last executing test programs: 2.109595446s ago: executing program 0 (id=1): bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x10, 0xa, 0x10001, 0x9, 0x2002, 0xffffffffffffffff, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) sendmsg$TEAM_CMD_NOOP(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f00000007c0)={0x0}, 0x1, 0x0, 0x0, 0x4004000}, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f000000d000)={0xa, 0x3, &(0x7f0000002280)=ANY=[@ANYBLOB="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"], &(0x7f0000014ff5)='GPL\x00', 0x2, 0x103a, &(0x7f0000014000)=""/4096, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2a3, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x2, 0xc, 0x1400, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000040)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000010b704000000000000850000000100000095"], &(0x7f00000001c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000180)='kfree\x00', r4}, 0x10) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0xb, 0x8, 0xc, 0x3, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x5, r5}, 0x38) r6 = openat$cgroup_procs(r2, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r6, &(0x7f0000000040), 0x12) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_procs(r7, &(0x7f0000000840)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r8, &(0x7f0000000880), 0x12) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000000)=ANY=[@ANYBLOB="98030000", @ANYRES16=r1, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r10, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff080211000001"], 0x398}}, 0x0) 1.680907302s ago: executing program 0 (id=6): r0 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r0, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f00000001c0)="d8000000180081064e81f782db44b904021d005c06007c09e8fe55a10a0015400100142603600e120800060000000401a800080008000c4003001100036010fab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef52a98516277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4ce1b14d6d930dfe1d9d322fe7c9f8775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e006dcdf63951f215ce3bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd6e4edef3d93452a92954b43370e9701", 0xd8}], 0x1}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)={0x14, 0x36, 0x701, 0x0, 0x0, {0xd}}, 0x14}, 0x1, 0x0, 0x0, 0x20004881}, 0x10) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000340), r1) sendmsg$DEVLINK_CMD_RATE_SET(r1, &(0x7f0000000440)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x24, r2, 0x200, 0x70bd29, 0x25dfdbfd, {}, [@DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0xe}]}, 0x24}, 0x1, 0x0, 0x0, 0x8000}, 0x24000041) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=ANY=[@ANYBLOB="4800000010000305000000000000000000cf0000", @ANYRES32=0x0, @ANYBLOB="03000000000000002000128008000100677265001400028008000600ac1414aa08000700e000000108000a00", @ANYRES32], 0x48}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f00000003c0), r1) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r4, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="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"/376], 0x178}}, 0x20) 1.467665207s ago: executing program 3 (id=4): r0 = syz_init_net_socket$ax25(0x3, 0x5, 0x0) recvmsg(r0, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWFLOWTABLE={0x6c, 0x16, 0xa, 0x1, 0x0, 0x0, {0x1, 0x0, 0xa}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0xfffffffffffffefb, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x40, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_NUM={0x8}, @NFTA_FLOWTABLE_HOOK_PRIORITY={0x8}, @NFTA_FLOWTABLE_HOOK_DEVS={0x2c, 0x3, 0x0, 0x1, [{0x14, 0x1, 'veth0_to_bridge\x00'}, {0x14, 0x1, 'geneve0\x00'}]}]}]}, @NFT_MSG_DELFLOWTABLE={0x48, 0x18, 0xa, 0x3, 0xb00, 0x0, {0x1}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'erspan0\x00'}]}]}]}], {0x14, 0x10}}, 0xfc}}, 0x0) 1.347187941s ago: executing program 3 (id=7): r0 = socket$kcm(0x2, 0x200000000000001, 0x106) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000180)={&(0x7f00000000c0)={0x20, 0x0, 0x400, 0x70bd25, 0x25dfdbfb, {}, [@NBD_ATTR_DEAD_CONN_TIMEOUT={0xc, 0x8, 0xfffffffffffffffd}]}, 0x20}, 0x1, 0x0, 0x0, 0x22000040}, 0x200080c2) sendmsg$inet(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x30004001) r2 = socket(0x840000000002, 0x3, 0x100) connect$inet(r2, &(0x7f0000000000)={0x2, 0x0, @dev}, 0x10) sendmmsg$inet(r2, &(0x7f0000005240), 0x4000095, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000f00000000000100000e00"}}}]}, 0x48}}, 0x0) setsockopt$inet_group_source_req(r2, 0x0, 0x2b, 0x0, 0x0) r4 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000020000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_SYS_SET(r5, &(0x7f0000000440)={0x0, 0x7, &(0x7f0000000400)={&(0x7f0000000480)=ANY=[@ANYBLOB="1800000007140100000032c83a110000050042"], 0x18}}, 0x0) sendmsg$MPTCP_PM_CMD_DEL_ADDR(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x18, r4, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x4}]}, 0x18}, 0x1, 0x0, 0x0, 0x8081}, 0x24000800) 1.217713671s ago: executing program 0 (id=8): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCETHTOOL(r1, 0x8946, &(0x7f000000a540)={'virt_wifi0\x00', &(0x7f000000a440)=@ethtool_drvinfo={0x3, "905ea1c6b901f85ff3dca5fdaf88a0ec5635b0fa6f6749b86d94789880cec019", "a2c4bfda356f5e6ba1fd548c637d0fdc3cfe4b41f50c96e877fca67087bbe1b6", "eeda40ac16219bd619ab024710dbafe8e8c3723a7e541f0477e250319a4c76f6", "c66807fc3dcb15f09bf0036fa3bb335e96b39f79269f9700e03f307d77b64690", "4524e0f1fd5fca6a06afcc78094d5dc53fab4ca8858835d96e5b7efeb8d7c3a7", "c4dc3d3180ac844af45df410", 0x40000000, 0xb9f, 0x9, 0x2, 0x599}}) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r2, 0x0) r3 = socket$kcm(0x29, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMUNATTACH(r3, 0x89e1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000240)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000300), 0x1c281, 0x0) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r6 = socket$kcm(0x2, 0xa, 0x2) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb790789005e107538e486dd6317ce22000000fffe80000000000000101000007f0600080000000000000071273fa7b49301641184a907"], 0xfdef) r7 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000001840)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x48) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000240)={'syzkaller1\x00', @link_local}) writev(r5, &(0x7f00000002c0)=[{&(0x7f0000000100)="2e9b3d0007e03dd65193dfb6c575963f86ddf06712e9232f328db0049d90491ceaebfd26d4eef23248000000f858dbb8a1905234", 0x34}, {&(0x7f0000000180)='\x00\x00\x00\x00\x00\x00', 0x6}], 0x2) close(r4) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r10 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r10, &(0x7f00000059c0)=[{{&(0x7f0000000040)={0xa, 0x0, 0x0, @rand_addr=' \x01\x00', 0x9}, 0x1c, &(0x7f0000000440)=[{&(0x7f0000000100)='d', 0x1}], 0x1}}], 0x1, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={0xffffffffffffffff, 0x2800000002000000, 0x0, 0x0, 0x0, 0x0, 0x7300, 0x4000000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x50) shutdown(r10, 0x1) write$cgroup_subtree(r9, &(0x7f0000001800)=ANY=[@ANYRES32=r7, @ANYRESDEC=r4, @ANYRESDEC=r6], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r9, 0x0) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r10, 0x84, 0x76, &(0x7f0000000280)={0x0, 