last executing test programs: 3.166337419s ago: executing program 3 (id=944): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380100001a00010000000000000000e07e010000000000000000000000000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe880000000000000000000000000001000000002b000000fc02000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000348d6331000000000000000004000000020000000000000000000000480003006465666c61746500"/240], 0x138}}, 0x0) (async) sendmsg$nl_xfrm(r0, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f00000000c0)=ANY=[@ANYBLOB="380100001a00010000000000000000e07e010000000000000000000000000000ac1e000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe880000000000000000000000000001000000002b000000fc02000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000348d6331000000000000000004000000020000000000000000000000480003006465666c61746500"/240], 0x138}}, 0x0) accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60) (async) r1 = accept$nfc_llcp(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000080)=0x60) r2 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r2, 0x10d, 0x1, &(0x7f0000000000), &(0x7f0000000080)=0x4) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r2, 0x81f8943c, &(0x7f0000000200)={0x0, ""/256, 0x0}) ioctl$BTRFS_IOC_TREE_SEARCH(r0, 0xd0009411, &(0x7f0000000bc0)={{r3, 0x401, 0x0, 0x3, 0xfffffffffffffffd, 0x6, 0x6, 0xf, 0x5, 0x8, 0x8, 0xf4d, 0x9, 0x3, 0xfffffffffffffff9}}) ioctl$BTRFS_IOC_INO_LOOKUP(r1, 0xd0009412, &(0x7f0000001bc0)={r4, 0x9}) 3.004279792s ago: executing program 3 (id=946): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="1800000007140100000000000000000005006000b8"], 0x18}}, 0x0) r1 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(r1, 0x6, 0x3, 0x0, &(0x7f0000000400)) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x421, 0x0, 0x0, {}, [@IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x4}}}]}, 0x40}}, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000b00)=ANY=[@ANYBLOB="b40800000000000073114d00000000008510000002000000b7000000000000009500c200000000009500001200000000e753b7e711d398f1d5dbdece896b2c35f697e24f"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) socket$key(0xf, 0x3, 0x2) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x2, 0x4, 0x4, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000600)=@base={0xd, 0x4, 0x4, 0x9, 0x150, r4}, 0x48) getsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x20, &(0x7f0000000000)={@broadcast, @rand_addr, 0x0}, &(0x7f00000000c0)=0xc) splice(r4, &(0x7f0000000200)=0x2b6, r2, &(0x7f0000000240)=0x5, 0x8, 0xa) ioctl$F2FS_IOC_MOVE_RANGE(0xffffffffffffffff, 0xc020f509, &(0x7f0000000100)={r3, 0xf, 0x1, 0x8}) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x8ac, 0x4b8e, 0x9, 0x808, r4, 0x5, '\x00', r5, r6, 0x0, 0x0, 0x1, 0xe}, 0x48) 2.705282518s ago: executing program 3 (id=949): r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f00000004c0), &(0x7f0000000840)}, 0x20) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x2c, 0x0, 0xb, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8880) sendmmsg$inet(r0, &(0x7f0000003640)=[{{&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0}}, {{&(0x7f00000006c0)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="110000000000000000000000010000000000000000000000140000000000000011"], 0x50}}], 0x2, 0x0) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000040)={r0}) socket$inet6_udp(0xa, 0x2, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x10, 0x2}, 0x48) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000880)={{r1}, &(0x7f00000004c0), &(0x7f0000000840)}, 0x20) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000400)={0x2c, 0x0, 0xb, 0x3, 0x0, 0x0, {0xa, 0x0, 0x3}, [@NFTA_COMPAT_TYPE={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_COMPAT_REV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_COMPAT_NAME={0x5, 0x1, '\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x1}, 0x8880) (async) sendmmsg$inet(r0, &(0x7f0000003640)=[{{&(0x7f0000000000)={0x2, 0x4e22, @remote}, 0x10, 0x0}}, {{&(0x7f00000006c0)={0x2, 0x4e20, @rand_addr=0x64010100}, 0x10, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="110000000000000000000000010000000000000000000000140000000000000011"], 0x50}}], 0x2, 0x0) (async) socket$kcm(0x29, 0x2, 0x0) (async) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000000040)={r0}) (async) 2.543860213s ago: executing program 4 (id=950): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=@mpls_delroute={0x28, 0x19, 0x1, 0x70bd2c, 0x25dfdbfb, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1, 0x300}, [@RTA_MULTIPATH={0xc, 0x12, {0x1, 0x8}}]}, 0x28}}, 0x400c805) r1 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c0000005e00679a3601ffc491c6170000501d0000be7ba9bd"], 0x1c}}, 0x0) recvmmsg$unix(r1, &(0x7f0000002380)=[{{0x0, 0x4000000, &(0x7f0000001340)=[{&(0x7f00000002c0)=""/4096, 0xecc}], 0x1}}], 0x8, 0x0, 0x0) r2 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_buf(r2, 0x6, 0xd, &(0x7f0000000080)=""/66, &(0x7f0000000100)=0x42) r3 = socket(0x11, 0x800000003, 0x0) r4 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r4, 0x6, 0x2, &(0x7f00000000c0)=0x81, 0x4) bind$inet(r4, &(0x7f0000000000)={0x2, 0x4e21, @local}, 0x10) connect$inet(r4, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r4, &(0x7f0000000480)="fbbf0b5044e308cb7bd572aa2b42e9678bcf30eff9f3aed14dc94a114bd2b45956aebe2b108a87e865501a5f9e0383611afdd3f8bac3d5cfd7772a3ab48d0ba4b600731e357e38716c449fae7c28548a4f2105f44b8fd9b33041270ae01f1a405e3f650fc3b0926d481c364fca00000000000000006d3a3ede9fc738b8d86209c060161d5ddb5fcf3d09001117cdb9d055aa2d89fe3458720724853a876448d4a1fe9ef0569ad98a05ab5df763923b4e2c576e00000000000000000000000000000000002090666159e3075f7244cf4ec3d7814c0c934f44e200219e6dd7bc23397d5f2f2c76a5baddd0fd8c340362691ef226f7a0ac51b74b6be5ed6737948514cd466943d08eeb3895b80499da2b209da4f3ec5e3744ce3e863b0e04d0ec2f39edf50b6e08c4b47e448a35414763d687fbe3792ee15c5b9791310a346472723c100bf77a310b0ced8004b5ac6d48c40439f512e8ef34a53d65f55563f68136a577736ca5f6f66e01ef4ec2cdc8db34f6de50713adaa3f70189958263fddc1314f8a28ccdef6e1390c5fbaeadc3035d019f0dc75de307de6c0d010000000000000027083d1d5b4b013c503b863b560688d94de886b6dc73d5da2dfeff4bed1a49a975a6c8dbb480e4415ddca5657a5a8e3b111015499e952bb5e8d8f60de3d688df7802c6e8b27b31fac4e199038b79a3999920e634a5af162a9581b0e6647e410700246548234acacf9cb43ab332a37bbc926c39897395c974fda31536be523bf4260300730ae6136fecae5f0fa6ab2df8d98128b24589e3bbe5230e07dc5e0d65cc397e3f8204d48e59e8e294a6d7008ba8fba28cd5009fe1a7c569ce740078bf1c7389a6ba0f89257f0eac417aac0d2d89b05ee5dafa2f1d936c87264d077b2c0d5abdbc64ce943f895dd4c2e9dd7393543d89b00dc6b3a25045d4ec932366c67dfad087fa8dc104644828440bdf67dd97ebccb3bd", 0xfffffea5, 0xc000, 0x0, 0xfffffcef) recvmmsg(r4, &(0x7f0000000c80)=[{{0x0, 0x0, &(0x7f0000003140)=[{&(0x7f0000000e00)=""/4096, 0x1000}], 0x1}}], 0x1, 0x0, 0x0) getsockopt(r4, 0x6, 0x2, &(0x7f0000002780)=""/161, &(0x7f0000002840)=0xa1) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@newqdisc={0xa8, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x78, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4], [0x0, 0x8]}}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x1c, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x4000000}]}, {0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0x80000001}]}]}]}}]}, 0xa8}}, 0x0) r7 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f00000002c0)='blkio.bfq.sectors_recursive\x00', 0x0, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000005c0)=@bpf_lsm={0x1d, 0xe, &(0x7f0000000380)=@framed={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x70a}, [@initr0={0x18, 0x0, 0x0, 0x0, 0xfffffff4, 0x0, 0x0, 0x0, 0x2}, @generic={0x40, 0x2, 0x1, 0xff, 0x3}, @map_fd={0x18, 0xd, 0x1, 0x0, 0x1}, @tail_call, @call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000000400)='GPL\x00', 0x0, 0xbf, &(0x7f0000000440)=""/191, 0x41100, 0x5d, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000500)=[0xffffffffffffffff, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x1, 0x1, 0xffffffffffffffff, 0x1], &(0x7f0000000540)=[{0x5, 0x2, 0xc, 0x1}, {0x2, 0x2}, {0x0, 0x4, 0xe}, {0x3, 0x1, 0xa, 0xc}, {0x4, 0x5, 0x1, 0xb}, {0x3, 0x5, 0xf, 0xb}, {0x4, 0x1, 0x5}, {0x3, 0x5, 0x9, 0x1}], 0x10, 0x1d68}, 0x90) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000006c0)=@bpf_ext={0x1c, 0x4, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x3, 0x3, 0x2, 0x3, 0x6, 0xfffffffffffffff0, 0xfffffffffffffff0}]}, &(0x7f0000000240)='GPL\x00', 0x7b6, 0x29, &(0x7f0000000280)=""/41, 0x21700, 0xe, '\x00', r5, 0x0, r7, 0x8, &(0x7f0000000300)={0x8, 0x2}, 0x8, 0x10, &(0x7f0000000340)={0x1, 0xb, 0x100, 0x7}, 0x10, 0x2ea46, r8, 0x1, 0x0, &(0x7f0000000680)=[{0x3, 0x3, 0x8, 0x3}], 0x10, 0x8}, 0x90) socket$inet6_icmp(0xa, 0x2, 0x3a) r9 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000140)={'vxcan0\x00', 0x0}) bind$can_j1939(r9, &(0x7f00000001c0)={0x1d, r10, 0x3, {0x1, 0xf0}, 0xfe}, 0x18) 2.541378545s ago: executing program 3 (id=952): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r0) r1 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r1, 0x0) syz_emit_ethernet(0xfffffffffffffecb, &(0x7f0000000180)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "ff00f5", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0xc2, 0x0, 0x0, 0xfffd, {[@mptcp=@capable={0x1e, 0xc, 0x2, 0x8, 0xd, 0x5}]}}}}}}}}, 0x0) 2.413985141s ago: executing program 3 (id=954): r0 = socket$kcm(0x10, 0x400000002, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_procs(r1, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r2, &(0x7f00000000c0), 0x12) sendmsg$inet(r0, &(0x7f0000000000)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x3, 0xe, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0xffffffffffffffff}, 0x90) syz_80211_inject_frame(&(0x7f0000000240), &(0x7f0000000a40)=@data_frame={@a_msdu=@type01={{0x0, 0x2, 0x2, 0x0, 0x1, 0x1, 0x0, 0x1, 0x0, 0x0, 0x1}, {0x7ff7}, @broadcast, @from_mac=@broadcast, @random="79ea7faf118b", {0x7, 0xc}, "", @void, @value=@ver_80211n={0x0, 0xa, 0x3, 0x0, 0x0, 0x2, 0x1, 0x0, 0x1}}, @a_msdu=[{@device_a, @device_b}, {@device_a, @device_a, 0xb2, "a6b3240f26a6b476724a805f4e18da179f39a3c47b25940db61f579c5f7ebe5debfb0c9c855c4483c6e07faa21a0d8fa5ee09ed2bad9e820177163166d4da37f6371d42d78498e5c3b68c9321b96f0f03f9d4bbad48f04f414a0158d312e9d2bc2283a74e1a3b4c48f9a80bcd6f908d68a26d6a2ce8ffa51925b25224cfc586ca2d906586a0ffcce678e30568b60ecf613239fa8aea6ae48e1ebb9d73425b96f18b0e91f44b9af33b0e18e863aec7560319b"}, {@device_b, @broadcast, 0xe8, "709ada17857576886342be053ef7d0c2fac98ef43adb3713da78169131280530874d1610ead750f7293f0e7d96affd689f5646f80e8b4d28f22359878cb02c0ada9bd5640b0794934f20b8a62af24033fd341c7a9a96dc3ecbd88440c55196a966344532426570842ec85d6ea840ac8a57aef64397ca888ae888874aeb0845bc45288ac29eb7c14168b88e321a2f76a08fe91fcf0500e74cae6a5bdf804edf847320a523702444baa6e78c18b4e591acc562440d7c51a91503317a6794047ef49cb44428ac600b069196aa5dc65b6439e6b201b19013ae49345be6c1e7a8ef523f4a81947e2d7b88"}, {@broadcast, @device_b, 0x7b, "e707d4f6e1c5b273ce53ecca62b25631558560d7979129017b0954bde6d8b2b4727e56ff09ff803e398e6b84c30fd4bbd46e0c36f12164878f165f350bc53f85d1518772be7b35afc714cec7f8e7e5d131352e698cd023d1b5076d959c3cbfdbc2c59950eb8734e5e171dfbe269425d978593b142e583f59adf150"}, {@device_b, @broadcast, 0xdf, "d7fb8ce0b60bc888a44f2529c4837efb4edf862e68032013719d5003d208365c764785886f89658b4cccaa55212c02a029920636622915c81bd899f3618f6b06260356f7bea1057188ff5c59df8b5094da7a9e62e4bae06cfb100700fe3d16edf14902ba7d34ef494c38056572347d17a04484505716171fddb72eada62f133a31374b8ea813b4b0151d6cc8c9380cac0aecfce896f653e3a26b7eaff29c2637d40a4aef72174d00fb83e0dee3bd7b81446ccfe95a2f22cd3b92fa0d5dc9673fcad03c74c42178f0e87c0d7358aa6eee2c7f99685e77536ad58083e677e207"}, {@device_b, @broadcast, 0xdf, "4b1b565dbe2a679f31c0a49797aa35342b020caa5b6ad5217d2cd21ca93b5404a223931b90c1cbc9b9060374e40883d9f6c7f6a0d99b79653741192df9b77edc756011ac609a90745d5a94e6888121205ed4956c20df1ccb0ec756f5e15d903b53dcc3aba55aa37277a254bc9dd0698a3cf0e46ae10d2d25b64e34914164d24d592852abf585f88f8749291e32ad8e2b4440d3a70b8ea1bef3a44fad8d40d46e70271c18062a65980886af6119b5aa6c33cb83d8f5cfc45354e2edf23db6b15e2da372a48db76eaf295a312bb6c9a6fe349ac4ad0b011576894184d7e57d52"}, {@device_b, @device_b, 0xbf, "357b84c755f41fb0102e1d1086f559a0a56b71a7fac4302555f501767b2d10eb21bdc14be698cd135cafebb9ff70751dd26712e84e77e3751615eea93f34ac414638c7ee983152e7a68ab671452607ab2231eff6d68ef88cd4c66b7a42552c76bdb4a862714c1d134b6328200bad9831c7b3ce2f2cb01c3557ac22d10ca793b976de009d435f33a1cf4f1c71bf949235719cf5fc1944c4812cb829b11f96047988ba0736f2a8354a8370c7933a507a3cc3494589cb97bea5a065b735feb5aa"}]}, 0x520) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[], 0x0, 0x2e}, 0x20) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) socket$kcm(0x10, 0x3, 0x10) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='memory.events\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x18, 0x4, 0x7fe2, 0x1, 0x0, 0xffffffffffffffff, 0x7fffffff, '\x00', 0x0, r4, 0x0, 0x2}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000280)={0x1, 0x0, 0x0, 0x0, 0xfffffffd, 0x0, 0x0, 0x0, 0x4a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x6}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_FEATURES_SET(0xffffffffffffffff, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x40}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x11, 0x2000000000000230, &(0x7f0000000440)=ANY=[], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe96, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="e0", 0x1}], 0x1}, 0x0) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f0000000140)={'netdevsim0\x00', &(0x7f0000000080)=@ethtool_rxfh_indir={0x33}}) socket(0xa, 0x3, 0x3a) 1.661263985s ago: executing program 1 (id=961): syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r2 = epoll_create1(0x80000) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002380)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MTU={0x8, 0x4, 0x200}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x50}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) (async) epoll_create1(0x80000) (async) epoll_ctl$EPOLL_CTL_DEL(r2, 0x2, r1) (async) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'macvlan0\x00'}) (async) sendmsg$nl_route(r0, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002380)=@newlink={0x50, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macvlan={{0xc}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MTU={0x8, 0x4, 0x200}, @IFLA_ADDRESS={0xa, 0x1, @dev}]}, 0x50}}, 0x0) (async) 1.543886179s ago: executing program 4 (id=962): r0 = socket$inet6(0xa, 0x3, 0x3c) r1 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) socket$inet6(0xa, 0x200000000003, 0x87) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x5e, &(0x7f0000000540)=ANY=[@ANYBLOB="aaaaaaaaaaaabbbbbbbbbbbb86dd603000bb00282b00fc020000000000000000000000000000fe8000000000000000000000000000aa87000000000000003b02040100000000fe8000000000000000c67acbc7000000000000aa00000000a13a14e735cb6e60cd80efe970146b1a389750fe03e4006bb2d93489a1e996ef63ed55ab255699184713753ebdf89c0ef37df5f5dddb1b36f5ed91045759eddc8494c606744656714298eb73467b8e8e329e835c9f771eb91d79f3c8e2065688b416498b4e79859d7682d49037ae088263cf0f7491b42dec093352f705d47546"], 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r2 = socket(0x2, 0x3, 0x6) bind$inet(r2, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) r3 = socket$inet(0x15, 0x5, 0x0) bind$inet(r3, &(0x7f00000002c0)={0x2, 0x0, @local}, 0x10) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000140)={0x2, 0x0, @broadcast}, 0x30) setsockopt$sock_int(r2, 0x1, 0x6, &(0x7f00000000c0)=0x7, 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0x6, 0x3, 0x261, 0x2, 0x0, 0xffffffffffffffff, 0x52}, 0x48) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r4) sendmsg$BATADV_CMD_GET_HARDIF(r1, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="100826db7000fddbdf250500000008000600", @ANYRES32=r5, @ANYBLOB], 0x1c}}, 0x810) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000140)={r6, &(0x7f0000000000), &(0x7f0000000080)=@udp}, 0x20) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000d80)={{r6}, &(0x7f0000000d00), &(0x7f0000000d40)='%+9llu \x00'}, 0x20) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000040)={r6}, 0x20) r8 = socket(0xa, 0x3, 0x3a) setsockopt$MRT6_DEL_MIF(r8, 0x29, 0xc8, 0x0, 0xc000000) syz_emit_ethernet(0xa2, &(0x7f0000000340)={@multicast, @empty, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "430093", 0x6c, 0x3a, 0x0, @dev, @mcast2, {[], @mlv2_query={0x82, 0x0, 0x0, 0x7ff, 0x1, @empty, 0x4, 0x1, 0xf, 0xb, 0x5, [@dev={0xfe, 0x80, '\x00', 0x14}, @dev={0xfe, 0x80, '\x00', 0x1d}, @local, @remote, @private0]}}}}}}, 0x0) bpf$MAP_LOOKUP_ELEM(0x3, &(0x7f00000000c0)={r6, &(0x7f00000001c0), 0x0}, 0x20) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x48800, &(0x7f0000000000)={0x2, 0x0, @broadcast}, 0x10) sendto$inet(r2, &(0x7f0000000640)="8ce2ad5f4f95ea87a7846d3f816a9c264889973b04028a165e05bb10", 0x1c, 0x0, &(0x7f0000002400)={0x2, 0x0, @multicast2}, 0x10) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @mcast1, 0x9}, 0x1c) 1.393665572s ago: executing program 2 (id=963): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYRESDEC=r0, @ANYRES32=r0, @ANYBLOB='\b'], 0x44}}, 0x44001) 1.354146338s ago: executing program 1 (id=964): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x1c1842, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, 0x0, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_GET(r3, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)={0x28, 0x1, 0x7, 0x201, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFACCT_FILTER={0x14, 0x7, 0x0, 0x1, [@NFACCT_FILTER_VALUE={0x8, 0x2, 0x1, 0x0, 