last executing test programs: 6.401195301s ago: executing program 1 (id=428): syz_init_net_socket$bt_l2cap(0x1f, 0x5, 0x0) (async, rerun: 64) r0 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'macvlan0\x00', 0x0}) r2 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c0000003d0007010000000000000000017c0000040008800c00018006000600800a000008000280040012"], 0x76}}, 0xc000) (async, rerun: 32) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010000100000000000000000080dcba2e", @ANYRES32=r1, @ANYBLOB="00000000000000002c0012800c0001006d6163766c616e001c00028008000100040000000800070000000000080003"], 0x4c}, 0x1, 0x0, 0x0, 0x800}, 0x2000c000) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, 0x0}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40000000, @void, @value}, 0x94) (async) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000380)=@base={0x9, 0x5, 0x8, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', r1, 0xffffffffffffffff, 0x5, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r3], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000500)={{r3}, &(0x7f0000000300), &(0x7f0000000400)}, 0x20) (async) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000700)='signal_generate\x00', r4}, 0x10) (async) syz_open_procfs$namespace(0x0, 0xfffffffffffffffe) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, 0x0}, 0x0) (async, rerun: 32) r5 = socket$inet6(0xa, 0x80001, 0x0) (rerun: 32) setsockopt$inet6_MCAST_JOIN_GROUP(r5, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r6 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r6, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x1}}}}]}, 0x44}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000002d00)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x14, 0x2, [@TCA_FLOW_EMATCHES={0x10, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8}]}]}}]}, 0x44}}, 0x0) (async, rerun: 32) r8 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r8, &(0x7f00000002c0), 0x40000000000009f, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) (async) r10 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000000)=ANY=[@ANYBLOB="500000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000140012800c0001006d6163766c616e000400028008000500", @ANYRES32=r11, @ANYBLOB="08000400000600000a519ca81b44000100aa2aaaaaaa"], 0x50}}, 0x0) (async) setsockopt$inet6_MCAST_MSFILTER(r5, 0x29, 0x30, &(0x7f0000000240)=ANY=[@ANYBLOB="01000000000000000a0000000000ff00ff010000000000000000000000000001000001000000000000000000e0ff00000000000000bd0000000000000000000000e4ec010000000040000000000000000000000000000000000000013da51fd47aa2e2f70000000000000000000000000000000000000000000000000000000000000067ff0000000000000005"], 0x310) 6.062545633s ago: executing program 1 (id=433): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', 0x0}) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r2, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000440)=[@in={0x2, 0x4e24, @loopback}]}, &(0x7f0000000380)=0x10) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000040)={r3, 0xc, 0x60}, &(0x7f0000000080)=0xc) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x1c, 0x2, [@TCA_HHF_BACKLOG_LIMIT={0x8}, @TCA_HHF_QUANTUM={0x8, 0x2, 0x9}, @TCA_HHF_HH_FLOWS_LIMIT={0x8}]}}]}, 0x48}}, 0x0) 5.562874219s ago: executing program 1 (id=437): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f000000c800)=[{{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000000340)=""/25, 0x19}, {&(0x7f0000000380)=""/93, 0x5d}, {&(0x7f0000000940)=""/132, 0x84}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/126, 0x7e}, {&(0x7f0000002d40)=""/201, 0xc9}, {&(0x7f0000001a80)=""/102, 0x66}], 0x7}, 0xc}, {{0x0, 0x0, 0x0}, 0x24c9ddb}, {{0x0, 0x0, 0x0}, 0xf04}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x56}, {{0x0, 0x0, 0x0}, 0x9}], 0x7, 0x40000000, 0x0) (async) recvmmsg(r0, &(0x7f000000c800)=[{{0x0, 0x0, &(0x7f0000002e40)=[{&(0x7f0000000340)=""/25, 0x19}, {&(0x7f0000000380)=""/93, 0x5d}, {&(0x7f0000000940)=""/132, 0x84}, {&(0x7f0000000a00)=""/4096, 0x1000}, {&(0x7f0000001a00)=""/126, 0x7e}, {&(0x7f0000002d40)=""/201, 0xc9}, {&(0x7f0000001a80)=""/102, 0x66}], 0x7}, 0xc}, {{0x0, 0x0, 0x0}, 0x24c9ddb}, {{0x0, 0x0, 0x0}, 0xf04}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, 0x0}, 0x56}, {{0x0, 0x0, 0x0}, 0x9}], 0x7, 0x40000000, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x3, 0x3, &(0x7f0000000000)=@framed={{0x62, 0xa, 0x0, 0xffc4, 0x0, 0x71, 0x10, 0xbf}}, &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 4.514792142s ago: executing program 1 (id=447): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_SET_VLAN_FLAG_CMD(r0, 0x8982, &(0x7f0000000000)={0x7, 'vlan0\x00', {0xa}, 0x4}) socket$inet_tcp(0x2, 0x1, 0x0) (async) r1 = socket$inet_tcp(0x2, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000680)=@caif=@util, 0x80, 0x0, 0x0, &(0x7f0000000dc0)=""/21, 0x15}, 0xfffffff7}], 0x2, 0x21, 0x0) (async) recvmmsg(r3, &(0x7f0000001280)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000680)=@caif=@util, 0x80, 0x0, 0x0, &(0x7f0000000dc0)=""/21, 0x15}, 0xfffffff7}], 0x2, 0x21, 0x0) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}}, 0x4000000) (async) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x2c}}, 0x4000000) connect$vsock_stream(r3, &(0x7f0000000040)={0x28, 0x0, 0xffffffff, @hyper}, 0x10) getsockopt$inet_tcp_int(r1, 0x6, 0xc, 0x0, &(0x7f0000000280)) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000100)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0xfffffffffffffddd) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000440)='pids.max\x00', 0x2, 0x0) sendfile(r5, r5, 0x0, 0x9) (async) sendfile(r5, r5, 0x0, 0x9) r6 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848370000005e120602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800) (async) sendmsg$kcm(r6, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73f72cc9f0ba1f848370000005e120602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x20000800) 4.01935263s ago: executing program 1 (id=452): sendmsg$NL80211_CMD_GET_SCAN(0xffffffffffffffff, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x100, 0x70bd2d, 0x25dfdbfd, {{}, {@void, @void}}, ["", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x10}, 0x4004000) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f00000001c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, 0x1d, 0x4, 0x70bd2b, 0x25dfdbfb, {0x1d}, [@nested={0x14, 0x9, 0x0, 0x1, [@nested={0x4, 0x3d}, @nested={0x4, 0x146}, @nested={0x4, 0x76}, @typed={0x4, 0x60}]}, @typed={0x6, 0x148, 0x0, 0x0, @str='!\x00'}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x80) r1 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, r4, 0x1, 0x70bd25, 0x25dfdbff, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_4ADDR={0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x10}, 0x4000880) ioctl$int_out(r1, 0x5462, &(0x7f0000000380)) clock_gettime(0x0, &(0x7f00000003c0)={0x0, 0x0}) nanosleep(&(0x7f0000000400)={r5, r6+60000000}, &(0x7f0000000440)) r7 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r7, 0x6, 0x16, &(0x7f0000000480)=[@timestamp, @mss={0x2, 0x1}, @mss={0x2, 0x1}, @mss], 0x4) r8 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x46002, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8924, &(0x7f0000000500)={'veth1_to_bond\x00', @local}) recvmmsg(r7, &(0x7f0000001740)=[{{&(0x7f0000000540)=@ieee802154={0x24, @long}, 0x80, &(0x7f00000016c0)=[{&(0x7f00000005c0)=""/114, 0x72}, {&(0x7f0000000640)=""/127, 0x7f}, {&(0x7f00000006c0)=""/4096, 0x1000}], 0x3, &(0x7f0000001700)=""/23, 0x17}, 0xffff8000}], 0x1, 0x40000000, &(0x7f0000001780)) pipe(&(0x7f00000017c0)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000001900)={@cgroup, 0x32, 0x1, 0x5, &(0x7f0000001800)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000001840)=[0x0, 0x0, 0x0], &(0x7f0000001880)=[0x0, 0x0], &(0x7f00000018c0)=[0x0, 0x0, 0x0], 0x0}, 0x40) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000001980)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000001a00)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xd, &(0x7f00000019c0)='/dev/net/tun\x00', 0x0}, 0x30) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000001940)={@map=r12, r10, 0xf, 0x28, 0x0, @void, @void, @void, @value=r13, r11}, 0x20) syz_genetlink_get_family_id$mptcp(&(0x7f0000001a40), r10) r14 = syz_genetlink_get_family_id$tipc(&(0x7f0000001ac0), r0) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000001b80)={&(0x7f0000001a80)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000001b40)={&(0x7f0000001b00)={0x30, r14, 0x4, 0x70bd26, 0x25dfdbfb, {{}, {}, {0x14, 0x19, {0xef, 0x8000, 0xb0000000, 0x3}}}, ["", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x4041}, 0x2000) sendmsg$TIPC_CMD_ENABLE_BEARER(r9, &(0x7f0000001c80)={&(0x7f0000001bc0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001c40)={&(0x7f0000001c00)={0x30, r14, 0x400, 0x70bd25, 0x25dfdbff, {{}, {}, {0x14, 0x17, {0x9, 0x0, @l2={'ib', 0x3a, 'lo\x00'}}}}, ["", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x20000000}, 0xc0) r15 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r9, 0x8933, &(0x7f0000001cc0)={'vxcan0\x00', 0x0}) sendmsg$can_bcm(r15, &(0x7f0000001e00)={&(0x7f0000001d00)={0x1d, r16}, 0x10, &(0x7f0000001dc0)={&(0x7f0000001d40)={0x4, 0x20, 0x6, {0x0, 0x2710}, {0x0, 0xea60}, {0x1, 0x1, 0x1, 0x1}, 0x1, @canfd={{0x3, 0x1, 0x1, 0x1}, 0x1c, 0x1, 0x0, 0x0, "65ce1b3b03e5ba23d59f388e96b403289d9c95512c2c013cdca97561bef92e99bfe95e82eaf2badbcc6ed1bdfc03d013f70c84e5fd4bd0ec924ee1ef0791c2d3"}}, 0x80}, 0x1, 0x0, 0x0, 0x40}, 0x20000) sendmsg$NL80211_CMD_DISCONNECT(r9, &(0x7f0000001f00)={&(0x7f0000001e40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000001ec0)={&(0x7f0000001e80)={0x24, r4, 0x800, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x2}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x3b}]}, 0x24}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000003140)={0xffffffffffffffff, 0x0, 0x77, 0x1000, &(0x7f0000001f80)="8c5b650f86468a110be911671c680f1f9b10b3bb6bcbf3b267319cac560e372cd9354774e3dcbce059c660b5436395f4610b53d42674bb56847c887ba8533fa4d740e3e7c9e2506c0151ddffd39e6f6352eb3722506f88c4903604420b171d9c37f2b426cffa77098135d5ddbe0a3fcc42dc1c4a757c8e", &(0x7f0000002000)=""/4096, 0x80000000, 0x0, 0x76, 0xab, &(0x7f0000003000)="4e5e8a42408bb9c680a640d35ee859e2296abb5106d67fbf67a4b5471c8ebbf4e8d93483ab991faee79955cee7ccab0df7b7a1805a3644db2516bc5e5134dc8143096a452e2cb9e923c711864ca89d5579a90849a420338b1ce50d5224ac472bed940fece0642dc29eb5b47e8a22e4c7bbdc504def69", &(0x7f0000003080)="ac42c6ff0ab9432ff12056ce3459a9a06d5f423ce8298b22feeb8840ee7c41e4e2cc14a9d6c7b276a1b33f5ff760ba77504c4c11cc2e77a7b2414d2d8229b37d3d71a58427a08040e6f4678cf33bec16a9c53330a7745fc5040aacf2df862da5d5170dfe4ed39908bd4c6891b89e7345d51ec4eb86af8cfa5148532dc7bfdf3b0755e3f9f1e012e94cad77417644df28119218f1eef6dbaeddf53f456929555bd1d26cd49bc502588a28b4", 0x5, 0x0, 0x7}, 0x50) 3.178768669s ago: executing program 3 (id=460): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x5}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000fc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000140)="83931e57", 0x4}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f0000000280)=ANY=[], 0x30}}], 0x2, 0x40044) socket$l2tp6(0xa, 0x2, 0x73) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x1, 0x803, 0x0) socket$inet6_mptcp(0xa, 0x1, 0x106) socket$inet_dccp(0x2, 0x6, 0x0) socket$l2tp6(0xa, 0x2, 0x73) r3 = socket(0x1d, 0x2, 0x6) bind$unix(r3, &(0x7f00000008c0)=@file={0x1d, './file0\x00'}, 0x6e) setsockopt$WPAN_SECURITY(r3, 0x0, 0x1, &(0x7f0000000080), 0x4) socket$inet6_udplite(0xa, 0x2, 0x88) socket$l2tp6(0xa, 0x2, 0x73) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_bt_hci(r2, 0x800448f0, &(0x7f0000000000)="bf44f17a00d3b7d3bab0ab9ab262539707f342ab883036b686ff6e0efcca03a557f3144d9a4d91285a9a011765dd24f427776642efffb6c9ca21d717a1427400c5c72a76f619562beea84b472480cf2e6776c64ed32887d0085aefa2aba44d3f124f49b0cbca821678bdc476dd26823e9ad7dc84bf") socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xb9}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) pipe(&(0x7f0000000100)) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001900)=ANY=[@ANYBLOB="6000000010000304f500"/20, @ANYRES32=0x0, @ANYBLOB="00050000000000003000128009000100766c616e00000000200002800c0002000a0000001f00000006000100000000000600050088a8000008000500", @ANYRES32=r4, @ANYBLOB='\b\x00\n\x00', @ANYRES32=r4], 0x60}}, 0x0) 2.902903036s ago: executing program 1 (id=464): r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="500000020000000000000000fbdbdf250800010002000000080003000000000008000100010000000800030001000000080001000200000007fff00002000000f7ffffffffffffff0800030003000000daa4df86b4146f6c76"], 0x50}, 0x1, 0x0, 0x0, 0x80}, 0x1) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r0, &(0x7f0000000200)={&(0x7f0000000080), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)={0x88, 0x1403, 0x1, 0x70bd2d, 0x25dfdbff, "", [{{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'batadv0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pimreg1\x00'}}, {{0x9, 0x2, 'syz2\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'ipvlan1\x00'}}]}, 0x88}, 0x1, 0x0, 0x0, 0xc080}, 0x20000010) r2 = accept$inet(0xffffffffffffffff, &(0x7f0000000440)={0x2, 0x0, @initdev}, &(0x7f0000000480)=0x10) bind$inet(r2, &(0x7f00000004c0)={0x2, 0x4e21, @private=0xa010102}, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r1) sendmsg$NL80211_CMD_NEW_INTERFACE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x58, r3, 0x10, 0x70bd2a, 0x25dfdbff, {{}, {@void, @void, @val={0xc, 0x99, {0x80000001, 0x3f}}}}, [@NL80211_ATTR_IFTYPE={0x8}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0xc}, @NL80211_ATTR_SOCKET_OWNER={0x4}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_SOCKET_OWNER={0x4}]}, 0x58}, 0x1, 0x0, 0x0, 0x8000}, 0x14) 2.670583621s ago: executing program 3 (id=468): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x12, 0x7, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) (async) r2 = socket$netlink(0x10, 0x3, 0x0) (async) r3 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) (async) getsockname$packet(r3, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="480000001000050700000086d7c0d6c878f064eb", @ANYRES32=r4, @ANYBLOB="0000000000000000280012000c00010076657468"], 0x48}}, 0x0) (async) sendmsg$nl_route_sched(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=@newqdisc={0x38, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}, @TCA_INGRESS_BLOCK={0x8, 