0x5}, &(0x7f0000000080)=0x8) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f00000000c0)={'vcan0\x00', @random="74c5b0115a08"}) writev(r0, &(0x7f0000000140)=[{&(0x7f0000000540)="36753fc89893f08f730889699916bff0c7fc0231c475f404e2c2741ea930e6ca11a5bedcf8c5b41d772e97bb94e7cf7a8d0049ad464239ec14b75a86389929ede8d40670f1a5dfd66be701d397122168e3ce853f182e532f640ff3d0e341", 0x5e}, {&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="f571fe15724a7ae2476f5702e97bf89aa6e75ac9a3b13e67ed453cc61c0dc310444aebd57583d87152717935891fb03102e6d2e36b65bd01e1165e9b0cb48a06330ba5f91a2089d12d6abcf9b1e716def0aa3ecaf86c430572dcc3c503c2eb37d95186bb14c6704231038e8a9ca9b2c7cd164d61fe1f0cc5a13b00b8c0b1ede795a89b502ff64a1b5705909bde3513d643e46165abcd8eee5c", 0x99}], 0x3) 1.078816011s ago: executing program 2 (id=3): socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket(0x8000000010, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000780)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c0002800800014000000002080002400000001605000300000000000900010073797a30000000000900020073797a320000000014000000110001000000000000000000b2b02960a538e7922fb94f7bc2866ee6dc4aee70bcdddd5c5ae35a0aa229d83cdf1a3032259745ea734fed924f3b3b45c6fb4c43d1c337f3ea4676cd1aa4646ead6288d873cfea414d20d8f15ef0bc50102640f00e00"/220], 0x80}}, 0x0) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000240), r0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r0, &(0x7f00000003c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000300)={&(0x7f0000000280)={0x20, r3, 0x8, 0x70bd28, 0x25dfdbfd, {}, [@TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x8030}, 0x4000) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) r6 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_wireguard(r5, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) sendto$packet(r6, &(0x7f0000000100)="6751ff1dea42ee0faa018932f122dd7c277442af56b35a9427dde51c72aa7dc1e60808aa92305617", 0x28, 0x40440c4, &(0x7f0000000180)={0x11, 0x1a, r7, 0x1, 0xff, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1c}}, 0x14) sendmsg$nl_route_sched_retired(r4, &(0x7f0000000740)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000700)={&(0x7f0000000580)=@newqdisc={0x74, 0x24, 0x10, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, r7, {0xf, 0x7}, {0xd, 0x4}, {0x0, 0x6}}, [@q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x30, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0xc}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0xc}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x74}, 0x1, 0x0, 0x0, 0x80000}, 0x24000000) sendmmsg$inet6(r1, &(0x7f0000007e40)=[{{&(0x7f0000000340)={0xa, 0x4e20, 0x0, @ipv4={'\x00', '\xff\xff', @multicast1=0xe0000010}}, 0x1c, 0x0}}], 0x6c00, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) bpf$MAP_CREATE(0x0, &(0x7f0000000440)=@base={0x20, 0x4, 0x2, 0x0, 0x201, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0xffffffff, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bind$packet(r0, &(0x7f00000000c0)={0x11, 0x9, 0x0, 0x1, 0x1, 0x6, @link_local}, 0x14) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(0xffffffffffffffff, 0x84, 0x1e, &(0x7f00000006c0)=0x6, 0x4) r8 = socket(0x840000000002, 0x3, 0x100) connect$inet(r8, 0x0, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, 0x0, 0x2c8) syz_emit_ethernet(0x3e, &(0x7f0000000000)={@dev, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x30, 0x0, 0x0, 0x0, 0x67, 0x0, @remote, @remote}, @time_exceeded={0x21, 0x0, 0x0, 0x12, 0x0, 0x2802, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @empty, @local}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x300, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) sendmmsg$inet(r8, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) 732.132317ms ago: executing program 0 (id=9): socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) (async, rerun: 32) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) (async) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000200)=@in4={0x21, 0x3, 0x2, 0x10, {0x2, 0x0, @broadcast}}, 0x24) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) (async) r4 = socket$inet6(0xa, 0x6, 0x0) bind$inet6(r4, &(0x7f0000000180)={0xa, 0x4e20, 0x0, @empty}, 0x1c) (async) r5 = socket$inet_dccp(0x2, 0x6, 0x0) listen(r4, 0x5) (async) connect$inet(r5, &(0x7f0000000000)={0x2, 0x4e20, @loopback}, 0x10) (async) sendmmsg(r5, &(0x7f0000002980), 0x400000000000239, 0x0) (async, rerun: 64) r6 = socket$kcm(0x23, 0x2, 0x0) (rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000400)='sys_exit\x00', r7}, 0x18) recvmsg(r6, &(0x7f0000000380)={0x0, 0x0, 0x0}, 0x0) (async) recvmsg(0xffffffffffffffff, 0x0, 0x400081c1) (async) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f00000001c0), 0xffffffffffffffff) (async) r9 = socket$nl_generic(0x10, 0x3, 0x10) recvmmsg(r9, &(0x7f0000001640), 0x300, 0x2, 0x0) sendmsg$ETHTOOL_MSG_TSINFO_GET(r9, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000280)={0x14, r8, 0xfaac4106a1b87a7, 0x0, 0x0, {0xb}}, 0x14}}, 0x0) (async) listen(r3, 0x0) recvfrom(r3, 0x0, 0x0, 0x42, 0x0, 0x0) (async, rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="1c0000005e00040300"/20, @ANYRES32=0x0, @ANYBLOB="00170000"], 0x1c}}, 0x0) (async, rerun: 32) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYRESDEC=r5], 0x120}}, 0x20040080) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000480)=ANY=[@ANYRESDEC=r4], 0x9c}, 0x1, 0x0, 0x0, 0x4840}, 0x0) 688.64083ms ago: executing program 4 (id=5): syz_genetlink_get_family_id$ethtool(0x0, 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_REG(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001b40)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010000000000000000001a00000007002100626204001c002280040000800000040003000000000004000d00000004000080040000800400008024fc008004000080"], 0x38}}, 0x0) sendmsg$ETHTOOL_MSG_COALESCE_SET(0xffffffffffffffff, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000061"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r3 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r3, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x40) setsockopt$inet_msfilter(r3, 0x0, 0x29, &(0x7f0000000080)=ANY=[@ANYRES16], 0x57) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000080f9a8000000000000860000000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) bind$unix(0xffffffffffffffff, 0x0, 0x0) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448de, &(0x7f00000000c0)={0x0, 0x0, "a4cd91"}) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r6, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) write(r6, &(0x7f0000000040)="05000000010000", 0x7) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x10, 0xffffffffffffffff, 0x0) r7 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(r7, 0x6, 0xd, &(0x7f0000000100)='dctcp\x00', 0x6) connect$inet(r7, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r8 = socket$nl_sock_diag(0x10, 0x3, 0x4) sendmsg$TCPDIAG_GETSOCK(r8, &(0x7f0000002500)={0x0, 0x0, &(0x7f00000024c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001200010a00000000000000000000003f00000000000000000000000000000000000000e0ffffffff454b086007ecaec800000000e0798deb5d64018ebcdfdc8817"], 0x50}}, 0x0) socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet_tcp_int(r3, 0x6, 0x0, 0x0, 0x0) r9 = epoll_create(0x800) epoll_ctl$EPOLL_CTL_ADD(r9, 0x1, r4, &(0x7f00000001c0)={0x10}) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000140)='contention_end\x00', r2}, 0x18) close(0xffffffffffffffff) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) 648.341739ms ago: executing program 3 (id=10): r0 = socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r4 = socket$inet6(0xa, 0x80002, 0x0) sendmmsg$inet(r4, &(0x7f0000007d00)=[{{&(0x7f0000000040)={0x2, 0x4e20, @multicast1}, 0x10, 0x0, 0x0, &(0x7f00000003c0)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x35}, @broadcast}}}], 0x20}}], 0x1, 0x4000000) r5 = socket$kcm(0xf, 0x3, 0x2) sendmsg$inet(r5, &(0x7f0000003780)={0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000000)="02130209020000", 0x7}, {&(0x7f0000000780)="a112fde44010973762", 0x9}], 0x2}, 0x400c010) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000c00)=@newlink={0x28, 0x10, 0x409, 0x80000000, 0x0, {0x0, 0x0, 0x0, r3, 0x600}, [@IFLA_GROUP={0x8, 0x1b, 0xffffffff}]}, 0x28}}, 0x44000) getsockopt$sock_buf(r0, 0x1, 0x1c, 0x0, &(0x7f0000000140)) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="240000001e000100ffffffff000000000200000000972ec26e6fc50a4264e0f47f34ac3e"], 0x24}}, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000180)={'vcan0\x00', 0x0}) bind$can_j1939(r8, &(0x7f0000000240)={0x1d, r9}, 0x18) socketpair(0xa, 0x6, 0x9, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$WPAN_WANTACK(r11, 0x0, 0x0, &(0x7f00000000c0), &(0x7f0000000200)=0x4) connect$can_j1939(r8, &(0x7f0000000280)={0x1d, r9, 0x3, {0x0, 0x1, 0x4}}, 0x18) r12 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r13 = socket$tipc(0x1e, 0x2, 0x0) r14 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000340), r10) sendmsg$TIPC_NL_LINK_SET(r10, &(0x7f0000000400)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)={0x140, r14, 0x10, 0x70bd28, 0x25dfdbfc, {}, [@TIPC_NLA_NET={0x40, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xdbb}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x200}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8000000}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x8}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x3}]}, @TIPC_NLA_PUBL={0x44, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x2}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0xff}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x101}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x7}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x2}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xd}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5}]}, @TIPC_NLA_MON={0x14, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x3}]}, @TIPC_NLA_MEDIA={0x94, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x60}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x2}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xffffff7f}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1b}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x5}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x39}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xb}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}]}, 0x140}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) setsockopt$TIPC_CONN_TIMEOUT(r13, 0x10f, 0x82, &(0x7f0000000080)=0xc2c, 0x4) r15 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r15, 0x400448ca, 0x0) bind$bt_hci(r15, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r15, &(0x7f00000004c0)=ANY=[@ANYBLOB="010120"], 0xc) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000002c0)=ANY=[@ANYRES8=r15, @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES32=r9, @ANYRES16=r15, @ANYBLOB="04000000010000000100"/28, @ANYRES8=r12, @ANYRES64=r9], 0x50) sendmsg$nl_route(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB="300000001a0001000000000000000000818000000004000000000000140001"], 0x30}}, 0x0) 292.560185ms ago: executing program 0 (id=11): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xd, &(0x7f0000000f80)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000a000000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000280)="9e36d448b388dd965f7a3312779a", 0x0, 0x0, 0xe8030000, 0x0, 0x0, 0x0, 0x0}, 0x50) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000006c0)=ANY=[@ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe80000000000000000000"], 0x134}}, 0x4c004) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r4, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) r5 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_XFRM_POLICY(r5, 0x29, 0x23, &(0x7f00000003c0)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0x2}, {}, {}, 0x0, 0x0, 0x1}, {{@in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x2b}, 0x0, @in6=@private1}}, 0xe8) connect$inet6(r5, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @loopback}}, 0x1c) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000580)=@flushsa={0x14, 0x1c, 0x1, 0x0, 0x0, {0xff}}, 0x14}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f00000002c0), r7) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000140)={0x1, 0xffffffffffffffff}, 0x4) r9 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_rose_SIOCDELRT(r7, 0x890c, &(0x7f0000000700)={@dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, 0x7fff, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={'rose', 0x0}, 0x8, [@null, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}]}) connect$can_bcm(r9, &(0x7f00000000c0), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000000200)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r9, &(0x7f0000000240)={&(0x7f0000000180)={0x1d, r10}, 0x10, &(0x7f00000001c0)={&(0x7f0000000680)=ANY=[@ANYBLOB="0100000071e126c1c6be046d53f58b00", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYBLOB="0000000001"], 0x48}}, 0x0) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000180), 0x4) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000005c0)=ANY=[@ANYBLOB="0300000004000000040000000a000000000000ff", @ANYRES32=r8, @ANYBLOB="0200"/20, @ANYRES32=r10, @ANYRES32=r11, @ANYBLOB="05000000040000000500"/28], 0x50) getsockname$packet(r7, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r12, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r12, {}, {0xffff, 0xffff}, {0x8}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x9ef, 0xffff}}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x1, 0x0, 0x800000, {0x0, 0x0, 0x0, r12, {0x7}, {}, {0x4}}}, 0x24}, 0x1, 0x0, 0x0, 0x4004040}, 0x4000000) 255.420482ms ago: executing program 1 (id=2): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newtaction={0x80, 0x30, 0xb, 0x0, 0x0, {}, [{0x6c, 0x1, [@m_ct={0x68, 0x1, 0x0, 0x0, {{0x7}, {0x40, 0x2, 0x0, 0x1, [@TCA_CT_PARMS={0x18}, @TCA_CT_LABELS={0x14, 0x7, "4614c334e344ae53204373dc0ddeb17f"}, @TCA_CT_ZONE={0x6, 0x8}, @TCA_CT_ZONE={0x6, 0x4, 0xd4c}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x80}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYRESHEX, @ANYRES32=r1, @ANYRESOCT=r0, @ANYBLOB="70e818ff5a6ab95da4333276caae4d587b59c0e7c0cd4e17a82fdd6685c1c15f078fe92f0968ec9e6bfa3d37d59396a1e71c415ff402bcade19d3048acd8450aa2208441fa582e6461a0ba8fbb1e1095476b5d09a06900fe7b9ffa0bba78e729b2c5b5"], 0x7c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @connlimit={{0xe}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_CONNLIMIT_COUNT={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x4}]}], {0x14}}, 0x78}}, 0x0) close(r1) 149.300612ms ago: executing program 2 (id=12): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x4d, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0xd8) bind$inet(r0, &(0x7f0000deb000)={0x2, 0x4e23, @multicast1}, 0x10) sendto$inet(r0, 0x0, 0xffffffffffffff7c, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @loopback}, 