last executing test programs: 37.717010502s ago: executing program 0 (id=162): sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWRULE={0x2c, 0x6, 0xa, 0x0, 0x0, 0x0, {}, [@NFTA_RULE_EXPRESSIONS={0x18, 0x4, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @tproxy={{0xb}, @val={0x4}}}]}]}], {0x14}}, 0x54}}, 0x0) sendmsg$MPTCP_PM_CMD_SUBFLOW_DESTROY(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0xfffffffffffffff6, &(0x7f0000000040)={&(0x7f00000003c0)={0x28, 0x0, 0x0, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_ADDR={0xc, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_IF_IDX={0x8}]}]}, 0x28}}, 0x0) r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000001ac0)=[{&(0x7f00000003c0)=ANY=[@ANYBLOB="140100001f000504000000000000000004"], 0x114}], 0x1}, 0x0) 37.555004245s ago: executing program 0 (id=168): r0 = socket$inet6(0xa, 0x802, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x0, 0x0, @void, @value}, 0x10) socket$l2tp(0x2, 0x2, 0x73) sendmsg$inet(r0, &(0x7f0000000300)={&(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10, 0x0, 0x0, &(0x7f0000000440)=[@ip_tos_u8={{0x11}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x1}}], 0x30}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=ANY=[@ANYBLOB="1808000000000000000000000000000018030000", @ANYRES32, @ANYBLOB="0000000000000000b702000014000000b7030000030000008500000053000000bf0900000000000055090100000000009500000000000000b702000000000000632af0ff0000000026090800000000007b9af0ff00000000bf8600000000000007080000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018280000", @ANYRES32=r4, @ANYBLOB="0000000000000000b70500000800000015000000760000e4be980000000000001e080000000000008500000007000000b70000000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) sendmsg$nl_route(r3, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@ipv6_newrule={0x80, 0x20, 0x1, 0x70bd2c, 0x0, {0xa, 0x80, 0x14, 0x0, 0x3, 0x0, 0x0, 0x7, 0x1}, [@FRA_SRC={0x14, 0x2, @private2}, @FRA_DST={0x14, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @FRA_SRC={0x14, 0x2, @private2}, @FIB_RULE_POLICY=@FRA_IIFNAME={0x14, 0x3, 'caif0\x00'}, @FRA_DST={0x14, 0x1, @mcast2}]}, 0x80}}, 0x40000) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000002c0)=ANY=[@ANYBLOB="5c0000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="00000000001e00003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc020000000000000000000000000080"], 0x5c}, 0x1, 0x0, 0x0, 0x80}, 0x0) 37.224257985s ago: executing program 0 (id=173): r0 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000040)=@pppol2tp={0x18, 0x1, {0x0, r0, {0x2, 0x0, @multicast2}, 0x2}}, 0x26) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f0000000100)=@name={0x1e, 0x2, 0x0, {{0x42, 0x2}}}, 0x10) r3 = socket$tipc(0x1e, 0x2, 0x0) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x0, 0x3}, 0x10) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)=@newlink={0x30, 0x10, 0x401, 0x20000, 0x0, {0x0, 0x0, 0x0, 0x0, 0x18207}, [@IFLA_LINKINFO={0x10, 0x12, 0x0, 0x1, @gre={{0x8}, {0x4}}}]}, 0x30}, 0x1, 0x0, 0x0, 0x20004885}, 0x4054) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000001c0)=@gettclass={0x24, 0x2a, 0x2, 0xfffffffe, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x3, 0xffe0}, {0x0, 0x7}, {0x14, 0xd}}}, 0x24}, 0x1, 0x0, 0x0, 0x44}, 0x40004) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="340000003e000900000000000008000003000000040004001c000180180010"], 0x34}}, 0x4000000) r5 = socket$tipc(0x1e, 0x2, 0x0) sendmsg$tipc(r5, &(0x7f0000000540)={&(0x7f0000000200)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10, 0x0}, 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) socket$inet_udp(0x2, 0x2, 0x0) r6 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r6, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r6, 0x107, 0x16, &(0x7f0000000100)={0x2, &(0x7f0000000080)=[{0x7}, {0x6}]}, 0x10) sendmsg$L2TP_CMD_TUNNEL_GET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="14000000", @ANYRES16=0x0, @ANYBLOB="25037690b78e43f657f708000000"], 0x14}}, 0x0) 37.067407083s ago: executing program 0 (id=174): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000013f82e"], 0x48) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 32) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', r3, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {0x4, 0x1, 0xb, 0x9, 0x8}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4c}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000280)=ANY=[], 0x1) (async) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000)=0x80000001, 