last executing test programs: 26.625638887s ago: executing program 0 (id=21): setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000880)=0x9, 0x4) connect$inet6(0xffffffffffffffff, &(0x7f0000000000)={0xa, 0x4623, 0xfffffffd, @local, 0x6}, 0x1c) sendmmsg$inet6(0xffffffffffffffff, &(0x7f00000055c0)=[{{&(0x7f0000001640)={0xa, 0xf, 0xfffffc01, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0xe}, 0x1c, 0x0}}], 0x1, 0x8000) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f0000000900)="976d7a07eb881aba56b6", 0xa}], 0x1}}], 0x1, 0x0) 26.413505038s ago: executing program 0 (id=26): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00'}) sendmsg$nl_route(r0, 0x0, 0x40) 26.263727934s ago: executing program 0 (id=27): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$SEG6(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x810}, 0x8010) r1 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="02"], 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@cgroup=r4, 0x2, 0x0, 0x3ff, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_netrom_SIOCADDRT(r1, 0x890b, &(0x7f0000000dc0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={'nr', 0x0}, 0x1, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb6, 0x6, [@null, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 26.087807042s ago: executing program 0 (id=32): r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'dummy0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@newqdisc={0x40, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xb}, {0xffff, 0xffff}, {0x4}}, [@qdisc_kind_options=@q_etf={{0x8}, {0x14, 0x2, @TCA_ETF_PARMS={0x10, 0x1, {0x18cb, 0xb, 0x5}}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x20000005}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=@newqdisc={0x24, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x80000, {0x0, 0x0, 0x0, r1, {}, {0xd, 0xb}, {0xd, 0xb}}}, 0x24}, 0x1, 0x0, 0x0, 0x2000c061}, 0x400c000) 25.750379646s ago: executing program 0 (id=37): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c0003021400", 0x8, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000300)=0x5, 0x4) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000340)={'dummy0\x00', @remote}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 11.690258053s ago: executing program 0 (id=37): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c0003021400", 0x8, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000300)=0x5, 0x4) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) ioctl$SIOCSIFHWADDR(r0, 0x8924, &(0x7f0000000340)={'dummy0\x00', @remote}) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.70837556s ago: executing program 4 (id=295): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000008c0)="3bcbdb0fcfa026557d2ea2b0fa34b7b3ddf4e60fe678186210e935989ea66d7c81fcd371943f18f118107da91cf43c5479ca82428e90b96b3635a98e39939ef5109511d949224164c044f1", 0x4b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="13a8892019f1989dcb3695d96b609322d26e29fc35fee071c96d80bd46d6966cbe6b7a2cae610580a28150f9f09c86ff97e05d454faac2546a34871e68f5cbd68fd4b71e2aac0dc7620672a5d97f2b82603a6f9c25d5b78524ab47fb3c477a39625e82d11bae649b50912c5c3749d587d40f3b177c88c8e1a95a9580e76e4915e7a4d9d1bac139a4c4b3ea19d86435997790", 0x92}, {&(0x7f0000000bc0)='T[X!', 0x4}], 0x2}}, {{0x0, 0x0, &(0x7f0000004080)=[{0x0}, {&(0x7f0000000f00)="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", 0xa0c}], 0x2}}], 0x3, 0x4) 1.520690534s ago: executing program 1 (id=298): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="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"], 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="0100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="1400040076e674090000006f5f7465616d00000008000500060000"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x2400c8c0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302140006001e0089e9aa", 0xf, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000300)=0x5, 0x4) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000340)={'dummy0\x00', @remote}) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.42854934s ago: executing program 2 (id=299): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000880)=0x9, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4623, 0xfffffffd, @local, 0x6}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000055c0)=[{{&(0x7f0000001640)={0xa, 0xf, 0xfffffc01, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0xe}, 0x1c, 0x0}}], 0x1, 0x8000) sendmmsg$inet6(r0, &(0x7f0000002880), 0x0, 0x0) 1.375317486s ago: executing program 4 (id=300): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00', @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r1, @ANYBLOB="1400040076e674090000006f5f7465616d00000008000500060000"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x2400c8c0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa9", 0x10, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000300)=0x5, 0x4) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.360313309s ago: executing program 3 (id=301): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c40000001900674c0000000000000000fc00"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000000000000007008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000040000000000000000000000000400000000000000000000000000000a00100001"], 0xc4}}, 0x4c050) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x40000000000000}}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x1, 0x3, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x820}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x32}, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 1.219218096s ago: executing program 1 (id=302): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000008c0)="3bcbdb0fcfa026557d2ea2b0fa34b7b3ddf4e60fe678186210e935989ea66d7c81fcd371943f18f118107da91cf43c5479ca82428e90b96b3635a98e39939ef5109511d949224164c044f1", 0x4b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="13a8892019f1989dcb3695d96b609322d26e29fc35fee071c96d80bd46d6966cbe6b7a2cae610580a28150f9f09c86ff97e05d454faac2546a34871e68f5cbd6", 0x40}, {&(0x7f0000000bc0)}], 0x2}}, {{0x0, 0x0, &(0x7f0000004080)=[{0x0}, {&(0x7f0000000f00)="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", 0xa20}], 0x2}}], 0x3, 0x4) 1.155685415s ago: executing program 2 (id=303): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$SEG6(&(0x7f00000011c0), 0xffffffffffffffff) sendmsg$SEG6_CMD_DUMPHMAC(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000001240)={&(0x7f0000001200)={0x14, r1, 0xf21, 0x70bd2d, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x810}, 0x8010) r2 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0xb, 0x31, 0xffffffffffffffff, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000300)=ANY=[@ANYRES32=r3, @ANYRES32=r4, @ANYBLOB="02"], 0x10) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000180)={@cgroup=r5, 0x2, 0x0, 0x3ff, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) ioctl$sock_netrom_SIOCADDRT(r2, 0x890b, &(0x7f0000000dc0)={0x1, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @netrom={'nr', 0x0}, 0x1, 'syz0\x00', @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0xfffffdb6, 0x6, [@null, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}) 1.090190332s ago: executing program 3 (id=304): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000300)=ANY=[], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x2400c8c0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa9", 0x10, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000300)=0x5, 0x4) bind$alg(r2, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r3 = accept4(r2, 0x0, 0x0, 0x800) sendmmsg$alg(r3, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r3, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r4, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r5, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 1.044530653s ago: executing program 4 (id=306): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, 0x0, 0x0, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}}, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 