0xe428}, @NFACCT_FILTER_MASK={0x8, 0x1, 0x1, 0x0, 0x401}]}]}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x800) sendmsg$NL802154_CMD_NEW_SEC_DEVKEY(0xffffffffffffffff, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_DAEMON(0xffffffffffffffff, 0x0, 0x4000080) r4 = openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x7a05, 0x1700) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x32}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000040)={'batadv_slave_0\x00', 0x0}) bpf$MAP_CREATE(0x0, &(0x7f0000000240)=@base={0x20, 0xff, 0x30000, 0x4, 0x3804, r4, 0x5, '\x00', r7, r4, 0x4, 0x6}, 0x48) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, 0x0) sendmsg$nl_route(r5, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000680)=ANY=[@ANYBLOB="500000001000010400"/18, @ANYBLOB], 0x50}}, 0x0) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000500)=ANY=[@ANYBLOB], 0xa8}}, 0x0) 1.215641953s ago: executing program 2 (id=966): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000e2bac15d3b6641a215f099e26603a050337b2ccc70a9f928ba3c529bb6e7365e7e246317380f5884d79663e7fcaa89795d7b10e88378c33265a7af06040e3d0bbc6a5864dfa023c6ac1da574242785bbb4ece12b11da52496875e1e384042aad63a3094bf3bc0e40a7"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xf, 0x9, &(0x7f0000000040)=ANY=[@ANYBLOB="18004f000000000000000000000000008510000005000000850000000f0000005f0000000000000018000000000000000000000000000031472e82e100950000000000000095000000000000001e5adefd0703415f829f99482e6afc0be8e36bd5ae618a18fef8c73306d1f750a38ff561d0"], &(0x7f0000000000)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)={@ifindex, r3, 0x6, 0x0, 0xffffffffffffffff, @link_id}, 0x20) 1.168288323s ago: executing program 4 (id=967): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000540)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="050000000000000000002e00000008000300", @ANYRES32=r5, @ANYBLOB="0a0034000202020202020000040067000400cc000400080106004c"], 0x3c}}, 0x0) ioctl$BTRFS_IOC_RM_DEV(r0, 0x5000940b, &(0x7f0000001ac0)={{r3}, "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"}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000580)={'veth0_to_bridge\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@RTM_GETMDB={0x18, 0x56, 0x1, 0x0, 0x0, {0x7, r6}}, 0x18}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000500)=ANY=[@ANYBLOB="300000001d000100000000000000000007000000", @ANYRES32=r9, @ANYBLOB="000000000a0002002ee308099cc800ea050005"], 0x30}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r12 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000440)=@base={0x14, 0x4, 0x8, 0x6, 0x0, 0x1}, 0x48) r13 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_int(r13, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) bind$inet6(r13, &(0x7f0000000040)={0xa, 0x0, 0x0, @empty}, 0x1c) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000340)={r12, &(0x7f0000000280), &(0x7f0000001840)=@udp6=r13}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000200)={r12, &(0x7f0000000140), &(0x7f0000000000)=""/82}, 0x20) socket$inet6_udplite(0xa, 0x2, 0x88) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r11}, 0x10) sendmsg$nl_generic(r10, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000002c0)=ANY=[@ANYBLOB="240000003b0007010000000000000000027c0000040000000c0001800600060089"], 0x24}}, 0x0) r14 = socket$netlink(0x10, 0x3, 0x7) setsockopt$netlink_NETLINK_CAP_ACK(r14, 0x10e, 0xa, &(0x7f0000000100)=0x140000, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0xffffff1f}], 0x2, &(0x7f0000001a00)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010"], 0x10b8}, 0x0) recvmsg$kcm(r0, &(0x7f0000000280)={0x0, 0x0, 0x0}, 0x0) 1.075548874s ago: executing program 1 (id=968): sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b90402", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)="d8000000140081044e81f782db44b90402", 0x11}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r0 = socket$kcm(0x10, 0x2, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000200000000000000ef040000185700000300000000000000000000005f29f0fffcffffff9500000000000000f1549e8297a9d6efdd8d4e56863ab530752b15a503ad5ec43c1d95bfed7247c824f08e0813810233e28c27bd76b5d72192f4efe76c3b8751b1220bd6e33384d642e1b39626ac5ed45eb96d214759ea45206afc896d489fb12009ca0483"], &(0x7f0000000200)='GPL\x00', 0x3, 0xde, &(0x7f0000000440)=""/222, 0x41000, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x5, 0x9, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x6}, 0x90) (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000540)=@bpf_lsm={0x1d, 0x6, &(0x7f0000000600)=ANY=[@ANYBLOB="180000000200000000000000ef040000185700000300000000000000000000005f29f0fffcffffff9500000000000000f1549e8297a9d6efdd8d4e56863ab530752b15a503ad5ec43c1d95bfed7247c824f08e0813810233e28c27bd76b5d72192f4efe76c3b8751b1220bd6e33384d642e1b39626ac5ed45eb96d214759ea45206afc896d489fb12009ca0483"], &(0x7f0000000200)='GPL\x00', 0x3, 0xde, &(0x7f0000000440)=""/222, 0x41000, 0x4, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000300)={0x5, 0x9, 0x8001}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[0x1, 0xffffffffffffffff, 0xffffffffffffffff], 0x0, 0x10, 0x6}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000006c0)=ANY=[@ANYRESDEC=r2, @ANYRES16=r2], 0x20}, 0x1, 0xc00000000000000}, 0x0) bind$bt_hci(r3, &(0x7f0000000100)={0x1f, 0xffff, 0x3}, 0x6) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[], 0x5c}, 0x1, 0x0, 0x0, 0x41}, 0x4000044) openat$cgroup_int(r4, &(0x7f00000000c0)='cpuset.mems\x00', 0x2, 0x0) (async) r5 = openat$cgroup_int(r4, &(0x7f00000000c0)='cpuset.mems\x00', 0x2, 0x0) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}) (async) ioctl$FS_IOC_RESVSP(r5, 0x40305828, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x3}) write$binfmt_misc(r3, &(0x7f0000000080)=ANY=[@ANYBLOB="4c00030007"], 0xd) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="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"], 0x128}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001940)=ANY=[@ANYBLOB="1806000000000000000000000000000095000079d7eaa00046127220135adf0e91e1b9c582c279e37833bb82530b7e0e35b63b775c5c145bac4fcf7daf27477be72f2bd52c0a55850bebdd7b1748cabecc44abefa13ac671da2a3271f0be573bab3003e2b6ccd9c5adbcf2bf411e76fd716909ac20ac73771f8a154f38ced2ce9542cd7e94d87b3ce11680938e0f122b3414fd72296cf201b961b27cb8baf8fbf96ce174def50df765754ba0581afbaf07a842f17927b8fed643b06900aaaf"], &(0x7f0000000080)='syzkaller\x00', 0xffffffff, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x20, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x90) socket$inet_smc(0x2b, 0x1, 0x0) (async) r7 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r7, &(0x7f0000000140)={0x2, 0x4e22, @local}, 0x10) socket$alg(0x26, 0x5, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000560000009500f7529dcf0000"], &(0x7f0000000080)='GPL\x00'}, 0x90) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f0000000740)=0x801, 0x4) sendmsg$L2TP_CMD_TUNNEL_GET(0xffffffffffffffff, &(0x7f0000001ac0)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000001a80)={&(0x7f0000001a40)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="000226bd7000fddbdf2504000000050013005b000088a55dd300fe880000000000000000000000000001"], 0x30}, 0x1, 0x0, 0x0, 0x4010}, 0x44010) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "fd6ed24e", "d4e9e1c90d89691c"}, 0x38) (async) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f0000000500)=@gcm_256={{0x303}, "2a4001011f891d5b", "11682d84dd05bb63ae661f051e1e79ceafeaa60a5bd1dc83db142ade2bd907fd", "fd6ed24e", "d4e9e1c90d89691c"}, 0x38) recvfrom$inet6(r8, &(0x7f0000000280)=""/37, 0x25, 0x40010140, 0x0, 0x0) (async) recvfrom$inet6(r8, &(0x7f0000000280)=""/37, 0x25, 0x40010140, 0x0, 0x0) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) (async) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @dev={0xac, 0x14, 0x14, 0x2a}}, 0x10) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) (async) sendmsg$inet(r0, &(0x7f0000000540)={0x0, 0xc027, &(0x7f0000000340)=[{&(0x7f00000000c0)="98eb000014006bcd9e", 0xeb98}], 0x1, 0x0, 0x0, 0x1f000000}, 0x600) 1.074572874s ago: executing program 2 (id=969): r0 = socket(0x1e, 0x5, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000040)={'batadv0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newlink={0x20, 0x10, 0x2, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r1, 0x88adfda5, 0x42ec}}, 0x20}, 0x1, 0x0, 0x0, 0x8c4}, 0x0) 921.313264ms ago: executing program 0 (id=970): socket(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket(0xa, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000040)={0x100000011, @multicast2, 0x0, 0x2, 'lc\x00'}, 0x2c) ioctl$ifreq_SIOCGIFINDEX_vcan(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'vxcan0\x00'}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = openat$cgroup_int(r3, &(0x7f0000000080)='cpuset.cpus\x00', 0x2, 0x0) write$cgroup_subtree(r4, &(0x7f0000000040)=ANY=[@ANYBLOB='N-'], 0x6a) setsockopt$IP_VS_SO_SET_ADD(r2, 0x0, 0x482, &(0x7f0000000000)={0x11, @multicast1, 0x0, 0x1000002, 'wrr\x00', 0x0, 0x0, 0x1000}, 0x2c) setsockopt$IP_VS_SO_SET_FLUSH(r2, 0x0, 0x485, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r5, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) write(r5, &(0x7f0000000200)="0a000000010001", 0x7) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r2, &(0x7f0000000380)=ANY=[@ANYBLOB="0e0d01000269e15553a49af2257162636ddad2c59a6035a679c42dc199a9991081baac4292c7ce06133956764a8a75be97cd2abcfa379ddd18b8a3ca7fa2688e18a85548c53192ca96063b0f1a22e22ed9d02af4b68d1fe2a250eb118012ec5dd77647b22f4465fea88100d4c04c763d345391bbe8ec4847402aeacfb96990822b1570790bef2c50b4aa438d"], 0x8) r6 = socket$netlink(0x10, 0x3, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f00000000c0)) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000008c0)=ANY=[@ANYBLOB="a80405008ae74ca3e5a639f9727f84aa72af6e1300080008007000fddbc725c930e207", @ANYRES32=0x0, @ANYRESDEC=r1, @ANYRES32, @ANYBLOB="08001c00", @ANYBLOB="fe3ef0f5f171bad0d02671a6e69584e503966bbaa312e35eb43dca6ce5bf6baa799aeed8103e8a9030f83bdab55a2051db5be7819dcf2d109910eceb1c560a629a8aa1d64a45ff17d842aaf846e92621480e736657897a3ded49d7b1b7f42f2fa00768c17a5444b747557785bc2eda1dde72d182687cc5a11f146cb4222851944dfc504ea2b8fe472d6edfdbb80dc3e32954d8a2bc083b6151a2d1eff96d1e31ecaa1c87e03fc82aad1ea1365cf4671b0779362ca237db750e1a0734c15fb269b5dc73a99256928935ebee1690a0e3c09d7bd15cc0aeb953dc9168ad0ff2ff", @ANYBLOB="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", @ANYRES32=0x0, @ANYBLOB="0500210000000000"], 0x4a8}}, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000000000)=ANY=[@ANYRES8=r0], 0x0) ioctl$SIOCPNADDRESOURCE(0xffffffffffffffff, 0x89e0, 0x0) syz_emit_ethernet(0x1e, 0x0, &(0x7f0000000040)={0x1, 0x0, [0x7e7, 0xbf3, 0xb57, 0x76d]}) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000001c0)) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_SET_PMKSA(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000140)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES8=r1, @ANYBLOB="050a00000000000000003400000008000300", @ANYRES64=r2, @ANYRES8=r8], 0x3c}, 0x1, 0x0, 0x0, 0x440004c1}, 0x0) 891.077259ms ago: executing program 3 (id=971): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r0, &(0x7f0000001340)='|', 0x1, 0x0, &(0x7f0000000280)={0xa, 0x0, 0x0, @local}, 0x1c) shutdown(r0, 0x1) setsockopt$inet_sctp6_SCTP_RTOINFO(r0, 0x84, 0x6e, &(0x7f0000000540), 0x10) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xc1842, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000140)={'syzkaller0\x00', @random="374db0a79aef"}) close(0x3) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x1c1842, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000180)={'syzkaller0\x00', 0x7101}) bpf$MAP_LOOKUP_ELEM(0x1, 0x0, 0x0) write$cgroup_devices(r5, &(0x7f0000000640)=ANY=[@ANYBLOB="0100000000000000288563"], 0xffdd) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r6 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000380)={@cgroup=r6, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$F2FS_IOC_MOVE_RANGE(r4, 0xc020f509, &(0x7f0000000240)={r5, 0x4, 0x509, 0x2}) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r7, &(0x7f0000000400)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000380)={0x34, r8, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x80}, @BATADV_ATTR_GW_MODE={0x5}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x58}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x400) write$cgroup_devices(r1, &(0x7f0000000640)=ANY=[], 0xffdd) r9 = socket$key(0xf, 0x3, 0x2) getsockopt$inet_sctp_SCTP_PR_STREAM_STATUS(0xffffffffffffffff, 0x84, 0x74, &(0x7f0000000480)=""/56, &(0x7f00000004c0)=0x38) sendmsg$key(r9, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000580)={0x2, 0xa, 0x0, 0x7, 0x2}, 0x10}}, 0x0) r10 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r10, &(0x7f0000000040)={0x3, 0x0, &(0x7f0000000340)={&(0x7f00000001c0)={0x2, 0xe, 0x0, 0x0, 0xe, 0x0, 0x0, 0xfffffffd, [@sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x2, 0x0, @loopback}}, @sadb_ident={0x2, 0xb, 0x6}, @sadb_address={0x3, 0x5, 0x0, 0x40, 0x0, @in={0x2, 0x4e20, @local}}, @sadb_x_sa2={0x2, 0x13, 0xf7, 0x0, 0x0, 0x70bd28, 0x23e}]}, 0x70}, 0x1, 0x7}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@ipv4_newroute={0x2c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x900}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x1}, @RTA_FLOW={0x3, 0xb, 0xa21}]}, 0x2c}}, 0x24000014) 730.76795ms ago: executing program 0 (id=972): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)={0xd0, r1, 0x1, 0x70bd28, 0x25dfdbfe, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x1, 0xb, 0x5}, {0x6, 0x11, 0x1}, {0x8, 0x15, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x3}}, {0x8, 0xb, 0x5}, {0x6, 0x11, 0x29c}, {0x8, 0x15, 0x9}}, {{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x2}}, {0x8, 0xb, 0x9ffffd}, {0x6, 0x11, 0x6}, {0x8, 0x15, 0x2}}]}, 0xd0}, 0x1, 0x0, 0x0, 0x4}, 0x0) syz_emit_ethernet(0x9e, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000308", 0x68, 0x3a, 0x0, @private1, @local, {[], @pkt_toobig={0x2, 0x0, 0x0, 0x0, {0x0, 0x6, "5b52ab", 0x0, 0x2b, 0x0, @private0, @private0, [@srh={0x0, 0x4, 0x4, 0x2, 0x1, 0x0, 0x0, [@private2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}]}, @dstopts={0x88, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x9}]}]}}}}}}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r2, 0x8983, &(0x7f0000000340)={0x0, 'netdevsim0\x00', {0x4}, 0xc}) 730.261215ms ago: executing program 1 (id=973): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r0, &(0x7f00000014c0)={0x0, 0x0, &(0x7f0000000600)=[{&(0x7f0000000300)="c1", 0x1}], 0x1}, 0x0) setsockopt$sock_int(r1, 0x1, 0x200000010, &(0x7f0000000000)=0xfffffffc, 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x9, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x5, 0x1, 0x4c}]}, &(0x7f0000000180)='syzkaller\x00', 0x4}, 0x90) sendto$unix(r0, &(0x7f0000000640)="00a871a5b8", 0x5, 0xd1, 0x0, 0x0) recvfrom$unix(r1, 0x0, 0x0, 0x10102, 0x0, 0x0) r2 = socket(0x10, 0x3, 0x0) sendmsg$BATADV_CMD_GET_MCAST_FLAGS(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="d5"], 0x24}}, 0x0) recvmmsg$unix(r2, &(0x7f0000005d00)=[{{0x0, 0x0, &(0x7f0000000800)=[{&(0x7f0000000940)=""/4096, 0x103b}], 0x1}}], 0x1, 0x0, 0x0) write(r2, &(0x7f0000000100)="1400000052004f7fb3e4bf80a000080000000000", 0x14) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f00000006c0)=@nat={'nat\x00', 0x1b, 0x5, 0x470, 0x2c8, 0x0, 0xffffffff, 0x450, 0x2c8, 0x590, 0x590, 0xffffffff, 0x590, 0x590, 0x5, 0x0, {[{{@ipv6={@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, [0x0, 0xff, 0xffffffff], [0xff, 0x0, 0xffffff00, 0xffffffff], 'veth0_to_bridge\x00', 'ip6gre0\x00', {0xff}, {0xff}, 0x40f1e78d873020e8, 0x4, 0x6, 0x2}, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x17, @ipv4=@rand_addr=0x64010102, @ipv4=@broadcast, @icmp_id=0x68, @gre_key=0x31}}}, {{@ipv6={@mcast2, @dev={0xfe, 0x80, '\x00', 0x25}, [0xff000000, 0x7f7fffff, 0xff000000, 0xff000000], [0x0, 0xffffff00, 0xffffff00, 0xffffff00], 'syzkaller1\x00', 'macvlan1\x00', {}, {0xff}, 0x3b, 0xd6, 0x9, 0x52}, 0x0, 0xa8, 0xf0}, @unspec=@SNAT1={0x48, 'SNAT\x00', 0x1, {0x8, @ipv6=@private1, @ipv4=@rand_addr=0x64010101, @icmp_id=0x65, @icmp_id=0x65}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@TCPMSS={0x28, 'TCPMSS\x00', 0x0, {0x7}}}, {{@uncond, 0x0, 0xa8, 0xf0}, @NETMAP={0x48, 'NETMAP\x00', 0x0, {0x14, @ipv6=@dev={0xfe, 0x80, '\x00', 0x19}, @ipv4=@private=0xa010102, @icmp_id=0x68, @icmp_id=0x67}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x4d0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x2c, &(0x7f0000000080)=[@in6={0xa, 0x4e22, 0x7f, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfa}, @in={0x2, 0x4e24, @empty}]}, &(0x7f0000000140)=0x10) setsockopt$inet_sctp6_SCTP_AUTH_DEACTIVATE_KEY(r4, 0x84, 0x23, &(0x7f00000002c0)={r5, 0x4}, 0x8) 729.956912ms ago: executing program 2 (id=974): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x1d, &(0x7f0000000440)=ANY=[@ANYBLOB="181a000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb702000008000000182300", @ANYRES64, @ANYBLOB="0000000000000000b70500000800000085000000a5000000850000001d000000bf91000000000000b7"], 0x0, 0x3}, 0x90) r0 = socket$inet6(0xa, 0x3, 0x7) sendmmsg$alg(r0, &(0x7f0000000d40)=[{0x20000000, 0xff00, 0x0, 0x0, &(0x7f0000000300), 0x30, 0x44810}], 0x1, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x3, 0x4}, 0x6) r2 = socket$inet_sctp(0x2, 0x1, 0x84) r3 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x1}, 0x1}, 0x1c) shutdown(r3, 0x1) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000240)=0x8) getsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r3, 0x84, 