last executing test programs: 20.301635503s ago: executing program 0 (id=1): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, 0x0, &(0x7f0000000100)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005165c0f63cdc2e82818254950ee03568b8809a1ff4c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab60c1aae1314d7381fcfeb970bea672cf1e926f6a51479343144648a07a975bd89dc398712376610f6254f12495b4658319684387f6f3543205d4bc4ce05b8b961103673dff7f158052e62b20f05fd24108d8363d44fcd0f8f3647899762a17282a1914452d11f557c28f396eebdc858558db0276d14f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5de2503dab358f42a2624c7daa9ed44039aab46419496362e54cfad05a0004ac71a003d7b85d07191bed4e5a890826300214146f7ed569985439baa355c2766dd056f5d79e454f3d873095e7a237bc06d035a8d601f21746d886419f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c66b0f65021829f87d988b4e2d71753b1549fa734f0b2e56dbd21ed2e09d0cddad721971637f384eed3034597c93e1c52f42cad0ed09c395dc6e9703660fefa1c80f467367c006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0c9be9654db05fb918086cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f717f13fa7552d92c51dbd32ea50c490ecd085d2811a7555c538cffffff7f00000000dd872244bfa64779e0f43a9c277e2910b7ccdc3d6726d34ad2101033a623ca2a49ad344884289130bc71cee2b7de62bf48129ae1af052a2d46a61625735a9eea7f793946b3229e861d8ea49806b3f7d4295f6b000000000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c00000099b13ecda2a5b37de0519e974cba92ebaf0f701611a9b027ce04340bda4594cc9049c3f101629ab028145e004209ebe71a6fe84af50804000000000000004a27213354964e250a98fe357676f94b6947383e320fbb1118f586d5b9b1b977e1e1a4490ff67703a9b5900f8a6f8a805879dd91ec5ff435b219c53680c0ae04dcc4ef69b98fcb0d6b6a03a8b71a66b4e2876dc4b610444bf10000000000b046b6ae5d68156bcbd6d8793ade9a22ac8fc7857e5bbc14adc4e12b08f350c6789283b9990c72e64372a1f79769a8bdc632fc1a0b3417855d8b7d25ca4d404c23631ad3d2f55dcd385371c86170a4bca58c2b2b4eabc365f45bd10bb45b0c5bc354456a52be18d9b44014d20a3c51c8f013dade83562e73278662829e4f5a9ac00fd91178468c737f0872d97d38d11a176be5a0d7294c51eb161eddcfefa8837c7430721851ec2a107af0df6d43e732bbc01e76c66895eb85d36798d61622773591ee21ad9f6a1b73fa9cf3ffeb8a00b63af800a81d0fb8aa29df8b8ad6fbafefb5802a23cbdeeabceda5bfc5ff2fa5c1d61d04a1324794c6ed000696d9f04010c35474e690545c3d9bd836d4cef2585ba616e01c3d000000000000000000470ebc6f3453ecbf3047e4547d7632d3ad21798e730cb5d1da059b5bdb8107815dff995c0788906790406dfb4f8ee9f24ff94233e2e6e581e6e5de33a5f254c9a8b612547473c3001df3928dac9203b744619082421a8da7c00000000000000000000000000000018a73ef40cca690fb7595c6962984f8276677be6f66cbdbccf1896433808c9c84d74ac4a7c186a04a2250972f7acb156b21f9826b6acb7db32c4e3b3ec8b59fd972975edb1da872d81a35e4fda2f5cbde6b40bea20418c6e9dad30b791eea58f53e80fee4dd7fe08373ea2784fcd3a65261de71eb866458d2c22a"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r5, 0x2, 0x2}, 0x10) 20.084760281s ago: executing program 0 (id=6): r0 = socket$inet_sctp(0x2, 0x1, 0x84) ioctl$sock_inet_SIOCSIFBRDADDR(r0, 0x891a, &(0x7f0000000000)={'nr0\x00', {0x2, 0x4e22, @rand_addr=0x64010101}}) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'veth0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x54, 0x10, 0x8, 0x70bd2c, 0x10000000, {}, [@IFLA_MAP={0x24, 0xe, {0x5, 0x748f6b35, 0x7, 0x7, 0x6, 0x7f}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_PROMISCUITY={0x8}]}, 0x54}, 0x1, 0x0, 0x0, 0x2221a12495d3a281}, 0x0) r4 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_I_WANT_MAPPED_V4_ADDR(r4, 0x84, 0xd, &(0x7f0000000280), &(0x7f0000003540)=0x4) 19.10541333s ago: executing program 0 (id=8): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1e, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.60487629s ago: executing program 3 (id=129): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = epoll_create1(0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040)) ioctl$int_in(r4, 0x5452, &(0x7f0000000140)=0x9) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x8}, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) syz_emit_ethernet(0x1f, &(0x7f0000000380)={@local, @random="f8690200e27a", @void, {@llc_tr={0x11, {@llc={0xaa, 0x0, "1f", "eae6801661b373e9b1f31094a40b"}}}}}, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000b01000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r7, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r7, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) sendfile(r0, r7, &(0x7f0000000300)=0x3, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r6}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}], 0x1}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3d8, 0x0, 0x100, 0x100, 0x2f0, 0x2f0, 0x2f0, 0x7fffffe, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg1\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe0}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x428) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x12}}) getsockname$packet(r5, 0x0, &(0x7f0000000080)) 3.483384209s ago: executing program 0 (id=8): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000005900000095"], 0x0}, 0x90) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0x1e, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 3.111712455s ago: executing program 3 (id=131): socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) sendmmsg$unix(r1, &(0x7f00000bd000), 0x318, 0x0) r2 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r1, &(0x7f0000000040)={0x20000004}) ppoll(&(0x7f0000000000)=[{r2, 0x3089}], 0x1, 0x0, 0x0, 0xb00000000000000) close(r0) 3.089055469s ago: executing program 2 (id=132): socket$inet6_tcp(0xa, 0x1, 0x0) socket(0x10, 0x803, 0x0) (async) socket(0x10, 0x803, 0x0) r0 = bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x7, 0x1, 0x0, r0}, @generic={0x66, 0x0, 0x0, 0xfffc}, @initr0, @exit, @printk={@s, {0x3, 0x0, 0x6}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000080)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x7, 0x1, 0x0, r0}, @generic={0x66, 0x0, 0x0, 0xfffc}, @initr0, @exit, @printk={@s, {0x3, 0x0, 0x6}, {}, {}, {}, {0x5, 0x0, 0xb, 0xa}}]}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_PROG_DETACH(0x9, &(0x7f00000004c0)={@ifindex, 0xffffffffffffffff, 0x13}, 0x20) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000240)={{}, 0x0, 0xe, @inherit={0x50, 0x0}, @subvolid=0x4}) (async) ioctl$BTRFS_IOC_RM_DEV_V2(0xffffffffffffffff, 0x5000943a, &(0x7f0000000240)={{}, 0x0, 0xe, @inherit={0x50, 0x0}, @subvolid=0x4}) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x7, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) (async) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(0xffffffffffffffff, 0x0, 0x0) r1 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r1, &(0x7f0000000b00)={&(0x7f0000000600)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000680)="a6", 0x1}], 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000840000000000000000000000000008001800000000000000840000836b00000000"], 0x30}, 0x0) (async) sendmsg$inet_sctp(r1, &(0x7f0000000b00)={&(0x7f0000000600)=@in={0x2, 0x0, @loopback}, 0x10, &(0x7f0000000a40)=[{&(0x7f0000000680)="a6", 0x1}], 0x1, &(0x7f0000000ac0)=ANY=[@ANYBLOB="1800000000000000840000000000000000000000000008001800000000000000840000836b00000000"], 0x30}, 0x0) recvmsg$can_raw(0xffffffffffffffff, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_STATUS(0xffffffffffffffff, 0x84, 0xe, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) r2 = socket$inet(0x2, 0x3, 0x6) setsockopt$sock_int(r2, 0x1, 0x2f, &(0x7f0000000600), 0x42) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000040)=@ipv4_newroute={0x4c, 0x18, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}, [@RTA_ENCAP_TYPE={0x6, 0x15, 0x5}, @RTA_ENCAP={0x28, 0x16, 0x0, 0x1, @SEG6_IPTUNNEL_SRH={0x24, 0x1, {{0x1}, [@remote]}}}]}, 0x4c}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) r4 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8b1a, &(0x7f0000000140)={'wlan1\x00'}) 2.736704648s ago: executing program 2 (id=135): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f0000000300)=0x100000001, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @mss={0x2, 0xfff}, @window={0x3, 0x0, 0x401}, @window], 0x20000000000000e4) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000740)={'wlan1\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000c80)={0x24, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x5, 0x5b, "16"}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_REGISTER_FRAME(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=ANY=[@ANYRES8=r1, @ANYRES16=r2, @ANYBLOB="010000000000000000003a00000008000300", @ANYRES32=r3, @ANYBLOB="05005b"], 0x24}}, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) (async) r5 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00'}, 0x80) close(0x3) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) socket$inet_udplite(0x2, 0x2, 0x88) (async) socket$inet_udplite(0x2, 0x2, 0x88) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) (async) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) socket$netlink(0x10, 0x3, 0x9) bind$netlink(0xffffffffffffffff, 0x0, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) (async) r6 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x850, 0x0, 0x480, 0x0, 0x0, 0x0, 0x780, 0x780, 0x780, 0x780, 0x780, 0x6, 0x0, {[{{@ipv6={@mcast1={0xff, 0x3}, @private1, [], [], 'bond_slave_1\x00', 'macvtap0\x00', {}, {}, 0x6}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2, @private2}}, @common=@inet=@multiport={{0x50}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], '\x00', 'vlan0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@frag={{0x30}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private1, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x8b0) (async) setsockopt$IP6T_SO_SET_REPLACE(r6, 0x29, 0x40, &(0x7f0000000000)=@mangle={'mangle\x00', 0x2, 0x6, 0x850, 0x0, 0x480, 0x0, 0x0, 0x0, 0x780, 0x780, 0x780, 0x780, 0x780, 0x6, 0x0, {[{{@ipv6={@mcast1={0xff, 0x3}, @private1, [], [], 'bond_slave_1\x00', 'macvtap0\x00', {}, {}, 0x6}, 0x0, 0x188, 0x1b0, 0x0, {0x7a00000010000000}, [@common=@srh1={{0x90}, {0x0, 0x0, 0x0, 0x0, 0x0, @local, @mcast2, @private2}}, @common=@inet=@multiport={{0x50}}]}, @HL={0x28}}, {{@ipv6={@mcast2, @dev, [], [], 'veth1_macvtap\x00', 'veth1_vlan\x00'}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}, {{@ipv6={@mcast2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', [], [], '\x00', 'vlan0\x00'}, 0x0, 0xa8, 0xd0, 0x48000000}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffc}}, {{@uncond, 0x0, 0xd8, 0x120, 0x0, {}, [@common=@frag={{0x30}}]}, @SNPT={0x48, 'SNPT\x00', 0x0, {@ipv4=@broadcast, @ipv4=@loopback}}}, {{@uncond, 0x0, 0x2d8, 0x300, 0x0, {}, [@common=@inet=@recent0={{0xf8}, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}, @common=@rt={{0x138}, {0x0, [], 0x0, 0x0, 0x0, [@empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @empty, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @empty, @mcast2, @mcast2, @private1, @empty, @loopback, @ipv4={'\x00', '\xff\xff', @initdev={0xac, 0x1e, 0x0, 0x0}}, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @remote]}}]}, @HL={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x8b0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000980)=ANY=[@ANYBLOB="18020000000000000000000000000000850000004100a4c17a13835d440ca300009559a0e0df000000"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_NEIGHBORS(r7, &(0x7f0000004340)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000008c0)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r8, @ANYBLOB="310300000000000000000b00000004000300", @ANYRES32=0x0, @ANYBLOB="466bec271423a8d93144e91afbfe830d964a59910db9656bb1f3fdd90a6966b7f6cd00aaa2a65cf55bfcd10121c21b75edc977d5493533ffad2874e478ec1079cc54ce38db7ca559a73d19ae234e4a7940fd058651945cf7f297b12ec789a51b1d99c7fa9688a609a44a407236d7325667a68bbaa0728dc6e48f324e7f7fbaeeed2e9f987d84c120"], 0x1c}}, 0x0) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r5, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_genetlink_get_family_id$fou(&(0x7f0000000240), r1) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) socket$inet_sctp(0x2, 0x5, 0x84) (async) socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(0xffffffffffffffff, 