983.147596ms ago: executing program 1 (id=307): sendmsg$BATADV_CMD_SET_HARDIF(0xffffffffffffffff, 0x0, 0x4005804) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13b}], 0x2}, 0x4048015) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000000)={'vcan0\x00'}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) 973.17578ms ago: executing program 2 (id=308): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_OPS_LEN={0x0, 0x3, 0x5}, @TCA_ACT_BPF_NAME={0x0, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0x0, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x0, 0x3, 0x9}, @TCA_ACT_BPF_FD={0x0, 0x5, r1}]}, {0x4}, {0xffffffffffffffae}, {0xc}}}]}]}, 0x64}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 763.583526ms ago: executing program 3 (id=309): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000008c0), r0) sendmsg$NLBL_UNLABEL_C_STATICLISTDEF(r0, &(0x7f0000000a00)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB], 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 758.424455ms ago: executing program 4 (id=310): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)=ANY=[@ANYBLOB="440000001000090400"/20, @ANYRES32=r2, @ANYBLOB="0200000000000000240012801100010062726964"], 0x44}, 0x1, 0x0, 0x0, 0x20000080}, 0x40) 671.274819ms ago: executing program 1 (id=311): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000540)={{0x14}, [@NFT_MSG_NEWRULE={0x14, 0x6, 0xa, 0x160b, 0x0, 0x0, {0x2, 0x0, 0x8}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x850}, 0x0) 632.375583ms ago: executing program 2 (id=312): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000200)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_JOIN_MESH(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000ffdbdf254400000008000300", @ANYRES32=r3, @ANYBLOB="0a0018000303030303034700100070000500"], 0x38}, 0x1, 0x0, 0x0, 0x40000d1}, 0x4000814) 544.267225ms ago: executing program 3 (id=313): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="600057fae5d8c8315ab20000000000000700000014000780080011400000008b05001500060000000500010006000000050005000a00000005000400020000000912020073797a300000000014000300686173683a69702c706f72742c6970000ded258748983fba362e30cf284134d4552e1d0b379949f77b10350a545b099854b738cd77572632eb35c797eeeaca2a58a56f9770f33b2798a7eaf7bbea2ebc595be637233ae571d8d55e15002d8b837f0df9c963c7e9088adfb0ae5d986e74cd9101230b1209451832d4c4e3571b019b0daad2a94a8da63d60016e5772e470cb4aa27869d6fd343086be5aacb3a3e1817f3019f9bebe20012c9bcd849d39d3666166825509a231"], 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa911d7c2290f0086dd1327c9167c64", 0x1e, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000300)=0x5, 0x4) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c2", 0x17) r2 = accept4(r1, 0x0, 0x0, 0x800) sendmmsg$alg(r2, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r3, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r4, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 450.745191ms ago: executing program 1 (id=314): sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f00000006c0)=ANY=[@ANYBLOB="600057fae5d8c8315ab20000000000000700000014000780080011400000008b05001500060000000500010006000000050005000a00000005000400020000000912020073797a300000000014000300686173683a69702c706f72742c6970000ded258748983fba362e30cf284134d4552e1d0b379949f77b10350a545b099854b738cd77572632eb35c797eeeaca2a58a56f9770f33b2798a7eaf7bbea2ebc595be637233ae571d8d55e15002d8b837f0df9c963c7e9088adfb0ae5d986e74cd9101230b1209451832d4c4e3571b019b0daad2a94a8da63d60016e5772e470cb4aa27869d6fd343086be5aacb3a3e1817f3019f9bebe20012c9bcd849d39d3666166825509a23126032f24bd7548165025080bb3bb78f7e228dd24fe74c99f65e8cefb2d1854def8524f31e35abd851bedff30a78cbe04066357b4454a4fa9a7e285334c864721c3aaf0b11cf066db54ceb0ac3f2f019650be327110ceee"], 0x60}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYBLOB="0100000000000000000007000000", @ANYRES32=r1, @ANYBLOB="1400040076e674090000006f5f7465616d00000008000500060000"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x2400c8c0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302140006001e0089e9aa", 0xf, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000300)=0x5, 0x4) bind$alg(r4, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) ioctl$SIOCSIFHWADDR(r2, 0x8924, &(0x7f0000000340)={'dummy0\x00', @remote}) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x800) sendmmsg$alg(r5, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r6, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r7, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 359.395836ms ago: executing program 3 (id=315): r0 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000880)=0x9, 0x4) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4623, 0xfffffffd, @local, 0x6}, 0x1c) sendmmsg$inet6(r0, &(0x7f00000055c0)=[{{&(0x7f0000001640)={0xa, 0xf, 0xfffffc01, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x12}}, 0xe}, 0x1c, 0x0}}], 0x1, 0x8000) sendmmsg$inet6(r0, &(0x7f0000002880), 0x0, 0x0) 353.446887ms ago: executing program 2 (id=316): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="c40000001900674c0000000000000000fc00"/32, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0100000000000000000000000000000000000000000000000000000000000000000000000000000007008000000000000000000000000000fcffffffffffffff0000000000000000b0ac00000000000000000000040000000000000000000000000400000000000000000000000000000a00100001"], 0xc4}}, 0x4c050) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=@updpolicy={0xfc, 0x19, 0x1, 0x0, 0x0, {{@in6=@rand_addr=' \x01\x00', @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x0, 0x40000000000000}}, [@tmpl={0x44, 0x5, [{{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x3c}, 0x0, @in=@broadcast, 0x0, 0x1, 0x3, 0x1}]}]}, 0xfc}, 0x1, 0x0, 0x0, 0x820}, 0x0) syz_emit_ethernet(0x46, &(0x7f00000009c0)={@link_local, @local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00', 0x10, 0x3a, 0xff, @dev={0xfe, 0x80, '\x00', 0x32}, @mcast2, {[], @ndisc_ra}}}}}, 0x0) 267.92193ms ago: executing program 4 (id=317): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00', @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r1, @ANYBLOB="1400040076e674090000006f5f7465616d00000008000500060000"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x2400c8c0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa9", 0x10, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000300)=0x5, 0x4) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 143.650255ms ago: executing program 2 (id=318): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000008c0)="3bcbdb0fcfa026557d2ea2b0fa34b7b3ddf4e60fe678186210e935989ea66d7c81fcd371943f18f118107da91cf43c5479ca82428e90b96b3635a98e39939ef5109511d949224164c044f1", 0x4b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="13a8892019f1989dcb3695d96b609322d26e29fc35fee071c96d80bd46d6966cbe6b7a2cae610580a28150f9f09c86ff97e05d454faac2546a34871e68f5cbd68fd4b71e2aac0dc7620672a5d97f2b82603a6f9c25d5b78524ab47fb3c477a39625e82d11bae649b50912c5c3749d587d40f3b177c88c8e1a95a9580e76e4915e7a4d9d1bac139a4c4b3ea19d86435997790", 0x92}, {&(0x7f0000000bc0)='T[X!', 0x4}], 0x2}}, {{0x0, 0x0, &(0x7f0000004080)=[{0x0}, {&(0x7f0000000f00)="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", 0x798}], 0x2}}], 0x3, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 143.474901ms ago: executing program 3 (id=319): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000008c0)="3bcbdb0fcfa026557d2ea2b0fa34b7b3ddf4e60fe678186210e935989ea66d7c81fcd371943f18f118107da91cf43c5479ca82428e90b96b3635a98e39939ef5109511d949224164c044f1", 0x4b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="13a8892019f1989dcb3695d96b609322d26e29fc35fee071c96d80bd46d6966cbe6b7a2cae610580a28150f9f09c86ff97e05d454faac2546a34871e", 0x3c}, {&(0x7f0000000bc0)}], 0x2}}, {{0x0, 0x0, &(0x7f0000004080)=[{0x0}, {&(0x7f0000000f00)="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", 0xa20}], 0x2}}], 0x3, 0x4) 49.00352ms ago: executing program 1 (id=320): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000300)=ANY=[@ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r1], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x2400c8c0) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa9", 0x10, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000300)=0x5, 0x4) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 0s ago: executing program 4 (id=321): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @empty}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000000e80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000006c0)="0d18687da3e7f33aed145cf8ff2d1e5a18c0d5f9856f4824f41040f6987d0b531da10713ed151bc4867681f28e033aef683334d03864ed30590dd4ea64a20ecbbc1346c9f42510d91eec0632885b7da95ca85f4b1435c5c1e993a85257df5f19bdfc5e038a16e6a8aef907e347081fdb93cee93217e11f19cde423e6138bd1b79ee615527ccaf8049959ac6e32af46d777ccb8c26ca925f69590df13a81aee3213e80ba5cacf1f930b3cc49093d11594ef13325790b55efbdc2dd99ed1c3c609a49cc15187", 0xc5}], 0x1}}], 0x1, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010600000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff1b000000020000000900010073797a30000001000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000680)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a01020000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000a"], 0x64}}, 0x0) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.171' (ED25519) to the list of known hosts. [ 83.494168][ T5833] cgroup: Unknown subsys name 'net' [ 83.626676][ T5833] cgroup: Unknown subsys name 'cpuset' [ 83.635795][ T5833] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 85.281200][ T5833] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.883101][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.891238][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.903208][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.915720][ T5854] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.923691][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.923826][ T5854] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.931704][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 87.943302][ T5854] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.952764][ T5854] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.966320][ T5854] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.974170][ T5854] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.990422][ T5858] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.000822][ T5858] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.002689][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.018897][ T5854] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.027627][ T5860] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.034732][ T5857] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.043845][ T5857] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.044085][ T5860] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.059594][ T5851] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.116824][ T5860] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.152008][ T5860] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.161122][ T5860] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.169753][ T5860] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.177529][ T5860] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 88.748533][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 88.912854][ T5843] chnl_net:caif_netlink_parms(): no params data found [ 88.924882][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 88.941754][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 89.058940][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.066667][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.074199][ T5848] bridge_slave_0: entered allmulticast mode [ 89.081618][ T5848] bridge_slave_0: entered promiscuous mode [ 89.129763][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.137531][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.145314][ T5848] bridge_slave_1: entered allmulticast mode [ 89.152595][ T5848] bridge_slave_1: entered promiscuous mode [ 89.171398][ T5862] chnl_net:caif_netlink_parms(): no params data found [ 89.315661][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.322894][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.330023][ T5846] bridge_slave_0: entered allmulticast mode [ 89.337800][ T5846] bridge_slave_0: entered promiscuous mode [ 89.346056][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.354416][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.361658][ T5845] bridge_slave_0: entered allmulticast mode [ 89.369125][ T5845] bridge_slave_0: entered promiscuous mode [ 89.377046][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.384334][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.391491][ T5845] bridge_slave_1: entered allmulticast mode [ 89.398929][ T5845] bridge_slave_1: entered promiscuous mode [ 89.408402][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.442270][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.449622][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.457270][ T5846] bridge_slave_1: entered allmulticast mode [ 89.464470][ T5846] bridge_slave_1: entered promiscuous mode [ 89.486741][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.569552][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.595570][ T5843] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.603772][ T5843] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.610946][ T5843] bridge_slave_0: entered allmulticast mode [ 89.619031][ T5843] bridge_slave_0: entered promiscuous mode [ 89.634883][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.646773][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.676757][ T5848] team0: Port device team_slave_0 added [ 89.685156][ T5848] team0: Port device team_slave_1 added [ 89.711016][ T5843] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.718991][ T5843] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.726494][ T5843] bridge_slave_1: entered allmulticast mode [ 89.734327][ T5843] bridge_slave_1: entered promiscuous mode [ 89.750048][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.841540][ T5845] team0: Port device team_slave_0 added [ 89.848774][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.855992][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.882018][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.924157][ T5862] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.931347][ T5862] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.938946][ T5862] bridge_slave_0: entered allmulticast mode [ 89.946270][ T5862] bridge_slave_0: entered promiscuous mode [ 89.955816][ T5846] team0: Port device team_slave_0 added [ 89.961925][ T5862] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.969145][ T5862] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.977081][ T5862] bridge_slave_1: entered allmulticast mode [ 89.984929][ T5862] bridge_slave_1: entered promiscuous mode [ 89.993401][ T5860] Bluetooth: hci0: command tx timeout [ 89.994555][ T5845] team0: Port device team_slave_1 added [ 90.020714][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.028118][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.054182][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.072493][ T5860] Bluetooth: hci1: command tx timeout [ 90.078998][ T5843] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.090334][ T5846] team0: Port device team_slave_1 added [ 90.137992][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.145016][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.153085][ T5856] Bluetooth: hci2: command tx timeout [ 90.171642][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.176588][ T5860] Bluetooth: hci3: command tx timeout [ 90.208256][ T5843] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.222866][ T5856] Bluetooth: hci4: command tx timeout [ 90.247810][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.255166][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.282588][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.323139][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.330125][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.356615][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.370446][ T5862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.383369][ T5862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.400369][ T5848] hsr_slave_0: entered promiscuous mode [ 90.407676][ T5848] hsr_slave_1: entered promiscuous mode [ 90.430960][ T5843] team0: Port device team_slave_0 added [ 90.438887][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.447462][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.473852][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.534243][ T5843] team0: Port device team_slave_1 added [ 90.543390][ T5862] team0: Port device team_slave_0 added [ 90.581225][ T5845] hsr_slave_0: entered promiscuous mode [ 90.587677][ T5845] hsr_slave_1: entered promiscuous mode [ 90.594961][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.602785][ T5845] Cannot create hsr debugfs directory [ 90.639730][ T5862] team0: Port device team_slave_1 added [ 90.690638][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.697702][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.723778][ T5843] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.784935][ T5843] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.791910][ T5843] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.818241][ T5843] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.875742][ T5846] hsr_slave_0: entered promiscuous mode [ 90.882061][ T5846] hsr_slave_1: entered promiscuous mode [ 90.888377][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.896028][ T5846] Cannot create hsr debugfs directory [ 90.909742][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.917223][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.947659][ T5862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.011588][ T5862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.018814][ T5862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.045442][ T5862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.140989][ T5843] hsr_slave_0: entered promiscuous mode [ 91.147443][ T5843] hsr_slave_1: entered promiscuous mode [ 91.154612][ T5843] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.162184][ T5843] Cannot create hsr debugfs directory [ 91.204057][ T5862] hsr_slave_0: entered promiscuous mode [ 91.210526][ T5862] hsr_slave_1: entered promiscuous mode [ 91.217474][ T5862] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.225322][ T5862] Cannot create hsr debugfs directory [ 91.533734][ T5848] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 91.548279][ T5848] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 91.590001][ T5848] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.632057][ T5848] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.749462][ T5845] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.767161][ T5845] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.791140][ T5845] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.825929][ T24] cfg80211: failed to load regulatory.db [ 91.835671][ T5845] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.896354][ T5846] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.910195][ T5846] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.930672][ T5846] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.970225][ T5846] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.062570][ T5856] Bluetooth: hci0: command tx timeout [ 92.078377][ T5862] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.089577][ T5862] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.116722][ T5862] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.131257][ T5862] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 92.154032][ T5856] Bluetooth: hci1: command tx timeout [ 92.189765][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.224118][ T5856] Bluetooth: hci2: command tx timeout [ 92.229281][ T5860] Bluetooth: hci3: command tx timeout [ 92.261236][ T5843] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.276128][ T5843] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.302957][ T5860] Bluetooth: hci4: command tx timeout [ 92.304491][ T5843] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.323770][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.343903][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.351302][ T5843] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.389007][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.396252][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.419442][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.437211][ T2997] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.444351][ T2997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.482188][ T64] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.489407][ T64] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.514617][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.521801][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.566283][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.633788][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.664589][ T2976] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.671723][ T2976] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.721980][ T2997] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.729185][ T2997] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.749876][ T5845] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 92.870497][ T5862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.975060][ T5843] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.068412][ T5862] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.106316][ T5843] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.122957][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.178874][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.186096][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.216656][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.223874][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.294556][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.301736][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.346153][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.353422][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.399324][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.530355][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.671210][ T5848] veth0_vlan: entered promiscuous mode [ 93.731325][ T5846] veth0_vlan: entered promiscuous mode [ 93.755681][ T5848] veth1_vlan: entered promiscuous mode [ 93.811991][ T5845] veth0_vlan: entered promiscuous mode [ 93.840892][ T5846] veth1_vlan: entered promiscuous mode [ 93.868803][ T5845] veth1_vlan: entered promiscuous mode [ 93.917617][ T5848] veth0_macvtap: entered promiscuous mode [ 93.955621][ T5848] veth1_macvtap: entered promiscuous mode [ 94.021935][ T5845] veth0_macvtap: entered promiscuous mode [ 94.056772][ T5846] veth0_macvtap: entered promiscuous mode [ 94.074877][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.100248][ T5846] veth1_macvtap: entered promiscuous mode [ 94.108637][ T5845] veth1_macvtap: entered promiscuous mode [ 94.118769][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.135310][ T5843] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.146219][ T5860] Bluetooth: hci0: command tx timeout [ 94.181287][ T2997] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.191646][ T2997] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.210723][ T2997] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.219964][ T2997] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.232727][ T5860] Bluetooth: hci1: command tx timeout [ 94.251103][ T5862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.274848][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.294430][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.304332][ T5860] Bluetooth: hci3: command tx timeout [ 94.304687][ T5856] Bluetooth: hci2: command tx timeout [ 