0x4) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d0802070000008181ffa1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (rerun: 64) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) (rerun: 64) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={r8, 0x3}, 0x0) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r9, 0x84, 0x7d, &(0x7f0000000080)={r11}, 0x8) (async) r12 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r12, &(0x7f0000000200), 0x10) sendmsg$sock(r12, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) (async) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000080), &(0x7f00000000c0)='%-5lx \x00'}, 0x20) sendmsg$nl_xfrm(r13, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[], 0xec}}, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000280)={0x3}, 0x4) 23.942184192s ago: executing program 0 (id=174): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000013f82e"], 0x48) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 32) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', r3, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {0x4, 0x1, 0xb, 0x9, 0x8}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4c}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000280)=ANY=[], 0x1) (async) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000)=0x80000001, 0x4) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d0802070000008181ffa1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (rerun: 64) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) (rerun: 64) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={r8, 0x3}, 0x0) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r9, 0x84, 0x7d, &(0x7f0000000080)={r11}, 0x8) (async) r12 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r12, &(0x7f0000000200), 0x10) sendmsg$sock(r12, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) (async) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000080), &(0x7f00000000c0)='%-5lx \x00'}, 0x20) sendmsg$nl_xfrm(r13, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[], 0xec}}, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000280)={0x3}, 0x4) 12.337565526s ago: executing program 0 (id=174): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000016c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB="000013f82e"], 0x48) (async, rerun: 32) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) (rerun: 32) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) (async) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f00000003c0)={'batadv0\x00', 0x0}) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000400)={0x1b, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, '\x00', r3, 0x0, 0x0, 0x1, 0xfffffffd, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x8, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r4}, {}, {}, {}, {0x4, 0x1, 0xb, 0x9, 0x8}}, {{0x5, 0x0, 0x3}}, [@snprintf={{}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe00}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x4c}, {0x3, 0x0, 0x6, 0xa, 0xa, 0xfff0, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x2, 0x2, 0x0, r2}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}}, &(0x7f0000000040)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0xe, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0xfffffffffffffd51, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000040)='cpu.max\x00', 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000280)=ANY=[], 0x1) (async) setsockopt$bt_BT_DEFER_SETUP(r1, 0x112, 0x7, &(0x7f0000000000)=0x80000001, 0x4) (async, rerun: 64) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000140)="d80000001c0081044e81f782db44b904021d0802070000008181ffa1180002000000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (rerun: 64) r7 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r7, 0x84, 0x6f, &(0x7f0000000040)={0x0, 0x10, &(0x7f0000000000)=[@in={0x2, 0x0, @private=0xa010101}]}, &(0x7f0000000080)=0x10) (async, rerun: 64) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r7, 0x84, 0x1d, &(0x7f0000000140)={0x1, [0x0]}, &(0x7f0000000240)=0x8) (rerun: 64) getsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000000)={r8, 0x3}, 0x0) (async) r9 = socket$inet6_sctp(0xa, 0x5, 0x84) r10 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r10, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_CONTEXT(r9, 0x84, 0x7d, &(0x7f0000000080)={r11}, 0x8) (async) r12 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r12, &(0x7f0000000200), 0x10) sendmsg$sock(r12, &(0x7f0000001940)={&(0x7f00000002c0)=@sco={0x1f, @none}, 0x80, &(0x7f0000000000), 0x5, &(0x7f00000008c0)=[@timestamping={{0x14}}], 