0x11, &(0x7f00000001c0)={r5}, &(0x7f0000000200)=0x8) setsockopt$inet_sctp_SCTP_RESET_STREAMS(r2, 0x84, 0x77, &(0x7f0000000080)={r5, 0xfa0, 0x5, [0x2, 0x9, 0x8, 0x41, 0xfffe]}, 0x12) unshare(0x28000600) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r6, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r6, 0x0) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) r7 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r7, &(0x7f0000000100)={0x2c, 0x1}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$SIOCX25SFACILITIES(0xffffffffffffffff, 0x891d, 0x0) write$binfmt_misc(r1, &(0x7f0000000200)=ANY=[@ANYBLOB='\x00\x00\x00\x00\a'], 0xd) r8 = socket(0x40000000015, 0x5, 0x0) bind$inet(r8, &(0x7f0000000340)={0x2, 0x0, @loopback}, 0x10) sendmsg(r8, &(0x7f0000000200)={&(0x7f0000000040)=@in={0x2, 0x0, @rand_addr=0x64010100}, 0x80, 0x0, 0x0, &(0x7f0000019580)=ANY=[@ANYBLOB="1000000000000000040000000000000010000000000000001401000003"], 0x20}, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) 728.205621ms ago: executing program 4 (id=975): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000200000000000004b64ffeca50000006d000000850000000e00000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='i2c_write\x00', r0}, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=ANY=[@ANYRESDEC=0x0], 0x84}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x4) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000)={0x0, 0x2}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000009000)={0x0, 0x0, &(0x7f0000008fc0)={&(0x7f0000000280)=@newtaction={0x68, 0x30, 0x1}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x0) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r3, 0x84, 0x64, &(0x7f00000002c0)=[@in6={0xa, 0x4e22, 0x200, @mcast2, 0x5}, @in6={0xa, 0x0, 0x0, @loopback}], 0x38) r4 = accept4$llc(0xffffffffffffffff, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x800) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, 0x0, 0x0) sendmmsg(r2, &(0x7f0000000240), 0x0, 0x4804) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r6, &(0x7f0000001d40)={0x18, 0x0, {0x4, @multicast, 'pimreg0\x00'}}, 0x1e) socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r5, 0x8914, &(0x7f0000001e00)={'sit0\x00', 0x1}) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r8 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r8, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) recvmmsg(0xffffffffffffffff, &(0x7f0000004f80)=[{{0x0, 0x0, &(0x7f0000003f80)=[{0x0}, {&(0x7f0000003c00)=""/54, 0x36}], 0x2}}], 0x1, 0x0, 0x0) connect$inet6(r8, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x9}, 0x1c) sendmmsg$inet6(r8, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000004c0)=@newlink={0x40, 0x10, 0xfffff63d, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x10, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERY_INTVL={0xc, 0x21, 0x9}]}}}]}, 0x40}}, 0x0) write$cgroup_type(r7, &(0x7f0000000140), 0x9) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r9) 567.883322ms ago: executing program 0 (id=976): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x82, &(0x7f0000000140)={@broadcast, @random="1704b45adbde", @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@lsrr={0x83, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa010121}, {@private}, {@local}, {@remote}, {@private}, {@dev}, {@private}]}]}}}}}}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), r0) sendmsg$NL80211_CMD_REQ_SET_REG(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000540)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbfb, {}, [@NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x2}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x4040080}, 0x20000090) 565.400418ms ago: executing program 1 (id=977): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x401}, 0x20}}, 0x4040010) 492.043605ms ago: executing program 2 (id=978): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) (async) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(0xffffffffffffffff, 0x84, 0x22, &(0x7f0000000000)={0x3, 0x8000, 0x5, 0x9, 0x0}, &(0x7f0000000040)=0x10) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r0, 0x84, 0x7c, &(0x7f0000000080)={r1, 0x5, 0x1}, &(0x7f00000000c0)=0x8) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f0000000100)={0x0, @in6={{0xa, 0x4e21, 0x80000001, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}}, 0x98ce, 0x8, 0x4, 0x9, 0x9e5e}, &(0x7f00000001c0)=0x98) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000200)={r2, 0x6}, 0x8) socket$nl_netfilter(0x10, 0x3, 0xc) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000000240)={'wg2\x00'}) (async) sendmsg$inet(r0, &(0x7f0000000580)={&(0x7f0000000280)={0x2, 0x4e20, @private=0xa010102}, 0x10, &(0x7f0000000480)=[{&(0x7f00000002c0)="cfb572646bfdb9ab5d6116245697f0c06c909788fe5cd78ab672380772f81fbfcbcb053ff201f342e6dd781cb68d5e11ccc52805700ab29f17352352cf4f7ad5f5e107855d2be32691a124feedf60d3b247d0ba0212c55eb30d240a8856c0bf60af7eaf0aa1ca0a94488dbd7908c7d94bfb69bcf21c89f7bfcc71341c48e4e9100109202aec60d04c5", 0x89}, {&(0x7f0000000380)="e30c3f5bd5d1fa091d80ecaeeb65299061fa4ec65b148f0d8b131e142ac7c89c6c6847d9edac6e36b715b5e1068a4db971b5e2a1558a363acc6ee781acb75535cc8c391275b3c053e3b5ead068cd2767d6c150f617554cf4044aba3e59bd48c7faedb6fdf0f268d727505e05475c74dd1ec23ba7967a42bc1665062f021a7c3e2ccde5bae3b59629b7d59fdec0a9f3d5bbca04ea4d6f8a6902dc65a77f26de54b1ba2b26ef1eb96694339744667e0ec3178812e219587526c674224c1006bebe8bad729c20c1ef7b0692da6ae6968392f769bb", 0xd3}], 0x2, &(0x7f00000004c0)=[@ip_retopts={{0x7c, 0x0, 0x7, {[@end, @timestamp={0x44, 0xc, 0xf5, 0x0, 0x6, [0x8e43, 0x4]}, @rr={0x7, 0x23, 0x8f, [@empty, @loopback, @multicast1, @broadcast, @private=0xa010100, @loopback, @loopback, @loopback]}, @rr={0x7, 0x1f, 0x8f, [@broadcast, @dev={0xac, 0x14, 0x14, 0x3d}, @remote, @multicast2, @remote, @multicast2, @local]}, @rr={0x7, 0xf, 0x29, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @dev={0xac, 0x14, 0x14, 0x35}]}, @timestamp_addr={0x44, 0xc, 0x87, 0x1, 0x1, [{@dev={0xac, 0x14, 0x14, 0x3b}, 0x35ff56ac}]}]}}}, @ip_tos_u8={{0x11}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}], 0xb0}, 0x1) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAXSEG(r3, 0x84, 0xd, &(0x7f00000005c0)=@assoc_value={r1, 0x80000001}, &(0x7f0000000600)=0x8) (async) sendmsg$AUDIT_TRIM(0xffffffffffffffff, &(0x7f0000000700)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x10, 0x3f6, 0x1, 0x70bd2b, 0x25dfdbfe, "", [""]}, 0x10}}, 0x4040004) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000740)={r1, 0x8900}, &(0x7f0000000780)=0x8) r5 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f00000007c0), &(0x7f0000000800)=0x4) write$binfmt_elf32(r5, &(0x7f0000000840)={{0x7f, 0x45, 0x4c, 0x46, 0x7, 0x0, 0x0, 0x6, 0x5, 0x2, 0x3, 0xfff, 0x33c, 0x38, 0x197, 0x5, 0xb, 0x20, 0x1, 0x5, 0x821, 0x5}, [{0x70000000, 0x1, 0x7fffffff, 0x3, 0x8000, 0x5, 0x5, 0x7fff}], "4fdd2fdbb6e5223c55d24237adaedbdbb327df644566952e3315a08810b8b597ea9161d9a56d0cc05f2bab4bcb18dee023d93e5d8f4d0bfcb441917a64472086e6523e52c594a3a4415b716a567ae33b", ['\x00', '\x00', '\x00', '\x00', '\x00', '\x00']}, 0x6a8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f0000000f00)={r1, 0x4}, 0x8) ioctl$sock_SIOCGSKNS(r0, 0x894c, &(0x7f0000000f40)=0x5) (async) setsockopt$sock_linger(r3, 0x1, 0xd, &(0x7f0000000f80)={0x0, 0x3}, 0x8) r6 = socket$inet_dccp(0x2, 0x6, 0x0) connect$inet(r6, &(0x7f0000000fc0)={0x2, 0x4e22, @multicast2}, 0x10) (async) socket$inet_dccp(0x2, 0x6, 0x0) (async) r7 = socket$netlink(0x10, 0x3, 0x3) getsockopt$inet_sctp6_SCTP_GET_ASSOC_STATS(r0, 0x84, 0x70, 0xfffffffffffffffc, &(0x7f0000001000)) (async) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000001040)) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000010c0), r7) sendmsg$ETHTOOL_MSG_COALESCE_SET(r7, &(0x7f0000001180)={&(0x7f0000001080)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000001140)={&(0x7f0000001100)={0x24, r8, 0x0, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_COALESCE_RATE_SAMPLE_INTERVAL={0x8, 0x17, 0x7}, @ETHTOOL_A_COALESCE_RX_USECS_HIGH={0x8, 0x13, 0x6}]}, 0x24}, 0x1, 0x0, 0x0, 0x840}, 0x8010) (async) r9 = socket$inet6_sctp(0xa, 0x3, 0x84) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r9, 0x84, 0x9, &(0x7f00000011c0)={r4, @in={{0x2, 0x4e20, @private=0xa010100}}, 0x400, 0x3e1e, 0x0, 0x6a335820, 0xcc, 0x0, 0x5}, &(0x7f0000001280)=0x9c) (async) r10 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f00000012c0)='./cgroup.cpu/syz1\x00', 0x200002, 0x0) openat$cgroup_ro(r10, &(0x7f0000001300)='memory.swap.current\x00', 0x0, 0x0) 384.715105ms ago: executing program 1 (id=979): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x11, 0x4, &(0x7f0000000000)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xd3}]}, &(0x7f00000000c0)='syzkaller\x00'}, 0x90) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000b40), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r0, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000d40)={&(0x7f00000006c0)={0x3c, r1, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}]}, @ETHTOOL_A_CHANNELS_TX_COUNT={0x8, 0x9}, @ETHTOOL_A_CHANNELS_RX_COUNT={0x8}]}, 0x3c}}, 0x0) socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$inet_smc(0x2b, 0x1, 0x0) r4 = bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ff"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r3, 0x0, 0x80, 0x0, 0x108) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000440)=ANY=[@ANYBLOB='d\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000800000000003b00000008000300", @ANYRES32=r6, @ANYBLOB="48003300d0000000ffffffffffff08021100000050505050505000000f"], 0x64}}, 0x4044050) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_DEFAULT_PVID={0x6, 0x27, 0x2000}]}}}]}, 0x3c}}, 0x0) r9 = socket(0x11, 0x3, 0x0) getsockopt$kcm_KCM_RECV_DISABLE(r9, 0x107, 0x17, 0x0, 0x20000000) r10 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000240), r7) sendmsg$IEEE802154_START_REQ(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000010140)={0x44, r10, 0x4, 0x0, 0x25dfdbfb, {}, [@IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0xffff}, @IEEE802154_ATTR_COORD_PAN_ID={0x6}, @IEEE802154_ATTR_BCN_ORD={0x5}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x2}, @IEEE802154_ATTR_COORD_PAN_ID={0x6, 0xa, 0x4}, @IEEE802154_ATTR_CHANNEL={0x5, 0x7, 0x82}]}, 0x44}, 0x1, 0x0, 0x0, 0x5}, 0x101) r11 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r11, &(0x7f0000000080)={0x1f, 0xffff, 0x3}, 0x6) ioctl$sock_kcm_SIOCKCMCLONE(r9, 0x89e2, &(0x7f0000000480)={r0}) r12 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000, 0x941, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xf, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000800000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7020000ffe0f505b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000000000000b70000000000000095000000000000008aba8204ae1d36397540f0f1249b189bcbf398e95f13a9ce5337be463cf1545c6eae2591ab2dcfc8b749927f81ca582bf837b93c81ade1863ac07f3519ffbae64af1cfe8adc6522e29045e52739f7ab871ea8f3d0af2fa237ae781cac719c35f0c"], &(0x7f0000000200)='syzkaller\x00', 0x5, 0x1003, &(0x7f0000001e40)=""/4099}, 0x90) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000280)={r12, 0x58, &(0x7f00000001c0)}, 0x10) write(r11, &(0x7f0000000340)="07000000010000", 0x7) r13 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x9, 0x4, 0x2, 0x5, 0x3002}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r13, &(0x7f00000000c0), &(0x7f0000000000)=""/10, 0x2}, 0x20) 315.967971ms ago: executing program 0 (id=980): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=@bridge_newvlan={0x18, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r2}}, 0x18}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendfile(r4, r3, 0x0, 0x10000a007) setsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000040)={@private=0xa010101, @empty, @multicast1}, 0xc) socket$kcm(0x29, 0x7, 0x0) 314.802834ms ago: executing program 4 (id=981): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl$sock_netrom_SIOCDELRT(r0, 0x890c, &(0x7f0000000240)={0x1, @null, @netrom={'nr', 0x0}, 0x9, 'syz1\x00', @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, 0xe13, 0x1, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @bcast]}) mmap(&(0x7f0000ffc000/0x4000)=nil, 0x4000, 0x0, 0x20010, r0, 0xcb00b000) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000030c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCSPGRP(r1, 0x8902, &(0x7f0000000080)=0xffffffffffffffff) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000a0db000000000000000000850000000e000000c50000002a00000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000007c0)={&(0x7f00000000c0)='netlink_extack\x00', r2}, 0x11) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r3, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f0000000340)={0x14, r4, 0x313, 0x0, 0x0, {0x2f}}, 0x14}}, 0x0) bind$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$AUTOFS_IOC_EXPIRE_MULTI(0xffffffffffffffff, 0x40049366, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, 0x0, 0x0) ppoll(&(0x7f0000000c80), 0x0, &(0x7f0000000cc0), 0x0, 0x0) bind$bt_l2cap(0xffffffffffffffff, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) socket(0x0, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_smc(0x2b, 0x1, 0x0) listen(r5, 0x0) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r5, 0x6, 0x23, &(0x7f0000000000)={&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000040)=0x38) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x44, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1f}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFT_MSG_NEWSETELEM={0x5c, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x30, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x28, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x23, 0x1, "118c7457ff8f99b8233ba7d81496e1da69279e989c73000065399ef8cd8d80"}]}]}]}]}], {0x14, 0x10}}, 0xe8}}, 0x0) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000000000)) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x3, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0x88}}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc9, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x90) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x18103, 0x0) syz_emit_ethernet(0xca, &(0x7f0000000080)=ANY=[@ANYBLOB="a890037bdff452e6c0c56bd2", @ANYRESHEX=r7, @ANYRES16=r7, @ANYRES16=r7, @ANYBLOB="27eb5994857cdc6c5a3f0add014be19eb00823c66e62dea3e1575724f4ceb345d31736b6222d9adada567e88b61b212f38f5c244cb85f6972796781a535fec794afce4ea7fe97c735c94de71064e540604d428e52969ffc7def02076b84c55410dcb965129f4ffad7a65b622aa4c13b35a3f22c32babec677bbccb0d78a988f5efa19ac54cf67982bfcb0fab62bf38641fc18fb6c3e1491b9fb645f595e5623e5451ffadac5be0100ea888d6a62647e077dc21a46ad6751234d7270bc6149d32b59e7140747d8184aac7d6579ecdfe58d0259a3ce8715ae370a4ce"], 0x0) 314.558015ms ago: executing program 2 (id=982): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$EBT_SO_SET_ENTRIES(r1, 0x0, 0x80, &(0x7f0000000040)=@broute={'broute\x00', 0x20, 0x1, 0x1a8, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000480], 0x0, 0x0, &(0x7f0000000480)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff000000000000000000000000001b000012000000004b28c962170b7020000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff01000000110000000000000086dd6361696630000000000000000000000076657468315f746f5f7465616d00000073797a6b616c6c65723100000000000076657468315f746f5f7465616d000000aaaaaaaaaabb0000000000000180c20000000000000000000000e8000000e80000001801000069703600000100000000000009000000000300000000000000000000000000005000000000000000fe80000000000000000000000000000000000000000000000000ffffac1e00707154f51b8b0980f73a0f35ca6a4100000000000000000000004000000000000000000080000000000000010000000000063e004904004a194dc2f70d04a500000000000000000000000800000000000400"/424]}, 0x220) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x3, &(0x7f00000000c0)=@framed, &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000480)={&(0x7f0000000440)='rxrpc_local\x00', r3}, 0x10) r4 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r4, &(0x7f0000000400)=@in6={0x21, 0x4, 0x2, 0x1c, {0x2, 0x0, 0x0, @private1}}, 0x24) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f00000002c0)={'team_slave_1\x00', 0x400}) r5 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000300)={'rose0\x00', 0x0}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100000000000000002eeed88696", @ANYRES32=r6], 0x20}}, 0x0) 196.404492ms ago: executing program 0 (id=983): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r0) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x28, r1, 0x400, 0x70bd29, 0x25dfdbff, {{}, {}, {0xc, 0x14, 'syz0\x00'}}}, 0x28}, 0x1, 0x0, 0x0, 0x80}, 0x40800c4) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_SET(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="310400000000000000001600000018000180140002006e657464657673696d3000000000000005000300e52800000500040001"], 0x3c}}, 0x0) 63.898642ms ago: executing program 4 (id=984): socket$inet6(0xa, 0x2, 0x0) (async) r0 = socket$inet6(0xa, 0x2, 0x0) sendmsg$inet6(r0, &(0x7f0000000040)={&(0x7f0000000280)={0xa, 0x4e24, 0xffff2985, @loopback}, 0x1c, 0x0, 0x0, &(0x7f0000000000)=ANY=[], 0x5}, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_LM(r1, 0x6, 0x3, &(0x7f0000000040)=0x30, 0x5e) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000001740), 0x183442, 0x0) ioctl$PPPIOCNEWUNIT(r2, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSMAXCID(r2, 0x40047451, &(0x7f00000002c0)=0x800100) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_GET(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r4, 0x1, 0x70bd28, 0x25dfdbfe, {}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24004864}, 