0x84, 0xf, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e21, 0x4, @loopback, 0x5}}, 0x6, 0x1, 0x7, 0xffff, 0x9}, &(0x7f0000000040)=0x98) 2.639652933s ago: executing program 3 (id=136): socket$nl_route(0x10, 0x3, 0x0) r0 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) setsockopt$WPAN_SECURITY(r0, 0x0, 0x1, &(0x7f0000000080)=0x2, 0x4) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) (async) getsockopt$WPAN_SECURITY(r0, 0x0, 0x1, 0x0, &(0x7f0000000040)) (async) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_getaddrlabel={0x24, 0x1a, 0x1, 0x0, 0x0, {0xa, 0x0, 0x80}, [@IFAL_LABEL={0x8}]}, 0x24}}, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b4000000000000006b113a00000000008510000000000000000000000800000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195}, 0x70) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="180000000000060000000000000000008500000007000000850000000e00000095"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) (async) socket$nl_route(0x10, 0x3, 0x0) (async) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet6(0xa, 0x6, 0x0) (async) socket$rxrpc(0x21, 0x2, 0x2) (async) socket$pppoe(0x18, 0x1, 0x0) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9feb0100180000000000001c0c0000000c00000003000000000000000000000d0000000000004e612e346227d7060acaf8e5c5c2402ff00e5249fda349ef82968f7c8f2677990d4045ae6bbd1ff4970f7b6c7512c3e0949c7e3825ad2074b6c432c37455"], 0x0, 0x26}, 0x20) (async) bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x4}, 0x48) (async) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_tcp(0x2, 0x1, 0x0) write$binfmt_misc(r4, &(0x7f0000000140)=ANY=[@ANYRES32=r5], 0xc8) (async) r6 = socket$inet_udp(0x2, 0x2, 0x0) close(r6) (async) r7 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r7, &(0x7f0000000080), 0x10) 2.518536285s ago: executing program 1 (id=137): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_SET_CONFIG(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)={0x2c, r2, 0x1, 0x0, 0x0, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP={0x8}, @IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8}]}, 0x2c}}, 0x0) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000100)={'ip6tnl0\x00', 0x0, 0x4, 0x0, 0x3, 0x401, 0x61, @local, @dev={0xfe, 0x80, '\x00', 0x15}, 0x8, 0x20, 0x45aa, 0xce7}}) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000540)={0xffffffffffffffff, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f00000001c0)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x3, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0, 0x0, 0x0], 0x0, 0x66, &(0x7f0000000300)=[{}, {}, {}, {}, {}, {}, {}, {}, {}, {}], 0x50, 0x10, &(0x7f0000000280), &(0x7f00000003c0), 0x8, 0x86, 0x8, 0x8, &(0x7f0000000400)}}, 0x10) sendmsg$MPTCP_PM_CMD_GET_ADDR(r1, &(0x7f0000000640)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f0000000600)={&(0x7f0000000580)={0x4c, r3, 0x400, 0x70bd25, 0x25dfdbfe, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x30, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r4}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @empty}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r5}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}]}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4000}, 0x81) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x54, 0x10, 0x437, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @geneve={{0xb}, {0x24, 0x2, 0x0, 0x1, [@IFLA_GENEVE_UDP_ZERO_CSUM6_RX={0x5, 0xa, 0x1}, @IFLA_GENEVE_ID={0x8}, @IFLA_GENEVE_TTL_INHERIT={0x5, 0xc, 0x1}, @IFLA_GENEVE_UDP_ZERO_CSUM6_TX={0x5, 0x9, 0x1}]}}}]}, 0x54}}, 0x0) 2.394876226s ago: executing program 3 (id=138): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed00"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='rxrpc_tx_fail\x00', r0}, 0x10) (async) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000001a40)={0x1f, 0xffff, 0x3}, 0x6) (async) write(r1, &(0x7f0000000000)="2e000300010000", 0x7) 2.277203361s ago: executing program 1 (id=140): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000680), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000600)={0x0, 0x600, &(0x7f0000000180)={&(0x7f0000000080)={0x48, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @val={0xc}}}, [@chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @chandef_params=[@NL80211_ATTR_WIPHY_EDMG_CHANNELS={0x5, 0x118, 0x3a}, @NL80211_ATTR_CHANNEL_WIDTH={0x8}, @NL80211_ATTR_WIPHY_EDMG_BW_CONFIG={0x5, 0x119, 0x9}]]}, 0x48}}, 0x0) 2.263322404s ago: executing program 2 (id=141): r0 = socket$inet(0xa, 0x801, 0x84) connect$inet(r0, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r0, 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xb, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="61154c00000000006113500000000000bfa00000000000001503000008004e002d3501000000000095000000000000006916000000000000bf67000000000000350605000fff07206706000005000000160302000ee60060bf650000000000000f650000000000006507f9ff0100000007070000cddfffff1e75000000000000bf54000000000000070400000400f9ffbd4301000000000095000000000000001500000000000000950000000000000032ed3c12dc8c27df8ecf264e0f84f9f17d3c30e32f1754558f2278af6d71d79a5e12814cb1d8a5d4601d295c45a6a0b9bdb7dd3997f9c9c4f6f3be4b36aa89aa6812b8e007e733a9a4f1b0af3dda82ee45a010fb94fe9de57b9d8a814261bdb94a05000000c6c60bf70d742a81762bab8395fa64810b5b40d893ea8fe0185473d51b546cad3f1d5ab2af27546e7c955ccefa1f6ab689b555202da2e0ec2871b4a7e65836429a527dc47ebe84a423b6c8d345dc8da3085b0ab71ca1b901627b562ed04ae76002d4519af619e3cca4d69e0dee5eb106774a8f3e6916dfec88158f0200000000c8fb730a5c1bf2b2bb71a629361997a75fd552bdc2300000008ac86d8a297dff0445a15f21dce4de9f29eff65aadc841848c9b562a31e56723888fb126a163f16f920ae2fb494059bba8e3b680324a188076eb685d55c4e9b2ad9bc1172ba7cbebe174aba210d739a018f9bbec63222d20cecac4d03723f1c932b3a6aa57f1ad2e99e0e67ab93716d20000009f0f53acbb40b4f8e2738270b31562ed834f2af97787f696649a462e7ee4bcf8b07a10d6735154beb4000000000000000000000000004000bc00f679629709e7e78f4ddc211bc3ebe6bd9d42ca0140a7afaab40c4ce63bfba9bc4bca883dcc8495f3ad3176e65ec1118d50d1e827f3472f4445d253880800000000000000690884f800031e03a651bb96589a7e2e509bcc1d161347623cb5e7ac4629c8ab04871bc47287cd31cc43010000207b40407d000000210000000000000000005f37d83f84e98a523d80bd970d703f37ca364a601ae899a56715a0a62a34c6c94cce6994521629ab028acfc1d926a0f6a5489af8dc2f17923f3c40dfd1970a55c22fe3a5ac000000000000000000000000000000c1eb2d91fb79ea00000000000000bb0d00000000000000000000e4007be511fe32fbc90e2364a55e9bb66ac64423d2d00fea2594e190deae46e26c596f84eba9000000000000003cc3aa39ee4b1386bab561cda886fa642994cacd473b543ccb5f0d7b63924f17c67b13631d22a11dc3c6939628950000000000000001c7205a6b068fff496d2da7d632bd1f61b007e1ff5f1be1969a1ba791ad46d800000000c7f26a0337302f3b41eae59809fd05d12f6186f117b062df67d3a63f3265dd1410eea68208a3f26b2989b832d8b34a34a4f08b34b3042065acaa10856e858d27adee7daf32903d3fc78700d429a2d4c8b6d803eb83eecfe4c7ff9e6ab5a52e83d089dad7a8710e0254f1b11cced7bc3c8da0c44d2ebf9f6f3ff3be4d1458077c2253b0c7c7a0a9fdd63bf910dc20e5cb2a88e59febc47f1212a21f631dbaa74f22bad050e9856b48ae3a03a497c37758537650fe6db88aa3c41fdc3d78e046f6160e1741299e8dc29906870e6431ed1eab5d067a183f064b060a8ec12725d42e3a74863d66bee966b1574f8e01b3f34a267ff0afa1e1c758a0079b747067312e9815a21cb3f1f8150d999d788535a4d3114dbc7e2bf2402a75fd7a55733360040855ed5d1c0d634fb9fb38f84d9d87b27f8a5d91217b728f13e3ee20e69e0ffb2780b1a7af137ff7b4ff139604faf0a4da65396174b4563d54b52f06c870edf0c5d744b5272b44c23488b2bdbff947c4dfa108cbb88202eeb81f428a5b3c299848649e1a6bff52f657a67463d7dbf85ae9321fc2b517dc4a29b9cba8ded5de8206c812439ab129ae818837ee1562078fc524b3baf49a0be9bb7d958d5e87c6c09bf71a894bad62934782cc308e936d7637e07c4a2a3bc87b0da23c00d9ef418cf19e7a8c4c328be0ce95798adc2dca871073f6bd61dc18402cde8bf777b2eaa45c940aabc86b94f8cbde4d470667bee722a6a2af483ad0d3415ed0f9db059acaba9eaea93f811d434e00000000000000000000d154ba10a8e51489a614e69722bac30000000000000000000000000000c5dfd188ff555285b9743d3aac000583f42d168613151d681a2f71373f20d92c9048407c91fabecfe8b3f2d5454d127edab14ba61ba1cfc4336324c86f3dcb43e9a58208077e90f6ec1c7ac756f61dcc372cdd30b82507489f0bbfbd3c3f21752e81319c0161e154ceb16e00bc7f5a6962dff317f4d014786e432817064874d69a39cb0da31bcc5f81894d8a80756447322207b4007dff12eb95066cc6bc256f0a12282224bb031bbee6d23cef7074f6d718b06ca80b57aa183dd0c3eee45891441f2b89b4c67aa9882281393954972046974f18df232cd7fca610e33f51c2d062020f403d85ff36c26e2f6bd1d82f4d3ceb3472d9a77e0057a3bfe697d9ab7585f4a1b381343d2cf855689232f4fc5135790662dc1419a374be9d7b3e5be2886d23add90d862f1a682ff11c798e338af3e5bb0f9d3952b15bf3e0c618c89d20ca1e18a031397693bf3cfbd8417e5b55e641c898c280356f2da222d5d68919d98158578dcf18efa404e508bcbbb8cfcf70086821ebdf34c9a1dff45af873df904c2bdbef81f246d26f4b40df949e12bdac18532f4e11c608cc31d60cb591c40a7b386fa1c753336d7220a35118d4919b45eff32aab684e62c6691de14e97aa7e9dc8ecf0cd50540246d2b746e41e5b4e2c095039dfe0f71db6265f7580d098be40ef36faee5d1695830d4242a23e541e6ce9fa1998d8961cf4fe3c8e8fbb566f148c8befc229614a4b7f80d237b8abc6fd0407de31d6e5532f360d379f20f054692b47207922fe6c14eba96c9a7ae906abc1ae1ae8c4fae92883cfa1978a04bbff4bbefc538369959f773a4cddf9e90aa9b73270280d0cab060cfbd99bb790cc95042ba7605f8fa201a80ce6c236a9fa14000bb8fbaddbfe180c573c325977484f45c73b2572663dde"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xffffffffffffffd2}, 0x48) sendto$inet(r1, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) sendmsg(r1, &(0x7f00000016c0)={0x0, 0x0, &(0x7f0000001440)=[{&(0x7f0000000000)="02", 0x1}], 0x1}, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000100)={0x3}, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_IBSS(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)={0x34, r2, 0x101, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_PRIVACY={0x4}, @NL80211_ATTR_KEYS={0x4}, @NL80211_ATTR_SSID={0x5, 0x34, @random='<'}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x34}}, 0x0) sendto$inet(r1, &(0x7f0000000300)="b3", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r1, 0x84, 0x7b, &(0x7f0000000040)={0x0, 0x1}, 0x8) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) sendmsg$NL80211_CMD_DEL_PMK(r1, &(0x7f0000000200)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r5, 0x400, 0x70bd29, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}]}, 0x68}, 0x1, 0x0, 0x0, 0x4048881}, 0x0) close(r1) 2.212081593s ago: executing program 3 (id=142): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x0, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="18"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r3 = epoll_create1(0x0) r4 = syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r4, &(0x7f0000000040)) ioctl$int_in(r4, 0x5452, &(0x7f0000000140)=0x9) pselect6(0x40, &(0x7f0000000000), 0x0, &(0x7f0000000100)={0x8}, &(0x7f00000000c0)={0x0, 0x989680}, 0x0) write$cgroup_int(r2, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) syz_emit_ethernet(0x1f, &(0x7f0000000380)={@local, @random="f8690200e27a", @void, {@llc_tr={0x11, {@llc={0xaa, 0x0, "1f", "eae6801661b373e9b1f31094a40b"}}}}}, 0x0) r5 = socket(0x1, 0x803, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="18010000000b01000000000000000000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r7, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000200)={r7, &(0x7f0000000080), &(0x7f0000000000)=""/10, 0x2}, 0x20) sendfile(r0, r7, &(0x7f0000000300)=0x3, 0x9) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000140)='kfree\x00', r6}, 0x10) sendmsg$tipc(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000007c0)=[{0x0}], 0x1}, 0x0) r8 = socket$inet6(0xa, 0x2, 0x0) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$ARPT_SO_SET_REPLACE(r9, 0x0, 0x60, &(0x7f0000000440)={'filter\x00', 0x104, 0x4, 0x3d8, 0x0, 0x100, 0x100, 0x2f0, 0x2f0, 0x2f0, 0x7fffffe, 0x0, {[{{@arp={@remote, @broadcast, 0x0, 0x0, 0x0, 0x0, {@mac=@link_local={0x2, 0x80, 0xc2, 0x7}}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'bridge0\x00', 'erspan0\x00'}, 0xc0, 0x100}, @unspec=@RATEEST={0x40, 'RATEEST\x00', 0x0, {'syz1\x00'}}}, {{@uncond, 0xc0, 0x108}, @unspec=@LED={0x48, 'LED\x00', 0x0, {'syz1\x00'}}}, {{@arp={@empty, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, {}, {}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'pim6reg1\x00', 