last executing test programs: 1.956490816s ago: executing program 3 (id=6): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) r3 = socket$inet6(0xa, 0x3, 0x2f) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) setsockopt$inet6_IPV6_XFRM_POLICY(r3, 0x29, 0x23, &(0x7f00000001c0)={{{@in, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x8, 0xffff, 0x0, 0xa, 0x50, 0x0, 0x3c}, {}, {0x0, 0x1000}, 0x0, 0x0, 0x1}, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x6c}, 0x0, @in=@remote, 0x0, 0x0, 0x2}}, 0xe8) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @loopback}, 0x1c) sendmsg$IPSET_CMD_CREATE(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000340)={0x60, 0x2, 0x6, 0x5, 0x0, 0x0, {0x0, 0x0, 0x8}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x11}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x5}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0xa}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,port\x00'}]}, 0x60}, 0x1, 0x0, 0x0, 0x10}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x94d63e651e152324, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="180000000000000000000000090000009500000000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x94) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bdaa, 0xffffffff, {0x0, 0x0, 0x0, r5, {}, {0xffff, 0xffff}, {0x0, 0xa}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x4, 0xc00}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)=@newtfilter={0x64, 0x2c, 0xd27, 0x70bd2b, 0x0, {0x0, 0x0, 0x0, r5, {0xc, 0xffe0}, {}, {0xf, 0xa}}, [@filter_kind_options=@f_flow={{0x9}, {0x34, 0x2, [@TCA_FLOW_EMATCHES={0x30, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xfffb}}, @TCA_EMATCH_TREE_LIST={0x24, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0xffffffffffffffce, 0x1, 0x0, 0x0, {{0x7, 0x7, 0x2}, {{0x0, 0x1, 0x0, 0x1}, {0x0, 0x1, 0x1, 0x1}}}}, @TCF_EM_CONTAINER={0xc, 0x2, 0x0, 0x0, {{0x5, 0x0, 0x200}}}]}]}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x40010}, 0x20040054) 1.691792675s ago: executing program 0 (id=1): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xa, 0xc, 0x4, 0x2, 0x0, 0x1}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x1e, 0xc, &(0x7f00000000c0)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r1 = socket(0x28, 0x3, 0xe8d) setsockopt$inet6_int(r1, 0x29, 0x4d, &(0x7f0000000040)=0x7, 0x4) recvmmsg(r1, &(0x7f00000049c0)=[{{0x0, 0x0, 0x0}, 0x2}], 0x1, 0x40010022, 0x0) syz_emit_ethernet(0x42, &(0x7f0000000100)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaa3986dd6c370c89000c2c0120010000000000000000000000000001fe8000000000000000000000000000aaff"], 0x0) 1.5775651s ago: executing program 3 (id=7): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000240)={0x0, @remote, @multicast2}, &(0x7f00000002c0)=0xc) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x8, r2, 0x39, r1}, 0x10) r3 = socket$inet6_sctp(0xa, 0x5, 0x84) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)=@newlink={0x28, 0x10, 0x403, 0x0, 0x0, {0x0, 0x0, 0x74}, [@IFLA_LINK_NETNSID={0x8, 0x25, 0x2}]}, 0x28}, 0x1, 0x0, 0x0, 0x40040c1}, 0x0) shutdown(r3, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r3, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x10, &(0x7f00000001c0)=[@in={0x2, 0x4e23, @rand_addr=0x64010100}]}, &(0x7f0000000140)=0x10) getsockopt$inet_sctp6_SCTP_PRIMARY_ADDR(r3, 0x84, 0x7a, &(0x7f0000000340)={r5, @in6={{0xa, 0x3, 0x4, @mcast1}}}, &(0x7f0000000040)=0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r1, 0x84, 0x76, &(0x7f00000000c0)={r6, 0x1}, 0x8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@dstopts={{0x18, 0x29, 0x37, {0x88}}}], 0x18}}], 0x1, 0x20000000) write$cgroup_subtree(r7, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r7, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={0x0, 0x0, 0x10}, 0x18) 1.558098962s ago: executing program 0 (id=8): r0 = socket(0x840000000002, 0x3, 0xf8) connect$inet(r0, &(0x7f0000000140)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x44}}, 0x10) sendmmsg$inet(r0, &(0x7f0000003140)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001fc0)=[@ip_retopts={{0x10}}, @ip_retopts={{0x14, 0x0, 0x7, {[@timestamp={0x44, 0x4, 0x16, 0x0, 0x5}]}}}], 0x28}}], 0x1, 0x48010) r1 = socket$inet(0x2b, 0x801, 0x0) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) connect$vsock_stream(r0, &(0x7f00000005c0)={0x28, 0x0, 0x2711, @hyper}, 0x10) getsockopt$netrom_NETROM_T4(r3, 0x103, 0x6, 0x0, &(0x7f0000000080)) bpf$TOKEN_CREATE(0x24, &(0x7f0000000200)={0x0, r1}, 0x8) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f00000002c0), r2) r5 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nfc(&(0x7f0000000100), r6) ioctl$IOCTL_GET_NCIDEV_IDX(r5, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000740)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r7, @ANYBLOB="010026bd70003c0200000200000008000100", @ANYRES32=r8], 0x1c}, 0x1, 0x0, 0x0, 0x801}, 0x0) sendmsg$NL802154_CMD_NEW_SEC_LEVEL(r6, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000100)=ANY=[@ANYBLOB="98000000", @ANYRES16=r4, @ANYBLOB="000802000000fcdbdf25200000000c000600040000000000000014002d8085fe01000200000005000100ff00003a8dded4900a000c00"/66], 0x48}, 0x1, 0x0, 0x0, 0x4085}, 0x4000) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000101000009206190000000000000000000a44000000090a0000000000fa82a3fa211411fa00080031000000000900010807821c42d0262a520b7220acceb6cb7c4cbbe5617bbb972d679776661eb6ba8891e8fa77e1c470f8be726d8e53f05b6018a6fcf33fd11f320ef071cf72b7019b48c78a4aad7b350bbe690c6c8956207a9ff91b4d69bfa825d679d9fdc361ee6df516136a88925fb70fecbdc38388719bfa75acdd3bdf3cb5c48f172606d8fca43bdfebcb2d8ce3c13410d664be777e9678e160ace2b4"], 0x6c}}, 0x0) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0xec}, 0x1, 0x0, 0x0, 0x400c072}, 0x0) connect$inet(r1, &(0x7f0000000080)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r10 = socket$inet6_sctp(0xa, 0x5, 0x84) r11 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r11, 0x6, 0x13, &(0x7f0000000040)=0x1, 0x4) connect$inet(r11, &(0x7f0000001980)={0x2, 0x1, @loopback}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r11, 0x6, 0x14, &(0x7f0000000080)=0x2, 0x4) sendmmsg$inet(r11, &(0x7f0000000780)=[{{&(0x7f00000000c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, 0x0}}, {{&(0x7f00000004c0)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10, 0x0}}], 0x2, 