0x10) close(r0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000080)='cubic\x00', 0x6) accept4$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, &(0x7f0000000040)=0x10, 0x800) 116.437738ms ago: executing program 1 (id=13): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007"], 0x38}}, 0x4048850) r1 = socket(0x200000000000011, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'bridge0\x00'}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DISCONNECT(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000140)={0x68, r2, 0x200, 0x70bd28, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @val={0xc, 0x99, {0x7ff, 0x42}}}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x19}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3d}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x23}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0xd}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x36}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x34}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x35}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x37}]}, 0x68}, 0x1, 0x0, 0x0, 0x20040004}, 0x20000000) 1.931712ms ago: executing program 0 (id=14): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711c15000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = socket$inet_udp(0x2, 0x2, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x4c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x32b}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @gtp={{0x8}, {0x20, 0x2, 0x0, 0x1, [@IFLA_GTP_FD0={0x8, 0x1, @udp=r1}, @IFLA_GTP_LOCAL6={0x14, 0x8, @empty}]}}}]}, 0x4c}}, 0x0) r2 = socket$inet(0xa, 0x801, 0x84) connect$inet(r2, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r2, 0x8) r3 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r3, 0x0, 0x40, &(0x7f0000000000)=@filter={'filter\x00', 0x42, 0x4, 0x360, 0xffffffff, 0x1d8, 0x0, 0x98, 0xffffffff, 0xffffffff, 0x2c8, 0x2c8, 0x2c8, 0xffffffff, 0x4, 0x0, {[{{@ip={@private, @empty, 0x0, 0x0, 'veth1_to_hsr\x00', 'macvlan1\x00', {}, {}, 0x6, 0x0, 0x61}, 0xa00, 0x70, 0x98, 0x0, {0x100000000000000}}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x12, 0x0, 0x2}}}, {{@ip={@local, @rand_addr, 0x0, 0x0, 'team0\x00', 'gretap0\x00', {}, {}, 0x6}, 0x0, 0xe0, 0x140, 0x0, {}, [@common=@inet=@ecn={{0x28}, {0x21}}, @common=@unspec=@helper={{0x48}, {0x0, 'irc-20000\x00'}}]}, @common=@SET={0x60, 'SET\x00', 0x0, {{0x0, [0x4, 0x2, 0x6, 0x1, 0x0, 0x1], 0x3, 0x1}, {0x1, [0x6, 0x3, 0x6697e4e8f2a2b31b, 0x5, 0x5, 0x1], 0x4, 0xa}}}}, {{@uncond, 0x0, 0xc8, 0xf0, 0x0, {}, [@common=@ttl={{0x28}, {0x0, 0xe}}, @common=@addrtype={{0x30}}]}, @REJECT={0x28, 'REJECT\x00', 0x0, {0x3}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x3c0) r4 = accept4(r2, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_ASSOCINFO(r4, 0x84, 0x1, &(0x7f0000000100)={0x0, 0x7, 0xce07, 0x6, 0xc7a, 0x7}, &(0x7f0000000140)=0x14) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000000280)="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", 0x1000) 0s ago: executing program 2 (id=15): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000180), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'pim6reg1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x336) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=@ipv6_newaddr={0x18, 0x14, 0x9535393fea6295b5}, 0x18}}, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @link_local}) r4 = socket$kcm(0x29, 0x5, 0x0) r5 = socket$pppl2tp(0x18, 0x1, 0x1) setsockopt$SO_ATTACH_FILTER(r5, 0x1, 0x33, &(0x7f0000000000)={0x0, 0x0}, 0x10) (async) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r7, &(0x7f0000003c80)={0x0, 0x0, &(0x7f0000003c40)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a44000000050a010100000000000000000200397e0000f40b000240007600000000000114000000110001000000000000d8198bf734037ed3968f77df3f9939cfbe7ad80000000000000a00"/107], 0x58}}, 0x0) socket$unix(0x1, 0x0, 0x0) (async) r8 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r8, 0x400448de, &(0x7f00000000c0)={0x0, 0x0, "a4cd91", 0x0, 0xe}) (async) r9 = socket$inet_dccp(0x2, 0x6, 0x0) getsockopt$inet_int(r9, 0x10d, 0xe7, &(0x7f0000000040), &(0x7f0000000080)=0x4) (async) sendmsg$tipc(r6, &(0x7f00000005c0)={&(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x40}}, 0x10, &(0x7f0000000540)=[{&(0x7f00000001c0)="d03e276a058e64cfc35ad1daf77b2634de87b92cafd0c1719b526f35416075b31ce1421a5eec814447dc6ef9cb80345e03bbea6c3eeee42402fae69db3137d9487b0cd6366492c20ed9011cfe4ce4045875fe22891e4569a1fd2f13f3b13716305e4c11aa9f16e55bcefede788273d124b832e5af580dd178f14d3db5e5caeacbe5bdfcd2947ca95cee115f4447492d95c417e9e27", 0x95}, {&(0x7f0000000280)="e096583f581ec61a430c5ab06f30382ccde0e66b9ec69183e49b82454b14d7a9db7da2c2cce9f48250b3b7e7ab4b7583dade1547ea11461cc3c8200f487606b23d2ed5de2fd32c0035c9574abca0a6f1c95fa3c4b585a34ebcf2b8313c4e9fcac0caa2aa75d6cb00ad9d3d4c138c9fc7d93e30a0cd3738be8452", 0x7a}, {&(0x7f0000000300)="fc6c2dbe3bc8b56276902d20d87c2fc0d13507b3b756055470a345078ca3ba533688d1f7e7b6184938587a5600f5fbc25eec8cdb5724192974f3136055bcadfa6b903a220eabb2dfbba80cff4f6083db182eb7f6098e22cca0af81a8aeee48e56ca175895a413636c33f3a80f73111c3328ecc0ee348df4b667f1e7cd0223ac47d8d1e73a0ebae387b54de0055e21390534900cb73291d06c3a85a3eea55abf1e131edc5b029ea07a1dda1dd4ebb499288a1244a1d4a397ed12e9a743cdc079ea8472c439ae258bf4bc416e74f47668efe5db134b493104b5e67e2b89eaedad470475d93d6", 0xe5}, {&(0x7f0000000400)="71f15a7dfa1626d828f87f36a31292062d2c955aa277b5d44a1b1b2eda795ef0a219883d43e86212269a75a02341f5a806ced5f2403a935d8c0a36ebb32abaf6ea13ccc127d14edc90e64d65c53fb7b95ad2aaece89fad52fd39103e0cae0682e409c45187bfc13b5e3b5494f3e8a22d06f08693b97c0f549c8ac90a653ecf8342", 0x81}, {&(0x7f00000004c0)="ebc94d3466b1e951f8530db76b2243f56b636fffa75691c6f480fbf2c8fa07ce4a348883f09d7aaf846fcf7d78c1db3ee27d74f8e7ee69d2bdb364307826ad3e0005ff9c5f36eedcb398b21245b429240ca9b0c96fa031391ef8a8962c7eecf5530905", 0x63}], 0x5, &(0x7f0000000100)="0e598e27cc5125205866ee6fc916793e488df3ec2e12", 0x16}, 0x4000) (async) splice(r4, 0x0, r6, 0x0, 0xf3e, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000140)={'pim6reg1\x00', @dev}) close(r0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.49' (ED25519) to the list of known hosts. [ 58.166055][ T5830] cgroup: Unknown subsys name 'net' [ 58.297602][ T5830] cgroup: Unknown subsys name 'cpuset' [ 58.305379][ T5830] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 59.575140][ T5830] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 63.718278][ T5851] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 63.727823][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 63.747734][ T5854] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 63.755912][ T5854] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 63.766600][ T5854] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 63.770359][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 63.774613][ T5854] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 63.789605][ T5854] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 63.797977][ T5854] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 63.805265][ T5859] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 63.806601][ T5854] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 63.813280][ T5859] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 63.820731][ T5854] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 63.834182][ T5854] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 