0x4c000) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x9f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x9f, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) (async) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_KEY(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000c00000008000300", @ANYRES32=r7, @ANYBLOB="0400c5bb3f280004"], 0x24}}, 0x0) sendmsg$NL80211_CMD_JOIN_MESH(r3, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x5c, r6, 0x400, 0x70bd25, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x4, 0x16}}}}, [@NL80211_ATTR_MESH_CONFIG={0x3c, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PLINK_TIMEOUT={0x8, 0x1c, 0xfffffff9}, @NL80211_MESHCONF_HWMP_PERR_MIN_INTERVAL={0x6, 0x12, 0x85b}, @NL80211_MESHCONF_HWMP_MAX_PREQ_RETRIES={0x5, 0x8, 0x6}, @NL80211_MESHCONF_RETRY_TIMEOUT={0x6, 0x1, 0x18}, @NL80211_MESHCONF_MAX_RETRIES={0x5, 0x5, 0x2}, @NL80211_MESHCONF_HWMP_NET_DIAM_TRVS_TIME={0x6, 0xd, 0x7f}, @NL80211_MESHCONF_HT_OPMODE={0x6, 0x16, 0x10}]}]}, 0x5c}, 0x1, 0x0, 0x0, 0x4000811}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000a40)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x1, 0x0, 0x0, 0x41000, 0x14, '\x00', 0x0, 0x5}, 0x90) 0s ago: executing program 0 (id=985): r0 = socket$packet(0x11, 0x2, 0x300) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000002c0)=ANY=[], 0x10}}, 0x0) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="480000006800010000000000000000000a000000000000000c0008800800030000000000060007000200000008000500", @ANYRES32=r2, @ANYBLOB="140006"], 0x48}}, 0x0) setsockopt$packet_int(r0, 0x107, 0x8, &(0x7f0000000100)=0x40049, 0x4) recvmmsg(r0, &(0x7f0000000180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000010c0)=""/4096, 0x1000}, 0x5}], 0x2, 0x10022, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.194' (ED25519) to the list of known hosts. [ 67.898682][ T5227] cgroup: Unknown subsys name 'net' [ 68.129716][ T5227] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 69.863824][ T5227] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 71.623101][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.629857][ T1276] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.428754][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 72.447630][ T5248] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 72.455662][ T5248] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 72.463565][ T5248] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 72.471550][ T5248] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 72.482375][ T5250] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 72.490367][ T5250] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 72.497789][ T5250] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 72.509614][ T5250] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 72.517745][ T5250] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 72.525861][ T5250] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 72.535175][ T5250] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 72.543873][ T5250] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 72.553335][ T5250] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 72.561481][ T5250] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 72.567478][ T5251] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 72.571891][ T5250] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 72.583020][ T5250] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 72.589711][ T5251] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 72.606213][ T5251] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 72.616544][ T5255] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 72.627770][ T5251] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 72.636806][ T5251] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 72.644606][ T5251] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 72.652016][ T5251] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 72.660384][ T5251] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 72.668282][ T5251] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 72.669175][ T4628] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 72.683276][ T4628] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 72.692751][ T4628] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 73.263501][ T5237] chnl_net:caif_netlink_parms(): no params data found [ 73.340698][ T5241] chnl_net:caif_netlink_parms(): no params data found [ 73.425647][ T5246] chnl_net:caif_netlink_parms(): no params data found [ 73.551725][ T5237] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.559284][ T5237] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.566902][ T5237] bridge_slave_0: entered allmulticast mode [ 73.575314][ T5237] bridge_slave_0: entered promiscuous mode [ 73.588052][ T5237] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.595397][ T5237] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.602759][ T5237] bridge_slave_1: entered allmulticast mode [ 73.610301][ T5237] bridge_slave_1: entered promiscuous mode [ 73.628554][ T5252] chnl_net:caif_netlink_parms(): no params data found [ 73.652530][ T5244] chnl_net:caif_netlink_parms(): no params data found [ 73.721875][ T5237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.734927][ T5237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.807692][ T5241] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.815693][ T5241] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.823087][ T5241] bridge_slave_0: entered allmulticast mode [ 73.831748][ T5241] bridge_slave_0: entered promiscuous mode [ 73.895215][ T5241] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.902910][ T5241] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.910290][ T5241] bridge_slave_1: entered allmulticast mode [ 73.917469][ T5241] bridge_slave_1: entered promiscuous mode [ 73.924599][ T5246] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.932077][ T5246] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.939552][ T5246] bridge_slave_0: entered allmulticast mode [ 73.946564][ T5246] bridge_slave_0: entered promiscuous mode [ 73.980439][ T5237] team0: Port device team_slave_0 added [ 73.998758][ T5246] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.006164][ T5246] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.013508][ T5246] bridge_slave_1: entered allmulticast mode [ 74.021663][ T5246] bridge_slave_1: entered promiscuous mode [ 74.049219][ T5237] team0: Port device team_slave_1 added [ 74.116038][ T5252] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.126257][ T5252] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.133807][ T5252] bridge_slave_0: entered allmulticast mode [ 74.141112][ T5252] bridge_slave_0: entered promiscuous mode [ 74.163305][ T5241] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.177236][ T5241] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.191750][ T5246] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.202142][ T5244] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.210291][ T5244] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.217518][ T5244] bridge_slave_0: entered allmulticast mode [ 74.224939][ T5244] bridge_slave_0: entered promiscuous mode [ 74.232748][ T5252] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.240153][ T5252] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.247367][ T5252] bridge_slave_1: entered allmulticast mode [ 74.254848][ T5252] bridge_slave_1: entered promiscuous mode [ 74.294492][ T5246] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.318385][ T5244] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.326406][ T5244] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.333863][ T5244] bridge_slave_1: entered allmulticast mode [ 74.341620][ T5244] bridge_slave_1: entered promiscuous mode [ 74.373287][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.380428][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.406440][ T5237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.436950][ T5241] team0: Port device team_slave_0 added [ 74.457535][ T5246] team0: Port device team_slave_0 added [ 74.488764][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.499575][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.526495][ T5237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.539918][ T5241] team0: Port device team_slave_1 added [ 74.556778][ T5246] team0: Port device team_slave_1 added [ 74.565223][ T5244] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.578275][ T5244] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.592986][ T5252] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.606019][ T5252] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.671293][ T54] Bluetooth: hci2: command tx timeout [ 74.677364][ T5248] Bluetooth: hci3: command tx timeout [ 74.698748][ T5246] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.706026][ T5246] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.732942][ T5246] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.739657][ T5248] Bluetooth: hci0: command tx timeout [ 74.743718][ T54] Bluetooth: hci1: command tx timeout [ 74.749358][ T5251] Bluetooth: hci4: command tx timeout [ 74.758044][ T5246] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.768475][ T5246] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.795048][ T5246] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.856305][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.863610][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 74.889785][ T5241] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.913439][ T5244] team0: Port device team_slave_0 added [ 74.923188][ T5244] team0: Port device team_slave_1 added [ 74.934681][ T5237] hsr_slave_0: entered promiscuous mode [ 74.942008][ T5237] hsr_slave_1: entered promiscuous mode [ 74.968824][ T5252] team0: Port device team_slave_0 added [ 74.975838][ T5241] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.983382][ T5241] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.009419][ T5241] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.074808][ T5252] team0: Port device team_slave_1 added [ 75.125657][ T5244] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.132695][ T5244] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.159132][ T5244] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.205355][ T5246] hsr_slave_0: entered promiscuous mode [ 75.212413][ T5246] hsr_slave_1: entered promiscuous mode [ 75.218710][ T5246] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.227179][ T5246] Cannot create hsr debugfs directory [ 75.248284][ T5244] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.255400][ T5244] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.281380][ T5244] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.306928][ T5252] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.314034][ T5252] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.340852][ T5252] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.353988][ T5252] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.361086][ T5252] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.387797][ T5252] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 75.416267][ T5241] hsr_slave_0: entered promiscuous mode [ 75.423037][ T5241] hsr_slave_1: entered promiscuous mode [ 75.429968][ T5241] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.437551][ T5241] Cannot create hsr debugfs directory [ 75.547971][ T5244] hsr_slave_0: entered promiscuous mode [ 75.554616][ T5244] hsr_slave_1: entered promiscuous mode [ 75.564721][ T5244] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.572863][ T5244] Cannot create hsr debugfs directory [ 75.621671][ T5252] hsr_slave_0: entered promiscuous mode [ 75.628364][ T5252] hsr_slave_1: entered promiscuous mode [ 75.634846][ T5252] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 75.643554][ T5252] Cannot create hsr debugfs directory [ 76.050101][ T5237] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 76.063183][ T5237] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 76.104372][ T5237] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 76.131560][ T5237] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 76.206150][ T5246] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 76.216824][ T5246] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 76.229908][ T5246] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 76.253511][ T5246] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 76.365330][ T5252] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 76.376225][ T5252] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 76.387495][ T5252] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 76.401961][ T5252] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 76.494202][ T5241] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 76.542610][ T5241] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 76.556220][ T5241] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 76.567742][ T5241] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 76.663431][ T5237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.691617][ T5244] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 76.705630][ T5244] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 76.718215][ T5244] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 76.741016][ T5251] Bluetooth: hci2: command tx timeout [ 76.746493][ T5248] Bluetooth: hci3: command tx timeout [ 76.760718][ T5244] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 76.804884][ T5237] 8021q: adding VLAN 0 to HW filter on device team0 [ 76.819453][ T5248] Bluetooth: hci0: command tx timeout [ 76.825006][ T5248] Bluetooth: hci4: command tx timeout [ 76.831048][ T5251] Bluetooth: hci1: command tx timeout [ 76.856827][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.864216][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 76.876068][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.883254][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.905650][ T5246] 8021q: adding VLAN 0 to HW filter on device bond0 [ 76.993550][ T5252] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.051147][ T5246] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.118367][ T2982] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.125569][ T2982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.143023][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.150241][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.190475][ T5241] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.200107][ T5252] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.238986][ T2534] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.246170][ T2534] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.282528][ T2534] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.289744][ T2534] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.338812][ T5244] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.381130][ T5241] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.405619][ T5244] 8021q: adding VLAN 0 to HW filter on device team0 [ 77.470450][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.477647][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.526198][ T1108] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.533520][ T1108] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.558831][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.566101][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 77.613526][ T5252] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 77.647964][ T2590] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.655245][ T2590] bridge0: port 2(bridge_slave_1) entered forwarding state [ 77.817683][ T5237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.897380][ T5246] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.082200][ T5237] veth0_vlan: entered promiscuous mode [ 78.120904][ T5237] veth1_vlan: entered promiscuous mode [ 78.168105][ T5252] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.280905][ T5237] veth0_macvtap: entered promiscuous mode [ 78.324092][ T5237] veth1_macvtap: entered promiscuous mode [ 78.381952][ T5241] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.426043][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.477570][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.522190][ T5244] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.541728][ T5237] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.551215][ T5237] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.561164][ T5237] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.570423][ T5237] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.676049][ T5252] veth0_vlan: entered promiscuous mode [ 78.724272][ T5252] veth1_vlan: entered promiscuous mode [ 78.766277][ T5244] veth0_vlan: entered promiscuous mode [ 78.777255][ T5241] veth0_vlan: entered promiscuous mode [ 78.812235][ T5246] veth0_vlan: entered promiscuous mode [ 78.819913][ T5248] Bluetooth: hci3: command tx timeout [ 78.825378][ T5248] Bluetooth: hci2: command tx timeout [ 78.834209][ T5241] veth1_vlan: entered promiscuous mode [ 78.872003][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.880276][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.900878][ T5251] Bluetooth: hci4: command tx timeout [ 78.903983][ T54] Bluetooth: hci1: command tx timeout [ 78.906386][ T5248] Bluetooth: hci0: command tx timeout [ 78.926304][ T5246] veth1_vlan: entered promiscuous mode [ 78.966191][ T5244] veth1_vlan: entered promiscuous mode [ 78.997670][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.019283][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.041997][ T5252] veth0_macvtap: entered promiscuous mode [ 79.068869][ T5241] veth0_macvtap: entered promiscuous mode [ 79.081848][ T5241] veth1_macvtap: entered promiscuous mode [ 79.106707][ T5252] veth1_macvtap: entered promiscuous mode [ 79.166132][ T5246] veth0_macvtap: entered promiscuous mode [ 79.201217][ T5244] veth0_macvtap: entered promiscuous mode [ 79.217601][ T5246] veth1_macvtap: entered promiscuous mode [ 79.242874][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.274065][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.291981][ T5252] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.304284][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.317128][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.331718][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.342617][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.355815][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.368619][ T5244] veth1_macvtap: entered promiscuous mode [ 79.405511][ T5252] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.425846][ T5252] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.461602][ T5252] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.480342][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.495441][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.507080][ T5241] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.519506][ T5241] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.531571][ T5241] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.545172][ T5241] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.555772][ T5241] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.564922][ T5241] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.576061][ T5241] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.657544][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.684747][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.697661][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.712720][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.722969][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.733634][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.746305][ T5244] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.755238][ T5252] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.764914][ T5252] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.774607][ T5252] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.787007][ T5252] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.805010][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.815817][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.826709][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.838624][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.850753][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.861694][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.872630][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.883355][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.897940][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.914139][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.925030][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.937805][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.953677][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.965589][ T5244] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.976411][ T5244] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.988624][ T5244] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.015864][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.028534][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.040085][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.051701][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.061698][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.072456][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.082935][ T5246] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.093477][ T5246] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.106336][ T5246] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.125996][ T5246] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.135587][ T5246] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.145228][ T5246] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.156159][ T5246] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.200756][ T5244] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.218026][ T5244] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.231723][ T5244] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.249032][ T5244] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.432954][ T2590] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.443893][ T2590] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.540776][ T2982] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.548701][ T2982] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.612984][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.624849][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.707952][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.719334][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.777306][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.786736][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.873425][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.886384][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.899383][ T5248] Bluetooth: hci2: command tx timeout [ 80.904964][ T5248] Bluetooth: hci3: command tx timeout [ 80.979912][ T5248] Bluetooth: hci1: command tx timeout [ 80.980411][ T54] Bluetooth: hci0: command tx timeout [ 80.985412][ T5251] Bluetooth: hci4: command tx timeout [ 81.091026][ T2590] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.131064][ T2590] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.264777][ T2534] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.308100][ T2534] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.533459][ T5361] netlink: 'syz.1.14': attribute type 1 has an invalid length. [ 81.561264][ T5361] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.14'. [ 81.609687][ T5361] netlink: 5 bytes leftover after parsing attributes in process `syz.1.14'. [ 81.790249][ T5370] netlink: 'syz.0.16': attribute type 2 has an invalid length. [ 81.823584][ T5370] netlink: 'syz.0.16': attribute type 1 has an invalid length. [ 81.839201][ T5370] netlink: 128 bytes leftover after parsing attributes in process `syz.0.16'. [ 81.894360][ T5370] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16'. [ 81.909908][ T5374] netlink: 4 bytes leftover after parsing attributes in process `syz.4.19'. [ 82.016075][ T5378] Bluetooth: MGMT ver 1.23 [ 82.041759][ T5379] netlink: 16 bytes leftover after parsing attributes in process `syz.0.16'. [ 82.094428][ T5378] Illegal XDP return value 4294967274 on prog (id 6) dev N/A, expect packet loss! [ 82.481434][ T5389] sctp: [Deprecated]: syz.1.23 (pid 5389) Use of struct sctp_assoc_value in delayed_ack socket option. [ 82.481434][ T5389] Use struct sctp_sack_info instead [ 82.866832][ T5408] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 82.889090][ T5407] netlink: 'syz.0.28': attribute type 21 has an invalid length. [ 82.943838][ T5408] openvswitch: netlink: Unexpected mask (mask=240, allowed=10048) [ 83.067551][ T5417] Zero length message leads to an empty skb [ 83.298651][ T5425] netlink: 12 bytes leftover after parsing attributes in process `syz.1.33'. [ 83.569242][ T5449] syz.2.40 uses obsolete (PF_INET,SOCK_PACKET) [ 83.641727][ T5449] netlink: 56 bytes leftover after parsing attributes in process `syz.2.40'. [ 83.648873][ T5444] netlink: 210620 bytes leftover after parsing attributes in process `syz.1.39'. [ 83.698839][ T5449] netlink: 12 bytes leftover after parsing attributes in process `syz.2.40'. [ 83.800170][ T5449] netlink: 'syz.2.40': attribute type 2 has an invalid length. [ 84.414777][ T5480] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 84.577663][ T5431] netlink: zone id is out of range [ 84.625069][ T5489] team_slave_1: entered promiscuous mode [ 84.671577][ T5489] A link change request failed with some changes committed already. Interface team_slave_1 may have been left with an inconsistent configuration, please check. [ 84.905549][ T5504] ax25_connect(): syz.4.51 uses autobind, please contact jreuter@yaina.de [ 85.422499][ T5524] x_tables: duplicate underflow at hook 2 [ 85.438752][ T5524] lo: entered promiscuous mode [ 85.446541][ T5524] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 85.753183][ T5538] : renamed from ipvlan1 [ 85.961705][ T5544] warning: `syz.0.61' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 86.558787][ T5555] batadv1: entered allmulticast mode [ 86.565143][ T5558] xt_hashlimit: Unknown mode mask 115, kernel too old? [ 86.772524][ T5572] __nla_validate_parse: 10 callbacks suppressed [ 86.772545][ T5572] netlink: 40 bytes leftover after parsing attributes in process `syz.2.71'. [ 86.908111][ T5577] netlink: 28 bytes leftover after parsing attributes in process `syz.1.70'. [ 86.985059][ T945] cfg80211: failed to load regulatory.db [ 87.560646][ T5600] netlink: 8 bytes leftover after parsing attributes in process `syz.0.79'. [ 87.606522][ T5600] netlink: 256 bytes leftover after parsing attributes in process `syz.0.79'. [ 88.359274][ T5630] netlink: 'syz.1.84': attribute type 29 has an invalid length. [ 88.549922][ T5635] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 88.939300][ T5650] netlink: 20 bytes leftover after parsing attributes in process `syz.2.89'. [ 88.973994][ T5646] x_tables: unsorted underflow at hook 1 [ 88.983651][ T5653] lo: entered allmulticast mode [ 89.005732][ T5651] lo: left allmulticast mode [ 89.065849][ T5646] netlink: 84 bytes leftover after parsing attributes in process `syz.2.89'. [ 89.082221][ T5646] netlink: 84 bytes leftover after parsing attributes in process `syz.2.89'. [ 89.329707][ T5665] netlink: 7 bytes leftover after parsing attributes in process `syz.2.94'. [ 89.416411][ T5665] netlink: 8 bytes leftover after parsing attributes in process `syz.2.94'. [ 89.693041][ T5680] netlink: 80 bytes leftover after parsing attributes in process `syz.3.100'. [ 89.758954][ T29] audit: type=1107 audit(1725795996.513:2): pid=5681 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='sËáÐî' [ 89.806202][ T5685] openvswitch: netlink: EtherType 0 is less than min 600 [ 89.859504][ T5686] (unnamed net_device) (uninitialized): (slave team0): Device is not bonding slave [ 89.897903][ T5686] (unnamed net_device) (uninitialized): option active_slave: invalid value (team0) [ 89.952620][ T5685] (unnamed net_device) (uninitialized): (slave team0): Device is not bonding slave [ 89.970000][ T5685] (unnamed net_device) (uninitialized): option active_slave: invalid value (team0) [ 90.361706][ T5720] openvswitch: netlink: Missing key (keys=40, expected=80) [ 90.661451][ T5738] : renamed from bond0 (while UP) [ 90.927025][ T5747] syz.4.119: vmalloc error: size 17179873280, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz4,mems_allowed=0-1 [ 90.965495][ T5747] CPU: 0 UID: 0 PID: 5747 Comm: syz.4.119 Not tainted 6.11.0-rc6-syzkaller-00178-gd759ee240d3c #0 [ 90.976164][ T5747] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 90.986275][ T5747] Call Trace: [ 90.989595][ T5747] [ 90.992566][ T5747] dump_stack_lvl+0x241/0x360 [ 90.997315][ T5747] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.002568][ T5747] ? __pfx__printk+0x10/0x10 [ 91.007227][ T5747] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 91.013687][ T5747] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 91.020243][ T5747] warn_alloc+0x278/0x410 [ 91.024618][ T5747] ? stack_depot_save_flags+0x6e4/0x830 [ 91.030196][ T5747] ? __vmalloc_node_range_noprof+0x106/0x1400 [ 91.036280][ T5747] ? __pfx_warn_alloc+0x10/0x10 [ 91.041157][ T5747] ? kasan_save_track+0x3f/0x80 [ 91.046023][ T5747] ? __kasan_kmalloc+0x98/0xb0 [ 91.050804][ T5747] ? xsk_setsockopt+0x598/0x950 [ 91.055705][ T5747] ? do_sock_setsockopt+0x3af/0x720 [ 91.061031][ T5747] ? __sys_setsockopt+0x1ae/0x250 [ 91.066069][ T5747] ? __x64_sys_setsockopt+0xb5/0xd0 [ 91.071285][ T5747] ? do_syscall_64+0xf3/0x230 [ 91.075989][ T5747] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.082080][ T5747] __vmalloc_node_range_noprof+0x126/0x1400 [ 91.088012][ T5747] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 91.094356][ T5747] ? __kasan_kmalloc+0x98/0xb0 [ 91.099140][ T5747] ? xskq_create+0x54/0x170 [ 91.103743][ T5747] vmalloc_user_noprof+0x74/0x80 [ 91.108689][ T5747] ? xskq_create+0xb6/0x170 [ 91.113284][ T5747] xskq_create+0xb6/0x170 [ 91.117624][ T5747] xsk_init_queue+0xa1/0x100 [ 91.122238][ T5747] xsk_setsockopt+0x598/0x950 [ 91.126935][ T5747] ? __pfx_xsk_setsockopt+0x10/0x10 [ 91.132158][ T5747] ? __pfx_lock_acquire+0x10/0x10 [ 91.137226][ T5747] ? aa_sock_opt_perm+0x79/0x120 [ 91.142183][ T5747] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 91.147767][ T5747] ? security_socket_setsockopt+0x87/0xb0 [ 91.153531][ T5747] ? __pfx_xsk_setsockopt+0x10/0x10 [ 91.158762][ T5747] do_sock_setsockopt+0x3af/0x720 [ 91.163833][ T5747] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 91.169406][ T5747] ? __fget_files+0x29/0x470 [ 91.174033][ T5747] ? __fget_files+0x3f6/0x470 [ 91.178741][ T5747] __sys_setsockopt+0x1ae/0x250 [ 91.183620][ T5747] __x64_sys_setsockopt+0xb5/0xd0 [ 91.188670][ T5747] do_syscall_64+0xf3/0x230 [ 91.193196][ T5747] ? clear_bhb_loop+0x35/0x90 [ 91.197893][ T5747] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.203830][ T5747] RIP: 0033:0x7f8c1917cef9 [ 91.208263][ T5747] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.227914][ T5747] RSP: 002b:00007f8c1a046038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 91.236360][ T5747] RAX: ffffffffffffffda RBX: 00007f8c19335f80 RCX: 00007f8c1917cef9 [ 91.244357][ T5747] RDX: 0000000000000002 RSI: 000000000000011b RDI: 0000000000000004 [ 91.252369][ T5747] RBP: 00007f8c191ef046 R08: 0000000000000004 R09: 0000000000000000 [ 91.260351][ T5747] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.268328][ T5747] R13: 0000000000000000 R14: 00007f8c19335f80 R15: 00007fffa10eb658 [ 91.276327][ T5747] [ 91.300015][ T5747] Mem-Info: [ 91.303208][ T5747] active_anon:6747 inactive_anon:0 isolated_anon:0 [ 91.303208][ T5747] active_file:1085 inactive_file:38177 isolated_file:0 [ 91.303208][ T5747] unevictable:768 dirty:388 writeback:0 [ 91.303208][ T5747] slab_reclaimable:8930 slab_unreclaimable:93172 [ 91.303208][ T5747] mapped:20647 shmem:3957 pagetables:776 [ 91.303208][ T5747] sec_pagetables:0 bounce:0 [ 91.303208][ T5747] kernel_misc_reclaimable:0 [ 91.303208][ T5747] free:1371614 free_pcp:505 free_cma:0 [ 91.373270][ T5747] Node 0 active_anon:28288kB inactive_anon:0kB active_file:4340kB inactive_file:152632kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:82588kB dirty:1552kB writeback:0kB shmem:15592kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10464kB pagetables:3104kB sec_pagetables:0kB all_unreclaimable? no [ 91.434098][ T5747] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 91.466065][ T5751] bridge2: entered promiscuous mode [ 91.466093][ T5751] bridge2: entered allmulticast mode [ 91.519808][ T5747] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 91.632941][ T5747] lowmem_reserve[]: 0 2467 2468 0 0 [ 91.670139][ T5747] Node 0 DMA32 free:1513972kB boost:0kB min:34228kB low:42784kB high:51340kB reserved_highatomic:0KB active_anon:30536kB inactive_anon:0kB active_file:4340kB inactive_file:151820kB unevictable:1536kB writepending:1552kB present:3129332kB managed:2554984kB mlocked:0kB bounce:0kB free_pcp:1288kB local_pcp:912kB free_cma:0kB [ 91.729182][ T5747] lowmem_reserve[]: 0 0 0 0 0 [ 91.735072][ T5747] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:812kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 91.781979][ T5747] lowmem_reserve[]: 0 0 0 0 0 [ 91.787457][ T5761] __nla_validate_parse: 7 callbacks suppressed [ 91.787483][ T5761] netlink: 8 bytes leftover after parsing attributes in process `syz.3.124'. [ 91.808617][ T5747] Node 1 Normal free:3947724kB boost:0kB min:55660kB low:69572kB high:83484kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:96kB local_pcp:0kB free_cma:0kB [ 91.875634][ T5764] netlink: 24 bytes leftover after parsing attributes in process `syz.3.124'. [ 91.895962][ T5747] lowmem_reserve[]: 0 0 0 0 0 [ 91.979532][ T5747] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 92.034383][ T5747] Node 0 DMA32: 162*4kB (UM) 448*8kB (UME) 353*16kB (UME) 38*32kB (UME) 36*64kB (UME) 14*128kB (UME) 10*256kB [ 92.034593][ T5769] netlink: 32 bytes leftover after parsing attributes in process `syz.2.127'. [ 92.066480][ T5747] (ME) 6*512kB (UME) 2*1024kB (UE) 5*2048kB (UME) 365*4096kB (M) = 1528152kB [ 92.125013][ T5747] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 92.150627][ T5769] netlink: 'syz.2.127': attribute type 1 has an invalid length. [ 92.158173][ T5747] Node 1 Normal: 1*4kB (U) 5*8kB (U) 4*16kB (U) 3*32kB (U) 2*64kB (UM) 5*128kB (U) 3*256kB (UM) 1*512kB (M) 1*1024kB (U) 0*2048kB 963*4096kB (M) = 3947724kB [ 92.166831][ T5769] netlink: 224 bytes leftover after parsing attributes in process `syz.2.127'. [ 92.192659][ T5747] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 92.197129][ T5777] batadv0: entered promiscuous mode [ 92.229431][ T5747] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 92.243771][ T5780] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 92.259056][ T5747] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 92.292352][ T5747] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 92.309096][ T5747] 41203 total pagecache pages [ 92.318476][ T5747] 0 pages in swap cache [ 92.328742][ T5747] Free swap = 124996kB [ 92.339049][ T5747] Total swap = 124996kB [ 92.352594][ T5747] 2097051 pages RAM [ 92.375001][ T5747] 0 pages HighMem/MovableOnly [ 92.387641][ T5747] 426967 pages reserved [ 92.402505][ T5747] 0 pages cma reserved [ 92.467162][ T5779] netlink: 8 bytes leftover after parsing attributes in process `syz.2.127'. [ 92.555232][ T5781] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.593661][ T5788] netlink: 32 bytes leftover after parsing attributes in process `syz.3.130'. [ 92.828060][ T5794] netlink: 8 bytes leftover after parsing attributes in process `syz.4.132'. [ 93.612908][ T5835] x_tables: duplicate underflow at hook 2 [ 93.619223][ T5836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.144'. [ 93.657231][ T5836] netlink: 8 bytes leftover after parsing attributes in process `syz.1.144'. [ 94.112585][ T5859] do_dccp_setsockopt: sockopt(CHANGE_L/R) is deprecated: fix your app [ 94.245254][ T5865] netlink: 8 bytes leftover after parsing attributes in process `syz.2.152'. [ 94.343200][ T5863] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 94.689704][ T5880] netlink: 'syz.2.157': attribute type 4 has an invalid length. [ 94.711979][ T5880] netlink: 'syz.2.157': attribute type 1 has an invalid length. [ 94.738281][ T5880] netlink: 'syz.2.157': attribute type 7 has an invalid length. [ 94.809051][ T29] audit: type=1107 audit(1725796001.553:3): pid=5879 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='Š63ú\›†m!