0x8c37c2b979564e6e) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x82, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f0000000280)={'ip_vti0\x00'}) setsockopt$inet_tcp_int(r1, 0x6, 0x2c, &(0x7f00000001c0)=0x6, 0x4) 1.379812902s ago: executing program 3 (id=9): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000300)=ANY=[@ANYBLOB='D\x00\x00', @ANYBLOB="010000000000000000000700000008000300", @ANYRES32=r1, @ANYBLOB="1400040076e674090000006f5f7465616d00000008000500060000000c001700040004"], 0x44}, 0x1, 0x0, 0x0, 0x40}, 0x2400c8c0) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) sendto$packet(0xffffffffffffffff, &(0x7f00000000c0)="3f031c000302140006001e0089e9aaa9", 0x10, 0x0, &(0x7f0000000540)={0xc9, 0x0, 0x0, 0x1, 0x0, 0x6, @multicast}, 0x14) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$alg(0x26, 0x5, 0x0) setsockopt$inet6_udp_int(0xffffffffffffffff, 0x11, 0x67, &(0x7f0000000300)=0x5, 0x4) bind$alg(r3, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-camellia-asm\x00'}, 0x58) setsockopt$ALG_SET_KEY(r3, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r4 = accept4(r3, 0x0, 0x0, 0x800) sendmmsg$alg(r4, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r4, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000013c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000001380)={0x0, 0x0, &(0x7f0000001340)={&(0x7f0000000680)=ANY=[@ANYBLOB="f4060000", @ANYRES16=r5, @ANYBLOB="01000000000000e14f003b00000008000300", @ANYRES32=r6, @ANYBLOB="d506330080000000ffffffffffff080211000001"], 0x6f4}}, 0x0) 595.806898ms ago: executing program 0 (id=10): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, &(0x7f0000000280)}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000008c0)="3bcbdb0fcfa026557d2ea2b0fa34b7b3ddf4e60fe678186210e935989ea66d7c81fcd371943f18f118107da91cf43c5479ca82428e90b96b3635a98e39939ef5109511d949224164c044f1", 0x4b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="13a8892019f1989dcb3695d96b609322d26e29fc35fee071c96d80bd46d6966cbe6b7a2cae610580a28150f9f09c86ff97e05d454faac2546a34871e68f5cbd68fd4b71e2aac0dc7620672a5d97f2b82603a6f9c25d5b78524ab47fb3c477a39625e82d11bae649b50912c5c3749d587d40f3b177c88c8e1a95a9580e76e4915e7a4d9d1bac139a4c4b3ea19d86435997790", 0x92}, {&(0x7f0000000bc0)='T[X!', 0x4}], 0x2}}, {{0x0, 0x0, &(0x7f0000004080)=[{0x0}, {&(0x7f0000000f00)="52348bf9812fc081678b5760a4c4967393fd8939aaf12a894c5424df616c4eea14fbac2dad114a75c405d89fafa5715b56abba4bbceca456d8225e3f6eb57a03287e74c7bd74e40e3fda3150f92d181e7c82cb2f8ea0416fc4c0f111161cdb9a52911925644e25f871d02f403c83214f830f93b30b874e75cab53f1ed7871f21c0d654a47fab0637868517d7e8d9915e99b4dc2dcafdcb2ef2a012ec95418a544c32181fb969e01318e00a12fd1b2a0eb57bcf7de086e320f2d4be4e1453010be849e4d7dba41558329699aacd3d1c7d97b9bf74caf8b7946647309d209558b1965ef7ea4576ec0e289b73c2089310271d0a67d88a312f4cb0194c4f28ec3c2fe269311d0cec1fe0efef17d376d183b08e392b6cb58e930e1f959dd4528ec95350fc86e5297e6d59af036b132df17833881238ba8692842a8da4d5b4a37c94915331143d9128a197495433c2f550b4455a9ae03b937305e192e861ca3a60f9b3a14288e3daeb6936593485388a4aaab39b3843ee2960d9c8728eafb904333e7b78a270480e8dd89bc4cf0b791013cff43bf314e11a44d5f9c4fdad8a2fcdb04f76de29a50a0428148f4bc3eff1e84d25ea95dabddfba6162860a3c3389ee366450b6bcf1409f920caf1be5702af0402e2cef4896d9544a26ebfab694d7a47eca55bd2f62e7d7eb1f6061f7e441df5ab31344f02179764822036ef706133ea1a6380e042f074b2b0ddcc578cb8a668a846b9d5792f8d434f8ec7b562594587c49e8e6b3450e545fc070644bd06a36106cdb63f9e8ad7ae50b5b44e47f377961f5e29392330fb40d63c911ffd13e094f0452cc5c77b0731b56211b2d8a7554f6077ae593626a54f56d6dea49058fd1d48db02a7b33d50474b58a7e14e6a4d935bfaf4865f00074d59ece4b2d5f5e768e952733ee2c34b3e4b0be230f792f8b16f872afbbd155fe5314d4f54ea7b747eb2cd2410db7464c73ecd4815cda0bcc839fb603bb3f0c04b2d233b54a78b7aa3db974e469c8788e155cc2ef39bcf8491101058093c842df8cd0ac03d29e6d6902187f31eaf960b306debf734d8d26cc34a7e62c64a98b5a8a61020d81f5213d4d5722088be5b5ea6b1ee19b148d1f8b7172cd507533360d2d668e85252463b1d61302a75a7e3dc5e8c607a1026c66c2e8a6cbd34e3e5e99890da6cf07ed1247a07f004a6b1d643e00be7c156127bd7b39326e84ea6963d0530a4538eea35cf8048440a65148f1fe6314020bbe9c9358242589360fa5b1425d24b9f59141d81c0dbdd2e802eb82849e6342a4ffd0dcf307e2c73c707f54d54a2d04f2e504cae3d1719253ea4f455ae0e5fd35c08808b1fb8c6f5a25e7a3b082cd2159b9e624b67f1ed7faf2e5a0e6cd2560e26e4eabf626b65ce42c7855512ad92bcd6849d0c73e4cf41962ae0d17d850cd598e016b1db978f7a8d7f5fd88c7952982633e7673f11f3dc1ea4363ecbd106b3f410be357a29d0ddff9cb8448f71b39c60c3e7d5fba9e6115e64e88813418614419fcc8e27c2bd13109425528e44927ff85444cc076fbebbbf5c8b5a7bb8c7c9dd61a2bb4eed88d057a7268904cdd84f5e1eb8e4800a4d0c516e33e97c83f859c5e83fcd841ec6af3eb609c50bfd4794edb29d3a4c50088821ebd1f964eb9689e75c8ba3912ef50641b12a090e8687542763ed92bf85aae23b320f36f2b6b48327d5a58c0ea4b5725b655a33ac84dcf473a4f5adc3eabb7eb8efaeb18660d4b35405dc05a752f663ceaf25975849c708d41cdc53a8b4de94a10612b3901e8fd3a4797d5e6bfb1fcafebb7ad602cac461b014549574a8b", 0x510}], 0x2}}], 0x3, 0x4) 546.350722ms ago: executing program 3 (id=11): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB="18000000000000000000000000000008850000007600000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x80) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x8c, 0x30, 0xffffffffffffffff, 0x0, 0x0, {}, [{0x78, 0x1, [@m_bpf={0x74, 0x1, 0x0, 0x0, {{0x8}, {0x4c, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r1}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x5}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_NAME={0xc, 0x6, './file0\x00'}, @TCA_ACT_BPF_OPS_LEN={0x6, 0x3, 0x9}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x8c}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x4, 0x4, &(0x7f0000000240)=ANY=[@ANYBLOB], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) sendmsg$nl_route_sched(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)=@newtaction={0x64, 0x30, 0xffffffffffffffff, 0x0, 0x40002, {}, [{0x50, 0x1, [@m_bpf={0x4c, 0x1, 0x0, 0x0, {{0x8}, {0x24, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_PARMS={0x18, 0x2, {0x1}}, @TCA_ACT_BPF_FD={0x8, 0x5, r3}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x64}}, 0x0) 451.829446ms ago: executing program 0 (id=12): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x0, 0x0}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000008c0)="3bcbdb0fcfa026557d2ea2b0fa34b7b3ddf4e60fe678186210e935989ea66d7c81fcd371943f18f118107da91cf43c5479ca82428e90b96b3635a98e39939ef5109511d949224164c044f1", 