last executing test programs: 3.835402158s ago: executing program 0 (id=422): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet6(0xa, 0x2, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001300), r1) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000001340)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r1, &(0x7f0000001400)={0x0, 0x0, &(0x7f00000013c0)={&(0x7f0000001380)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x20008841}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, 0x0}, 0x0) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@dev, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @remote, @remote}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @local}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 3.790147114s ago: executing program 4 (id=423): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4871b}}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x20000000) 3.573831336s ago: executing program 4 (id=425): bpf$MAP_CREATE(0x100000000000000, 0x0, 0x0) (async) r0 = socket$inet_udp(0x2, 0x2, 0x0) connect$inet(r0, &(0x7f0000000340)={0x2, 0x4e22, @local}, 0x10) r1 = socket$kcm(0x10, 0x2, 0x0) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async, rerun: 32) r3 = socket(0xa, 0x3, 0x3a) (rerun: 32) setsockopt$MRT6_INIT(r3, 0x29, 0xc8, &(0x7f0000000340), 0x4) (async) setsockopt$MRT6_ADD_MIF(r3, 0x29, 0xca, &(0x7f00000003c0)={0x0, 0x0, 0xb, r2, 0x3}, 0xc) syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), r3) (async) setsockopt$MRT6_DEL_MFC(r3, 0x29, 0xcd, &(0x7f0000000200)={{0xa, 0x4e21, 0x1, @private0, 0x6}, {0xa, 0x4e24, 0x3, @empty, 0x1}, 0xffffffffffffffff, {[0x6, 0x9, 0x6, 0x2b, 0x81, 0x9, 0x7, 0x1]}}, 0x5c) setsockopt$MRT6_DONE(r3, 0x29, 0xc9, 0x12, 0x100000000000000) (async) ioctl$sock_bt_hidp_HIDPCONNDEL(r3, 0x400448c9, &(0x7f0000000000)={@any, 0x1}) (async, rerun: 64) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) (rerun: 64) syz_emit_ethernet(0x2a, &(0x7f0000000100)={@multicast, @link_local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x8, @broadcast, @rand_addr=0x64010102, @remote, @loopback}}}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a80)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a6c000000060a0b04000000000000000002000004400004803c0001800b00010065787468647200002c000280080004400000000408000740001000090800064000000001050002000000000008000340000000040900020073797a32000000000900010073797a30"], 0x94}}, 0x0) (async) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)}, 0x0) (async, rerun: 32) sendmmsg(r0, &(0x7f0000007fc0), 0x800001d, 0x0) (rerun: 32) 3.42594826s ago: executing program 3 (id=426): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) (async, rerun: 32) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000440), 0xffffffffffffffff) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r3) ioctl$sock_SIOCGIFINDEX_802154(r2, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$IEEE802154_LLSEC_DEL_DEVKEY(r2, &(0x7f0000000700)={&(0x7f0000000480)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000680)={0x3c, r4, 0x20, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_LLSEC_KEY_SOURCE_SHORT={0x8, 0x2c, 0x101}, @IEEE802154_ATTR_LLSEC_KEY_ID={0x5, 0x2e, 0x9}, @IEEE802154_ATTR_LLSEC_KEY_SOURCE_EXTENDED={0xc, 0x2d, {0xaaaaaaaaaaaa0302}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x3c}}, 0x10) r7 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000440), r6) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r6, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x14, r7, 0xc8036ab6d6cbef07, 0x4000}, 0x14}}, 0x0) (async) r8 = socket$packet(0x11, 0x3, 0x300) sendmsg$sock(r8, &(0x7f0000000480)={&(0x7f00000002c0)=@tipc=@nameseq={0x1e, 0x1, 0x3, {0x41, 0x1, 0x4}}, 0x80, &(0x7f0000000400)=[{&(0x7f0000000380)="526d3033fbdfddb484e011f98751", 0xe}], 0x1, &(0x7f0000000440)=[@timestamping={{0x18, 0x1, 0x25, 0x3}}], 0x18}, 0x50) (async) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f00000005c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000500)={&(0x7f0000000600)=ANY=[@ANYBLOB="05d9b04ba2db4d3921de8978e605b65be01d", @ANYRES16=r7, @ANYBLOB="020027bd7000fedbdf250700000005000100000000003500070073797374656d5f753a6f626a6563745f723a73797374656d645f7061737377645f6167656e745f657865635f743a733000000000"], 0x54}, 0x1, 0x0, 0x0, 0x2004c000}, 0x4050) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) (async) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r9, &(0x7f0000000040)={0x0, 0x33, &(0x7f0000000340)={&(0x7f0000000540)=ANY=[@ANYBLOB="3c00000091e619e7980d5286158174e398ec4a77eb699f78e10448780807a9328ca45053fe7b191820c2b403e56fec", @ANYRES16=r4, @ANYBLOB="0b06000000000000000030000000050036000000000008000200", @ANYRES32=r5, @ANYBLOB="050035000000000005003300030000000500340000000000"], 0x3c}}, 0x0) (async) sendmsg$NL802154_CMD_GET_SEC_LEVEL(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010300000000000000001f00000008000300", @ANYRES32=r5], 0x1c}, 0x1, 0x3000000}, 0x0) (async, rerun: 64) r10 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) syz_genetlink_get_family_id$nl802154(&(0x7f0000000d80), r10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000080)) (async) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_802154(r10, 0x8933, &(0x7f0000000dc0)={'wpan0\x00'}) (async) r11 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0) syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000000), r0) (async) r12 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="18020000faffffff0000000000000000850000002c00000018110000", @ANYRES32=r12, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000007000000850000008200000095"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.396736575s ago: executing program 0 (id=427): syz_emit_ethernet(0x2e, &(0x7f0000000000)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x1a}, @val={@void, {0x8100, 0x1, 0x1, 0x1}}, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @remote, @private=0xa010100, @multicast, @private=0xa010100}}}}, &(0x7f0000000040)={0x0, 0x1, [0xb0e, 0x3cd, 0x6ce, 0xeaf]}) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) getsockopt$packet_int(r1, 0x107, 0xa, 0x0, &(0x7f00000004c0)) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000e00), 0xffffffffffffffff) (async) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) listen(r3, 0x0) (async) shutdown(r3, 0x0) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000e40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SCAN(r0, &(0x7f0000000f00)={0x0, 0x0, &(0x7f0000000ec0)={&(0x7f0000000380)={0x1c, r2, 0xf21, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x14}, 0x4000) (async, rerun: 64) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) (rerun: 64) sendmsg$NL80211_CMD_REGISTER_FRAME(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000340)={&(0x7f0000000100)={0x218, r5, 0x400, 0x70bd2d, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x4}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfffc}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xfffe}, @NL80211_ATTR_FRAME_MATCH={0xe9, 0x5b, "cdac534098d25f21653eae6af5e55c4952cdf010a69459a44530bc390355d4179a12765e0274236e29b7a04e22037f92c9ae33023c425321f0ee75971ee3c96bb486e30a7a00ea0b955c6db4161fc5af3c3455761138985dae5fb11807103250939c47955174792cd373af22ddd57d9732a55076dc1dfae4e1b4f0e87a64056bb047ec0e9ca9c0065ff5f19672a1ebc1adccaa4653e6d14b1feccfe0f1f59bdd5508bd34cc108f205f2009b158316eafa903e02a73372bce85758bcade06047b5cb9a098648da0d5cec45cef78c29df7af726bddd813b342334bb9eccc009dd69a574e1220"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0xf}, @NL80211_ATTR_FRAME_MATCH={0xde, 0x5b, "9e380c837d6e171e2c7c3ade7fc8d418c01c9305856792a1c474c366ac2510431a36cf5bba4061d3e7a7d6320ef299e699f48ee9bd4d78575261e31bb622cef631c435ac933cac9d3b37dff5cdc0ea5b9a3d9c4ab7cb4074b4d08e5383c4d89e378f22b5d64e4afe01eed207ffa422d16b3cde1c21ad1807a1b53c539127361db5fb0f4e6548a74b5bf6040545a59d44e2a2d7851b867feedf6c65be919517e334348ccb5b6f12f8fe9df210c1a9bce330d8129e5bb10eb4d35c0813815b4474d2283bb7eae2a300824f687a6d7e4628910cb2b55c7aac9e8cad"}, @NL80211_ATTR_FRAME_TYPE={0x6, 0x65, 0x7}]}, 0x218}, 0x1, 0x0, 0x0, 0x80}, 0x800) (async, rerun: 64) recvmmsg(r0, &(0x7f0000000900)=[{{0x0, 0x0, 0x0}, 0x80000006}], 0x0, 0x120, 0x0) (rerun: 64) 3.279715599s ago: executing program 3 (id=428): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@delpolicy={0x5c, 0x14, 0x211, 0x0, 0x0, {{@in=@broadcast, @in6=@private2}}, [@policy_type={0xa}]}, 0x5c}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$TIPC_NL_BEARER_SET(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001180)={&(0x7f0000000880)={0x34, r2, 0x1, 0x70bd28, 0x25dfdbfb, {}, [@TIPC_NLA_BEARER={0x20, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xf}]}]}]}, 0x34}, 0x1, 0x0, 0x0, 0x48c05}, 0x4040140) socket$inet6_tcp(0xa, 0x1, 0x0) r3 = socket$l2tp(0x2, 0x2, 0x73) recvmmsg(r3, &(0x7f0000000280)=[{{&(0x7f0000000100)=@pppoe={0x18, 0x0, {0x0, @multicast}}, 0x80, &(0x7f0000000680)=[{&(0x7f0000000180)=""/208, 0xd0}, {&(0x7f0000000340)=""/63, 0x3f}, {&(0x7f0000000380)=""/103, 0x67}, {&(0x7f0000000500)=""/160, 0xa0}, {&(0x7f00000005c0)=""/183, 0xb7}], 0x5, &(0x7f0000000440)=""/157, 0x9d}, 0x101}], 0x1, 0x160, 0x0) 3.202101914s ago: executing program 0 (id=429): r0 = socket$netlink(0x10, 0x3, 0x0) (async) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f0000000080)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni\x00'}, 0x58) (async) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$alg(r2, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000440)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x0) (async) sendto$inet6(r2, &(0x7f0000000100)="df5021aff7a345deaab524996df0b3a0f6817758c8c5f9aee0c5b11d778283a40192fa81c5c80c86463472840ce7db25d3f49cd1068856c017718289568d03f56cdcef57abef0ff8a341ae613de8d7262aab6bb8dd84619f19661c9d5ca5391e041dea6a", 0x64, 0x0, 0x0, 0x0) (async) recvmsg$kcm(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000001840)=[{&(0x7f0000001b40)=""/99, 0x63}], 0x1}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000005c40)={0x0, 0x0, &(0x7f0000005c00)={&(0x7f0000000000)=@newtaction={0x64, 0x30, 0x1, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x7}, @TCA_ACT_BPF_PARMS={0x18}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) 3.200915691s ago: executing program 2 (id=430): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) accept4(r1, &(0x7f0000000300)=@sco, &(0x7f0000000040)=0x80, 0x800) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xa, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x4, 0x0, 0x1, 0xbf}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 3.069549177s ago: executing program 3 (id=431): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_netdev_private(r0, 0x8948, &(0x7f0000000000)="8d557fd094c38f748ec33512ef3a") r1 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r1, 0x6b, 0x4, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00'}) bpf$TOKEN_CREATE(0x24, &(0x7f0000000180)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x33, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket(0x2, 0x80805, 0x0) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f0000000440)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)="03", 0x1}], 0x1}], 0x1, 0x0) r4 = socket$inet_sctp(0x2, 0x5, 0x84) socketpair$tipc(0x1e, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) recvmsg(r5, &(0x7f0000000500)={&(0x7f0000000040)=@hci, 0x80, &(0x7f0000000100)=[{&(0x7f0000000400)=""/248, 0xd68210}], 0x1, 0x0, 0x1f00000000000000, 0x200000}, 0x1f00) sendmsg$tipc(r6, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000140)="a2", 0xfffffdef}], 0x1}, 0x0) listen(r5, 0xe76f) r7 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000180)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x4e20, @rand_addr=0x64010102}]}, &(0x7f00000002c0)=0x10) getsockopt$inet_sctp6_SCTP_MAX_BURST(r7, 