25519) to the list of known hosts. [ 70.319874][ T5818] cgroup: Unknown subsys name 'net' [ 70.459983][ T5818] cgroup: Unknown subsys name 'cpuset' [ 70.468383][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.719303][ T1295] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.726031][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.095423][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.362051][ T5831] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.376690][ T5831] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.384651][ T5831] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.393111][ T5831] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.405863][ T5831] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.414143][ T5831] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.477462][ T5144] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.486318][ T5144] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.494151][ T5144] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.502168][ T5144] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.509883][ T5144] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 74.527508][ T5144] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.580186][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.588375][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.643518][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.651728][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.660140][ T5840] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.668134][ T5843] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.668319][ T5840] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.676318][ T5843] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.690415][ T5840] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.692472][ T5843] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.705380][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.706235][ T5843] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.722013][ T5144] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.725554][ T5843] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.729844][ T5144] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.743816][ T5144] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 74.757872][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 74.765867][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 75.002658][ T5832] chnl_net:caif_netlink_parms(): no params data found [ 75.128922][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 75.282049][ T5832] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.289957][ T5832] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.298000][ T5832] bridge_slave_0: entered allmulticast mode [ 75.305258][ T5832] bridge_slave_0: entered promiscuous mode [ 75.313799][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 75.350835][ T5832] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.358212][ T5832] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.365381][ T5832] bridge_slave_1: entered allmulticast mode [ 75.372441][ T5832] bridge_slave_1: entered promiscuous mode [ 75.383614][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 75.411470][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.418777][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.426294][ T5828] bridge_slave_0: entered allmulticast mode [ 75.433207][ T5828] bridge_slave_0: entered promiscuous mode [ 75.470215][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.479000][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.486569][ T5828] bridge_slave_1: entered allmulticast mode [ 75.493735][ T5828] bridge_slave_1: entered promiscuous mode [ 75.523763][ T5832] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.535144][ T5832] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.597171][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.610116][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 75.628149][ T5832] team0: Port device team_slave_0 added [ 75.641240][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.674700][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.684292][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.691794][ T5842] bridge_slave_0: entered allmulticast mode [ 75.699111][ T5842] bridge_slave_0: entered promiscuous mode [ 75.709657][ T5832] team0: Port device team_slave_1 added [ 75.749676][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.757110][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.764428][ T5842] bridge_slave_1: entered allmulticast mode [ 75.771770][ T5842] bridge_slave_1: entered promiscuous mode [ 75.814107][ T5828] team0: Port device team_slave_0 added [ 75.854220][ T5828] team0: Port device team_slave_1 added [ 75.881881][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.892920][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.900379][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.926536][ T5832] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.938858][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.946211][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.953410][ T5835] bridge_slave_0: entered allmulticast mode [ 75.960916][ T5835] bridge_slave_0: entered promiscuous mode [ 75.979141][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.986386][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.012649][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.035540][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.054850][ T5832] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.062030][ T5832] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.088338][ T5832] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.112373][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.120750][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.128384][ T5835] bridge_slave_1: entered allmulticast mode [ 76.135160][ T5835] bridge_slave_1: entered promiscuous mode [ 76.142583][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.149777][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.176218][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.187423][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.194516][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.203118][ T5836] bridge_slave_0: entered allmulticast mode [ 76.210567][ T5836] bridge_slave_0: entered promiscuous mode [ 76.219321][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.226586][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.233798][ T5836] bridge_slave_1: entered allmulticast mode [ 76.241418][ T5836] bridge_slave_1: entered promiscuous mode [ 76.262248][ T5842] team0: Port device team_slave_0 added [ 76.293887][ T5842] team0: Port device team_slave_1 added [ 76.321626][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.345953][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.365035][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.374373][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.400680][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.423388][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.444236][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.463137][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.470301][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.496783][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.517036][ T5144] Bluetooth: hci0: command tx timeout [ 76.562418][ T5836] team0: Port device team_slave_0 added [ 76.579768][ T5832] hsr_slave_0: entered promiscuous mode [ 76.586769][ T5832] hsr_slave_1: entered promiscuous mode [ 76.596516][ T5144] Bluetooth: hci1: command tx timeout [ 76.603639][ T5828] hsr_slave_0: entered promiscuous mode [ 76.611218][ T5828] hsr_slave_1: entered promiscuous mode [ 76.617560][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.625370][ T5828] Cannot create hsr debugfs directory [ 76.634305][ T5835] team0: Port device team_slave_0 added [ 76.642455][ T5836] team0: Port device team_slave_1 added [ 76.673305][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.680635][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.707311][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.719744][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.726831][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.752914][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.763689][ T5144] Bluetooth: hci2: command tx timeout [ 76.782028][ T5835] team0: Port device team_slave_1 added [ 76.836789][ T5837] Bluetooth: hci3: command tx timeout [ 76.844004][ T5144] Bluetooth: hci4: command tx timeout [ 76.856852][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.863830][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.889931][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.933601][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.940999][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.967152][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.992509][ T5842] hsr_slave_0: entered promiscuous mode [ 77.000827][ T5842] hsr_slave_1: entered promiscuous mode [ 77.009101][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.016885][ T5842] Cannot create hsr debugfs directory [ 77.079447][ T5836] hsr_slave_0: entered promiscuous mode [ 77.086346][ T5836] hsr_slave_1: entered promiscuous mode [ 77.092342][ T5836] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.100023][ T5836] Cannot create hsr debugfs directory [ 77.149645][ T5835] hsr_slave_0: entered promiscuous mode [ 77.156139][ T5835] hsr_slave_1: entered promiscuous mode [ 77.162252][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.170584][ T5835] Cannot create hsr debugfs directory [ 77.473142][ T5832] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.502181][ T5832] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.519368][ T5832] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.533085][ T5832] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.554053][ T5828] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.586608][ T5828] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.602742][ T5828] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.613371][ T5828] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.653664][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.673582][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.685451][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.716814][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.765122][ T5835] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.792653][ T5835] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.817688][ T5835] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.844569][ T5835] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.934298][ T5832] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.944842][ T5842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.981297][ T5842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.993208][ T5842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.016283][ T5842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 78.039597][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.073348][ T5832] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.104891][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.112196][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.129038][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.154027][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.162456][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.169719][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.209299][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.216516][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.225496][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.232773][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.291869][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.313471][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.351923][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.359121][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.379501][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.386814][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.422513][ T5828] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 78.433198][ T5828] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.514554][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.600248][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.607433][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.616304][ T5144] Bluetooth: hci0: command tx timeout [ 78.637461][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.660172][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.667394][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.676921][ T5144] Bluetooth: hci1: command tx timeout [ 78.781928][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.807687][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.835911][ T5144] Bluetooth: hci2: command tx timeout [ 78.862847][ T132] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.870082][ T132] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.916193][ T5144] Bluetooth: hci4: command tx timeout [ 78.916677][ T5837] Bluetooth: hci3: command tx timeout [ 78.937792][ T5832] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.972374][ T2900] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.979601][ T2900] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.002495][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.025367][ T5828] veth0_vlan: entered promiscuous mode [ 79.084969][ T5828] veth1_vlan: entered promiscuous mode [ 79.181638][ T5842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 79.203999][ T5832] veth0_vlan: entered promiscuous mode [ 79.221149][ T5836] veth0_vlan: entered promiscuous mode [ 79.251008][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.267836][ T5828] veth0_macvtap: entered promiscuous mode [ 79.278732][ T5836] veth1_vlan: entered promiscuous mode [ 79.289654][ T5832] veth1_vlan: entered promiscuous mode [ 79.311533][ T5828] veth1_macvtap: entered promiscuous mode [ 79.403794][ T5836] veth0_macvtap: entered promiscuous mode [ 79.429234][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.444620][ T5832] veth0_macvtap: entered promiscuous mode [ 79.455612][ T5836] veth1_macvtap: entered promiscuous mode [ 79.478392][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.493418][ T5832] veth1_macvtap: entered promiscuous mode [ 79.517950][ T5835] veth0_vlan: entered promiscuous mode [ 79.524542][ T5828] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.534353][ T5828] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.543246][ T5828] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.552360][ T5828] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.588899][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.600418][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.611832][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.623036][ T5836] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.633972][ T5836] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.648035][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.672960][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.683894][ T5836] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.696898][ T5836] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.712104][ T5836] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.722722][ T5836] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.747162][ T5835] veth1_vlan: entered promiscuous mode [ 79.759726][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.770802][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.781639][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.792304][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.804662][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.878730][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.890509][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.901560][ T5832] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.916164][ T5832] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.928192][ T5832] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.942447][ T5832] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.956534][ T5832] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.965347][ T5832] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.980832][ T5832] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.010200][ T5835] veth0_macvtap: entered promiscuous mode [ 80.063706][ T5835] veth1_macvtap: entered promiscuous mode [ 80.125872][ T132] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.133977][ T132] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.177957][ T3459] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.181860][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.192909][ T3459] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.204100][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.214808][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.230571][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.240666][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.251687][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.262942][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.275502][ T132] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.292122][ T132] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.313128][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.325100][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.339008][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.349706][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.365430][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.376008][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.387756][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.422997][ T5842] veth0_vlan: entered promiscuous mode [ 80.453951][ T5835] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.462888][ T5835] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.472823][ T5835] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.474638][ T5828] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 80.482206][ T5835] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.509535][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.529711][ T5842] veth1_vlan: entered promiscuous mode [ 80.536407][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.583854][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.612242][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.623417][ T5910] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 80.673891][ T5910] team0: Failed to send options change via netlink (err -105) [ 80.681786][ T5837] Bluetooth: hci0: command tx timeout [ 80.688161][ T5910] team0: Port device netdevsim0 added [ 80.689650][ T5911] netlink: 'syz.0.1': attribute type 10 has an invalid length. [ 80.703680][ T5911] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 80.716902][ T5911] team0: Failed to send options change via netlink (err -105) [ 80.724805][ T5911] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 80.736174][ T5911] team0: Port device netdevsim0 removed [ 80.749427][ T5911] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 80.765836][ T5837] Bluetooth: hci1: command tx timeout [ 80.778151][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.793498][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.883697][ T5842] veth0_macvtap: entered promiscuous mode [ 80.917078][ T5837] Bluetooth: hci2: command tx timeout [ 80.970736][ T5915] nbd: socks must be embedded in a SOCK_ITEM attr [ 80.980919][ T5842] veth1_macvtap: entered promiscuous mode [ 80.996347][ T5837] Bluetooth: hci3: command tx timeout [ 80.996590][ T5144] Bluetooth: hci4: command tx timeout [ 81.067589][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.100976][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.126259][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.148923][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.161939][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.175884][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.186364][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 81.197263][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.208669][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.227057][ T2900] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.249781][ T2900] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.255037][ T5923] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 81.258616][ T5925] IPVS: sync thread started: state = BACKUP, mcast_ifn = bridge_slave_1, syncid = 0, id = 0 [ 81.264581][ T5923] IPv6: NLM_F_CREATE should be set when creating new route [ 81.282146][ T5923] IPv6: NLM_F_CREATE should be set when creating new route [ 81.380897][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.436959][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.455819][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.482336][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.501331][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.514067][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.526702][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.547152][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.575492][ T5934] Cannot find add_set index 0 as target [ 81.579215][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.643182][ T5934] can: request_module (can-proto-5) failed. [ 81.698126][ T5842] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.707467][ T5842] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.727598][ T5842] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.741303][ T5842] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.767222][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.767941][ T5930] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8'. [ 81.796649][ T5930] netlink: 32 bytes leftover after parsing attributes in process `syz.2.8'. [ 81.807239][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.027487][ T5945] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.037026][ T5945] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.240226][ T5948] bridge_slave_0: left allmulticast mode [ 82.269197][ T5948] bridge_slave_0: left promiscuous mode [ 82.287575][ T5948] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.352019][ T5948] bridge_slave_1: left allmulticast mode [ 82.364793][ T5948] bridge_slave_1: left promiscuous mode [ 82.381035][ T5948] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.412457][ T5948] bond0: (slave bond_slave_0): Releasing backup interface [ 82.427412][ T5948] bond0: (slave bond_slave_1): Releasing backup interface [ 82.451985][ T5948] team0: Port device team_slave_0 removed [ 82.469726][ T5948] team0: Port device team_slave_1 removed [ 82.481646][ T5948] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.490742][ T5948] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.509528][ T5948] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 82.523736][ T5948] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 