0x4b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="13a8892019f1989dcb3695d96b609322d26e29fc35fee071c96d80bd46d6966cbe6b7a2cae610580a28150f9f09c86ff97e05d454faac2546a34871e68f5cbd68fd4b71e2aac0dc7620672a5d97f2b82603a6f9c25d5b78524ab47fb3c477a39625e82d11bae649b50912c5c3749d587d40f3b177c88c8e1a95a9580e76e4915e7a4d9d1bac139a4c4b3ea19d86435997790", 0x92}, {&(0x7f0000000bc0)='T[X!', 0x4}], 0x2}}, {{0x0, 0x0, &(0x7f0000004080)=[{0x0}, {&(0x7f0000000f00)="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", 0x510}], 0x2}}], 0x3, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 335.350306ms ago: executing program 3 (id=13): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x18, 0x5, &(0x7f0000000040)=ANY=[@ANYBLOB="180100002100000000000000000000008500000075000000a50000002300000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00}, 0x94) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_pktinfo(r1, 0x0, 0x8, &(0x7f0000000240)={0x0, @remote, @multicast2}, &(0x7f00000002c0)=0xc) bind$xdp(r1, &(0x7f0000000300)={0x2c, 0x8, r2, 0x39, r1}, 0x10) socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000001c0)='mmap_lock_acquire_returned\x00', r0}, 0x10) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000000840)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f00000001c0)=[@dstopts={{0x18, 0x29, 0x37, {0x88}}}], 0x18}}], 0x1, 0x20000000) write$cgroup_subtree(r3, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) bpf$OBJ_GET_PROG(0x7, &(0x7f00000000c0)=@generic={0x0, 0x0, 0x10}, 0x18) 196.45218ms ago: executing program 0 (id=14): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000004b80)=[{{0x0, 0x0, &(0x7f0000000a00)=[{&(0x7f00000008c0)="3bcbdb0fcfa026557d2ea2b0fa34b7b3ddf4e60fe678186210e935989ea66d7c81fcd371943f18f118107da91cf43c5479ca82428e90b96b3635a98e39939ef5109511d949224164c044f1", 0x4b}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000ac0)="13a8892019f1989dcb3695d96b609322d26e29fc35fee071c96d80bd46d6966cbe6b7a2cae610580a28150f9f09c86ff97e05d454faac2546a34871e68f5cbd68fd4b71e2aac0dc7620672a5d97f2b82603a6f9c25d5b78524ab47fb3c477a39625e82d11bae649b50912c5c3749d587d40f3b177c88c8e1a95a9580e76e4915e7a4d9d1bac139a4c4b3ea19d86435997790", 0x92}, {&(0x7f0000000bc0)='T[X!', 0x4}], 0x2}}, {{0x0, 0x0, &(0x7f0000004080)=[{0x0}, {&(0x7f0000000f00)="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", 0x798}], 0x2}}], 0x3, 0x4) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f0000000580)="17", 0x59a, 0x10008095, 0x0, 0x0) 80.308604ms ago: executing program 3 (id=15): r0 = socket$kcm(0x2, 0x1, 0x84) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYRES32=r0], 0x7c}, 0x1, 0x0, 0x0, 0x20040000}, 0x200400c4) r1 = socket$kcm(0x10, 0x2, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000f80)={'wlan1\x00', &(0x7f0000000f40)=@ethtool_stats}) r3 = socket$netlink(0x10, 0x3, 0xc) bind$netlink(r3, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b400000000000000614fd90000000000c6000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x5, 0x22, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb}, 0x48) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000980)=[{&(0x7f0000000380)="148200000011008172508ca8efdfe4786b8388040f80ec59acbc0413a1f8480b06000000000000000000000e002700100000000280000012", 0x38}], 0x1}, 0x1) setsockopt$sock_attach_bpf(r0, 0x84, 0x24, &(0x7f0000000000), 0x4) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x17, 0x4, &(0x7f0000000300)=ANY=[@ANYBLOB="18000000002a1b240f00000000000000000080006195bf400b1944167f773643685cab875dcfb8f23e289affc2b06157a3c2b4ec73c001085e89cc4cd542b37fa4e91d4ca739040ca5b4410999f95ce10f80107c92545838cef398c6daa0b9"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x2a, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x62, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="020000000400000006000000050000000010"], 0x48) r4 = socket$kcm(0xa, 0x922000000003, 0x11) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000d40)=ANY=[@ANYRES32=r2, @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001000000850000000700000095"], 0xfffffffffffffffc, 0x0, 0x0, 0x0, 0x0, 0x38, '\x00', 0x0, @fallback=0xb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000600)={&(0x7f0000000180)='sys_enter\x00', r6, 0x0, 0x4000}, 0x18) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4) r7 = socket(0x2, 0x80805, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0xc, &(0x7f0000000440)=ANY=[], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa100000000000007010000f8ffffffb702000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000600000000000000000000008500000007"], 0x0, 0x0, 0x0, 0x0, 0x0, 0xe5, '\x00', 0x0, @fallback=0x2c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000640)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000180)={r8, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x3800, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r9 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r9, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000080)=0x2) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r7, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x201, 0xca25, 0x5, r10}, 0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r7, 0x84, 0x9, &(0x7f0000000240)={r10, @in={{0x2, 0x4e22, @local}}, 0x2, 0x7, 0x8, 0x2, 0x22, 0x6, 0x9e}, 0x9c) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x8001}, 0x8) 0s ago: executing program 2 (id=3): r0 = socket$inet_udp(0x2, 0x2, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_ATTACH(0x8, &(0x7f00000006c0)={@map, 0xffffffffffffffff, 0x14, 0x1}, 0x20) bind$inet(r0, &(0x7f0000000100)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x17}}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40a01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r3 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000040)='cgroup.controllers\x00', 0x0, 0x0) setsockopt$packet_int(r3, 0x107, 0x13, &(0x7f0000000080)=0x1239, 0x4) write$tun(r3, &(0x7f00000000c0)=ANY=[@ANYBLOB="001c86dd0700100000004000000560ec97000fc83c00fe8000000000000000000000000000aaff02000000000000000000000000000106"], 0xffe) setsockopt$sock_int(r0, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r0, &(0x7f0000000280)={0x2, 0x0, @broadcast}, 