last executing test programs: 4.834168127s ago: executing program 2 (id=166): r0 = socket(0x10, 0x3, 0x0) r1 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000540)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8}, @TCA_FQ_PIE_TARGET={0x8}]}}]}, 0x44}}, 0x0) sendmsg$IPCTNL_MSG_CT_GET_CTRZERO(r0, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000002c0)={&(0x7f0000000180)={0x12c, 0x3, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x1}, [@CTA_SEQ_ADJ_REPLY={0x14, 0x10, 0x0, 0x1, [@CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x7fffffff}]}, @CTA_SEQ_ADJ_REPLY={0x2c, 0x10, 0x0, 0x1, [@CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x8}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x6}, @CTA_SEQADJ_OFFSET_AFTER={0x8, 0x3, 0x1, 0x0, 0x1}, @CTA_SEQADJ_CORRECTION_POS={0x8, 0x1, 0x1, 0x0, 0x1bf}, @CTA_SEQADJ_OFFSET_BEFORE={0x8, 0x2, 0x1, 0x0, 0x3}]}, @CTA_TUPLE_MASTER={0x58, 0xe, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @loopback}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @rand_addr=0x64010100}}}]}, @CTA_ID={0x8, 0xc, 0x1, 0x0, 0x4}, @CTA_TUPLE_MASTER={0x5c, 0xe, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x79}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x21}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0xa9}}]}, @CTA_HELP={0x14, 0x5, 0x0, 0x1, {0xf, 0x1, 'tftp-20000\x00'}}, @CTA_ZONE={0x6, 0x12, 0x1, 0x0, 0x4}]}, 0x12c}, 0x1, 0x0, 0x0, 0x48004}, 0x8801) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYRESHEX], 0x54}}, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x800448d3, &(0x7f00000000c0)) r4 = socket(0xa, 0x3, 0x3a) setsockopt$inet6_int(r4, 0x29, 0xd1, &(0x7f0000000040)=0xd758, 0x4) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x89e1, &(0x7f0000000000)) connect$phonet_pipe(r4, &(0x7f0000000000)={0x23, 0x5, 0x10, 0x9}, 0x10) 4.364078388s ago: executing program 2 (id=171): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=ANY=[@ANYBLOB="a00000004800010000000000000000000a000000", @ANYRES32=0x0, @ANYBLOB="0000000014000100fe8000000020000000000000000000000800020000000000080002000000000014000100fe800000000000000000600000000000080002000000000014000100ff"], 0xa0}}, 0x0) 4.176830849s ago: executing program 2 (id=175): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000018150000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)={{0x14}, [], {0x14}}, 0x28}, 0x1, 0x0, 0x0, 0x4}, 0x4000000) socket$nl_route(0x10, 0x3, 0x0) r3 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000480)={0x0, &(0x7f0000000380)=""/254, 0x0, 0xfe, 0x1}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x18, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, r3, 0x1, 0xffffffff}, 0x48) r4 = socket$kcm(0x29, 0x5, 0x0) close(r4) sendmsg$NFT_BATCH(r0, &(0x7f0000000500)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f00000004c0)={&(0x7f00000025c0)={{0x14}, [@NFT_MSG_NEWCHAIN={0x24, 0x3, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xfffffffffffffffd}]}, @NFT_MSG_NEWSETELEM={0x14, 0xc, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0xa}}, @NFT_MSG_NEWFLOWTABLE={0x1c, 0x16, 0xa, 0x101, 0x0, 0x0, {0x3, 0x0, 0x8}, [@NFTA_FLOWTABLE_FLAGS={0x8}]}, @NFT_MSG_NEWOBJ={0x1c, 0x12, 0xa, 0x201, 0x0, 0x0, {0x7, 0x0, 0x2}, @NFT_OBJECT_QUOTA=@NFTA_OBJ_TYPE={0x8}}, @NFT_MSG_NEWFLOWTABLE={0x20, 0x16, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x5}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz0\x00'}, @NFTA_CHAIN_POLICY={0x8, 0x5, 0x1, 0x0, 0xffffffffffffffff}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELSETELEM={0x11f0, 0xe, 0xa, 0x201, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x11d0, 0x3, 0x0, 0x1, [{0x2c, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPR={0x4}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_TIMEOUT={0xc}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}, {0x11a0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x4}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_KEY={0x1080, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x31, 0x1, "d486c9b924e38e07e19bfc1bbe369d4ba55c6c230fbc8c7696bdf4e79ab9c3cc140cf56715c1f12bf2b06fdadb"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x40, 0x3, 0x1, 0x0, 0x95}]}, @NFTA_DATA_VALUE={0x25, 0x1, "ee95a49aba5f345275617baa9a128df3b8c548957c01244ebcac2d9fda9161fa36"}]}, @NFTA_SET_ELEM_KEY_END={0x68, 0xa, 0x0, 0x1, [@NFTA_DATA_VALUE={0x58, 0x1, "73b6a2e17abaa682969603cea446347b368c6a747548fc5de0a859f0dfb7f2ca7f0eeea395f1c58144a3da3ddb86e3e7b3ed960640e2f2120c5b7202e4ca0b1743d7abbb923ae8c0ef3e31c0faab1bef24bc6a1f"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0xffff}]}]}, @NFTA_SET_ELEM_USERDATA={0x60, 0x6, 0x1, 0x0, "a8aba29fe03f9eb2e828c69b97ac231a2d8013a46cb6d5a125850ddbc75c6bbb109d331809f4c4479198ff7031a8aff068ccb4c11231638e18de007e6018c1558ba20bc863149da2f4f58f8ca6648870e501207592570d2d29db37f1"}, @NFTA_SET_ELEM_KEY_END={0x38, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x592}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x5}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELFLOWTABLE={0x128, 0x18, 0xa, 0x201, 0x0, 0x0, {0x3}, [@NFTA_FLOWTABLE_HOOK={0x2c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_FLAGS={0x8, 0x7, 0x1, 0x0, 0x1}, @NFTA_FLOWTABLE_HOOK={0xd8, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0xa4, 0x3, 0x0, 0x1, [{0x14, 0x1, 'bridge0\x00'}, {0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'erspan0\x00'}, {0x14, 0x1, 'tunl0\x00'}, {0x14, 0x1, 'veth1_to_team\x00'}, {0x14, 0x1, 'ip6erspan0\x00'}, {0x14, 0x1, 'syz_tun\x00'}, {0x14, 0x1, 'vlan0\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'pim6reg\x00'}]}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_NUM={0x8}]}]}], {0x14}}, 0x1404}, 0x1, 0x0, 0x0, 0x4008000}, 0x4000040) r5 = socket$kcm(0x2b, 0x1, 0x0) close(r5) socket(0x2b, 0x80801, 0x1) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r6, 0x84, 0xc, &(0x7f0000000000), 0x4) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f00000001c0)={0x0, 0x10, &(0x7f0000000400)=[@in={0x2, 0x4e22, @loopback}]}, &(0x7f0000000200)=0x10) syz_emit_ethernet(0x6a, &(0x7f0000000340)={@broadcast, @dev, @void, {@ipv4={0x800, @gre={{0x5, 0x4, 0x3, 0x0, 0x5c, 0x0, 0x0, 0x0, 0x2f, 0x0, @private, @multicast1}, {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x4, 0x8100, 0x2, 0x0, [], "7f1a"}, {0x0, 0x0, 0x0, 0x0, 0x11, 0x0, 0x800, [0x0]}, {}, {0xdd86}}}}}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r7, &(0x7f00000001c0)="c2", 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, 0x1c) r8 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r8, 0x6, 0xd, &(0x7f0000000100)='veno\x00', 0x5) ioctl$F2FS_IOC_MOVE_RANGE(r7, 0xc020f509, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000200)={'syztnl2\x00', 0x0, 0x2f, 0x1, 0xb, 0x5, 0x0, @empty, @dev={0xfe, 0x80, '\x00', 0x3d}, 0x8, 0x700, 0xffffffc0}}) r9 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r9, 0x8946, &(0x7f0000000940)={'geneve0\x00', &(0x7f0000000900)=@ethtool_pauseparam}) shutdown(r7, 0x1) socket$inet(0x2, 0x80001, 0x84) 4.088476935s ago: executing program 1 (id=176): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000040), r0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x3, 0x4, &(0x7f0000001300)=@framed={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, [@ldst={0x1, 0x0, 0x2, 0x0, 0x1, 0x38}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb}, 0x90) r2 = socket$packet(0x11, 0x2, 0x300) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='blkio.bfq.io_service_bytes_recursive\x00', 0x275a, 0x0) write$binfmt_script(r3, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000000c0)={0x0, 0x3, 0x6, @random="cea0300a1672"}, 0x10) close(r2) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000100)={0x1, 0x58, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) sendmsg$GTP_CMD_GETPDP(r0, &(0x7f0000000240)={&(0x7f0000000000), 0xc, &(0x7f0000000140)={&(0x7f00000001c0)={0x60, r1, 0x8, 0x70bd2d, 0x25dfdbfd, {}, [@GTPA_O_TEI={0x8, 0x9, 0x4}, @GTPA_NET_NS_FD={0x8}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_MS_ADDRESS={0x8, 0x5, @local}, @GTPA_MS_ADDRESS={0x8, 0x5, @multicast2}, @GTPA_LINK={0x8, 0x1, r4}, @GTPA_FLOW={0x6, 0x6, 0x4}, @GTPA_MS_ADDR6={0x14, 0xc, @remote}]}, 0x60}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0x34, 0x0, 0x20, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_TX_MAX_FRAMES_HIGH={0x8, 0x16, 0x3ff}, @ETHTOOL_A_COALESCE_TX_USECS_IRQ={0x8, 0x8, 0xb17}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_TX={0x5}, @ETHTOOL_A_COALESCE_TX_MAX_FRAMES_LOW={0x8, 0x11, 0x2}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000c40), r5) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r5, &(0x7f0000000d40)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x54, r6, 0x1, 0x0, 0x0, {0x6, 0x0, 0x900}, [@NLBL_UNLABEL_A_IPV6ADDR={0x14, 0x2, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, @NLBL_UNLABEL_A_SECCTX={0xf, 0x7, 'unconfined\x00'}, @NLBL_UNLABEL_A_IPV6MASK={0x14, 0x3, @ipv4={'\x00', '\xff\xff', @loopback}}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @multicast2}]}, 0x54}, 0x2, 0x34005}, 