94.328758][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.348129][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.376921][ T2976] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.385881][ T5856] Bluetooth: hci4: command tx timeout [ 94.425267][ T2976] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.425494][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.439155][ T2976] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.452226][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.479396][ T2976] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.491746][ T2976] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.515770][ T2976] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.525113][ T2976] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.558993][ T2997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.567371][ T2997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.582234][ T36] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.608791][ T5843] veth0_vlan: entered promiscuous mode [ 94.700832][ T5862] veth0_vlan: entered promiscuous mode [ 94.720994][ T5843] veth1_vlan: entered promiscuous mode [ 94.721753][ T5848] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 94.767840][ T5862] veth1_vlan: entered promiscuous mode [ 94.786739][ T38] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.797517][ T38] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.880447][ T2997] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.918140][ T2997] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.968765][ T5862] veth0_macvtap: entered promiscuous mode [ 95.011253][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.023988][ T5862] veth1_macvtap: entered promiscuous mode [ 95.033991][ T5843] veth0_macvtap: entered promiscuous mode [ 95.062555][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.119781][ T5843] veth1_macvtap: entered promiscuous mode [ 95.194504][ T2997] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.199672][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.217237][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.222600][ T2997] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.247272][ T5843] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.278438][ T5862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.333113][ T38] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.367209][ T38] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.410790][ T5969] sctp: [Deprecated]: syz.2.3 (pid 5969) Use of int in max_burst socket option deprecated. [ 95.410790][ T5969] Use struct sctp_assoc_value instead [ 95.434249][ T38] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.453027][ T38] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.475759][ T38] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.508087][ T38] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.539100][ T38] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.573575][ T38] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.789929][ T1038] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.817247][ T1038] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.888719][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.918884][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.020981][ T1038] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.051596][ T1038] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.189500][ T2976] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.224120][ T5856] Bluetooth: hci0: command tx timeout [ 96.237425][ T2976] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.287114][ T5986] netlink: 12 bytes leftover after parsing attributes in process `syz.4.13'. [ 96.304099][ T5856] Bluetooth: hci1: command tx timeout [ 96.384557][ T5856] Bluetooth: hci3: command tx timeout [ 96.387654][ T5860] Bluetooth: hci2: command tx timeout [ 96.472479][ T5860] Bluetooth: hci4: command tx timeout [ 96.555580][ T5992] netlink: 4 bytes leftover after parsing attributes in process `syz.0.15'. [ 96.796082][ T5998] Zero length message leads to an empty skb [ 96.834808][ T6001] netlink: 4 bytes leftover after parsing attributes in process `syz.3.17'. [ 97.013273][ T6008] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20'. [ 97.215831][ T6016] warning: `syz.1.23' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 97.260999][ T6021] netlink: 12 bytes leftover after parsing attributes in process `syz.4.25'. [ 97.874507][ T6038] netlink: 4 bytes leftover after parsing attributes in process `syz.3.36'. [ 97.906102][ T6039] netlink: 4 bytes leftover after parsing attributes in process `syz.4.35'. [ 97.954526][ T64] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.168564][ T64] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.261148][ T64] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.419790][ T64] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 98.553282][ T6055] netlink: 120 bytes leftover after parsing attributes in process `syz.3.44'. [ 98.855646][ T64] bridge_slave_1: left allmulticast mode [ 98.864778][ T64] bridge_slave_1: left promiscuous mode [ 98.906004][ T64] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.009921][ T64] bridge_slave_0: left allmulticast mode [ 99.019828][ T64] bridge_slave_0: left promiscuous mode [ 99.052692][ T64] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.188878][ T6079] netlink: 4 bytes leftover after parsing attributes in process `syz.3.52'. [ 99.200372][ T6070] netlink: 4 bytes leftover after parsing attributes in process `syz.2.50'. [ 99.259169][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 99.273262][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 99.285301][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 99.294669][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 99.305892][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 100.026392][ T64] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 100.044543][ T64] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 100.066202][ T64] bond0 (unregistering): Released all slaves [ 100.986716][ T64] hsr_slave_0: left promiscuous mode [ 101.026273][ T64] hsr_slave_1: left promiscuous mode [ 101.048588][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 101.069653][ T64] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 101.084868][ T64] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 101.099531][ T64] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 101.148647][ T64] veth1_macvtap: left promiscuous mode [ 101.166141][ T64] veth0_macvtap: left promiscuous mode [ 101.180001][ T64] veth1_vlan: left promiscuous mode [ 101.194109][ T64] veth0_vlan: left promiscuous mode [ 101.342842][ T5860] Bluetooth: hci3: command tx timeout [ 101.757350][ T64] team0 (unregistering): Port device team_slave_1 removed [ 101.795225][ T64] team0 (unregistering): Port device team_slave_0 removed [ 102.632242][ T6083] chnl_net:caif_netlink_parms(): no params data found [ 102.688034][ T6162] __nla_validate_parse: 6 callbacks suppressed [ 102.688053][ T6162] netlink: 4 bytes leftover after parsing attributes in process `syz.1.78'. [ 102.890876][ T6171] netlink: 12 bytes leftover after parsing attributes in process `syz.2.80'. [ 103.240051][ T6181] netlink: 28 bytes leftover after parsing attributes in process `syz.1.82'. [ 103.263399][ T6181] netlink: 28 bytes leftover after parsing attributes in process `syz.1.82'. [ 103.347739][ T6083] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.363101][ T6083] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.391282][ T6083] bridge_slave_0: entered allmulticast mode [ 103.431164][ T5860] Bluetooth: hci3: command tx timeout [ 103.443757][ T6083] bridge_slave_0: entered promiscuous mode [ 103.455020][ T6083] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.462443][ T6083] bridge0: port 2(bridge_slave_1) entered disabled state [ 103.469669][ T6083] bridge_slave_1: entered allmulticast mode [ 103.479105][ T6083] bridge_slave_1: entered promiscuous mode [ 103.651729][ T6083] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 103.694687][ T6083] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 103.975355][ T6083] team0: Port device team_slave_0 added [ 104.032053][ T6083] team0: Port device team_slave_1 added [ 104.040247][ T6214] netlink: 4 bytes leftover after parsing attributes in process `syz.4.94'. [ 104.358244][ T6083] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.368264][ T6083] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.445923][ T6083] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.492046][ T6226] netlink: 120 bytes leftover after parsing attributes in process `syz.4.99'. [ 104.520461][ T6083] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.550226][ T6083] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.608832][ T6083] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.913362][ T6083] hsr_slave_0: entered promiscuous mode [ 104.934290][ T6083] hsr_slave_1: entered promiscuous mode [ 105.117591][ T6249] netlink: 28 bytes leftover after parsing attributes in process `syz.1.107'. [ 105.166718][ T6249] netlink: 28 bytes leftover after parsing attributes in process `syz.1.107'. [ 105.277896][ T6258] netlink: 4 bytes leftover after parsing attributes in process `syz.3.110'. [ 105.502585][ T5860] Bluetooth: hci3: command tx timeout [ 105.967497][ T6281] netlink: 120 bytes leftover after parsing attributes in process `syz.1.118'. [ 107.416466][ T6332] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 107.583154][ T5860] Bluetooth: hci3: command tx timeout [ 107.960228][ T6083] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 108.012135][ T6083] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 108.071365][ T6083] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 108.138697][ T6083] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 108.439316][ T6083] 8021q: adding VLAN 0 to HW filter on device bond0 [ 108.564860][ T6083] 8021q: adding VLAN 0 to HW filter on device team0 [ 108.648985][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 108.656307][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 108.716591][ T6378] __nla_validate_parse: 7 callbacks suppressed [ 108.716609][ T6378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.151'. [ 108.732814][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 108.740030][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 109.679428][ T6083] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 109.938507][ T6083] veth0_vlan: entered promiscuous mode [ 109.965204][ T6083] veth1_vlan: entered promiscuous mode [ 109.981792][ T6423] netlink: 4 bytes leftover after parsing attributes in process `syz.4.166'. [ 110.081699][ T6083] veth0_macvtap: entered promiscuous mode [ 110.164553][ T6083] veth1_macvtap: entered promiscuous mode [ 110.271291][ T6083] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 110.341902][ T6083] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 110.421663][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.488250][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.565436][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.590626][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.649693][ T6445] netlink: 12 bytes leftover after parsing attributes in process `syz.4.174'. [ 110.902250][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 110.952612][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.083566][ T38] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.110263][ T38] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.187650][ T6463] netlink: 'syz.2.180': attribute type 1 has an invalid length. [ 111.226976][ T6463] netlink: 20 bytes leftover after parsing attributes in process `syz.2.180'. [ 111.292256][ T6463] netlink: 'syz.2.180': attribute type 1 has an invalid length. [ 111.297106][ T6468] netlink: 4 bytes leftover after parsing attributes in process `syz.4.183'. [ 111.351159][ T6463] netlink: 20 bytes leftover after parsing attributes in process `syz.2.180'. [ 111.395046][ T6463] netlink: 'syz.2.180': attribute type 1 has an invalid length. [ 111.405031][ T6463] netlink: 20 bytes leftover after parsing attributes in process `syz.2.180'. [ 111.473011][ T6463] netlink: 'syz.2.180': attribute type 1 has an invalid length. [ 111.509171][ T6463] netlink: 20 bytes leftover after parsing attributes in process `syz.2.180'. [ 111.533646][ T6463] netlink: 'syz.2.180': attribute type 1 has an invalid length. [ 111.541334][ T6463] netlink: 20 bytes leftover after parsing attributes in process `syz.2.180'. [ 111.555691][ T6463] netlink: 'syz.2.180': attribute type 1 has an invalid length. [ 111.568107][ T6463] netlink: 20 bytes leftover after parsing attributes in process `syz.2.180'. [ 111.582115][ T6463] netlink: 'syz.2.180': attribute type 1 has an invalid length. [ 111.598477][ T6463] netlink: 'syz.2.180': attribute type 1 has an invalid length. [ 111.608109][ T6463] netlink: 'syz.2.180': attribute type 1 has an invalid length. [ 111.619843][ T6463] netlink: 'syz.2.180': attribute type 1 has an invalid length. [ 112.105711][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.346879][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.474296][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.666446][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.187818][ T13] bridge_slave_1: left allmulticast mode [ 113.226339][ T13] bridge_slave_1: left promiscuous mode [ 113.232179][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 113.275793][ T6527] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 113.326151][ T13] bridge_slave_0: left allmulticast mode [ 113.331852][ T13] bridge_slave_0: left promiscuous mode [ 113.376613][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 113.741394][ T5856] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 113.754179][ T5856] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 113.763415][ T5856] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 113.772095][ T5856] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 113.781044][ T5856] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 114.062422][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.077582][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.088968][ T13] bond0 (unregistering): Released all slaves [ 114.585888][ T6566] __nla_validate_parse: 71 callbacks suppressed [ 114.585910][ T6566] netlink: 28 bytes leftover after parsing attributes in process `syz.1.210'. [ 114.655348][ T6566] netlink: 28 bytes leftover after parsing attributes in process `syz.1.210'. [ 114.668355][ T6571] netlink: 4 bytes leftover after parsing attributes in process `syz.2.212'. [ 115.080941][ T6587] netlink: 36 bytes leftover after parsing attributes in process `syz.4.218'. [ 115.132126][ T13] hsr_slave_0: left promiscuous mode [ 115.160169][ T13] hsr_slave_1: left promiscuous mode [ 115.170768][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.187675][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.237686][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.261803][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.301125][ T13] veth1_macvtap: left promiscuous mode [ 115.307535][ T13] veth0_macvtap: left promiscuous mode [ 115.313512][ T13] veth1_vlan: left promiscuous mode [ 115.318960][ T13] veth0_vlan: left promiscuous mode [ 115.823228][ T5860] Bluetooth: hci3: command tx timeout [ 115.975381][ T13] team0 (unregistering): Port device team_slave_1 removed [ 116.048665][ T13] team0 (unregistering): Port device team_slave_0 removed [ 116.828694][ T6629] netlink: 28 bytes leftover after parsing attributes in process `syz.3.225'. [ 116.885578][ T6629] netlink: 28 bytes leftover after parsing attributes in process `syz.3.225'. [ 117.063451][ T6639] netlink: 4 bytes leftover after parsing attributes in process `syz.2.227'. [ 117.138752][ T6544] chnl_net:caif_netlink_parms(): no params data found [ 117.362931][ T6651] netlink: 36 bytes leftover after parsing attributes in process `syz.4.231'. [ 117.700993][ T6544] bridge0: port 1(bridge_slave_0) entered blocking state [ 117.722052][ T6544] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.764708][ T6544] bridge_slave_0: entered allmulticast mode [ 117.800802][ T6544] bridge_slave_0: entered promiscuous mode [ 117.833316][ T6544] bridge0: port 2(bridge_slave_1) entered blocking state [ 117.867576][ T6544] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.882023][ T6544] bridge_slave_1: entered allmulticast mode [ 117.902437][ T5860] Bluetooth: hci3: command tx timeout [ 117.957937][ T6544] bridge_slave_1: entered promiscuous mode [ 117.977311][ T6674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.237'. [ 118.086932][ T6674] netlink: 4 bytes leftover after parsing attributes in process `syz.3.237'. [ 118.201880][ T6544] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 118.255996][ T6544] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 118.423071][ T6544] team0: Port device team_slave_0 added [ 118.480461][ T6544] team0: Port device team_slave_1 added [ 118.641943][ T6544] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 118.668798][ T6544] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.709186][ T6544] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 118.738066][ T6544] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 118.755148][ T6544] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 118.855012][ T6544] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 119.217466][ T6544] hsr_slave_0: entered promiscuous mode [ 119.249002][ T6544] hsr_slave_1: entered promiscuous mode [ 119.836952][ T6745] __nla_validate_parse: 7 callbacks suppressed [ 119.836972][ T6745] netlink: 36 bytes leftover after parsing attributes in process `syz.1.266'. [ 119.996300][ T5860] Bluetooth: hci3: command tx timeout [ 120.322505][ T6762] netlink: 28 bytes leftover after parsing attributes in process `syz.1.272'. [ 120.331425][ T6762] netlink: 28 bytes leftover after parsing attributes in process `syz.1.272'. [ 120.373238][ T6766] netlink: 4 bytes leftover after parsing attributes in process `syz.3.275'. [ 120.829763][ T6782] netlink: 36 bytes leftover after parsing attributes in process `syz.2.280'. [ 120.939551][ T6544] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 120.974352][ T6544] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 120.997993][ T6544] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 121.067021][ T6544] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 121.460278][ T6544] 8021q: adding VLAN 0 to HW filter on device bond0 [ 121.530887][ T6544] 8021q: adding VLAN 0 to HW filter on device team0 [ 121.554837][ T6816] netlink: 4 bytes leftover after parsing attributes in process `syz.4.289'. [ 121.637839][ T2997] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.645179][ T2997] bridge0: port 1(bridge_slave_0) entered forwarding state [ 121.722124][ T6817] netlink: 28 bytes leftover after parsing attributes in process `syz.3.290'. [ 121.765931][ T6817] netlink: 28 bytes leftover after parsing attributes in process `syz.3.290'. [ 121.779305][ T6827] netlink: 36 bytes leftover after parsing attributes in process `syz.2.294'. [ 121.845269][ T64] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.852507][ T64] bridge0: port 2(bridge_slave_1) entered forwarding state [ 122.027045][ T6544] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 122.062486][ T5860] Bluetooth: hci3: command tx timeout [ 122.342920][ T6848] netlink: 12 bytes leftover after parsing attributes in process `syz.3.301'. [ 122.789514][ T6544] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 123.079145][ T6544] veth0_vlan: entered promiscuous mode [ 123.134905][ T6872] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.176238][ T6544] veth1_vlan: entered promiscuous mode [ 123.328292][ T6544] veth0_macvtap: entered promiscuous mode [ 123.385083][ T6544] veth1_macvtap: entered promiscuous mode [ 123.467154][ T6544] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 123.528894][ T6544] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 123.617205][ T1038] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.620918][ T6896] ================================================================== [ 123.634032][ T6896] BUG: KASAN: slab-use-after-free in tcp_prune_ofo_queue+0x37e/0x6e0 [ 123.642149][ T6896] Read of size 4 at addr ffff888031956720 by task syz.2.318/6896 [ 123.649896][ T6896] [ 123.652273][ T6896] CPU: 0 UID: 0 PID: 6896 Comm: syz.2.318 Not tainted 6.16.0-rc5-syzkaller-01444-g55e8757c6962 #0 PREEMPT(full) [ 123.652298][ T6896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 123.652319][ T6896] Call Trace: [ 123.652327][ T6896] [ 123.652336][ T6896] dump_stack_lvl+0x189/0x250 [ 123.652363][ T6896] ? rcu_is_watching+0x15/0xb0 [ 123.652386][ T6896] ? __kasan_check_byte+0x12/0x40 [ 123.652411][ T6896] ? __pfx_dump_stack_lvl+0x10/0x10 [ 123.652432][ T6896] ? rcu_is_watching+0x15/0xb0 [ 123.652455][ T6896] ? lock_release+0x4b/0x3e0 [ 123.652475][ T6896] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 123.652500][ T6896] ? __virt_addr_valid+0x1c8/0x5c0 [ 123.652525][ T6896] ? __virt_addr_valid+0x4a5/0x5c0 [ 123.652552][ T6896] print_report+0xd2/0x2b0 [ 123.652571][ T6896] ? tcp_prune_ofo_queue+0x37e/0x6e0 [ 123.652595][ T6896] kasan_report+0x118/0x150 [ 123.652619][ T6896] ? tcp_prune_ofo_queue+0x37e/0x6e0 [ 123.652648][ T6896] tcp_prune_ofo_queue+0x37e/0x6e0 [ 123.652681][ T6896] tcp_try_rmem_schedule+0xb6b/0x1830 [ 123.652713][ T6896] tcp_data_queue+0x2223/0x6380 [ 123.652748][ T6896] ? __pfx_tcp_data_queue+0x10/0x10 [ 123.652769][ T6896] ? __pfx_tcp_urg+0x10/0x10 [ 123.652790][ T6896] ? read_tsc+0x9/0x20 [ 123.652810][ T6896] tcp_rcv_established+0xf9e/0x1eb0 [ 123.652835][ T6896] ? rt_is_expired+0x1c/0x2d0 [ 123.652869][ T6896] ? __pfx_tcp_rcv_established+0x10/0x10 [ 123.652889][ T6896] ? rt_is_expired+0x1c/0x2d0 [ 123.652917][ T6896] ? rt_is_expired+0x1c/0x2d0 [ 123.652947][ T6896] ? rt_is_expired+0x250/0x2d0 [ 123.652975][ T6896] ? __pfx_ipv4_dst_check+0x10/0x10 [ 123.653004][ T6896] ? __pfx_ipv4_dst_check+0x10/0x10 [ 123.653033][ T6896] tcp_v4_do_rcv+0xa23/0xce0 [ 123.653064][ T6896] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 123.653089][ T6896] __release_sock+0x21c/0x350 [ 123.653115][ T6896] release_sock+0x5f/0x1f0 [ 123.653141][ T6896] tcp_sendmsg+0x39/0x50 [ 123.653164][ T6896] __sock_sendmsg+0x19c/0x270 [ 123.653198][ T6896] __sys_sendto+0x3bd/0x520 [ 123.653225][ T6896] ? __pfx___sys_sendto+0x10/0x10 [ 123.653249][ T6896] ? do_futex+0x333/0x420 [ 123.653317][ T6896] ? rcu_is_watching+0x15/0xb0 [ 123.653344][ T6896] __x64_sys_sendto+0xde/0x100 [ 123.653374][ T6896] do_syscall_64+0xfa/0x3b0 [ 123.653400][ T6896] ? lockdep_hardirqs_on+0x9c/0x150 [ 123.653426][ T6896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.653445][ T6896] ? clear_bhb_loop+0x60/0xb0 [ 123.653468][ T6896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 123.653487][ T6896] RIP: 0033:0x7fb5c898e929 [ 123.653511][ T6896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 123.653527][ T6896] RSP: 002b:00007fb5c97e5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 123.653552][ T6896] RAX: ffffffffffffffda RBX: 00007fb5c8bb5fa0 RCX: 00007fb5c898e929 [ 123.653567][ T6896] RDX: 000000000000059a RSI: 0000200000000580 RDI: 0000000000000003 [ 123.653580][ T6896] RBP: 00007fb5c8a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 123.653592][ T6896] R10: 0000000010008095 R11: 0000000000000246 R12: 0000000000000000 [ 123.653604][ T6896] R13: 0000000000000000 R14: 00007fb5c8bb5fa0 R15: 00007ffcbdccdea8 [ 123.653629][ T6896] [ 123.653636][ T6896] [ 123.664602][ T1038] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 123.665522][ T6896] Allocated by task 6896: [ 123.982489][ T6896] kasan_save_track+0x3e/0x80 [ 123.987177][ T6896] __kasan_slab_alloc+0x6c/0x80 [ 123.992039][ T6896] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 123.997938][ T6896] __alloc_skb+0x112/0x2d0 [ 124.002378][ T6896] tcp_collapse+0xd78/0x1d80 [ 124.006974][ T6896] tcp_try_rmem_schedule+0x6a4/0x1830 [ 124.012359][ T6896] tcp_data_queue+0x2223/0x6380 [ 124.017209][ T6896] tcp_rcv_established+0xf9e/0x1eb0 [ 124.022411][ T6896] tcp_v4_do_rcv+0xa23/0xce0 [ 124.027016][ T6896] __release_sock+0x21c/0x350 [ 124.031695][ T6896] release_sock+0x5f/0x1f0 [ 124.036116][ T6896] tcp_sendmsg+0x39/0x50 [ 124.040362][ T6896] __sock_sendmsg+0x19c/0x270 [ 124.045040][ T6896] __sys_sendto+0x3bd/0x520 [ 124.049551][ T6896] __x64_sys_sendto+0xde/0x100 [ 124.054318][ T6896] do_syscall_64+0xfa/0x3b0 [ 124.058829][ T6896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.064723][ T6896] [ 124.067049][ T6896] Freed by task 6896: [ 124.071026][ T6896] kasan_save_track+0x3e/0x80 [ 124.075706][ T6896] kasan_save_free_info+0x46/0x50 [ 124.080742][ T6896] __kasan_slab_free+0x62/0x70 [ 124.085510][ T6896] kmem_cache_free+0x18f/0x400 [ 124.090279][ T6896] tcp_prune_ofo_queue+0x198/0x6e0 [ 124.095393][ T6896] tcp_try_rmem_schedule+0xb6b/0x1830 [ 124.100768][ T6896] tcp_data_queue+0x2223/0x6380 [ 124.105707][ T6896] tcp_rcv_established+0xf9e/0x1eb0 [ 124.110916][ T6896] tcp_v4_do_rcv+0xa23/0xce0 [ 124.115511][ T6896] __release_sock+0x21c/0x350 [ 124.120204][ T6896] release_sock+0x5f/0x1f0 [ 124.124630][ T6896] tcp_sendmsg+0x39/0x50 [ 124.128878][ T6896] __sock_sendmsg+0x19c/0x270 [ 124.133563][ T6896] __sys_sendto+0x3bd/0x520 [ 124.138083][ T6896] __x64_sys_sendto+0xde/0x100 [ 124.142853][ T6896] do_syscall_64+0xfa/0x3b0 [ 124.147365][ T6896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.153257][ T6896] [ 124.155591][ T6896] The buggy address belongs to the object at ffff888031956640 [ 124.155591][ T6896] which belongs to the cache skbuff_head_cache of size 240 [ 124.170163][ T6896] The buggy address is located 224 bytes inside of [ 124.170163][ T6896] freed 240-byte region [ffff888031956640, ffff888031956730) [ 124.184064][ T6896] [ 124.186397][ T6896] The buggy address belongs to the physical page: [ 124.192804][ T6896] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x31956 [ 124.201587][ T6896] anon flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 124.209150][ T6896] page_type: f5(slab) [ 124.213138][ T6896] raw: 00fff00000000000 ffff8881412b38c0 ffffea00013866c0 dead000000000005 [ 124.221720][ T6896] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 124.230298][ T6896] page dumped because: kasan: bad access detected [ 124.236719][ T6896] page_owner tracks the page as allocated [ 124.242517][ T6896] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52cc0(GFP_KERNEL|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5205, tgid 5205 (klogd), ts 32829813748, free_ts 32823502069 [ 124.261273][ T6896] post_alloc_hook+0x240/0x2a0 [ 124.266136][ T6896] get_page_from_freelist+0x21e4/0x22c0 [ 124.271696][ T6896] __alloc_frozen_pages_noprof+0x181/0x370 [ 124.277510][ T6896] alloc_pages_mpol+0x232/0x4a0 [ 124.282373][ T6896] allocate_slab+0x8a/0x3b0 [ 124.286890][ T6896] ___slab_alloc+0xbfc/0x1480 [ 124.291570][ T6896] kmem_cache_alloc_node_noprof+0x280/0x3c0 [ 124.297459][ T6896] __alloc_skb+0x112/0x2d0 [ 124.301883][ T6896] alloc_skb_with_frags+0xca/0x890 [ 124.307007][ T6896] sock_alloc_send_pskb+0x857/0x990 [ 124.312207][ T6896] unix_dgram_sendmsg+0x4f6/0x1870 [ 124.317344][ T6896] __sock_sendmsg+0x21c/0x270 [ 124.322021][ T6896] __sys_sendto+0x3bd/0x520 [ 124.326525][ T6896] __x64_sys_sendto+0xde/0x100 [ 124.331380][ T6896] do_syscall_64+0xfa/0x3b0 [ 124.335906][ T6896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.341805][ T6896] page last free pid 5214 tgid 5214 stack trace: [ 124.348124][ T6896] __free_frozen_pages+0xc71/0xe70 [ 124.353242][ T6896] __tlb_remove_table+0x2d2/0x3b0 [ 124.358274][ T6896] tlb_remove_table_rcu+0x85/0x100 [ 124.363388][ T6896] rcu_core+0xca8/0x1710 [ 124.367635][ T6896] handle_softirqs+0x286/0x870 [ 124.372417][ T6896] __irq_exit_rcu+0xca/0x1f0 [ 124.377031][ T6896] irq_exit_rcu+0x9/0x30 [ 124.381290][ T6896] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 124.386936][ T6896] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 124.392951][ T6896] [ 124.395277][ T6896] Memory state around the buggy address: [ 124.400903][ T6896] ffff888031956600: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 124.408960][ T6896] ffff888031956680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 124.417022][ T6896] >ffff888031956700: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 124.425094][ T6896] ^ [ 124.430201][ T6896] ffff888031956780: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 124.438263][ T6896] ffff888031956800: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 124.446318][ T6896] ================================================================== [ 124.511535][ T2976] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.525669][ T64] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.562630][ T6896] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 124.569890][ T6896] CPU: 0 UID: 0 PID: 6896 Comm: syz.2.318 Not tainted 6.16.0-rc5-syzkaller-01444-g55e8757c6962 #0 PREEMPT(full) [ 124.581815][ T6896] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 124.591904][ T6896] Call Trace: [ 124.595218][ T6896] [ 124.598174][ T6896] dump_stack_lvl+0x99/0x250 [ 124.602797][ T6896] ? __asan_memcpy+0x40/0x70 [ 124.607412][ T6896] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.612814][ T6896] ? __pfx__printk+0x10/0x10 [ 124.617443][ T6896] panic+0x2db/0x790 [ 124.621360][ T6896] ? __pfx_preempt_schedule+0x10/0x10 [ 124.626785][ T6896] ? __pfx_panic+0x10/0x10 [ 124.631239][ T6896] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 124.637158][ T6896] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 124.643502][ T6896] ? tcp_prune_ofo_queue+0x37e/0x6e0 [ 124.648798][ T6896] check_panic_on_warn+0x89/0xb0 [ 124.653751][ T6896] ? tcp_prune_ofo_queue+0x37e/0x6e0 [ 124.659156][ T6896] end_report+0x78/0x160 [ 124.663405][ T6896] kasan_report+0x129/0x150 [ 124.667923][ T6896] ? tcp_prune_ofo_queue+0x37e/0x6e0 [ 124.673234][ T6896] tcp_prune_ofo_queue+0x37e/0x6e0 [ 124.678367][ T6896] tcp_try_rmem_schedule+0xb6b/0x1830 [ 124.683760][ T6896] tcp_data_queue+0x2223/0x6380 [ 124.688632][ T6896] ? __pfx_tcp_data_queue+0x10/0x10 [ 124.693859][ T6896] ? __pfx_tcp_urg+0x10/0x10 [ 124.698455][ T6896] ? read_tsc+0x9/0x20 [ 124.702523][ T6896] tcp_rcv_established+0xf9e/0x1eb0 [ 124.707724][ T6896] ? rt_is_expired+0x1c/0x2d0 [ 124.712412][ T6896] ? __pfx_tcp_rcv_established+0x10/0x10 [ 124.718045][ T6896] ? rt_is_expired+0x1c/0x2d0 [ 124.722818][ T6896] ? rt_is_expired+0x1c/0x2d0 [ 124.727507][ T6896] ? rt_is_expired+0x250/0x2d0 [ 124.732284][ T6896] ? __pfx_ipv4_dst_check+0x10/0x10 [ 124.737500][ T6896] ? __pfx_ipv4_dst_check+0x10/0x10 [ 124.742710][ T6896] tcp_v4_do_rcv+0xa23/0xce0 [ 124.747308][ T6896] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 124.752440][ T6896] __release_sock+0x21c/0x350 [ 124.757131][ T6896] release_sock+0x5f/0x1f0 [ 124.761553][ T6896] tcp_sendmsg+0x39/0x50 [ 124.765799][ T6896] __sock_sendmsg+0x19c/0x270 [ 124.770480][ T6896] __sys_sendto+0x3bd/0x520 [ 124.774995][ T6896] ? __pfx___sys_sendto+0x10/0x10 [ 124.780027][ T6896] ? do_futex+0x333/0x420 [ 124.784380][ T6896] ? rcu_is_watching+0x15/0xb0 [ 124.789158][ T6896] __x64_sys_sendto+0xde/0x100 [ 124.793935][ T6896] do_syscall_64+0xfa/0x3b0 [ 124.798444][ T6896] ? lockdep_hardirqs_on+0x9c/0x150 [ 124.803650][ T6896] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.809719][ T6896] ? clear_bhb_loop+0x60/0xb0 [ 124.814399][ T6896] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.820294][ T6896] RIP: 0033:0x7fb5c898e929 [ 124.824712][ T6896] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 124.844325][ T6896] RSP: 002b:00007fb5c97e5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 124.852745][ T6896] RAX: ffffffffffffffda RBX: 00007fb5c8bb5fa0 RCX: 00007fb5c898e929 [ 124.860720][ T6896] RDX: 000000000000059a RSI: 0000200000000580 RDI: 0000000000000003 [ 124.868689][ T6896] RBP: 00007fb5c8a10b39 R08: 0000000000000000 R09: 0000000000000000 [ 124.876667][ T6896] R10: 0000000010008095 R11: 0000000000000246 R12: 0000000000000000 [ 124.884644][ T6896] R13: 0000000000000000 R14: 00007fb5c8bb5fa0 R15: 00007ffcbdccdea8 [ 124.892717][ T6896] [ 124.896068][ T6896] Kernel Offset: disabled [ 124.900398][ T6896] Rebooting in 86400 seconds..