öiN›íŠÉÍ‹ôEð~8§*ÔŽFEß@P7+¼kÜÖ' [ 94.836292][ T5887] netem: change failed [ 94.972366][ T5891] macvtap0: entered promiscuous mode [ 94.988588][ T5891] macvtap0: entered allmulticast mode [ 95.017045][ T5891] veth0_macvtap: entered allmulticast mode [ 96.912158][ T5914] __nla_validate_parse: 9 callbacks suppressed [ 96.912174][ T5914] netlink: 28 bytes leftover after parsing attributes in process `syz.0.166'. [ 96.927439][ T5914] netlink: 28 bytes leftover after parsing attributes in process `syz.0.166'. [ 96.941808][ T5914] team0: entered promiscuous mode [ 96.946881][ T5914] team_slave_0: entered promiscuous mode [ 96.958168][ T5914] batadv_slave_1: entered promiscuous mode [ 97.000393][ T5919] netlink: 76 bytes leftover after parsing attributes in process `syz.2.170'. [ 97.019583][ T5920] netlink: 2 bytes leftover after parsing attributes in process `syz.3.168'. [ 97.044339][ T5922] IPVS: Unknown mcast interface: [ 97.459249][ T5940] netlink: 28 bytes leftover after parsing attributes in process `syz.2.177'. [ 97.475430][ T5940] netlink: 28 bytes leftover after parsing attributes in process `syz.2.177'. [ 97.504529][ T5940] gretap0: entered promiscuous mode [ 97.520700][ T5940] batadv_slave_1: entered promiscuous mode [ 97.544463][ T5940] debugfs: Directory 'hsr1' with parent 'hsr' already present! [ 97.554269][ T5940] Cannot create hsr debugfs directory [ 97.797781][ T5956] netlink: 830 bytes leftover after parsing attributes in process `syz.2.180'. [ 97.982832][ T5968] netlink: 144 bytes leftover after parsing attributes in process `syz.3.183'. [ 98.147678][ T5970] netlink: 24 bytes leftover after parsing attributes in process `syz.2.185'. [ 98.217876][ T5974] netlink: 12 bytes leftover after parsing attributes in process `syz.4.186'. [ 99.117418][ T6034] x_tables: duplicate underflow at hook 2 [ 99.565771][ T6054] netlink: 'syz.0.205': attribute type 21 has an invalid length. [ 99.686177][ T6066] netlink: 'syz.1.207': attribute type 8 has an invalid length. [ 99.842684][ T6072] netlink: 'syz.0.210': attribute type 3 has an invalid length. [ 100.352373][ T4690] udevd[4690]: worker [5239] terminated by signal 33 (Unknown signal 33) [ 100.373684][ T4690] udevd[4690]: worker [5239] failed while handling '/devices/virtual/block/loop4' [ 100.839885][ T6116] IPVS: set_ctl: invalid protocol: 58 172.30.0.3:20002 [ 100.914743][ T6118] can: request_module (can-proto-4) failed. [ 101.205409][ T6136] bridge0: port 2(bridge_slave_1) entered disabled state [ 101.214803][ T6136] bridge0: port 1(bridge_slave_0) entered disabled state [ 101.321973][ T6129] ipvlan2: entered promiscuous mode [ 101.330200][ T6141] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 101.993961][ T6173] __nla_validate_parse: 14 callbacks suppressed [ 101.993984][ T6173] netlink: 40 bytes leftover after parsing attributes in process `syz.4.239'. [ 102.141609][ T6172] netlink: 40 bytes leftover after parsing attributes in process `syz.4.239'. [ 102.419916][ T5251] Bluetooth: hci4: command tx timeout [ 102.482906][ T6195] netlink: 'syz.1.244': attribute type 6 has an invalid length. [ 102.558132][ T6205] netlink: 12 bytes leftover after parsing attributes in process `syz.0.248'. [ 102.578403][ T6205] xfrm1: entered promiscuous mode [ 102.592309][ T6205] xfrm1: entered allmulticast mode [ 102.618737][ T6206] netlink: 'syz.1.244': attribute type 4 has an invalid length. [ 103.153487][ T6235] netlink: 44 bytes leftover after parsing attributes in process `syz.3.258'. [ 103.371669][ T6242] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 103.516890][ T6256] netlink: 100 bytes leftover after parsing attributes in process `syz.1.260'. [ 103.592461][ T6252] sit0: entered allmulticast mode [ 103.719485][ T6256] netlink: 'syz.1.260': attribute type 3 has an invalid length. [ 103.760358][ T6256] sit0: entered promiscuous mode [ 103.890646][ T6267] mac80211_hwsim hwsim6 wlan1: entered allmulticast mode [ 103.901946][ T6273] xt_CT: You must specify a L4 protocol and not use inversions on it [ 104.006938][ T6276] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 104.039592][ T6276] netlink: 104 bytes leftover after parsing attributes in process `syz.0.271'. [ 104.041118][ T6279] netlink: 13 bytes leftover after parsing attributes in process `syz.3.272'. [ 104.068098][ T6280] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.273'. [ 104.213904][ T6285] netlink: 244 bytes leftover after parsing attributes in process `syz.4.275'. [ 104.228982][ T6285] xt_CT: You must specify a L4 protocol and not use inversions on it [ 104.721591][ T6311] dvmrp0: entered allmulticast mode [ 104.935336][ T6317] netlink: 8 bytes leftover after parsing attributes in process `syz.0.282'. [ 105.196468][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 105.426971][ T6339] vxcan1: tx address claim with different name [ 105.715424][ T6346] openvswitch: netlink: Unknown nsh attribute 0 [ 106.368344][ T6365] syzkaller0: entered promiscuous mode [ 106.384944][ T6365] syzkaller0: entered allmulticast mode [ 106.744566][ T6383] netlink: 'syz.4.301': attribute type 11 has an invalid length. [ 107.199528][ T6396] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 107.222060][ T6402] __nla_validate_parse: 2 callbacks suppressed [ 107.222080][ T6402] netlink: 4 bytes leftover after parsing attributes in process `syz.4.308'. [ 107.269071][ T6402] netlink: 50 bytes leftover after parsing attributes in process `syz.4.308'. [ 107.278062][ T6402] netlink: 50 bytes leftover after parsing attributes in process `syz.4.308'. [ 107.402468][ T6402] netlink: 'syz.4.308': attribute type 5 has an invalid length. [ 107.530343][ T6409] veth0_vlan: left promiscuous mode [ 107.537456][ T6409] veth0_vlan: entered promiscuous mode [ 107.633240][ T6413] nicvf0: tun_chr_ioctl cmd 1074025676 [ 107.655070][ T6413] nicvf0: owner set to 0 [ 107.763547][ T6419] netlink: 'syz.0.313': attribute type 10 has an invalid length. [ 107.805786][ T6419] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 108.208356][ T6436] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 108.258070][ T6436] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 108.283149][ T6436] gretap1: entered promiscuous mode [ 108.310925][ T6436] gretap1: entered allmulticast mode [ 108.327080][ T6439] netlink: 20 bytes leftover after parsing attributes in process `syz.2.317'. [ 108.725951][ T6450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.322'. [ 108.811364][ T6450] bond1: entered promiscuous mode [ 108.819154][ T6451] netlink: 4 bytes leftover after parsing attributes in process `syz.3.322'. [ 108.893742][ T6461] netlink: 'syz.2.323': attribute type 3 has an invalid length. [ 108.909864][ T6461] netlink: 'syz.2.323': attribute type 1 has an invalid length. [ 108.918081][ T6461] netlink: 181156 bytes leftover after parsing attributes in process `syz.2.323'. [ 108.931658][ T6451] bond1 (unregistering): Released all slaves [ 109.019496][ T6450] netlink: 23 bytes leftover after parsing attributes in process `syz.3.322'. [ 109.148551][ T6450] netlink: 12 bytes leftover after parsing attributes in process `syz.3.322'. [ 109.252931][ T6474] netlink: 20 bytes leftover after parsing attributes in process `syz.2.328'. [ 109.641993][ T6492] netlink: 'syz.0.334': attribute type 4 has an invalid length. [ 109.719205][ T6492] netlink: 'syz.0.334': attribute type 4 has an invalid length. [ 109.769360][ T6502] netlink: 'syz.0.334': attribute type 4 has an invalid length. [ 109.791703][ T6501] netlink: 'syz.0.334': attribute type 4 has an invalid length. [ 109.929286][ T6508] netlink: 'syz.2.338': attribute type 1 has an invalid length. [ 110.010826][ T6508] 8021q: adding VLAN 0 to HW filter on device bond1 [ 110.336114][ T6526] netlink: 'syz.0.343': attribute type 1 has an invalid length. [ 111.250864][ T6580] xt_hashlimit: size too large, truncated to 1048576 [ 111.258237][ T6582] lo: entered promiscuous mode [ 111.264991][ T6582] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 111.455341][ T6573] syz.0.357 (6573) used greatest stack depth: 18128 bytes left [ 111.455591][ T6587] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.472941][ T6587] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.481870][ T6587] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.490683][ T6587] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.970977][ T6620] 8021q: VLANs not supported on ipvlan1 [ 111.978172][ T6623] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 112.017723][ T6619] veth0_macvtap: mtu less than device minimum [ 112.357127][ T6634] __nla_validate_parse: 11 callbacks suppressed [ 112.357148][ T6634] netlink: 12 bytes leftover after parsing attributes in process `syz.4.376'. [ 112.457233][ T6637] netlink: 12 bytes leftover after parsing attributes in process `syz.3.374'. [ 112.480127][ T6637] IPv6: NLM_F_REPLACE set, but no existing node found! [ 112.511314][ T9] IPVS: starting estimator thread 0... [ 112.525428][ T6637] netlink: 4 bytes leftover after parsing attributes in process `syz.3.374'. [ 112.545321][ T6637] netlink: 24 bytes leftover after parsing attributes in process `syz.3.374'. [ 112.554456][ T6641] x_tables: duplicate underflow at hook 2 [ 112.629737][ T6642] IPVS: using max 17 ests per chain, 40800 per kthread [ 112.748011][ T6650] xt_ecn: cannot match TCP bits for non-tcp packets [ 112.771834][ T6654] validate_nla: 4 callbacks suppressed [ 112.771856][ T6654] netlink: 'syz.4.384': attribute type 1 has an invalid length. [ 112.792068][ T6654] netlink: 'syz.4.384': attribute type 2 has an invalid length. [ 113.134567][ T6636] syz.3.374 (6636) used greatest stack depth: 17808 bytes left [ 113.314165][ T6669] netlink: 'syz.3.389': attribute type 2 has an invalid length. [ 113.338954][ T6669] netlink: 4 bytes leftover after parsing attributes in process `syz.3.389'. [ 113.496101][ T6677] tipc: Started in network mode [ 113.509101][ T6677] tipc: Node identity fe80000000000000000000000000001, cluster identity 4711 [ 113.534818][ T6677] tipc: Enabled bearer , priority 10 [ 113.649510][ T6679] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 114.082130][ T6697] tap0: tun_chr_ioctl cmd 35108 [ 114.317946][ T6717] IPVS: sync thread started: state = MASTER, mcast_ifn = lo, syncid = 3, id = 0 [ 114.351740][ T6714] netlink: 4 bytes leftover after parsing attributes in process `syz.1.406'. [ 114.545240][ T6729] netlink: 12 bytes leftover after parsing attributes in process `syz.0.409'. [ 114.648644][ T6732] netlink: 'syz.3.407': attribute type 5 has an invalid length. [ 114.658169][ T5329] tipc: Node number set to 4269801488 [ 114.752406][ T6738] netlink: 12 bytes leftover after parsing attributes in process `syz.4.411'. [ 114.789139][ T6738] syzkaller0: entered promiscuous mode [ 114.795176][ T6738] syzkaller0: entered allmulticast mode [ 115.029967][ T6744] netlink: 'syz.3.414': attribute type 10 has an invalid length. [ 115.038699][ T6744] netlink: 212848 bytes leftover after parsing attributes in process `syz.3.414'. [ 115.135574][ T6752] netlink: 'syz.4.417': attribute type 29 has an invalid length. [ 115.156701][ T6752] netlink: 4 bytes leftover after parsing attributes in process `syz.4.417'. [ 115.257374][ T6759] netlink: 'syz.2.420': attribute type 10 has an invalid length. [ 115.296579][ T6759] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 115.376775][ T6729] llcp: nfc_llcp_send_ui_frame: Could not allocate PDU (error=-512) [ 115.472343][ C1] Unknown status report in ack skb [ 115.946645][ T6794] tls_set_device_offload: netdev not found [ 116.112498][ T6799] pim6reg527: entered allmulticast mode [ 116.168352][ T6802] sit0: entered promiscuous mode [ 116.210321][ T6802] netlink: 'syz.4.435': attribute type 1 has an invalid length. [ 116.865439][ T6843] netlink: 'syz.2.447': attribute type 1 has an invalid length. [ 116.901822][ T6844] openvswitch: netlink: Missing key (keys=100000040, expected=2000) [ 117.267129][ T6858] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 117.274452][ T6858] IPv6: NLM_F_CREATE should be set when creating new route [ 117.445927][ T6835] infiniband syz0: set active [ 117.454872][ T6835] infiniband syz0: added bond0 [ 117.561880][ T6835] RDS/IB: syz0: added [ 117.567019][ T6835] smc: adding ib device syz0 with port count 1 [ 117.573991][ T6835] smc: ib device syz0 port 1 has pnetid [ 117.589848][ T6873] ebt_among: wrong size: 2080 against expected 2604, rounded to 2608 [ 117.731233][ T6878] __nla_validate_parse: 7 callbacks suppressed [ 117.731253][ T6878] netlink: 8 bytes leftover after parsing attributes in process `syz.4.458'. [ 118.001490][ T6886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.460'. [ 118.081210][ T6886] netlink: 4 bytes leftover after parsing attributes in process `syz.4.460'. [ 118.680642][ T6917] netlink: 9412 bytes leftover after parsing attributes in process `syz.2.466'. [ 118.825444][ T6922] netlink: 'syz.1.468': attribute type 1 has an invalid length. [ 118.854836][ T6922] netlink: 112860 bytes leftover after parsing attributes in process `syz.1.468'. [ 118.874938][ T6922] netlink: 'syz.1.468': attribute type 1 has an invalid length. [ 119.175183][ T6945] openvswitch: netlink: Unknown nsh attribute 0 [ 119.404004][ T6959] netlink: 'syz.1.477': attribute type 3 has an invalid length. [ 119.410126][ T6957] netlink: 8 bytes leftover after parsing attributes in process `syz.4.476'. [ 119.432694][ T6959] netlink: 199836 bytes leftover after parsing attributes in process `syz.1.477'. [ 119.460502][ T5248] Bluetooth: hci4: command tx timeout [ 119.780690][ T6984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.482'. [ 120.250313][ T7002] netlink: 36 bytes leftover after parsing attributes in process `syz.0.486'. [ 120.276369][ T7002] netlink: 16 bytes leftover after parsing attributes in process `syz.0.486'. [ 120.736680][ T7028] team1: Mode changed to "activebackup" [ 121.008747][ T7050] IPVS: lblc: TCP 127.0.0.1:0 - no destination available [ 121.058021][ T5290] IPVS: starting estimator thread 0... [ 121.189176][ T7054] IPVS: using max 16 ests per chain, 38400 per kthread [ 121.257626][ T7057] netlink: 'syz.0.499': attribute type 4 has an invalid length. [ 121.277435][ T7057] netlink: 'syz.0.499': attribute type 4 has an invalid length. [ 121.532377][ T7074] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 121.546368][ T5248] Bluetooth: hci4: command 0x0405 tx timeout [ 121.557033][ T7074] gretap1: entered promiscuous mode [ 121.563253][ T7074] gretap1: entered allmulticast mode [ 122.040010][ T7106] netlink: 'syz.0.515': attribute type 5 has an invalid length. [ 122.067048][ T7109] netlink: 'syz.0.515': attribute type 5 has an invalid length. [ 122.966643][ T5290] IPVS: starting estimator thread 0... [ 122.980864][ T7149] IPVS: nq: SCTP 127.0.0.1:0 - no destination available [ 123.089106][ T7150] IPVS: using max 17 ests per chain, 40800 per kthread [ 123.510678][ T7181] __nla_validate_parse: 21 callbacks suppressed [ 123.510701][ T7181] netlink: 56 bytes leftover after parsing attributes in process `syz.2.541'. [ 123.549085][ T7181] netlink: 48 bytes leftover after parsing attributes in process `syz.2.541'. [ 123.603877][ T7185] netlink: 'syz.0.540': attribute type 11 has an invalid length. [ 123.912703][ T7197] netlink: 40 bytes leftover after parsing attributes in process `syz.1.544'. [ 124.060378][ T7209] netlink: 48 bytes leftover after parsing attributes in process `syz.0.547'. [ 124.107366][ T7211] netlink: 'syz.4.548': attribute type 21 has an invalid length. [ 124.124523][ T7211] netlink: 4 bytes leftover after parsing attributes in process `syz.4.548'. [ 124.266974][ T7220] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.551'. [ 124.304241][ T7220] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4 [ 124.783257][ T7244] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 124.913502][ T7250] bridge0: port 1(bridge_slave_0) entered disabled state [ 125.005701][ T7259] netlink: 32 bytes leftover after parsing attributes in process `syz.4.562'. [ 125.105880][ T7256] netlink: 'syz.3.560': attribute type 1 has an invalid length. [ 125.120716][ T7256] netlink: 4 bytes leftover after parsing attributes in process `syz.3.560'. [ 125.517000][ T7291] gtp0: entered promiscuous mode [ 125.522271][ T7291] gtp0: entered allmulticast