0x0) sendmsg$TIPC_NL_BEARER_SET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="01000000000000000000050000002dec1a0d88f962aab5d6544dd37b26d84b7d0138d32685f5937d64b938684d7eb4c6a68e0498c43aa2f51e59d65dd8e33ad3075a2b5a0e1a5ec43a666275922c9d10538bd02878d4b00a8d4b5b6f6d20fddff6f5d2b8d3928422f5e79d912eb1b11ae7fafedaf229259acac59fb7c86b0c566435c2e7fcb33920607813a0752c8a"], 0x14}}, 0x0) 3.814676383s ago: executing program 1 (id=180): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x1}}, @TCA_MPLS_BOS={0x5}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGPGRP(r1, 0x8904, &(0x7f0000003a00)) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f00000000c0)={0x26, 'rng\x00', 0x0, 0x0, 'ansi_cprng\x00'}, 0x58) bind$alg(0xffffffffffffffff, &(0x7f00000001c0)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_pr_hmac_sha256\x00'}, 0x58) getsockopt$inet6_IPV6_IPSEC_POLICY(0xffffffffffffffff, 0x29, 0x22, &(0x7f0000004e40)={{{@in6=@private0, @in=@empty}}, {{@in6=@remote}, 0x0, @in=@initdev}}, &(0x7f0000004f40)=0xe8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) sendmsg$inet(0xffffffffffffffff, 0x0, 0x0) recvmsg$unix(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000580), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r5) r6 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r5, &(0x7f0000000000)={0xa, 0x4e22, 0x0, @local, 0xb}, 0x1c) listen(r6, 0x0) syz_emit_ethernet(0x9a, &(0x7f0000000500)={@local, @local, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "101040", 0x64, 0x6, 0x0, @remote, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x19, 0xc2, 0x0, 0x0, 0x0, {[@generic={0xfe, 0x10, "b9104e2593fb47166278b0f8c6b4"}, @generic={0x0, 0xa, "8bfbd54ae56dd076"}, @generic={0x0, 0xd, "3816eb47eb1bad12f07e50"}, @fastopen={0x22, 0xf, "94589a8c513d0245058a010000"}, @window={0x3, 0x3, 0xe}, @exp_fastopen={0xfe, 0x10, 0xf989, "3a157dd3de0d73f3b51d0dba"}, @exp_fastopen={0xfe, 0x4}]}}}}}}}}, 0x0) unshare(0xe020600) r7 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout_data(r7, 0x107, 0x16, 0x0, 0x0) sendmsg$inet(r4, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r3, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080), 0x100}, 0x0) r8 = bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x12, 0x1, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x4, '\x00', 0x0, 0x0, r8, 0x8, &(0x7f0000000140)={0xc}, 0x8, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x9}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x9d, 0x10001, 0x9, 0x1}, 0x48) socket$nl_route(0x10, 0x3, 0x0) 3.164623503s ago: executing program 2 (id=188): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x5, &(0x7f0000000280)=@framed={{}, [@map_idx_val={0x18, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000340)={'syz_tun\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000e00)={&(0x7f0000000000)=@ipv4_newaddr={0x3c, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, r3}, [@IFA_BROADCAST={0x8, 0x4, @dev}, @IFA_LABEL={0x14}, @IFA_LOCAL={0x8, 0x2, @remote}]}, 0x3c}}, 0x0) bind$inet(r0, &(0x7f0000000240)={0x2, 0x4e20, @multicast1}, 0x10) connect$inet(r0, &(0x7f0000ccb000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x23}}, 0x10) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1, 0x3, &(0x7f0000001a00)=ANY=[], &(0x7f00002bf000)='GPL\x00', 0x4, 0xb7, &(0x7f0000000040)=""/183, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x90) socket$netlink(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_KEY(0xffffffffffffffff, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000400)={&(0x7f00000001c0)=ANY=[@ANYBLOB="508f000000", @ANYRES16=0x0, @ANYBLOB="000129bd7000fcdbdf250c0000000c009900000000003a00000009000700b1467552c5000000040028001000508009000100f84c95c0c2000000040028000a0006000802110000010000"], 0x50}, 0x1, 0x0, 0x0, 0x20000040}, 0x4000) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, &(0x7f0000000180)={r0, r4}) sendmmsg$inet(r5, &(0x7f0000001500)=[{{0x0, 0xffffffcf, &(0x7f0000000b00)=[{&(0x7f00000002c0)="89", 0x28000}, {0x0}], 0x2, &(0x7f0000000e40)=ANY=[], 0xd0}}, {{0x0, 0x0, 0x0}}], 0x2, 0x0) close(r5) 2.854053874s ago: executing program 1 (id=191): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f0000000140)={'netdevsim0\x00', &(0x7f0000000840)=@ethtool_ringparam={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0xdd8b}}) r1 = socket$kcm(0x10, 0x2, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000012c0)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_NET_NS_PID={0x8}, @IFLA_ALT_IFNAME={0x14, 0x35, 'hsr0\x00'}]}, 0x3c}}, 0x0) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000180)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c00f0ffffff180e000a001400000002801687121f", 0x2e}], 0x1}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="1801000000000000000000005efe2100850000006d00000095"], &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) r7 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={&(0x7f0000000000)='kmem_cache_free\x00', r6}, 0x10) tee(r5, r7, 0x6, 0x0) setsockopt$packet_tx_ring(0xffffffffffffffff, 0x10f, 0x87, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000440)) sendmsg$BATADV_CMD_SET_MESH(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000480)={0x2c, r4, 0x1, 0x0, 0xfffffffe, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0xff}, @BATADV_ATTR_GW_BANDWIDTH_DOWN={0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x7}]}, 0x2c}}, 0x0) 2.480185302s ago: executing program 1 (id=194): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f0000000040)={0xcd, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="020300030e000000000700000000000004000900a0000000e9255bb992464e73a02159d3720df19f7a1dfec30000000003000600000000000200000000000000000000000000000002000100000000fffffffb0d00000000030005000000000002"], 0x70}, 0x1, 0x7}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ffd000/0x3000)=nil, 0x3000, 0xc, 0x20010, r1, 0x23cea000) 2.204094849s ago: executing program 2 (id=198): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r1 = socket$inet_udp(0x2, 0x2, 0x0) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x10, &(0x7f0000000700)=ANY=[@ANYRESOCT], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000000)={0x0, 0xffffffffffffffff, 0x0, 0x24, &(0x7f0000000180)='/proc/sys/net/ipv4/vs/sync_qlen_max\x00'}, 0x30) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r2, &(0x7f0000000100), 0xfecc) (async) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r2, 0x0) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$cgroup_int(r3, &(0x7f0000000600), 0x3fffff) (async) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x14, 0x0, 0x0, 0x0, 0x0, {0x30, 0x0, 0x600}}, 0x14}}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r5 = socket$netlink(0x10, 0x3, 0xe) (async) r6 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), r2) sendmsg$BATADV_CMD_TP_METER(r5, &(0x7f00000005c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x80000400}, 0xc, &(0x7f0000000580)={&(0x7f0000000440)={0x54, r6, 0x100, 0x70bd26, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x1}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x9}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_GW_SEL_CLASS={0x8, 0x34, 0x3}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000004}, 0x4044000) write$binfmt_script(r4, &(0x7f0000000100), 0xfecc) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000210000000000000000000010"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r4, 0x0) (async, rerun: 32) bpf$BPF_GET_BTF_INFO(0xf, 0x0, 0x0) (async, rerun: 32) bpf$BPF_BTF_GET_FD_BY_ID(0x13, 0x0, 0x0) (async) bpf$BPF_PROG_QUERY(0x1e, &(0x7f0000000240)={@cgroup, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) sendmmsg$inet(r1, 0x0, 0x0, 0x0) recvmmsg(r1, &(0x7f0000000200)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000080)=""/54, 0x36}], 0x1}}], 0x1, 0x40002110, 0x0) (async) r7 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000040), r0) (async) ioctl$SIOCRSSL2CALL(r4, 0x89e2, &(0x7f0000000640)=@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}) sendmsg$NLBL_MGMT_C_ADDDEF(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000004000000140005000003000000000000005dc000000000010800020005000000180006"], 0x4c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) 1.896122067s ago: executing program 2 (id=202): r0 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000080)=[{&(0x7f0000000200)}], 0x1) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) (async, rerun: 64) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) (rerun: 64) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000600)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000000000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000001dc0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r3}, 0x2d) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000080)={0x0}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x74000000, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="4c00000010004b0400f4ed00000000007a000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010062726964676500001c00028008000400000000000600060000000000060009"], 0x4c}}, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) connect$l2tp(r5, &(0x7f00000002c0)={0x2, 0x0, @multicast2}, 0x36) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={0x0, 