63.835389][ T5859] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 63.842076][ T5854] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 63.849121][ T5859] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 63.856103][ T5854] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 63.862843][ T5859] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 63.871246][ T5854] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 63.878189][ T5859] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 63.884325][ T5854] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 63.898343][ T5854] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 63.911127][ T5851] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 63.918338][ T5854] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 63.930538][ T5851] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 63.931356][ T5859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 63.945078][ T5851] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 63.947877][ T5859] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 63.960600][ T5859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 64.383471][ T5856] chnl_net:caif_netlink_parms(): no params data found [ 64.392677][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 64.426775][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 64.437597][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 64.563624][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 64.631216][ T5856] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.639435][ T5856] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.647192][ T5856] bridge_slave_0: entered allmulticast mode [ 64.653771][ T5856] bridge_slave_0: entered promiscuous mode [ 64.676907][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.684186][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.691569][ T5844] bridge_slave_0: entered allmulticast mode [ 64.698961][ T5844] bridge_slave_0: entered promiscuous mode [ 64.732190][ T5856] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.739418][ T5856] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.746871][ T5856] bridge_slave_1: entered allmulticast mode [ 64.753440][ T5856] bridge_slave_1: entered promiscuous mode [ 64.760669][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.768209][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.775630][ T5841] bridge_slave_0: entered allmulticast mode [ 64.782236][ T5841] bridge_slave_0: entered promiscuous mode [ 64.789233][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.799299][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.806663][ T5844] bridge_slave_1: entered allmulticast mode [ 64.813302][ T5844] bridge_slave_1: entered promiscuous mode [ 64.822849][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 64.830107][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 64.837446][ T5840] bridge_slave_0: entered allmulticast mode [ 64.844129][ T5840] bridge_slave_0: entered promiscuous mode [ 64.866149][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.873330][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.880807][ T5841] bridge_slave_1: entered allmulticast mode [ 64.887501][ T5841] bridge_slave_1: entered promiscuous mode [ 64.911898][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.919163][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.929081][ T5840] bridge_slave_1: entered allmulticast mode [ 64.936033][ T5840] bridge_slave_1: entered promiscuous mode [ 64.944896][ T5856] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.983742][ T5856] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.995366][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.006436][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.018448][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.068654][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.095945][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.103541][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 65.111000][ T5842] bridge_slave_0: entered allmulticast mode [ 65.118064][ T5842] bridge_slave_0: entered promiscuous mode [ 65.126171][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.133290][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 65.141104][ T5842] bridge_slave_1: entered allmulticast mode [ 65.147913][ T5842] bridge_slave_1: entered promiscuous mode [ 65.157233][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.169305][ T5856] team0: Port device team_slave_0 added [ 65.177818][ T5856] team0: Port device team_slave_1 added [ 65.193007][ T5844] team0: Port device team_slave_0 added [ 65.201206][ T5844] team0: Port device team_slave_1 added [ 65.233268][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.274908][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 65.287124][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 65.307294][ T5840] team0: Port device team_slave_0 added [ 65.323172][ T5841] team0: Port device team_slave_0 added [ 65.331596][ T5841] team0: Port device team_slave_1 added [ 65.338533][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.345606][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.372011][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.400317][ T5840] team0: Port device team_slave_1 added [ 65.413689][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.420798][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.447270][ T5856] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.459922][ T5856] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.466997][ T5856] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.493045][ T5856] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.512413][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.520189][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.546867][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.595648][ T5842] team0: Port device team_slave_0 added [ 65.601876][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.609187][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.635287][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.647841][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.654904][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.680981][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.701237][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.708318][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.734260][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.747238][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.754449][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.780442][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.793142][ T5842] team0: Port device team_slave_1 added [ 65.841988][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 65.849138][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.875408][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 65.891029][ T5856] hsr_slave_0: entered promiscuous mode [ 65.897606][ T5856] hsr_slave_1: entered promiscuous mode [ 65.915281][ T5859] Bluetooth: hci0: command tx timeout [ 65.915287][ T5850] Bluetooth: hci1: command tx timeout [ 65.951736][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 65.959098][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 65.986408][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 65.997085][ T5859] Bluetooth: hci3: command tx timeout [ 66.004248][ T5859] Bluetooth: hci2: command tx timeout [ 66.008464][ T5850] Bluetooth: hci4: command tx timeout [ 66.038651][ T5841] hsr_slave_0: entered promiscuous mode [ 66.045602][ T5841] hsr_slave_1: entered promiscuous mode [ 66.051715][ T5841] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.059592][ T5841] Cannot create hsr debugfs directory [ 66.079186][ T5844] hsr_slave_0: entered promiscuous mode [ 66.085477][ T5844] hsr_slave_1: entered promiscuous mode [ 66.091997][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.099787][ T5844] Cannot create hsr debugfs directory [ 66.116866][ T5840] hsr_slave_0: entered promiscuous mode [ 66.123457][ T5840] hsr_slave_1: entered promiscuous mode [ 66.129875][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.137511][ T5840] Cannot create hsr debugfs directory [ 66.267259][ T5842] hsr_slave_0: entered promiscuous mode [ 66.273412][ T5842] hsr_slave_1: entered promiscuous mode [ 66.280141][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 66.287782][ T5842] Cannot create hsr debugfs directory [ 66.501893][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 66.516402][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 66.527145][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 66.546408][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 66.610501][ T5856] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.621618][ T5856] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.632638][ T5856] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.650403][ T5856] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.693309][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 66.710751][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 66.721131][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 66.748206][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 66.804255][ T5842] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 66.816869][ T5842] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 66.847800][ T5842] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 66.862513][ T5842] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 66.903591][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.919616][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 66.941879][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 66.975989][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 66.985776][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 67.027859][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.085625][ T3495] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.093173][ T3495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.105628][ T3495] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.112781][ T3495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.134577][ T5856] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.156582][ T5856] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.195252][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.213636][ T194] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.220849][ T194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.233734][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.258522][ T194] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.265653][ T194] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.292750][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.311830][ T5841] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.336221][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.411713][ T5856] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 67.430146][ T62] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.437262][ T62] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.449457][ T62] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.457012][ T62] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.472399][ T3495] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.479716][ T3495] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.514836][ T3495] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.522017][ T3495] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.555968][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.623425][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.651299][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.698148][ T53] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.705303][ T53] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.731619][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.738807][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.818093][ T5856] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.872428][ T5841] veth0_vlan: entered promiscuous mode [ 67.946169][ T5841] veth1_vlan: entered promiscuous mode [ 67.994705][ T5850] Bluetooth: hci1: command tx timeout [ 67.994944][ T5859] Bluetooth: hci0: command tx timeout [ 68.009008][ T5841] veth0_macvtap: entered promiscuous mode [ 68.027564][ T5841] veth1_macvtap: entered promiscuous mode [ 68.068741][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.077345][ T5859] Bluetooth: hci2: command tx timeout [ 68.077434][ T5850] Bluetooth: hci3: command tx timeout [ 68.088511][ T5859] Bluetooth: hci4: command tx timeout [ 68.132265][ T5844] veth0_vlan: entered promiscuous mode [ 68.170246][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.183358][ T5844] veth1_vlan: entered promiscuous mode [ 68.200860][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.231179][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.277435][ T5841] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.289878][ T5841] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.299297][ T5841] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.311389][ T5841] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.337880][ T5844] veth0_macvtap: entered promiscuous mode [ 68.377269][ T5844] veth1_macvtap: entered promiscuous mode [ 68.383798][ T5842] veth0_vlan: entered promiscuous mode [ 68.393284][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.440931][ T5856] veth0_vlan: entered promiscuous mode [ 68.459941][ T5842] veth1_vlan: entered promiscuous mode [ 68.493220][ T5856] veth1_vlan: entered promiscuous mode [ 68.500322][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.521732][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.542398][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.553580][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.565721][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.603007][ T5840] veth0_vlan: entered promiscuous mode [ 68.618469][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.629596][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.643286][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.658379][ T5844] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.667403][ T5844] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.676318][ T5844] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.685268][ T5844] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.709779][ T5842] veth0_macvtap: entered promiscuous mode [ 68.721868][ T194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.724578][ T5840] veth1_vlan: entered promiscuous mode [ 68.747714][ T5842] veth1_macvtap: entered promiscuous mode [ 68.749781][ T194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.791027][ T5856] veth0_macvtap: entered promiscuous mode [ 