0xd, 0x24fa101e}]}, 0x38}}, 0x0) (async) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), 0xffffffffffffffff) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000400)={0x1c, r6, 0x1, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r8}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40086}, 0x48000) (async) sendmsg$nl_route_sched(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000540)=@delchain={0x24, 0x64, 0xf31, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r4, {0x6, 0xd}, {0xffe7, 0xffff}, {0xa, 0xd}}}, 0x24}}, 0x1000000) r9 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMP(r9, 0x1, 0x12, &(0x7f0000000080)=0xffffffff, 0x4) (async) r10 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r10, &(0x7f0000000000)=@nameseq={0x1e, 0x1, 0x0, {0x41}}, 0x10) r11 = socket$tipc(0x1e, 0x5, 0x0) sendmsg$tipc(r11, &(0x7f0000000240)={&(0x7f0000000080)=@name={0x1e, 0x2, 0x0, {{0x41}}}, 0x10, &(0x7f0000000040)=[{&(0x7f00000000c0)="c4", 0x1}], 0x1}, 0x40) (async) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0xffffffff, 0x0, r0, 0x10, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x2, 0x0, @void, @value, @void, @value}, 0x50) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000006c0)={0xffffffffffffffff, 0xe0, &(0x7f00000005c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2, &(0x7f00000003c0)=[0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0xa, 0x3, &(0x7f0000000400)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000480)=[0x0, 0x0, 0x0], 0x0, 0xa8, &(0x7f00000004c0)=[{}, {}, {}, {}, {}, {}, {}], 0x38, 0x10, &(0x7f0000000500), &(0x7f0000000540), 0x8, 0x9c, 0x8, 0x8, &(0x7f0000000580)}}, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000940)={&(0x7f0000000700)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x14c, 0x14c, 0x6, [@var={0x5, 0x0, 0x0, 0xe, 0x1}, @struct={0x0, 0x1, 0x0, 0x4, 0x0, 0xffffffff, [{0xa, 0x5, 0x7e5}]}, @func_proto={0x0, 0x5, 0x0, 0xd, 0x0, [{0xc, 0x5}, {0x3, 0x3}, {0x2, 0x1}, {0x10, 0x1}, {0x10, 0x4}]}, @float={0x7, 0x0, 0x0, 0x10, 0x8}, @decl_tag={0x1, 0x0, 0x0, 0x11, 0x2, 0x8}, @union={0x4, 0x9, 0x0, 0x5, 0x0, 0x0, [{0x8, 0x0, 0x6}, {0xa, 0x0, 0x11}, {0xc, 0x2, 0x800}, {0x4, 0x4, 0x8}, {0xc, 0x2, 0xfffffd79}, {0x1, 0x4, 0x6}, {0x3, 0x5, 0x1}, {0x6, 0x1, 0x1ff}, {0xb, 0x0, 0x3f6}]}, @enum={0x8, 0xa, 0x0, 0x6, 0x4, [{0x1, 0x3}, {0xb, 0x7}, {0x0, 0x8}, {0xe, 0xfffffff7}, {0xe, 0x4}, {0x8, 0x9}, {0x1, 0xe60}, {0xe, 0x3}, {0x6, 0x3}, {0x0, 0xaa4}]}]}, {0x0, [0x2e, 0x61, 0x61, 0x5f]}}, &(0x7f0000000880)=""/154, 0x16a, 0x9a, 0x0, 0x84e9, 0x0, @void, @value}, 0x28) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000a80)={0x2}, 0x8) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) (async) r13 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_GET(r12, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000240)={0x34, r13, 0x1, 0x0, 0x0, {0x36}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000d00)={0x4, 0x1e, &(0x7f0000000ac0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x1ff, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xb8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7fff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @generic={0x4, 0x3, 0x4, 0xa, 0xfb87}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000bc0)='GPL\x00', 0x3ff, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x8, &(0x7f0000000c00)={0x9, 0x1}, 0x8, 0x10, &(0x7f0000000c40)={0x3, 0xc, 0x1, 0x8000}, 0x10, 0x0, 0xffffffffffffffff, 0x3, &(0x7f0000000c80)=[r0, r0, r0], &(0x7f0000000cc0)=[{0x1, 0x4, 0x0, 0xa}, {0x1, 0x3, 0x6, 0x3}, {0x5, 0x2, 0x5}], 0x10, 0x4, @void, @value}, 0x94) r14 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000007c0)={0x3, 0xc, &(0x7f0000000000)=@framed={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x6}, [@ringbuf_output={{0x18, 0x5, 0x1, 0x0, r14}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xa}}]}, &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 2.374693631s ago: executing program 3 (id=471): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000b40)='cpuacct.usage_sys\x00', 0x275a, 0x0) writev(r1, &(0x7f0000000940)=[{&(0x7f00000009c0)="3e25e071d9f0d7aa9a23703c318ba2785335190fb2cea6f2bf09", 0x1a}, {&(0x7f0000000780)="f1a1903b5bf9a51c69707a1a90d7d8da5f252953988977fc2634df86b489ef07710095ae1e74ebe2f297ff88869954a92d0a2c54d3f3e4b37911f40d76c8905153f5bbf611a93df598127dca702e41d373e2e4bc2777770b2613467e5317681cbffc21a5aec79eb3c1ad27b784cebd26ae64a757247f5c7e710b8e702f057e8830ed7841d602ffd6768cc7341576af0f531ace635608f48d6245e12e24cefdeb", 0xa0}, {&(0x7f0000000740)="89eace74aaad93bb3c5d6c4c712825e4161beeeaf9754c9135815130c6447ddaf3d61340a6182a1c884c4e9a3172dabc8f6307df132d83f7e40a6ba3b0b4", 0x3e}, {&(0x7f0000002700)="e3ab078f1a3e93fe84b745efa93f18c567cf0339070c2dd12a16429aeea5de847d02cf85e612de8ede8f3da0ca899fb0529fb26c06337d933f47f3f75aa0277d05c3e94b9c757ebf7c9091f78f18f18c0f3082e775746e92cd7128f9356f1517473d314ce3915ec502319220ebb741530a31a425dfaf52a22ce4c9025da377028fb21fbd4a12b8f44fbc629ad7e503b7593c698180e438b271920da8f5014efd216fac8056d780fe3ac2b65aec9de9e0cecddc98cfc65e48a5620c1ee8e6b194b445c73f497962202195", 0xca}], 0x4) mmap(&(0x7f0000000000/0x4000)=nil, 0x4000, 0x1, 0x10012, r1, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$FS_IOC_FSSETXATTR(r2, 0x401c5820, &(0x7f00000001c0)={0x4, 0x31, 0x7, 0x3923, 0x44fa16d9}) r3 = socket$inet6_dccp(0xa, 0x6, 0x0) connect$inet6(r3, &(0x7f0000000200)={0xa, 0x0, 0x0, @remote, 0x7}, 0x1c) ioctl$int_in(r3, 0x5452, &(0x7f0000000040)=0x6) recvmmsg(r3, &(0x7f0000003140)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) shutdown(r3, 0x0) recvmsg(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000003600)=[{&(0x7f0000000500)=""/109, 0x6d}, {&(0x7f00000024c0)=""/4090, 0xffa}, {&(0x7f0000000600)=""/79, 0x4f}, {&(0x7f0000000000)=""/130, 0x82}, {&(0x7f00000046c0)=""/4098, 0x1002}, {&(0x7f0000000140)=""/117, 0x75}], 0x6}, 0x2) sendmsg$inet(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000fc0)="5c00000012006bab9a3fe3d86e17aa0a046b4877c4aaf68187bae53dca2ba35bda6a876c1d0048007ea608649e7524765f0ef82e3c0000a705259a3651f60a84c9f4d4938037e70e4509c5bb00000000e513aeac9bf2bee150d5fe86", 0x5c}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) 2.29344965s ago: executing program 2 (id=473): r0 = socket$kcm(0x10, 0x3, 0x10) r1 = socket$packet(0x11, 0x3, 0x300) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200)=0x4, 0x65) ioctl$FS_IOC_RESVSP(r3, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x9ffffc}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x4, 0x80010, r2, 0x0) r4 = socket$inet(0x2, 0x6, 0x0) getsockopt$inet_pktinfo(r4, 0x10d, 0x9c, 0xfffffffffffffffe, &(0x7f0000000000)=0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendto$packet(r1, &(0x7f0000000040)="070800ffffffba000040000086ddf5a01b531078c05ae01a77f2e5e88acd9df77ff77cdf1dfaa711e323677969aa3b9252f809c3d53c", 0x36, 0x0, &(0x7f0000000000)={0x11, 0xf2, r5, 0x1, 0x0, 0x6, @remote}, 0x14) (async) sendto$packet(r1, &(0x7f0000000040)="070800ffffffba000040000086ddf5a01b531078c05ae01a77f2e5e88acd9df77ff77cdf1dfaa711e323677969aa3b9252f809c3d53c", 0x36, 0x0, &(0x7f0000000000)={0x11, 0xf2, r5, 0x1, 0x0, 0x6, @remote}, 0x14) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa0000, 0x0) (async) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0xa0000, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000140)={'veth1_to_team\x00', @remote}) (async) ioctl$SIOCSIFHWADDR(r6, 0x8924, &(0x7f0000000140)={'veth1_to_team\x00', @remote}) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x1, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{0x0, 0x9383, 0x4}, 0x4}}, @TCA_MPLS_TC={0x5}]}, {0x4, 0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x6c}}, 0x0) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f00000000c0)=0x80, 0x4) sendmsg$kcm(r0, &(0x7f0000000000)={0x0, 0xd18c9b25, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90324fc6004001c000a000200053582c137153e37000c0480fc0b10000300", 0x33fe0}], 0x1}, 0x0) 1.966910292s ago: executing program 2 (id=475): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6(0xa, 0x80002, 0x0) (async) r2 = socket$igmp(0x2, 0x3, 0x2) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_JOIN_OCB(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010028bd7000ffdbdf256c00000008000300", @ANYRES32=r4, @ANYBLOB='\b\x00&\x00l\t'], 0x24}, 0x1, 0x0, 0x0, 0x4000004}, 0x448d0) (async, rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=@ipv4_newaddr={0x11, 0x14, 0xca1}, 0x18}}, 0x0) (async, rerun: 32) setsockopt$ARPT_SO_SET_REPLACE(r2, 0x0, 0x60, &(0x7f0000000900)={'filter\x00', 0xb001, 0x4, 0x3c8, 0x1f8, 0x110, 0x1f8, 0x2e0, 0x2e0, 0x2e0, 0x7fffffe, 0x0, {[{{@arp={@broadcast, @rand_addr=0x64010102, 0xffffffff, 0xffffff00, 0xe, 0x81, {@empty, {[0xff, 0x0, 0x0, 0x5a2c9a4db567792d, 0xff, 0xff]}}, {@mac, {[0xff, 0xff, 0xff, 0x0, 0x0, 0xff]}}, 0x1, 0x10, 0x2, 0x60f, 0x4, 0x401, 'vxcan1\x00', 'ip6tnl0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@empty, @mac=@broadcast, @dev={0xac, 0x14, 0x14, 0x31}, @dev={0xac, 0x14, 0x14, 0x39}}}}, {{@uncond, 0xc0, 0xe8, 0x0, {0x0, 0x1e03}}, @unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x5, 0x1, 0x3}}}, {{@arp={@multicast2, @loopback, 0x0, 0x0, 0x0, 0x0, {@empty, {[0x0, 0x0, 0x0, 0x0, 0xff]}}, {@mac=@remote}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'team_slave_1\x00', 'veth0_to_bridge\x00', {}, {0x1fe}}, 0xc0, 0xe8}, @unspec=@MARK={0x28, 'MARK\x00', 0x2, {0x8, 0x22e}}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x418) (rerun: 32) socket$nl_generic(0x10, 0x3, 0x10) (async) connect$inet6(r1, 0x0, 0x0) (async) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000080)='gretap0\x00', 0x10) (async) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_udp_int(r7, 0x11, 0x1, &(0x7f00000000c0), 0x4) sendmsg(r7, &(0x7f0000000480)={&(0x7f00000000c0)=@nl=@proc={0x10, 0x0, 0x25dfdbfb, 0x4000}, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000140)="fa93e1b63651fdd0b2f8987f8dd54546a4b8f33e80087f5b9c9beacc93b27f35dcb8e8ac60f9f0d690b3be3448b8f56b3275e5aed4639e173dce803035ebd606f2823dd8802294ebd91fabe48dc3cd0c8866dc70e1c97936d245657ed5542773d109a68522eaef8f65180d6209bff07f07566fbcc8e00cd37f48b8e58404ca70145955395400e7cb2572f54617b057b3ec6588712cb42f97c0dd011bc1ec7742ee7fb2b20b36fd749837c0ae27542f963a8f6c8ac1775cfe7779b9", 0xbb}, {&(0x7f0000000040)}], 0x2, &(0x7f0000000300)}, 0x20004800) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000001680)=ANY=[@ANYBLOB="580100001000030400"/20, @ANYRES32=0x0, @ANYBLOB="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", @ANYRES8=r0], 0x158}, 0x1, 0xba01}, 0x44) 1.718115048s ago: executing program 0 (id=479): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x14, 0x4, 0x4, 0x3, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000100)={r0, &(0x7f0000000080)}, 0x20) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r1, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000005}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$ifreq_SIOCGIFINDEX_team(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'team0\x00', 0x0}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000004c0)={0x2b, 0x0, &(0x7f0000000180), &(0x7f00000001c0)='GPL\x00', 0xf1b0, 0x0, 0x0, 0x20980, 0x2f, '\x00', r3, 0x0, r2, 0x8, &(0x7f0000000280)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000300)={0x4, 0x7, 0x4, 0x71f7}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000340)=[r0, r0, r0], 0x0, 0x10, 0x9, @void, @value}, 0x94) (async) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_SPORT_RANGE={0x8, 0x17, {0x4e23, 0x4e23}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) (async) getpeername$inet(0xffffffffffffffff, 0x0, &(0x7f0000000480)) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@newlink={0x40, 0x10, 0x437, 0xfffffffe, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @sit={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @broadcast}, @IFLA_IPTUN_FLAGS={0x6, 0x8, 0x3}]}}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4c050}, 0x0) splice(r0, &(0x7f0000000080)=0x7, r0, &(0x7f00000000c0)=0x8, 0x10001, 0xf) 1.626692878s ago: executing program 2 (id=480): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) write$tun(r1, &(0x7f0000000080)={@val={0x8, 0x800}, @val={0x7, 0x1, 0x0, 0x40, 0x20}, @ipv4=@udp={{0x5, 0x4, 0x3, 0x1b, 0xb0, 0x66, 0x0, 0x40, 0x11, 0x0, @private=0xa010102, @dev={0xac, 0x14, 0x14, 0x1a}}, {0x4e20, 0x4e22, 0x9c, 0x0, @wg=@initiation={0x1, 0x0, "9391a1a9b407927fe3c008f5336ef1df51ec2e65759e4b3c0204c122d8c787f3", "4074ba519fb47e6b3c4b12384a3306fa16efafd426e4185d8fb40d8ca761f376be82866e0bd8928889d780a3ae3edd76", "6b49c9d5e07a6879f134069c85fa6869c9ca4ef539c596eb59ce5a8e", {"de79292a6bf86031c289fe0dfa18bb8c", "035e95ab1a16083a79d9e5b7c72f1813"}}}}}, 0xbe) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=@newlink={0x48, 0x10, 0x300, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x10000}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @erspan={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}, @IFLA_GRE_ENCAP_DPORT={0x6}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x1}]}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x4000}, 0x0) r2 = socket$kcm(0x10, 0x2, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONTROL_PORT_FRAME(r3, &(0x7f0000003700)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000440)={0x2a8, r4, 0x1, 0x20000, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_CONTROL_PORT_ETHERTYPE={0x6, 0x66, 0x888e}, @NL80211_ATTR_FRAME={0x277, 0x33, @data_frame={@a_msdu=@type01={{0x0, 0x2, 0xd, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x9}, @broadcast, @from_mac=@device_b, @initial, {0x1, 0x7}, "", @value={0x2, 0x0, 0x3, 0x1, 0x2}, @value=@ver_80211n={0x0, 0x0, 0x3, 0x1, 0x0, 0x3, 0x0, 0x0, 0x1}}, @random="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"}}]}, 0x2a8}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_SURVEY(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x28, r4, 0x400, 0x70bd25, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7fff, 0x7d}}}}, ["", "", ""]}, 0x28}}, 0x40) r7 = socket$inet_smc(0x2b, 0x1, 0x0) bind$inet(r7, &(0x7f0000000100)={0x2, 0x4e22, @multicast1}, 0x10) writev(r2, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000090468fe0700000000000000ff3f02000000480100100000000019002b000a0003002000000000000072000000000000000000", 0x39}], 0x1) 1.562990788s ago: executing program 4 (id=481): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) getsockopt$bt_BT_SECURITY(r2, 0x112, 0x4, 0x0, 0x0) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000000c0)=ANY=[@ANYBLOB="3c0000002c00010000000000000000000400008025001100fedce57d1811c6d3139ee4d8a1c39156c2a7ecf175abbc2ee40add64ef6a2f"], 0x3c}], 0x1, 0x0, 0x0, 0x8800}, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}]}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x58}}, 0x0) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0x58, &(0x7f00000003c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) pipe(&(0x7f00000004c0)={0xffffffffffffffff}) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1000}, [@call={0x85, 0x0, 0x0, 0x6b}, @printk={@s}]}, &(0x7f0000000300)='syzkaller\x00', 0x8, 0x75, &(0x7f0000000340)=""/117, 0x41100, 0x6c, '\x00', r3, 0x0, r4, 0x8, &(0x7f0000000500)={0x6, 0x5}, 0x8, 0x10, &(0x7f0000000540)={0x3, 0xe, 0x7, 0xb}, 0x10, 0x0, 0x0, 0x6, 0x0, &(0x7f0000000580)=[{0x1, 0x3, 0x1}, {0x0, 0x2, 0x10, 0xd}, {0x1, 0x2, 0x10, 0xa}, {0x3, 0x5, 0x10, 0x7}, {0x0, 0x2, 0xd, 0x1}, {0x1, 0x4, 0x0, 0xc}], 0x10, 0x4, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x13, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="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"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) 1.540582953s ago: executing program 0 (id=482): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x141141, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b00000000000000000000000000040000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000000000001000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB='\x00'/28], 0x48) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1, 0x41071, 0xffffffffffffffff, 0x0) r4 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x34, 0x24, 0xf0b, 0x4, 0x25dfdbfe, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000800)=@newtfilter={0x3c, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffff}, {}, {0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0xc, 0x2, [@TCA_FLOWER_KEY_ENC_OPTS={0x8, 0x54, 0x0, 0x1, [@TCA_FLOWER_KEY_ENC_OPTS_ERSPAN={0x4}]}]}}]}, 0x3c}}, 0x0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) r7 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r7, 0x29, 0x23, &(0x7f0000000540)={{{@in6=@local, @in6=@private0, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0xffffffffffffffff, 0x8000000000000000}, 0x0, 0x80}, {{@in=@multicast2, 0x0, 0x32}, 0x0, @in6=@mcast2}}, 0xe8) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r3, 0x0) epoll_pwait(r3, 0x0, 0x0, 0x45, &(0x7f0000000280)={[0x8]}, 0x8) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r8) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000029c0)) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f0000000000)={r2, &(0x7f0000000180)="8948f0e55cfd9a92e3b38dc5ad41b8ecc19191e9c3f37103bdaf27ec0457a9672a820570475be4e5c9db2d75ceb3ae7d7c3cd2285c14e5d9af9928d89fda3cc87a588d82b0b7a3645752a5f8f1d6ccea14163ff5f4d9be36ff965157d50fd5426d0edd1d6cf356cdf89c043b19b0bbeb3789de03655d04402396793c", &(0x7f0000000200)=""/192, 0x4}, 0x20) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) write$cgroup_subtree(r1, &(0x7f0000000440)=ANY=[@ANYBLOB="8fedcb5d07081175f37538e486dd"], 0xfdef) setsockopt$netrom_NETROM_IDLE(r3, 0x103, 0x7, &(0x7f0000000380)=0x5, 0x4) r9 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r9, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000480)={0x2, 0x0, 0x2, 0x6, 0x3b, 0x0, 0x70bd2d, 0x25dfdbfc, [@sadb_x_sec_ctx={0x1b, 0x18, 0x2, 0x10, 0xc9, "c99e4a381237c82d7911cb1be26ef6a866a3240b779b7c74f4d19f7ee84e70d4f24bf399e1e01cbe7e074264ec905559eb6fdb25f144af2b04553314f854f5a45c6d660be1c2cc751a59dfab1d9adee9761e664066bc4d48eb114199db9dbee47a0352c1bdce98fe4d243980ab59447e469b72202910ec944f6928691a85024b4720e230e8d5be1e0daf7d4635586b1f3b499dca61fb557e4f386ef32f2c60cf80d46f43089e28a18772acf78a58350425115ada5314d6980e6baa7716d5907eb014fa5dffd535184d"}, @sadb_x_sec_ctx={0x16, 0x18, 0x1, 0x4, 0xa1, "a2011a37dea720c4c736d9cb810ee4b47787522795298442c84e071bd843ced51177b11806c5a21f8257912758167b34b922a09f965f058d3bf6b7824c9771d505ec8b7c391b9239ae4e2bce7db44b45013fe7709f6a1dce4e4c52782546ca1647dd275850525f8ddb99145ded6f08cbaebfdcc7d25cc018a6399c15b6a90b1da5a1c270a23c7a1c36c96be80ca0d290f78525d1d586f29ac29ac5c4f00b175743"}, @sadb_x_nat_t_port={0x1, 0x16, 0x4e23}, @sadb_address={0x5, 0x17, 0xa0, 0x818a916b73f53aa2, 0x0, @in6={0xa, 0x4e22, 0x3, @loopback, 0x4}}, @sadb_x_sa2={0x2, 0x13, 0xe, 0x0, 0x0, 0x70bd28, 0x3504}]}, 0x1d8}}, 0x40000) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$sock_SIOCETHTOOL(r10, 0x8946, &(0x7f0000000080)={'netdevsim0\x00', &(0x7f0000000040)=@ethtool_sfeatures={0x51}}) write$cgroup_int(r3, &(0x7f0000000300)=0x1ff, 0x12) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)=ANY=[@ANYBLOB="2000000011140100000000000000000008004a00000000f107004b"], 0x20}}, 0x0) 1.386870193s ago: executing program 3 (id=483): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r1, 0x26, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r2 = socket$kcm(0x11, 0x2, 0x0) sendmsg$sock(r2, &(0x7f00000000c0)={&(0x7f0000000040)=@phonet={0x23, 0x0, 0x0, 0x27}, 0x80, 0x0, 0x0, &(0x7f0000000000)}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000640)=ANY=[@ANYBLOB="500000001000370400"/20, @ANYRES32=0x0, @ANYBLOB="8b040400000000003000128008000100736974002400028008000100", @ANYRES32=0x0, @ANYBLOB="08000300ffffffff080002000106"], 0x50}}, 0x0) 1.234952313s ago: executing program 2 (id=484): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r1, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0, 0x1c}}, 0x0) (async) getsockname$packet(r1, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r2, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) (async) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=@newlink={0x50, 0x10, 0x503, 0x4, 0x700, {0x0, 0x0, 0x0, 0x0, 0xc400}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, r2, 0xc000, 0x10f21}}}}}}, @IFLA_MASTER={0x8, 0xa, r2}]}, 0x50}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000200)={0x60, 0x2, 0x6, 0x801, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_CADT_FLAGS={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x4}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x14, 0x3, 'hash:ip,port,ip\x00'}]}, 0x60}}, 0x0) r4 = socket$packet(0x11, 0x2, 0x300) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) (async, rerun: 64) ioctl$SIOCSIFHWADDR(r5, 0x8924, &(0x7f0000000400)={'veth1_vlan\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2f}}) (rerun: 64) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@ipv4_newrule={0x24, 0x20, 0x301, 0x70bd2a, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e21, 0x4e24}}]}, 0x24}, 0x1, 0x0, 0x0, 0x240480d4}, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002c0001000000000000000000020000800c0000000000000000000000140001"], 0x114}], 0x1}, 0x0) (async) getsockname$packet(r4, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000080)=0x14) 1.171352256s ago: executing program 4 (id=485): r0 = socket$netlink(0x10, 0x3, 0x4) r1 = socket$packet(0x11, 0x4000000000002, 0x300) setsockopt$packet_int(r1, 0x107, 0xa, &(0x7f00000000c0)=0x2, 0x4) setsockopt$packet_tx_ring(r1, 0x107, 0xd, &(0x7f0000000100)=@req3={0x10000, 0x100000001, 0x10000, 0x1}, 0x1c) write(r0, &(0x7f0000000040)="2700000014000707030e0000120f0a0011000100f5fe009d2fb112ff000000008a151f75080039", 0x27) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x17, 0x4, &(0x7f00000001c0)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0xba}]}, &(0x7f0000000140)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.09845668s ago: executing program 3 (id=486): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r0, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @dev}], 0x10) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$unix(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000180)="a995", 0x2}], 0x1}, 0x1) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.swap.events\x00', 0x275a, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) setsockopt$bt_BT_POWER(r4, 0x112, 0x9, 0x0, 0x0) setsockopt$sock_attach_bpf(r1, 0x1, 0x2a, &(0x7f0000000100)=r3, 0x4) recvfrom(r1, 0x0, 0x0, 0x2000, 0x0, 0x0) r5 = socket$inet6_sctp(0xa, 0x1, 0x84) r6 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) setsockopt$bt_l2cap_L2CAP_OPTIONS(r6, 0x6, 0x1, &(0x7f0000000000)={0x0, 0x6f, 0x0, 0x2}, 0xc) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r5, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @remote}], 0x10) sendmmsg$inet6(r5, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0x1}], 0x1}}], 0x1, 0x0) r7 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r7, 0x0) connect$inet6(r7, &(0x7f0000000240)={0xa, 0x4e20, 0x5, @private1={0xfc, 0x1, '\x00', 0x1}, 0x4}, 0x1c) sendmmsg$inet6(r0, &(0x7f000000cf00)=[{{&(0x7f00000084c0)={0xa, 0xfffc, 0x0, @loopback}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0xff12}], 0x1}}], 0x1, 0x0) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(r8, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0xfffc, @dev={0xac, 0x14, 0x14, 0x4}}], 0x10) r9 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000340)={'bridge0\x00', 0x0}) r11 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="4400000011002901000000000000000007000000", @ANYRES32=r10, @ANYBLOB="00000000000000001c001a8008009c48cdc10500080000003e"], 0x44}}, 0x0) sendmmsg$inet6(r0, &(0x7f000000cf00)=[{{&(0x7f0000000000)={0xa, 0xfffc, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x1c, &(0x7f0000008900)=[{&(0x7f0000008500)="88", 0x36}], 0x1}}], 0x3ffff92, 0x0) 809.251003ms ago: executing program 4 (id=487): r0 = socket$nl_generic(0x10, 0x3, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r2, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) r4 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r4, 0x29, 0x23, &(0x7f00000001c0)={{{@in=@multicast1, @in=@private, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@loopback, 0x0, 0x6c}, 0x0, @in=@multicast1}}, 0xe8) close(r4) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, &(0x7f0000000200)={r3, @in6={{0xa, 0x4e21, 0x21, @empty, 0xffff}}, 0xffffffc0, 0x1, 0x72597d2a, 0x7, 0x0, 0x6, 0x7}, &(0x7f00000002c0)=0x9c) r5 = bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={&(0x7f0000000080)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000400)={r5, 0x0, 0x9f, 0x0, &(0x7f00000001c0)="0dfe39baa50c026142dba8a4797e2cc6b65a760ab059a84c521920d58e655495e28fc9c610133b642d75385fad6bed1cc1ab3306e26b70e642c5f2f75e67ed26758f9c2d9f13fda59597f0ef2de796822a584ad9f4dcbbd4df5dd8f1aad3c90a5dec0c516b376c18faca47bb2fe31307018ee0ef821d7d392c8112e623c4edd03688530a49117fd5e725631deca1443de5cb0fb793566842668403a296d6a4", &(0x7f0000000100), 0x1, 0x0, 0xaf, 0xc0, &(0x7f0000000280)="bf9df5fb0009eb4d667af41e5d14d345a441e3b622ba58600c68b28c8a2f8297477989a6fe23c42d6d574674be20d85b0620e3519b73944ad9cced90771de08fe299c6035c05048c12aff8e33d829d12d534c750bb283ebd86ee95d0b21ca60c7c1777470297224d4574756018a21f4114caa96c8dd05fca7de6a8617fcd9050e291ff8dcaa85b581232d3733c763af1a3336d98e84332244ba8563eda2ef34aa14eb0fbac66b5ee479eb4ad0fc9e3", &(0x7f0000000340)="1db43d7b6f1bb0e58d6de840b0fd7ae77c0da004c3dd0cf2e10a198938de1a021bae147d3e55fcf3518ddaa094c96bf0be9b375bf184c1dd5aba5e5070c40fb1a9d73e0b2c91a82c48f01d94c2d9f2e46ca66619c1e55fc8c98cb45c7a7a60ff9bc433a55c0193ef9ffee8fa8afdcb9ca9be1e0b93e8ba1e32f578a5c3174e05730dd267d4f78f27bdb9852f1b67734ddb88e1f98fec191d61fb73f05c2336ce72a47a015ebb8e94d74ad6cc63ff2ab9fc7e352d0bafbc5c9a5f2154ffc09468", 0x2, 0x0, 0xfffff14c}, 0x50) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="340000003d0007010000000000000000047c0000040000001c00018006000600800a0000100007"], 0x34}}, 0x0) 798.731997ms ago: executing program 2 (id=488): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newlink={0x58, 0x10, 0x1, 0x0, 0x0, {}, [@IFLA_VFINFO_LIST={0x30, 0x16, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@IFLA_VF_MAC={0x28, 0x1, {0x0, @local}}]}]}, @IFLA_GROUP={0x8, 0x1b, 0xfffffffc}]}, 0x58}}, 0x0) 694.828807ms ago: executing program 0 (id=489): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000000)={'pim6reg1\x00', 0x2}) (async) pwritev(r1, &(0x7f0000000400)=[{&(0x7f0000000140)="7f6c99da76bb7e8e87bc0903782ad1cbccf8eb475f837c37a871291c5ea57386b511856cbe6ac54140988388cf4ebded7670709fb0fb8eeafeef9d69fca76b3cad62e2d53aa0b0a96292ff63a370567a75f30f2990cd864c83ca89d51c924bfa4879a71b63516204506c973fac03c38b", 0x70}, {&(0x7f00000001c0)="cb751eb0bfd83349311c211ec5dbbcee10675d4e9f97f80d6d69fb775d1818a5801b60c61b1152b112ff25d3c2457deb9625d3f588535ea9b1eae92f02b8bbdaf936dd0ecfeaca3cb18bf559dee03f61ff788a0ead9c237e3a53788c435e29389189129b32e84a86c57952740c62435f20fd1ab16763f372770ac6aca7cc64e13cd8067a78cc804af8389c510d3466c4bc9bee43d7e17cebe956e4902549bbdc81289a8215116ec30e0652b27f56b34af31d0552e79d35c36b0ed2", 0xbb}, {&(0x7f0000000280)="ca348a5cdb246c5ea3d498637e9432a1caea7ed9f9ef463b602ce4f4718a1df54f97df744d823cf96ea945f91edfb67340ed3ca2e538a8488f9745af74085fb5b90373ee538dd7a0dfe27398fa92014565900201b05c7a885b60ee094a97601f8c0eec88d711e12d8e395a1fc27888e410335d77546e71a0f1cd16113558938b201976ec861ccea2683b27a0930f4a424ccfde298f24be18e1cf5e53067fd09ea18323733994290906000fe6dac1d518473ae0e93597ff33c2a52d9f777a93bc79f427f048ec1f", 0xc7}, {&(0x7f0000000380)="ce6c6959d9449ac9b4e92b2222845743f0518a767422993740a329f42718744b7ab08ce129e5857d221327d0328ebd0f71b75c209f85f37b3e10bdcfd67f2512cad119c6d497a183797ea5f3393b2a", 0x4f}, {&(0x7f0000000040)="817da625f8", 0x5}], 0x5, 0x4, 0x7c) ioctl$TUNSETTXFILTER(r1, 0x400454d1, &(0x7f0000000080)={0x0, 0x5, [@broadcast, @local, @multicast, @remote, @remote]}) (async) ioctl$SIOCSIFHWADDR(r0, 0x89f0, &(0x7f0000000900)={'ip6gre0\x00', @broadcast}) socket(0x10, 0x4, 0x5) 590.023262ms ago: executing program 2 (id=490): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000940), 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002010000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000300)='qdisc_create\x00', r3}, 0x10) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7d2}) r5 = socket(0x400000000010, 0x3, 0x0) r6 = socket$unix(0x1, 0x2, 0x0) r7 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000001c0)=@newqdisc={0x2c, 0x24, 0x4ee4e6a52ff56541, 0x3, 0x0, {0x0, 0x0, 0x0, r8, {0x0, 0xb}, {0xffff, 0xffff}, {0x0, 0xffeb}}, [@qdisc_kind_options=@q_mq={0x7}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000140)=@newqdisc={0x34, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x80000, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xb}, {0x0, 