0x84}}, 0x0) (async) r7 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet(r7, &(0x7f0000002080)=[{{&(0x7f0000000180)={0x2, 0x4e20, @loopback}, 0x10, &(0x7f00000000c0)=[{&(0x7f0000000000)="ca0fd6d3801886dac6aa3bce47ff0c30aefc6c84be0404c6207f7f6be9d3806971126f3bd85ecb1e294a7f220906d5da65aa5d50e2b8ec89fa23011f873ce5f46b89122ba30a42d4e09ba61435b8a7c3e47276fa0998590f37a8c9280a0df60dae3b9e77e8e184b80491c9c6a9f6afeabc696d052d683a0c272c89e3daa0517ec339366d79543979fd98a2efa66e7f40ca8a6343eb343fcdf5d59bc23cbf916aab4f05aea1", 0xa5}, {&(0x7f00000001c0)="cdb6a40a11584a15d4b3e1f9c1d956b1b1bd40fe9238a8622f69427a708f83e1b0fe3e3208bb13f558acdc65ad34ac7c6613743d97384bfb04cd509816840e2c82b4da1067341ffaece26a40c6f823bcbae8cf04fb7d1dda3423a3485403e846329147c3991a6e966005755b50d906cc43a4ac30081f55062d72e54b925c6f49f9a9d9f0ae726f8587a247d2ef61e8b7becd6b99d7f4539ab09401b28e459d1efa48d3302a597ed2dfa82dec765c5cb17a2fcb08129547c875cd1fd8e81056eeba2f0087d88e82f6894e", 0xca}, {&(0x7f0000002ec0)="7a57651d857cd0111d7af8598129ec5cf57c79d56198b57b00fec04469832492fdefeafc5cf30c8dac67653753fecb7e2e5c1d92043f6d40b0bd007023d2accf949c47d505580ebb32faa174fe9a9e2a0ea2c46f93ae8536f4c515fd645f014fc97cce1751813348a93a01250ae034f1b3bb5e1ece4681cce4e443c470dffa96a821d562a4817284a2c0c4c69b3e6baad17c8489aa58aaeff1dc8cfba57cf5585f8461583b375ab381ad75440f1f71175e7b3f889593d7e8daa22cf4d58da8a32947a723dd9db3b8dd9a852fe705a8ec64ac39e8a4dd6eb12b5629533feda9446f06a75d278caf15c6fe48e2b67cad04fc36235bb5fe12071ec5f5c5e252dedcecd7766e399be95a59f7f408f98ae59ce69980af9da885d7e6f7e0a2b6d20ba5497e779cd6811ff160f5694a5794272fd4d1cf85a37028c4356f4cd7ad4d0863d73e93c55b2d4a8c37be6b3b0e9abb8e544cb0d89fcb02046b1cb60ae103c706641acaf1f97788268872884e33d2d85589427a66b94028a1a8e9048b884dcb683181b133b99082415d4e8f93ca1f80ac1e73ee8b06ae92cacfb89478a795004401832d41c9a8eae398540bf53d1fed84dc40345f966e3f15c77605222174cca5c3dbe252fdd22a1034d5a7fa446da32cb255c95cfeed05e8d7d886679927cca010216721b8a9d8eccf068a4df78842ac2db53939a5ea25c9845c5f4d5711cd870ac97ac708e506325d25f268aa2ee43a4c35d120472a4a5ccadf7f9650cb7947859d584d1b377f7a2a81a874a4696151436778bf7006ac787032d51277430b838b864bff50ab82bd0cfde51af7863519b9c6f8c3c6e205d90f2e48ba484cb536e5b96a36546fdd207f63753833ce60bd83ddf02c89aef2892449b7f1d15764d645733ed65ac6ced4090d21578a54cbf9c44e13b67327d133fe5dbfb36677ef15496548f3e4156ac5c5702c931245bf0ee7c6f2c1ef4fdfdfa8ad516f543f6fb600aa5785e1cab7e850c99b10025566806121f9b0987e9f0ef5789a17d93e044c4d87b86edd7072a8a99c9e22a605d29e1c94aa127a6298c9c85c0130caece0a1308e0d7470ff9ea676f9a16e6cc8292b034a510f5adfcee0d48919c8f552d20e81f359aebefbe328f6500e669bf8b8def4bf86fd2b8ae9abd154d4e7614dadd058eac5a04c1f1c7277b8158c8e254808baaee101fd63b3a18302c2c86cd56322f03034315eb03d5fd1033741442ee99cd0666807deda47c41860052b0b3f73a93bfa7ac7aea8a0527f8e930f86f98639a814f8e246828a034455", 0x39a}], 0x3, &(0x7f00000004c0)=ANY=[@ANYBLOB="1c000000000000000000000007000000440c2603e000000100000000000000001c000000111a7f47000000000000000008000000", @ANYRES32=0x0, @ANYBLOB="ac141412ac1e000100000000"], 0x40}}], 0x1, 0x8040) (async, rerun: 32) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x8, 0x7}, 0x48) (rerun: 32) close(0x3) (async) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af0ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f0000000000)='tlb_flush\x00', r9}, 0x10) (async) sendmmsg$inet(r7, &(0x7f0000000380)=[{{0x0, 0x0, &(0x7f00000014c0)=[{&(0x7f0000001200)="11819ebe", 0x4}], 0x1}}], 0x1, 0x0) (async, rerun: 32) r10 = socket$inet6(0xa, 0x6, 0x0) (rerun: 32) bind$inet6(r10, &(0x7f0000000480)={0xa, 0x0, 0x0, @mcast1={0xff, 0x5}}, 0x1c) connect$inet6(r10, &(0x7f00000000c0)={0xa, 0x0, 0xfffffffe, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x39}}, 0x7}, 0x1c) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000002e00)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021840000000c0a0101000000000000d955070000000900020073797a31000000000900010073797a30000000005800038054000080080003400000000248000b80340001800a0001006c696d69740000002400028008000440000000010c00024000000000000000000c000140000000000000000910"], 0x108}}, 0x0) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r10, 0x84, 0x6f, &(0x7f0000000300)={0x0, 0x30, &(0x7f0000000140)=[@in={0x2, 0x4e24, @rand_addr=0x64010102}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000340)=0x10) (async, rerun: 64) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x7a44, 0x1700) (rerun: 64) ioctl$FS_IOC_SETFLAGS(r11, 0x40086602, &(0x7f0000000000)) (async, rerun: 32) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x0, 0x0, 0x8a}) (rerun: 32) 1.432258061s ago: executing program 1 (id=205): r0 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'vlan0\x00', 0x0}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000003980)=ANY=[], 0x74}}, 0x0) r3 = bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r4 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) socket$kcm(0x10, 0x0, 0x10) r6 = socket$kcm(0x11, 0x2, 0x0) r7 = socket(0x0, 0x800, 0x0) r8 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r9 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x1b, 0xc, &(0x7f00000003c0)=ANY=[@ANYRES32=r3, @ANYRES8=r0, @ANYRES32=r4, @ANYRESHEX=r0, @ANYRESHEX=r0, @ANYRESOCT=r6, @ANYRESDEC=r5, @ANYRESHEX=r7, @ANYRES8=r4, @ANYRES8=0x0], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x10, '\x00', r1, 0x27, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r8, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000080)='sched_switch\x00', r9}, 0x10) r10 = socket$alg(0x26, 0x5, 0x0) bind$alg(r10, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(des3_ede)\x00'}, 0x58) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x100001d, 0x4008031, 0xffffffffffffffff, 0xfffff000) setsockopt$ALG_SET_KEY(r10, 0x117, 0x1, &(0x7f0000000080)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) mkdirat$cgroup_root(0xffffffffffffff9c, 0x0, 0x1ff) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r11 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000580)='./cgroup/syz1\x00', 0x200002, 0x0) write$cgroup_type(0xffffffffffffffff, &(0x7f0000000280), 0x9) openat$cgroup_procs(r11, &(0x7f00000002c0)='cgroup.threads\x00', 0x2, 0x0) openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r12 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYRES8=r7], 0x24}}, 0x0) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000040)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x115}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r5}, @IFLA_MASTER={0x8, 0xa, r5}]}, 0x44}}, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1002200}, 0xc, 0x0}, 0x20008011) socket$nl_route(0x10, 0x3, 0x0) 1.398374815s ago: executing program 4 (id=207): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000200)={'netdevsim0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_blackhole={0xe}]}, 0x34}}, 0x0) 1.130031457s ago: executing program 4 (id=209): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) sendmsg$DEVLINK_CMD_PORT_SPLIT(r1, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4040001}, 0x4) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r3, @ANYBLOB="00001000252155b21c0012000c000100626f6e64"], 0x3c}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000680)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_MASTER={0x8, 0xa, r3}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6gre={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_LINK={0x8, 0x1, r4}]}}}]}, 0x44}}, 0x0) 999.4511ms ago: executing program 3 (id=210): bpf$BPF_BTF_LOAD(0x12, &(0x7f0000005100)={&(0x7f0000004ec0)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14, 0x14, 0x2, [@func_proto={0x0, 0x1, 0x0, 0xd, 0x0, [{0x0, 0x1}]}]}}, &(0x7f0000005000)=""/255, 0x2e, 0xff, 0x1}, 0x20) 905.44005ms ago: executing program 0 (id=212): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000280)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000002c00)="b3eeaf3e9debf00a85a32df9ad4a6ca572f1ceab72fcf98a1474125b4495ad27cb9bde66e751baf42a43eea14ca984e0cc2a", 0x32}, {&(0x7f0000001b80)="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", 0xfbf}], 0x2}, 0x0) 801.87037ms ago: executing program 3 (id=213): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f00000001c0)={0x10, 0x2}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x20181, 0x0, 0x0) 748.517485ms ago: executing program 0 (id=214): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x28, &(0x7f0000000280)={0x1, [0x0]}, &(0x7f00000002c0)=0x8) 674.882507ms ago: executing program 3 (id=215): r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) connect$inet6(r0, &(0x7f00000001c0)={0x1c, 0x1c, 0x1}, 0x1c) 615.561846ms ago: executing program 0 (id=216): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000280)={0x10, 0x2}, 0x10) setsockopt$sock_int(r0, 0xffff, 0x1002, &(0x7f0000000340)=0x101, 0x4) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000002c00)="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", 0x425}], 0x1}, 0x0) read(r0, &(0x7f0000000b80)=""/4096, 0x1000) 516.5426ms ago: executing program 4 (id=217): r0 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x13, &(0x7f0000000540)=0x2, 0x4) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r0, 