0x84, 0x83, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000300)=0x8) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000040)={r8, 0x6}, &(0x7f0000000100)=0x8) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet_mreqsrc(r3, 0x0, 0x28, &(0x7f0000000540)={@dev={0xac, 0x14, 0x14, 0x15}, @multicast1, @broadcast}, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000240)=ANY=[@ANYBLOB="0c0100000001010400000000000000000a0000003c0001802c00018014000300fe8000000000000000000000000000aa14000400fc0000000000000000000000000000000c00028005000100000000003c0002800c00028005000100000000002c000180140003000000000000000000000000000000000114000400fe8000000000000000000000000000aa08000740000000007800068014000500fc0200000000000000000000000000010c000380060001000000000014000400fc0200000000000000000000000000002c000380060001"], 0x10c}}, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r3, 0x84, 0x10, &(0x7f0000000300)=@sack_info={r8, 0x9}, 0xc) sendmmsg$inet_sctp(r3, &(0x7f00000032c0)=[{&(0x7f00000000c0)=@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, &(0x7f00000004c0)=[{&(0x7f0000000100)='a', 0xdd02}], 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="30000000000000008400000001000000000000004c00"/44, @ANYRES32=0x0], 0x30}], 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r10 = accept4(r2, &(0x7f00000003c0)=@ax25={{0x3, @bcast}, [@rose, @remote, @remote, @rose, @bcast, @bcast, @bcast, @rose]}, &(0x7f0000000080)=0x80, 0x80000) getsockopt$bt_BT_FLUSHABLE(r10, 0x112, 0x8, &(0x7f0000000200)=0x2, &(0x7f0000000280)=0x4) r11 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r11, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000002c0)=ANY=[@ANYBLOB="20000000051421060000000000000000080001"], 0x20}, 0x1, 0x0, 0x0, 0x40c4}, 0x0) recvmmsg(r11, &(0x7f0000000d40)=[{{&(0x7f0000000340)=@qipcrtr, 0x80, 0x0}, 0x1}], 0x1, 0x2, 0x0) 3.024986297s ago: executing program 2 (id=432): syz_emit_ethernet(0xbe, &(0x7f0000000900)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xb0, 0x65, 0x0, 0x0, 0x33, 0x0, @private, @broadcast}, {0x0, 0x0, 0x9c, 0x0, @wg=@initiation={0x1, 0x4, "4b2ad17faeecced100e303a84192621adf0ad9aae82a7fdac906fd7c2559b2f2", "df54a0d2181be8ff699f50b382856212056a3abdc495280e2fc976486f65c3c9672fca84a657e06548cf602cfd8b5314", "2b7630f9f9f115aa49ca32a3434f7896d928633f4f810cb5ee639568", {"ce000000000000005851853e00", "b0738f143c59c31a44c7efc278597bf3"}}}}}}}, 0x0) (async) socket$alg(0x26, 0x5, 0x0) 2.837750493s ago: executing program 0 (id=434): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000f82818110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='mm_page_alloc\x00', r4}, 0x10) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) ioctl$TUNSETOFFLOAD(r2, 0x40047451, 0x2000000c) r5 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="0a000000040000000800000008"], 0x48) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000040)='sched_switch\x00', r1}, 0x10) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) (async) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000300)=ANY=[@ANYBLOB="1800000000000000000000000000f82818110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b702000002040000850000008600000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000000)='kmem_cache_free\x00'}, 0x10) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000340)={&(0x7f0000000000)='mm_page_alloc\x00', r4}, 0x10) (async) ioctl$TUNSETOFFLOAD(r2, 0xc004743e, 0x20001400) (async) bpf$LINK_GET_FD_BY_ID(0x1e, 0x0, 0x0) (async) ioctl$TUNSETOFFLOAD(r2, 0x40047451, 0x2000000c) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) (async) 2.828740358s ago: executing program 2 (id=435): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) recvmmsg(0xffffffffffffffff, &(0x7f00000044c0)=[{{&(0x7f0000000380)=@in6={0xa, 0x0, 0x0, @mcast1}, 0x80, 0x0}, 0x6}, {{&(0x7f0000000780)=@un=@abs, 0x80, 0x0}, 0x6}], 0x2, 0x10000, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=@base={0xa, 0x4, 0x4, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) socket(0x2a, 0x2, 0x19f2) socket$rds(0x15, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r3, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1b942ee3, @void, @value}, 0x90) sendmsg$nl_route(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="2c00000010000100"/20, @ANYRES32=r4, @ANYBLOB="00000000000000000c002b8008000100", @ANYRES32=r4], 0x2c}}, 0x0) r5 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r5, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000600)=@newtfilter={0x38, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xfff3}, {}, {0x1c, 0xfff9}}, [@filter_kind_options=@f_flow={{0x9}, {0x8, 0x2, [@TCA_FLOW_ACT={0x4}]}}]}, 0x38}}, 0x0) r7 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r7, &(0x7f00000002c0), 0x40000000000009f, 0x0) r8 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) connect$bt_l2cap(r8, &(0x7f0000000040)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) sendmmsg$sock(r8, &(0x7f0000004100)=[{{0x0, 0x0, 0x0}}], 0xffffff80, 0x0) sendmsg$nl_route(r0, &(0x7f0000001340)={0x0, 0x0, &(0x7f0000001300)={&(0x7f00000012c0)=@setneightbl={0x24, 0x43, 0xaff1bd054251920b, 0x270bd28, 0x25dfdbfc, {0x2}, [@NDTA_NAME={0x6, 0x1, '.-$.+!2##)\x00'}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4004000) 2.471178352s ago: executing program 0 (id=437): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a010400000000000000000100000008000240000000020900010073797a300000000014000000110001"], 0x50}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="140000001000009006000000000000000000000a3c000000090a050600001900000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001414000000110001"], 0x64}}, 0x0) (async) r1 = socket$inet6(0xa, 0x6, 0x0) setsockopt$inet_int(r1, 0x0, 0xf, &(0x7f0000000340)=0xfffffffffffffff9, 0x4) bind$l2tp6(r1, &(0x7f00000000c0)={0xa, 0x0, 0x32, @remote, 0x5, 0x4}, 0x20) setsockopt(0xffffffffffffffff, 0x84, 0x81, 0x0, 0x0) close(0x3) (async) socket$rds(0x15, 0x5, 0x0) 2.31423157s ago: executing program 4 (id=439): mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000005, 0x8031, 0xffffffffffffffff, 0x0) connect$x25(0xffffffffffffffff, &(0x7f0000000a80), 0x12) syz_emit_ethernet(0xe3, &(0x7f0000000000)={@random="aed9ee575217", @dev={'\xaa\xaa\xaa\xaa\xaa', 0x14}, @val={@void, {0x8100, 0x1, 0x1, 0x3}}, {@x25={0x805, {0x2, 0x9, 0x1, "8e5b2e6d40449aeb936d744ec9c886d0e74eb39e68317fe84c7682f5f2b41f07c4e4f70c6d3f8667a58f32e874adb4ee82211298c8c8e861483d09422a59261be2cbb50d2c27054ff0a77c274e752106985aaed0eed69d658f2a5886c9e72eeb368e7bc19b445874d6a4c4209f662ef2ef4eee3eefc12adffaf91064f855237143bbc2e5b38800e691fab9bc5e883fd4bfc5bdc8dbeedfff0608000000ea3e0730cb080acd313764d4e38cdd04bfebcb3c45a758360112b12575475070328840875d47b1abcc6a6d5dab440beee3"}}}}, &(0x7f0000000100)={0x0, 0x4, [0x309, 0xa4a, 0x3cb, 0x540]}) 2.242530728s ago: executing program 0 (id=440): unshare(0x62040200) (async) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet6(0xa, 0x200000000003, 0x87) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000001c0)={@map=r0, 0x24, 0x1, 0xff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) syz_emit_ethernet(0xf2, &(0x7f0000000180)=ANY=[@ANYBLOB="aaaaaaaaaaaa00000000000086dd6030bb0000bc2b0000000000000000000000000000000000fe8000000000000000000000000000aa87"], 0x0) syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000040)={'mangle\x00', 0x2, [{}, {}]}, 0x48) (async) setsockopt$IP6T_SO_SET_ADD_COUNTERS(r1, 0x29, 0x41, &(0x7f0000000040)={'mangle\x00', 0x2, [{}, {}]}, 0x48) 2.002313773s ago: executing program 1 (id=442): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000040)=0x3, 0x4) r1 = socket$igmp6(0xa, 0x3, 0x2) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000000c0)={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private0, @dev, 0x0, 0x0, 0x9, 0x0, 0x0, 0x80330}) syz_emit_ethernet(0x7a, &(0x7f0000000180)={@link_local, @dev, @val={@void}, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "f53a04", 0x40, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x2, 0x0, 0x0, 0x500, {0x0, 0x6, "508359", 0x0, 0x0, 0x0, @private1, @private1, [@hopopts={0x3a}, @routing]}}}}}}}, 0x0) 1.890548101s ago: executing program 1 (id=443): r0 = socket$pptp(0x18, 0x1, 0x2) ioctl$sock_SIOCSIFBR(r0, 0x8941, &(0x7f0000000000)=@generic={0x1, 0x8000000000000001}) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000140)={0x6, 'bond_slave_1\x00', {0x8}, 0x3154}) 1.890232948s ago: executing program 2 (id=444): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x28, 0x10, 0x801, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x8bebf8537651ad74, 0x10100}, [@IFLA_GROUP={0x8}]}, 0x28}, 0x1, 0x0, 0x0, 0x20000040}, 0x0) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140604000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 1.82176877s ago: executing program 1 (id=445): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r0, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=[{0x18, 0x110, 0x1, 'p'}], 0x18}, 0x0) r1 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r1, &(0x7f00000005c0)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x4e24, @loopback}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x18}, 0x0) r2 = socket$kcm(0x21, 0x2, 0x2) sendmsg$kcm(r2, &(0x7f0000000080)={&(0x7f0000000000)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x80, 0x0, 0x0, &(0x7f0000000140)=ANY=[], 0x18}, 0x0) 1.815177551s ago: executing program 3 (id=446): syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00'}) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}]]}, 0x30}}, 0x0) syz_80211_inject_frame(&(0x7f00000002c0)=@device_b, &(0x7f0000000300)=@mgmt_frame=@probe_response={{{}, {}, @device_b, @device_a, @from_mac}, 0x0, @default, 0x1, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x1, [{0x2, 0x1}]}, @void, @void, @void, @void, @void, @void}, 0x2f) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000011c0)={0x14, 0x2c, 0x1, 0x0, 0x0, "", [@nested={0x4, 0x800}]}, 0x14}], 0x1}, 0x0) sendmsg$NL80211_CMD_SET_STATION(0xffffffffffffffff, 0x0, 0x800) socket(0x5, 0x80005, 0x1) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) 1.622099369s ago: executing program 1 (id=447): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@base={0x13, 0x10, 0x8, 0x0, 0x0, 0x1, 0x3, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000a80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7020000000000008500000051000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000005000000b70000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_ATTACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r0, @ANYRES32=r2], 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000380)={r1, &(0x7f00000002c0), 0x0}, 0x20) 1.547594186s ago: executing program 4 (id=448): socket$nl_generic(0x10, 0x3, 0x10) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={0x0, 0xffffffffffffffff, 0x0, 0x40000000}, 0x18) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x20, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) 1.525632615s ago: executing program 1 (id=449): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000400)=ANY=[], 0x8) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x40d, 0x0, 0x0, {0x0, 0x0, 0x0, r3, 0xc060, 0x8}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0xc, 0x5, 0x0, 0x1, [@IFLA_BRPORT_NEIGH_SUPPRESS={0x5, 0x20, 0x1}]}}}]}, 0x44}}, 0x0) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000380)='bridge0\x00', 0x10) write(r0, &(0x7f00000000c0)="8f2a0a65bd8c002b0304000e0580a7b6070d", 0x12) 814.101197ms ago: executing program 2 (id=450): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x9}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_START_AP(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x5c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@beacon=[@NL80211_ATTR_BEACON_HEAD={0x28, 0xe, {{{}, {}, @broadcast, @device_a, @from_mac}, 0x0, @default, 