82.558201][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.567434][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.721702][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.756753][ T5144] Bluetooth: hci0: command tx timeout [ 82.779154][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.795511][ T5976] warning: `syz.2.18' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 82.829387][ T5978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17'. [ 82.840266][ T5144] Bluetooth: hci1: command tx timeout [ 82.846860][ T5978] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17'. [ 82.857272][ T5978] netlink: 8 bytes leftover after parsing attributes in process `syz.3.17'. [ 82.990903][ T5983] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.006261][ T5144] Bluetooth: hci2: command tx timeout [ 83.076399][ T5144] Bluetooth: hci3: command tx timeout [ 83.082616][ T5144] Bluetooth: hci4: command tx timeout [ 83.346566][ T5993] netlink: 1216 bytes leftover after parsing attributes in process `syz.4.5'. [ 83.384603][ T5993] openvswitch: netlink: Flow actions attr not present in new flow. [ 83.484999][ T5996] netlink: 1284 bytes leftover after parsing attributes in process `syz.1.22'. [ 83.643329][ T6008] netlink: 24 bytes leftover after parsing attributes in process `syz.2.25'. [ 83.689028][ T6012] netlink: 'syz.4.26': attribute type 4 has an invalid length. [ 83.866427][ T6022] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 83.890758][ T6020] syz.4.27 uses obsolete (PF_INET,SOCK_PACKET) [ 83.939295][ T6026] netlink: 24 bytes leftover after parsing attributes in process `syz.3.29'. [ 84.170781][ T6030] syz.0.31 (6030) used greatest stack depth: 18640 bytes left [ 84.478525][ T6042] Zero length message leads to an empty skb [ 84.528717][ T6046] netlink: 256 bytes leftover after parsing attributes in process `syz.2.36'. [ 84.579321][ T6046] Bluetooth: MGMT ver 1.23 [ 84.711484][ T6059] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 84.891273][ T6062] dvmrp0: entered allmulticast mode [ 85.050647][ T6073] syz.0.44[6073] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.051345][ T6073] syz.0.44[6073] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 85.186535][ T6079] xt_addrtype: ipv6 does not support BROADCAST matching [ 86.070640][ T6108] tipc: Started in network mode [ 86.104297][ T6108] tipc: Node identity aaaaaaaaaa3, cluster identity 4711 [ 86.152536][ T6108] tipc: Enabled bearer , priority 0 [ 86.575473][ T6127] xt_TPROXY: Can be used only with -p tcp or -p udp [ 86.676636][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 86.676696][ T5144] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 86.945381][ T6136] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 86.952735][ T6136] IPv6: NLM_F_CREATE should be set when creating new route [ 86.960137][ T6136] IPv6: NLM_F_CREATE should be set when creating new route [ 87.286182][ T5881] tipc: Node number set to 10136234 [ 88.755480][ T6205] __nla_validate_parse: 10 callbacks suppressed [ 88.755501][ T6205] netlink: 56 bytes leftover after parsing attributes in process `syz.1.81'. [ 88.844617][ T6205] netlink: 12 bytes leftover after parsing attributes in process `syz.1.81'. [ 88.935124][ T6205] netlink: 31 bytes leftover after parsing attributes in process `syz.1.81'. [ 88.954552][ T6209] netlink: 4 bytes leftover after parsing attributes in process `syz.2.82'. [ 88.972425][ T6205] netlink: 'syz.1.81': attribute type 3 has an invalid length. [ 89.033066][ T6205] netlink: 'syz.1.81': attribute type 2 has an invalid length. [ 89.097647][ T6205] netlink: 31 bytes leftover after parsing attributes in process `syz.1.81'. [ 89.227200][ T6205] netlink: 4 bytes leftover after parsing attributes in process `syz.1.81'. [ 89.817392][ T6240] netlink: 12 bytes leftover after parsing attributes in process `syz.3.91'. [ 90.201091][ T6260] netlink: 8 bytes leftover after parsing attributes in process `syz.3.96'. [ 90.726548][ T6278] netlink: 12 bytes leftover after parsing attributes in process `syz.3.103'. [ 90.746594][ T6280] netlink: del zone limit has 4 unknown bytes [ 90.871620][ T6285] netlink: 12 bytes leftover after parsing attributes in process `syz.1.106'. [ 92.208009][ T9] cfg80211: failed to load regulatory.db [ 92.670589][ T6351] netlink: 'syz.2.131': attribute type 1 has an invalid length. [ 93.536502][ T6376] netlink: 'syz.4.139': attribute type 1 has an invalid length. [ 93.705942][ T6383] openvswitch: netlink: Invalid VLAN frame [ 93.954171][ T6383] syzkaller1: entered promiscuous mode [ 93.981674][ T6383] syzkaller1: entered allmulticast mode [ 94.029885][ T35] syzkaller1: tun_net_xmit 70 [ 94.810720][ T6425] __nla_validate_parse: 5 callbacks suppressed [ 94.810742][ T6425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.160'. [ 95.211510][ T6442] raw_sendmsg: syz.4.166 forgot to set AF_INET. Fix it! [ 95.211598][ T6443] netlink: 8 bytes leftover after parsing attributes in process `syz.1.167'. [ 95.339049][ T6446] netlink: 56 bytes leftover after parsing attributes in process `syz.3.169'. [ 95.819602][ T6466] : renamed from ipvlan1 [ 96.294558][ T6493] netlink: 8 bytes leftover after parsing attributes in process `syz.2.175'. [ 96.430629][ T6493] netlink: 20 bytes leftover after parsing attributes in process `syz.2.175'. [ 98.043714][ T46] IPVS: starting estimator thread 0... [ 98.155924][ T6547] IPVS: using max 21 ests per chain, 50400 per kthread [ 98.229868][ T6555] netlink: 4 bytes leftover after parsing attributes in process `syz.3.191'. [ 98.282133][ T46] IPVS: starting estimator thread 0... [ 98.525854][ T6559] IPVS: using max 20 ests per chain, 48000 per kthread [ 99.218322][ T132] IPVS: stop unused estimator thread 0... [ 99.677877][ T6599] netlink: 8 bytes leftover after parsing attributes in process `syz.4.202'. [ 99.908587][ T6614] netlink: 76 bytes leftover after parsing attributes in process `syz.0.198'. [ 100.477674][ T6613] batadv1: entered allmulticast mode [ 101.826828][ T6673] netlink: 'syz.0.217': attribute type 1 has an invalid length. [ 101.900677][ T6673] 8021q: adding VLAN 0 to HW filter on device bond1 [ 102.028773][ T6673] veth5: entered promiscuous mode [ 102.049919][ T6673] bond1: (slave veth5): Enslaving as a backup interface with a down link [ 102.078371][ T6678] ip6gretap0: entered promiscuous mode [ 102.099759][ T6678] macsec1: entered promiscuous mode [ 102.124102][ T6678] ip6gretap0: left promiscuous mode [ 102.376346][ T6691] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.384092][ T6691] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.475581][ T6695] netlink: 28 bytes leftover after parsing attributes in process `syz.2.226'. [ 102.506145][ T6695] netlink: 28 bytes leftover after parsing attributes in process `syz.2.226'. [ 102.561423][ T6695] team0: entered promiscuous mode [ 102.585842][ T6695] team0: left promiscuous mode [ 102.747599][ T6702] netlink: 'syz.4.230': attribute type 1 has an invalid length. [ 102.919231][ T6706] batadv1: entered allmulticast mode [ 104.565313][ T5913] IPVS: starting estimator thread 0... [ 104.656880][ T6765] IPVS: using max 19 ests per chain, 45600 per kthread [ 104.893346][ T6778] netlink: 'syz.1.255': attribute type 29 has an invalid length. [ 104.907050][ T6778] netlink: 'syz.1.255': attribute type 29 has an invalid length. [ 104.923790][ T6778] netlink: 'syz.1.255': attribute type 29 has an invalid length. [ 105.113715][ T6783] netlink: 'syz.1.255': attribute type 29 has an invalid length. [ 105.192286][ T6781] veth7: entered promiscuous mode [ 105.701463][ T11] IPVS: stop unused estimator thread 0... [ 105.783151][ T6809] netlink: 'syz.2.266': attribute type 1 has an invalid length. [ 105.867843][ T6809] bond1: entered promiscuous mode [ 105.875838][ T6809] bond1: entered allmulticast