0x84, 0x11, 0x0, 0x0) 483.546748ms ago: executing program 0 (id=218): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendto$inet(r0, 0x0, 0x0, 0x0, &(0x7f0000000100)={0x10, 0x2}, 0x10) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r0, 0x84, 0x21, &(0x7f00000003c0)={0x0, 0x4a00}, 0x10) sendmsg$inet_sctp(r0, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20100}, 0x0) 427.967989ms ago: executing program 3 (id=219): r0 = socket$inet6_sctp(0x1c, 0x5, 0x84) setsockopt$inet6_int(r0, 0x29, 0x1b, &(0x7f00000001c0), 0x4) 359.823555ms ago: executing program 4 (id=220): syz_emit_ethernet(0x3e, &(0x7f00000000c0)={@local, @remote, @val, {@ipv4}}, 0x0) 272.582978ms ago: executing program 0 (id=221): r0 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r0, &(0x7f0000000280)={0x10, 0x2}, 0x10) connect$inet(r0, &(0x7f0000000000)={0x10, 0x2}, 0x10) read(r0, &(0x7f0000000b80)=""/4096, 0x1000) 195.61289ms ago: executing program 4 (id=222): r0 = socket$inet_sctp(0x2, 0x1, 0x84) sendmsg$inet_sctp(r0, &(0x7f00000008c0)={&(0x7f0000000280)=@in={0x10, 0x2}, 0x10, 0x0}, 0x20001) 163.318077ms ago: executing program 3 (id=223): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_SERVICES(r0, 0x0, 0x22, &(0x7f0000006140)=""/4115, &(0x7f0000000440)=0x1013) 80.630062ms ago: executing program 1 (id=224): r0 = socket$inet_icmp(0x2, 0x2, 0x1) getsockname(r0, &(0x7f0000000100)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @dev}}}, &(0x7f0000000040)=0x80) close(r1) socket$packet(0x11, 0x3, 0x300) getsockopt$inet6_int(r1, 0x29, 0x10, 0x0, 0x0) 80.486444ms ago: executing program 0 (id=225): close(0xffffffffffffffff) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x6, 0xb, 0x0, 0x0) 39.9679ms ago: executing program 3 (id=226): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000680), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_PAUSE_GET(r2, &(0x7f0000001ac0)={0x0, 0x0, &(0x7f0000001a80)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000001a0000000c00018008000100", @ANYRES32=r1], 0x20}}, 0x0) 0s ago: executing program 4 (id=227): r0 = socket$inet_sctp(0x2, 0x5, 0x84) ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(r0, 0x8983, &(0x7f0000000700)={0x6, 'veth1_to_batadv\x00', {0x1}}) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r0, 0x8982, &(0x7f0000000240)={0x0, 'veth1_to_batadv\x00', {0x3}}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.21' (ED25519) to the list of known hosts. [ 53.167437][ T5214] cgroup: Unknown subsys name 'net' [ 53.395799][ T5214] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 54.772931][ T5214] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 58.060175][ T54] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.069984][ T54] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.079265][ T54] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.086934][ T54] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.095047][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 58.103899][ T5233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.144540][ T5235] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.145993][ T5236] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.160887][ T5233] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.161872][ T5236] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.175882][ T5235] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.176914][ T5236] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 58.188651][ T5233] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 58.192303][ T5236] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.198711][ T5233] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 58.205815][ T5236] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.220287][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.220730][ T5233] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.229269][ T5236] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.243296][ T5236] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 58.244129][ T5233] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.258244][ T5233] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.268916][ T5231] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 58.288108][ T5236] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 58.296175][ T5236] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 58.304382][ T5236] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 58.314550][ T5229] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.325193][ T54] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 58.333263][ T54] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 58.340741][ T54] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 58.844667][ T5230] chnl_net:caif_netlink_parms(): no params data found [ 58.880145][ T5237] chnl_net:caif_netlink_parms(): no params data found [ 58.955143][ T5225] chnl_net:caif_netlink_parms(): no params data found [ 59.035523][ T5224] chnl_net:caif_netlink_parms(): no params data found [ 59.085353][ T5239] chnl_net:caif_netlink_parms(): no params data found [ 59.101441][ T5237] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.109469][ T5237] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.116996][ T5237] bridge_slave_0: entered allmulticast mode [ 59.124561][ T5237] bridge_slave_0: entered promiscuous mode [ 59.171520][ T5237] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.178773][ T5237] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.185912][ T5237] bridge_slave_1: entered allmulticast mode [ 59.193667][ T5237] bridge_slave_1: entered promiscuous mode [ 59.262695][ T5230] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.270055][ T5230] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.277200][ T5230] bridge_slave_0: entered allmulticast mode [ 59.284628][ T5230] bridge_slave_0: entered promiscuous mode [ 59.302610][ T5237] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.323920][ T5230] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.332548][ T5230] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.339888][ T5230] bridge_slave_1: entered allmulticast mode [ 59.346600][ T5230] bridge_slave_1: entered promiscuous mode [ 59.381161][ T5237] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.390765][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.398393][ T5225] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.405555][ T5225] bridge_slave_0: entered allmulticast mode [ 59.412524][ T5225] bridge_slave_0: entered promiscuous mode [ 59.457366][ T5225] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.464671][ T5225] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.472493][ T5225] bridge_slave_1: entered allmulticast mode [ 59.480257][ T5225] bridge_slave_1: entered promiscuous mode [ 59.489391][ T5230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.501596][ T5230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.519696][ T5224] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.526856][ T5224] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.534451][ T5224] bridge_slave_0: entered allmulticast mode [ 59.541633][ T5224] bridge_slave_0: entered promiscuous mode [ 59.550188][ T5224] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.557272][ T5224] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.565156][ T5224] bridge_slave_1: entered allmulticast mode [ 59.572242][ T5224] bridge_slave_1: entered promiscuous mode [ 59.591595][ T5237] team0: Port device team_slave_0 added [ 59.620593][ T5239] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.628108][ T5239] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.635318][ T5239] bridge_slave_0: entered allmulticast mode [ 59.643297][ T5239] bridge_slave_0: entered promiscuous mode [ 59.659602][ T5237] team0: Port device team_slave_1 added [ 59.685933][ T5239] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.693174][ T5239] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.703509][ T5239] bridge_slave_1: entered allmulticast mode [ 59.710472][ T5239] bridge_slave_1: entered promiscuous mode [ 59.751640][ T5225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.765597][ T5225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.779717][ T5230] team0: Port device team_slave_0 added [ 59.811313][ T5224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.825959][ T5224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.835858][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.846014][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.872408][ T5237] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.886280][ T5237] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.893670][ T5237] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.919976][ T5237] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.944285][ T5230] team0: Port device team_slave_1 added [ 59.952604][ T5239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.999281][ T5239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.034578][ T5224] team0: Port device team_slave_0 added [ 60.051253][ T5224] team0: Port device team_slave_1 added [ 60.060755][ T5225] team0: Port device team_slave_0 added [ 60.107454][ T5225] team0: Port