0x1, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void, @void}}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8}], @NL80211_ATTR_BEACON_INTERVAL={0x8}, @NL80211_ATTR_DTIM_PERIOD={0x8}]}, 0x5c}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f00000003c0)={0xffffffffffffffff}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000300)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_STATION(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000040)={0x40, r5, 0xb97534d5fe9704cf, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_STA_SUPPORTED_RATES={0x6, 0x13, [{0x16, 0x1}, {0x24}]}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x580}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}]}, 0x40}, 0x1, 0x0, 0x0, 0xc0}, 0x0) 776.414951ms ago: executing program 1 (id=451): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'bond0\x00', 0x0}) bind$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, r2, 0x1, 0x0, 0x6, @link_local}, 0x14) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x1, 0x803, 0x0) getsockname$packet(r4, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) sendmsg$nl_route(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x40, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @wireguard={{0xe}, {0x4}}}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x40}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f8480d0000005e140602000000000e000a000f00000002800000121f", 0x2e}], 0x1}, 0x0) 715.68789ms ago: executing program 4 (id=452): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000006112000000000000950000000000000051fa7824c74186dc02ec0696c37b64e3b24da3180100000005345c0f63cdc2e82818254950ee03568b8809a1f04c7c4750eabfafcb9531b31e6a86827d1010c5a909ab98e00e19644a88e95ba26d1c9eecddb2d11c541418ceeb29b9b6829c6e433822bdb3cc85244aab66c1aae9314d7381fcfeb970bea672010000000000000043144648a07a975bd89dc398712376610faa54f12495b4659be8673086f6f3543205d4bc4ce05b8b961103673dff7f158052e62bfbdcddde6985f3f1ac5d9a94cc53207899762a07282a1914452d11858e795a3ca30a101af5574f9035f2b5f703e5be7e4acf8b78c2834ae5805fffee38a9a0033d520bcf6b08ede50899d4b9bdf85c71c5ed44039aab46419496362e54cfad05b4004ac71a003d7b85d07191bed4e5a8908263722d4146f7ed569985439baa355cf3d8731f5e7a237bc06d035a8d601f21746d880819f38b34a495040000000071c2f0cce8c93cc17e9afa314fcb2ba15d646c5b9f87d988c9fbd2b9d9b4e2d71753b1549fa734f0b2e5fcf9549804cddad721971637f9c9730a9cc384eed30345979db9c93e1c52f42cad0a4d4f9436d3f39b0ed09c395dc6e970366087a8e4daeeb1b017006f25caf0cbcefd13d68839893e39c588eb032905f91cafa4996dbf0cc8228d02a3092c0830b8f587a5624515298b2d4eb2bde6f9a2eb83d53f710c490ecd085d2811a7555c53030000007f00000000bfa6478eb96b079c277e2910b7ccdc3d672ed34aa65278c549e2abb549ad954884289130bc71cee2b7de62bf48129ae1af052a2d46a6165eb0954dac7265f1f425735acf6377793946b3229e861d8ea49806b3b533345d36ecef9df700000000f337b1ceb2d8a65dcdcd895d7ba37098d2593fdaaef445af5bee02019c000000aaae37f044bcadeb0f6846582b7653665aa336db9f0384d3c7ddf79c2e0000000000000000000000000000000000000000000000e154aa0d3e41986a668ee1e5ef93a8ceac75f44aae95e26742f895f287111f8ee86f7e3ffb63cfb0e345cf7fc63dd2b0d30977899c6f03640040af4db71f7452bfc79a05118d8bb42b63b195771e42f9942ec626bd4b5461b74324012164e8"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) sendmsg$NL80211_CMD_SET_TX_BITRATE_MASK(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)=ANY=[@ANYRES32=r1, @ANYRES32=r0, @ANYBLOB="02"], 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2, 0x0, @void, @value}, 0x10) 550.169566ms ago: executing program 4 (id=453): r0 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$IP_VS_SO_SET_STARTDAEMON(r0, 0x0, 0x48b, &(0x7f0000000000)={0x1, 'macvlan1\x00', 0xffffffff}, 0x18) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_DAEMON(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000004600)={0x14, r2, 0x301, 0x70bd2a, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x20000090}, 0x40) recvmmsg(r1, &(0x7f0000004400)=[{{0x0, 0x0, 0x0}, 0x34c}], 0x1, 0x2002, 0x0) 364.682954ms ago: executing program 2 (id=454): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r2) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r2, &(0x7f0000000080)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r3, 0x0) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x28, r8, 0x1, 0x70bd2c, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @empty}]}]}, 0x28}}, 0x0) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)={0x3c, r6, 0x1, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x28, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1}]}]}, 0x3c}}, 0x4000000) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000000)={0x14, r1, 0x1, 0x0, 0x0, {0x4}}, 0x14}, 0x1, 0xfcffffff00000000}, 0x0) 268.099759ms ago: executing program 3 (id=455): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x20, r1, 0x1, 0x0, 0x0, {{0x8}, {@void, @val={0xc, 0x99, {0x1, 0x2}}}}}, 0x20}}, 0x0) 0s ago: executing program 3 (id=456): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$TIPC_NL_MEDIA_SET(r1, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000003c80)=ANY=[], 0x12f4}}, 0x0) recvmmsg(r1, &(0x7f0000001840)=[{{0x0, 0x0, &(0x7f0000002140)=[{&(0x7f0000000700)=""/4121, 0x1019}], 0x1}, 0x5}], 0x1, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.97' (ED25519) to the list of known hosts. [ 54.725667][ T5815] cgroup: Unknown subsys name 'net' [ 54.870264][ T5815] cgroup: Unknown subsys name 'cpuset' [ 54.878027][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 56.202991][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 58.387376][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 58.395793][ T5833] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.405614][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.414112][ T5833] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.422770][ T5836] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.424055][ T5838] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 58.432326][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.445551][ T5833] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.447498][ T5838] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.453177][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.461149][ T5838] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.468214][ T5833] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.476614][ T5838] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.482492][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.492047][ T5838] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.495388][ T5833] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 58.502657][ T5838] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 58.511219][ T5833] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.516818][ T5838] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.523486][ T5833] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 58.532586][ T5838] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.538742][ T5833] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.548534][ T5840] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 58.561700][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.582080][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 58.605227][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 58.614390][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 58.628706][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 58.636387][ T5840] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 58.647829][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 58.978424][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 59.018595][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 59.122282][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 59.158426][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.165741][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.173800][ T5841] bridge_slave_0: entered allmulticast mode [ 59.181282][ T5841] bridge_slave_0: entered promiscuous mode [ 59.228091][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.235185][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.242924][ T5841] bridge_slave_1: entered allmulticast mode [ 59.250561][ T5841] bridge_slave_1: entered promiscuous mode [ 59.258277][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 59.292388][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.299579][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.306768][ T5828] bridge_slave_0: entered allmulticast mode [ 59.313828][ T5828] bridge_slave_0: entered promiscuous mode [ 59.347228][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.354401][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.364280][ T5828] bridge_slave_1: entered allmulticast mode [ 59.371449][ T5828] bridge_slave_1: entered promiscuous mode [ 59.393219][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.426698][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.506544][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.524480][ T5841] team0: Port device team_slave_0 added [ 59.544605][ T5841] team0: Port device team_slave_1 added [ 59.550922][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.558498][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.565749][ T5837] bridge_slave_0: entered allmulticast mode [ 59.572607][ T5837] bridge_slave_0: entered promiscuous mode [ 59.580084][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.587332][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.594494][ T5826] bridge_slave_0: entered allmulticast mode [ 59.601341][ T5826] bridge_slave_0: entered promiscuous mode [ 59.610726][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.636525][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.643969][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.651257][ T5837] bridge_slave_1: entered allmulticast mode [ 59.658404][ T5837] bridge_slave_1: entered promiscuous mode [ 59.665275][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.672705][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.680342][ T5826] bridge_slave_1: entered allmulticast mode [ 59.687037][ T5826] bridge_slave_1: entered promiscuous mode [ 59.713704][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.721530][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.748061][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.766830][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 59.795944][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.803067][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.829119][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.862904][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.880762][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.896408][ T5828] team0: Port device team_slave_0 added [ 59.915862][ T5841] hsr_slave_0: entered promiscuous mode [ 59.922406][ T5841] hsr_slave_1: entered promiscuous mode [ 59.931925][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.950488][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.961382][ T5828] team0: Port device team_slave_1 added [ 60.023237][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.030328][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.057337][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.084277][ T5826] team0: Port device team_slave_0 added [ 60.092659][ T5826] team0: Port device team_slave_1 added [ 60.109001][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.115986][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.145598][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.159464][ T5837] team0: Port device team_slave_0 added [ 60.195234][ T5837] team0: Port device team_slave_1 added [ 