mode [ 105.909005][ T6821] batadv1: entered allmulticast mode [ 105.971303][ T6823] tipc: Started in network mode [ 105.985733][ T6823] tipc: Node identity 7f000001, cluster identity 4711 [ 105.999283][ T6823] tipc: Enabled bearer , priority 10 [ 106.226000][ T6834] netlink: 'syz.1.271': attribute type 1 has an invalid length. [ 106.268776][ T6840] netlink: 4 bytes leftover after parsing attributes in process `syz.1.271'. [ 106.790100][ T6856] openvswitch: netlink: Message has 8 unknown bytes. [ 106.827660][ T6856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.278'. [ 106.841699][ T6856] netlink: 'syz.2.278': attribute type 12 has an invalid length. [ 107.118092][ T5912] tipc: Node number set to 2130706433 [ 107.215456][ T6874] netlink: 'syz.2.283': attribute type 1 has an invalid length. [ 109.464603][ T6864] netlink: 8 bytes leftover after parsing attributes in process `syz.4.281'. [ 109.498891][ T6871] netlink: 60 bytes leftover after parsing attributes in process `syz.1.282'. [ 109.580468][ T6874] bond2: entered promiscuous mode [ 109.610473][ T6874] bond2: entered allmulticast mode [ 109.642102][ T6876] batadv2: entered allmulticast mode [ 110.287220][ T6923] netlink: 'syz.4.297': attribute type 58 has an invalid length. [ 110.323700][ T6923] netlink: 20 bytes leftover after parsing attributes in process `syz.4.297'. [ 110.407520][ T6919] Bluetooth: hci0: Opcode 0x0401 failed: -112 [ 110.754838][ T6942] netlink: 'syz.3.303': attribute type 1 has an invalid length. [ 110.839165][ T6948] batadv1: entered allmulticast mode [ 110.861027][ T6949] netlink: 'syz.0.305': attribute type 4 has an invalid length. [ 110.911688][ T6949] netlink: 152 bytes leftover after parsing attributes in process `syz.0.305'. [ 111.020739][ T6942] bond1: entered promiscuous mode [ 111.049058][ T6942] bond1: entered allmulticast mode [ 111.104687][ T6949] : renamed from bond0 (while UP) [ 111.362118][ T6962] netlink: 'syz.0.310': attribute type 29 has an invalid length. [ 111.395413][ T6962] netlink: 'syz.0.310': attribute type 29 has an invalid length. [ 111.480966][ T6962] netlink: 'syz.0.310': attribute type 29 has an invalid length. [ 111.683130][ T6974] netlink: 'syz.1.315': attribute type 58 has an invalid length. [ 111.696548][ T6974] netlink: 20 bytes leftover after parsing attributes in process `syz.1.315'. [ 111.899950][ T6987] bpq0: entered allmulticast mode [ 112.281749][ T5837] Bluetooth: hci0: command 0x0c1a tx timeout [ 112.289106][ T5144] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 112.425987][ T6972] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 112.616762][ T7011] netlink: 48 bytes leftover after parsing attributes in process `syz.2.323'. [ 113.134049][ T7021] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.143312][ T7021] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.152173][ T7021] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.161594][ T7021] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 113.213971][ T7025] netlink: 'syz.1.338': attribute type 1 has an invalid length. [ 113.240987][ T7021] vxlan0: entered promiscuous mode [ 113.250257][ T7021] vxlan0: entered allmulticast mode [ 113.275345][ T7021] netdevsim netdevsim0 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.284444][ T7021] netdevsim netdevsim0 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.293557][ T7021] netdevsim netdevsim0 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.302904][ T7021] netdevsim netdevsim0 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.401928][ T7029] batadv1: entered allmulticast mode [ 113.417079][ T7026] netlink: 'syz.0.335': attribute type 39 has an invalid length. [ 113.460898][ T7032] netlink: 4 bytes leftover after parsing attributes in process `syz.2.340'. [ 113.524029][ T7036] netlink: 'syz.1.342': attribute type 1 has an invalid length. [ 113.621110][ T7039] veth3: entered promiscuous mode [ 113.629517][ T7039] bond2: (slave veth3): Enslaving as a backup interface with a down link [ 113.796528][ T7048] netlink: 24 bytes leftover after parsing attributes in process `syz.0.347'. [ 114.241848][ T7071] Driver unsupported XDP return value 0 on prog (id 57) dev N/A, expect packet loss! [ 114.366163][ T5144] Bluetooth: hci0: command 0x0c1a tx timeout [ 114.413230][ T7065] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.428952][ T7065] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.439823][ T7065] bond0 (unregistering): Released all slaves [ 114.644884][ T7083] netlink: 12 bytes leftover after parsing attributes in process `syz.0.360'. [ 116.435930][ T5144] Bluetooth: hci0: command 0x0c1a tx timeout [ 116.610828][ T7143] batadv2: entered allmulticast mode [ 116.651614][ T7147] netlink: 'syz.2.391': attribute type 1 has an invalid length. [ 116.750094][ T7147] veth5: entered promiscuous mode [ 116.760105][ T7147] bond3: (slave veth5): Enslaving as a backup interface with a down link [ 117.606222][ T7176] netlink: 4 bytes leftover after parsing attributes in process `syz.2.405'. [ 117.638628][ T7176] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 117.646099][ T7176] IPv6: NLM_F_CREATE should be set when creating new route [ 117.668759][ T7176] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 118.353999][ T9] IPVS: starting estimator thread 0... [ 118.465799][ T7207] IPVS: using max 20 ests per chain, 48000 per kthread [ 118.578940][ T7212] dccp_invalid_packet: P.Data Offset(0) too small [ 119.219103][ T7239] netlink: 'syz.3.430': attribute type 1 has an invalid length. [ 119.273081][ T7239] 8021q: adding VLAN 0 to HW filter on device bond2 [ 119.286038][ T7237] tipc: Enabling of bearer rejected, failed to enable media [ 119.330162][ T7242] vcan1: entered allmulticast mode [ 119.360077][ T7242] 8021q: adding VLAN 0 to HW filter on device bond2 [ 119.367980][ T7242] bond2: (slave vcan1): The slave device specified does not support setting the MAC address [ 119.433894][ T7242] bond2: (slave vcan1): Error -95 calling set_mac_address [ 120.406036][ T7280] tipc: Started in network mode [ 120.417100][ T7280] tipc: Node identity 9a782bcd189a, cluster identity 4711 [ 120.424494][ T7280] tipc: Enabled bearer , priority 0 [ 120.464264][ T7284] netlink: 'syz.4.449': attribute type 1 has an invalid length. [ 120.558118][ T7287] syzkaller0: entered promiscuous mode [ 120.567615][ T7287] syzkaller0: entered allmulticast mode [ 120.586515][ T7287] tipc: Resetting bearer [ 120.602197][ T7286] netlink: 'syz.2.451': attribute type 1 has an invalid length. [ 120.611367][ T7286] netlink: 224 bytes leftover after parsing attributes in process `syz.2.451'. [ 120.757690][ T7279] tipc: Resetting bearer [ 121.455999][ T5913] tipc: Node number set to 2195860429 [ 122.347308][ T7279] tipc: Disabling bearer [ 122.371034][ T7294] veth3: entered promiscuous mode [ 122.383300][ T7294] bond0: (slave veth3): Enslaving as a backup interface with a down link [ 122.957508][ T7328] netlink: 'syz.0.466': attribute type 1 has an invalid length. [ 123.029666][ T7331] netlink: 'syz.4.467': attribute type 1 has an invalid length. [ 123.139877][ T7319] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.154327][ T7319] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.284205][ T7319] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.298824][ T7319] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.308055][ T7319] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.317201][ T7319] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.363102][ T7319] batadv1: left allmulticast mode [ 123.372148][ T7319] veth3: left promiscuous mode [ 123.434151][ T7330] veth11: entered promiscuous mode [ 123.442560][ T7330] bond0: (slave veth11): Enslaving as a backup interface with a down link [ 123.480815][ T7331] bond1: entered