device team_slave_1 added [ 60.114443][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.122047][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.149185][ T5230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.164265][ T5239] team0: Port device team_slave_0 added [ 60.210168][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.217147][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.243233][ T5230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.256209][ T5239] team0: Port device team_slave_1 added [ 60.268647][ T5235] Bluetooth: hci1: command tx timeout [ 60.281213][ T5237] hsr_slave_0: entered promiscuous mode [ 60.287497][ T5237] hsr_slave_1: entered promiscuous mode [ 60.295038][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.305526][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.332140][ T5224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.343872][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.351295][ T5235] Bluetooth: hci0: command tx timeout [ 60.356798][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.357995][ T5235] Bluetooth: hci2: command tx timeout [ 60.383308][ T5225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.401433][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.408619][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.434709][ T5235] Bluetooth: hci3: command tx timeout [ 60.440340][ T5225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.451009][ T54] Bluetooth: hci4: command tx timeout [ 60.463065][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.470075][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.496279][ T5239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.508322][ T5224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.515285][ T5224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.541441][ T5224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.593197][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.600522][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.626564][ T5239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.691246][ T5230] hsr_slave_0: entered promiscuous mode [ 60.698136][ T5230] hsr_slave_1: entered promiscuous mode [ 60.704256][ T5230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.712114][ T5230] Cannot create hsr debugfs directory [ 60.746893][ T5224] hsr_slave_0: entered promiscuous mode [ 60.753306][ T5224] hsr_slave_1: entered promiscuous mode [ 60.759622][ T5224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.767170][ T5224] Cannot create hsr debugfs directory [ 60.797458][ T5239] hsr_slave_0: entered promiscuous mode [ 60.803900][ T5239] hsr_slave_1: entered promiscuous mode [ 60.810243][ T5239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.818607][ T5239] Cannot create hsr debugfs directory [ 60.837245][ T5225] hsr_slave_0: entered promiscuous mode [ 60.843548][ T5225] hsr_slave_1: entered promiscuous mode [ 60.850448][ T5225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.858101][ T5225] Cannot create hsr debugfs directory [ 61.300456][ T5237] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.342553][ T5237] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.352309][ T5237] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.380513][ T5237] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.410400][ T5230] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.426235][ T5230] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.459052][ T5230] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.482724][ T5230] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.521804][ T5224] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.533779][ T5224] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.563711][ T5224] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.575632][ T5224] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.659952][ T5239] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.669635][ T5239] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.690059][ T5239] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.701247][ T5239] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.727130][ T5237] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.846281][ T5225] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.856301][ T5225] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.866866][ T5225] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.893276][ T5237] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.901427][ T5225] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.939243][ T2521] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.946467][ T2521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.991737][ T5230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.001159][ T2521] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.008348][ T2521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.121182][ T5230] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.156041][ T5239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.166265][ T69] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.173841][ T69] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.184853][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.191981][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.274034][ T5224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.312198][ T5225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.349955][ T5235] Bluetooth: hci1: command tx timeout [ 62.363478][ T5239] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.410118][ T5225] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.427855][ T5235] Bluetooth: hci2: command tx timeout [ 62.433314][ T5235] Bluetooth: hci0: command tx timeout [ 62.464058][ T5224] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.481775][ T2521] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.489023][ T2521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.499132][ T2521] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.506246][ T2521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.517982][ T5235] Bluetooth: hci3: command tx timeout [ 62.518203][ T54] Bluetooth: hci4: command tx timeout [ 62.532507][ T2521] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.539721][ T2521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.598837][ T2521] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.605995][ T2521] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.647504][ T1051] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.654711][ T1051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.670742][ T1051] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.677920][ T1051] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.765560][ T5237] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.825270][ T5230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.955330][ T5237] veth0_vlan: entered promiscuous mode [ 62.974468][ T5237] veth1_vlan: entered promiscuous mode [ 63.075656][ T5230] veth0_vlan: entered promiscuous mode [ 63.121259][ T5237] veth0_macvtap: entered promiscuous mode [ 63.170867][ T5230] veth1_vlan: entered promiscuous mode [ 63.180495][ T5237] veth1_macvtap: entered promiscuous mode [ 63.203252][ T5224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.255066][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.270646][ T5237] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.296620][ T5237] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.305834][ T5237] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.314628][ T5237] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.324942][ T5237] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.347128][ T5239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.373139][ T5225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.445085][ T5230] veth0_macvtap: entered promiscuous mode [ 63.494094][ T5230] veth1_macvtap: entered promiscuous mode [ 63.543313][ T5224] veth0_vlan: entered promiscuous mode [ 63.585673][ T5239] veth0_vlan: entered promiscuous mode [ 63.606569][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.623652][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.637100][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.677344][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.695112][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.706992][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.732845][ T5224] veth1_vlan: entered promiscuous mode [ 63.753495][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.775695][ T5239] veth1_vlan: entered promiscuous mode [ 63.781622][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.798142][ T5230] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.806855][ T5230] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.816568][ T5230] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.825521][ T5230] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.897129][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.909007][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.950321][ T5224] veth0_macvtap: entered promiscuous mode [ 63.992387][ T5224] veth1_macvtap: entered promiscuous