60.224643][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.232089][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.258875][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.271432][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.278676][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.304656][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.331399][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.338473][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.364609][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.384484][ T5828] hsr_slave_0: entered promiscuous mode [ 60.393498][ T5828] hsr_slave_1: entered promiscuous mode [ 60.400017][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.408299][ T5828] Cannot create hsr debugfs directory [ 60.430155][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.437252][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.463292][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.479957][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.487438][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 60.494658][ T5835] bridge_slave_0: entered allmulticast mode [ 60.502259][ T5835] bridge_slave_0: entered promiscuous mode [ 60.510725][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.518404][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.525682][ T5835] bridge_slave_1: entered allmulticast mode [ 60.532481][ T5835] bridge_slave_1: entered promiscuous mode [ 60.567854][ T5840] Bluetooth: hci0: command tx timeout [ 60.567858][ T54] Bluetooth: hci1: command tx timeout [ 60.638111][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.647298][ T5840] Bluetooth: hci2: command tx timeout [ 60.655722][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.657148][ T5840] Bluetooth: hci3: command tx timeout [ 60.687666][ T5826] hsr_slave_0: entered promiscuous mode [ 60.693798][ T5826] hsr_slave_1: entered promiscuous mode [ 60.699933][ T5826] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.707660][ T5826] Cannot create hsr debugfs directory [ 60.727351][ T5840] Bluetooth: hci4: command tx timeout [ 60.738817][ T5837] hsr_slave_0: entered promiscuous mode [ 60.744985][ T5837] hsr_slave_1: entered promiscuous mode [ 60.751457][ T5837] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.759187][ T5837] Cannot create hsr debugfs directory [ 60.778831][ T5835] team0: Port device team_slave_0 added [ 60.803218][ T5835] team0: Port device team_slave_1 added [ 60.878549][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.885531][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.912817][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.958742][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.965723][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.992112][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 61.071344][ T5841] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.113838][ T5841] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.153658][ T5841] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.165373][ T5835] hsr_slave_0: entered promiscuous mode [ 61.174443][ T5835] hsr_slave_1: entered promiscuous mode [ 61.180736][ T5835] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.188675][ T5835] Cannot create hsr debugfs directory [ 61.213692][ T5841] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.297515][ T5828] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.312685][ T5828] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.330411][ T5828] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.340059][ T5828] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.432330][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.455537][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.480789][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.507934][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.557773][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.568788][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.579609][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.591705][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.680579][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.698569][ T5835] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.711682][ T5835] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.722511][ T5835] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.732586][ T5835] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.795765][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.818246][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.846664][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.885546][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.892903][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.916106][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.934543][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.953352][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.960481][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.972002][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.979122][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.008305][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.015410][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.045353][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.052489][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.065945][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.073112][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.092108][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.106137][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.150636][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.179296][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.186409][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.212802][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.234200][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.242138][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.275757][ T3516] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.282929][ T3516] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.329470][ T3516] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.336683][ T3516] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.550873][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.603591][ T5835] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 62.629717][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.647753][ T5840] Bluetooth: hci0: command tx timeout [ 62.649538][ T54] Bluetooth: hci1: command tx timeout [ 62.693075][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.721942][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.728998][ T54] Bluetooth: hci3: command tx timeout [ 62.729042][ T54] Bluetooth: hci2: command tx timeout [ 62.807602][ T5840] Bluetooth: hci4: command tx timeout [ 62.820285][ T5841] veth0_vlan: entered promiscuous mode [ 62.848988][ T5841] veth1_vlan: entered promiscuous mode [ 62.912273][ T5826] veth0_vlan: entered promiscuous mode [ 62.941307][ T5828] veth0_vlan: entered promiscuous mode [ 62.959015][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.975211][ T5826] veth1_vlan: entered promiscuous mode [ 62.984786][ T5828] veth1_vlan: entered promiscuous mode [ 63.004518][ T5841] veth0_macvtap: entered promiscuous mode [ 63.014555][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.039292][ T5841] veth1_macvtap: entered promiscuous mode [ 63.078202][ T5826] veth0_macvtap: entered promiscuous mode [ 63.116104][ T5828] veth0_macvtap: entered promiscuous mode [ 63.127805][ T5826] veth1_macvtap: entered promiscuous mode [ 63.146325][ T5828] veth1_macvtap: entered promiscuous mode [ 63.157984][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.198331][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.214332][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.228154][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.242909][ T5837] veth0_vlan: entered promiscuous mode [ 63.252714][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.271574][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.284052][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.294967][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.305532][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.316353][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.330929][ T5837] veth1_vlan: entered promiscuous mode [ 63.346063][ T5826] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.356741][ T5826] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.369760][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.384100][ T5841] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.401394][ T5841] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.412053][ T5841] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.421087][ T5841] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.433266][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.444727][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.458511][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.469306][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.480577][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.499189][ T5828] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.508881][ T5828] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.518807][ T5828] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.528562][ T5828] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.542942][ T5826] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.551857][ T5826] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.560922][ T5826] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.569924][ T5826] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.691444][ T5837] veth0_macvtap: entered promiscuous mode [ 63.700814][ T5835] veth0_vlan: entered promiscuous mode [ 63.719026][ T5837] veth1_macvtap: entered promiscuous mode [ 63.750506][ T3516] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.758902][ T3516] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.763600][ T5835] veth1_vlan: entered promiscuous mode [ 63.784517][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.796029][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.806803][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.817378][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.827266][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.838854][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.852204][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.877233][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.878976][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.885207][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.898046][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.914890][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.925814][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.936012][ T5837] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.948324][ T5837] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.959227][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.991833][ T5837] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.001800][ T5837] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.011748][ T5837] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.020945][ T5837] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.046210][ T131] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.054756][ T5835] veth0_macvtap: entered promiscuous mode [ 64.057248][ T131] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.100709][ T5835] veth1_macvtap: entered promiscuous mode [ 64.123784][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.132372][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.154020][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 