0x10) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=ANY=[@ANYBLOB="fc00000019000100000000000000000000000000000000000000000000000000fe8000000000000000000000000000bb00000000000000000200000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000007000000000000000000000000000000000000000000000000000000000000000200000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000000000000000000001000000000000004400050020010000000000000000000000000000000000022b0000000a000000fc0118000000000000000000000000000000000004"], 0xfc}, 0x1, 0x0, 0x0, 0x20008000}, 0x0) r5 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r5, &(0x7f0000000100)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r5, 0x1, 0x6, &(0x7f0000000000)=0x4, 0x4) connect$inet(r5, &(0x7f0000000280)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(r5, &(0x7f0000004d00)=[{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x30000}}], 0x300, 0xf1c) sendmmsg$inet(r0, &(0x7f0000004d00), 0x7fffffffffffd33, 0x20000890) socket$nl_netfilter(0x10, 0x3, 0xc) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.194' (ED25519) to the list of known hosts. [ 72.087523][ T5835] cgroup: Unknown subsys name 'net' [ 72.278343][ T5835] cgroup: Unknown subsys name 'cpuset' [ 72.287083][ T5835] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.690325][ T5835] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 76.048811][ T5848] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 76.073532][ T5848] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 76.081303][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 76.089518][ T5848] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 76.097300][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 76.125062][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 76.139358][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 76.147071][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 76.155587][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 76.164144][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 76.183916][ T51] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 76.191762][ T51] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 76.199855][ T51] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 76.208418][ T51] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 76.218509][ T5855] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 76.227698][ T5855] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 76.235000][ T5855] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 76.242663][ T5855] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 76.253788][ T5855] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 76.261832][ T5855] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 76.355089][ T5848] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 76.366440][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 76.383200][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 76.394120][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 76.413490][ T5848] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 76.762772][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 77.005887][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 77.074679][ T5852] chnl_net:caif_netlink_parms(): no params data found [ 77.130497][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.139938][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.148067][ T5845] bridge_slave_0: entered allmulticast mode [ 77.156278][ T5845] bridge_slave_0: entered promiscuous mode [ 77.170430][ T5853] chnl_net:caif_netlink_parms(): no params data found [ 77.196382][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.204024][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.211168][ T5845] bridge_slave_1: entered allmulticast mode [ 77.219976][ T5845] bridge_slave_1: entered promiscuous mode [ 77.327016][ T5861] chnl_net:caif_netlink_parms(): no params data found [ 77.339567][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.347209][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.354560][ T5849] bridge_slave_0: entered allmulticast mode [ 77.361507][ T5849] bridge_slave_0: entered promiscuous mode [ 77.371621][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.407639][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.415047][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.422274][ T5849] bridge_slave_1: entered allmulticast mode [ 77.429519][ T5849] bridge_slave_1: entered promiscuous mode [ 77.438682][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.536586][ T5845] team0: Port device team_slave_0 added [ 77.574503][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.587398][ T5845] team0: Port device team_slave_1 added [ 77.593623][ T5852] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.600844][ T5852] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.608478][ T5852] bridge_slave_0: entered allmulticast mode [ 77.616225][ T5852] bridge_slave_0: entered promiscuous mode [ 77.624261][ T5852] bridge0: port 2(bridge_slave_1) entered blocking state [ 77.631373][ T5852] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.638665][ T5852] bridge_slave_1: entered allmulticast mode [ 77.648080][ T5852] bridge_slave_1: entered promiscuous mode [ 77.682354][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 77.779571][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.786770][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.813359][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.827286][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.835019][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.860972][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.876097][ T5852] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 77.885451][ T5853] bridge0: port 1(bridge_slave_0) entered blocking state [ 77.892623][ T5853] bridge0: port 1(bridge_slave_0) entered disabled state [ 77.900213][ T5853] bridge_slave_0: entered allmulticast mode [ 77.908029][ T5853] bridge_slave_0: entered promiscuous mode [ 77.921738][ T5849] team0: Port device team_slave_0 added [ 77.930808][ T5849] team0: Port device team_slave_1 added [ 77.962416][ T5852] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.001078][ T5853] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.009433][ T5853] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.016760][ T5853] bridge_slave_1: entered allmulticast mode [ 78.023863][ T5853] bridge_slave_1: entered promiscuous mode [ 78.082855][ T5852] team0: Port device team_slave_0 added [ 78.112502][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.120016][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.146110][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.154449][ T5848] Bluetooth: hci0: command tx timeout [ 78.158859][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.168988][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.194937][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.211680][ T5845] hsr_slave_0: entered promiscuous mode [ 78.218944][ T5845] hsr_slave_1: entered promiscuous mode [ 78.227099][ T5852] team0: Port device team_slave_1 added [ 78.233173][ T5848] Bluetooth: hci1: command tx timeout [ 78.270659][ T5853] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.281428][ T5861] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.288855][ T5861] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.296224][ T5861] bridge_slave_0: entered allmulticast mode [ 78.306092][ T5861] bridge_slave_0: entered promiscuous mode [ 78.313064][ T5848] Bluetooth: hci3: command tx timeout [ 78.313187][ T5855] Bluetooth: hci2: command tx timeout [ 78.319865][ T5861] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.331538][ T5861] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.338791][ T5861] bridge_slave_1: entered allmulticast mode [ 78.346442][ T5861] bridge_slave_1: entered promiscuous mode [ 78.388381][ T5853] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.465948][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.473559][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.473972][ T5855] Bluetooth: hci4: command tx timeout [ 78.499837][ T5852] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.531606][ T5853] team0: Port device team_slave_0 added [ 78.542258][ T5861] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 78.555638][ T5861] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 78.573104][ T5849] hsr_slave_0: entered promiscuous mode [ 78.579391][ T5849] hsr_slave_1: entered promiscuous mode [ 78.586899][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 78.594854][ T5849] Cannot create hsr debugfs directory [ 78.612732][ T5852] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.619886][ T5852] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.645848][ T5852] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.658550][ T5853] team0: Port device team_slave_1 added [ 78.749855][ T5861] team0: Port device team_slave_0 added [ 78.764773][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 78.771737][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.798071][ T5853] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 78.811177][ T5853] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 78.818306][ T5853] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 78.844282][ T5853] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 78.864629][ T5861] team0: Port device team_slave_1 added [ 79.000060][ T5852] hsr_slave_0: entered promiscuous mode [ 79.007562][ T5852] hsr_slave_1: entered promiscuous mode [ 79.014530][ T5852] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.022085][ T5852] Cannot create hsr debugfs directory [ 79.072497][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 79.079789][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.105860][ T5861] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 79.120410][ T5861] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 79.127419][ T5861] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.153481][ T5861] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 79.256395][ T5853] hsr_slave_0: entered promiscuous mode [ 79.265538][ T5853] hsr_slave_1: entered promiscuous mode [ 79.271597][ T5853] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.279480][ T5853] Cannot create hsr debugfs directory [ 79.422667][ T5861] hsr_slave_0: entered promiscuous mode [ 79.429092][ T5861] hsr_slave_1: entered promiscuous mode [ 79.435932][ T5861] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 79.443524][ T5861] Cannot create hsr debugfs directory [ 79.588041][ T5845] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 79.604041][ T5845] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 79.617606][ T5845] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 79.645739][ T5845] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 79.760660][ T5849] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 79.803438][ T5849] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 79.815350][ T5849] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 79.826317][ T5849] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 79.975839][ T5852] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 79.995397][ T5852] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 80.024958][ T5852] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 80.055062][ T5852] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 80.128531][ T5853] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 80.139587][ T5853] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 80.171033][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.178185][ T5853] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 80.189937][ T5853] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 80.233180][ T5855] Bluetooth: hci0: command tx timeout [ 80.288183][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.300406][ T5861] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 80.313418][ T5855] Bluetooth: hci1: command tx timeout [ 80.323103][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.331945][ T5861] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 80.344779][ T5861] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 80.360000][ T1006] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.367308][ T1006] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.385583][ T5861] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 80.398164][ T5855] Bluetooth: hci2: command tx timeout [ 80.398174][ T5848] Bluetooth: hci3: command tx timeout [ 80.421159][ T1137] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.428331][ T1137] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.474519][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.526314][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.533482][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.553888][ T5848] Bluetooth: hci4: command tx timeout [ 80.607104][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.614279][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.688800][ T5852] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.752762][ T5852] 8021q: adding VLAN 0 to HW filter on device team0 [ 80.825823][ T5849] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 80.852459][ T3571] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.860044][ T3571] bridge0: port 1(bridge_slave_0) entered forwarding state [ 80.876444][ T3571] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.883655][ T3571] bridge0: port 2(bridge_slave_1) entered forwarding state [ 80.922333][ T5861] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.977240][ T5853] 8021q: adding VLAN 0 to HW filter on device bond0 [ 80.992281][ T5861] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.036140][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.043323][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.080610][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.087834][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.110058][ T5853] 8021q: adding VLAN 0 to HW filter on device team0 [ 81.135952][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.199192][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.206416][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 81.298161][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.305331][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.329263][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.437910][ T5849] veth0_vlan: entered promiscuous mode [ 81.477324][ T5845] veth0_vlan: entered promiscuous mode [ 81.505441][ T5849] veth1_vlan: entered promiscuous mode [ 81.577547][ T5845] veth1_vlan: entered promiscuous mode [ 81.687292][ T5849] veth0_macvtap: entered promiscuous mode [ 81.707715][ T5852] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 81.721902][ T5849] veth1_macvtap: entered promiscuous mode [ 81.768525][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 81.792607][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 81.841223][ T3571] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.894624][ T3571] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.935978][ T36] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 81.998012][ T36] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.047370][ T5845] veth0_macvtap: entered promiscuous mode [ 82.079687][ T5861] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.149089][ T5845] veth1_macvtap: entered promiscuous mode [ 82.218331][ T5853] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 82.294202][ T1006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.302152][ T1006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.324402][ T5848] Bluetooth: hci0: command tx timeout [ 82.343741][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.393271][ T5848] Bluetooth: hci1: command tx timeout [ 82.400343][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.468235][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.475869][ T5848] Bluetooth: hci3: command tx timeout [ 82.479393][ T5855] Bluetooth: hci2: command tx timeout [ 82.484519][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.499025][ T5861] veth0_vlan: entered promiscuous mode [ 82.519381][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.523015][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.528414][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.539837][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.551444][ T5861] veth1_vlan: entered promiscuous mode [ 82.571830][ T5853] veth0_vlan: entered promiscuous mode [ 82.615659][ T5853] veth1_vlan: entered promiscuous mode [ 82.633556][ T5855] Bluetooth: hci4: command tx timeout [ 82.657416][ T5849] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 82.734656][ T5861] veth0_macvtap: entered promiscuous mode [ 82.743477][ T5852] veth0_vlan: entered promiscuous mode [ 82.803522][ T5861] veth1_macvtap: entered promiscuous mode [ 82.812161][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.813934][ T5852] veth1_vlan: entered promiscuous mode [ 82.839195][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 82.896746][ T5853] veth0_macvtap: entered promiscuous mode [ 82.955779][ T5853] veth1_macvtap: entered promiscuous mode [ 82.993670][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 82.999991][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.008337][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.012066][ T5852] veth0_macvtap: entered promiscuous mode [ 83.041995][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.059038][ T5861] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.098230][ T1006] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.107774][ T1006] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.161799][ T5853] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.180943][ T1006] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.194376][ T1006] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.213701][ T5852] veth1_macvtap: entered promiscuous mode [ 83.298782][ T1006] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.347176][ T1006] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.378560][ T1006] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.417008][ T1006] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.431481][ T5975] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8'. [ 83.457417][ T5975] netlink: 28 bytes leftover after parsing attributes in process `syz.0.8'. [ 83.492608][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 83.529888][ T5852] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 83.545701][ T1006] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.571125][ T1006] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.589594][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.608793][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.222150][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.258002][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.400604][ T5855] Bluetooth: hci0: command tx timeout [ 84.403949][ T1006] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.430791][ T1152] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.440151][ T1006] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.462791][ T1152] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.483100][ T5855] Bluetooth: hci1: command tx timeout [ 84.530085][ T1137] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.555436][ T5855] Bluetooth: hci3: command tx timeout [ 84.555566][ T5848] Bluetooth: hci2: command tx timeout [ 84.575324][ T1137] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.601631][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.618869][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 84.714348][ T5848] Bluetooth: hci4: command tx timeout [ 84.786870][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 84.801626][ T5992] ================================================================== [ 84.809725][ T5992] BUG: KASAN: slab-use-after-free in tcp_prune_ofo_queue+0x37e/0x6e0 [ 84.817820][ T5992] Read of size 4 at addr ffff8880775c6c20 by task syz.0.14/5992 [ 84.825454][ T5992] [ 84.827804][ T5992] CPU: 0 UID: 0 PID: 5992 Comm: syz.0.14 Not tainted 6.16.0-rc5-syzkaller-01444-g55e8757c6962 #0 PREEMPT(full) [ 84.827826][ T5992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 84.827843][ T5992] Call Trace: [ 84.827850][ T5992] [ 84.827858][ T5992] dump_stack_lvl+0x189/0x250 [ 84.827882][ T5992] ? rcu_is_watching+0x15/0xb0 [ 84.827901][ T5992] ? __kasan_check_byte+0x12/0x40 [ 84.827922][ T5992] ? __pfx_dump_stack_lvl+0x10/0x10 [ 84.827938][ T5992] ? rcu_is_watching+0x15/0xb0 [ 84.827956][ T5992] ? lock_release+0x4b/0x3e0 [ 84.827973][ T5992] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 84.827993][ T5992] ? __virt_addr_valid+0x1c8/0x5c0 [ 84.828073][ T5992] ? __virt_addr_valid+0x4a5/0x5c0 [ 84.828093][ T5992] print_report+0xd2/0x2b0 [ 84.828110][ T5992] ? tcp_prune_ofo_queue+0x37e/0x6e0 [ 84.828129][ T5992] kasan_report+0x118/0x150 [ 84.828151][ T5992] ? tcp_prune_ofo_queue+0x37e/0x6e0 [ 84.828174][ T5992] tcp_prune_ofo_queue+0x37e/0x6e0 [ 84.828201][ T5992] tcp_try_rmem_schedule+0xb6b/0x1830 [ 84.828227][ T5992] tcp_data_queue+0x2223/0x6380 [ 84.828253][ T5992] ? __pfx_tcp_data_queue+0x10/0x10 [ 84.828269][ T5992] ? __pfx_tcp_urg+0x10/0x10 [ 84.828283][ T5992] ? read_tsc+0x9/0x20 [ 84.828299][ T5992] tcp_rcv_established+0xf9e/0x1eb0 [ 84.828318][ T5992] ? rt_is_expired+0x1c/0x2d0 [ 84.828339][ T5992] ? __pfx_tcp_rcv_established+0x10/0x10 [ 84.828352][ T5992] ? rt_is_expired+0x1c/0x2d0 [ 84.828369][ T5992] ? rt_is_expired+0x1c/0x2d0 [ 84.828390][ T5992] ? rt_is_expired+0x250/0x2d0 [ 84.828408][ T5992] ? __pfx_ipv4_dst_check+0x10/0x10 [ 84.828426][ T5992] ? __pfx_ipv4_dst_check+0x10/0x10 [ 84.828446][ T5992] tcp_v4_do_rcv+0xa23/0xce0 [ 84.828467][ T5992] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 84.828486][ T5992] __release_sock+0x21c/0x350 [ 84.828504][ T5992] release_sock+0x5f/0x1f0 [ 84.828523][ T5992] tcp_sendmsg+0x39/0x50 [ 84.828537][ T5992] __sock_sendmsg+0x19c/0x270 [ 84.828553][ T5992] __sys_sendto+0x3bd/0x520 [ 84.828575][ T5992] ? __pfx___sys_sendto+0x10/0x10 [ 84.828593][ T5992] ? do_futex+0x395/0x420 [ 84.828625][ T5992] ? rcu_is_watching+0x15/0xb0 [ 84.828646][ T5992] __x64_sys_sendto+0xde/0x100 [ 84.828668][ T5992] do_syscall_64+0xfa/0x3b0 [ 84.828689][ T5992] ? lockdep_hardirqs_on+0x9c/0x150 [ 84.828710][ T5992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.828726][ T5992] ? clear_bhb_loop+0x60/0xb0 [ 84.828745][ T5992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.828762][ T5992] RIP: 0033:0x7f6ac9d8e929 [ 84.828787][ T5992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.828802][ T5992] RSP: 002b:00007f6acabc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 84.828821][ T5992] RAX: ffffffffffffffda RBX: 00007f6ac9fb5fa0 RCX: 00007f6ac9d8e929 [ 84.828835][ T5992] RDX: 000000000000059a RSI: 0000200000000580 RDI: 0000000000000003 [ 84.828847][ T5992] RBP: 00007f6ac9e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 84.828859][ T5992] R10: 0000000010008095 R11: 0000000000000246 R12: 0000000000000000 [ 84.828870][ T5992] R13: 0000000000000000 R14: 00007f6ac9fb5fa0 R15: 00007ffd278fa568 [ 84.828889][ T5992] [ 84.828896][ T5992] [ 85.143678][ T5992] Allocated by task 5992: [ 85.147995][ T5992] kasan_save_track+0x3e/0x80 [ 85.152662][ T5992] __kasan_slab_alloc+0x6c/0x80 [ 85.157500][ T5992] kmem_cache_alloc_node_noprof+0x1bb/0x3c0 [ 85.163382][ T5992] __alloc_skb+0x112/0x2d0 [ 85.167787][ T5992] tcp_collapse+0xd78/0x1d80 [ 85.172363][ T5992] tcp_try_rmem_schedule+0x6a4/0x1830 [ 85.177726][ T5992] tcp_data_queue+0x2223/0x6380 [ 85.182577][ T5992] tcp_rcv_established+0xf9e/0x1eb0 [ 85.187777][ T5992] tcp_v4_do_rcv+0xa23/0xce0 [ 85.192372][ T5992] __release_sock+0x21c/0x350 [ 85.197048][ T5992] release_sock+0x5f/0x1f0 [ 85.201452][ T5992] tcp_sendmsg+0x39/0x50 [ 85.205685][ T5992] __sock_sendmsg+0x19c/0x270 [ 85.210353][ T5992] __sys_sendto+0x3bd/0x520 [ 85.214852][ T5992] __x64_sys_sendto+0xde/0x100 [ 85.219617][ T5992] do_syscall_64+0xfa/0x3b0 [ 85.224139][ T5992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.230024][ T5992] [ 85.232334][ T5992] Freed by task 5992: [ 85.236293][ T5992] kasan_save_track+0x3e/0x80 [ 85.240957][ T5992] kasan_save_free_info+0x46/0x50 [ 85.246017][ T5992] __kasan_slab_free+0x62/0x70 [ 85.250767][ T5992] kmem_cache_free+0x18f/0x400 [ 85.255517][ T5992] tcp_prune_ofo_queue+0x198/0x6e0 [ 85.260614][ T5992] tcp_try_rmem_schedule+0xb6b/0x1830 [ 85.265971][ T5992] tcp_data_queue+0x2223/0x6380 [ 85.270804][ T5992] tcp_rcv_established+0xf9e/0x1eb0 [ 85.275987][ T5992] tcp_v4_do_rcv+0xa23/0xce0 [ 85.280565][ T5992] __release_sock+0x21c/0x350 [ 85.285223][ T5992] release_sock+0x5f/0x1f0 [ 85.289625][ T5992] tcp_sendmsg+0x39/0x50 [ 85.293847][ T5992] __sock_sendmsg+0x19c/0x270 [ 85.298508][ T5992] __sys_sendto+0x3bd/0x520 [ 85.302996][ T5992] __x64_sys_sendto+0xde/0x100 [ 85.307753][ T5992] do_syscall_64+0xfa/0x3b0 [ 85.312248][ T5992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.318120][ T5992] [ 85.320427][ T5992] The buggy address belongs to the object at ffff8880775c6b40 [ 85.320427][ T5992] which belongs to the cache skbuff_head_cache of size 240 [ 85.334982][ T5992] The buggy address is located 224 bytes inside of [ 85.334982][ T5992] freed 240-byte region [ffff8880775c6b40, ffff8880775c6c30) [ 85.348765][ T5992] [ 85.351074][ T5992] The buggy address belongs