mode [ 125.563645][ T7297] netlink: 4 bytes leftover after parsing attributes in process `syz.4.570'. [ 125.604028][ T7299] netlink: 'syz.3.569': attribute type 3 has an invalid length. [ 125.624585][ T7299] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.569'. [ 125.624915][ T7301] netlink: 'syz.0.571': attribute type 3 has an invalid length. [ 126.147849][ T7317] Unsupported ieee802154 address type: 0 [ 126.413254][ T7327] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 126.466382][ T7332] tipc: Can't bind to reserved service type 0 [ 126.494200][ T7327] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 126.689282][ T7344] syzkaller0: tun_chr_ioctl cmd 1074025673 [ 126.826046][ T7352] vxcan0: entered allmulticast mode [ 126.941390][ T7361] tipc: Enabling of bearer rejected, failed to enable media [ 126.981660][ T7361] tipc: Enabling of bearer rejected, failed to enable media [ 127.111538][ T7374] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 127.396674][ T7387] hsr0: entered promiscuous mode [ 127.405025][ T7387] macsec1: entered allmulticast mode [ 127.414427][ T7387] hsr0: entered allmulticast mode [ 127.426427][ T7387] hsr_slave_0: entered allmulticast mode [ 127.436606][ T7387] hsr_slave_1: entered allmulticast mode [ 127.448222][ T7387] hsr0: left allmulticast mode [ 127.456543][ T7387] hsr_slave_0: left allmulticast mode [ 127.464931][ T7387] hsr_slave_1: left allmulticast mode [ 127.790896][ T7403] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 127.811400][ T7403] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 127.838737][ T7403] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 127.853380][ T7403] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 128.011162][ T7406] veth0_macvtap: left promiscuous mode [ 128.186515][ T7424] xt_NFQUEUE: number of total queues is 0 [ 128.390913][ T7428] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.492960][ T7429] bridge_slave_1: left allmulticast mode [ 128.509641][ T7429] bridge_slave_1: left promiscuous mode [ 128.516372][ T7429] bridge0: port 2(bridge_slave_1) entered disabled state [ 128.544351][ T7429] bridge2: port 1(bridge_slave_1) entered blocking state [ 128.589757][ T7429] bridge2: port 1(bridge_slave_1) entered disabled state [ 128.609474][ T7429] bridge_slave_1: entered allmulticast mode [ 128.619793][ T7429] bridge_slave_1: entered promiscuous mode [ 128.646702][ T7445] __nla_validate_parse: 13 callbacks suppressed [ 128.646726][ T7445] netlink: 44 bytes leftover after parsing attributes in process `syz.2.609'. [ 128.812432][ T7455] netlink: 8 bytes leftover after parsing attributes in process `syz.3.610'. [ 128.823044][ T7455] netlink: 24 bytes leftover after parsing attributes in process `syz.3.610'. [ 128.836577][ T7455] Bluetooth: MGMT ver 1.23 [ 129.062647][ T7467] netlink: 8 bytes leftover after parsing attributes in process `syz.3.614'. [ 130.294168][ T7539] netlink: 4 bytes leftover after parsing attributes in process `syz.2.635'. [ 130.337718][ T7540] netlink: 44 bytes leftover after parsing attributes in process `syz.0.638'. [ 130.484840][ T7540] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.530072][ T7554] infiniband syz0: set active [ 130.658428][ T7540] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.681040][ T7558] netlink: 8 bytes leftover after parsing attributes in process `syz.4.642'. [ 130.701297][ T7561] netlink: 40 bytes leftover after parsing attributes in process `syz.3.643'. [ 130.714915][ T7559] netlink: 'syz.1.641': attribute type 11 has an invalid length. [ 130.778634][ T7562] netlink: 'syz.1.641': attribute type 11 has an invalid length. [ 130.799279][ T7540] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.854344][ T7562] debugfs: Directory 'netdev:' with parent 'phy6' already present! [ 130.967244][ T7540] bond0: (slave netdevsim0): Releasing backup interface [ 130.985348][ T7540] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.035775][ T7578] Cannot find add_set index 0 as target [ 131.055761][ T7571] sctp: [Deprecated]: syz.3.647 (pid 7571) Use of int in maxseg socket option. [ 131.055761][ T7571] Use struct sctp_assoc_value instead [ 131.203666][ T7540] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.261831][ T7540] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.339984][ T7540] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.365240][ T7586] netlink: 4 bytes leftover after parsing attributes in process `syz.4.651'. [ 131.416818][ T7540] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 131.445740][ T7595] netlink: 'syz.2.652': attribute type 14 has an invalid length. [ 131.941875][ T7620] netlink: 32 bytes leftover after parsing attributes in process `syz.2.660'. [ 132.534940][ T7659] netlink: 'syz.1.667': attribute type 24 has an invalid length. [ 132.573011][ T7662] x_tables: duplicate entry at hook 2 [ 132.943332][ T7674] IPVS: set_ctl: invalid protocol: 51 255.255.255.255:20001 [ 133.064145][ T1276] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.706191][ T7700] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 134.432110][ T7740] ax25_connect(): syz.0.696 uses autobind, please contact jreuter@yaina.de [ 134.501559][ T7742] __nla_validate_parse: 7 callbacks suppressed [ 134.501584][ T7742] netlink: 24 bytes leftover after parsing attributes in process `syz.2.697'. [ 134.529767][ T7744] geneve3: entered promiscuous mode [ 134.535969][ T7744] geneve3: entered allmulticast mode [ 134.583440][ T7747] netlink: 9412 bytes leftover after parsing attributes in process `syz.1.698'. [ 134.668002][ T7754] Bluetooth: MGMT ver 1.23 [ 134.678172][ T7752] netlink: 80 bytes leftover after parsing attributes in process `syz.2.697'. [ 134.714856][ T7754] A link change request failed with some changes committed already. Interface team0 may have been left with an inconsistent configuration, please check. [ 134.793356][ T7758] netlink: 12 bytes leftover after parsing attributes in process `syz.4.702'. [ 134.949041][ T7762] netlink: 8 bytes leftover after parsing attributes in process `syz.3.703'. [ 135.008678][ T7764] netlink: 248 bytes leftover after parsing attributes in process `syz.1.704'. [ 135.080975][ T7764] veth0_to_hsr: invalid flags given to default FDB implementation [ 135.582418][ T7782] netlink: 56 bytes leftover after parsing attributes in process `syz.1.710'. [ 135.626058][ T7782] netlink: 56 bytes leftover after parsing attributes in process `syz.1.710'. [ 135.790508][ T7796] netlink: 8 bytes leftover after parsing attributes in process `syz.4.716'. [ 135.864336][ T7796] netlink: 4 bytes leftover after parsing attributes in process `syz.4.716'. [ 135.887183][ T7805] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 136.204237][ T7817] netlink: 'syz.4.722': attribute type 1 has an invalid length. [ 136.326130][ T7829] sctp: [Deprecated]: syz.4.726 (pid 7829) Use of int in max_burst socket option deprecated. [ 136.326130][ T7829] Use struct sctp_assoc_value instead [ 136.670080][ T5251] Bluetooth: hci0: command tx timeout [ 136.844911][ T7855] ebt_among: wrong size: 2080 against expected 2268, rounded to 2272 [ 137.011750][ T7872] netlink: 'syz.1.737': attribute type 7 has an invalid length. [ 137.058971][ T7872] netlink: 'syz.1.737': attribute type 8 has an invalid length. [ 137.374837][ T7892] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 137.695963][ T7911] netlink: 'syz.2.747': attribute type 2 has an invalid length. [ 137.739769][ T7911] netlink: 'syz.2.747': attribute type 1 has an invalid length. [ 138.104042][ T7939] xt_CT: You must specify a L4 protocol and not use inversions on it [ 138.937997][ T7981] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 139.068785][ T7997] x_tables: duplicate underflow at hook 1 [ 139.075178][ T7996] netlink: 'syz.3.771': attribute type 32 has an invalid length. [ 139.681905][ T8034] IPVS: Error joining to the multicast group [ 139.724357][ T8033] __nla_validate_parse: 23 callbacks suppressed [ 139.724377][ T8033] netlink: 48 bytes leftover after parsing attributes in process `syz.0.779'. [ 139.940632][ T8041] sock: sock_timestamping_bind_phc: sock not bind to device [ 139.977507][ T8048] netlink: 192 bytes leftover after parsing attributes in process `syz.3.783'. [ 139.995434][ T8049] netlink: 36 bytes leftover after parsing attributes in process `syz.0.784'. [ 140.041794][ T8048] batadv0: entered promiscuous mode [ 140.058209][ T8048] batadv_slave_0: entered promiscuous mode [ 140.064661][ T8048] batadv_slave_0: left promiscuous mode [ 140.092126][ T8048] batadv0: left promiscuous mode [ 140.143363][ T8054] netlink: 28 bytes leftover after parsing attributes in process `syz.1.785'. [ 140.164460][ T8054] netlink: 8 bytes leftover after parsing attributes in process `syz.1.785'. [ 140.470311][ T8074] netlink: 'syz.2.790': attribute type 30 has an invalid length. [ 140.578335][ T8074] netlink: 12 bytes leftover after parsing attributes in process `syz.2.790'. [ 140.594446][ T8074] netlink: 'syz.2.790': attribute type 30 has an invalid length. [ 140.645695][ T8088] netlink: 8 bytes leftover after parsing attributes in process `syz.0.795'. [ 141.270348][ T8117] netlink: 120 bytes leftover after parsing attributes in process `syz.3.805'. [ 141.294369][ T8117] xt_TPROXY: Can be used only with -p tcp or -p udp [ 141.756937][ T8129] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.765797][ T8129] batadv_slave_1: entered promiscuous mode [ 141.777185][ T8129] batadv_slave_1: entered allmulticast mode [ 142.139191][ T8147] netlink: 'syz.1.816': attribute type 8 has an invalid length. [ 142.159050][ T8147] netlink: 161700 bytes leftover after parsing attributes in process `syz.1.816'. [ 142.356162][ T8160] dvmrp0: entered allmulticast mode [ 142.368634][ T8157] IPVS: lblc: TCP 127.0.0.1:0 - no destination available [ 142.411596][ T8157] IPVS: lblc: TCP 127.0.0.1:0 - no destination available [ 142.415774][ T8160] dvmrp0: left allmulticast mode [ 142.803233][ T8182] pim6reg1: entered promiscuous mode [ 142.829025][ T8182] pim6reg1: entered allmulticast mode [ 142.843554][ T8188] netlink: 28 bytes leftover after parsing attributes in process `syz.2.825'. [ 143.013106][ T8198] dccp_v4_rcv: dropped packet with invalid checksum [ 143.357720][ T8219] x_tables: duplicate underflow at hook 1 [ 143.462568][ T8229] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 143.770474][ T8238] vlan2: entered allmulticast mode [ 143.819888][ T8238] bond0: entered allmulticast mode [ 143.855605][ T8238] bond_slave_0: entered allmulticast mode [ 143.870851][ T8238] bond_slave_1: entered allmulticast mode [ 143.898166][ T8238] netdevsim netdevsim2 netdevsim0: entered allmulticast mode [ 143.929575][ T8238] bond0: left allmulticast mode [ 143.934504][ T8238] bond_slave_0: left allmulticast mode [ 143.968984][ T8238] bond_slave_1: left allmulticast mode [ 143.983926][ T8238] netdevsim netdevsim2 netdevsim0: left allmulticast mode [ 144.274481][ T8264] netlink: 'syz.3.850': attribute type 11 has an invalid length. [ 144.683242][ T8249] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 145.072140][ T8290] __nla_validate_parse: 5 callbacks suppressed [ 145.072164][ T8290] netlink: 4096 bytes leftover after parsing attributes in process `syz.0.858'. [ 145.114971][ T8290] openvswitch: netlink: Missing key (keys=400040, expected=2000) [ 145.157620][ T8288] xt_connbytes: Forcing CT accounting to be enabled [ 145.157966][ T8296] nbd: must specify a device to reconfigure [ 145.177662][ T8288] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 145.612348][ T8313] netlink: 100 bytes leftover after parsing attributes in process `syz.1.866'. [ 146.184026][ T5251] Bluetooth: hci0: command 0x0401 tx timeout [ 148.078629][ T8326] netlink: 4 bytes leftover after parsing attributes in process `syz.2.869'. [ 148.087816][ T8326] netlink: 'syz.2.869': attribute type 15 has an invalid length. [ 148.103220][ T8326] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 256 - 0 [ 148.112654][ T8326] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 256 - 0 [ 148.121523][ T8326] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 256 - 0 [ 148.130608][ T8326] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 256 - 0 [ 148.140450][ T8326] vxlan1: entered promiscuous mode [ 148.524193][ T8344] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 148.566631][ T8344] netlink: 40 bytes leftover after parsing attributes in process `syz.4.873'. [ 148.614948][ T8349] netlink: 12 bytes leftover after parsing attributes in process `syz.2.876'. [ 148.645046][ T8344] netlink: 8 bytes leftover after parsing attributes in process `syz.4.873'. [ 148.699535][ T8344] IPVS: Error joining to the multicast group [ 148.729591][ T8342] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 148.887813][ T8361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.950658][ T8365] netlink: 'syz.1.881': attribute type 34 has an invalid length. [ 148.975137][ T8361] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 148.992186][ T8365] netlink: 4 bytes leftover after parsing attributes in process `syz.1.881'. [ 149.063938][ T8370] ipt_REJECT: ECHOREPLY no longer supported. [ 149.168069][ T8374] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 149.306555][ T8384] netlink: 100 bytes leftover after parsing attributes in process `syz.1.886'. [ 149.370414][ T8384] netlink: 'syz.1.886': attribute type 10 has an invalid length. [ 149.404909][ T8391] netlink: 28 bytes leftover after parsing attributes in process `syz.4.887'. [ 149.427623][ T8384] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 149.465703][ T8384] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 149.537708][ T8384] netlink: 64 bytes leftover after parsing attributes in process `syz.1.886'. [ 150.053504][ T8424] netlink: 'syz.3.898': attribute type 10 has an invalid length. [ 150.172276][ T8433] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 150.244242][ T8439] __nla_validate_parse: 5 callbacks suppressed [ 150.244265][ T8439] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.902'. [ 150.248073][ T8442] netlink: 'syz.1.901': attribute type 8 has an invalid length. [ 150.259129][ T8439] openvswitch: netlink: Actions may not be safe on all matching packets [ 150.383305][ T8444] syz.0.903: vmalloc error: size 6291456, failed to allocated page array size 12288, mode:0x400dc2(GFP_KERNEL_ACCOUNT|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=syz0,mems_allowed=0-1 [ 150.433929][ T8444] CPU: 0 UID: 0 PID: 8444 Comm: syz.0.903 Not tainted 6.11.0-rc6-syzkaller-00178-gd759ee240d3c #0 [ 150.444614][ T8444] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 150.454717][ T8444] Call Trace: [ 150.458052][ T8444] [ 150.461028][ T8444] dump_stack_lvl+0x241/0x360 [ 150.465763][ T8444] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.471030][ T8444] ? __pfx__printk+0x10/0x10 [ 150.475676][ T8444] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 150.482147][ T8444] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 150.488797][ T8444] warn_alloc+0x278/0x410 [ 150.493189][ T8444] ? __pfx_warn_alloc+0x10/0x10 [ 150.498105][ T8444] ? hash_ipport_create+0x801/0x1670 [ 150.503447][ T8444] ? __get_vm_area_node+0x23d/0x270 [ 150.508711][ T8444] __vmalloc_node_range_noprof+0x6a2/0x1400 [ 150.514688][ T8444] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 150.521073][ T8444] ? rcu_is_watching+0x15/0xb0 [ 150.525900][ T8444] ? trace_kmalloc+0x1f/0xd0 [ 150.530533][ T8444] ? __kmalloc_node_noprof+0x247/0x440 [ 150.536046][ T8444] ? __kvmalloc_node_noprof+0x72/0x190 [ 150.541570][ T8444] __kvmalloc_node_noprof+0x142/0x190 [ 150.547006][ T8444] ? hash_ipport_create+0x801/0x1670 [ 150.552502][ T8444] hash_ipport_create+0x801/0x1670 [ 150.557638][ T8444] ? __pfx_lock_acquire+0x10/0x10 [ 150.562722][ T8444] ? __pfx_hash_ipport_create+0x10/0x10 [ 150.568288][ T8444] ? __nla_parse+0x40/0x60 [ 150.572812][ T8444] ? __pfx_hash_ipport_create+0x10/0x10 [ 150.578384][ T8444] ip_set_create+0xa5c/0x1900 [ 150.583161][ T8444] ? ip_set_create+0x45e/0x1900 [ 150.588109][ T8444] ? __pfx_trace_raw_output_contention_end+0xa/0x10 [ 150.594716][ T8444] ? __pfx_ip_set_create+0x10/0x10 [ 150.599840][ T8444] ? trace_contention_end+0x3c/0x120 [ 150.605209][ T8444] ? nfnetlink_rcv_msg+0x225/0x1180 [ 150.610525][ T8444] nfnetlink_rcv_msg+0xbec/0x1180 [ 150.615619][ T8444] ? kernel_text_address+0xa7/0xe0 [ 150.620859][ T8444] ? nfnetlink_rcv_msg+0x225/0x1180 [ 150.626367][ T8444] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 150.631884][ T8444] ? netlink_deliver_tap+0x19d/0x1b0 [ 150.637186][ T8444] ? netlink_unicast+0x7c4/0x990 [ 150.642170][ T8444] ? netlink_sendmsg+0x8e4/0xcb0 [ 150.647123][ T8444] ? __sock_sendmsg+0x221/0x270 [ 150.652023][ T8444] ? ____sys_sendmsg+0x525/0x7d0 [ 150.656978][ T8444] ? __sys_sendmsg+0x2b0/0x3a0 [ 150.661769][ T8444] ? do_syscall_64+0xf3/0x230 [ 150.666649][ T8444] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.672786][ T8444] netlink_rcv_skb+0x1e3/0x430 [ 150.677586][ T8444] ? __pfx_nfnetlink_rcv_msg+0x10/0x10 [ 150.683178][ T8444] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 150.688506][ T8444] ? apparmor_capable+0x13b/0x1b0 [ 150.693581][ T8444] ? bpf_lsm_capable+0x9/0x10 [ 150.698386][ T8444] ? security_capable+0x90/0xb0 [ 150.703355][ T8444] nfnetlink_rcv+0x297/0x2ad0 [ 150.708060][ T8444] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 150.713807][ T8444] ? __dev_queue_xmit+0x2da/0x3e90 [ 150.718946][ T8444] ? __dev_queue_xmit+0x1763/0x3e90 [ 150.724189][ T8444] ? kasan_save_track+0x51/0x80 [ 150.729096][ T8444] ? do_syscall_64+0xf3/0x230 [ 150.733804][ T8444] ? __pfx_nfnetlink_rcv+0x10/0x10 [ 150.738946][ T8444] ? __dev_queue_xmit+0x2da/0x3e90 [ 150.744153][ T8444] ? __pfx___dev_queue_xmit+0x10/0x10 [ 150.749600][ T8444] ? ref_tracker_free+0x643/0x7e0 [ 150.754690][ T8444] ? __asan_memcpy+0x40/0x70 [ 150.759408][ T8444] ? __pfx_ref_tracker_free+0x10/0x10 [ 150.764838][ T8444] ? netlink_deliver_tap+0x2e/0x1b0 [ 150.770230][ T8444] ? skb_clone+0x240/0x390 [ 150.774843][ T8444] ? __pfx_lock_release+0x10/0x10 [ 150.779907][ T8444] ? __netlink_deliver_tap+0x77e/0x7c0 [ 150.785501][ T8444] ? netlink_deliver_tap+0x2e/0x1b0 [ 150.790734][ T8444] netlink_unicast+0x7f6/0x990 [ 150.795544][ T8444] ? __pfx_netlink_unicast+0x10/0x10 [ 150.800958][ T8444] ? __virt_addr_valid+0x183/0x530 [ 150.806208][ T8444] ? __check_object_size+0x49c/0x900 [ 150.811544][ T8444] ? bpf_lsm_netlink_send+0x9/0x10 [ 150.816803][ T8444] netlink_sendmsg+0x8e4/0xcb0 [ 150.821651][ T8444] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.826986][ T8444] ? __import_iovec+0x536/0x820 [ 150.831887][ T8444] ? aa_sock_msg_perm+0x91/0x160 [ 150.837126][ T8444] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 150.842449][ T8444] ? security_socket_sendmsg+0x87/0xb0 [ 150.848044][ T8444] ? __pfx_netlink_sendmsg+0x10/0x10 [ 150.853392][ T8444] __sock_sendmsg+0x221/0x270 [ 150.858111][ T8444] ____sys_sendmsg+0x525/0x7d0 [ 150.863091][ T8444] ? __pfx_____sys_sendmsg+0x10/0x10 [ 150.868424][ T8444] __sys_sendmsg+0x2b0/0x3a0 [ 150.873042][ T8444] ? __pfx___sys_sendmsg+0x10/0x10 [ 150.878285][ T8444] ? bpf_btf_load+0xcf/0x1a0 [ 150.882925][ T8444] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 150.890145][ T8444] ? do_syscall_64+0x100/0x230 [ 150.894932][ T8444] ? do_syscall_64+0xb6/0x230 [ 150.899625][ T8444] do_syscall_64+0xf3/0x230 [ 150.904143][ T8444] ? clear_bhb_loop+0x35/0x90 [ 150.908842][ T8444] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.914792][ T8444] RIP: 0033:0x7fc92317cef9 [ 150.919263][ T8444] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.939152][ T8444] RSP: 002b:00007fc923fa2038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 150.947682][ T8444] RAX: ffffffffffffffda RBX: 00007fc923335f80 RCX: 00007fc92317cef9 [ 150.955684][ T8444] RDX: 0000000000000000 RSI: 0000000020000040 RDI: 0000000000000008 [ 150.963776][ T8444] RBP: 00007fc9231ef046 R08: 0000000000000000 R09: 0000000000000000 [ 150.972168][ T8444] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.980171][ T8444] R13: 0000000000000000 R14: 00007fc923335f80 R15: 00007ffdc6cf8d58 [ 150.988285][ T8444] [ 151.003148][ T8452] netlink: 24 bytes leftover after parsing attributes in process `syz.2.904'. [ 151.017140][ T8444] Mem-Info: [ 151.023901][ T8444] active_anon:3201 inactive_anon:0 isolated_anon:0 [ 151.023901][ T8444] active_file:1166 inactive_file:38202 isolated_file:0 [ 151.023901][ T8444] unevictable:768 dirty:47 writeback:0 [ 151.023901][ T8444] slab_reclaimable:9458 slab_unreclaimable:99631 [ 151.023901][ T8444] mapped:20506 shmem:1258 pagetables:685 [ 151.023901][ T8444] sec_pagetables:0 bounce:0 [ 151.023901][ T8444] kernel_misc_reclaimable:0 [ 151.023901][ T8444] free:1363034 free_pcp:476 free_cma:0 [ 151.098183][ T8444] Node 0 active_anon:13000kB inactive_anon:0kB active_file:4664kB inactive_file:152732kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:82040kB dirty:188kB writeback:0kB shmem:3496kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10244kB pagetables:2752kB sec_pagetables:0kB all_unreclaimable? no [ 151.141062][ T8444] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 151.179864][ T8444] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 151.233721][ T8444] lowmem_reserve[]: 0 2467 2468 0 0 [ 151.243146][ T8444] Node 0 DMA32 free:1505372kB boost:0kB min:34228kB low:42784kB high:51340kB reserved_highatomic:0KB active_anon:12676kB inactive_anon:0kB active_file:4664kB inactive_file:151920kB unevictable:1536kB writepending:188kB present:3129332kB managed:2554984kB mlocked:0kB bounce:0kB free_pcp:1292kB local_pcp:796kB free_cma:0kB [ 151.277640][ T8444] lowmem_reserve[]: 0 0 0 0 0 [ 151.328730][ T8444] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:812kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 151.358831][ T8467] netlink: 116 bytes leftover after parsing attributes in process `syz.1.911'. [ 151.439929][ T8444] lowmem_reserve[]: 0 0 0 0 0 [ 151.445006][ T8444] Node 1 Normal free:3947716kB boost:0kB min:55660kB low:69572kB high:83484kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 151.517058][ T8444] lowmem_reserve[]: 0 0 0 0 0 [ 151.526985][ T8444] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 151.545419][ T8444] Node 0 DMA32: 1*4kB (U) 20*8kB (E) 53*16kB (ME) 412*32kB (UME) 121*64kB (UME) 49*128kB (UME) 29*256kB (UM) 16*512kB (UM) 9*1024kB (UM) 12*2048kB (UME) 348*4096kB (UM) = 1503028kB [ 151.609781][ T8444] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 151.649083][ T8444] Node 1 Normal: 1*4kB (U) 6*8kB (U) 5*16kB (U) 4*32kB (U) 5*64kB (UM) 5*128kB (U) 2*256kB (UM) 1*512kB (M) 1*1024kB (U) 0*2048kB 963*4096kB (M) = 3947716kB [ 151.686073][ T8444] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 151.714925][ T8444] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 151.763889][ T8444] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 151.783915][ T8444] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 151.794928][ T8444] 41576 total pagecache pages [ 151.803238][ T8444] 0 pages in swap cache [ 151.810177][ T8493] netlink: 16 bytes leftover after parsing attributes in process `syz.4.915'. [ 151.824182][ T8444] Free swap = 124996kB [ 151.828446][ T8444] Total swap = 124996kB [ 151.832697][ T8444] 2097051 pages RAM [ 151.836652][ T8444] 0 pages HighMem/MovableOnly [ 151.846256][ T8444] 426967 pages reserved [ 151.850993][ T8444] 0 pages cma reserved [ 151.880722][ T8494] netlink: 191416 bytes leftover after parsing attributes in process `syz.4.915'. [ 151.908375][ T8494] netlink: zone id is out of range [ 152.058382][ T8503] netlink: 4 bytes leftover after parsing attributes in process `syz.0.920'. [ 152.286008][ T8507] IPv6: sit1: Disabled Multicast RS [ 152.294016][ T8511] ebt_among: dst integrity fail: 101 [ 152.316158][ T8507] team0: Device sit1 is of different type [ 152.573987][ T8525] netlink: 28 bytes leftover after parsing attributes in process `syz.2.926'. [ 152.963389][ T8548] openvswitch: netlink: Unexpected mask (mask=200040, allowed=10048) [ 153.063778][ T8556] sctp: [Deprecated]: syz.1.935 (pid 8556) Use of struct sctp_assoc_value in delayed_ack socket option. [ 153.063778][ T8556] Use struct sctp_sack_info instead [ 153.315588][ T8562] netlink: 8 bytes leftover after parsing attributes in process `syz.0.936'. [ 153.413266][ T8573] netlink: 28 bytes leftover after parsing attributes in process `syz.3.940'. [ 153.431093][ T8573] netlink: 8 bytes leftover after parsing attributes in process `syz.3.940'. [ 153.455037][ T8575] sctp: [Deprecated]: syz.2.938 (pid 8575) Use of int in maxseg socket option. [ 153.455037][ T8575] Use struct sctp_assoc_value instead [ 153.687050][ T8586] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 154.490422][ T8619] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 154.551586][ T8619] netdevsim netdevsim3: Direct firmware load for  failed with error -2 [ 154.582736][ T8619] netdevsim netdevsim3: Falling back to sysfs fallback for:  [ 154.990829][ T8642] netlink: 'syz.1.958': attribute type 21 has an invalid length. [ 155.578605][ T8663] __nla_validate_parse: 6 callbacks suppressed [ 155.578626][ T8663] netlink: 48 bytes leftover after parsing attributes in process `syz.1.964'. [ 155.830304][ T8678] netlink: 16 bytes leftover after parsing attributes in process `syz.1.968'. [ 156.084399][ T8691] netlink: 148 bytes leftover after parsing attributes in process `syz.0.972'. [ 156.310997][ T8692] syzkaller0: entered promiscuous mode [ 156.330772][ T8698] bridge6: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 156.347333][ T8708] sctp: [Deprecated]: syz.2.978 (pid 8708) Use of int in max_burst socket option. [ 156.347333][ T8708] Use struct sctp_assoc_value instead [ 156.380435][ T8705] netlink: 8 bytes leftover after parsing attributes in process `syz.3.971'. [ 158.022064][ T5336] ================================================================== [ 158.030455][ T5336] BUG: KASAN: slab-use-after-free in sco_sock_timeout+0x8b/0x270 [ 158.038603][ T5336] Write of size 4 at addr ffff888028700080 by task kworker/1:7/5336 [ 158.047601][ T5336] [ 158.049952][ T5336] CPU: 1 UID: 0 PID: 5336 Comm: kworker/1:7 Not tainted 6.11.0-rc6-syzkaller-00178-gd759ee240d3c #0 [ 158.062606][ T5336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 158.074354][ T5336] Workqueue: events sco_sock_timeout [ 158.079781][ T5336] Call Trace: [ 158.083166][ T5336] [ 158.086124][ T5336] dump_stack_lvl+0x241/0x360 [ 158.090953][ T5336] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.096308][ T5336] ? __pfx__printk+0x10/0x10 [ 158.100923][ T5336] ? _printk+0xd5/0x120 [ 158.105176][ T5336] ? __virt_addr_valid+0x183/0x530 [ 158.110571][ T5336] ? __virt_addr_valid+0x183/0x530 [ 158.115748][ T5336] print_report+0x169/0x550 [ 158.120310][ T5336] ? __virt_addr_valid+0x183/0x530 [ 158.126232][ T5336] ? __virt_addr_valid+0x183/0x530 [ 158.131553][ T5336] ? __virt_addr_valid+0x45f/0x530 [ 158.137471][ T5336] ? __phys_addr+0xba/0x170 [ 158.142374][ T5336] ? sco_sock_timeout+0x8b/0x270 [ 158.147431][ T5336] kasan_report+0x143/0x180 [ 158.152339][ T5336] ? __pfx_lock_acquire+0x10/0x10 [ 158.158243][ T5336] ? sco_sock_timeout+0x8b/0x270 [ 158.163937][ T5336] kasan_check_range+0x282/0x290 [ 158.168911][ T5336] sco_sock_timeout+0x8b/0x270 [ 158.173794][ T5336] ? process_scheduled_works+0x945/0x1830 [ 158.180058][ T5336] process_scheduled_works+0xa2c/0x1830 [ 158.187020][ T5336] ? __pfx_process_scheduled_works+0x10/0x10 [ 158.193249][ T5336] ? assign_work+0x364/0x3d0 [ 158.198292][ T5336] worker_thread+0x86d/0xd10 [ 158.202906][ T5336] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 158.209051][ T5336] ? __kthread_parkme+0x169/0x1d0 [ 158.214279][ T5336] ? __pfx_worker_thread+0x10/0x10 [ 158.219760][ T5336] kthread+0x2f0/0x390 [ 158.224191][ T5336] ? __pfx_worker_thread+0x10/0x10 [ 158.229317][ T5336] ? __pfx_kthread+0x10/0x10 [ 158.234783][ T5336] ret_from_fork+0x4b/0x80 [ 158.239301][ T5336] ? __pfx_kthread+0x10/0x10 [ 158.244006][ T5336] ret_from_fork_asm+0x1a/0x30 [ 158.249232][ T5336] [ 158.252359][ T5336] [ 158.254801][ T5336] Allocated by task 8400: [ 158.259423][ T5336] kasan_save_track+0x3f/0x80 [ 158.264581][ T5336] __kasan_kmalloc+0x98/0xb0 [ 158.269450][ T5336] __kmalloc_node_track_caller_noprof+0x225/0x440 [ 158.276226][ T5336] kmalloc_reserve+0x111/0x2a0 [ 158.281356][ T5336] __alloc_skb+0x1f3/0x440 [ 158.285897][ T5336] _sctp_make_chunk+0x58/0x460 [ 158.291132][ T5336] sctp_make_datafrag_empty+0xa6/0x510 [ 158.296843][ T5336] sctp_datamsg_from_user+0x740/0xf20 [ 158.302346][ T5336] sctp_sendmsg_to_asoc+0xf7e/0x1800 [ 158.307955][ T5336] sctp_sendmsg+0x1bc3/0x3520 [ 158.312782][ T5336] __sock_sendmsg+0x1a6/0x270 [ 158.318040][ T5336] __sys_sendto+0x3a4/0x4f0 [ 158.323035][ T5336] __x64_sys_sendto+0xde/0x100 [ 158.328218][ T5336] do_syscall_64+0xf3/0x230 [ 158.333359][ T5336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.339492][ T5336] [ 158.341830][ T5336] Freed by task 8400: [ 158.346875][ T5336] kasan_save_track+0x3f/0x80 [ 158.352464][ T5336] kasan_save_free_info+0x40/0x50 [ 158.358175][ T5336] poison_slab_object+0xe0/0x150 [ 158.363254][ T5336] __kasan_slab_free+0x37/0x60 [ 158.368486][ T5336] kfree+0x149/0x360 [ 158.372503][ T5336] skb_release_data+0x676/0x880 [ 158.377483][ T5336] consume_skb+0xb1/0x160 [ 158.382209][ T5336] sctp_chunk_put+0x17d/0x200 [ 158.386927][ T5336] sctp_datamsg_put+0x42b/0x570 [ 158.391820][ T5336] sctp_chunk_free+0x4a/0x60 [ 158.396444][ T5336] __sctp_outq_teardown+0x1a9/0x9b0 [ 158.401649][ T5336] sctp_association_free+0x21a/0x7b0 [ 158.406954][ T5336] sctp_do_sm+0x4393/0x60c0 [ 158.411836][ T5336] sctp_primitive_ABORT+0x98/0xc0 [ 158.416924][ T5336] sctp_close+0x2b7/0x920 [ 158.421428][ T5336] inet_release+0x17d/0x200 [ 158.426227][ T5336] sock_close+0xbc/0x240 [ 158.430520][ T5336] __fput+0x24a/0x8a0 [ 158.434628][ T5336] task_work_run+0x24f/0x310 [ 158.439344][ T5336] get_signal+0x15e6/0x1740 [ 158.443979][ T5336] arch_do_signal_or_restart+0x96/0x860 [ 158.451206][ T5336] syscall_exit_to_user_mode+0xc9/0x370 [ 158.456945][ T5336] do_syscall_64+0x100/0x230 [ 158.462236][ T5336] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 158.468224][ T5336] [ 158.470567][ T5336] The buggy address belongs to the object at ffff888028700000 [ 158.470567][ T5336] which belongs to the cache kmalloc-2k of size 2048 [ 158.485168][ T5336] The buggy address is located 128 bytes inside of [ 158.485168][ T5336] freed 2048-byte region [ffff888028700000, ffff888028700800) [ 158.499880][ T5336] [ 158.502224][ T5336] The buggy address belongs to the physical page: [ 158.508734][ T5336] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28700 [ 158.517707][ T5336] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 158.526828][ T5336] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 158.535385][ T5336] page_type: 0xfdffffff(slab) [ 158.540306][ T5336] raw: 00fff00000000040 ffff88801ac42000 0000000000000000 dead000000000001 [ 158.549342][ T5336] raw: 0000000000000000 0000000000080008 00000001fdffffff 0000000000000000 [ 158.558012][ T5336] head: 00fff00000000040 ffff88801ac42000 0000000000000000 dead000000000001 [ 158.567146][ T5336] head: 0000000000000000 0000000000080008 00000001fdffffff 0000000000000000 [ 158.576265][ T5336] head: 00fff00000000003 ffffea0000a1c001 ffffffffffffffff 0000000000000000 [ 158.585392][ T5336] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 158.594063][ T5336] page dumped because: kasan: bad access detected [ 158.600503][ T5336] page_owner tracks the page as allocated [ 158.606561][ T5336] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 1, tgid 1 (swapper/0), ts 10264898467, free_ts 0 [ 158.627266][ T5336] post_alloc_hook+0x1f3/0x230 [ 158.632310][ T5336] get_page_from_freelist+0x2e4c/0x2f10 [ 158.637973][ T5336] __alloc_pages_noprof+0x256/0x6c0 [ 158.643357][ T5336] alloc_slab_page+0x5f/0x120 [ 158.648136][ T5336] allocate_slab+0x5a/0x2f0 [ 158.652826][ T5336] ___slab_alloc+0xcd1/0x14b0 [ 158.657699][ T5336] __slab_alloc+0x58/0xa0 [ 158.662485][ T5336] __kmalloc_node_track_caller_noprof+0x281/0x440 [ 158.669949][ T5336] kmalloc_reserve+0x111/0x2a0 [ 158.677610][ T5336] __alloc_skb+0x1f3/0x440 [ 158.682587][ T5336] rtmsg_ifinfo_build_skb+0x84/0x260 [ 158.688170][ T5336] rtmsg_ifinfo+0x91/0x1b0 [ 158.692806][ T5336] register_netdevice+0x1774/0x1b00 [ 158.699204][ T5336] ieee802154_if_add+0xbda/0x1160 [ 158.704538][ T5336] ieee802154_register_hw+0x636/0x8d0 [ 158.710389][ T5336] hwsim_add_one+0x489/0x11d0 [ 158.715631][ T5336] page_owner free stack trace missing [ 158.722064][ T5336] [ 158.724522][ T5336] Memory state around the buggy address: [ 158.730360][ T5336] ffff8880286fff80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 158.739242][ T5336] ffff888028700000: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 158.747815][ T5336] >ffff888028700080: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 158.756301][ T5336] ^ [ 158.760820][ T5336] ffff888028700100: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 158.770206][ T5336] ffff888028700180: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 158.779545][ T5336] ================================================================== [ 158.790354][ T5336] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 158.798138][ T5336] CPU: 1 UID: 0 PID: 5336 Comm: kworker/1:7 Not tainted 6.11.0-rc6-syzkaller-00178-gd759ee240d3c #0 [ 158.811195][ T5336] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 158.821561][ T5336] Workqueue: events sco_sock_timeout [ 158.827389][ T5336] Call Trace: [ 158.832687][ T5336] [ 158.835922][ T5336] dump_stack_lvl+0x241/0x360 [ 158.840829][ T5336] ? __pfx_dump_stack_lvl+0x10/0x10 [ 158.846590][ T5336] ? __pfx__printk+0x10/0x10 [ 158.851481][ T5336] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 158.857521][ T5336] ? vscnprintf+0x5d/0x90 [ 158.863457][ T5336] panic+0x349/0x860 [ 158.867630][ T5336] ? check_panic_on_warn+0x21/0xb0 [ 158.872867][ T5336] ? __pfx_panic+0x10/0x10 [ 158.877743][ T5336] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 158.883764][ T5336] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 158.889956][ T5336] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 158.896755][ T5336] check_panic_on_warn+0x86/0xb0 [ 158.901803][ T5336] ? sco_sock_timeout+0x8b/0x270 [ 158.907224][ T5336] end_report+0x77/0x160 [ 158.912095][ T5336] kasan_report+0x154/0x180 [ 158.917134][ T5336] ? __pfx_lock_acquire+0x10/0x10 [ 158.924541][ T5336] ? sco_sock_timeout+0x8b/0x270 [ 158.930302][ T5336] kasan_check_range+0x282/0x290 [ 158.936071][ T5336] sco_sock_timeout+0x8b/0x270 [ 158.941227][ T5336] ? process_scheduled_works+0x945/0x1830 [ 158.947029][ T5336] process_scheduled_works+0xa2c/0x1830 [ 158.952788][ T5336] ? __pfx_process_scheduled_works+0x10/0x10 [ 158.959095][ T5336] ? assign_work+0x364/0x3d0 [ 158.964914][ T5336] worker_thread+0x86d/0xd10 [ 158.969957][ T5336] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 158.975971][ T5336] ? __kthread_parkme+0x169/0x1d0 [ 158.981832][ T5336] ? __pfx_worker_thread+0x10/0x10 [ 158.987594][ T5336] kthread+0x2f0/0x390 [ 158.992209][ T5336] ? __pfx_worker_thread+0x10/0x10 [ 158.997542][ T5336] ? __pfx_kthread+0x10/0x10 [ 159.002182][ T5336] ret_from_fork+0x4b/0x80 [ 159.007005][ T5336] ? __pfx_kthread+0x10/0x10 [ 159.012102][ T5336] ret_from_fork_asm+0x1a/0x30 [ 159.017607][ T5336] [ 159.021195][ T5336] Kernel Offset: disabled [ 159.025904][ T5336] Rebooting in 86400 seconds..