0x7}}, [@qdisc_kind_options=@q_pfifo_fast={0xf}]}, 0x34}, 0x1, 0x0, 0x0, 0x20004021}, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'\x00', 0x52d35ce30131f272}) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000240), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r9, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) r11 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_REGISTER_FRAME(r11, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x18, r10, 0x1, 0x0, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_FRAME_MATCH={0x4}]}, 0x18}}, 0x0) r12 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r12, 0x8933, &(0x7f0000000740)={'wlan1\x00'}) r13 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r13, 0x107, 0x14, &(0x7f0000000080)=0x8, 0x4) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000300)={'wg2\x00', 0x0}) sendto$packet(r13, &(0x7f0000000180)='7', 0x2, 0x0, &(0x7f0000000040)={0x11, 0x0, r15, 0x1, 0x0, 0x6, @random="bf73a9e561c5"}, 0x14) 553.800185ms ago: executing program 4 (id=491): r0 = syz_init_net_socket$nfc_raw(0x27, 0x5, 0x0) connect$802154_dgram(r0, 0x0, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r3, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000001f40)=[{&(0x7f0000001900)={0x118, 0x2d, 0x1, 0x0, 0x0, "", [@nested={0x106, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64=0x2}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a48770b5f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x118}], 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000480)=ANY=[@ANYBLOB="40000000100003000001000000000000000097c9", @ANYRES32=0x0, @ANYBLOB="00000000000000001800128008000100707070000c00028008000100", @ANYRES32=r2, @ANYBLOB="08001f000c000000"], 0x40}}, 0x0) 422.879334ms ago: executing program 0 (id=492): pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = openat$cgroup_procs(r2, &(0x7f0000000840)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r3, &(0x7f0000000880), 0x12) r4 = getpid() write$cgroup_pid(r3, &(0x7f00000000c0)=r4, 0x12) vmsplice(r1, &(0x7f0000000140)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xa}], 0x1, 0x6) close(r1) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_hsr\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r6, @ANYBLOB="000024000000000024001200140001006272696467655f736c617665800000000c000500080005"], 0x3}}, 0x0) splice(r0, 0x0, r5, 0x0, 0x10d00, 0x0) 273.092562ms ago: executing program 4 (id=493): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)={0x7c, 0x2, 0x6, 0x201, 0x0, 0x0, {0x7}, [@IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8, 0x12, 0x1, 0x0, 0x2}, @IPSET_ATTR_NETMASK={0x5, 0x14, 0xff}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x5}, @IPSET_ATTR_CADT_FLAGS={0x8, 0x8, 0x1, 0x0, 0xb0}, @IPSET_ATTR_SIZE={0x8, 0x17, 0x1, 0x0, 0x1000}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0xffffff6d, 0x2, 'syz2\x00'}, @IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_MARKMASK={0x8}]}]}, 0x7c}, 0x1, 0x0, 0x0, 0x48800}, 0x0) (async) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=ANY=[@ANYBLOB="500100001000130700000000000000007f00000100000000000000000000000000000000000001000000ffffac14140000000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ff010000697f00000000000000000001000000002b000000ff0204000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020004000000000000000000600012"], 0x150}}, 0x0) 233.403916ms ago: executing program 0 (id=494): r0 = socket$inet6(0xa, 0x3, 0x87) setsockopt$inet6_IPV6_XFRM_POLICY(r0, 0x29, 0x23, &(0x7f0000000300)={{{@in=@broadcast, @in=@multicast2, 0x0, 0x0, 0x0, 0x0, 0xa}, {0x10001}, {0x2000000}, 0x0, 0x0, 0x1}, {{@in6=@empty, 0x2000000, 0x33}, 0x0, @in6=@private2, 0x0, 0x0, 0x1, 0x3, 0x0, 0x3}}, 0xe8) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @any, 0x7f}, 0xe) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$netlink_NETLINK_ADD_MEMBERSHIP(r2, 0x10e, 0x1, &(0x7f0000000400)=0x1, 0x4) r3 = socket$inet6(0xa, 0x3, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f0000000280)={{{@in=@broadcast, @in6=@private2, 0x0, 0x0, 0x0, 0x0, 0x2}, {0x0, 0x6, 0x0, 0x8004, 0x40000000000004, 0xfffffffffffffffe, 0x0, 0x400}, {0x5}, 0x4, 0x0, 0x1, 0x0, 0x0, 0x3}, {{@in6=@empty, 0x0, 0x6c}, 0x2, @in6=@private2={0xfc, 0x2, '\x00', 0x1}, 0x0, 0x1, 0x8, 0x0, 0x9075}}, 0xe8) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x4}}}, 0x1c) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x2000)=nil, 0x2000, 0x1, 0x12, r4, 0x0) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000280), 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r5, &(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000000041}, 0xc) writev(r1, &(0x7f0000000640)=[{&(0x7f0000000500)="10ef482f53aef55b6870cbda487c44332177ffe2eb90d5b39001ba980f8671932bf93d8b418b89f4d63da4e6e77ef57e9f223ea34792c4260fe9b2c4c893e6467032b3ee5d8f7c11ac288a4511c5cf165a42dcaa46f4f06c8c10b6fac94edd4d6aa657748d90e0bf56249e8a79c5e1abe9793c1e22edce3a5eb24eb586d64870015ad94f50bd155022fba420ba4a55e37f5d1f9a41e57cce2f86781543f76ecab0ded8382e1f9881e568fdd45069149175aee4fe859821342e", 0xb9}, {&(0x7f0000000240)="31866f430d9782771e8d735ad6799b698e1fe46a2387a674ac3c34f9cb8d9432de42672e2ddc32ce4b2db442219c67df12a14d2ede32e307c129", 0x3a}, {&(0x7f0000000440)="59f2", 0x2}, {&(0x7f0000000480)="a3e48be0012e8222048d2c02dcf1", 0xe}, {&(0x7f00000005c0)="7b2b173dd6e2283d39c6d4336abec035cfe744542ca50355220762aee0d8033509f733ca7e289518c5a672a7b54135f196dbc72c36742eb6bfc542f1dae9a35686", 0x41}], 0x5) r6 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00'}) r7 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000000)={'sit0\x00', 0x0}) r9 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r9, &(0x7f0000000180)='`', 0x500, 0x0, &(0x7f0000000240)={0x2f, 0x0, r8, 0x1, 0x0, 0x6, @local}, 0x14) r10 = socket$nl_generic(0x10, 0x3, 0x10) r11 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r11, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) ioctl$PPPIOCGCHAN(r11, 0x80047437, &(0x7f0000001f00)) r12 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r13 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000700), r6) sendmsg$IPVS_CMD_FLUSH(r10, &(0x7f0000000880)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000840)={&(0x7f0000000a40)=ANY=[@ANYRES32=0x0, @ANYRES16=r13, @ANYRES32=r6], 0xcc}, 0x1, 0x0, 0x0, 0x40085}, 0x4000000) ioctl$sock_SIOCGIFINDEX_80211(r10, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r10, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000300)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r14, @ANYBLOB="30003300c0000000ffffffffffff0802110000005050505050"], 0x54}}, 0x0) 74.765555ms ago: executing program 3 (id=495): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x11, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000004bc311ec8500000075000000a70000000800000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000000)='kfree\x00', r0}, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x4d8, 0x0, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'ip_vti0\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0/../file0aaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaaa'}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x538) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r2, 0x8933, &(0x7f0000000000)={'batadv0\x00', 0x0}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r4) sendmsg$NL80211_CMD_GET_COALESCE(r4, &(0x7f0000000340)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x28, r5, 0x1, 0x70bd29, 0x25dfdbfe, {{}, {@val={0x8}, @void, @val={0xc, 0x99, {0x5, 0x8}}}}, ["", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x8000}, 0x4000) sendmsg$TIPC_NL_PUBL_GET(0xffffffffffffffff, &(0x7f0000001280)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40000}, 0x81) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r6, 0x8933, &(0x7f0000000040)={'batadv_slave_1\x00', 0x0}) bind$packet(r2, &(0x7f0000000280)={0x11, 0x1b, r7, 0x1, 0xdf, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x23}}, 0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)=@getchain={0x24, 0x11, 0x1, 0x70bd2a, 0x8000000, {0x0, 0x0, 0x0, r3, {0x1f, 0x3}}}, 0x24}, 0x1, 0x0, 0x0, 0x20008040}, 0x4000000) 73.618833ms ago: executing program 4 (id=496): socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000040)={0x0, 0x1dc8}) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000000)={0x0, 0x2, [0x1c6, 0x3, 0x3, 0xfffffffffffffffb, 0x0, 0x8]}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1100010000000000140012800c0001006d6163766c616e00040002800800", @ANYRES32=r0, @ANYBLOB='\b'], 0x44}}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)) (async) ioctl$BTRFS_IOC_QGROUP_CREATE(r0, 0x4010942a, &(0x7f0000000040)={0x0, 0x1dc8}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) ioctl$BTRFS_IOC_QUOTA_RESCAN(r0, 0x4040942c, &(0x7f0000000000)={0x0, 0x2, [0x1c6, 0x3, 0x3, 0xfffffffffffffffb, 0x0, 0x8]}) (async) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="1100010000000000140012800c0001006d6163766c616e00040002800800", @ANYRES32=r0, @ANYBLOB='\b'], 0x44}}, 0x0) (async) 0s ago: executing program 0 (id=497): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000006280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000003c0)=@newqdisc={0xc0, 0x24, 0x20, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xd, 0xc}, {0xfffa, 0x10}, {0xffe0, 0x9}}, [@TCA_STAB={0x4c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x36, 0xb0, 0x0, 0x7, 0x0, 0x0, 0x40, 0x1}}, {0x6, 0x2, [0x5ae]}}, {{0x1c, 0x1, {0x8, 0x26, 0x3, 0x0, 0x1, 0x0, 0xc, 0x1}}, {0x6, 0x2, [0x400]}}]}, @qdisc_kind_options=@q_qfg={0x8}, @qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x9, "23b80e98653164d8897a7d1d6b979f4c"}}}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x6}, @qdisc_kind_options=@q_taprio={{0xb}, {0x10, 0x2, [@TCA_TAPRIO_ATTR_SCHED_CYCLE_TIME_EXTENSION={0xc, 0x9, 0x2}]}}]}, 0xc0}}, 0x0) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="04000000", @ANYRES16=0x0, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="35000e0080000000ffffffffffff08021100000050505050505040000000000000000000640007100006020202020202250300ab4b00000005ff7f00000602020202020204002a0008000c000001000008000d"], 0x74}}, 0x0) (async) sendmsg$NL80211_CMD_START_AP(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB="04000000", @ANYRES16=0x0, @ANYBLOB="050000000000000000000f00000008000300", @ANYRES32=0x0, @ANYBLOB="35000e0080000000ffffffffffff08021100000050505050505040000000000000000000640007100006020202020202250300ab4b00000005ff7f00000602020202020204002a0008000c000001000008000d"], 0x74}}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=ANY=[@ANYBLOB="280500003d0007010000000000000000017c0000040000000c00018006000600800a000004050280ff0414"], 0x528}, 0x1, 0x0, 0x0, 0x44}, 0x24004094) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.83' (ED25519) to the list of known hosts. [ 70.402023][ T5823] cgroup: Unknown subsys name 'net' [ 70.510152][ T5823] cgroup: Unknown subsys name 'cpuset' [ 70.518838][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 71.689667][ T1297] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.696269][ T1297] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.033197][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.431767][ T5839] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.440768][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.449457][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 74.457525][ T5839] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 74.465295][ T5839] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.473914][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.482345][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 74.490341][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.498243][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 74.507208][ T5839] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.510761][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 74.514432][ T5839] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 74.530530][ T5839] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 74.537087][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.539056][ T5839] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 74.544908][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 74.552911][ T5839] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 74.560208][ T5852] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 74.566468][ T5839] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 74.579391][ T5853] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 74.582129][ T5839] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 74.589176][ T5853] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 74.601458][ T54] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.610972][ T54] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 74.618214][ T5852] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 74.626083][ T54] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 74.634614][ T5852] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 74.645300][ T54] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 74.652505][ T5852] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 74.669250][ T54] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.091031][ T5835] chnl_net:caif_netlink_parms(): no params data found [ 75.157067][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 75.175893][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 75.237191][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 75.255476][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 75.313057][ T5835] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.320398][ T5835] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.328079][ T5835] bridge_slave_0: entered allmulticast mode [ 75.334884][ T5835] bridge_slave_0: entered promiscuous mode [ 75.373306][ T5835] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.380725][ T5835] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.388363][ T5835] bridge_slave_1: entered allmulticast mode [ 75.395333][ T5835] bridge_slave_1: entered promiscuous mode [ 75.510476][ T5835] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.524921][ T5835] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.562266][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.569583][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.577090][ T5845] bridge_slave_0: entered allmulticast mode [ 75.583856][ T5845] bridge_slave_0: entered promiscuous mode [ 75.609022][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.619888][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.627437][ T5842] bridge_slave_0: entered allmulticast mode [ 75.634203][ T5842] bridge_slave_0: entered promiscuous mode [ 75.660985][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.668226][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.675723][ T5845] bridge_slave_1: entered allmulticast mode [ 75.682785][ T5845] bridge_slave_1: entered promiscuous mode [ 75.703125][ T5835] team0: Port device team_slave_0 added [ 75.717944][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.725072][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.732540][ T5842] bridge_slave_1: entered allmulticast mode [ 75.739530][ T5842] bridge_slave_1: entered promiscuous mode [ 75.763953][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.771346][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.779119][ T5833] bridge_slave_0: entered allmulticast mode [ 75.786059][ T5833] bridge_slave_0: entered promiscuous mode [ 75.805187][ T5835] team0: Port device team_slave_1 added [ 75.811236][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.818619][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.825795][ T5840] bridge_slave_0: entered allmulticast mode [ 75.833048][ T5840] bridge_slave_0: entered promiscuous mode [ 75.842416][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.854571][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.864252][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.871838][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.879340][ T5833] bridge_slave_1: entered allmulticast mode [ 75.886344][ T5833] bridge_slave_1: entered promiscuous mode [ 75.928021][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.935165][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.943230][ T5840] bridge_slave_1: entered allmulticast mode [ 75.950299][ T5840] bridge_slave_1: entered promiscuous mode [ 75.984681][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.998285][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.014327][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.022081][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.048370][ T5835] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.061917][ T5835] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.068997][ T5835] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.095524][ T5835] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.127078][ T5842] team0: Port device team_slave_0 added [ 76.134762][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.157221][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.177465][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.189293][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.201500][ T5842] team0: Port device team_slave_1 added [ 76.227051][ T5833] team0: Port device team_slave_0 added [ 76.277708][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.284720][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.311023][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.324534][ T5833] team0: Port device team_slave_1 added [ 76.351606][ T5840] team0: Port device team_slave_0 added [ 76.360316][ T5840] team0: Port device team_slave_1 added [ 76.367590][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.374563][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.400923][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.440529][ T5845] team0: Port device team_slave_0 added [ 76.449242][ T5845] team0: Port device team_slave_1 added [ 76.475855][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.483257][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.509785][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.525869][ T5835] hsr_slave_0: entered promiscuous mode [ 76.536318][ T5835] hsr_slave_1: entered promiscuous mode [ 76.552839][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.559920][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.586872][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.599446][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.606606][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.632637][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.647160][ T5852] Bluetooth: hci1: command tx timeout [ 76.647164][ T5846] Bluetooth: hci2: command tx timeout [ 76.658149][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.658194][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.658223][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.719705][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.727234][ T5852] Bluetooth: hci4: command tx timeout [ 76.727534][ T5852] Bluetooth: hci0: command tx timeout [ 76.738402][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.738435][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.738524][ T5846] Bluetooth: hci3: command tx timeout [ 76.817157][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.824148][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.850834][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.922141][ T5842] hsr_slave_0: entered promiscuous mode [ 76.929300][ T5842] hsr_slave_1: entered promiscuous mode [ 76.935417][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.943402][ T5842] Cannot create hsr debugfs directory [ 76.958224][ T5840] hsr_slave_0: entered promiscuous mode [ 76.964473][ T5840] hsr_slave_1: entered promiscuous mode [ 76.970989][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 76.978750][ T5840] Cannot create hsr debugfs directory [ 76.999995][ T5833] hsr_slave_0: entered promiscuous mode [ 77.006822][ T5833] hsr_slave_1: entered promiscuous mode [ 77.012881][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.020891][ T5833] Cannot create hsr debugfs directory [ 77.104791][ T5845] hsr_slave_0: entered promiscuous mode [ 77.115097][ T5845] hsr_slave_1: entered promiscuous mode [ 77.121484][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.129160][ T5845] Cannot create hsr debugfs directory [ 77.449534][ T5835] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.461194][ T5835] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.482163][ T5835] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.504317][ T5835] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.529672][ T5842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 77.542792][ T5842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 77.552955][ T5842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 77.578762][ T5842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 77.637445][ T5840] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.654864][ T5840] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.687511][ T5840] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.700494][ T5840] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.738389][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.753359][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.785477][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.811061][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.843486][ T5845] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.867437][ T5845] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.878034][ T5845] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.889223][ T5845] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 77.922523][ T5835] 8021q: adding VLAN 0 to HW filter on device bond0 [ 77.974735][ T5835] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.006856][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.026492][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.033893][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.059642][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.066856][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.137898][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.163517][ T3585] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.170724][ T3585] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.194520][ T5835] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.212811][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.219972][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.234790][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.291542][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.367841][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.375025][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.392491][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.399730][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.443532][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.492534][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.515797][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.536492][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.543616][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.584816][ T3513] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.592020][ T3513] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.607642][ T5835] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.644017][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.679681][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.686873][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.728609][ T5846] Bluetooth: hci2: command tx timeout [ 78.728654][ T5852] Bluetooth: hci1: command tx timeout [ 78.764489][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.771673][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.807332][ T5852] Bluetooth: hci0: command tx timeout [ 78.807350][ T5846] Bluetooth: hci3: command tx timeout [ 78.807387][ T5846] Bluetooth: hci4: command tx timeout [ 78.917570][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 78.933711][ T5835] veth0_vlan: entered promiscuous mode [ 79.005302][ T5835] veth1_vlan: entered promiscuous mode [ 79.107312][ T5835] veth0_macvtap: entered promiscuous mode [ 79.146392][ T5835] veth1_macvtap: entered promiscuous mode [ 79.186991][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.243638][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.272606][ T5835] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.302955][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.313913][ T5835] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.328736][ T5835] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.338571][ T5835] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.349554][ T5835] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.408891][ T5840] veth0_vlan: entered promiscuous mode [ 79.442936][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.464753][ T5840] veth1_vlan: entered promiscuous mode [ 79.525167][ T5845] veth0_vlan: entered promiscuous mode [ 79.552527][ T5845] veth1_vlan: entered promiscuous mode [ 79.603711][ T5842] veth0_vlan: entered promiscuous mode [ 79.627075][ T5842] veth1_vlan: entered promiscuous mode [ 79.645146][ T5845] veth0_macvtap: entered promiscuous mode [ 79.651678][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.665880][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.703293][ T5833] veth0_vlan: entered promiscuous mode [ 79.710200][ T5845] veth1_macvtap: entered promiscuous mode [ 79.727850][ T5840] veth0_macvtap: entered promiscuous mode [ 79.750477][ T3513] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.759895][ T3513] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.768143][ T5840] veth1_macvtap: entered promiscuous mode [ 79.798999][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.812884][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.825193][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.835285][ T5833] veth1_vlan: entered promiscuous mode [ 79.855011][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.872611][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.876681][ T5835] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 79.884626][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.910756][ T5842] veth0_macvtap: entered promiscuous mode [ 79.926528][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.938004][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.948565][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.959923][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.971196][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.983767][ T5845] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.994564][ T5845] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.003935][ T5845] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.014255][ T5845] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.034750][ T5842] veth1_macvtap: entered promiscuous mode [ 80.064740][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.092368][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.104508][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.115256][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.126540][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.146834][ T5920] A link change request failed with some changes committed already. Interface wg1 may have been left with an inconsistent configuration, please check. [ 80.171146][ T5840] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.180541][ T5840] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.190718][ T5840] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.200657][ T5840] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.272820][ T5833] veth0_macvtap: entered promiscuous mode [ 80.301830][ T5833] veth1_macvtap: entered promiscuous mode [ 80.316699][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.332118][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.344319][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.356932][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.366927][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.377474][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.388553][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.424188][ T5923] batman_adv: batadv0: Adding interface: dummy0 [ 80.432266][ T5923] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 80.458773][ T5923] batman_adv: batadv0: Interface activated: dummy0 [ 