promiscuous mode [ 123.486712][ T7331] bond1: entered allmulticast mode [ 123.525411][ T7334] batadv2: entered allmulticast mode [ 124.173606][ T7376] vlan2: entered promiscuous mode [ 124.380131][ T7385] netlink: 'syz.3.483': attribute type 1 has an invalid length. [ 124.402653][ T7385] bond3: entered promiscuous mode [ 124.408119][ T7385] bond3: entered allmulticast mode [ 124.423862][ T7385] batadv2: entered allmulticast mode [ 124.719054][ T7398] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 125.071523][ T7391] x_tables: duplicate underflow at hook 3 [ 125.112444][ T7411] openvswitch: netlink: Flow actions attr not present in new flow. [ 125.888011][ T7432] netlink: 'syz.1.497': attribute type 1 has an invalid length. [ 125.937057][ T7432] bond3: entered promiscuous mode [ 125.942171][ T7432] bond3: entered allmulticast mode [ 125.954895][ T7432] batadv2: entered allmulticast mode [ 126.494776][ T7464] sctp: [Deprecated]: syz.2.508 (pid 7464) Use of int in maxseg socket option. [ 126.494776][ T7464] Use struct sctp_assoc_value instead [ 126.585225][ T7464] sctp: [Deprecated]: syz.2.508 (pid 7464) Use of int in maxseg socket option. [ 126.585225][ T7464] Use struct sctp_assoc_value instead [ 126.694637][ T7471] netlink: 'syz.4.511': attribute type 1 has an invalid length. [ 126.778935][ T7471] bond2: entered promiscuous mode [ 126.784018][ T7471] bond2: entered allmulticast mode [ 126.838542][ T7476] batadv3: entered allmulticast mode [ 127.590057][ T7512] netlink: 40 bytes leftover after parsing attributes in process `syz.4.529'. [ 127.610570][ T7512] netlink: 88 bytes leftover after parsing attributes in process `syz.4.529'. [ 127.940648][ T7525] netlink: 'syz.2.534': attribute type 1 has an invalid length. [ 127.993688][ T7525] 8021q: adding VLAN 0 to HW filter on device bond4 [ 128.047908][ T7525] veth7: entered promiscuous mode [ 128.067584][ T7525] bond4: (slave veth7): Enslaving as a backup interface with a down link [ 128.116948][ T7534] netlink: 4 bytes leftover after parsing attributes in process `syz.4.537'. [ 129.147902][ T7578] netlink: 8 bytes leftover after parsing attributes in process `syz.4.551'. [ 129.648063][ T7597] netlink: 'syz.3.560': attribute type 9 has an invalid length. [ 129.648775][ T7596] netlink: 24 bytes leftover after parsing attributes in process `syz.0.561'. [ 130.380201][ T7634] x_tables: duplicate underflow at hook 3 [ 130.380815][ T7632] netlink: 'syz.0.576': attribute type 1 has an invalid length. [ 130.454503][ T7639] 8021q: adding VLAN 0 to HW filter on device bond2 [ 130.636503][ T7632] veth15: entered promiscuous mode [ 130.680392][ T7632] bond2: (slave veth15): Enslaving as a backup interface with a down link [ 130.899701][ T7655] netlink: 40 bytes leftover after parsing attributes in process `syz.0.585'. [ 130.999346][ T7659] netlink: 8 bytes leftover after parsing attributes in process `syz.1.583'. [ 131.246512][ T7665] netlink: 36 bytes leftover after parsing attributes in process `syz.1.588'. [ 131.420175][ T7669] netlink: 'syz.0.590': attribute type 1 has an invalid length. [ 131.500734][ T7674] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 131.529067][ T7669] bond3: entered promiscuous mode [ 131.534504][ T7669] 8021q: adding VLAN 0 to HW filter on device bond3 [ 131.572520][ T7677] netlink: 3 bytes leftover after parsing attributes in process `syz.0.590'. [ 131.620471][ T7676] syzkaller1: entered promiscuous mode [ 131.626802][ T7676] syzkaller1: entered allmulticast mode [ 131.642830][ T7677] batadv1: entered allmulticast mode [ 131.662026][ T7677] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 131.722812][ T7674] xt_CT: No such helper "pptp" [ 131.731300][ T7677] bond3: (slave batadv1): making interface the new active one [ 131.773245][ T7677] batadv1: entered promiscuous mode [ 131.827300][ T7677] bond3: (slave batadv1): Enslaving as an active interface with an up link [ 132.132046][ T7695] netlink: 'syz.2.598': attribute type 1 has an invalid length. [ 132.172751][ T7695] netlink: 224 bytes leftover after parsing attributes in process `syz.2.598'. [ 132.195020][ T7697] netlink: 'syz.4.597': attribute type 1 has an invalid length. [ 132.710294][ T7719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.608'. [ 132.722902][ T7716] batadv3: entered allmulticast mode [ 133.161067][ T1295] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.514900][ T7747] wg1: entered promiscuous mode [ 133.520626][ T7747] vlan2: entered promiscuous mode [ 133.562962][ T7747] wg1: left promiscuous mode [ 133.893507][ T7756] veth9: entered promiscuous mode [ 134.622921][ T7784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.635'. [ 134.849782][ T7793] batadv3: entered allmulticast mode [ 135.005167][ T7799] netlink: 'syz.1.643': attribute type 1 has an invalid length. [ 135.152274][ T7799] 8021q: adding VLAN 0 to HW filter on device bond4 [ 135.219890][ T7802] geneve2: entered allmulticast mode [ 135.227374][ T7802] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.236955][ T7802] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.246799][ T7802] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.263918][ T7802] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 135.279576][ T7802] bond4: (slave geneve2): making interface the new active one [ 135.289668][ T7802] bond4: (slave geneve2): Enslaving as an active interface with an up link [ 135.406852][ T7810] delete_channel: no stack [ 135.506754][ T7813] macvlan2: entered promiscuous mode [ 135.554837][ T7813] bond0: entered promiscuous mode [ 135.581725][ T7816] xt_CT: No such helper "snmp" [ 135.600651][ T7813] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 136.094762][ T7839] sit0: entered promiscuous mode [ 136.123618][ T7839] netlink: 'syz.3.659': attribute type 1 has an invalid length. [ 136.160625][ T7839] netlink: 1 bytes leftover after parsing attributes in process `syz.3.659'. [ 136.264262][ T7845] netlink: 12 bytes leftover after parsing attributes in process `syz.1.661'. [ 136.453205][ T7854] FAULT_INJECTION: forcing a failure. [ 136.453205][ T7854] name failslab, interval 1, probability 0, space 0, times 1 [ 136.466514][ T7854] CPU: 0 UID: 0 PID: 7854 Comm: syz.0.665 Not tainted 6.13.0-syzkaller-04128-gf7bf624b1fed #0 [ 136.466542][ T7854] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 136.466558][ T7854] Call Trace: [ 136.466565][ T7854] [ 136.466573][ T7854] dump_stack_lvl+0x241/0x360 [ 136.466625][ T7854] ? __pfx_dump_stack_lvl+0x10/0x10 [ 136.466656][ T7854] ? __pfx__printk+0x10/0x10 [ 136.466685][ T7854] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 136.466718][ T7854] ? __pfx___might_resched+0x10/0x10 [ 136.466746][ T7854] should_fail_ex+0x3b0/0x4e0 [ 136.466773][ T7854] should_failslab+0xac/0x100 [ 136.466802][ T7854] kmem_cache_alloc_node_noprof+0x77/0x380 [ 136.466831][ T7854] ? __alloc_skb+0x1c3/0x440 [ 136.466857][ T7854] __alloc_skb+0x1c3/0x440 [ 136.466883][ T7854] ? __pfx___alloc_skb+0x10/0x10 [ 136.466907][ T7854] ? netlink_autobind+0xd6/0x2f0 [ 136.466930][ T7854] ? netlink_autobind+0x2b0/0x2f0 [ 136.466960][ T7854] netlink_sendmsg+0x638/0xcb0 [ 136.466996][ T7854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.467025][ T7854] ? aa_sock_msg_perm+0x91/0x160 [ 136.467053][ T7854] ? __pfx_netlink_sendmsg+0x10/0x10 [ 136.467084][ T7854] __sock_sendmsg+0x221/0x270 [ 136.467117][ T7854] ____sys_sendmsg+0x52a/0x7e0 [ 136.467155][ T7854] ? __pfx_____sys_sendmsg+0x10/0x10 [ 136.467177][ T7854] ? __fget_files+0x2a/0x410 [ 136.467210][ T7854] ? __fget_files+0x2a/0x410 [ 136.467249][ T7854] __sys_sendmsg+0x269/0x350 [ 136.467279][ T7854] ? __pfx___sys_sendmsg+0x10/0x10 [ 136.467316][ T7854] ? do_sys_openat2+0x17a/0x1d0 [ 136.467373][ T7854] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 