64.189921][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.201479][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.212649][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.223924][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.233882][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.244766][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.255483][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.266052][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.277530][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.338545][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.365273][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.375775][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.386804][ T5911] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 64.396792][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.406861][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.418750][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.429289][ T5835] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.441283][ T5835] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.452649][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.459359][ T5912] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1'. [ 64.493031][ T5835] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.510055][ T5835] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.519306][ T5835] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.528768][ T5835] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.543979][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.563953][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.574575][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.586948][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.711348][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.727198][ T5840] Bluetooth: hci0: command tx timeout [ 64.727610][ T54] Bluetooth: hci1: command tx timeout [ 64.758557][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.807197][ T54] Bluetooth: hci2: command tx timeout [ 64.813162][ T54] Bluetooth: hci3: command tx timeout [ 64.855191][ T5920] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 64.862022][ T5920] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 64.908210][ T54] Bluetooth: hci4: command tx timeout [ 64.926722][ T5921] Zero length message leads to an empty skb [ 65.025821][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.035611][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.112903][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.131769][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.222476][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.285330][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.310203][ T5931] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.381373][ T5935] vlan2: entered promiscuous mode [ 65.401420][ T5935] bond0: (slave vlan2): Error -34 calling dev_set_mtu [ 65.695612][ T5953] netlink: 12 bytes leftover after parsing attributes in process `syz.1.13'. [ 65.901912][ T5958] netlink: 16 bytes leftover after parsing attributes in process `syz.3.14'. [ 66.039065][ T5966] netlink: 'syz.1.17': attribute type 1 has an invalid length. [ 66.058550][ T5966] netlink: 'syz.1.17': attribute type 1 has an invalid length. [ 66.107784][ T5970] (unnamed net_device) (uninitialized): option resend_igmp: invalid value (511) [ 66.161948][ T5970] (unnamed net_device) (uninitialized): option resend_igmp: allowed values 0 - 255 [ 66.308058][ T5979] syz.4.20 uses obsolete (PF_INET,SOCK_PACKET) [ 66.314706][ T5974] netlink: 4 bytes leftover after parsing attributes in process `syz.1.17'. [ 66.353617][ T5974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 66.363146][ T5974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 66.399495][ T5974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 66.423050][ T5974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 66.807223][ T54] Bluetooth: hci1: command tx timeout [ 66.808468][ T5840] Bluetooth: hci0: command tx timeout [ 66.889061][ T5840] Bluetooth: hci2: command tx timeout [ 66.897023][ T5840] Bluetooth: hci3: command tx timeout [ 66.967567][ T5840] Bluetooth: hci4: command tx timeout [ 66.973647][ T5998] netlink: 12 bytes leftover after parsing attributes in process `syz.1.28'. [ 67.031772][ T6000] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 67.035396][ T6010] netlink: 16 bytes leftover after parsing attributes in process `syz.3.29'. [ 67.105130][ T5998] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.125825][ T6006] netlink: 20 bytes leftover after parsing attributes in process `syz.4.27'. [ 67.243402][ T5998] 8021q: adding VLAN 0 to HW filter on device bond1 [ 67.287945][ T5998] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 67.360938][ T5998] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 67.444804][ T6030] netlink: 'syz.2.33': attribute type 2 has an invalid length. [ 67.482919][ T6030] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 67.721809][ T6043] Bluetooth: MGMT ver 1.23 [ 68.554024][ T6083] ebt_limit: overflow, try lower: 570423552/2483027968 [ 68.947763][ T6084] netlink: 4 bytes leftover after parsing attributes in process `syz.2.43'. [ 69.672636][ T6105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.47'. [ 70.034857][ T6118] geneve2: entered promiscuous mode [ 70.041466][ T6118] geneve2: entered allmulticast mode [ 70.628819][ T6111] sctp: failed to load transform for md5: -2 [ 70.679145][ T6138] netlink: 32 bytes leftover after parsing attributes in process `syz.2.52'. [ 71.391256][ T6141] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.400149][ T6141] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.443974][ T6158] netlink: 268 bytes leftover after parsing attributes in process `syz.2.56'. [ 71.680995][ T6141] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 71.714915][ T6141] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 71.776457][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.783296][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.840828][ T6141] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.859371][ T6141] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.874901][ T6141] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.884395][ T6141] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 71.963437][ T6150] batadv_slave_1: entered promiscuous mode [ 72.004369][ T6149] batadv_slave_1: left promiscuous mode [ 72.063479][ T6173] netlink: 'syz.1.58': attribute type 2 has an invalid length. [ 72.145494][ T6177] netlink: 8 bytes leftover after parsing attributes in process `syz.0.60'. [ 72.248936][ T6184] netlink: 'syz.0.60': attribute type 1 has an invalid length. [ 72.444061][ T6196] netlink: 8 bytes leftover after parsing attributes in process `syz.1.63'. [ 72.492304][ T6198] netlink: 'syz.3.65': attribute type 3 has an invalid length. [ 72.517022][ T6198] netlink: 'syz.3.65': attribute type 1 has an invalid length. [ 72.566384][ T6205] netlink: 24 bytes leftover after parsing attributes in process `syz.1.66'. [ 73.003271][ T6228] netlink: 52 bytes leftover after parsing attributes in process `syz.3.73'. [ 73.323279][ T6239] netlink: 4 bytes leftover after parsing attributes in process `syz.3.77'. [ 73.387269][ T6242] netlink: 12 bytes leftover after parsing attributes in process `syz.4.79'. [ 73.413525][ T6242] netlink: 12 bytes leftover after parsing attributes in process `syz.4.79'. [ 73.710252][ T6251] sock: sock_set_timeout: `syz.1.81' (pid 6251) tries to set negative timeout [ 74.130654][ T6271] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 74.612135][ T6304] netlink: 'syz.1.98': attribute type 9 has an invalid length. [ 74.657415][ T6308] netlink: 'syz.1.98': attribute type 9 has an invalid length. [ 74.790337][ T6313] __nla_validate_parse: 4 callbacks suppressed [ 74.790357][ T6313] netlink: 16 bytes leftover after parsing attributes in process `syz.2.100'. [ 74.864438][ T6321] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (7) [ 74.993671][ T6322] warning: `syz.1.101' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 75.024004][ T6329] bridge1: entered promiscuous mode [ 75.048846][ T6329] bridge1: entered allmulticast mode [ 75.231435][ T6343] netlink: 'syz.3.106': attribute type 1 has an invalid length. [ 75.281469][ T6343] netlink: 36 bytes leftover after parsing attributes in process `syz.3.106'. [ 75.848239][ T54] Bluetooth: hci4: command 0x0405 tx timeout [ 75.898284][ T6402] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 75.937526][ T6402] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 76.033116][ T6408] do_dccp_getsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 76.205409][ T6413] netlink: 16 bytes leftover after parsing attributes in process `syz.0.117'. [ 76.517646][ T6424] netlink: 16 bytes leftover after parsing attributes in process `syz.1.120'. [ 76.591343][ T6426] netlink: 188 bytes leftover after parsing attributes in process `syz.2.121'. [ 76.653680][ T6426] netlink: 'syz.2.121': attribute type 1 has an invalid length. [ 76.742563][ T6431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.122'. [ 76.772963][ T6433] raw_sendmsg: syz.3.123 forgot to set AF_INET. Fix it! [ 76.782237][ T6435] netlink: 8 bytes leftover after parsing attributes in process `syz.2.121'. [ 77.500853][ T6469] netlink: 24 bytes leftover after parsing attributes in process `syz.3.127'. [ 79.377680][ T6455] syz.1.126: vmalloc error: size 8388608, failed to allocated page array size 16384, mode:0xdc2(GFP_KERNEL|__GFP_HIGHMEM|__GFP_ZERO), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 79.396158][ T6455] CPU: 0 UID: 0 PID: 6455 Comm: syz.1.126 Not tainted 6.13.0-rc7-syzkaller-01160-g41c5d104f338 #0 [ 79.406787][ T6455] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 79.416857][ T6455] Call Trace: [ 79.420170][ T6455] [ 79.423095][ T6455] dump_stack_lvl+0x241/0x360 [ 79.427823][ T6455] ? __pfx_dump_stack_lvl+0x10/0x10 [ 79.434969][ T6455] ? __pfx__printk+0x10/0x10 [ 79.439595][ T6455] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 79.446072][ T6455] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 79.452620][ T6455] warn_alloc+0x278/0x410 [ 79.456968][ T6455] ? __pfx_warn_alloc+0x10/0x10 [ 79.461837][ T6455] ? fq_pie_init+0x429/0x820 [ 79.466441][ T6455] ? __get_vm_area_node+0x1c8/0x2d0 [ 79.471690][ T6455] ? __get_vm_area_node+0x25c/0x2d0 [ 79.476905][ T6455] __vmalloc_node_range_noprof+0x62f/0x1380 [ 79.482811][ T6455] ? __pfx___alloc_pages_noprof+0x10/0x10 [ 79.488565][ T6455] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 79.494888][ T6455] ? rcu_is_watching+0x15/0xb0 [ 79.499668][ T6455] ? trace_kmalloc+0x1f/0xd0 [ 79.504278][ T6455] ? __kmalloc_node_noprof+0x2ad/0x4d0 [ 79.509742][ T6455] ? __kvmalloc_node_noprof+0x72/0x190 [ 79.515206][ T6455] __kvmalloc_node_noprof+0x142/0x190 [ 79.520602][ T6455] ? fq_pie_init+0x429/0x820 [ 79.525220][ T6455] fq_pie_init+0x429/0x820 [ 79.529652][ T6455] ? qdisc_lookup+0x350/0x6b0 [ 79.534379][ T6455] ? __pfx_fq_pie_init+0x10/0x10 [ 79.539369][ T6455] qdisc_create+0x9d4/0x11a0 [ 79.543992][ T6455] ? __pfx_qdisc_create+0x10/0x10 [ 79.549052][ T6455] tc_modify_qdisc+0xa26/0x1e40 [ 79.553909][ T6455] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 79.559232][ T6455] ? __pfx_tc_modify_qdisc+0x10/0x10 [ 79.564533][ T6455] rtnetlink_rcv_msg+0x73f/0xcf0 [ 79.569471][ T6455] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 79.574590][ T6455] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 79.580070][ T6455] ? ref_tracker_free+0x643/0x7e0 [ 79.585109][ T6455] netlink_rcv_skb+0x1e3/0x430 [ 79.589881][ T6455] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 79.595356][ T6455] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 79.600678][ T6455] ? netlink_deliver_tap+0x2e/0x1b0 [ 79.605881][ T6455] netlink_unicast+0x7f6/0x990 [ 79.610652][ T6455] ? __pfx_netlink_unicast+0x10/0x10 [ 79.615937][ T6455] ? __virt_addr_valid+0x45f/0x530 [ 