mode [ 64.045630][ T5239] veth0_macvtap: entered promiscuous mode [ 64.079617][ T5239] veth1_macvtap: entered promiscuous mode [ 64.125322][ T5225] veth0_vlan: entered promiscuous mode [ 64.153145][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.159566][ T1057] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.168640][ T5308] xt_CT: You must specify a L4 protocol and not use inversions on it [ 64.180592][ T1057] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.193764][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.204681][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.215422][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.235377][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.281863][ T5225] veth1_vlan: entered promiscuous mode [ 64.314694][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.326569][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.337331][ T5224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.352394][ T5224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.377026][ T5224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.412237][ T2558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.416179][ T5224] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.430742][ T54] Bluetooth: hci1: command tx timeout [ 64.434239][ T2558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.444700][ T5224] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.453895][ T5224] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.464427][ T5224] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.476997][ T5311] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.489371][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.502562][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.513902][ T54] Bluetooth: hci0: command tx timeout [ 64.513972][ T5235] Bluetooth: hci2: command tx timeout [ 64.520187][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.535599][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.546038][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.557100][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.572052][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.588869][ T5235] Bluetooth: hci4: command tx timeout [ 64.588881][ T54] Bluetooth: hci3: command tx timeout [ 64.616707][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.627893][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.638143][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.649053][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.659351][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.671280][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.690168][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.704075][ T5311] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6'. [ 64.714906][ T5311] bridge_slave_1: left allmulticast mode [ 64.721360][ T5311] bridge_slave_1: left promiscuous mode [ 64.728234][ T5311] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.740690][ T5311] bridge_slave_0: left allmulticast mode [ 64.746336][ T5311] bridge_slave_0: left promiscuous mode [ 64.754042][ T5311] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.843275][ T5310] netlink: 4 bytes leftover after parsing attributes in process `syz.2.6'. [ 64.854290][ T5225] veth0_macvtap: entered promiscuous mode [ 64.865143][ T5239] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.874083][ T5239] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.883270][ T5239] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.892497][ T5239] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.935271][ T5225] veth1_macvtap: entered promiscuous mode [ 65.031333][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.042120][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.053569][ T5315] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.057469][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.067293][ T5315] xt_nfacct: accounting object `syz1' does not exists [ 65.082360][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.098022][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.114117][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.124566][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 65.135102][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.147190][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 65.196561][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.228968][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.239596][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.250179][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.260089][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.270753][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.280984][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 65.292584][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 65.303922][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 65.349240][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.366057][ T5225] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.378054][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.385624][ T5225] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.407707][ T5225] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.417361][ T5225] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 65.446830][ T1051] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.467377][ T1051] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.490727][ T5320] sit0: entered promiscuous mode [ 65.506023][ T5320] netlink: 'syz.1.8': attribute type 1 has an invalid length. [ 65.530648][ T5320] netlink: 1 bytes leftover after parsing attributes in process `syz.1.8'. [ 65.624363][ T2521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.636745][ T2521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.762713][ T2521] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.805142][ T2521] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.865787][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.899618][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.915739][ T5336] netlink: 'syz.3.4': attribute type 3 has an invalid length. [ 65.918839][ T5334] xt_CT: You must specify a L4 protocol and not use inversions on it [ 65.943297][ T5336] netlink: 199836 bytes leftover after parsing attributes in process `syz.3.4'. [ 65.951424][ T5332] netdevsim netdevsim1: loading /lib/firmware/. failed with error -22 [ 66.048721][ T5332] netdevsim netdevsim1: Direct firmware load for . failed with error -22 [ 66.067287][ T2558] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 66.094948][ T5332] netdevsim netdevsim1: Falling back to sysfs fallback for: . [ 66.104222][ T2558] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 66.403591][ T5345] xt_CT: You must specify a L4 protocol and not use inversions on it [ 66.445815][ T5349] netlink: 'syz.2.13': attribute type 1 has an invalid length. [ 66.460437][ T5348] xt_CT: You must specify a L4 protocol and not use inversions on it [ 66.518822][ T54] Bluetooth: hci1: command tx timeout [ 66.588965][ T54] Bluetooth: hci0: command tx timeout [ 66.589418][ T5235] Bluetooth: hci2: command tx timeout [ 66.601505][ T5349] netlink: 8 bytes leftover after parsing attributes in process `syz.2.13'. [ 66.668262][ T5235] Bluetooth: hci3: command tx timeout [ 66.669336][ T54] Bluetooth: hci4: command tx timeout [ 66.877980][ T5358] netlink: 16 bytes leftover after parsing attributes in process `syz.4.17'. [ 66.881728][ T5359] Zero length message leads to an empty skb [ 66.916944][ T5364] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 66.969131][ T5359] netlink: 6 bytes leftover after parsing attributes in process `syz.3.18'. [ 66.994297][ T5359] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 67.472710][ T5385] netlink: 72 bytes leftover after parsing attributes in process `syz.0.24'. [ 67.623756][ T5394] xt_CT: You must specify a L4 protocol and not use inversions on it [ 67.808615][ T5396] netlink: 92 bytes leftover after parsing attributes in process `syz.3.28'. [ 68.024954][ T5406] netlink: 88 bytes leftover after parsing attributes in process `syz.0.29'. [ 68.342880][ T5418] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 68.761048][ T5427] vxcan0: tx drop: invalid da for name 0x0000000000000002 [ 68.782914][ T5427] veth2: entered allmulticast mode [ 69.070375][ T5436] xt_CT: You must specify a L4 protocol and not use inversions on it [ 69.526225][ T5454] sctp: failed to load transform for md5: -2 [ 69.692598][ T5468] netlink: 'syz.3.46': attribute type 8 has an invalid length. [ 69.693090][ T5467] Cannot find del_set index 0 as target [ 70.613061][ T5507] netlink: 'syz.2.58': attribute type 1 has an invalid length. [ 70.642739][ T5507] __nla_validate_parse: 2 callbacks suppressed [ 70.642758][ T5507] netlink: 4 bytes leftover after parsing attributes in process `syz.2.58'. [ 70.674372][ T5507] veth0_to_team: entered promiscuous mode [ 70.703166][ T5507] veth0_to_team: entered allmulticast mode [ 71.002724][ T5506] syz.1.57 (5506) used obsolete PPPIOCDETACH ioctl [ 71.184217][ T5536] netlink: 8 bytes leftover after parsing attributes in process `syz.2.64'. [ 