136.467406][ T7854] ? do_syscall_64+0x100/0x230 [ 136.467430][ T7854] ? do_syscall_64+0xb6/0x230 [ 136.467452][ T7854] do_syscall_64+0xf3/0x230 [ 136.467472][ T7854] ? clear_bhb_loop+0x35/0x90 [ 136.467499][ T7854] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 136.467526][ T7854] RIP: 0033:0x7fa60e98cda9 [ 136.467548][ T7854] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 136.467564][ T7854] RSP: 002b:00007fa60f855038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 136.467593][ T7854] RAX: ffffffffffffffda RBX: 00007fa60eba5fa0 RCX: 00007fa60e98cda9 [ 136.467607][ T7854] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 136.467618][ T7854] RBP: 00007fa60f855090 R08: 0000000000000000 R09: 0000000000000000 [ 136.467630][ T7854] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 136.467641][ T7854] R13: 0000000000000000 R14: 00007fa60eba5fa0 R15: 00007ffdd1fdda58 [ 136.467672][ T7854] [ 137.175926][ T7862] netlink: 'syz.4.669': attribute type 9 has an invalid length. [ 137.290260][ T7867] netlink: 4 bytes leftover after parsing attributes in process `syz.2.671'. [ 138.342759][ T7905] FAULT_INJECTION: forcing a failure. [ 138.342759][ T7905] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 138.386034][ T7905] CPU: 0 UID: 0 PID: 7905 Comm: syz.2.689 Not tainted 6.13.0-syzkaller-04128-gf7bf624b1fed #0 [ 138.386066][ T7905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 138.386078][ T7905] Call Trace: [ 138.386086][ T7905] [ 138.386094][ T7905] dump_stack_lvl+0x241/0x360 [ 138.386134][ T7905] ? __pfx_dump_stack_lvl+0x10/0x10 [ 138.386165][ T7905] ? __pfx__printk+0x10/0x10 [ 138.386196][ T7905] ? __pfx_lock_release+0x10/0x10 [ 138.386234][ T7905] should_fail_ex+0x3b0/0x4e0 [ 138.386261][ T7905] _copy_from_user+0x2d/0xb0 [ 138.386292][ T7905] copy_msghdr_from_user+0xae/0x680 [ 138.386330][ T7905] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 138.386359][ T7905] ? __fget_files+0x2a/0x410 [ 138.386393][ T7905] ? __fget_files+0x2a/0x410 [ 138.386432][ T7905] __sys_sendmsg+0x209/0x350 [ 138.386463][ T7905] ? __pfx___sys_sendmsg+0x10/0x10 [ 138.386500][ T7905] ? do_sys_openat2+0x17a/0x1d0 [ 138.386558][ T7905] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 138.386586][ T7905] ? do_syscall_64+0x100/0x230 [ 138.386610][ T7905] ? do_syscall_64+0xb6/0x230 [ 138.386633][ T7905] do_syscall_64+0xf3/0x230 [ 138.386654][ T7905] ? clear_bhb_loop+0x35/0x90 [ 138.386681][ T7905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 138.386704][ T7905] RIP: 0033:0x7f39ed18cda9 [ 138.386722][ T7905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 138.386739][ T7905] RSP: 002b:00007f39ee017038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 138.386762][ T7905] RAX: ffffffffffffffda RBX: 00007f39ed3a5fa0 RCX: 00007f39ed18cda9 [ 138.386778][ T7905] RDX: 0000000000000080 RSI: 00000000200002c0 RDI: 0000000000000003 [ 138.386791][ T7905] RBP: 00007f39ee017090 R08: 0000000000000000 R09: 0000000000000000 [ 138.386804][ T7905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 138.386816][ T7905] R13: 0000000000000000 R14: 00007f39ed3a5fa0 R15: 00007ffd81b2e868 [ 138.386847][ T7905] [ 139.109748][ T7926] netlink: 12 bytes leftover after parsing attributes in process `syz.0.697'. [ 139.313203][ T7932] : renamed from ipvlan1 [ 139.385376][ T7934] netlink: 'syz.0.701': attribute type 1 has an invalid length. [ 139.465280][ T7934] veth17: entered promiscuous mode [ 139.687255][ T7941] xt_hashlimit: overflow, rate too high: 0 [ 139.985522][ T7951] netlink: 12 bytes leftover after parsing attributes in process `syz.3.709'. [ 140.159676][ T7961] netlink: 'syz.2.713': attribute type 1 has an invalid length. [ 140.230292][ T7970] netlink: 4 bytes leftover after parsing attributes in process `syz.0.716'. [ 140.323098][ T7973] xt_limit: Overflow, try lower: 0/0 [ 140.341515][ T7961] veth9: entered promiscuous mode [ 140.357737][ T7975] FAULT_INJECTION: forcing a failure. [ 140.357737][ T7975] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 140.400179][ T7975] CPU: 1 UID: 0 PID: 7975 Comm: syz.3.718 Not tainted 6.13.0-syzkaller-04128-gf7bf624b1fed #0 [ 140.400209][ T7975] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 140.400221][ T7975] Call Trace: [ 140.400228][ T7975] [ 140.400237][ T7975] dump_stack_lvl+0x241/0x360 [ 140.400275][ T7975] ? __pfx_dump_stack_lvl+0x10/0x10 [ 140.400305][ T7975] ? __pfx__printk+0x10/0x10 [ 140.400335][ T7975] ? __pfx_lock_release+0x10/0x10 [ 140.400371][ T7975] should_fail_ex+0x3b0/0x4e0 [ 140.400396][ T7975] _copy_from_iter+0x1e9/0x1c20 [ 140.400423][ T7975] ? __virt_addr_valid+0x183/0x530 [ 140.400461][ T7975] ? __alloc_skb+0x28f/0x440 [ 140.400482][ T7975] ? __pfx__copy_from_iter+0x10/0x10 [ 140.400511][ T7975] ? __virt_addr_valid+0x183/0x530 [ 140.400536][ T7975] ? __virt_addr_valid+0x183/0x530 [ 140.400561][ T7975] ? __virt_addr_valid+0x45f/0x530 [ 140.400588][ T7975] ? __phys_addr_symbol+0x2f/0x70 [ 140.400619][ T7975] ? __check_object_size+0x47a/0x730 [ 140.400654][ T7975] netlink_sendmsg+0x73d/0xcb0 [ 140.400690][ T7975] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.400719][ T7975] ? aa_sock_msg_perm+0x91/0x160 [ 140.400758][ T7975] ? __pfx_netlink_sendmsg+0x10/0x10 [ 140.400778][ T7975] __sock_sendmsg+0x221/0x270 [ 140.400809][ T7975] ____sys_sendmsg+0x52a/0x7e0 [ 140.400839][ T7975] ? __pfx_____sys_sendmsg+0x10/0x10 [ 140.400859][ T7975] ? __fget_files+0x2a/0x410 [ 140.400889][ T7975] ? __fget_files+0x2a/0x410 [ 140.400924][ T7975] __sys_sendmsg+0x269/0x350 [ 140.400951][ T7975] ? __pfx___sys_sendmsg+0x10/0x10 [ 140.400985][ T7975] ? do_sys_openat2+0x17a/0x1d0 [ 140.401037][ T7975] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 140.401063][ T7975] ? do_syscall_64+0x100/0x230 [ 140.401085][ T7975] ? do_syscall_64+0xb6/0x230 [ 140.401105][ T7975] do_syscall_64+0xf3/0x230 [ 140.401123][ T7975] ? clear_bhb_loop+0x35/0x90 [ 140.401148][ T7975] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 140.401168][ T7975] RIP: 0033:0x7f0a2b38cda9 [ 140.401184][ T7975] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 140.401199][ T7975] RSP: 002b:00007f0a2c1c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 140.401224][ T7975] RAX: ffffffffffffffda RBX: 00007f0a2b5a5fa0 RCX: 00007f0a2b38cda9 [ 140.401237][ T7975] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 140.401249][ T7975] RBP: 00007f0a2c1c1090 R08: 0000000000000000 R09: 0000000000000000 [ 140.401259][ T7975] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 140.401270][ T7975] R13: 0000000000000000 R14: 00007f0a2b5a5fa0 R15: 00007fff8cfbd508 [ 140.401297][ T7975] [ 141.256679][ T8005] netlink: 8 bytes leftover after parsing attributes in process `syz.2.729'. [ 141.303876][ T8012] FAULT_INJECTION: forcing a failure. [ 141.303876][ T8012] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 141.305805][ T8005] netlink: 24 bytes leftover after parsing attributes in process `syz.2.729'. [ 141.345714][ T8012] CPU: 1 UID: 0 PID: 8012 Comm: syz.4.730 Not tainted 6.13.0-syzkaller-04128-gf7bf624b1fed #0 [ 141.345751][ T8012] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 141.345763][ T8012] Call Trace: [ 141.345770][ T8012] [ 141.345778][ T8012] dump_stack_lvl+0x241/0x360 [ 141.345816][ T8012] ? __pfx_dump_stack_lvl+0x10/0x10 [ 141.345845][ T8012] ? __pfx__printk+0x10/0x10 [ 141.345878][ T8012] ? snprintf+0xda/0x120 [ 141.345908][ T8012] should_fail_ex+0x3b0/0x4e0 [ 141.345934][ T8012] _copy_to_user+0x31/0xb0 [ 141.345966][ T8012] simple_read_from_buffer+0xca/0x150 [ 141.345998][ T8012] proc_fail_nth_read+0x1e9/0x250 [ 141.346028][ T8012] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 141.346059][ T8012] ? rw_verify_area+0x55e/0x6f0 [ 141.346079][ T8012] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 