80.494918][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.507354][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.518508][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.529130][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.539094][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.550116][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.562246][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.578017][ T3461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.583391][ T5842] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.595816][ T5842] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.599480][ T3461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.608581][ T5842] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.621064][ T5842] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.647592][ T5923] batadv0: mtu less than device minimum [ 80.654682][ T5923] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 80.667541][ T5923] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 80.679449][ T5923] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 80.691987][ T5923] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 80.704354][ T5923] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 80.716607][ T5923] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 80.728487][ T5923] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 80.740511][ T5923] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 80.779555][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.790166][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.800142][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.810743][ T5846] Bluetooth: hci2: command tx timeout [ 80.816467][ T5846] Bluetooth: hci1: command tx timeout [ 80.821990][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.831932][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.842422][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.852315][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.862808][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.873834][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.886328][ T5846] Bluetooth: hci4: command tx timeout [ 80.886361][ T5852] Bluetooth: hci3: command tx timeout [ 80.886441][ T54] Bluetooth: hci0: command tx timeout [ 80.931669][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.962970][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.975199][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.985171][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.996788][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.008406][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.036380][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.048393][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.058626][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 81.071139][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 81.082765][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.112644][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.123681][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.133147][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.136848][ T5927] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 81.145858][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.185130][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.194615][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.272715][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.324295][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.423638][ T3461] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.463487][ T3461] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.570957][ T5935] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 81.580415][ T3513] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.594421][ T3513] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.653874][ T5935] netlink: 'syz.1.2': attribute type 33 has an invalid length. [ 81.727320][ T3461] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.736732][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.753734][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.763073][ T3461] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.978503][ T5945] netlink: 8 bytes leftover after parsing attributes in process `syz.3.9'. [ 82.194833][ T5954] netlink: 'syz.1.12': attribute type 1 has an invalid length. [ 82.474781][ T5964] netlink: 'syz.2.15': attribute type 3 has an invalid length. [ 82.489198][ T5958] Zero length message leads to an empty skb [ 82.816305][ T5982] workqueue: name exceeds WQ_NAME_LEN. Truncating to: þÜå}ÆÓžäءÑV§ìñu«¼.ä [ 82.816305][ T5982] Ýdïj! [ 82.887459][ T54] Bluetooth: hci1: command tx timeout [ 82.887460][ T5846] Bluetooth: hci2: command tx timeout [ 82.964514][ T5991] warning: `syz.1.23' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 82.978167][ T54] Bluetooth: hci4: command tx timeout [ 82.983635][ T54] Bluetooth: hci0: command tx timeout [ 82.989170][ T5846] Bluetooth: hci3: command tx timeout [ 83.380292][ T6004] netlink: 'syz.3.29': attribute type 4 has an invalid length. [ 83.416882][ T6004] netlink: 28 bytes leftover after parsing attributes in process `syz.3.29'. [ 83.461025][ T6002] netlink: 'syz.4.27': attribute type 10 has an invalid length. [ 83.474106][ T6005] tipc: Enabling of bearer rejected, failed to enable media [ 83.540999][ T6002] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 83.552613][ T6013] netlink: 36 bytes leftover after parsing attributes in process `syz.0.30'. [ 83.562534][ T6002] team0: Failed to send options change via netlink (err -105) [ 83.571732][ T6002] team0: Port device netdevsim0 added [ 83.579607][ T6004] vlan1: entered promiscuous mode [ 83.589453][ T6001] vlan1: left promiscuous mode [ 83.639715][ T6013] netlink: 4 bytes leftover after parsing attributes in process `syz.0.30'. [ 84.017084][ T6028] netlink: 'syz.1.32': attribute type 4 has an invalid length. [ 84.126276][ T6028] netlink: 152 bytes leftover after parsing attributes in process `syz.1.32'. [ 84.718614][ T6056] xt_SECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 84.898130][ T6071] xt_ecn: cannot match TCP bits for non-tcp packets [ 85.039644][ T6070] raw_sendmsg: syz.1.42 forgot to set AF_INET. Fix it! [ 85.247359][ T6088] syz.3.46 uses obsolete (PF_INET,SOCK_PACKET) [ 85.384622][ T6103] netlink: 5980 bytes leftover after parsing attributes in process `syz.3.46'. [ 85.622473][ T6114] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 85.984183][ T6131] netlink: 'syz.1.56': attribute type 10 has an invalid length. [ 86.043664][ T6131] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.054118][ T6131] bond0: (slave team0): Enslaving as an active interface with an up link [ 86.775143][ T6176] netlink: 12 bytes leftover after parsing attributes in process `syz.2.66'. [ 86.966609][ T5852] Bluetooth: hci4: command tx timeout [ 87.048804][ T6182] veth0_to_hsr: invalid flags given to default FDB implementation [ 87.733556][ T6209] netlink: 52 bytes leftover after parsing attributes in process `syz.4.76'. [ 87.844885][ T6214] netlink: 72 bytes leftover after parsing attributes in process `syz.2.77'. [ 88.624826][ T6241] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 89.005453][ T6261] netlink: 4 bytes leftover after parsing attributes in process `syz.4.90'. [ 89.046390][ T5852] Bluetooth: hci4: command 0x0405 tx timeout [ 89.445687][ T6287] net_ratelimit: 14 callbacks suppressed [ 89.445709][ T6287] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 89.584394][ C0] Unknown status report in ack skb [ 89.731287][ T6297] netlink: 40 bytes leftover after parsing attributes in process `syz.3.100'. [ 89.771121][ T6297] netlink: 'syz.3.100': attribute type 12 has an invalid length. [ 89.799934][ T6297] netlink: 'syz.3.100': attribute type 29 has an invalid length. [ 89.826203][ T6297] netlink: 148 bytes leftover after parsing attributes in process `syz.3.100'. [ 89.869552][ T6297] netlink: 59 bytes leftover after parsing attributes in process `syz.3.100'. [ 89.883222][ T6303] netlink: 12 bytes leftover after parsing attributes in process `syz.0.102'. [ 89.931306][ T6303] netlink: 'syz.0.102': attribute type 4 has an invalid length. [ 90.004419][ T6308] netlink: 'syz.4.94': attribute type 1 has an invalid length. [ 90.221067][ T6315] tipc: Started in network mode [ 90.254885][ T6315] tipc: Node identity b68c3dd54324, cluster identity 4711 [ 90.263005][ T6318] Bluetooth: MGMT ver 1.23 [ 90.305483][ T6315] tipc: Enabled bearer , priority 0 [ 90.323868][ T6317] netlink: 12 bytes leftover after parsing attributes in process `syz.0.107'. [ 90.349904][ T6317] tc_dump_action: action bad kind [ 90.547223][ T6323] syzkaller0: entered promiscuous mode [ 90.552798][ T6323] syzkaller0: entered allmulticast mode [ 90.578414][ T6323] tipc: Resetting bearer [ 90.599394][ T6330] netlink: 4 bytes leftover after parsing attributes in process `syz.3.104'. [ 90.668965][ T6335] netlink: 'syz.0.112': attribute type 10 has an invalid length. [ 90.707492][ T6309] tipc: Resetting bearer [ 90.890825][ T6346] netlink: 'syz.4.114': attribute type 3 has an invalid length. [ 91.428726][ T5886] tipc: Node number set to 4121443797 [ 92.171868][ T58] cfg80211: failed to load regulatory.db [ 92.238722][ T6309] tipc: Disabling bearer [ 92.249743][ T6335] hsr0: entered promiscuous mode [ 92.257243][ T6335] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 92.272610][ T6335] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 92.286132][ T6335] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 92.570639][ T6366] netlink: zone id is out of range [ 92.575819][ T6366] netlink: zone id is out of range [ 92.593888][ T6361] __nla_validate_parse: 1 callbacks suppressed [ 92.593907][ T6361] netlink: 4 bytes leftover after parsing attributes in process `syz.2.119'. [ 92.633724][ T6361] netlink: 176 bytes leftover after parsing attributes in process `syz.2.119'. [ 92.645985][ T6366] netlink: zone id is out of range [ 92.651372][ T6361] netlink: 'syz.2.119': attribute type 5 has an invalid length. [ 92.659340][ T6366] netlink: zone id is out of range [ 92.659375][ T6366] netlink: zone id is out of range [ 92.659386][ T6366] netlink: zone id is out of range [ 92.680453][ T6375] Bluetooth: MGMT ver 1.23 [ 92.685762][ T6366] netlink: zone id is out of range [ 92.716222][ T6366] netlink: zone id is out of range [ 92.838925][ T6379] netlink: 60 bytes leftover after parsing attributes in process `syz.0.126'. [ 93.051828][ T6392] tipc: Enabling not permitted [ 93.068920][ T6392] tipc: Enabling of bearer rejected, failed to enable media [ 93.724690][ T6418] netlink: 8 bytes leftover after parsing attributes in process `syz.1.138'. [ 93.744430][ T6421] Can not set IPV6_FL_F_REFLECT if flowlabel_consistency sysctl is enable [ 94.008236][ T6428] netlink: 'syz.1.142': attribute type 8 has an invalid length. [ 94.015516][ T6431] ip6t_srh: unknown srh match flags 4001 [ 94.042661][ T6429] netdevsim netdevsim3: loading /lib/firmware/. failed with error -22 [ 94.095722][ T6429] netdevsim netdevsim3: Direct firmware load for . failed with error -22 [ 94.129110][ T6429] netdevsim netdevsim3: Falling back to sysfs fallback for: . [ 94.165524][ T6436] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 94.316409][ T6438] netlink: 4 bytes leftover after parsing attributes in process `syz.2.147'. [ 94.630423][ T6455] netlink: 68 bytes leftover after parsing attributes in process `syz.2.150'. [ 94.768092][ T6458] netlink: 71 bytes leftover after parsing attributes in process `syz.4.151'. [ 94.874595][ T6460] netlink: 4 bytes leftover after parsing attributes in process `syz.1.152'. [ 94.927338][ T6463] lo speed is unknown, defaulting to 1000 [ 94.977081][ T6463] lo speed is unknown, defaulting to 1000 [ 95.044550][ T6468] Cannot find add_set index 0 as target [ 95.080563][ T6463] lo speed is unknown, defaulting to 1000 [ 95.093737][ T6464] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.113313][ T6464] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.114812][ T6471] netlink: 24 bytes leftover after parsing attributes in process `syz.3.155'. [ 95.120581][ T6464] bridge0: port 1(bridge_slave_0) entered forwarding state [ 95.156709][ T6469] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 95.435436][ T6477] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.487992][ T6476] netlink: 40 bytes leftover after parsing attributes in process `syz.3.157'. [ 95.490850][ T6463] infiniband syz0: set active [ 95.504924][ T6463] infiniband syz0: added lo [ 95.521635][ T5885] lo speed is unknown, defaulting to 1000 [ 95.598314][ T6463] RDS/IB: syz0: added [ 95.602978][ T6463] smc: adding ib device syz0 with port count 1 [ 95.630077][ T6463] smc: ib device syz0 port 1 has pnetid [ 95.672502][ T6486] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 95.680139][ T6486] IPv6: NLM_F_CREATE should be set when creating new route [ 95.687517][ T6486] IPv6: NLM_F_CREATE should be set when creating new route [ 95.702956][ T5886] lo speed is unknown, defaulting to 1000 [ 95.738217][ T6463] lo speed is unknown, defaulting to 1000 [ 96.117359][ T6507] x_tables: duplicate underflow at hook 2 [ 96.178406][ T6463] lo speed is unknown, defaulting to 1000 [ 96.252171][ T6515] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 96.475058][ T6523] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 96.617414][ T6463] lo speed is unknown, defaulting to 1000 [ 96.713677][ T6534] netlink: 'syz.0.176': attribute type 1 has an invalid length. [ 96.731853][ T6534] netlink: 'syz.0.176': attribute type 1 has an invalid length. [ 96.945228][ T6463] lo speed is unknown, defaulting to 1000 [ 97.284593][ T6463] lo speed is unknown, defaulting to 1000 [ 97.461416][ T6573] openvswitch: netlink: EtherType 50a is less than min 600 [ 97.686854][ T6463] syz.2.153 (6463) used greatest stack depth: 18352 bytes left [ 97.790315][ T6588] __nla_validate_parse: 4 callbacks suppressed [ 97.790338][ T6588] netlink: 16 bytes leftover after parsing attributes in process `syz.4.187'. [ 98.234530][ T6622] netlink: 'syz.1.190': attribute type 1 has an invalid length. [ 98.257861][ T6622] netlink: 'syz.1.190': attribute type 10 has an invalid length. [ 98.284045][ T6622] netlink: 236 bytes leftover after parsing attributes in process `syz.1.190'. [ 98.533917][ T6632] veth0: entered promiscuous mode [ 98.544299][ T6632] veth0: left promiscuous mode [ 98.563995][ T6636] vxcan1: tx address claim with different name [ 98.808570][ T6652] netlink: 16 bytes leftover after parsing attributes in process `syz.0.200'. [ 99.181432][ T6667] netlink: 4 bytes leftover after parsing attributes in process `syz.0.206'. [ 99.667511][ T6692] netlink: 576 bytes leftover after parsing attributes in process `syz.4.214'. [ 100.118433][ T6718] netlink: 'syz.1.222': attribute type 4 has an invalid length. [ 100.135211][ T6721] netlink: 'syz.4.220': attribute type 10 has an invalid length. [ 100.157397][ T6721] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.227032][ T6721] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 100.364331][ T6733] netlink: 'syz.0.226': attribute type 1 has an invalid length. [ 100.517289][ T6735] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 100.547136][ T6740] af_packet: tpacket_rcv: packet too big, clamped from 65354 to 4294967272. macoff=96 [ 100.582943][ T6733] 8021q: adding VLAN 0 to HW filter on device bond1 [ 100.591946][ T6606] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 100.605806][ T6742] netlink: 'syz.1.229': attribute type 12 has an invalid length. [ 100.641474][ T6733] vlan2: entered promiscuous mode [ 100.662112][ T6733] bond1: entered promiscuous mode [ 100.670635][ T6733] ip6gretap1: entered promiscuous mode [ 100.688730][ T6733] bond1: left promiscuous mode [ 100.694107][ T6733] ip6gretap1: left promiscuous mode [ 100.737345][ T71] bond1: Warning: No 802.3ad response from the link partner for any adapters in the bond [ 101.299816][ T6764] netlink: 'syz.4.234': attribute type 1 has an invalid length. [ 101.304262][ T6765] netlink: 28 bytes leftover after parsing attributes in process `syz.2.235'. [ 101.394657][ T6764] 8021q: adding VLAN 0 to HW filter on device bond1 [ 101.834211][ T6799] netlink: 'syz.4.242': attribute type 30 has an invalid length. [ 101.915845][ T6803] netlink: 696 bytes leftover after parsing attributes in process `syz.0.246'. [ 101.942181][ T6803] netlink: 696 bytes leftover after parsing attributes in process `syz.0.246'. [ 102.203123][ T6818] sch_tbf: burst 4398 is lower than device lo mtu (17233) ! [ 102.498409][ T6837] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 102.750396][ T6844] tipc: Started in network mode [ 102.769377][ T6844] tipc: Node identity ff010000000000000000000000000001, cluster identity 4711 [ 102.793644][ T6844] tipc: Enabling of bearer rejected, failed to enable media [ 102.952977][ T6854] lo: entered promiscuous mode [ 102.966604][ T6854] lo: entered allmulticast mode [ 102.982798][ T6854] infiniband syz0: set active [ 103.016318][ T6854] infiniband syz0: set active [ 103.052936][ T6854] tunl0: entered promiscuous mode [ 103.078835][ T6854] tunl0: entered allmulticast mode [ 103.112387][ T6854] gre0: entered promiscuous mode [ 103.124099][ T6854] gre0: entered allmulticast mode [ 103.138346][ T6854] gretap0: entered promiscuous mode [ 103.150767][ T6854] gretap0: entered allmulticast mode [ 103.168747][ T6854] erspan0: entered promiscuous mode [ 103.184491][ T6856] netlink: 'syz.1.255': attribute type 1 has an invalid length. [ 103.186272][ T6854] erspan0: entered allmulticast mode [ 103.221200][ T6856] netlink: 56 bytes leftover after parsing attributes in process `syz.1.255'. [ 103.246209][ T6859] netlink: 36 bytes leftover after parsing attributes in process `syz.4.256'. [ 103.261481][ T6854] ip_vti0: entered promiscuous mode [ 103.275295][ T6858] netlink: 36 bytes leftover after parsing attributes in process `syz.4.256'. [ 103.295224][ T6854] ip_vti0: entered allmulticast mode [ 103.329245][ T6854] ip6_vti0: entered promiscuous mode [ 103.334627][ T6854] ip6_vti0: entered allmulticast mode [ 103.412057][ T6854] sit0: entered promiscuous mode [ 103.437621][ T6854] sit0: entered allmulticast mode [ 103.462988][ T6854] ip6tnl0: entered promiscuous mode [ 103.488846][ T6854] ip6tnl0: entered allmulticast mode [ 103.517070][ T6854] ip6gre0: entered promiscuous mode [ 103.536634][ T6854] ip6gre0: entered allmulticast mode [ 103.542730][ T6854] syz_tun: entered promiscuous mode [ 103.562158][ T6854] syz_tun: entered allmulticast mode [ 103.569248][ T6854] ip6gretap0: entered promiscuous mode [ 103.574819][ T6854] ip6gretap0: entered allmulticast mode [ 103.581345][ T6854] bridge0: entered promiscuous mode [ 103.588063][ T6854] bridge0: entered allmulticast mode [ 103.594387][ T6854] vcan0: entered promiscuous mode [ 103.599989][ T6854] vcan0: entered allmulticast mode [ 103.605542][ T6854] bond0: entered promiscuous mode [ 103.615837][ T6854] bond_slave_0: entered promiscuous mode [ 103.644909][ T6854] bond_slave_1: entered promiscuous mode [ 103.651970][ T6854] bond0: entered allmulticast mode [ 103.658282][ T6854] bond_slave_0: entered allmulticast mode [ 103.669947][ T6854] bond_slave_1: entered allmulticast mode [ 103.677435][ T6854] team0: entered promiscuous mode [ 103.682607][ T6854] team_slave_0: entered promiscuous mode [ 103.691028][ T6854] team_slave_1: entered promiscuous mode [ 103.697111][ T6854] team0: entered allmulticast mode [ 103.702360][ T6854] team_slave_0: entered allmulticast mode [ 103.708832][ T6854] team_slave_1: entered allmulticast mode [ 103.716229][ T6854] dummy0: entered promiscuous mode [ 103.721391][ T6854] dummy0: entered allmulticast mode [ 103.727522][ T6854] nlmon0: entered promiscuous mode [ 103.733122][ T6854] nlmon0: entered allmulticast mode [ 103.740121][ T6854] caif0: entered promiscuous mode [ 103.745186][ T6854] caif0: entered allmulticast mode [ 103.751398][ T6854] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 103.773589][ T5886] lo speed is unknown, defaulting to 1000 [ 103.783257][ T5887] lo speed is unknown, defaulting to 1000 [ 104.070984][ T6875] netlink: 232 bytes leftover after parsing attributes in process `syz.1.260'. [ 104.108581][ T6882] A link change request failed with some changes committed already. Interface ipvlan1 may have been left with an inconsistent configuration, please check. [ 104.147314][ T6881] ksmbd: Daemon and kernel module version mismatch. ksmbd: 124, kernel module: 1. User-space ksmbd should terminate. [ 104.185901][ T6886] Bluetooth: MGMT ver 1.23 [ 104.305865][ T6898] netlink: 504 bytes leftover after parsing attributes in process `syz.0.265'. [ 104.434666][ T6902] veth1_macvtap: left promiscuous mode [ 104.451704][ T6902] macsec0: entered promiscuous mode [ 104.494222][ T6902] veth1_macvtap: entered promiscuous mode [ 104.523603][ T6902] macsec0: left promiscuous mode [ 104.725206][ T6916] sch_tbf: burst 19872 is lower than device lo mtu (65550) ! [ 104.744329][ T6914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.268'. [ 105.117143][ T6942] netlink: 40 bytes leftover after parsing attributes in process `syz.3.273'. [ 105.174983][ T6950] netlink: 8 bytes leftover after parsing attributes in process `syz.0.272'. [ 105.192080][ T6946] netlink: 172 bytes leftover after parsing attributes in process `syz.2.275'. [ 105.392711][ T6960] netlink: 4 bytes leftover after parsing attributes in process `syz.3.277'. [ 105.485471][ T6960] gretap0: entered promiscuous mode [ 105.501427][ T6960] macvtap1: entered promiscuous mode [ 105.548323][ T6960] macvtap1: entered allmulticast mode [ 105.557518][ T6960] gretap0: entered allmulticast mode [ 106.852182][ T7040] xt_ecn: cannot match TCP bits for non-tcp packets [ 107.177237][ T7054] netlink: 'syz.3.298': attribute type 1 has an invalid length. [ 107.847223][ T7086] x_tables: duplicate underflow at hook 4 [ 108.195294][ T7102] netlink: 'syz.4.315': attribute type 7 has an invalid length. [ 108.238387][ T7104] netlink: 'syz.4.315': attribute type 7 has an invalid length. [ 108.661099][ T7133] __nla_validate_parse: 9 callbacks suppressed [ 108.661118][ T7133] netlink: 4 bytes leftover after parsing attributes in process `syz.4.323'. [ 109.424186][ T7191] lo speed is unknown, defaulting to 1000 [ 109.438214][ T7194] netlink: 8 bytes leftover after parsing attributes in process `syz.2.335'. [ 109.480289][ T7194] vlan2: entered allmulticast mode [ 109.553420][ T7201] netlink: 2 bytes leftover after parsing attributes in process `syz.4.340'. [ 109.672281][ T7203] netlink: 'syz.3.341': attribute type 1 has an invalid length. [ 109.690650][ T7203] netlink: 228 bytes leftover after parsing attributes in process `syz.3.341'. [ 109.700227][ T7203] netlink: 8 bytes leftover after parsing attributes in process `syz.3.341'. [ 109.873613][ T7209] netlink: 'syz.4.343': attribute type 39 has an invalid length. [ 110.204374][ T7218] netlink: 48 bytes leftover after parsing attributes in process `syz.3.345'. [ 110.648155][ T7238] delete_channel: no stack [ 110.666590][ T7243] trusted_key: syz.2.350 sent an empty control message without MSG_MORE. [ 110.698332][ T7238] ax25_connect(): syz.1.349 uses autobind, please contact jreuter@yaina.de [ 110.714874][ T7241] infiniband syz0: set active [ 110.733023][ T5886] lo speed is unknown, defaulting to 1000 [ 110.953571][ T7255] netlink: 'syz.1.354': attribute type 10 has an invalid length. [ 110.968341][ T7256] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 110.981790][ T7257] netlink: 'syz.1.354': attribute type 10 has an invalid length. [ 111.027803][ T7257] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 111.057459][ T7255] bond0: (slave netdevsim0): Releasing backup interface [ 111.074550][ T7255] team0: Port device netdevsim0 added [ 111.126731][ T7261] syzkaller0: entered promiscuous mode [ 111.148788][ T7261] syzkaller0: entered allmulticast mode [ 111.941927][ T7299] netlink: 6 bytes leftover after parsing attributes in process `syz.3.363'. [ 113.002629][ T7349] netlink: 'syz.1.375': attribute type 3 has an invalid length. [ 113.010588][ T7349] netlink: 766 bytes leftover after parsing attributes in process `syz.1.375'. [ 113.331917][ T7360] netlink: 37770 bytes leftover after parsing attributes in process `syz.1.379'. [ 113.781245][ T7386] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 113.800078][ T7389] netlink: 8 bytes leftover after parsing attributes in process `syz.3.386'. [ 113.818686][ T7394] netlink: 8 bytes leftover after parsing attributes in process `syz.3.386'. [ 113.942945][ T7398] netlink: 8 bytes leftover after parsing attributes in process `syz.4.388'. [ 114.030466][ T7405] netlink: 192 bytes leftover after parsing attributes in process `syz.2.391'. [ 114.045052][ T7406] netlink: 28 bytes leftover after parsing attributes in process `syz.3.389'. [ 114.066379][ T7406] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 114.336375][ T7417] netlink: 28 bytes leftover after parsing attributes in process `syz.3.395'. [ 114.370942][ T7422] DRBG: could not allocate CTR cipher TFM handle: ctr(aes) [ 114.718049][ T7441] netlink: 32 bytes leftover after parsing attributes in process `syz.3.399'. [ 114.754429][ T7445] netlink: 8 bytes leftover after parsing attributes in process `syz.2.403'. [ 115.317846][ T7471] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 115.325010][ T7471] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 116.003045][ T7504] dccp_invalid_packet: P.Data Offset(0) too small [ 116.289740][ T7514] netlink: 4 bytes leftover after parsing attributes in process `syz.0.420'. [ 116.557025][ T7521] netlink: 'syz.4.423': attribute type 1 has an invalid length. [ 116.598848][ T7524] netlink: 8 bytes leftover after parsing attributes in process `syz.1.422'. [ 116.665310][ T7521] 8021q: adding VLAN 0 to HW filter on device bond4 [ 116.693761][ T7521] bond3: (slave bond4): making interface the new active one [ 116.702833][ T7521] bond3: (slave bond4): Enslaving as an active interface with an up link [ 116.932559][ T7541] vlan2: entered promiscuous mode [ 117.494913][ T7565] lo speed is unknown, defaulting to 1000 [ 117.607775][ T7570] sit1: entered promiscuous mode [ 117.626181][ T7570] sit1: entered allmulticast mode [ 118.350715][ T7600] lo speed is unknown, defaulting to 1000 [ 118.507774][ T7618] bond0: option mode: unable to set because the bond device has slaves [ 119.013187][ T7638] netlink: 'syz.1.447': attribute type 10 has an invalid length. [ 119.042620][ T7636] netlink: 'syz.1.447': attribute type 10 has an invalid length. [ 119.051409][ T7636] vlan0: entered allmulticast mode [ 119.059915][ T7636] veth0_vlan: entered allmulticast mode [ 119.119886][ T7636] team0: Port device vlan0 added [ 119.153405][ T7638] veth0_vlan: left allmulticast mode [ 119.264160][ T7648] __nla_validate_parse: 6 callbacks suppressed [ 119.264180][ T7648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.449'. [ 119.292285][ T7648] netlink: 72 bytes leftover after parsing attributes in process `syz.2.449'. [ 119.313041][ T7651] netlink: 12 bytes leftover after parsing attributes in process `syz.4.450'. [ 119.362510][ T7652] ieee802154 phy0 wpan0: encryption failed: -22 [ 119.732750][ T7671] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 119.751249][ T7671] team0: Device ipvlan2 is already an upper device of the team interface [ 119.755459][ T7679] netlink: 8 bytes leftover after parsing attributes in process `syz.4.456'. [ 119.889125][ T7670] lo: entered promiscuous mode [ 119.917869][ T7670] netlink: 'syz.0.454': attribute type 2 has an invalid length. [ 119.943636][ T7670] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 120.079989][ T7689] delete_channel: no stack [ 120.346436][ T5887] IPVS: starting estimator thread 0... [ 120.364892][ T7696] dccp_invalid_packet: P.type (RESPONSE) not Data || [Data]Ack, while P.X == 0 [ 120.384846][ T7698] vlan2: entered promiscuous mode [ 120.390403][ T7698] team0: Device vlan2 is already an upper device of the team interface [ 120.457062][ T7700] IPVS: using max 21 ests per chain, 50400 per kthread [ 120.670073][ T7711] netlink: 4 bytes leftover after parsing attributes in process `syz.2.467'. [ 120.722410][ T7711] netlink: 24 bytes leftover after parsing attributes in process `syz.2.467'. [ 121.028763][ T7707] infiniband syz2: set down [ 121.043659][ T7707] infiniband syz2: added ipvlan1 [ 121.155552][ T7707] RDS/IB: syz2: added [ 121.182111][ T7707] smc: adding ib device syz2 with port count 1 [ 121.190337][ T7707] smc: ib device syz2 port 1 has pnetid [ 121.214904][ T7742] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.473'. [ 121.730550][ T7764] IPv6: sit2: Disabled Multicast RS [ 121.837627][ T7766] tunl0: left allmulticast mode [ 121.847529][ T7766] netlink: 'syz.2.480': attribute type 3 has an invalid length. [ 121.886109][ T7766] netlink: 9 bytes leftover after