71.207813][ T5537] netlink: 8 bytes leftover after parsing attributes in process `syz.2.64'. [ 71.716539][ T1258] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.726650][ T1258] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.781848][ T5565] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 71.999219][ T5576] sctp: [Deprecated]: syz.4.75 (pid 5576) Use of int in maxseg socket option. [ 71.999219][ T5576] Use struct sctp_assoc_value instead [ 72.037515][ T5576] netlink: 184472 bytes leftover after parsing attributes in process `syz.4.75'. [ 72.235371][ T5584] netlink: 8 bytes leftover after parsing attributes in process `syz.3.79'. [ 72.290996][ T5586] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 72.651759][ T5598] netlink: 12 bytes leftover after parsing attributes in process `syz.2.82'. [ 72.701957][ T5598] syz.2.82[5598] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.702115][ T5598] syz.2.82[5598] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 72.732891][ T5603] xt_policy: output policy not valid in PREROUTING and INPUT [ 72.742297][ T5606] netlink: 24 bytes leftover after parsing attributes in process `syz.4.86'. [ 72.766673][ T5603] syz.1.85 uses obsolete (PF_INET,SOCK_PACKET) [ 72.790809][ T5606] netlink: 32 bytes leftover after parsing attributes in process `syz.4.86'. [ 73.055512][ T5621] netlink: 16 bytes leftover after parsing attributes in process `syz.4.89'. [ 73.239267][ T5631] IPVS: length: 96 != 8 [ 73.316198][ T5634] Bluetooth: MGMT ver 1.23 [ 73.374047][ T5638] team0: entered promiscuous mode [ 73.381319][ T5638] team_slave_0: entered promiscuous mode [ 73.394010][ T5638] team_slave_1: entered promiscuous mode [ 73.538685][ T5645] warning: `syz.0.96' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 73.711876][ T5648] netlink: 8 bytes leftover after parsing attributes in process `syz.1.97'. [ 73.803917][ T5646] team0: left promiscuous mode [ 73.829826][ T5646] team_slave_0: left promiscuous mode [ 73.837550][ T5646] team_slave_1: left promiscuous mode [ 74.414039][ T5678] netlink: 'syz.4.107': attribute type 10 has an invalid length. [ 74.497125][ T5678] team0: Port device netdevsim0 added [ 74.525989][ T5690] netlink: 'syz.3.109': attribute type 3 has an invalid length. [ 75.071650][ T5722] tap0: tun_chr_ioctl cmd 21731 [ 76.149965][ T5759] netlink: 'syz.2.128': attribute type 9 has an invalid length. [ 76.175793][ T5759] __nla_validate_parse: 6 callbacks suppressed [ 76.175813][ T5759] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.128'. [ 76.276853][ T5765] netlink: 'syz.2.128': attribute type 9 has an invalid length. [ 76.306564][ T5765] netlink: 209836 bytes leftover after parsing attributes in process `syz.2.128'. [ 76.488324][ T5778] ipt_REJECT: ECHOREPLY no longer supported. [ 76.585959][ T5783] netlink: 48 bytes leftover after parsing attributes in process `syz.0.135'. [ 76.685943][ T5785] netlink: 'syz.4.136': attribute type 12 has an invalid length. [ 76.708637][ T5785] netlink: 132 bytes leftover after parsing attributes in process `syz.4.136'. [ 76.725343][ T5785] openvswitch: netlink: Flow actions attr not present in new flow. [ 76.848931][ T51] cfg80211: failed to load regulatory.db [ 76.938698][ T5791] netlink: 4 bytes leftover after parsing attributes in process `syz.0.139'. [ 76.968073][ T5791] netlink: 'syz.0.139': attribute type 1 has an invalid length. [ 77.314539][ C0] IPv4: Oversized IP packet from 127.0.0.1 [ 77.329272][ T5805] netlink: 20 bytes leftover after parsing attributes in process `syz.0.142'. [ 77.679083][ T5819] netlink: 48 bytes leftover after parsing attributes in process `syz.1.147'. [ 77.777014][ T5821] netlink: 4 bytes leftover after parsing attributes in process `syz.0.148'. [ 77.909694][ T5828] netlink: 40 bytes leftover after parsing attributes in process `syz.3.151'. [ 77.940499][ T5828] netlink: 'syz.3.151': attribute type 3 has an invalid length. [ 78.033042][ T5834] netlink: 4 bytes leftover after parsing attributes in process `syz.3.151'. [ 78.819756][ T5854] can: request_module (can-proto-0) failed. [ 81.255757][ T5885] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 81.569674][ T5899] __nla_validate_parse: 1 callbacks suppressed [ 81.569693][ T5899] netlink: 60 bytes leftover after parsing attributes in process `syz.1.167'. [ 81.733940][ T5903] netlink: 48 bytes leftover after parsing attributes in process `syz.2.171'. [ 82.143307][ T5926] netlink: 28 bytes leftover after parsing attributes in process `syz.3.178'. [ 82.161570][ T5924] netlink: 8 bytes leftover after parsing attributes in process `syz.4.177'. [ 82.180448][ T5925] netlink: 28 bytes leftover after parsing attributes in process `syz.3.178'. [ 82.304517][ T5933] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 82.406979][ T5938] netlink: 'syz.4.181': attribute type 1 has an invalid length. [ 82.407793][ T5936] netlink: 'syz.3.182': attribute type 10 has an invalid length. [ 82.442275][ T5936] team0: Device ipvlan1 failed to register rx_handler [ 82.442987][ T5941] netlink: 'syz.0.183': attribute type 1 has an invalid length. [ 82.465349][ T5941] netlink: 'syz.0.183': attribute type 2 has an invalid length. [ 82.473408][ T5941] netlink: 'syz.0.183': attribute type 2 has an invalid length. [ 82.492355][ T5941] netlink: 'syz.0.183': attribute type 2 has an invalid length. [ 82.501497][ T5941] netlink: 12 bytes leftover after parsing attributes in process `syz.0.183'. [ 82.542128][ T5941] bond0: entered promiscuous mode [ 82.550238][ T5941] bond_slave_0: entered promiscuous mode [ 82.556488][ T5941] bond_slave_1: entered promiscuous mode [ 82.607074][ T5943] bridge_slave_0: left allmulticast mode [ 82.625935][ T5943] bridge_slave_0: left promiscuous mode [ 82.641348][ T5943] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.663223][ T5943] bridge_slave_1: left allmulticast mode [ 82.675611][ T5943] bridge_slave_1: left promiscuous mode [ 82.690713][ T5943] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.704728][ T5947] netlink: 48 bytes leftover after parsing attributes in process `syz.4.185'. [ 82.726395][ T5943] bond0: (slave bond_slave_0): Releasing backup interface [ 82.741599][ T5943] bond_slave_0: left promiscuous mode [ 82.766913][ T5943] bond0: (slave bond_slave_1): Releasing backup interface [ 82.794271][ T5943] bond_slave_1: left promiscuous mode [ 82.862184][ T5943] team0: Port device team_slave_0 removed [ 82.940875][ T5943] team0: Port device team_slave_1 removed [ 82.956215][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 82.964128][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 82.982019][ T5943] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 83.004130][ T5943] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 83.027029][ T5941] bond0: left promiscuous mode [ 83.037833][ T5941] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.045550][ T5941] team0: Port device bond0 added [ 83.121610][ T5962] netlink: 'syz.4.189': attribute type 1 has an invalid length. [ 83.268952][ T5969] netlink: 'syz.1.191': attribute type 10 has an invalid length. [ 83.335185][ T5969] batman_adv: batadv0: Adding interface: team0 [ 83.376947][ T5969] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.425890][ T5969] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 83.888790][ T6003] netlink: 48 bytes leftover after parsing attributes in process `syz.3.197'. [ 83.982702][ T6009] netlink: 12 bytes leftover after parsing attributes in process `syz.4.199'. [ 84.152458][ T6016] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 84.214955][ T6016] netlink: 5 bytes leftover after parsing attributes in process `syz.3.200'. [ 84.238214][ T6016] 0ªX¹¦Dö»: renamed from gretap0 (while UP) [ 84.295569][ T6016] 0ªX¹¦Dö»: entered allmulticast mode [ 84.860951][ T6053] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 85.066893][ T6056] bond2: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 85.165784][ T6056] bond2: (slave ip6gre1): Error -95 calling set_mac_address [ 86.067451][ T6096] [ 86.069838][ T6096] ================================================ [ 86.076340][ T6096] WARNING: lock held when returning to user space! [ 86.082853][ T6096] 6.11.0-rc4-syzkaller-00566-g7d3aed652d09 #0 Not tainted [ 86.089971][ T6096] ------------------------------------------------ [ 86.096472][ T6096] syz.3.226/6096 is leaving the kernel with locks still held! [ 86.103932][ T6096] 1 lock held by syz.3.226/6096: [ 86.108880][ T6096] #0: ffffffff8fc84b88 (rtnl_mutex){+.+.