141.346108][ T8012] vfs_read+0x1fc/0xb70 [ 141.346131][ T8012] ? fdget_pos+0x254/0x320 [ 141.346161][ T8012] ? __pfx___mutex_lock+0x10/0x10 [ 141.346182][ T8012] ? __pfx_vfs_read+0x10/0x10 [ 141.346207][ T8012] ? __fget_files+0x2a/0x410 [ 141.346238][ T8012] ? __fget_files+0x395/0x410 [ 141.346265][ T8012] ? __fget_files+0x2a/0x410 [ 141.346304][ T8012] ksys_read+0x18f/0x2b0 [ 141.346329][ T8012] ? __pfx_ksys_read+0x10/0x10 [ 141.346351][ T8012] ? do_syscall_64+0x100/0x230 [ 141.346375][ T8012] ? do_syscall_64+0xb6/0x230 [ 141.346397][ T8012] do_syscall_64+0xf3/0x230 [ 141.346417][ T8012] ? clear_bhb_loop+0x35/0x90 [ 141.346443][ T8012] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 141.346465][ T8012] RIP: 0033:0x7fd34d78b7bc [ 141.346482][ T8012] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 141.346499][ T8012] RSP: 002b:00007fd34e53b030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 141.346521][ T8012] RAX: ffffffffffffffda RBX: 00007fd34d9a6080 RCX: 00007fd34d78b7bc [ 141.346535][ T8012] RDX: 000000000000000f RSI: 00007fd34e53b0a0 RDI: 0000000000000005 [ 141.346548][ T8012] RBP: 00007fd34e53b090 R08: 0000000000000000 R09: 0000000000000000 [ 141.346560][ T8012] R10: 0000000000002000 R11: 0000000000000246 R12: 0000000000000001 [ 141.346572][ T8012] R13: 0000000000000000 R14: 00007fd34d9a6080 R15: 00007ffec4cc9088 [ 141.346602][ T8012] [ 142.082185][ T8038] netlink: 'syz.2.742': attribute type 10 has an invalid length. [ 142.471392][ T8048] netlink: 'syz.2.746': attribute type 1 has an invalid length. [ 142.501016][ T8048] veth11: entered promiscuous mode [ 142.514812][ T8048] bond0: (slave veth11): Enslaving as an active interface with an up link [ 142.948281][ T8066] vlan2: entered promiscuous mode [ 143.020941][ T8063] netlink: 36 bytes leftover after parsing attributes in process `syz.3.752'. [ 143.048229][ T8063] netlink: 16 bytes leftover after parsing attributes in process `syz.3.752'. [ 143.080319][ T8063] netlink: 36 bytes leftover after parsing attributes in process `syz.3.752'. [ 143.136394][ T8063] netlink: 36 bytes leftover after parsing attributes in process `syz.3.752'. [ 143.470084][ T8090] netlink: 12 bytes leftover after parsing attributes in process `syz.3.760'. [ 143.621517][ T8097] tipc: Started in network mode [ 143.626591][ T8097] tipc: Node identity 127a12201bfa, cluster identity 4711 [ 143.635482][ T8097] tipc: Enabled bearer , priority 0 [ 143.778288][ T8097] syzkaller0: entered promiscuous mode [ 143.785723][ T8097] syzkaller0: entered allmulticast mode [ 143.792216][ T8097] tipc: Resetting bearer [ 143.804708][ T8096] tipc: Resetting bearer [ 144.458115][ T8118] netlink: 'syz.0.772': attribute type 30 has an invalid length. [ 144.565654][ C0] [ 144.568036][ C0] ============================= [ 144.572870][ C0] [ BUG: Invalid wait context ] [ 144.577698][ C0] 6.13.0-syzkaller-04128-gf7bf624b1fed #0 Not tainted [ 144.584454][ C0] ----------------------------- [ 144.589282][ C0] syz-executor/5818 is trying to lock: [ 144.594732][ C0] ffff88813fffc298 (&zone->lock){-.-.}-{3:3}, at: __rmqueue_pcplist+0x4a2/0x2a90 [ 144.603868][ C0] other info that might help us debug this: [ 144.609739][ C0] context-{2:2} [ 144.613189][ C0] 2 locks held by syz-executor/5818: [ 144.618450][ C0] #0: ffff8880b863e8d8 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 144.628377][ C0] #1: ffff8880b8644958 (&pcp->lock){+.+.}-{3:3}, at: get_page_from_freelist+0x7d3/0x37a0 [ 144.638295][ C0] stack backtrace: [ 144.641996][ C0] CPU: 0 UID: 0 PID: 5818 Comm: syz-executor Not tainted 6.13.0-syzkaller-04128-gf7bf624b1fed #0 [ 144.642013][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 144.642021][ C0] Call Trace: [ 144.642027][ C0] [ 144.642033][ C0] dump_stack_lvl+0x241/0x360 [ 144.642056][ C0] ? __pfx_dump_stack_lvl+0x10/0x10 [ 144.642075][ C0] ? __pfx__printk+0x10/0x10 [ 144.642097][ C0] __lock_acquire+0x15a8/0x2100 [ 144.642121][ C0] lock_acquire+0x1ed/0x550 [ 144.642137][ C0] ? __rmqueue_pcplist+0x4a2/0x2a90 [ 144.642154][ C0] ? 0xffffffffa0003b40 [ 144.642165][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 144.642182][ C0] ? __pfx_validate_chain+0x10/0x10 [ 144.642202][ C0] ? kernel_text_address+0xa7/0xe0 [ 144.642223][ C0] ? __kernel_text_address+0xd/0x40 [ 144.642246][ C0] ? unwind_get_return_address+0x4d/0x90 [ 144.642267][ C0] _raw_spin_lock_irqsave+0xd5/0x120 [ 144.642287][ C0] ? __rmqueue_pcplist+0x4a2/0x2a90 [ 144.642302][ C0] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 144.642325][ C0] __rmqueue_pcplist+0x4a2/0x2a90 [ 144.642354][ C0] get_page_from_freelist+0x886/0x37a0 [ 144.642386][ C0] __alloc_pages_noprof+0x292/0x710 [ 144.642403][ C0] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 144.642431][ C0] ? 0xffffffffa0003b40 [ 144.642441][ C0] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 144.642456][ C0] ? __kernel_text_address+0xd/0x40 [ 144.642475][ C0] ? unwind_get_return_address+0x4d/0x90 [ 144.642491][ C0] alloc_pages_mpol_noprof+0x3e1/0x780 [ 144.642512][ C0] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 144.642531][ C0] ? stack_trace_save+0x118/0x1d0 [ 144.642544][ C0] ? alloc_pages_noprof+0x43/0x170 [ 144.642562][ C0] stack_depot_save_flags+0x72d/0x940 [ 144.642579][ C0] kasan_save_stack+0x4f/0x60 [ 144.642594][ C0] ? kasan_save_stack+0x3f/0x60 [ 144.642608][ C0] ? __kasan_record_aux_stack+0xac/0xc0 [ 144.642620][ C0] ? task_work_add+0xd9/0x490 [ 144.642636][ C0] ? task_tick_fair+0x30d/0x4e0 [ 144.642653][ C0] ? sched_tick+0x21e/0x660 [ 144.642670][ C0] ? update_process_times+0x276/0x2f0 [ 144.642685][ C0] ? tick_nohz_handler+0x37c/0x500 [ 144.642698][ C0] ? __hrtimer_run_queues+0x551/0xd30 [ 144.642716][ C0] ? hrtimer_interrupt+0x403/0xa40 [ 144.642734][ C0] ? __sysvec_apic_timer_interrupt+0x110/0x420 [ 144.642750][ C0] ? sysvec_apic_timer_interrupt+0x52/0xc0 [ 144.642768][ C0] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 144.642795][ C0] ? __phys_addr+0xba/0x170 [ 144.642812][ C0] __kasan_record_aux_stack+0xac/0xc0 [ 144.642825][ C0] task_work_add+0xd9/0x490 [ 144.642844][ C0] ? __pfx_task_work_add+0x10/0x10 [ 144.642866][ C0] task_tick_fair+0x30d/0x4e0 [ 144.642885][ C0] sched_tick+0x21e/0x660 [ 144.642904][ C0] ? acct_account_cputime+0xd3/0x210 [ 144.642920][ C0] update_process_times+0x276/0x2f0 [ 144.642936][ C0] tick_nohz_handler+0x37c/0x500 [ 144.642950][ C0] ? __pfx_tick_nohz_handler+0x10/0x10 [ 144.642963][ C0] __hrtimer_run_queues+0x551/0xd30 [ 144.642982][ C0] ? ktime_get_update_offsets_now+0x2d/0x3b0 [ 144.643003][ C0] ? __pfx___hrtimer_run_queues+0x10/0x10 [ 144.643022][ C0] ? read_tsc+0x9/0x20 [ 144.643033][ C0] ? ktime_get_update_offsets_now+0x38e/0x3b0 [ 144.643050][ C0] hrtimer_interrupt+0x403/0xa40 [ 144.643076][ C0] __sysvec_apic_timer_interrupt+0x110/0x420 [ 144.643094][ C0] sysvec_apic_timer_interrupt+0x52/0xc0 [ 144.643113][ C0] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 144.643128][ C0] RIP: 0033:0x7f31c7875a6d [ 144.643139][ C0] Code: bd 30 fd ff ff 0f 1f 84 00 00 00 00 00 48 8b 85 58 fd ff ff 49 8b 5d 00 48 8b 88 18 01 00 00 4c 8b b8 f8 00 00 00 0f b6 43 48 <48> 89 8d 50 fd ff ff 89 c2 83 e2 fd 80 fa 01 75 34 48 83 bb a0 00 [ 144.643149][ C0] RSP: 002b:00007ffc9fe0df60 EFLAGS: 00000206 [ 144.643160][ C0] RAX: 0000000000000003 RBX: 0000555582fd6c50 RCX: 0000555582fd9350 [ 144.643168][ C0] RDX: 00005550d7a51512 RSI: 0000555582fbfe90 RDI: 0000000000000002 [ 144.643177][ C0] RBP: 00007ffc9fe0e250 R08: 0000000000000007 R09: 0000555582fd8398 [ 144.643185][ C0] R10: d89287b10458c22c R11: 00007ffc9fe0e460 R12: 00007ffc9fe0e2b0 [ 144.643193][ C0] R13: 0000555582fd8370 R14: 00007ffc9fe0dfd0 R15: 0000555582fd5e60 [ 144.643207][ C0] [ 145.054330][ T5880] tipc: Node number set to 159388192 [ 146.310055][ T8096] tipc: Disabling bearer