parsing attributes in process `syz.2.480'. [ 122.051649][ C0] Illegal XDP return value 16128 on prog (id 104) dev veth1_to_team, expect packet loss! [ 122.073404][ T7776] netlink: 8 bytes leftover after parsing attributes in process `syz.3.483'. [ 122.257471][ T7781] netlink: 'syz.2.484': attribute type 1 has an invalid length. [ 122.331982][ T7781] bond2: entered promiscuous mode [ 122.346440][ T7781] 8021q: adding VLAN 0 to HW filter on device bond2 [ 122.396969][ T7784] 8021q: adding VLAN 0 to HW filter on device bond2 [ 122.404190][ T7784] bond2: (slave vxcan3): The slave device specified does not support setting the MAC address [ 122.416339][ T7784] bond2: (slave vxcan3): Setting fail_over_mac to active for active-backup mode [ 122.431297][ T7784] bond2: (slave vxcan3): making interface the new active one [ 122.443451][ T7784] vxcan3: entered promiscuous mode [ 122.451271][ T7784] bond2: (slave vxcan3): Enslaving as an active interface with an up link [ 122.677585][ T7804] openvswitch: netlink: Unexpected mask (mask=c0, allowed=10048) [ 122.892296][ T7814] netlink: 'syz.4.491': attribute type 1 has an invalid length. [ 122.911750][ T7814] netlink: 228 bytes leftover after parsing attributes in process `syz.4.491'. [ 123.493816][ T7835] openvswitch: netlink: Flow actions may not be safe on all matching packets. Connection to 10.128.1.83 closed by remote host. [ 123.912906][ T7833] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 123.920636][ T7833] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 123.948732][ T7833] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 123.977081][ T7833] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.434084][ T7833] ================================================================== [ 124.442188][ T7833] BUG: KASAN: slab-use-after-free in sco_conn_put+0xad/0x210 [ 124.449574][ T7833] Write of size 8 at addr ffff88805ddcc5a0 by task syz.3.495/7833 [ 124.457369][ T7833] [ 124.459729][ T7833] CPU: 1 UID: 0 PID: 7833 Comm: syz.3.495 Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0 [ 124.459746][ T7833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 124.459758][ T7833] Call Trace: [ 124.459765][ T7833] [ 124.459771][ T7833] dump_stack_lvl+0x241/0x360 [ 124.459797][ T7833] ? __pfx_dump_stack_lvl+0x10/0x10 [ 124.459819][ T7833] ? __pfx__printk+0x10/0x10 [ 124.459839][ T7833] ? _printk+0xd5/0x120 [ 124.459858][ T7833] ? __virt_addr_valid+0x183/0x530 [ 124.459877][ T7833] ? __virt_addr_valid+0x183/0x530 [ 124.459904][ T7833] print_report+0x169/0x550 [ 124.459925][ T7833] ? __virt_addr_valid+0x183/0x530 [ 124.459944][ T7833] ? __virt_addr_valid+0x183/0x530 [ 124.459962][ T7833] ? __virt_addr_valid+0x45f/0x530 [ 124.459980][ T7833] ? __phys_addr+0xba/0x170 [ 124.459999][ T7833] ? sco_conn_put+0xad/0x210 [ 124.460016][ T7833] kasan_report+0x143/0x180 [ 124.460036][ T7833] ? sco_conn_put+0xad/0x210 [ 124.460055][ T7833] sco_conn_put+0xad/0x210 [ 124.460071][ T7833] ? __pfx_sco_disconn_cfm+0x10/0x10 [ 124.460089][ T7833] hci_conn_hash_flush+0x1be/0x350 [ 124.460107][ T7833] ? __pfx_hci_conn_hash_flush+0x10/0x10 [ 124.460122][ T7833] ? drain_workqueue+0x2d3/0x3a0 [ 124.460141][ T7833] ? hci_discovery_set_state+0x57/0x180 [ 124.460163][ T7833] hci_dev_close_sync+0xa42/0x11c0 [ 124.460185][ T7833] hci_unregister_dev+0x20b/0x510 [ 124.460204][ T7833] vhci_release+0x80/0xd0 [ 124.460224][ T7833] ? __pfx_vhci_release+0x10/0x10 [ 124.460244][ T7833] __fput+0x23c/0xa50 [ 124.460262][ T7833] task_work_run+0x24f/0x310 [ 124.460286][ T7833] ? __pfx_task_work_run+0x10/0x10 [ 124.460306][ T7833] ? do_exit+0xa25/0x28e0 [ 124.460325][ T7833] ? do_exit+0xa25/0x28e0 [ 124.460344][ T7833] do_exit+0xa2a/0x28e0 [ 124.460365][ T7833] ? __pfx_do_exit+0x10/0x10 [ 124.460383][ T7833] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 124.460400][ T7833] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 124.460420][ T7833] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 124.460439][ T7833] ? _raw_spin_lock_irq+0xdf/0x120 [ 124.460460][ T7833] do_group_exit+0x207/0x2c0 [ 124.460478][ T7833] ? _raw_spin_unlock_irq+0x23/0x50 [ 124.460497][ T7833] ? lockdep_hardirqs_on+0x99/0x150 [ 124.460520][ T7833] get_signal+0x16b2/0x1750 [ 124.460548][ T7833] ? __pfx_get_signal+0x10/0x10 [ 124.460573][ T7833] arch_do_signal_or_restart+0x96/0x860 [ 124.460590][ T7833] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 124.460604][ T7833] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 124.460627][ T7833] ? syscall_exit_to_user_mode+0xa3/0x340 [ 124.460651][ T7833] syscall_exit_to_user_mode+0xce/0x340 [ 124.460674][ T7833] do_syscall_64+0x100/0x230 [ 124.460688][ T7833] ? clear_bhb_loop+0x35/0x90 [ 124.460706][ T7833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.460726][ T7833] RIP: 0033:0x7ff4ca18cd29 [ 124.460741][ T7833] Code: Unable to access opcode bytes at 0x7ff4ca18ccff. [ 124.460749][ T7833] RSP: 002b:00007ff4cafd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 124.460769][ T7833] RAX: 0000000000000024 RBX: 00007ff4ca3a6080 RCX: 00007ff4ca18cd29 [ 124.460779][ T7833] RDX: 0000000004000000 RSI: 0000000020000200 RDI: 0000000000000009 [ 124.460788][ T7833] RBP: 00007ff4ca20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 124.460798][ T7833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 124.460806][ T7833] R13: 0000000000000000 R14: 00007ff4ca3a6080 R15: 00007ffc4b2e2b08 [ 124.460822][ T7833] [ 124.460827][ T7833] [ 124.791944][ T7833] Allocated by task 5211: [ 124.796304][ T7833] kasan_save_track+0x3f/0x80 [ 124.800994][ T7833] __kasan_kmalloc+0x98/0xb0 [ 124.805592][ T7833] __kmalloc_noprof+0x285/0x4c0 [ 124.810455][ T7833] tomoyo_realpath_from_path+0xcf/0x5e0 [ 124.816007][ T7833] tomoyo_path_perm+0x2b7/0x740 [ 124.820864][ T7833] security_inode_getattr+0x130/0x330 [ 124.826246][ T7833] vfs_getattr+0x2a/0x3a0 [ 124.830583][ T7833] vfs_statx+0x18c/0x490 [ 124.834831][ T7833] vfs_fstatat+0xe5/0x130 [ 124.839173][ T7833] __x64_sys_newfstatat+0x117/0x190 [ 124.844384][ T7833] do_syscall_64+0xf3/0x230 [ 124.848905][ T7833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.854808][ T7833] [ 124.857135][ T7833] Freed by task 5211: [ 124.861114][ T7833] kasan_save_track+0x3f/0x80 [ 124.865797][ T7833] kasan_save_free_info+0x40/0x50 [ 124.870824][ T7833] __kasan_slab_free+0x59/0x70 [ 124.875607][ T7833] kfree+0x196/0x430 [ 124.879513][ T7833] tomoyo_realpath_from_path+0x5a9/0x5e0 [ 124.885162][ T7833] tomoyo_path_perm+0x2b7/0x740 [ 124.890019][ T7833] security_inode_getattr+0x130/0x330 [ 124.895398][ T7833] vfs_getattr+0x2a/0x3a0 [ 124.899739][ T7833] vfs_statx+0x18c/0x490 [ 124.903990][ T7833] vfs_fstatat+0xe5/0x130 [ 124.908327][ T7833] __x64_sys_newfstatat+0x117/0x190 [ 124.913551][ T7833] do_syscall_64+0xf3/0x230 [ 124.918099][ T7833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 124.924008][ T7833] [ 124.926546][ T7833] The buggy address belongs to the object at ffff88805ddcc000 [ 124.926546][ T7833] which belongs to the cache kmalloc-4k of size 4096 [ 124.940604][ T7833] The buggy address is located 1440 bytes inside of [ 124.940604][ T7833] freed 4096-byte region [ffff88805ddcc000, ffff88805ddcd000) [ 124.955017][ T7833] [ 124.957355][ T7833] The buggy address belongs to the physical page: [ 124.963788][ T7833] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x5ddc8 [ 124.972556][ T7833] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 124.981059][ T7833] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 124.988622][ T7833] page_type: f5(slab) [ 124.992607][ T7833] raw: 00fff00000000040 ffff88801ac42140 dead000000000122 0000000000000000 [ 125.001211][ T7833] raw: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 125.009842][ T7833] head: 00fff00000000040 ffff88801ac42140 dead000000000122 0000000000000000 [ 125.018530][ T7833] head: 0000000000000000 0000000000040004 00000001f5000000 0000000000000000 [ 125.027224][ T7833] head: 00fff00000000003 ffffea0001777201 ffffffffffffffff 0000000000000000 [ 125.035907][ T7833] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 125.044682][ T7833] page dumped because: kasan: bad access detected [ 125.051134][ T7833] page_owner tracks the page as allocated [ 125.056855][ T7833] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd2040(__GFP_IO|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5211, tgid 5211 (udevd), ts 121262544257, free_ts 121240203348 [ 125.077046][ T7833] post_alloc_hook+0x1f3/0x230 [ 125.081827][ T7833] get_page_from_freelist+0x365c/0x37a0 [ 125.087392][ T7833] __alloc_pages_noprof+0x292/0x710 [ 125.092595][ T7833] alloc_pages_mpol_noprof+0x3e1/0x780 [ 125.098496][ T7833] alloc_slab_page+0x6a/0x110 [ 125.103177][ T7833] allocate_slab+0x5a/0x2b0 [ 125.107771][ T7833] ___slab_alloc+0xc27/0x14a0 [ 125.112538][ T7833] __slab_alloc+0x58/0xa0 [ 125.116871][ T7833] __kmalloc_noprof+0x2e6/0x4c0 [ 125.121734][ T7833] tomoyo_realpath_from_path+0xcf/0x5e0 [ 125.127286][ T7833] tomoyo_path_perm+0x2b7/0x740 [ 125.132137][ T7833] security_inode_getattr+0x130/0x330 [ 125.137515][ T7833] vfs_getattr+0x2a/0x3a0 [ 125.141854][ T7833] vfs_fstatat+0xa8/0x130 [ 125.146191][ T7833] __x64_sys_newfstatat+0x117/0x190 [ 125.151396][ T7833] do_syscall_64+0xf3/0x230 [ 125.155903][ T7833] page last free pid 7742 tgid 7741 stack trace: [ 125.162260][ T7833] free_unref_page+0xd3f/0x1010 [ 125.167119][ T7833] __put_partials+0x160/0x1c0 [ 125.171798][ T7833] put_cpu_partial+0x17c/0x250 [ 125.176569][ T7833] __slab_free+0x290/0x380 [ 125.180992][ T7833] qlist_free_all+0x9a/0x140 [ 125.185610][ T7833] kasan_quarantine_reduce+0x14f/0x170 [ 125.191091][ T7833] __kasan_slab_alloc+0x23/0x80 [ 125.195953][ T7833] kmem_cache_alloc_node_noprof+0x1d9/0x380 [ 125.201855][ T7833] __alloc_skb+0x1c3/0x440 [ 125.206272][ T7833] netlink_ack+0x145/0xa50 [ 125.210725][ T7833] netlink_rcv_skb+0x262/0x430 [ 125.215491][ T7833] genl_rcv+0x28/0x40 [ 125.219484][ T7833] netlink_unicast+0x7f6/0x990 [ 125.224275][ T7833] netlink_sendmsg+0x8e4/0xcb0 [ 125.229043][ T7833] __sock_sendmsg+0x221/0x270 [ 125.233730][ T7833] ____sys_sendmsg+0x52a/0x7e0 [ 125.238511][ T7833] [ 125.240832][ T7833] Memory state around the buggy address: [ 125.246466][ T7833] ffff88805ddcc480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 125.254554][ T7833] ffff88805ddcc500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 125.262618][ T7833] >ffff88805ddcc580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 125.270716][ T7833] ^ [ 125.275832][ T7833] ffff88805ddcc600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 125.283896][ T7833] ffff88805ddcc680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 125.291960][ T7833] ================================================================== [ 125.303989][ T7833] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 125.311239][ T7833] CPU: 1 UID: 0 PID: 7833 Comm: syz.3.495 Not tainted 6.13.0-syzkaller-04057-g15a901361ec3 #0 [ 125.321501][ T7833] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 125.331568][ T7833] Call Trace: [ 125.335370][ T7833] [ 125.338305][ T7833] dump_stack_lvl+0x241/0x360 [ 125.342999][ T7833] ? __pfx_dump_stack_lvl+0x10/0x10 [ 125.348212][ T7833] ? __pfx__printk+0x10/0x10 [ 125.352809][ T7833] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 125.358805][ T7833] ? vscnprintf+0x5d/0x90 [ 125.363147][ T7833] panic+0x349/0x880 [ 125.367054][ T7833] ? check_panic_on_warn+0x21/0xb0 [ 125.372177][ T7833] ? __pfx_panic+0x10/0x10 [ 125.376605][ T7833] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 125.382593][ T7833] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 125.388935][ T7833] check_panic_on_warn+0x86/0xb0 [ 125.393884][ T7833] ? sco_conn_put+0xad/0x210 [ 125.398482][ T7833] end_report+0x77/0x160 [ 125.402734][ T7833] kasan_report+0x154/0x180 [ 125.407252][ T7833] ? sco_conn_put+0xad/0x210 [ 125.411869][ T7833] sco_conn_put+0xad/0x210 [ 125.416290][ T7833] ? __pfx_sco_disconn_cfm+0x10/0x10 [ 125.421587][ T7833] hci_conn_hash_flush+0x1be/0x350 [ 125.426708][ T7833] ? __pfx_hci_conn_hash_flush+0x10/0x10 [ 125.432347][ T7833] ? drain_workqueue+0x2d3/0x3a0 [ 125.437295][ T7833] ? hci_discovery_set_state+0x57/0x180 [ 125.442853][ T7833] hci_dev_close_sync+0xa42/0x11c0 [ 125.447975][ T7833] hci_unregister_dev+0x20b/0x510 [ 125.453010][ T7833] vhci_release+0x80/0xd0 [ 125.457359][ T7833] ? __pfx_vhci_release+0x10/0x10 [ 125.462404][ T7833] __fput+0x23c/0xa50 [ 125.466421][ T7833] task_work_run+0x24f/0x310 [ 125.471041][ T7833] ? __pfx_task_work_run+0x10/0x10 [ 125.476181][ T7833] ? do_exit+0xa25/0x28e0 [ 125.480546][ T7833] ? do_exit+0xa25/0x28e0 [ 125.484907][ T7833] do_exit+0xa2a/0x28e0 [ 125.489084][ T7833] ? __pfx_do_exit+0x10/0x10 [ 125.493689][ T7833] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 125.499097][ T7833] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 125.505099][ T7833] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 125.511438][ T7833] ? _raw_spin_lock_irq+0xdf/0x120 [ 125.516564][ T7833] do_group_exit+0x207/0x2c0 [ 125.521163][ T7833] ? _raw_spin_unlock_irq+0x23/0x50 [ 125.526377][ T7833] ? lockdep_hardirqs_on+0x99/0x150 [ 125.531590][ T7833] get_signal+0x16b2/0x1750 [ 125.536115][ T7833] ? __pfx_get_signal+0x10/0x10 [ 125.540998][ T7833] arch_do_signal_or_restart+0x96/0x860 [ 125.546638][ T7833] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 125.552795][ T7833] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 125.558792][ T7833] ? syscall_exit_to_user_mode+0xa3/0x340 [ 125.564562][ T7833] syscall_exit_to_user_mode+0xce/0x340 [ 125.570132][ T7833] do_syscall_64+0x100/0x230 [ 125.574737][ T7833] ? clear_bhb_loop+0x35/0x90 [ 125.579421][ T7833] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 125.585318][ T7833] RIP: 0033:0x7ff4ca18cd29 [ 125.589735][ T7833] Code: Unable to access opcode bytes at 0x7ff4ca18ccff. [ 125.596756][ T7833] RSP: 002b:00007ff4cafd5038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 125.605264][ T7833] RAX: 0000000000000024 RBX: 00007ff4ca3a6080 RCX: 00007ff4ca18cd29 [ 125.613255][ T7833] RDX: 0000000004000000 RSI: 0000000020000200 RDI: 0000000000000009 [ 125.621231][ T7833] RBP: 00007ff4ca20e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 125.629211][ T7833] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 125.637187][ T7833] R13: 0000000000000000 R14: 00007ff4ca3a6080 R15: 00007ffc4b2e2b08 [ 125.645524][ T7833] [ 125.648802][ T7833] Kernel Offset: disabled [ 125.653131][ T7833] Rebooting in 86400 seconds..