79.621081][ T6455] ? __phys_addr_symbol+0x2f/0x70 [ 79.626140][ T6455] ? __check_object_size+0x47a/0x730 [ 79.631431][ T6455] netlink_sendmsg+0x8e4/0xcb0 [ 79.636205][ T6455] ? __pfx_netlink_sendmsg+0x10/0x10 [ 79.641494][ T6455] ? aa_sock_msg_perm+0x91/0x160 [ 79.646437][ T6455] ? __pfx_netlink_sendmsg+0x10/0x10 [ 79.651817][ T6455] __sock_sendmsg+0x221/0x270 [ 79.656527][ T6455] ____sys_sendmsg+0x52a/0x7e0 [ 79.661304][ T6455] ? __pfx_____sys_sendmsg+0x10/0x10 [ 79.666595][ T6455] ? __fget_files+0x2a/0x410 [ 79.671208][ T6455] ? __fget_files+0x2a/0x410 [ 79.675810][ T6455] __sys_sendmsg+0x269/0x350 [ 79.680417][ T6455] ? __pfx___sys_sendmsg+0x10/0x10 [ 79.685574][ T6455] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 79.691909][ T6455] ? do_syscall_64+0x100/0x230 [ 79.696675][ T6455] ? do_syscall_64+0xb6/0x230 [ 79.701357][ T6455] do_syscall_64+0xf3/0x230 [ 79.705862][ T6455] ? clear_bhb_loop+0x35/0x90 [ 79.710554][ T6455] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 79.716482][ T6455] RIP: 0033:0x7f1ea3f85d29 [ 79.720912][ T6455] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 79.740543][ T6455] RSP: 002b:00007f1ea4e5c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 79.748968][ T6455] RAX: ffffffffffffffda RBX: 00007f1ea4175fa0 RCX: 00007f1ea3f85d29 [ 79.756960][ T6455] RDX: 0000000000000000 RSI: 00000000200000c0 RDI: 0000000000000003 [ 79.764968][ T6455] RBP: 00007f1ea4001b08 R08: 0000000000000000 R09: 0000000000000000 [ 79.772964][ T6455] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 79.780938][ T6455] R13: 0000000000000000 R14: 00007f1ea4175fa0 R15: 00007ffc675ad0d8 [ 79.789009][ T6455] [ 79.805911][ T6455] Mem-Info: [ 79.810372][ T6455] active_anon:7885 inactive_anon:0 isolated_anon:0 [ 79.810372][ T6455] active_file:1265 inactive_file:38251 isolated_file:0 [ 79.810372][ T6455] unevictable:768 dirty:482 writeback:0 [ 79.810372][ T6455] slab_reclaimable:9813 slab_unreclaimable:97555 [ 79.810372][ T6455] mapped:30570 shmem:1427 pagetables:803 [ 79.810372][ T6455] sec_pagetables:0 bounce:0 [ 79.810372][ T6455] kernel_misc_reclaimable:0 [ 79.810372][ T6455] free:1343930 free_pcp:485 free_cma:0 [ 79.861133][ T6455] Node 0 active_anon:31440kB inactive_anon:0kB active_file:5060kB inactive_file:152928kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:122180kB dirty:1928kB writeback:0kB shmem:4172kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12236kB pagetables:3112kB sec_pagetables:0kB all_unreclaimable? no [ 79.894083][ T6455] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 79.930735][ T6455] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 79.960347][ T6455] lowmem_reserve[]: 0 2465 2466 0 0 [ 79.965760][ T6455] Node 0 DMA32 free:1453068kB boost:0kB min:34200kB low:42748kB high:51296kB reserved_highatomic:0KB active_anon:31404kB inactive_anon:0kB active_file:5060kB inactive_file:152096kB unevictable:1536kB writepending:1928kB present:3129332kB managed:2552752kB mlocked:0kB bounce:0kB free_pcp:1040kB local_pcp:96kB free_cma:0kB [ 79.996694][ T6455] lowmem_reserve[]: 0 0 0 0 0 [ 80.001850][ T6455] Node 0 Normal free:0kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:36kB inactive_anon:0kB active_file:0kB inactive_file:832kB unevictable:0kB writepending:0kB present:1048580kB managed:876kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 80.028728][ T6455] lowmem_reserve[]: 0 0 0 0 0 [ 80.033518][ T6455] Node 1 Normal free:3908036kB boost:0kB min:55688kB low:69608kB high:83528kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:76kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:32kB local_pcp:32kB free_cma:0kB [ 80.063089][ T6455] lowmem_reserve[]: 0 0 0 0 0 [ 80.068178][ T6455] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 80.081056][ T6455] Node 0 DMA32: 2*4kB (UM) 8*8kB (UME) 9*16kB (UME) 133*32kB (UME) 66*64kB (UE) 50*128kB (UE) 26*256kB (UM) 18*512kB (UM) 14*1024kB (UME) 9*2048kB (UME) 339*4096kB (UM) = 1452280kB [ 80.099432][ T6455] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 80.112220][ T6455] Node 1 Normal: 215*4kB (UE) 63*8kB (UME) 53*16kB (UME) 215*32kB (UME) 97*64kB (UME) 24*128kB (UME) 14*256kB (UME) 8*512kB (UM) 3*1024kB (UM) 2*2048kB (U) 946*4096kB (UM) = 3908036kB [ 80.130736][ T6455] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 80.140593][ T6455] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 80.149976][ T6455] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 80.160603][ T6455] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 80.170816][ T6455] 40943 total pagecache pages [ 80.175527][ T6455] 0 pages in swap cache [ 80.179861][ T6455] Free swap = 124996kB [ 80.184075][ T6455] Total swap = 124996kB [ 80.188326][ T6455] 2097051 pages RAM [ 80.192240][ T6455] 0 pages HighMem/MovableOnly [ 80.196988][ T6455] 427013 pages reserved [ 80.201152][ T6455] 0 pages cma reserved [ 80.227352][ T6494] netlink: 168 bytes leftover after parsing attributes in process `syz.0.128'. [ 80.250611][ T6494] netlink: 'syz.0.128': attribute type 1 has an invalid length. [ 80.410687][ T6501] netlink: 'syz.1.130': attribute type 4 has an invalid length. [ 80.422659][ T6503] netlink: 'syz.1.130': attribute type 4 has an invalid length. [ 80.524909][ T6513] netlink: 8 bytes leftover after parsing attributes in process `syz.0.132'. [ 80.536059][ T6511] netlink: 4 bytes leftover after parsing attributes in process `syz.4.134'. [ 80.545394][ T6513] netlink: 16 bytes leftover after parsing attributes in process `syz.0.132'. [ 80.577236][ T6513] x_tables: duplicate underflow at hook 1 [ 80.581223][ T6508] syzkaller0: entered promiscuous mode [ 80.616316][ T6508] syzkaller0: entered allmulticast mode [ 80.679515][ T6507] netlink: 'syz.0.132': attribute type 12 has an invalid length. [ 80.691630][ T6507] netlink: 'syz.0.132': attribute type 29 has an invalid length. [ 80.692261][ T6513] netlink: 288 bytes leftover after parsing attributes in process `syz.0.132'. [ 80.709799][ T6507] netlink: 148 bytes leftover after parsing attributes in process `syz.0.132'. [ 80.720841][ T6507] netlink: 59 bytes leftover after parsing attributes in process `syz.0.132'. [ 80.795308][ T6522] netlink: 60 bytes leftover after parsing attributes in process `syz.1.135'. [ 82.023949][ T119] cfg80211: failed to load regulatory.db [ 82.547544][ T6545] (unnamed net_device) (uninitialized): option downdelay: invalid value (18446744073709551615) [ 82.565004][ T6545] (unnamed net_device) (uninitialized): option downdelay: allowed values 0 - 2147483647 [ 82.819237][ T6564] netlink: 44 bytes leftover after parsing attributes in process `syz.1.145'. [ 82.829379][ T6564] netlink: 43 bytes leftover after parsing attributes in process `syz.1.145'. [ 82.838766][ T6564] netlink: 'syz.1.145': attribute type 5 has an invalid length. [ 83.793641][ T6612] batadv1: entered promiscuous mode [ 83.800938][ T6612] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 83.973798][ T6617] netlink: 'syz.4.159': attribute type 1 has an invalid length. [ 85.447670][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 86.133072][ T6717] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 86.402979][ T6727] __nla_validate_parse: 12 callbacks suppressed [ 86.402998][ T6727] netlink: 72 bytes leftover after parsing attributes in process `syz.4.188'. [ 86.741639][ T6741] x_tables: duplicate underflow at hook 1 [ 86.832247][ T6728] lo speed is unknown, defaulting to 1000 [ 86.845849][ T6728] lo speed is unknown, defaulting to 1000 [ 86.864688][ T6728] lo speed is unknown, defaulting to 1000 [ 86.898014][ T6728] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 86.915427][ T6728] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 86.994705][ T6728] lo speed is unknown, defaulting to 1000 [ 87.003171][ T6721] Bluetooth: hci0: Opcode 0x0401 failed: -4 [ 87.010443][ T6748] netlink: 28 bytes leftover after parsing attributes in process `syz.2.194'. [ 87.022569][ T6728] lo speed is unknown, defaulting to 1000 [ 87.053855][ T6748] netlink: 4 bytes leftover after parsing attributes in process `syz.2.194'. [ 87.060197][ T6728] lo speed is unknown, defaulting to 1000 [ 87.071112][ T6728] lo speed is unknown, defaulting to 1000 [ 87.078780][ T6728] lo speed is unknown, defaulting to 1000 [ 87.085655][ T6728] lo speed is unknown, defaulting to 1000 [ 87.769944][ T6784] netlink: 96 bytes leftover after parsing attributes in process `syz.1.202'. [ 87.802179][ T6784] netlink: 'syz.1.202': attribute type 1 has an invalid length. [ 87.813919][ T6784] netlink: 224 bytes leftover after parsing attributes in process `syz.1.202'. [ 88.012466][ T6799] netlink: 1256 bytes leftover after parsing attributes in process `syz.1.204'. [ 88.247871][ T54] Bluetooth: hci0: command 0x0401 tx timeout [ 88.299114][ T29] audit: type=1107 audit(1737318564.394:2): pid=6801 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa [ 88.488809][ T6816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.208'. [ 88.618428][ T6816] netlink: 60 bytes leftover after parsing attributes in process `syz.4.208'. [ 88.640755][ T6816] unsupported nlmsg_type 40 [ 89.334413][ T6852] tipc: Started in network mode [ 89.360085][ T6852] tipc: Node identity fef331000000000000000000000000aa, cluster identity 4711 [ 89.406330][ T6852] tipc: Enabling of bearer rejected, failed to enable media [ 89.895254][ T6880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.220'. [ 89.937365][ T6880] netlink: 4 bytes leftover after parsing attributes in process `syz.1.220'. [ 90.133663][ T6879] lo speed is unknown, defaulting to 1000 [ 90.160725][ T6719] Set syz1 is full, maxelem 65536 reached [ 90.348178][ T6887] lo speed is unknown, defaulting to 1000 [ 91.020254][ T6915] macsec0: entered promiscuous mode [ 91.058840][ T6915] veth1_macvtap: left promiscuous mode [ 91.167095][ T6925] netlink: 'syz.0.230': attribute type 9 has an invalid length. [ 91.584167][ T6935] __nla_validate_parse: 1 callbacks suppressed [ 91.584189][ T6935] netlink: 8 bytes leftover after parsing attributes in process `syz.2.232'. [ 91.626568][ T6933] pim6reg1: entered promiscuous mode [ 91.841354][ T6951] xt_l2tp: invalid flags combination: 4 [ 92.245447][ T6971] mac80211_hwsim hwsim3 wlan0: entered promiscuous mode [ 92.269736][ T6971] macsec0: entered allmulticast mode [ 92.283188][ T6971] mac80211_hwsim hwsim3 wlan0: entered allmulticast mode [ 92.300642][ T6971] batman_adv: batadv0: Adding interface: macsec0 [ 92.345868][ T6971] batman_adv: batadv0: The MTU of interface macsec0 is too small (1468) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 92.382331][ T6971] batman_adv: batadv0: Interface activated: macsec0 [ 92.446690][ T6980] Driver unsupported XDP return value 0 on prog (id 97) dev N/A, expect packet loss! [ 92.574505][ T6976] syzkaller1: entered promiscuous mode [ 92.599301][ T6976] syzkaller1: entered allmulticast mode [ 92.831034][ T7001] netlink: 28 bytes leftover after parsing attributes in process `syz.2.247'. [ 92.857505][ T7001] netlink: 28 bytes leftover after parsing attributes in process `syz.2.247'. [ 92.859705][ T7008] netlink: 8 bytes leftover after parsing attributes in process `syz.0.249'. [ 92.976695][ T7013] netlink: 28 bytes leftover after parsing attributes in process `syz.0.249'. [ 93.119942][ T7017] netlink: 4 bytes leftover after parsing attributes in process `syz.3.250'. [ 93.189184][ T7022] IPv6: Can't replace route, no match found [ 93.216598][ T7017] bridge_slave_1: left allmulticast mode [ 93.227230][ T7029] openvswitch: netlink: Port -1 exceeds max allowable 65535 [ 93.244966][ T7017] bridge_slave_1: left promiscuous mode [ 93.256037][ T7017] bridge0: port 2(bridge_slave_1) entered disabled state [ 93.283200][ T7017] bridge_slave_0: left allmulticast mode [ 93.298991][ T7017] bridge_slave_0: left promiscuous mode [ 93.321853][ T7017] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.464888][ T7042] netlink: 