to the physical page: [ 85.357465][ T5992] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x775c6 [ 85.366238][ T5992] flags: 0xfff00000000000(node=0|zone=1|lastcpupid=0x7ff) [ 85.373336][ T5992] page_type: f5(slab) [ 85.377301][ T5992] raw: 00fff00000000000 ffff888141692a00 dead000000000122 0000000000000000 [ 85.385866][ T5992] raw: 0000000000000000 00000000000c000c 00000000f5000000 0000000000000000 [ 85.394427][ T5992] page dumped because: kasan: bad access detected [ 85.400828][ T5992] page_owner tracks the page as allocated [ 85.406524][ T5992] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 5852, tgid 5852 (syz-executor), ts 84785033961, free_ts 84782354936 [ 85.425792][ T5992] post_alloc_hook+0x240/0x2a0 [ 85.430549][ T5992] get_page_from_freelist+0x21e4/0x22c0 [ 85.436099][ T5992] __alloc_frozen_pages_noprof+0x181/0x370 [ 85.441892][ T5992] alloc_pages_mpol+0x232/0x4a0 [ 85.446727][ T5992] allocate_slab+0x8a/0x3b0 [ 85.451217][ T5992] ___slab_alloc+0xbfc/0x1480 [ 85.455883][ T5992] kmem_cache_alloc_node_noprof+0x280/0x3c0 [ 85.461764][ T5992] __alloc_skb+0x112/0x2d0 [ 85.466170][ T5992] rtmsg_ifinfo_build_skb+0x84/0x260 [ 85.471441][ T5992] rtmsg_ifinfo+0x8c/0x1a0 [ 85.475839][ T5992] __dev_notify_flags+0xf4/0x2e0 [ 85.480764][ T5992] netif_change_flags+0xe8/0x1a0 [ 85.485685][ T5992] dev_change_flags+0x130/0x260 [ 85.490522][ T5992] devinet_ioctl+0xbb4/0x1b50 [ 85.495183][ T5992] inet_ioctl+0x3c0/0x4c0 [ 85.499498][ T5992] sock_do_ioctl+0xdc/0x300 [ 85.503993][ T5992] page last free pid 5849 tgid 5849 stack trace: [ 85.510298][ T5992] __free_frozen_pages+0xc71/0xe70 [ 85.515400][ T5992] kasan_populate_vmalloc+0x118/0x1a0 [ 85.520754][ T5992] alloc_vmap_area+0xd51/0x1490 [ 85.525585][ T5992] __get_vm_area_node+0x1f8/0x300 [ 85.530591][ T5992] __vmalloc_node_range_noprof+0x301/0x12f0 [ 85.536466][ T5992] vzalloc_noprof+0xb2/0xf0 [ 85.540950][ T5992] alloc_counters+0xd3/0x6d0 [ 85.545526][ T5992] do_ipt_get_ctl+0xaac/0x1180 [ 85.550275][ T5992] nf_getsockopt+0x26b/0x290 [ 85.554849][ T5992] ip_getsockopt+0x1c4/0x220 [ 85.559427][ T5992] do_sock_getsockopt+0x360/0x650 [ 85.564444][ T5992] __x64_sys_getsockopt+0x1a5/0x250 [ 85.569628][ T5992] do_syscall_64+0xfa/0x3b0 [ 85.574115][ T5992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.580003][ T5992] [ 85.582306][ T5992] Memory state around the buggy address: [ 85.587912][ T5992] ffff8880775c6b00: fc fc fc fc fc fc fc fc fa fb fb fb fb fb fb fb [ 85.595952][ T5992] ffff8880775c6b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.603998][ T5992] >ffff8880775c6c00: fb fb fb fb fb fb fc fc fc fc fc fc fc fc fc fc [ 85.612055][ T5992] ^ [ 85.617145][ T5992] ffff8880775c6c80: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 85.625185][ T5992] ffff8880775c6d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fc fc [ 85.633228][ T5992] ================================================================== [ 85.679899][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.699949][ T5992] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 85.707178][ T5992] CPU: 0 UID: 0 PID: 5992 Comm: syz.0.14 Not tainted 6.16.0-rc5-syzkaller-01444-g55e8757c6962 #0 PREEMPT(full) [ 85.718997][ T5992] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 85.729078][ T5992] Call Trace: [ 85.732372][ T5992] [ 85.735307][ T5992] dump_stack_lvl+0x99/0x250 [ 85.739906][ T5992] ? __asan_memcpy+0x40/0x70 [ 85.744504][ T5992] ? __pfx_dump_stack_lvl+0x10/0x10 [ 85.749708][ T5992] ? __pfx__printk+0x10/0x10 [ 85.754318][ T5992] panic+0x2db/0x790 [ 85.758225][ T5992] ? __pfx_preempt_schedule+0x10/0x10 [ 85.763608][ T5992] ? __pfx_panic+0x10/0x10 [ 85.768045][ T5992] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 85.773948][ T5992] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 85.780288][ T5992] ? tcp_prune_ofo_queue+0x37e/0x6e0 [ 85.785581][ T5992] check_panic_on_warn+0x89/0xb0 [ 85.790533][ T5992] ? tcp_prune_ofo_queue+0x37e/0x6e0 [ 85.795820][ T5992] end_report+0x78/0x160 [ 85.800070][ T5992] kasan_report+0x129/0x150 [ 85.804582][ T5992] ? tcp_prune_ofo_queue+0x37e/0x6e0 [ 85.809879][ T5992] tcp_prune_ofo_queue+0x37e/0x6e0 [ 85.815006][ T5992] tcp_try_rmem_schedule+0xb6b/0x1830 [ 85.820396][ T5992] tcp_data_queue+0x2223/0x6380 [ 85.825265][ T5992] ? __pfx_tcp_data_queue+0x10/0x10 [ 85.830473][ T5992] ? __pfx_tcp_urg+0x10/0x10 [ 85.835073][ T5992] ? read_tsc+0x9/0x20 [ 85.839154][ T5992] tcp_rcv_established+0xf9e/0x1eb0 [ 85.844369][ T5992] ? rt_is_expired+0x1c/0x2d0 [ 85.849063][ T5992] ? __pfx_tcp_rcv_established+0x10/0x10 [ 85.854702][ T5992] ? rt_is_expired+0x1c/0x2d0 [ 85.859395][ T5992] ? rt_is_expired+0x1c/0x2d0 [ 85.864086][ T5992] ? rt_is_expired+0x250/0x2d0 [ 85.868860][ T5992] ? __pfx_ipv4_dst_check+0x10/0x10 [ 85.874066][ T5992] ? __pfx_ipv4_dst_check+0x10/0x10 [ 85.879279][ T5992] tcp_v4_do_rcv+0xa23/0xce0 [ 85.883882][ T5992] ? __pfx_tcp_v4_do_rcv+0x10/0x10 [ 85.889014][ T5992] __release_sock+0x21c/0x350 [ 85.893700][ T5992] release_sock+0x5f/0x1f0 [ 85.898130][ T5992] tcp_sendmsg+0x39/0x50 [ 85.902375][ T5992] __sock_sendmsg+0x19c/0x270 [ 85.907061][ T5992] __sys_sendto+0x3bd/0x520 [ 85.911578][ T5992] ? __pfx___sys_sendto+0x10/0x10 [ 85.916605][ T5992] ? do_futex+0x395/0x420 [ 85.920951][ T5992] ? rcu_is_watching+0x15/0xb0 [ 85.925729][ T5992] __x64_sys_sendto+0xde/0x100 [ 85.930511][ T5992] do_syscall_64+0xfa/0x3b0 [ 85.935011][ T5992] ? lockdep_hardirqs_on+0x9c/0x150 [ 85.940202][ T5992] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.946252][ T5992] ? clear_bhb_loop+0x60/0xb0 [ 85.950912][ T5992] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 85.956795][ T5992] RIP: 0033:0x7f6ac9d8e929 [ 85.961200][ T5992] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 85.980794][ T5992] RSP: 002b:00007f6acabc7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002c [ 85.989205][ T5992] RAX: ffffffffffffffda RBX: 00007f6ac9fb5fa0 RCX: 00007f6ac9d8e929 [ 85.997162][ T5992] RDX: 000000000000059a RSI: 0000200000000580 RDI: 0000000000000003 [ 86.005122][ T5992] RBP: 00007f6ac9e10b39 R08: 0000000000000000 R09: 0000000000000000 [ 86.013082][ T5992] R10: 0000000010008095 R11: 0000000000000246 R12: 0000000000000000 [ 86.021036][ T5992] R13: 0000000000000000 R14: 00007f6ac9fb5fa0 R15: 00007ffd278fa568 [ 86.028998][ T5992] [ 86.032235][ T5992] Kernel Offset: disabled [ 86.036540][ T5992] Rebooting in 86400 seconds..