'ipvlan1\x00'}, 0xc0, 0xe8}, @unspec=@STANDARD={0x28, '\x00', 0x0, 0xe0}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x428) ioctl$sock_SIOCETHTOOL(r8, 0x89f0, &(0x7f0000000000)={'bridge0\x00', &(0x7f0000000340)=@ethtool_regs={0x12}}) getsockname$packet(r5, 0x0, &(0x7f0000000080)) 2.203296377s ago: executing program 4 (id=143): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in=@dev, @in6=@dev}, {@in6=@mcast1, 0x0, 0x32}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, 0x70bd27, 0x0, 0x0, 0x0, 0xfe}, 0x0, 0x393b}, [@tfcpad={0x8, 0x16, 0x40}]}, 0x100}}, 0x20008000) pipe(&(0x7f00000002c0)) socket$netlink(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="140100000000b2000500000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff44}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000002c0)=[@in={0x2, 0x0, @rand_addr=0x64010102}], 0x10) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x0, 0x7) socket(0x200000000000011, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c832, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in=@broadcast, 0x4e22, 0xfffe, 0x4, 0x0, 0x2, 0x0, 0x20}, {}, {0x0, 0x0, 0xffffffffffffffff}, 0xfffffffd}, {{@in=@empty}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x2}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'pim6reg\x00'}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) recvmmsg(r4, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000c00)=""/4111, 0xd80}], 0x1}}], 0x1, 0x122, 0x0) 2.052913561s ago: executing program 1 (id=144): r0 = socket$packet(0x11, 0x2, 0x300) syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x4, 0x8, 0xc}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000280)=@framed, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000080)={'erspan0\x00', 0x4000}) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'bridge_slave_0\x00', 0x0}) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r4, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r5}, 0x10) r6 = socket$alg(0x26, 0x5, 0x0) bind$alg(r6, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'digest_null\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, 0x0, 0x0) r7 = accept4(r6, 0x0, 0x0, 0x0) r8 = accept$alg(r7, 0x0, 0x0) accept4(r8, &(0x7f0000000640)=@qipcrtr, 0x0, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r3, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) 1.712917259s ago: executing program 2 (id=145): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000380)=@allocspi={0x100, 0x16, 0x1, 0x0, 0x0, {{{@in=@dev, @in6=@dev}, {@in6=@mcast1, 0x0, 0x32}, @in=@broadcast, {0x0, 0x0, 0x0, 0x0, 0x4}, {}, {}, 0x70bd27, 0x0, 0x0, 0x0, 0xfe}, 0x0, 0x393b}, [@tfcpad={0x8, 0x16, 0x40}]}, 0x100}}, 0x20008000) pipe(&(0x7f00000002c0)) socket$netlink(0x10, 0x3, 0x14) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="140100000000b2000500000000000000850000007b00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0xffffff44}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000140)='contention_end\x00', r1}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) connect$inet6(r2, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x1}, 0x1c) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r2, 0x84, 0x6e, &(0x7f00000002c0)=[@in={0x2, 0x0, @rand_addr=0x64010102}], 0x10) connect$inet6(r2, &(0x7f0000000080)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) socket$nl_route(0x10, 0x3, 0x0) socket$inet6(0xa, 0x0, 0x7) socket(0x200000000000011, 0x3, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1805000000000000000000004b64ffec850000007d000000850000002a00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x10) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x4, 0x200000005c832, 0xffffffffffffffff, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f0000000180)={{{@in6=@remote, @in=@broadcast, 0x4e22, 0xfffe, 0x4, 0x0, 0x2, 0x0, 0x20}, {}, {0x0, 0x0, 0xffffffffffffffff}, 0xfffffffd}, {{@in=@empty}, 0x0, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x2}}, 0xe8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'pim6reg\x00'}) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r4, 0x6, 0xa, &(0x7f0000000000)=0xbf, 0x4) bind$inet6(r4, &(0x7f0000d84000)={0xa, 0x2, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_int(r4, 0x6, 0x2000000000000022, &(0x7f0000000200)=0x1, 0x4) sendto$inet6(r4, &(0x7f00000000c0)="044aac2f202c5feda71e039a57a93088fdcce4afe28aac61837792741a190670ccbe1a2b00aa77a87d56a3f12c7920ad02928a5d1014e5b896f000fcf6521928480be9af82613a5c661f4110adba358afd8b5b4ef1702051e393ede2698112a1f1bdf1d0f568546ed322ab4c53545bd2cd6e48522f0c154cb3c6864dc30ae921db100f1ee97a234503338f8fdf356472da0c7ab62f274f34", 0x116d962d5f73552, 0x20000845, &(0x7f0000b63fe4)={0xa, 0x2}, 0x1c) recvmmsg(r4, &(0x7f0000000bc0)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000c00)=""/4111, 0xd80}], 0x1}}], 0x1, 0x122, 0x0) 1.527455632s ago: executing program 1 (id=146): pselect6(0x61, &(0x7f0000000880)={0x0, 0x4, 0x0, 0x0, 0xd}, &(0x7f0000000180), 0x0, 0x0, 0x0) 1.277117025s ago: executing program 1 (id=147): socket$netlink(0x10, 0x3, 0x0) (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket(0x10, 0x80002, 0x0) sendmsg(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000040)="24000000180003041dfffd946f610500020100000005fe060c10880008000f00fff3c00e140000001a00ffffba16a0aa1c091dbfa10900", 0x37}], 0x1}, 0x0) (async) sendmmsg$alg(r0, &(0x7f0000000180)=[{0x2, 0x1000000000000, &(0x7f0000000080), 0x6, &(0x7f0000000100), 0xf}], 0x492492492492642, 0x0) recvmmsg(r0, &(0x7f0000007380)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000008c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000001880)=@newtaction={0x6c, 0x30, 0x109, 0x0, 0x0, {}, [{0x58, 0x1, [@m_nat={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_NAT_PARMS={0x28, 0x1, {{}, @remote, @local}}]}, {0xb074739e4276a0a0}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) (async) socket$kcm(0x10, 0x3, 0x10) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz0\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MAXELEM={0x8, 0x13, 0x0}]}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}]}, 0x58}}, 0x0) (async) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) (async) r4 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) (async) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a6c000000060a09040000000000000000020002000900020073797a32000000000900010073797a3000000000400004803c0001800a0001006c696d69740000002c00028008000440000000010c00024000000000000000000c000140ffffffffffffff0200000000000000"], 0x94}}, 0x0) (async) r6 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r6, 0x10e, 0xc, &(0x7f0000000180)={0xffffff}, 0x10) write(r6, &(0x7f0000000000)="240000001a005f0214f9f407000904001f000000fe0000000000000008000f00fd000000", 0x24) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) ioctl$TUNATTACHFILTER(r4, 0x401054d5, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x28, 0x0, 0x0, 0xfffff002}]}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r3}, 0x10) (async) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000740)=ANY=[@ANYBLOB="c0000000190001000000000000000000000000000000000000000000000000000000000000000038aeffff000000000000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000001"], 0xc0}}, 0x0) (async) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x0, {{@in6=@empty, @in=@private, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}}, 0xb8}}, 0x0) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0xe) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r6) 1.267621394s ago: executing program 4 (id=148): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0xd, 0x10, &(0x7f00000003c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf09000000000000550901000000000095000000000000000000000000000000bf91000000000000b7020000001000008500000000000000b70000000000000095"], &(0x7f0000000140)='GPL\x00', 0x8, 0xfd, &(0x7f0000000640)=""/253}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000001e40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe80, 0x6000, &(0x7f0000000640)="b9ff03076844268cb89e14f088a847e0ffff200000000021000aac14142fe0", 0x0, 0x11, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x48) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000480), 0x8) r3 = socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xfffff028}, {0x6}]}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_TX_TS(r5, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000780)=ANY=[@ANYBLOB="1100cdebf61d675f81877ee7d5dfe4d9717e00000000", @ANYRES16=r6, @ANYBLOB="010000000000000000006a00000008000300", @ANYRES32=r7, @ANYBLOB="0500d20000000000"], 0x24}}, 0x0) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) socket$kcm(0x29, 0x2, 0x0) socket$nl_rdma(0x10, 0x3, 0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r2, 0x89f2, &(0x7f0000000440)={'ip6gre0\x00', &(0x7f0000000580)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x9, 0x4, 0x12, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @mcast1, 0x40, 0x10, 0x80, 0x9}}) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000a40)={{r2, 0xffffffffffffffff}, &(0x7f00000009c0), &(0x7f0000000a00)=r0}, 0x20) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000b00)=@bpf_ext={0x1c, 0x3, &(0x7f0000000c40)=ANY=[@ANYBLOB="18189e7c4d763595eb680b02e88f0b23160000441e7c80af44e5774a6a258480cf2fc4077403f5e0d3a404dcaf869d5644aa353369c99373f37f0cc641e6ddb7d25879e8cc8fcc038e715a77d7ffe3b93b1462947663daf2977cb37a310af485de1a1d610c2a512044f2236b79804b1d694f841be0eb97a589", @ANYRES32=0x1, @ANYBLOB="00000000000000000968000203000000"], &(0x7f00000002c0)='GPL\x00', 0xfffff800, 0x0, 0x0, 0x40f00, 0xe, '\x00', r10, 0x0, r2, 0x8, &(0x7f0000000940)={0x5, 0x2}, 0x8, 0x10, &(0x7f0000000980)={0x2, 0xf, 0x4, 0x40}, 0x10, 0x1, r0, 0x3, &(0x7f0000000a80)=[r11, r2, r2, r2, r2], &(0x7f0000000ac0)=[{0x3, 0x4, 0xc, 0x6}, {0x3, 0x3, 0x4, 0x1}, {0x0, 0x1, 0x10, 0x7}], 0x10, 0x7}, 0x90) ioctl$ifreq_SIOCGIFINDEX_wireguard(r3, 0x8933, &(0x7f0000000240)={'wg1\x00', 0x0}) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000bc0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01000000000000000000160000000c00018008000100626aa08492fb8ab84be3beceffab46f1d607a3d71f12c7bf83e7410660c67da6a7fd0a6ddf438f0e25db86b5eb1d904872bdfad12535b7e7135e0c5a6f08addf98", @ANYRES32=r12, @ANYBLOB], 0x20}}, 0x0) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000500)=0x0, &(0x7f0000000540)=0x4) sendmsg$ETHTOOL_MSG_WOL_GET(r2, &(0x7f0000000740)={&(0x7f00000004c0)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000600)={&(0x7f00000007c0)=ANY=[@ANYBLOB="80000000", @ANYRES16=r8, @ANYBLOB="000828bd7000fddbdf25090000006c0001801400020076657468f9d3305f746f5f7465616d0000000800030000000000080001007c90db421d6d8603b3694b44cda1e8a246969ef80434656964c8a7ea8e717ab269720b9b0ebe1ec55c2d237fa4df04731a79a781318de7ffaa527a0f90d6936d08d0ea5ecaed3965979950402680594d10f55f640a8dd684785e52c5d20daa0464fec4bd08185bef1ebef75365c2d54c826f09046d3603c834acf72751df1f7ab6ffc974f54387c956c83c3cd89930960d8c23b55290352b35f2a795f40b41a7b007a47be5478e16194ae30d29a381b9aad7dc82b3ceffc41b38d5d6eec5e6d73e79c1799c435891baa6d6f8ebcc716a98004ea72850", @ANYRES32=r13, @ANYBLOB="080003001c42a4f8080003000300000008000300000000000800030001000000080003000300000014000200766c616e3000000000000000000000000800030001000000"], 0x80}, 0x1, 0x0, 0x0, 0x20004050}, 0x4000804) r14 = socket$netlink(0x10, 0x3, 0x8000000004) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) writev(r14, &(0x7f0000000040)=[{&(0x7f0000000180)="580000001400192340834b80040d8c560a067f0202ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c100000000100ffffbfff", 0x58}], 0x1) 926.793845ms ago: executing program 4 (id=149): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="1000"/16], 0x10}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000140), 0x208e24b) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x28011, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) mmap(&(0x7f000007c000/0x4000)=nil, 0x4000, 0x0, 0x13, r2, 0x0) mmap(&(0x7f0000ffc000/0x2000)=nil, 0x2000, 0x0, 0x13, r2, 0x0) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r1, 