'syz.4.252': attribute type 3 has an invalid length. [ 93.513678][ T7044] netlink: 'syz.0.255': attribute type 1 has an invalid length. [ 93.553278][ T7024] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 93.737898][ T7044] 8021q: adding VLAN 0 to HW filter on device bond1 [ 94.012768][ T7069] netlink: 8 bytes leftover after parsing attributes in process `syz.3.257'. [ 94.076638][ T7070] netlink: 84 bytes leftover after parsing attributes in process `syz.3.257'. [ 94.180484][ T7024] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.294972][ T7024] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.473445][ T7024] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.552665][ T7080] netlink: 'syz.2.263': attribute type 2 has an invalid length. [ 94.739379][ T7024] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.936110][ T7024] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.057384][ T7092] netlink: 28 bytes leftover after parsing attributes in process `syz.3.267'. [ 95.074710][ T7024] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.234358][ T7024] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.427980][ T7098] netlink: 4 bytes leftover after parsing attributes in process `syz.1.269'. [ 95.877038][ T7102] infiniband syz!: set down [ 95.886548][ T7102] infiniband syz!: added team_slave_0 [ 95.970066][ T7102] RDS/IB: syz!: added [ 95.987455][ T7102] smc: adding ib device syz! with port count 1 [ 96.004193][ T7102] smc: ib device syz! port 1 has pnetid [ 96.214999][ T7135] ieee802154 phy0 wpan0: encryption failed: -22 [ 96.304098][ T7140] tipc: Started in network mode [ 96.349606][ T7140] tipc: Node identity ., cluster identity 4711 [ 96.355850][ T7140] tipc: Enabling of bearer rejected, failed to enable media [ 97.003345][ T7163] __nla_validate_parse: 2 callbacks suppressed [ 97.003368][ T7163] netlink: 28 bytes leftover after parsing attributes in process `syz.2.286'. [ 97.030753][ T7163] netlink: 28 bytes leftover after parsing attributes in process `syz.2.286'. [ 98.025209][ T7196] ip6erspan0: entered promiscuous mode [ 98.034815][ T7196] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.281933][ T7214] xt_CT: You must specify a L4 protocol and not use inversions on it [ 98.387785][ T7225] netlink: 2 bytes leftover after parsing attributes in process `syz.1.300'. [ 98.416521][ T7225] batadv_slave_1: entered promiscuous mode [ 98.664582][ T7237] lo speed is unknown, defaulting to 1000 [ 99.045680][ T7259] xt_bpf: check failed: parse error [ 99.045923][ T7261] xt_bpf: check failed: parse error [ 99.136811][ T7266] netlink: 68 bytes leftover after parsing attributes in process `syz.4.305'. [ 99.327834][ T7272] netlink: 28 bytes leftover after parsing attributes in process `syz.0.308'. [ 99.407711][ T7272] netlink: 28 bytes leftover after parsing attributes in process `syz.0.308'. [ 100.337499][ T7294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.311'. [ 100.412739][ T7294] netlink: 4 bytes leftover after parsing attributes in process `syz.2.311'. [ 100.430403][ T7307] syzkaller1: entered promiscuous mode [ 100.436474][ T7307] syzkaller1: entered allmulticast mode [ 100.545362][ T7294] netlink: 'syz.2.311': attribute type 7 has an invalid length. [ 100.593800][ T7310] netlink: 12 bytes leftover after parsing attributes in process `syz.1.315'. [ 100.619229][ T7294] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 100.642040][ T7294] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 100.659176][ T7314] tipc: Enabling of bearer rejected, failed to enable media [ 100.712725][ T7314] netlink: 8 bytes leftover after parsing attributes in process `syz.4.316'. [ 101.112793][ T7330] openvswitch: netlink: Actions may not be safe on all matching packets [ 101.475553][ T7350] netlink: 'syz.1.326': attribute type 9 has an invalid length. [ 104.149158][ T7356] __nla_validate_parse: 4 callbacks suppressed [ 104.149177][ T7356] netlink: 8 bytes leftover after parsing attributes in process `syz.4.327'. [ 104.386524][ T7358] netlink: 108 bytes leftover after parsing attributes in process `syz.2.328'. [ 104.623713][ T7378] netlink: 'syz.0.332': attribute type 1 has an invalid length. [ 104.647681][ T7378] bond2: entered promiscuous mode [ 104.652932][ T7378] bond2: entered allmulticast mode [ 104.665256][ T7378] batadv1: entered allmulticast mode [ 104.672069][ T7378] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 104.681255][ T7378] bond2: (slave batadv1): making interface the new active one [ 104.689694][ T7378] batadv1: entered promiscuous mode [ 104.701261][ T7378] bond2: (slave batadv1): Enslaving as an active interface with an up link [ 104.716380][ T7376] ipip1: entered promiscuous mode [ 104.722942][ T7378] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.733488][ T7378] batadv_slave_1: entered promiscuous mode [ 104.922396][ T7388] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 105.163379][ T7396] syzkaller1: entered promiscuous mode [ 105.192122][ T7396] syzkaller1: entered allmulticast mode [ 105.356561][ T7414] netlink: 24 bytes leftover after parsing attributes in process `syz.2.342'. [ 106.164970][ T7455] netlink: 4 bytes leftover after parsing attributes in process `syz.4.350'. [ 106.191854][ T7455] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 106.213502][ T7455] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 106.222297][ T7459] netlink: 40 bytes leftover after parsing attributes in process `syz.4.350'. [ 106.238139][ T7455] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 106.251744][ T7446] netlink: 4 bytes leftover after parsing attributes in process `syz.2.344'. [ 106.364316][ T7454] bond_slave_0: entered promiscuous mode [ 106.370292][ T7454] bond_slave_1: entered promiscuous mode [ 106.417610][ T7454] vlan2: entered promiscuous mode [ 106.434497][ T7454] bond0: entered promiscuous mode [ 106.437489][ T7443] netlink: 'syz.0.348': attribute type 1 has an invalid length. [ 106.457523][ T7454] vlan2: entered allmulticast mode [ 106.462210][ T7443] netlink: 20 bytes leftover after parsing attributes in process `syz.0.348'. [ 106.494652][ T7454] bond0: entered allmulticast mode [ 106.500290][ T7454] bond_slave_0: entered allmulticast mode [ 106.506053][ T7454] bond_slave_1: entered allmulticast mode [ 106.514207][ T7454] bond0: left allmulticast mode [ 106.525193][ T7454] bond_slave_0: left allmulticast mode [ 106.541867][ T7454] bond_slave_1: left allmulticast mode [ 106.548285][ T7454] bond0: left promiscuous mode [ 106.553991][ T7454] bond_slave_0: left promiscuous mode [ 106.559542][ T7454] bond_slave_1: left promiscuous mode [ 106.889794][ T7482] netlink: 80 bytes leftover after parsing attributes in process `syz.1.355'. [ 106.916474][ T7482] netlink: 12 bytes leftover after parsing attributes in process `syz.1.355'. [ 106.967112][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 107.021633][ T7486] netlink: 12 bytes leftover after parsing attributes in process `syz.0.354'. [ 107.050734][ T7486] nbd: must specify a size in bytes for the device [ 107.071838][ T7491] nbd: must specify a size in bytes for the device [ 107.120867][ T7499] netlink: 'syz.2.352': attribute type 1 has an invalid length. [ 107.126038][ T7497] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: macsec0 [ 107.220264][ T7497] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.625678][ T7531] lo speed is unknown, defaulting to 1000 [ 110.840745][ T7567] xt_CT: You must specify a L4 protocol and not use inversions on it [ 110.969931][ T7575] xt_cgroup: invalid path, errno=-2 [ 111.096236][ T7588] __nla_validate_parse: 4 callbacks suppressed [ 111.096255][ T7588] netlink: 732 bytes leftover after parsing attributes in process `syz.4.376'. [ 111.111778][ T7588] netlink: 732 bytes leftover after parsing attributes in process `syz.4.376'. [ 111.144410][ T7589] syz.4.376 uses old SIOCAX25GETINFO [ 111.318540][ T7597] netlink: 'syz.0.377': attribute type 21 has an invalid length. [ 111.331173][ T7597] netlink: 132 bytes leftover after parsing attributes in process `syz.0.377'. [ 111.586616][ T7616] netlink: 8 bytes leftover after parsing attributes in process `syz.4.379'. [ 111.900688][ T7622] lo speed is unknown, defaulting to 1000 [ 112.563316][ T7645] syzkaller0: entered promiscuous mode [ 112.572496][ T7645] syzkaller0: entered allmulticast mode [ 114.302574][ T54] Bluetooth: hci4: link tx timeout [ 114.308505][ T54] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 114.328597][ T7665] netlink: 'syz.1.389': attribute type 46 has an invalid length. [ 114.371861][ T7670] mac80211_hwsim hwsim11 : renamed from wlan1 (while UP) [ 114.857741][ T7685] netlink: 8 bytes leftover after parsing attributes in process `syz.1.396'. [ 114.962745][ T7699] netlink: 'syz.2.397': attribute type 1 has an invalid length. [ 114.971341][ T7700] netlink: 'syz.2.397': attribute type 1 has an invalid length. [ 115.083576][ T7704] netlink: 4 bytes leftover after parsing attributes in process `syz.4.400'. [ 115.205778][ T7721] netlink: 56 bytes leftover after parsing attributes in process `syz.0.402'. [ 115.210208][ T7722] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for ip6gretap1 [ 115.225159][ T7721] netlink: 16 bytes leftover after parsing attributes in process `syz.0.402'. [ 115.257672][ T7723] netlink: 'syz.0.402': attribute type 1 has an invalid length. [ 115.266965][ T7723] netlink: 'syz.0.402': attribute type 3 has an invalid length. [ 115.284545][ T7723] netlink: 224 bytes leftover after parsing attributes in process `syz.0.402'. [ 115.295056][ T7728] netlink: 'syz.1.406': attribute type 1 has an invalid length. [ 115.303410][ T7728] netlink: 4 bytes leftover after parsing attributes in process `syz.1.406'. [ 115.330111][ T7720] lo speed is unknown, defaulting to 1000 [ 115.347163][ T7730] netlink: 'syz.3.405': attribute type 1 has an invalid length. [ 115.775415][ T7750] netlink: 'syz.4.412': attribute type 5 has an invalid length. [ 115.826199][ T7748] lo speed is unknown, defaulting to 1000 [ 116.151101][ T7762] ip6t_srh: unknown srh invflags 4000 [ 116.219741][ T7764] lo speed is unknown, defaulting to 1000 [ 116.327306][ T5840] Bluetooth: hci4: command 0x0405 tx timeout [ 117.020865][ T7795] __nla_validate_parse: 4 callbacks suppressed [ 117.020884][ T7795] netlink: 4 bytes leftover after parsing attributes in process `syz.1.421'. [ 117.259061][ T7799] x_tables: duplicate underflow at hook 1 [ 117.292177][ T7799] netlink: 'syz.1.424': attribute type 1 has an invalid length. [ 117.317863][ T7799] netlink: 'syz.1.424': attribute type 3 has an invalid length. [ 117.341037][ T7799] netlink: 224 bytes leftover after parsing attributes in process `syz.1.424'. [ 118.215093][ T7839] netlink: 8 bytes leftover after parsing attributes in process `syz.2.435'. [ 118.236034][ T7844] netlink: 16 bytes leftover after parsing attributes in process `syz.1.436'. [ 118.381969][ T7825] netlink: 20 bytes leftover after parsing attributes in process `syz.3.431'. [ 118.494284][ T7825] netlink: 32 bytes leftover after parsing attributes in process `syz.3.431'. [ 118.558163][ T7825] netlink: 8 bytes leftover after parsing attributes in process `syz.3.431'. [ 118.834491][ T7863] lo speed is unknown, defaulting to 1000 [ 118.893315][ T7862] lo speed is unknown, defaulting to 1000 [ 119.098409][ T7871] lo: entered promiscuous mode [ 119.103362][ T7871] tunl0: entered promiscuous mode [ 119.143830][ T7871] gre0: entered promiscuous mode [ 119.158233][ T7871] gretap0: entered promiscuous mode [ 119.177793][ T7871] erspan0: entered promiscuous mode [ 119.186595][ T7871] ip_vti0: entered promiscuous mode [ 119.225674][ T7871] ip6_vti0: entered promiscuous mode [ 119.235006][ T7871] sit0: entered promiscuous mode [ 119.242877][ T7871] ip6tnl0: entered promiscuous mode [ 119.252568][ T7871] ip6gre0: entered promiscuous mode [ 119.259759][ T7871] syz_tun: entered promiscuous mode [ 119.265585][ T7871] ip6gretap0: entered promiscuous mode [ 119.285641][ T7871] bridge0: entered promiscuous mode [ 119.292831][ T7882] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 119.294904][ T7871] vcan0: entered promiscuous mode [ 119.331800][ T7871] bond0: entered promiscuous mode [ 119.343893][ T7871] bond_slave_0: entered promiscuous mode [ 119.358839][ T7871] bond_slave_1: entered promiscuous mode [ 119.365889][ T7871] team0: entered promiscuous mode [ 119.376419][ T7871] team_slave_0: entered promiscuous mode [ 119.383698][ T7871] team_slave_1: entered promiscuous mode [ 119.426772][ T7871] dummy0: entered promiscuous mode [ 119.438839][ T7871] nlmon0: entered promiscuous mode [ 119.444500][ T7871] caif0: entered promiscuous mode [ 119.462080][ T7871] batadv0: entered promiscuous mode [ 119.487717][ T7871] vxcan0: entered promiscuous mode [ 119.503394][ T7871] vxcan1: entered promiscuous mode [ 119.513570][ T7871] veth0: entered promiscuous mode [ 119.522898][ T7871] veth1: entered promiscuous mode [ 119.529438][ T7871] wg0: entered promiscuous mode [ 119.535604][ T7871] wg1: entered promiscuous mode [ 119.547858][ T7871] wg2: entered promiscuous mode [ 119.564183][ T7871] veth0_to_bridge: entered promiscuous mode [ 119.582739][ T7871] veth1_to_bridge: entered promiscuous mode [ 119.591231][ T7871] veth0_to_bond: entered promiscuous mode [ 119.598352][ T7871] veth1_to_bond: entered promiscuous mode [ 119.605056][ T7871] veth0_to_team: entered promiscuous mode [ 119.614041][ T7871] veth1_to_team: entered promiscuous mode [ 119.622146][ T7871] veth0_to_batadv: entered promiscuous mode [ 119.629824][ T7871] batadv_slave_0: entered promiscuous mode [ 119.636015][ T7871] veth1_to_batadv: entered promiscuous mode [ 119.643041][ T7871] batadv_slave_1: entered promiscuous mode [ 119.650245][ T7871] xfrm0: entered promiscuous mode [ 119.655673][ T7871] veth0_to_hsr: entered promiscuous mode [ 119.663472][ T7871] veth1_to_hsr: entered promiscuous mode [ 119.670159][ T7871] hsr0: entered promiscuous mode [ 119.675482][ T7871] veth1_virt_wifi: entered promiscuous mode [ 119.682560][ T7871] veth0_virt_wifi: entered promiscuous mode [ 119.689804][ T7871] net veth1_virt_wifi virt_wifi0: entered promiscuous mode [ 119.699690][ T7871] vlan0: entered promiscuous mode [ 119.705205][ T7871] vlan1: entered promiscuous mode [ 119.711190][ T7871] macvlan0: entered promiscuous mode [ 119.717738][ T7871] macvlan1: entered promiscuous mode [ 119.723423][ T7871] ipvlan0: entered promiscuous mode [ 119.730577][ T7871] ipvlan1: entered promiscuous mode [ 119.738348][ T7871] macvtap0: entered promiscuous mode [ 119.744127][ T7871] macsec0: entered promiscuous mode [ 119.750546][ T7871] geneve0: entered promiscuous mode [ 119.756168][ T7871] geneve1: entered promiscuous mode [ 119.762420][ T7871] netdevsim netdevsim2 netdevsim1: entered promiscuous mode [ 119.771972][ T7871] netdevsim netdevsim2 netdevsim2: entered promiscuous mode [ 119.781613][ T7871] netdevsim netdevsim2 netdevsim3: entered promiscuous mode [ 119.790541][ T7871] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 119.798716][ T7871] mac80211_hwsim hwsim9 wlan1: entered promiscuous mode [ 119.806236][ T7871] batadv1: entered promiscuous mode [ 119.812737][ T7871] macvlan2: entered promiscuous mode [ 119.818759][ T7871] gre1: entered promiscuous mode [ 119.823994][ T7871] syztnl1: entered promiscuous mode [ 119.829822][ T7871] syztnl2: entered promiscuous mode [ 119.835153][ T7871] bond1: entered promiscuous mode [ 119.856534][ T7878] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.864395][ T7878] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.878303][ T7878] bridge0: left promiscuous mode [ 119.895335][ T7878] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.902555][ T7878] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.911098][ T7878] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.919183][ T7878] bridge0: port 1(bridge_slave_0) entered forwarding state [ 119.959532][ T7878] bridge0: entered promiscuous mode [ 119.966409][ T7878] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 120.202486][ T7898] bridge_slave_0: left allmulticast mode [ 120.230830][ T7898] bridge_slave_0: left promiscuous mode [ 120.236717][ T7898] bridge0: port 1(bridge_slave_0) entered disabled state [ 120.253810][ T7902] validate_nla: 1 callbacks suppressed [ 120.253827][ T7902] netlink: 'syz.1.451': attribute type 10 has an invalid length. [ 120.274898][ T7898] bridge_slave_1: left allmulticast mode [ 120.280978][ T7898] bridge_slave_1: left promiscuous mode [ 120.287099][ T7898] bridge0: port 2(bridge_slave_1) entered disabled state [ 120.313454][ T7898] bond0: (slave bond_slave_0): Releasing backup interface [ 120.343977][ T7898] bond0: (slave bond_slave_1): Releasing backup interface [ 120.386153][ T7898] team0: Port device team_slave_0 removed [ 120.423042][ T7898] team0: Port device team_slave_1 removed [ 120.562878][ T7900] 8021q: adding VLAN 0 to HW filter on device bond0 [ 120.611217][ T7900] bond0: (slave wireguard0): The slave device specified does not support setting the MAC address [ 120.643803][ T7900] bond0: (slave wireguard0): Error -95 calling set_mac_address [ 120.729246][ T7902] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 120.839395][ T6591] ------------[ cut here ]------------ [ 120.844899][ T6591] DEBUG_LOCKS_WARN_ON(lock->magic != lock) [ 120.845000][ T6591] WARNING: CPU: 0 PID: 6591 at kernel/locking/mutex.c:564 __mutex_lock+0xdac/0xee0 [ 120.860305][ T6591] Modules linked in: [ 120.864238][ T6591] CPU: 0 UID: 0 PID: 6591 Comm: kbnepd bnep0 Not tainted 6.13.0-rc7-syzkaller-01160-g41c5d104f338 #0 [ 120.875181][ T6591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 120.885310][ T6591] RIP: 0010:__mutex_lock+0xdac/0xee0 [ 120.890706][ T6591] Code: 0f b6 04 38 84 c0 0f 85 1a 01 00 00 83 3d ef 33 4c 04 00 75 19 90 48 c7 c7 60 84 0a 8c 48 c7 c6 00 85 0a 8c e8 f5 cc 91 f5 90 <0f> 0b 90 90 90 e9 c7 f3 ff ff 90 0f 0b 90 e9 29 f8 ff ff 90 0f 0b [ 120.910582][ T6591] RSP: 0018:ffffc90003c57920 EFLAGS: 00010246 [ 120.917011][ T6591] RAX: 8101a5d5344d7500 RBX: ffff888020ec4cb0 RCX: ffff88805e061e00 [ 120.925223][ T6591] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 120.933264][ T6591] RBP: ffffc90003c57ab0 R08: ffffffff81602ac2 R09: 1ffff110170c519a [ 120.941301][ T6591] R10: dffffc0000000000 R11: ffffed10170c519b R12: 0000000000000000 [ 120.949330][ T6591] R13: 0000000000000000 R14: 1ffff9200078af38 R15: dffffc0000000000 [ 120.957394][ T6591] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 120.966352][ T6591] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 120.973100][ T6591] CR2: 00007ffc90ff68d8 CR3: 00000000644e6000 CR4: 00000000003526f0 [ 120.981221][ T6591] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 120.989264][ T6591] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 120.997288][ T6591] Call Trace: [ 121.000588][ T6591] [ 121.003534][ T6591] ? __warn+0x165/0x4d0 [ 121.007771][ T6591] ? __mutex_lock+0xdac/0xee0 [ 121.012475][ T6591] ? report_bug+0x2b3/0x500 [ 121.017244][ T6591] ? __mutex_lock+0xdac/0xee0 [ 121.021953][ T6591] ? handle_bug+0x60/0x90 [ 121.026308][ T6591] ? exc_invalid_op+0x1a/0x50 [ 121.031355][ T6591] ? asm_exc_invalid_op+0x1a/0x20 [ 121.036417][ T6591] ? __warn_printk+0x292/0x360 [ 121.041243][ T6591] ? __mutex_lock+0xdac/0xee0 [ 121.045951][ T6591] ? free_netdev+0x2d9/0x610 [ 121.051351][ T6591] ? __pfx___mutex_lock+0x10/0x10 [ 121.056413][ T6591] ? __pfx_kvfree_call_rcu+0x10/0x10 [ 121.061866][ T6591] ? dev_addr_check+0x6f/0x240 [ 121.066664][ T6591] ? dev_addr_flush+0x192/0x210 [ 121.071715][ T6591] free_netdev+0x2d9/0x610 [ 121.076167][ T6591] netdev_run_todo+0xf21/0x10d0 [ 121.081085][ T6591] ? __pfx_netdev_run_todo+0x10/0x10 [ 121.086392][ T6591] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 121.092712][ T6591] ? down_write+0x18c/0x220 [ 121.097259][ T6591] ? __pfx_down_write+0x10/0x10 [ 121.102131][ T6591] bnep_session+0x2e3c/0x3030 [ 121.106839][ T6591] ? __pfx_bnep_session+0x10/0x10 [ 121.111951][ T6591] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 121.118341][ T6591] ? __pfx_woken_wake_function+0x10/0x10 [ 121.124279][ T6591] ? __kthread_parkme+0x169/0x1d0 [ 121.129574][ T6591] ? __pfx_bnep_session+0x10/0x10 [ 121.134625][ T6591] kthread+0x2f0/0x390 [ 121.138770][ T6591] ? __pfx_bnep_session+0x10/0x10 [ 121.143810][ T6591] ? __pfx_kthread+0x10/0x10 [ 121.148480][ T6591] ret_from_fork+0x4b/0x80 [ 121.152934][ T6591] ? __pfx_kthread+0x10/0x10 [ 121.157588][ T6591] ret_from_fork_asm+0x1a/0x30 [ 121.162372][ T6591] [ 121.165413][ T6591] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 121.172703][ T6591] CPU: 0 UID: 0 PID: 6591 Comm: kbnepd bnep0 Not tainted 6.13.0-rc7-syzkaller-01160-g41c5d104f338 #0 [ 121.183563][ T6591] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 121.193635][ T6591] Call Trace: [ 121.196926][ T6591] [ 121.199872][ T6591] dump_stack_lvl+0x241/0x360 [ 121.204576][ T6591] ? __pfx_dump_stack_lvl+0x10/0x10 [ 121.209798][ T6591] ? __pfx__printk+0x10/0x10 [ 121.214412][ T6591] ? _printk+0xd5/0x120 [ 121.218589][ T6591] ? __init_begin+0x41000/0x41000 [ 121.223642][ T6591] ? vscnprintf+0x5d/0x90 [ 121.227997][ T6591] panic+0x349/0x880 [ 121.231918][ T6591] ? __warn+0x174/0x4d0 [ 121.236136][ T6591] ? __pfx_panic+0x10/0x10 [ 121.240572][ T6591] ? ret_from_fork_asm+0x1a/0x30 [ 121.245504][ T6591] __warn+0x344/0x4d0 [ 121.249479][ T6591] ? __mutex_lock+0xdac/0xee0 [ 121.254151][ T6591] report_bug+0x2b3/0x500 [ 121.258476][ T6591] ? __mutex_lock+0xdac/0xee0 [ 121.263235][ T6591] handle_bug+0x60/0x90 [ 121.267385][ T6591] exc_invalid_op+0x1a/0x50 [ 121.271885][ T6591] asm_exc_invalid_op+0x1a/0x20 [ 121.276734][ T6591] RIP: 0010:__mutex_lock+0xdac/0xee0 [ 121.282019][ T6591] Code: 0f b6 04 38 84 c0 0f 85 1a 01 00 00 83 3d ef 33 4c 04 00 75 19 90 48 c7 c7 60 84 0a 8c 48 c7 c6 00 85 0a 8c e8 f5 cc 91 f5 90 <0f> 0b 90 90 90 e9 c7 f3 ff ff 90 0f 0b 90 e9 29 f8 ff ff 90 0f 0b [ 121.301617][ T6591] RSP: 0018:ffffc90003c57920 EFLAGS: 00010246 [ 121.307680][ T6591] RAX: 8101a5d5344d7500 RBX: ffff888020ec4cb0 RCX: ffff88805e061e00 [ 121.315642][ T6591] RDX: 0000000000000000 RSI: 0000000000000001 RDI: 0000000000000000 [ 121.323631][ T6591] RBP: ffffc90003c57ab0 R08: ffffffff81602ac2 R09: 1ffff110170c519a [ 121.331629][ T6591] R10: dffffc0000000000 R11: ffffed10170c519b R12: 0000000000000000 [ 121.339611][ T6591] R13: 0000000000000000 R14: 1ffff9200078af38 R15: dffffc0000000000 [ 121.347580][ T6591] ? __warn_printk+0x292/0x360 [ 121.352351][ T6591] ? free_netdev+0x2d9/0x610 [ 121.356939][ T6591] ? __pfx___mutex_lock+0x10/0x10 [ 121.361971][ T6591] ? __pfx_kvfree_call_rcu+0x10/0x10 [ 121.367254][ T6591] ? dev_addr_check+0x6f/0x240 [ 121.372009][ T6591] ? dev_addr_flush+0x192/0x210 [ 121.376851][ T6591] free_netdev+0x2d9/0x610 [ 121.381265][ T6591] netdev_run_todo+0xf21/0x10d0 [ 121.386120][ T6591] ? __pfx_netdev_run_todo+0x10/0x10 [ 121.391398][ T6591] ? __pfx_unregister_netdevice_queue+0x10/0x10 [ 121.397633][ T6591] ? down_write+0x18c/0x220 [ 121.402132][ T6591] ? __pfx_down_write+0x10/0x10 [ 121.406979][ T6591] bnep_session+0x2e3c/0x3030 [ 121.411657][ T6591] ? __pfx_bnep_session+0x10/0x10 [ 121.416673][ T6591] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 121.423018][ T6591] ? __pfx_woken_wake_function+0x10/0x10 [ 121.428646][ T6591] ? __kthread_parkme+0x169/0x1d0 [ 121.433665][ T6591] ? __pfx_bnep_session+0x10/0x10 [ 121.438682][ T6591] kthread+0x2f0/0x390 [ 121.442748][ T6591] ? __pfx_bnep_session+0x10/0x10 [ 121.447763][ T6591] ? __pfx_kthread+0x10/0x10 [ 121.452350][ T6591] ret_from_fork+0x4b/0x80 [ 121.456756][ T6591] ? __pfx_kthread+0x10/0x10 [ 121.461340][ T6591] ret_from_fork_asm+0x1a/0x30 [ 121.466098][ T6591] [ 121.469392][ T6591] Kernel Offset: disabled [ 121.473708][ T6591] Rebooting in 86400 seconds..