68.827242][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.838853][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.849609][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.861082][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.873530][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.878071][ T5841] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 68.903450][ T5856] veth1_macvtap: entered promiscuous mode [ 68.936587][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.953058][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.957475][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.964095][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.981124][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.992583][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.003773][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.015649][ T5842] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.024481][ T5842] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.033347][ T5842] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.042622][ T5842] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.095697][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.108918][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.119250][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.131581][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.141504][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.152179][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.163086][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.201255][ T5840] veth0_macvtap: entered promiscuous mode [ 69.223533][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.237377][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.247425][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.258155][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.268054][ T5856] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.278612][ T5856] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.290825][ T5856] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.292852][ T5927] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1'. [ 69.308968][ T1153] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.318074][ T5840] veth1_macvtap: entered promiscuous mode [ 69.318515][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.338228][ T1153] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.339396][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.362313][ T5856] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.371464][ T5856] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.382281][ T5856] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.397234][ T5856] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.465206][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.475798][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.485679][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.496225][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.506122][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.516847][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.526748][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.537291][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.548856][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.569744][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.582450][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.593641][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.607532][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.626181][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.642053][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.652254][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.663028][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.673426][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.681916][ T5934] netlink: 76 bytes leftover after parsing attributes in process `syz.3.4'. [ 69.691657][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.704457][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.760087][ T5840] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.787252][ T5840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.796250][ T5840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.805128][ T5840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.996506][ T5941] syz.0.8 uses obsolete (PF_INET,SOCK_PACKET) [ 70.072648][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.074446][ T1153] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.080901][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.104246][ T5850] Bluetooth: hci0: command tx timeout [ 70.109694][ T5850] Bluetooth: hci1: command tx timeout [ 70.118332][ T1153] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.149356][ T5944] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.155229][ T5859] Bluetooth: hci4: command tx timeout [ 70.166636][ T5850] Bluetooth: hci2: command tx timeout [ 70.172726][ T5850] Bluetooth: hci3: command tx timeout [ 70.288102][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.324328][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.449441][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 70.474491][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.725587][ T5955] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.841198][ T5956] Bluetooth: MGMT ver 1.23 [ 70.865616][ T5965] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11'. [ 70.885995][ T5962] Bluetooth: hci0: Opcode 0x0c20 failed: -112 [ 71.066281][ T5972] netlink: 32 bytes leftover after parsing attributes in process `syz.1.13'. [ 71.089087][ T5859] ================================================================== [ 71.097193][ T5859] BUG: KASAN: slab-use-after-free in set_powered_sync+0x3a/0xc0 [ 71.104863][ T5859] Read of size 8 at addr ffff888030332298 by task kworker/u9:8/5859 [ 71.112860][ T5859] [ 71.115219][ T5859] CPU: 1 UID: 0 PID: 5859 Comm: kworker/u9:8 Not tainted 6.12.0-rc5-syzkaller-01053-gdbb9a7ef3478 #0 [ 71.126078][ T5859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 71.136152][ T5859] Workqueue: hci0 hci_cmd_sync_work [ 71.138533][ T5975] netlink: 48 bytes leftover after parsing attributes in process `syz.2.15'. [ 71.141368][ T5859] Call Trace: [ 71.141379][ T5859] [ 71.141387][ T5859] dump_stack_lvl+0x241/0x360 [ 71.161113][ T5859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 71.166345][ T5859] ? __pfx__printk+0x10/0x10 [ 71.170964][ T5859] ? _printk+0xd5/0x120 [ 71.175146][ T5859] ? __virt_addr_valid+0x183/0x530 [ 71.180278][ T5859] ? __virt_addr_valid+0x183/0x530 [ 71.185504][ T5859] print_report+0x169/0x550 [ 71.190034][ T5859] ? __virt_addr_valid+0x183/0x530 [ 71.195161][ T5859] ? __virt_addr_valid+0x183/0x530 [ 71.200298][ T5859] ? __virt_addr_valid+0x45f/0x530 [ 71.205433][ T5859] ? __phys_addr+0xba/0x170 [ 71.210048][ T5859] ? set_powered_sync+0x3a/0xc0 [ 71.214920][ T5859] kasan_report+0x143/0x180 [ 71.219444][ T5859] ? set_powered_sync+0x3a/0xc0 [ 71.224323][ T5859] set_powered_sync+0x3a/0xc0 [ 71.229022][ T5859] ? __pfx_set_powered_sync+0x10/0x10 [ 71.234413][ T5859] hci_cmd_sync_work+0x22b/0x400 [ 71.239381][ T5859] ? process_scheduled_works+0x976/0x1850 [ 71.245127][ T5859] process_scheduled_works+0xa63/0x1850 [ 71.250706][ T5859] ? __pfx_process_scheduled_works+0x10/0x10 [ 71.256709][ T5859] ? assign_work+0x364/0x3d0 [ 71.261804][ T5859] worker_thread+0x870/0xd30 [ 71.265183][ T5978] gtp0: entered promiscuous mode [ 71.266393][ T5859] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 71.271319][ T5978] gtp0: entered allmulticast