0x660c) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) r5 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000d40)=ANY=[@ANYBLOB="18000000010000000000000000000000911207000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[], 0x74}, 0x1, 0x0, 0x0, 0x801}, 0x0) 748.315809ms ago: executing program 2 (id=150): sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000000)) r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REQ_SET_REG(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)={0x24, r0, 0x1, 0x0, 0x0, {}, [@NL80211_ATTR_REG_ALPHA2={0x6, 0x21, 'b\x00'}, @NL80211_ATTR_USER_REG_HINT_TYPE={0x8, 0x9a, 0x1}]}, 0x24}}, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0xf, 0x4, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000069006c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x14, &(0x7f0000000bc0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000069006c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r3}, 0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}]}}}]}, 0x44}}, 0x0) (async) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=@newlink={0x44, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r6}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_NF_CALL_ARPTABLES={0x5}, @IFLA_BR_NF_CALL_IP6TABLES={0x5, 0x25, 0x1}]}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) r7 = socket$inet6(0x10, 0x3, 0x0) sendto$inet6(r7, &(0x7f0000000000)='s', 0x10a73, 0x800, 0x0, 0x4b6ae4f95a5de35b) socket$netlink(0x10, 0x3, 0x0) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_NEW(r9, &(0x7f00000002c0)={0x0, 0xfffffffffffffee4, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x0, 0x7, 0x401, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) (async) sendmsg$NFNL_MSG_ACCT_NEW(r9, &(0x7f00000002c0)={0x0, 0xfffffffffffffee4, &(0x7f0000000280)={&(0x7f0000000200)={0x14, 0x0, 0x7, 0x401, 0x0, 0x0, {0x5}}, 0x14}}, 0x0) sendmsg$NFNL_MSG_ACCT_DEL(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, 0x3, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x0) (async) sendmsg$NFNL_MSG_ACCT_DEL(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={0x20, 0x3, 0x7, 0x5, 0x0, 0x0, {}, [@NFACCT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x11}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'virt_wifi0\x00'}) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cpuacct.usage_user\x00', 0x275a, 0x0) write$binfmt_script(r10, &(0x7f0000020240), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r10, 0x0) socket$inet(0xa, 0x801, 0x84) (async) r11 = socket$inet(0xa, 0x801, 0x84) listen(r11, 0x8) (async) listen(r11, 0x8) readv(r11, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xf3}], 0x1) (async) readv(r11, &(0x7f0000000000)=[{&(0x7f00000000c0)=""/243, 0xf3}], 0x1) r12 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETSET(r12, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000001480)={0x14, 0xa, 0xa, 0x301, 0x0, 0x0, {0xa}}, 0x14}}, 0x4000800) 609.078369ms ago: executing program 4 (id=151): socket$nl_route(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_mptcp(0xa, 0x1, 0x106) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x12, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) clock_gettime(0x0, 0x0) r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r0, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) ioctl$int_in(r0, 0x5452, &(0x7f0000000140)) setsockopt$bt_BT_SECURITY(r0, 0x112, 0x4, &(0x7f0000003000)={0x2}, 0x2) r1 = epoll_create(0x1ff) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r0, &(0x7f0000000000)={0x60000000}) shutdown(r0, 0x1) epoll_wait(r1, &(0x7f0000000240)=[{}], 0x1, 0x0) epoll_ctl$EPOLL_CTL_MOD(r1, 0x3, r0, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_GET_WOWLAN(r2, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) socket(0x0, 0x80000, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000002380)={@local, @broadcast, @void, {@can={0xc, {{}, 0x0, 0x0, 0x0, 0x0, "37bbcca5dd34663b"}}}}, 0x0) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x22, &(0x7f0000000000)=0x1, 0xfefb) sendto$inet(r3, &(0x7f0000000480)="a6", 0x1, 0x20040040, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) 431.402277ms ago: executing program 4 (id=152): accept4$packet(0xffffffffffffffff, &(0x7f0000000040)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000340)={'vlan0\x00', 0x0}) r2 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000013002901800000000000000007000000", @ANYRES32=r1, @ANYBLOB="00000000000000001c001a800800028004000500080000003e"], 0x44}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NL80211_CMD_FRAME(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000700)=ANY=[@ANYBLOB="20010004", @ANYRES16=0x0, @ANYBLOB="000000000000000000003b00000008000300", @ANYRES32=0x0, @ANYBLOB="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"], 0x120}}, 0x0) r4 = socket$pppl2tp(0x18, 0x1, 0x1) r5 = socket$pppl2tp(0x18, 0x1, 0x1) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='cgroup.controllers\x00', 0x26e1, 0x0) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000380)=@framed={{}, [@printk={@lx, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x80000000}, {0x85, 0x0, 0x0, 0x2d}}, @call={0x85, 0x0, 0x0, 0xe}]}, &(0x7f00000012c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='block_plug\x00', r7}, 0x10) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x7a05, 0x1700) write$cgroup_int(r8, &(0x7f0000000200), 0x43400) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000002c0)) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x10, &(0x7f0000000000)=@framed={{}, [@snprintf={{}, {}, {}, {}, {0x7, 0x1, 0xb, 0x1, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6, 0x0, 0x0, 0x0, 0x2}}]}, &(0x7f0000000300)='GPL\x00', 0x5, 0xff8, &(0x7f0000001e00)=""/4088}, 0x90) r9 = socket$netlink(0x10, 0x3, 0xb) bind$netlink(r9, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) close(r9) r10 = socket$inet_udp(0x2, 0x2, 0x0) connect$pppl2tp(r5, &(0x7f0000000980)=@pppol2tpin6={0x18, 0x1, {0x0, r10, 0x1, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}}}, 0x32) connect$pppl2tp(r4, &(0x7f0000000980)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x1, 0x3}}, 0x26) getsockopt$bt_BT_SECURITY(r4, 0x111, 0x1f, 0x0, 0x20001f00) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000340)={'wlan1\x00'}) syz_emit_ethernet(0x42, &(0x7f0000000140)={@local, @broadcast, @void, {@ipv4={0x800, @tcp={{0x8, 0x4, 0x0, 0x0, 0x34, 0x40, 0x0, 0x0, 0x6, 0x0, @empty, @empty, {[@cipso={0x86, 0xb, 0x3, [{0x1, 0x5, '\x00\x00\x00'}]}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) 201.497829ms ago: executing program 3 (id=153): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x5, 0xb, &(0x7f0000000180)=ANY=[], 0x0}, 0x90) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='mm_page_alloc\x00', r0}, 0x10) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x0, 0x0, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r1, &(0x7f0000000480)={0x0, 0x7400, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000051421060000000000000000080001"], 0x20}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x1, 0x3, 0x220104, 0xb, 0x1}, 0x48) 85.017277ms ago: executing program 2 (id=154): socket$inet6_tcp(0xa, 0x1, 0x0) (async) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000000)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}}, 0x1c) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) (async) bind$alg(r1, &(0x7f00000000c0)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-generic\x00'}, 0x58) r2 = accept$alg(r1, 0x0, 0x0) recvmmsg(r2, &(0x7f00000005c0)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7000006}}], 0x1, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) getsockopt$IP_SET_OP_VERSION(r1, 0x1, 0x53, &(0x7f0000000040), &(0x7f0000000080)=0x8) socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0xb, 0x0, 0x0) (async) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0xb, 0x0, 0x0) 84.463101ms ago: executing program 1 (id=155): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000340)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x5, [@volatile={0xb}, @enum={0x1, 0x1, 0x0, 0x6, 0x4, [{0x0, 0xb1}]}]}, {0x0, [0x1f, 0x61, 0x30]}}, &(0x7f0000000380)=""/1, 0x3d, 0x1, 0x0, 0xba}, 0x20) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000010062018e00d8ff20c90000"], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x3d, '\x00', 0x0, 0xf, r1}, 0x90) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="1400000000000000000a68000000060a0000000000000000000000000000480004802000018007000100637400024000000000080001400000000024000180090001006d6574610000000014000280080002400000000008000140000000110900010073797a3000000000140000001100010000000000000008000000000a00"/137], 0x90}, 0x1, 0x0, 0x0, 0x4}, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) mmap(&(0x7f0000abb000/0x1000)=nil, 0x1000, 0x0, 0x102000200032, 0xffffffffffffffff, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$sock_timeval(r3, 0x1, 0xd, &(0x7f0000abaff9)={0x0, 0xea60}, 0x10) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x34, 0x3b, 0x107, 0x0, 0x0, {0x4, 0x7c}, [@typed={0x4}, @nested={0x1c, 0x1, 0x0, 0x1, [@typed={0x6, 0x6, 0x0, 0x0, @str='\x80\n'}, @typed={0xe, 0x15, 0x0, 0x0, @str='A\x90\x8c\xfd[\xac\x9fj+\x00'}]}]}, 0x34}}, 0x0) ioctl$TUNGETDEVNETNS(r0, 0x54e3, 0x0) r5 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r5, &(0x7f00000001c0)={0x500, 0x0, &(0x7f0000000080)={&(0x7f0000000200)={0x2, 0x1, 0x0, 0x9, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6, 0x0, 0x0, 0x0, @in={0x2, 0x0, @private}}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}}, @sadb_x_sa2={0x2}]}, 0x50}}, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000740)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r6 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x1f, 0xf, &(0x7f00000001c0)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r6}, {}, {}, {0x85, 0x0, 0x0, 0x93}}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f0000000080)='ext4_allocate_inode\x00'}, 0x10) write$tun(r0, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0a00100000004000000060ec97000fc83c00fe8000000000000000000000000000aaff020000000000000000000000000001"], 0xffe) socket$nl_route(0x10, 0x3, 0x0) 0s ago: executing program 4 (id=156): bpf$MAP_CREATE(0x100000000000000, &(0x7f0000000140)=@base={0xa, 0x16, 0xb3, 0x7f}, 0x48) r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000040)={0x11, 0x4, &(0x7f0000000000)=ANY=[@ANYRES16=r0], &(0x7f0000000180)='syzkaller\x00', 0x31, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r1 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$inet_buf(r1, 0x0, 0x30, &(0x7f00000004c0)="17000081fc07b9848a701d00cb8474a2000200020000ffbe8c5ee17688a2006c0007ecbb0afdff02a257fc5ad90200bb6a880000d6c9db0000db69b1620d30c4ca446eca553e1000000200df01800a0000e7fc0607bdff59100ac45761547a681f009cee4a5acba400001fb700674f00c88ebbf9315033bf79ac2dfc061f15003901dee2ffffffffe9ca0ec6c7e4169f", 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={0x0}, 0x10) r2 = socket(0x8000000010, 0x2, 0x0) write(r2, &(0x7f00000002c0)="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", 0xfc) r3 = socket(0x840000000002, 0x3, 0x100) r4 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000fbe000)={0x1, &(0x7f0000000100)=[{0x80000006}]}, 0x10) syz_emit_ethernet(0x66, &(0x7f0000000340)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x0, 0x0, 0x58, 0x0, 0x0, 0x0, 0x2f, 0x0, @private=0xa010101, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x11}}}}}}, 0x0) connect$inet(r3, &(0x7f00000005c0)={0x2, 0x0, @local}, 0x10) sendmmsg$inet(r3, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r5 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r5, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x20000010304, @dev}, 0x4, {0x2, 0x0, @multicast1=0xe000cc02}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.134' (ED25519) to the list of known hosts. [ 49.247935][ T5083] cgroup: Unknown subsys name 'net' [ 49.384138][ T5083] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 50.747270][ T5083] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 51.288442][ T5094] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 51.299012][ T5094] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 51.309508][ T53] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 51.318294][ T53] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 51.327124][ T53] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 51.335785][ T53] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 51.345310][ T53] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 51.353672][ T53] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 51.361378][ T53] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 51.380557][ T53] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 51.389927][ T5103] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 51.399175][ T5105] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 51.404915][ T5103] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 51.415076][ T5105] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 51.420647][ T5103] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 51.439516][ T5103] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 51.447341][ T5103] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 51.457667][ T5105] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 51.466570][ T5105] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 51.473981][ T5103] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 51.474126][ T5105] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 51.490374][ T5103] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 51.500299][ T5103] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 51.509201][ T5103] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 51.548560][ T5099] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 51.559128][ T5099] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 51.567366][ T5099] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 51.575614][ T5099] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 51.583968][ T5099] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 51.593591][ T5099] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 52.026672][ T5095] chnl_net:caif_netlink_parms(): no params data found [ 52.045761][ T5092] chnl_net:caif_netlink_parms(): no params data found [ 52.222332][ T5100] chnl_net:caif_netlink_parms(): no params data found [ 52.306443][ T5102] chnl_net:caif_netlink_parms(): no params data found [ 52.319338][ T5095] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.326623][ T5095] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.334003][ T5095] bridge_slave_0: entered allmulticast mode [ 52.341491][ T5095] bridge_slave_0: entered promiscuous mode [ 52.353288][ T5095] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.360810][ T5095] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.368320][ T5095] bridge_slave_1: entered allmulticast mode [ 52.375774][ T5095] bridge_slave_1: entered promiscuous mode [ 52.391056][ T5092] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.400044][ T5092] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.407391][ T5092] bridge_slave_0: entered allmulticast mode [ 52.414199][ T5092] bridge_slave_0: entered promiscuous mode [ 52.436141][ T5107] chnl_net:caif_netlink_parms(): no params data found [ 52.473571][ T5095] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.483095][ T5092] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.491371][ T5092] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.498946][ T5092] bridge_slave_1: entered allmulticast mode [ 52.506253][ T5092] bridge_slave_1: entered promiscuous mode [ 52.540890][ T5095] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.609735][ T5092] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 52.658287][ T5095] team0: Port device team_slave_0 added [ 52.666694][ T5092] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 52.711033][ T5100] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.718384][ T5100] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.726476][ T5100] bridge_slave_0: entered allmulticast mode [ 52.733242][ T5100] bridge_slave_0: entered promiscuous mode [ 52.742402][ T5095] team0: Port device team_slave_1 added [ 52.764281][ T5092] team0: Port device team_slave_0 added [ 52.770668][ T5102] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.778226][ T5102] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.785792][ T5102] bridge_slave_0: entered allmulticast mode [ 52.792512][ T5102] bridge_slave_0: entered promiscuous mode [ 52.821868][ T5100] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.829402][ T5100] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.836870][ T5100] bridge_slave_1: entered allmulticast mode [ 52.843577][ T5100] bridge_slave_1: entered promiscuous mode [ 52.863648][ T5092] team0: Port device team_slave_1 added [ 52.881298][ T5102] bridge0: port 2(bridge_slave_1) entered blocking state [ 52.888824][ T5102] bridge0: port 2(bridge_slave_1) entered disabled state [ 52.896523][ T5102] bridge_slave_1: entered allmulticast mode [ 52.903352][ T5102] bridge_slave_1: entered promiscuous mode [ 52.963549][ T5107] bridge0: port 1(bridge_slave_0) entered blocking state [ 52.970859][ T5107] bridge0: port 1(bridge_slave_0) entered disabled state [ 52.978546][ T5107] bridge_slave_0: entered allmulticast mode [ 52.985973][ T5107] bridge_slave_0: entered promiscuous mode [ 53.010032][ T5095] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.017346][ T5095] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.043317][ T5095] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.056565][ T5095] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.063566][ T5095] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.090125][ T5095] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.102018][ T5092] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.109467][ T5092] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.135810][ T5092] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.156941][ T5107] bridge0: port 2(bridge_slave_1) entered blocking state [ 53.164095][ T5107] bridge0: port 2(bridge_slave_1) entered disabled state [ 53.172076][ T5107] bridge_slave_1: entered allmulticast mode [ 53.179155][ T5107] bridge_slave_1: entered promiscuous mode [ 53.202797][ T5100] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.221451][ T5092] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.229004][ T5092] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.255138][ T5092] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.271113][ T5102] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.294839][ T5100] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.307184][ T5107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 53.336349][ T5102] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.369187][ T5107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 53.448795][ T5107] team0: Port device team_slave_0 added [ 53.460130][ T5095] hsr_slave_0: entered promiscuous mode [ 53.467431][ T5095] hsr_slave_1: entered promiscuous mode [ 53.477775][ T5102] team0: Port device team_slave_0 added [ 53.488244][ T5100] team0: Port device team_slave_0 added [ 53.506200][ T5099] Bluetooth: hci0: command tx timeout [ 53.511385][ T5107] team0: Port device team_slave_1 added [ 53.512017][ T5103] Bluetooth: hci1: command tx timeout [ 53.543189][ T5100] team0: Port device team_slave_1 added [ 53.563296][ T5102] team0: Port device team_slave_1 added [ 53.584706][ T5099] Bluetooth: hci3: command tx timeout [ 53.590070][ T5092] hsr_slave_0: entered promiscuous mode [ 53.590692][ T5103] Bluetooth: hci2: command tx timeout [ 53.602222][ T5092] hsr_slave_1: entered promiscuous mode [ 53.611101][ T5092] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 53.619621][ T5092] Cannot create hsr debugfs directory [ 53.664597][ T5103] Bluetooth: hci4: command tx timeout [ 53.673732][ T5102] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.681406][ T5102] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.707885][ T5102] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.726320][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.733296][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.760464][ T5107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.782897][ T5100] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 53.790218][ T5100] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.816716][ T5100] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 53.828675][ T5102] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.835855][ T5102] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.862735][ T5102] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.893586][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.900714][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.927235][ T5107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 53.951768][ T5100] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 53.960257][ T5100] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 53.986284][ T5100] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 54.091505][ T5100] hsr_slave_0: entered promiscuous mode [ 54.098545][ T5100] hsr_slave_1: entered promiscuous mode [ 54.105717][ T5100] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.113291][ T5100] Cannot create hsr debugfs directory [ 54.189616][ T5107] hsr_slave_0: entered promiscuous mode [ 54.196897][ T5107] hsr_slave_1: entered promiscuous mode [ 54.203245][ T5107] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.211440][ T5107] Cannot create hsr debugfs directory [ 54.281193][ T5102] hsr_slave_0: entered promiscuous mode [ 54.288909][ T5102] hsr_slave_1: entered promiscuous mode [ 54.295888][ T5102] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 54.303480][ T5102] Cannot create hsr debugfs directory [ 54.521990][ T5095] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 54.537711][ T5095] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 54.577462][ T5095] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 54.589417][ T5095] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 54.725218][ T5092] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 54.741631][ T5092] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 54.753140][ T5092] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 54.787850][ T5092] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 54.843919][ T5100] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 54.856835][ T5100] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 54.869550][ T5100] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 54.880356][ T5100] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 54.960136][ T5107] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 54.971609][ T5107] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 54.998720][ T5107] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 55.012142][ T5107] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 55.073703][ T5102] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 55.103881][ T5102] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 55.115329][ T5102] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 55.140304][ T5095] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.156146][ T5102] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 55.252712][ T5095] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.279637][ T5092] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.324003][ T5096] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.331479][ T5096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.373142][ T5096] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.380498][ T5096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.430722][ T5092] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.457498][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.464725][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.480119][ T5100] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.513518][ T5096] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.520718][ T5096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.586421][ T5103] Bluetooth: hci1: command tx timeout [ 55.594568][ T5103] Bluetooth: hci0: command tx timeout [ 55.606063][ T5092] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 55.646639][ T5107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.665735][ T5103] Bluetooth: hci3: command tx timeout [ 55.665819][ T5099] Bluetooth: hci2: command tx timeout [ 55.733167][ T5107] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.745910][ T5099] Bluetooth: hci4: command tx timeout [ 55.766935][ T5100] 8021q: adding VLAN 0 to HW filter on device team0 [ 55.796239][ T5096] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.803414][ T5096] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.816890][ T5096] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.824079][ T5096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 55.853377][ T5144] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.861029][ T5144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 55.958863][ T5102] 8021q: adding VLAN 0 to HW filter on device bond0 [ 55.973551][ T5096] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.980757][ T5096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.051805][ T5095] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.063050][ T5102] 8021q: adding VLAN 0 to HW filter on device team0 [ 56.080714][ T5092] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.109102][ T5141] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.116298][ T5141] bridge0: port 1(bridge_slave_0) entered forwarding state [ 56.167311][ T5096] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.174545][ T5096] bridge0: port 2(bridge_slave_1) entered forwarding state [ 56.195548][ T5100] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.318137][ T5095] veth0_vlan: entered promiscuous mode [ 56.348341][ T5102] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 56.420752][ T5092] veth0_vlan: entered promiscuous mode [ 56.438690][ T5095] veth1_vlan: entered promiscuous mode [ 56.517467][ T5092] veth1_vlan: entered promiscuous mode [ 56.541120][ T5107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.602799][ T5100] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.630440][ T5095] veth0_macvtap: entered promiscuous mode [ 56.695862][ T5092] veth0_macvtap: entered promiscuous mode [ 56.710582][ T5095] veth1_macvtap: entered promiscuous mode [ 56.733645][ T5102] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 56.743392][ T5092] veth1_macvtap: entered promiscuous mode [ 56.764009][ T5107] veth0_vlan: entered promiscuous mode [ 56.803914][ T5095] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 56.833335][ T5095] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 56.852646][ T5107] veth1_vlan: entered promiscuous mode [ 56.863876][ T5095] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.880457][ T5095] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.890754][ T5095] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.899854][ T5095] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 56.971216][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 56.982722][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 56.996999][ T5092] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.054941][ T5092] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.068306][ T5092] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.080178][ T5092] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.092703][ T5092] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.102820][ T5092] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.116210][ T5092] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.125189][ T5092] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.163287][ T5102] veth0_vlan: entered promiscuous mode [ 57.218358][ T5107] veth0_macvtap: entered promiscuous mode [ 57.241667][ T2888] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.243589][ T5102] veth1_vlan: entered promiscuous mode [ 57.256070][ T2888] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.282646][ T5107] veth1_macvtap: entered promiscuous mode [ 57.331419][ T5100] veth0_vlan: entered promiscuous mode [ 57.377397][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.386640][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.397494][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.411080][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.421299][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.433089][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.445380][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 57.463543][ T5100] veth1_vlan: entered promiscuous mode [ 57.480637][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.491668][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.502977][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 57.513845][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.527734][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 57.561053][ T5107] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.573058][ T5107] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.585378][ T5107] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.594296][ T5107] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 57.636519][ T5102] veth0_macvtap: entered promiscuous mode [ 57.651805][ T51] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 57.664771][ T5099] Bluetooth: hci1: command tx timeout [ 57.666408][ T5103] Bluetooth: hci0: command tx timeout [ 57.695349][ T51] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 57.711293][ T5102] veth1_macvtap: entered promiscuous mode [ 57.730223][ T5100] veth0_macvtap: entered promiscuous mode [ 57.745532][ T5103] Bluetooth: hci3: command tx timeout [ 57.747069][ T5099] Bluetooth: hci2: command tx timeout [ 57.825348][ T5099] Bluetooth: hci4: command tx timeout [ 57.836777][ T5100] veth1_macvtap: entered promiscuous mode [ 57.857610][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.868165][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.878795][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.890635][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.902205][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 57.926289][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 57.947593][ T5100] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.047357][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.082423][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.100613][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.112214][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.130068][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.150687][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.163184][ T5100] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.182754][ T5100] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.201944][ T5100] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.219602][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.239693][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.251846][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.267803][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.280774][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.302489][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.318001][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.335432][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.352163][ T5102] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.407304][ T5100] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.428470][ T5100] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.438186][ T5100] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.453533][ T5100] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.486707][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.505191][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.521761][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.534188][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.555393][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.572592][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.583522][ T5102] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.600399][ T5102] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.615756][ T5102] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.646536][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.675923][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.720244][ T5102] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.753695][ T5102] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.798927][ T5102] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.844657][ T5102] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.251858][ T2851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.282941][ T2851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.504872][ T2888] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.546810][ T2888] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.641186][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.677426][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.741580][ T2851] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.751831][ T5099] Bluetooth: hci1: command tx timeout [ 59.797623][ T2846] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.801245][ T2851] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.825204][ T5099] Bluetooth: hci3: command tx timeout [ 59.825322][ T5103] Bluetooth: hci2: command tx timeout [ 59.839610][ T2846] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.905984][ T5103] Bluetooth: hci4: command tx timeout [ 60.038297][ T51] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.286020][ T5187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 60.337170][ T5187] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3'. [ 60.410497][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029ffa800: rx timeout, send abort [ 60.420443][ C1] vcan0: j1939_tp_rxtimer: 0xffff888029ffac00: rx timeout, send abort [ 60.428984][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888029ffa800: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 60.444438][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888029ffac00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 60.629437][ T51] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 60.817364][ T5202] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.842636][ T5202] team0: Port device bond0 added [ 60.943651][ T5212] team0: Port device team_slave_0 removed [ 60.963781][ T5099] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 60.964099][ T5212] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 61.004950][ T5099] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 61.010012][ T5211] netlink: 'syz.2.15': attribute type 10 has an invalid length. [ 61.022946][ T5099] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 61.037836][ T5099] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 61.068195][ T5099] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 61.080901][ T5099] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 61.137670][ T5211] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 61.146976][ T5210] netlink: 'syz.2.15': attribute type 10 has an invalid length. [ 61.205298][ T51] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.289159][ T5212] netlink: 36 bytes leftover after parsing attributes in process `syz.1.13'. [ 61.309045][ T5223] netlink: 'syz.4.16': attribute type 12 has an invalid length. [ 61.323721][ T5223] netlink: 132 bytes leftover after parsing attributes in process `syz.4.16'. [ 61.340976][ T5225] netlink: 12 bytes leftover after parsing attributes in process `syz.3.17'. [ 61.440755][ T5225] Zero length message leads to an empty skb [ 61.473615][ T51] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 61.779703][ T5254] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.923642][ T5255] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25'. [ 61.934770][ T5255] netlink: 12 bytes leftover after parsing attributes in process `syz.1.25'. [ 61.947132][ T51] bridge_slave_1: left allmulticast mode [ 61.953003][ T51] bridge_slave_1: left promiscuous mode [ 61.961250][ T51] bridge0: port 2(bridge_slave_1) entered disabled state [ 61.982998][ T51] bridge_slave_0: left allmulticast mode [ 61.994048][ T51] bridge_slave_0: left promiscuous mode [ 62.000965][ T51] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.417186][ T5269] netlink: 16 bytes leftover after parsing attributes in process `syz.2.28'. [ 62.437055][ T51] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 62.451984][ T51] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 62.475703][ T51] bond0 (unregistering): Released all slaves [ 62.573040][ T5267] netlink: 8 bytes leftover after parsing attributes in process `syz.1.27'. [ 62.625434][ T5267] netlink: 32 bytes leftover after parsing attributes in process `syz.1.27'. [ 62.729519][ T5278] syz.2.29 uses obsolete (PF_INET,SOCK_PACKET) [ 62.983382][ T5281] 8021q: adding VLAN 0 to HW filter on device bond0 [ 63.010988][ T5293] Bluetooth: MGMT ver 1.22 [ 63.020516][ T5281] team0: Port device bond0 added [ 63.185017][ T5103] Bluetooth: hci0: command tx timeout [ 63.210262][ T5292] team0: Port device team_slave_0 removed [ 63.216758][ T5292] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 63.251879][ T5291] macsec1: entered promiscuous mode [ 63.259955][ T5291] macvlan0: entered promiscuous mode [ 63.331193][ T5219] chnl_net:caif_netlink_parms(): no params data found [ 63.445550][ T5300] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.607485][ T5300] vlan2: entered promiscuous mode [ 63.971851][ T51] hsr_slave_0: left promiscuous mode [ 64.000890][ T51] hsr_slave_1: left promiscuous mode [ 64.047607][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 64.097966][ T51] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 64.116332][ T51] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 64.133821][ T51] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 64.221882][ T51] veth1_macvtap: left promiscuous mode [ 64.270046][ T51] veth0_macvtap: left promiscuous mode [ 64.278195][ T51] veth1_vlan: left promiscuous mode [ 64.295358][ T51] veth0_vlan: left promiscuous mode [ 64.831401][ T51] team0 (unregistering): Port device team_slave_1 removed [ 64.877491][ T51] team0 (unregistering): Port device team_slave_0 removed [ 65.227639][ T5327] ip6gretap0: entered promiscuous mode [ 65.235512][ T5327] batadv_slave_0: entered promiscuous mode [ 65.244318][ T5327] ip6gretap0: left promiscuous mode [ 65.251875][ T5327] batadv_slave_0: left promiscuous mode [ 65.264620][ T5103] Bluetooth: hci0: command tx timeout [ 65.303802][ T5343] batadv0: entered promiscuous mode [ 65.309982][ T5343] macsec1: entered allmulticast mode [ 65.344776][ T5343] batadv0: entered allmulticast mode [ 65.389132][ T5343] batadv0: left allmulticast mode [ 65.406076][ T5343] batadv0: left promiscuous mode [ 65.600256][ T5354] netlink: 'syz.4.45': attribute type 63 has an invalid length. [ 65.802497][ T5360] __nla_validate_parse: 2 callbacks suppressed [ 65.802517][ T5360] netlink: 8 bytes leftover after parsing attributes in process `syz.1.46'. [ 65.931400][ T5374] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.52'. [ 65.940142][ T5372] A link change request failed with some changes committed already. Interface gre0 may have been left with an inconsistent configuration, please check. [ 66.044674][ T5219] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.051946][ T5219] bridge0: port 1(bridge_slave_0) entered disabled state [ 66.091736][ T5219] bridge_slave_0: entered allmulticast mode [ 66.117982][ T5219] bridge_slave_0: entered promiscuous mode [ 66.139484][ T5219] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.159136][ T5219] bridge0: port 2(bridge_slave_1) entered disabled state [ 66.170855][ T5219] bridge_slave_1: entered allmulticast mode [ 66.190092][ T5387] netlink: 60 bytes leftover after parsing attributes in process `syz.3.55'. [ 66.200457][ T5219] bridge_slave_1: entered promiscuous mode [ 66.216641][ T5386] Bluetooth: MGMT ver 1.22 [ 66.226931][ T5388] Illegal XDP return value 4294967294 on prog (id 25) dev N/A, expect packet loss! [ 66.518905][ T5219] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 66.562189][ T5397] batadv0: entered promiscuous mode [ 66.586241][ T5397] macsec1: entered allmulticast mode [ 66.604833][ T5397] batadv0: entered allmulticast mode [ 66.643686][ T5397] batadv0: left allmulticast mode [ 66.661144][ T5397] batadv0: left promiscuous mode [ 66.747616][ T5399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.767248][ T5399] team0: Port device bond0 added [ 66.782584][ T5219] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 66.892754][ T5407] team0: Port device team_slave_0 removed [ 66.905156][ T5407] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 66.953308][ T5409] netlink: 'syz.1.62': attribute type 14 has an invalid length. [ 67.135809][ T5427] netlink: 8 bytes leftover after parsing attributes in process `syz.4.63'. [ 67.196590][ T5425] netlink: 8 bytes leftover after parsing attributes in process `syz.3.64'. [ 67.220383][ T5426] netlink: 8 bytes leftover after parsing attributes in process `syz.3.64'. [ 67.271978][ T5219] team0: Port device team_slave_0 added [ 67.347345][ T5219] team0: Port device team_slave_1 added [ 67.354793][ T5103] Bluetooth: hci0: command tx timeout [ 67.672605][ T5219] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 67.698107][ T5219] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.747778][ T5219] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 67.778530][ T5219] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 67.813472][ T5219] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 67.896767][ T5219] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 67.930071][ T5450] netlink: 84 bytes leftover after parsing attributes in process `syz.3.69'. [ 67.949022][ T5450] veth0_vlan: left promiscuous mode [ 67.959638][ T5450] veth0_vlan: entered allmulticast mode [ 67.970132][ T5450] veth0_vlan: entered promiscuous mode [ 68.127132][ T5219] hsr_slave_0: entered promiscuous mode [ 68.143942][ T5219] hsr_slave_1: entered promiscuous mode [ 68.162725][ T5219] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 68.174536][ T5219] Cannot create hsr debugfs directory [ 68.279500][ T5464] netlink: 8 bytes leftover after parsing attributes in process `syz.2.74'. [ 68.415713][ T5450] syz.3.69 (5450) used greatest stack depth: 18032 bytes left [ 68.803697][ T5482] openvswitch: netlink: Missing key (keys=40, expected=80) [ 69.314104][ T5489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 69.326761][ T5489] team0: Port device bond0 added [ 69.381191][ T5498] team0: Port device team_slave_0 removed [ 69.415408][ T5498] A link change request failed with some changes committed already. Interface team_slave_0 may have been left with an inconsistent configuration, please check. [ 69.424711][ T5103] Bluetooth: hci0: command tx timeout [ 69.455305][ T5502] netlink: zone id is out of range [ 69.486002][ T5502] netlink: zone id is out of range [ 69.517366][ T5502] netlink: zone id is out of range [ 69.523410][ T5502] netlink: zone id is out of range [ 69.567368][ T5502] netlink: zone id is out of range [ 69.572911][ T5502] netlink: zone id is out of range [ 69.579417][ T5502] netlink: zone id is out of range [ 69.628617][ T5493] netlink: 36 bytes leftover after parsing attributes in process `syz.3.76'. [ 69.787284][ T5514] netlink: 64 bytes leftover after parsing attributes in process `syz.1.84'. [ 69.847228][ T5219] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 69.916531][ T5219] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 70.044911][ T5219] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 70.170785][ T5219] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 70.660282][ T5544] batadv0: entered promiscuous mode [ 70.684937][ T5544] macsec2: entered allmulticast mode [ 70.693731][ T5544] batadv0: entered allmulticast mode [ 70.757116][ T5544] batadv0: left allmulticast mode [ 70.762445][ T5544] batadv0: left promiscuous mode [ 70.874080][ T5546] __nla_validate_parse: 1 callbacks suppressed [ 70.874119][ T5546] netlink: 8 bytes leftover after parsing attributes in process `syz.4.90'. [ 71.053037][ T5219] 8021q: adding VLAN 0 to HW filter on device bond0 [ 71.215964][ T5570] netlink: 'syz.2.93': attribute type 3 has an invalid length. [ 71.277337][ T5570] netlink: 40 bytes leftover after parsing attributes in process `syz.2.93'. [ 71.325694][ T5219] 8021q: adding VLAN 0 to HW filter on device team0 [ 71.375234][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 71.383270][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 71.470209][ T5576] netlink: 4 bytes leftover after parsing attributes in process `syz.1.94'. [ 71.520643][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 71.529551][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 71.550331][ T5580] netlink: 8 bytes leftover after parsing attributes in process `syz.2.95'. [ 71.775274][ T1248] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.787477][ T1248] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.861051][ T5219] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 71.932671][ T5591] netlink: 277 bytes leftover after parsing attributes in process `syz.3.98'. [ 72.291300][ T5607] netlink: 256 bytes leftover after parsing attributes in process `syz.3.100'. [ 72.333749][ T5615] sctp: [Deprecated]: syz.1.101 (pid 5615) Use of int in max_burst socket option deprecated. [ 72.333749][ T5615] Use struct sctp_assoc_value instead [ 72.500805][ T5219] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 72.580807][ T5622] x_tables: duplicate underflow at hook 1 [ 72.737217][ T5219] veth0_vlan: entered promiscuous mode [ 72.746513][ T5627] netlink: 4 bytes leftover after parsing attributes in process `syz.1.104'. [ 72.823263][ T5627] team0: entered promiscuous mode [ 72.840487][ T5627] team_slave_1: entered promiscuous mode [ 72.853515][ T5627] bond0: entered promiscuous mode [ 72.863398][ T5627] bond_slave_0: entered promiscuous mode [ 72.892607][ T5627] bond_slave_1: entered promiscuous mode [ 72.953837][ T5640] netlink: 28 bytes leftover after parsing attributes in process `syz.1.104'. [ 72.982534][ T5219] veth1_vlan: entered promiscuous mode [ 73.036172][ T5643] netlink: 8 bytes leftover after parsing attributes in process `syz.3.107'. [ 73.074348][ T5625] team0: left promiscuous mode [ 73.090890][ T5625] team_slave_1: left promiscuous mode [ 73.109819][ T5625] bond0: left promiscuous mode [ 73.120217][ T5625] bond_slave_0: left promiscuous mode [ 73.128942][ T5625] bond_slave_1: left promiscuous mode [ 73.148538][ T5647] netlink: 32 bytes leftover after parsing attributes in process `syz.2.108'. [ 73.343672][ T5219] veth0_macvtap: entered promiscuous mode [ 73.410251][ T5219] veth1_macvtap: entered promiscuous mode [ 73.492185][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.537619][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.560802][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.593636][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.624135][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.637629][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.648099][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 73.680957][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.708293][ T5219] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 73.743621][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.771826][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.784618][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.873440][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.907832][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.929853][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 73.954431][ T5219] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 73.979103][ T5219] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 74.021383][ T5219] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 74.069711][ T5219] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.085697][ T5219] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.108820][ T5219] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.136442][ T5219] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 74.498300][ T2851] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.545095][ T2851] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 74.587576][ T5699] vlan2: entered allmulticast mode [ 74.757367][ T2888] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 74.799728][ T2888] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 75.232441][ T5727] net_ratelimit: 335 callbacks suppressed [ 75.232462][ T5727] dccp_invalid_packet: P.Data Offset(104) too large [ 75.672451][ T11] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 75.743513][ T5743] vlan2: entered allmulticast mode [ 76.194140][ T11] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.403733][ T11] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.455753][ T5768] Cannot find add_set index 0 as target [ 76.499715][ T5769] Cannot find add_set index 0 as target [ 76.519185][ T5099] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.533777][ T5099] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.563084][ T5099] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.580973][ T11] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.592486][ T5099] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.607531][ T5099] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 76.616662][ T5099] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.794011][ T5784] __nla_validate_parse: 5 callbacks suppressed [ 76.794034][ T5784] netlink: 8 bytes leftover after parsing attributes in process `syz.4.139'. [ 76.810777][ T5785] Bluetooth: MGMT ver 1.22 [ 76.886355][ T1148] cfg80211: failed to load regulatory.db [ 77.192381][ T5796] vlan2: entered allmulticast mode [ 77.680354][ T11] bridge_slave_1: left allmulticast mode [ 77.705455][ T11] bridge_slave_1: left promiscuous mode [ 77.726652][ T11] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.855936][ T11] bridge_slave_0: left allmulticast mode [ 77.861754][ T11] bridge_slave_0: left promiscuous mode [ 77.905233][ T11] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.705043][ T5099] Bluetooth: hci0: command tx timeout [ 78.827004][ T11] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.838497][ T11] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.849947][ T11] bond0 (unregistering): Released all slaves [ 79.019186][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 79.092442][ T5852] netlink: 8 bytes leftover after parsing attributes in process `syz.3.153'. [ 79.094580][ T51] ================================================================== [ 79.109415][ T51] BUG: KFENCE: use-after-free write in l2tp_session_delete+0x2a/0x9e0 [ 79.109415][ T51] [ 79.119962][ T51] Use-after-free write at 0xffff88823bdeec08 (in kfence-#246): [ 79.127789][ T51] l2tp_session_delete+0x2a/0x9e0 [ 79.133047][ T51] l2tp_tunnel_del_work+0x1cb/0x330 [ 79.138441][ T51] process_scheduled_works+0xa2c/0x1830 [ 79.144175][ T51] worker_thread+0x86d/0xd50 [ 79.148773][ T51] kthread+0x2f0/0x390 [ 79.153793][ T51] ret_from_fork+0x4b/0x80 [ 79.158223][ T51] ret_from_fork_asm+0x1a/0x30 [ 79.162999][ T51] [ 79.165403][ T51] kfence-#246: 0xffff88823bdeec00-0xffff88823bdeee5f, size=608, cache=kmalloc-1k [ 79.165403][ T51] [ 79.176704][ T51] allocated by task 5848 on cpu 0 at 78.795211s: [ 79.183067][ T51] l2tp_session_create+0x3b/0xc20 [ 79.188380][ T51] pppol2tp_connect+0xca3/0x17a0 [ 79.193404][ T51] __sys_connect+0x2df/0x310 [ 79.198095][ T51] __x64_sys_connect+0x7a/0x90 [ 79.203584][ T51] do_syscall_64+0xf3/0x230 [ 79.208178][ T51] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.214062][ T51] [ 79.216385][ T51] freed by task 24 on cpu 1 at 79.075180s: [ 79.222193][ T51] __sk_destruct+0x58/0x5f0 [ 79.226705][ T51] rcu_core+0xafd/0x1830 [ 79.231039][ T51] handle_softirqs+0x2c4/0x970 [ 79.235813][ T51] run_ksoftirqd+0xca/0x130 [ 79.240392][ T51] smpboot_thread_fn+0x544/0xa30 [ 79.245316][ T51] kthread+0x2f0/0x390 [ 79.249395][ T51] ret_from_fork+0x4b/0x80 [ 79.253983][ T51] ret_from_fork_asm+0x1a/0x30 [ 79.258760][ T51] [ 79.261084][ T51] CPU: 0 PID: 51 Comm: kworker/u8:3 Not tainted 6.10.0-rc5-syzkaller-01137-g1c5fc27bc48a #0 [ 79.271146][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 79.281205][ T51] Workqueue: l2tp l2tp_tunnel_del_work [ 79.286675][ T51] RIP: 0010:l2tp_session_delete+0x2a/0x9e0 [ 79.292479][ T51] Code: f3 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 30 49 89 fd e8 66 98 e3 f6 49 8d 7d 08 be 08 00 00 00 e8 18 69 49 f7 31 db 49 0f ba 6d 08 00 40 0f 93 c5 0f 92 c3 bf 02 00 00 00 89 de e8 [ 79.312276][ T51] RSP: 0018:ffffc90000bb7b00 EFLAGS: 00010246 [ 79.318338][ T51] RAX: ffffffff8ab28e01 RBX: 0000000000000000 RCX: ffffffff8ab28ea8 [ 79.326305][ T51] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff88823bdeec08 [ 79.334264][ T51] RBP: ffff88823bdeec00 R08: ffff88823bdeec0f R09: 1ffff110477bdd81 [ 79.342228][ T51] R10: dffffc0000000000 R11: ffffed10477bdd82 R12: ffff88823bdeecb8 [ 79.350192][ T51] R13: ffff88823bdeec00 R14: dffffc0000000000 R15: 1ffff110477bdd97 [ 79.358414][ T51] FS: 0000000000000000(0000) GS:ffff8880b9400000(0000) knlGS:0000000000000000 [ 79.367331][ T51] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 79.373906][ T51] CR2: ffff88823bdeec08 CR3: 000000006177e000 CR4: 00000000003506f0 [ 79.381875][ T51] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 79.389923][ T51] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 79.398163][ T51] Call Trace: [ 79.401441][ T51] [ 79.404367][ T51] ? kfence_report_error+0x8aa/0xd10 [ 79.409770][ T51] ? mark_lock+0x9a/0x350 [ 79.414101][ T51] ? __pfx_kfence_report_error+0x10/0x10 [ 79.419843][ T51] ? l2tp_session_delete+0x2a/0x9e0 [ 79.425124][ T51] ? l2tp_tunnel_del_work+0x1cb/0x330 [ 79.430625][ T51] ? process_scheduled_works+0xa2c/0x1830 [ 79.436430][ T51] ? worker_thread+0x86d/0xd50 [ 79.441271][ T51] ? kthread+0x2f0/0x390 [ 79.445593][ T51] ? ret_from_fork+0x4b/0x80 [ 79.450175][ T51] ? ret_from_fork_asm+0x1a/0x30 [ 79.455125][ T51] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 79.460596][ T51] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 79.466481][ T51] ? search_extable+0xb3/0x100 [ 79.471237][ T51] ? __pfx_search_extable+0x10/0x10 [ 79.476429][ T51] ? kfence_handle_page_fault+0x3e0/0x4a0 [ 79.482142][ T51] ? search_bpf_extables+0x26/0x3f0 [ 79.487364][ T51] ? page_fault_oops+0x1a0/0xcc0 [ 79.492312][ T51] ? mark_lock+0x2a4/0x350 [ 79.496741][ T51] ? __pfx_page_fault_oops+0x10/0x10 [ 79.502020][ T51] ? is_prefetch+0x4ed/0x780 [ 79.506607][ T51] ? mark_lock+0x9a/0x350 [ 79.511105][ T51] ? __pfx_is_prefetch+0x10/0x10 [ 79.516037][ T51] ? __bad_area_nosemaphore+0x118/0x770 [ 79.521593][ T51] ? lockdep_hardirqs_on+0x99/0x150 [ 79.526851][ T51] ? __pfx___bad_area_nosemaphore+0x10/0x10 [ 79.533302][ T51] ? spurious_kernel_fault+0x11e/0x5d0 [ 79.539027][ T51] ? exc_page_fault+0x5c8/0x8c0 [ 79.543874][ T51] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 79.550200][ T51] ? asm_exc_page_fault+0x26/0x30 [ 79.555328][ T51] ? l2tp_tunnel_delete+0x261/0x2d0 [ 79.560646][ T51] ? l2tp_session_delete+0x28/0x9e0 [ 79.565944][ T51] ? l2tp_session_delete+0x2a/0x9e0 [ 79.571228][ T51] ? l2tp_tunnel_del_work+0x1d3/0x330 [ 79.576599][ T51] l2tp_tunnel_del_work+0x1cb/0x330 [ 79.582229][ T51] ? process_scheduled_works+0x945/0x1830 [ 79.588142][ T51] process_scheduled_works+0xa2c/0x1830 [ 79.593797][ T51] ? __pfx_process_scheduled_works+0x10/0x10 [ 79.599775][ T51] ? assign_work+0x364/0x3d0 [ 79.604368][ T51] worker_thread+0x86d/0xd50 [ 79.609011][ T51] ? __kthread_parkme+0x169/0x1d0 [ 79.614064][ T51] ? __pfx_worker_thread+0x10/0x10 [ 79.619438][ T51] kthread+0x2f0/0x390 [ 79.623518][ T51] ? __pfx_worker_thread+0x10/0x10 [ 79.628712][ T51] ? __pfx_kthread+0x10/0x10 [ 79.633587][ T51] ret_from_fork+0x4b/0x80 [ 79.638265][ T51] ? __pfx_kthread+0x10/0x10 [ 79.643645][ T51] ret_from_fork_asm+0x1a/0x30 [ 79.648807][ T51] [ 79.651840][ T51] ================================================================== [ 79.659977][ T51] Kernel panic - not syncing: KFENCE: panic_on_warn set ... [ 79.667754][ T51] CPU: 0 PID: 51 Comm: kworker/u8:3 Not tainted 6.10.0-rc5-syzkaller-01137-g1c5fc27bc48a #0 [ 79.677942][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/07/2024 [ 79.688196][ T51] Workqueue: l2tp l2tp_tunnel_del_work [ 79.693684][ T51] Call Trace: [ 79.697005][ T51] [ 79.699934][ T51] dump_stack_lvl+0x241/0x360 [ 79.704706][ T51] ? __pfx_dump_stack_lvl+0x10/0x10 [ 79.709911][ T51] ? __pfx__printk+0x10/0x10 [ 79.714677][ T51] ? vprintk_emit+0x631/0x770 [ 79.719383][ T51] ? vscnprintf+0x5d/0x90 [ 79.723714][ T51] panic+0x349/0x860 [ 79.727671][ T51] ? check_panic_on_warn+0x21/0xb0 [ 79.732819][ T51] ? __pfx_panic+0x10/0x10 [ 79.737247][ T51] ? _printk+0xd5/0x120 [ 79.741426][ T51] ? __pfx__printk+0x10/0x10 [ 79.746122][ T51] check_panic_on_warn+0x86/0xb0 [ 79.751111][ T51] kfence_report_error+0x998/0xd10 [ 79.756429][ T51] ? mark_lock+0x9a/0x350 [ 79.760767][ T51] ? __pfx_kfence_report_error+0x10/0x10 [ 79.766404][ T51] ? l2tp_session_delete+0x2a/0x9e0 [ 79.771611][ T51] ? l2tp_tunnel_del_work+0x1cb/0x330 [ 79.777276][ T51] ? process_scheduled_works+0xa2c/0x1830 [ 79.783178][ T51] ? worker_thread+0x86d/0xd50 [ 79.788055][ T51] ? kthread+0x2f0/0x390 [ 79.792381][ T51] ? ret_from_fork+0x4b/0x80 [ 79.796994][ T51] ? ret_from_fork_asm+0x1a/0x30 [ 79.801998][ T51] ? _raw_spin_lock_irqsave+0xe1/0x120 [ 79.807488][ T51] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 79.813399][ T51] ? search_extable+0xb3/0x100 [ 79.818258][ T51] ? __pfx_search_extable+0x10/0x10 [ 79.823456][ T51] kfence_handle_page_fault+0x3e0/0x4a0 [ 79.829038][ T51] ? search_bpf_extables+0x26/0x3f0 [ 79.834248][ T51] page_fault_oops+0x1a0/0xcc0 [ 79.839014][ T51] ? mark_lock+0x2a4/0x350 [ 79.843456][ T51] ? __pfx_page_fault_oops+0x10/0x10 [ 79.848767][ T51] ? is_prefetch+0x4ed/0x780 [ 79.853378][ T51] ? mark_lock+0x9a/0x350 [ 79.857718][ T51] ? __pfx_is_prefetch+0x10/0x10 [ 79.862851][ T51] __bad_area_nosemaphore+0x118/0x770 [ 79.868521][ T51] ? lockdep_hardirqs_on+0x99/0x150 [ 79.873830][ T51] ? __pfx___bad_area_nosemaphore+0x10/0x10 [ 79.879726][ T51] ? spurious_kernel_fault+0x11e/0x5d0 [ 79.885185][ T51] exc_page_fault+0x5c8/0x8c0 [ 79.889870][ T51] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 79.896288][ T51] asm_exc_page_fault+0x26/0x30 [ 79.901236][ T51] RIP: 0010:l2tp_session_delete+0x2a/0x9e0 [ 79.907047][ T51] Code: f3 0f 1e fa 55 41 57 41 56 41 55 41 54 53 48 83 ec 30 49 89 fd e8 66 98 e3 f6 49 8d 7d 08 be 08 00 00 00 e8 18 69 49 f7 31 db 49 0f ba 6d 08 00 40 0f 93 c5 0f 92 c3 bf 02 00 00 00 89 de e8 [ 79.926759][ T51] RSP: 0018:ffffc90000bb7b00 EFLAGS: 00010246 [ 79.932868][ T51] RAX: ffffffff8ab28e01 RBX: 0000000000000000 RCX: ffffffff8ab28ea8 [ 79.940942][ T51] RDX: 0000000000000001 RSI: 0000000000000008 RDI: ffff88823bdeec08 [ 79.948911][ T51] RBP: ffff88823bdeec00 R08: ffff88823bdeec0f R09: 1ffff110477bdd81 [ 79.957139][ T51] R10: dffffc0000000000 R11: ffffed10477bdd82 R12: ffff88823bdeecb8 [ 79.965382][ T51] R13: ffff88823bdeec00 R14: dffffc0000000000 R15: 1ffff110477bdd97 [ 79.973773][ T51] ? l2tp_tunnel_delete+0x261/0x2d0 [ 79.979241][ T51] ? l2tp_session_delete+0x28/0x9e0 [ 79.984564][ T51] ? l2tp_tunnel_del_work+0x1d3/0x330 [ 79.990041][ T51] l2tp_tunnel_del_work+0x1cb/0x330 [ 79.995249][ T51] ? process_scheduled_works+0x945/0x1830 [ 80.001057][ T51] process_scheduled_works+0xa2c/0x1830 [ 80.006623][ T51] ? __pfx_process_scheduled_works+0x10/0x10 [ 80.012606][ T51] ? assign_work+0x364/0x3d0 [ 80.017195][ T51] worker_thread+0x86d/0xd50 [ 80.021819][ T51] ? __kthread_parkme+0x169/0x1d0 [ 80.026845][ T51] ? __pfx_worker_thread+0x10/0x10 [ 80.031953][ T51] kthread+0x2f0/0x390 [ 80.036025][ T51] ? __pfx_worker_thread+0x10/0x10 [ 80.041135][ T51] ? __pfx_kthread+0x10/0x10 [ 80.045723][ T51] ret_from_fork+0x4b/0x80 [ 80.050141][ T51] ? __pfx_kthread+0x10/0x10 [ 80.054817][ T51] ret_from_fork_asm+0x1a/0x30 [ 80.059601][ T51] [ 80.062913][ T51] Kernel Offset: disabled [ 80.067561][ T51] Rebooting in 86400 seconds..