}-{3:3}, at: ethnl_act_cable_test+0x187/0x3f0 [ 86.677714][ T51] ================================================================== [ 86.685818][ T51] BUG: KASAN: slab-use-after-free in __mutex_lock+0xcf5/0xd70 [ 86.693266][ T51] Read of size 4 at addr ffff88802f5e3c34 by task kworker/1:1/51 [ 86.700966][ T51] [ 86.703287][ T51] CPU: 1 UID: 0 PID: 51 Comm: kworker/1:1 Not tainted 6.11.0-rc4-syzkaller-00566-g7d3aed652d09 #0 [ 86.713888][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 86.723937][ T51] Workqueue: events_power_efficient crda_timeout_work [ 86.730711][ T51] Call Trace: [ 86.733975][ T51] [ 86.736890][ T51] dump_stack_lvl+0x241/0x360 [ 86.741556][ T51] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.746739][ T51] ? __pfx__printk+0x10/0x10 [ 86.751313][ T51] ? _printk+0xd5/0x120 [ 86.755452][ T51] ? __virt_addr_valid+0x183/0x530 [ 86.760545][ T51] ? __virt_addr_valid+0x183/0x530 [ 86.765639][ T51] print_report+0x169/0x550 [ 86.770134][ T51] ? __virt_addr_valid+0x183/0x530 [ 86.775228][ T51] ? __virt_addr_valid+0x183/0x530 [ 86.780320][ T51] ? __virt_addr_valid+0x45f/0x530 [ 86.785417][ T51] ? __phys_addr+0xba/0x170 [ 86.789907][ T51] ? __mutex_lock+0xcf5/0xd70 [ 86.794569][ T51] kasan_report+0x143/0x180 [ 86.799062][ T51] ? __mutex_lock+0xcf5/0xd70 [ 86.803730][ T51] __mutex_lock+0xcf5/0xd70 [ 86.808222][ T51] ? debug_object_deactivate+0x2d5/0x390 [ 86.813842][ T51] ? crda_timeout_work+0x15/0x50 [ 86.818775][ T51] ? __pfx_lock_release+0x10/0x10 [ 86.823790][ T51] ? __pfx___mutex_lock+0x10/0x10 [ 86.828806][ T51] ? rcu_is_watching+0x15/0xb0 [ 86.833561][ T51] ? process_scheduled_works+0x945/0x1830 [ 86.839268][ T51] crda_timeout_work+0x15/0x50 [ 86.844023][ T51] process_scheduled_works+0xa2c/0x1830 [ 86.849567][ T51] ? __pfx_process_scheduled_works+0x10/0x10 [ 86.855537][ T51] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 86.861076][ T51] ? assign_work+0x364/0x3d0 [ 86.865656][ T51] worker_thread+0x86d/0xd40 [ 86.870238][ T51] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 86.876120][ T51] ? __kthread_parkme+0x169/0x1d0 [ 86.881137][ T51] ? __pfx_worker_thread+0x10/0x10 [ 86.886239][ T51] kthread+0x2f0/0x390 [ 86.890297][ T51] ? __pfx_worker_thread+0x10/0x10 [ 86.895393][ T51] ? __pfx_kthread+0x10/0x10 [ 86.899974][ T51] ret_from_fork+0x4b/0x80 [ 86.904377][ T51] ? __pfx_kthread+0x10/0x10 [ 86.908957][ T51] ret_from_fork_asm+0x1a/0x30 [ 86.913738][ T51] [ 86.916760][ T51] [ 86.919070][ T51] Allocated by task 6095: [ 86.923379][ T51] kasan_save_track+0x3f/0x80 [ 86.928048][ T51] __kasan_slab_alloc+0x66/0x80 [ 86.932884][ T51] kmem_cache_alloc_node_noprof+0x16b/0x320 [ 86.938759][ T51] dup_task_struct+0x57/0x8c0 [ 86.943420][ T51] copy_process+0x5d1/0x3e10 [ 86.947996][ T51] kernel_clone+0x226/0x8f0 [ 86.952486][ T51] __se_sys_clone3+0x2cb/0x350 [ 86.957235][ T51] do_syscall_64+0xf3/0x230 [ 86.961721][ T51] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.967602][ T51] [ 86.969910][ T51] Freed by task 16: [ 86.973704][ T51] kasan_save_track+0x3f/0x80 [ 86.978366][ T51] kasan_save_free_info+0x40/0x50 [ 86.983374][ T51] poison_slab_object+0xe0/0x150 [ 86.988315][ T51] __kasan_slab_free+0x37/0x60 [ 86.993068][ T51] kmem_cache_free+0x145/0x350 [ 86.997814][ T51] delayed_put_task_struct+0x125/0x300 [ 87.003263][ T51] rcu_core+0xafd/0x1830 [ 87.007507][ T51] handle_softirqs+0x2c4/0x970 [ 87.012258][ T51] run_ksoftirqd+0xca/0x130 [ 87.016756][ T51] smpboot_thread_fn+0x544/0xa30 [ 87.021681][ T51] kthread+0x2f0/0x390 [ 87.025740][ T51] ret_from_fork+0x4b/0x80 [ 87.030154][ T51] ret_from_fork_asm+0x1a/0x30 [ 87.034906][ T51] [ 87.037213][ T51] Last potentially related work creation: [ 87.042909][ T51] kasan_save_stack+0x3f/0x60 [ 87.047572][ T51] __kasan_record_aux_stack+0xac/0xc0 [ 87.052931][ T51] call_rcu+0x167/0xa70 [ 87.057073][ T51] __schedule+0x1808/0x4a60 [ 87.061560][ T51] preempt_schedule_common+0x84/0xd0 [ 87.066869][ T51] preempt_schedule+0xe1/0xf0 [ 87.071527][ T51] preempt_schedule_thunk+0x1a/0x30 [ 87.076715][ T51] unwind_next_frame+0x2124/0x2a00 [ 87.081815][ T51] arch_stack_walk+0x151/0x1b0 [ 87.086561][ T51] stack_trace_save+0x118/0x1d0 [ 87.091522][ T51] ref_tracker_free+0x105/0x7e0 [ 87.096359][ T51] __sk_destruct+0x37d/0x5f0 [ 87.100943][ T51] inet_release+0x17d/0x200 [ 87.105431][ T51] sock_close+0xbc/0x240 [ 87.109659][ T51] __fput+0x24a/0x8a0 [ 87.113625][ T51] __x64_sys_close+0x7f/0x110 [ 87.118289][ T51] do_syscall_64+0xf3/0x230 [ 87.122780][ T51] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.128665][ T51] [ 87.130972][ T51] The buggy address belongs to the object at ffff88802f5e3c00 [ 87.130972][ T51] which belongs to the cache task_struct of size 7424 [ 87.145097][ T51] The buggy address is located 52 bytes inside of [ 87.145097][ T51] freed 7424-byte region [ffff88802f5e3c00, ffff88802f5e5900) [ 87.158876][ T51] [ 87.161192][ T51] The buggy address belongs to the physical page: [ 87.167629][ T51] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x2f5e0 [ 87.176380][ T51] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 87.184860][ T51] memcg:ffff88802e810701 [ 87.189082][ T51] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 87.196620][ T51] page_type: 0xfdffffff(slab) [ 87.201280][ T51] raw: 00fff00000000040 ffff8880166fd500 ffffea0001659800 dead000000000002 [ 87.209846][ T51] raw: 0000000000000000 0000000000040004 00000001fdffffff ffff88802e810701 [ 87.218430][ T51] head: 00fff00000000040 ffff8880166fd500 ffffea0001659800 dead000000000002 [ 87.227085][ T51] head: 0000000000000000 0000000000040004 00000001fdffffff ffff88802e810701 [ 87.235741][ T51] head: 00fff00000000003 ffffea0000bd7801 ffffffffffffffff 0000000000000000 [ 87.244395][ T51] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 87.253045][ T51] page dumped because: kasan: bad access detected [ 87.259452][ T51] page_owner tracks the page as allocated [ 87.265148][ T51] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 2558, tgid 2558 (kworker/u8:9), ts 13248710300, free_ts 0 [ 87.285623][ T51] post_alloc_hook+0x1f3/0x230 [ 87.290376][ T51] get_page_from_freelist+0x2e4c/0x2f10 [ 87.295917][ T51] __alloc_pages_noprof+0x256/0x6c0 [ 87.301100][ T51] alloc_slab_page+0x5f/0x120 [ 87.305762][ T51] allocate_slab+0x5a/0x2f0 [ 87.310250][ T51] ___slab_alloc+0xcd1/0x14b0 [ 87.314908][ T51] __slab_alloc+0x58/0xa0 [ 87.319221][ T51] kmem_cache_alloc_node_noprof+0x1fe/0x320 [ 87.325097][ T51] dup_task_struct+0x57/0x8c0 [ 87.329765][ T51] copy_process+0x5d1/0x3e10 [ 87.334343][ T51] kernel_clone+0x226/0x8f0 [ 87.338832][ T51] user_mode_thread+0x132/0x1a0 [ 87.343669][ T51] call_usermodehelper_exec_work+0x5c/0x230 [ 87.349548][ T51] process_scheduled_works+0xa2c/0x1830 [ 87.355165][ T51] worker_thread+0x86d/0xd40 [ 87.359773][ T51] kthread+0x2f0/0x390 [ 87.363828][ T51] page_owner free stack trace missing [ 87.369175][ T51] [ 87.371479][ T51] Memory state around the buggy address: [ 87.377087][ T51] ffff88802f5e3b00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 87.385129][ T51] ffff88802f5e3b80: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 87.393172][ T51] >ffff88802f5e3c00: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 87.401211][ T51] ^ [ 87.406821][ T51] ffff88802f5e3c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 87.414862][ T51] ffff88802f5e3d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 87.422906][ T51] ================================================================== [ 87.432282][ T51] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 87.439503][ T51] CPU: 1 UID: 0 PID: 51 Comm: kworker/1:1 Not tainted 6.11.0-rc4-syzkaller-00566-g7d3aed652d09 #0 [ 87.450096][ T51] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 87.460159][ T51] Workqueue: events_power_efficient crda_timeout_work [ 87.466925][ T51] Call Trace: [ 87.470191][ T51] [ 87.473111][ T51] dump_stack_lvl+0x241/0x360 [ 87.477779][ T51] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.482963][ T51] ? __pfx__printk+0x10/0x10 [ 87.487534][ T51] ? rcu_is_watching+0x15/0xb0 [ 87.492293][ T51] ? vscnprintf+0x5d/0x90 [ 87.496612][ T51] panic+0x349/0x860 [ 87.500495][ T51] ? check_panic_on_warn+0x21/0xb0 [ 87.505592][ T51] ? __pfx_panic+0x10/0x10 [ 87.509991][ T51] ? trace_irq_enable+0x2c/0x120 [ 87.514917][ T51] ? _raw_spin_unlock_irqrestore+0xd8/0x140 [ 87.520801][ T51] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 87.526682][ T51] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 87.533001][ T51] ? print_report+0x502/0x550 [ 87.537677][ T51] check_panic_on_warn+0x86/0xb0 [ 87.542613][ T51] ? __mutex_lock+0xcf5/0xd70 [ 87.547279][ T51] end_report+0x77/0x160 [ 87.551520][ T51] kasan_report+0x154/0x180 [ 87.556014][ T51] ? __mutex_lock+0xcf5/0xd70 [ 87.560680][ T51] __mutex_lock+0xcf5/0xd70 [ 87.565181][ T51] ? debug_object_deactivate+0x2d5/0x390 [ 87.570801][ T51] ? crda_timeout_work+0x15/0x50 [ 87.575728][ T51] ? __pfx_lock_release+0x10/0x10 [ 87.580740][ T51] ? __pfx___mutex_lock+0x10/0x10 [ 87.585753][ T51] ? rcu_is_watching+0x15/0xb0 [ 87.590504][ T51] ? process_scheduled_works+0x945/0x1830 [ 87.596210][ T51] crda_timeout_work+0x15/0x50 [ 87.600974][ T51] process_scheduled_works+0xa2c/0x1830 [ 87.606517][ T51] ? __pfx_process_scheduled_works+0x10/0x10 [ 87.612485][ T51] ? __pfx__raw_spin_lock_irq+0x10/0x10 [ 87.618021][ T51] ? assign_work+0x364/0x3d0 [ 87.622687][ T51] worker_thread+0x86d/0xd40 [ 87.627267][ T51] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 87.633160][ T51] ? __kthread_parkme+0x169/0x1d0 [ 87.638179][ T51] ? __pfx_worker_thread+0x10/0x10 [ 87.643283][ T51] kthread+0x2f0/0x390 [ 87.647340][ T51] ? __pfx_worker_thread+0x10/0x10 [ 87.652441][ T51] ? __pfx_kthread+0x10/0x10 [ 87.657023][ T51] ret_from_fork+0x4b/0x80 [ 87.661429][ T51] ? __pfx_kthread+0x10/0x10 [ 87.666006][ T51] ret_from_fork_asm+0x1a/0x30 [ 87.670764][ T51] [ 87.675249][ T51] Kernel Offset: disabled [ 87.679590][ T51] Rebooting in 86400 seconds..