mode [ 71.277185][ T5859] ? __kthread_parkme+0x169/0x1d0 [ 71.277214][ T5859] ? __pfx_worker_thread+0x10/0x10 [ 71.277235][ T5859] kthread+0x2f0/0x390 [ 71.277252][ T5859] ? __pfx_worker_thread+0x10/0x10 [ 71.277272][ T5859] ? __pfx_kthread+0x10/0x10 [ 71.277287][ T5859] ret_from_fork+0x4b/0x80 [ 71.277310][ T5859] ? __pfx_kthread+0x10/0x10 [ 71.315340][ T5859] ret_from_fork_asm+0x1a/0x30 [ 71.320135][ T5859] [ 71.323165][ T5859] [ 71.325502][ T5859] Allocated by task 5956: [ 71.329834][ T5859] kasan_save_track+0x3f/0x80 [ 71.334530][ T5859] __kasan_kmalloc+0x98/0xb0 [ 71.339145][ T5859] __kmalloc_cache_noprof+0x19c/0x2c0 [ 71.344549][ T5859] mgmt_pending_new+0x65/0x250 [ 71.349337][ T5859] mgmt_pending_add+0x36/0x120 [ 71.354201][ T5859] set_powered+0x3cd/0x5e0 [ 71.358636][ T5859] hci_mgmt_cmd+0xc47/0x11d0 [ 71.363239][ T5859] hci_sock_sendmsg+0x7b8/0x11c0 [ 71.368195][ T5859] __sock_sendmsg+0x221/0x270 [ 71.372887][ T5859] sock_write_iter+0x2d7/0x3f0 [ 71.374679][ T5984] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 71.377647][ T5859] vfs_write+0xaeb/0xd30 [ 71.377674][ T5859] ksys_write+0x183/0x2b0 [ 71.377689][ T5859] do_syscall_64+0xf3/0x230 [ 71.402345][ T5859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.408262][ T5859] [ 71.410679][ T5859] Freed by task 5955: [ 71.414662][ T5859] kasan_save_track+0x3f/0x80 [ 71.419351][ T5859] kasan_save_free_info+0x40/0x50 [ 71.424404][ T5859] __kasan_slab_free+0x59/0x70 [ 71.429180][ T5859] kfree+0x1a0/0x440 [ 71.433092][ T5859] settings_rsp+0x2bc/0x390 [ 71.437711][ T5859] mgmt_pending_foreach+0xd1/0x130 [ 71.442838][ T5859] __mgmt_power_off+0x106/0x430 [ 71.447705][ T5859] hci_dev_close_sync+0x6c4/0x11c0 [ 71.452827][ T5859] hci_dev_close+0x112/0x210 [ 71.457440][ T5859] sock_do_ioctl+0x158/0x460 [ 71.462046][ T5859] sock_ioctl+0x626/0x8e0 [ 71.466431][ T5859] __se_sys_ioctl+0xf9/0x170 [ 71.471130][ T5859] do_syscall_64+0xf3/0x230 [ 71.475643][ T5859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.481554][ T5859] [ 71.483888][ T5859] The buggy address belongs to the object at ffff888030332280 [ 71.483888][ T5859] which belongs to the cache kmalloc-96 of size 96 [ 71.497784][ T5859] The buggy address is located 24 bytes inside of [ 71.497784][ T5859] freed 96-byte region [ffff888030332280, ffff8880303322e0) [ 71.504360][ T5987] netlink: 'syz.4.16': attribute type 4 has an invalid length. [ 71.511408][ T5859] [ 71.511418][ T5859] The buggy address belongs to the physical page: [ 71.527808][ T5859] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x30332 [ 71.536583][ T5859] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 71.543719][ T5859] page_type: f5(slab) [ 71.547720][ T5859] raw: 00fff00000000000 ffff88801ac41280 dead000000000122 0000000000000000 [ 71.556327][ T5859] raw: 0000000000000000 0000000000200020 00000001f5000000 0000000000000000 [ 71.564931][ T5859] page dumped because: kasan: bad access detected [ 71.571366][ T5859] page_owner tracks the page as allocated [ 71.577104][ T5859] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5895, tgid 5895 (kworker/0:3), ts 70877435554, free_ts 70863625437 [ 71.596397][ T5859] post_alloc_hook+0x1f3/0x230 [ 71.601184][ T5859] get_page_from_freelist+0x303f/0x3190 [ 71.606745][ T5859] __alloc_pages_noprof+0x292/0x710 [ 71.611970][ T5859] alloc_pages_mpol_noprof+0x3e8/0x680 [ 71.617157][ T5982] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 71.617433][ T5859] alloc_slab_page+0x6a/0x120 [ 71.629147][ T5859] allocate_slab+0x5a/0x2f0 [ 71.633639][ T5859] ___slab_alloc+0xcd1/0x14b0 [ 71.638306][ T5859] __slab_alloc+0x58/0xa0 [ 71.642652][ T5859] __kmalloc_cache_noprof+0x1d5/0x2c0 [ 71.648021][ T5859] dst_cow_metrics_generic+0x56/0x1c0 [ 71.653433][ T5859] icmp6_dst_alloc+0x270/0x420 [ 71.658198][ T5859] mld_sendpack+0x6a3/0xdb0 [ 71.662718][ T5859] mld_ifc_work+0x7d9/0xd90 [ 71.667280][ T5859] process_scheduled_works+0xa63/0x1850 [ 71.672852][ T5859] worker_thread+0x870/0xd30 [ 71.677469][ T5859] kthread+0x2f0/0x390 [ 71.681561][ T5859] page last free pid 5218 tgid 5218 stack trace: [ 71.687900][ T5859] free_unref_page+0xcfb/0xf20 [ 71.692713][ T5859] __put_partials+0xeb/0x130 [ 71.697324][ T5859] put_cpu_partial+0x17c/0x250 [ 71.702108][ T5859] __slab_free+0x2ea/0x3d0 [ 71.706706][ T5859] qlist_free_all+0x9a/0x140 [ 71.711316][ T5859] kasan_quarantine_reduce+0x14f/0x170 [ 71.716886][ T5859] __kasan_slab_alloc+0x23/0x80 [ 71.722013][ T5859] kmem_cache_alloc_noprof+0x135/0x2a0 [ 71.727497][ T5859] getname_flags+0xb7/0x540 [ 71.732019][ T5859] __x64_sys_unlink+0x3a/0x50 [ 71.736710][ T5859] do_syscall_64+0xf3/0x230 [ 71.741229][ T5859] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 71.747145][ T5859] [ 71.749476][ T5859] Memory state around the buggy address: [ 71.755117][ T5859] ffff888030332180: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 71.763191][ T5859] ffff888030332200: 00 00 00 00 00 00 00 00 00 00 fc fc fc fc fc fc [ 71.771366][ T5859] >ffff888030332280: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 71.779442][ T5859] ^ [ 71.784307][ T5859] ffff888030332300: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 71.792396][ T5859] ffff888030332380: fa fb fb fb fb fb fb fb fb fb fb fb fc fc fc fc [ 71.800468][ T5859] ================================================================== [ 71.812779][ T5859] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 71.820031][ T5859] CPU: 1 UID: 0 PID: 5859 Comm: kworker/u9:8 Not tainted 6.12.0-rc5-syzkaller-01053-gdbb9a7ef3478 #0 [ 71.830899][ T5859] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 71.840972][ T5859] Workqueue: hci0 hci_cmd_sync_work [ 71.846203][ T5859] Call Trace: [ 71.849930][ T5859] [ 71.852885][ T5859] dump_stack_lvl+0x241/0x360 [ 71.857590][ T5859] ? __pfx_dump_stack_lvl+0x10/0x10 [ 71.862809][ T5859] ? __pfx__printk+0x10/0x10 [ 71.867422][ T5859] ? preempt_schedule+0xe1/0xf0 [ 71.872306][ T5859] ? vscnprintf+0x5d/0x90 [ 71.876662][ T5859] panic+0x349/0x880 [ 71.880575][ T5859] ? check_panic_on_warn+0x21/0xb0 [ 71.885710][ T5859] ? __pfx_panic+0x10/0x10 [ 71.890148][ T5859] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 71.896152][ T5859] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 71.902508][ T5859] ? print_report+0x502/0x550 [ 71.907204][ T5859] check_panic_on_warn+0x86/0xb0 [ 71.912159][ T5859] ? set_powered_sync+0x3a/0xc0 [ 71.917031][ T5859] end_report+0x77/0x160 [ 71.921287][ T5859] kasan_report+0x154/0x180 [ 71.925791][ T5859] ? set_powered_sync+0x3a/0xc0 [ 71.930729][ T5859] set_powered_sync+0x3a/0xc0 [ 71.935402][ T5859] ? __pfx_set_powered_sync+0x10/0x10 [ 71.940770][ T5859] hci_cmd_sync_work+0x22b/0x400 [ 71.945706][ T5859] ? process_scheduled_works+0x976/0x1850 [ 71.951432][ T5859] process_scheduled_works+0xa63/0x1850 [ 71.957004][ T5859] ? __pfx_process_scheduled_works+0x10/0x10 [ 71.962982][ T5859] ? assign_work+0x364/0x3d0 [ 71.967569][ T5859] worker_thread+0x870/0xd30 [ 71.972165][ T5859] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 71.978054][ T5859] ? __kthread_parkme+0x169/0x1d0 [ 71.983075][ T5859] ? __pfx_worker_thread+0x10/0x10 [ 71.988180][ T5859] kthread+0x2f0/0x390 [ 71.992240][ T5859] ? __pfx_worker_thread+0x10/0x10 [ 71.997436][ T5859] ? __pfx_kthread+0x10/0x10 [ 72.002105][ T5859] ret_from_fork+0x4b/0x80 [ 72.006523][ T5859] ? __pfx_kthread+0x10/0x10 [ 72.011106][ T5859] ret_from_fork_asm+0x1a/0x30 [ 72.015881][ T5859] [ 72.019202][ T5859] Kernel Offset: disabled [ 72.023519][ T5859] Rebooting in 86400 seconds..