0x18}, 0x0) (async) r13 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000100)={{r0}, &(0x7f0000000080), &(0x7f00000000c0)='%-5lx \x00'}, 0x20) sendmsg$nl_xfrm(r13, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000003c0)=ANY=[], 0xec}}, 0x0) setsockopt$inet_sctp6_SCTP_ADAPTATION_LAYER(r1, 0x84, 0x7, &(0x7f0000000280)={0x3}, 0x4) 3.42869422s ago: executing program 2 (id=454): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) (async, rerun: 64) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6a2910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) (rerun: 64) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r1, &(0x7f0000003540)={0x0, 0x0, 0x0, 0x0, &(0x7f0000003500)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}, 0x34000041) syz_genetlink_get_family_id$tipc2(&(0x7f00000003c0), r1) (async, rerun: 32) sendmsg$nl_generic(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="200000864782df0025bd7000fbdbdf2500000100000000000000123945db66f2"], 0x20}, 0x1, 0x0, 0x0, 0x4004000}, 0x80) (rerun: 32) sendmmsg$alg(r1, &(0x7f0000003b40)=[{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000040)="3379c397f135bd2a03a742ee2cccb29e82133e11240e52e437823a7f71", 0x1d}, {&(0x7f0000000080)="754c83d6d7f4a1870985c9b87280efe9b58f77802cfc995501abaa2858c6cdd6d4f15a272f01020e042b209ec9b7af212f27e5251a6118b6ee03c24e47a7f49979cd99e27dcee5918f231bd2d4d2764fa98d6bd12f33a91815b6b3aa5cb7314b86f194b624677e9b43c3320775530a7694e61638aa409ad2a3ef3c12df4717dc9b75c2e791d55ff8757de83a03ad490d4384ea228f9eb2feeb482e75712ec00aab9ecac74c03b1a4e0eaa22bc58744e18b6bd99b2a8261f50999a2935d75a0e97f80af222bacf7937863ba7b219a7c66711f8a8e02f9c11712", 0xd9}, {&(0x7f0000000180)="42bec9a9029ecf4f3cbd7d34b28262898c90883e75f24de1f6ca5c1d63f82d38373af10aa5554db450fec575b02aa71bea1cd21da7d14e26392391fdfad0644e33658d89614b5719275ef2dcb86c01e4c557ca84c7ef0698d56596e29114809203fab0bf751838d871bbfb9400fcf554e3cc90f26a62344178d0c99d62daba1e5d693d2fd01b7837fd0ae55c04f763759871093b40b70819423352a8892c0dcc7598aa1c6c96512008757f74c8aa9dd3964e287fa4053c5c58467a9073e89c65410578e4eb0bbee26b26b39b62a924d34df393e3f5a72e05ebddd2f66fa8284183ec09599f106c1d2bb8d9fb47e3", 0xee}, {&(0x7f0000000280)="efcf2272b6cda3f305e0d7e4ef2753dd36811ab2ba13d91dbf2e7e331fdfee966544f21b93a094c95ed1f4a8d5ba4b4d1cef2ef1efe46d16be37b4ab270a677d12a0e33afb863ff37ebff4548741d4f6cb8e09d157212191373543e4708f92e6f057b7b173268e304d365c35c1511f003f74fdfe8b87f8cd93909989d302ac5eb59833d2b4", 0x85}, {&(0x7f0000000400)="c39f32163b7c679f17a5053fed380c351a58d3222b922c9e4c53f2be479ca434975fe608ae20bb3c6547de2d9bdf371a454256d3aacbd78325bada4452bb6c81212c6d788af9e47b8ae8a14d3de7b92b3dd70ab48eba7138b855217256dcee16143fc8511653818a7f3f1ad4895e526c6a7915baa2b09e948d629d40b548165ec68b7ceb83f6bc259dcc6b98359d5f7952fd5555cc292b002743c59e9cdca278d0be19c66295501c566ff090e55bed987a03b2df4b0080d391fd7a99cb8a0fef78b4414d4dbb68dd1efc2063e91db1ecea1237570e02636f7232ff285be6241a534e4863ae5ed1", 0xe7}], 0x5, 0x0, 0x0, 0x10}, {0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000680)="887eeaf04c6d7dc329b0f392b70b3ae650bf3e8920687a5bac384f5dbe56668371344dd78d14722fc61753a4867ac6922cd6b43e1561c303267318520993e51307ea0fce3433b49db127d36b543dced134e430f37d2a2c277cb62c6a6ddfdcb10b7d5203817e608af4da39e46eac18da75e7253dea8edaf8fc7143bfb48bebf294ba80d1dca3a186be120342c86e26373faace3391d5518bdd3b532788578d0a4e1c7070d491f5a5f3e3703ef2326a", 0xaf}, {&(0x7f0000000540)="2fd15c7f47c92b6b20c3eb", 0xb}, {&(0x7f0000000740)="b0396598bfeb46cb6a71735b088d846cdceb9c8b05e9b6c7c973fb242a2b4158ac406ed6318d11b6ccc2f6267e62e099f18ce4b93b3504e449d28168429df53796a2b6ee", 0x44}], 0x3, &(0x7f00000007c0)=[@iv={0xb8, 0x117, 0x2, 0xa3, "2bbd9ae298fa9fb66fd9d5b9843cfade5c1b9c1e894d8734f939105f5bf91aa08cd79e934c32117a06a5f9afa6a96509fbc3331961b6eae4882864a491113983a8d9a42893258804e89b552c00472d4ab0a66d019c836a67b7e41dda12efc6afcc67e6d47ef35611bc403c8db37ae3c8fd65779a4a652d68a56dd98fc27158e279f2df6fc8513973e71cb014bee6c815e6ad0d9ff24bf119ee20effe5672b74bb3dd20"}, @iv={0x30, 0x117, 0x2, 0x18, "f3f06aad588ebc327cfd97fff8636a23869a7e86ae4a965c"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x7}], 0x118, 0x2008000}, {0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000900)="7a2b52d41c477c52455e7f1be651de2417d9a474900663b42218c34faa6307ddb72a8196deadd4a26299e4fe93ba4ba786339c49e3ae07c5d08277be1ab62af71a503b63e4a9fcf03b2ba9d605fba749a898e357c14b460b52f89bda0103bf6511a2628b1dc9f9f7ad6daa22056b1151443908ebc7f03f942162402481d81ca372f53408d2f02af820dd68b1a8e8ec42a9f1d74d9735bf28160c8bbe4d58ef28a4e84955aebd7a92376c84e03d2d773be2a6bbce9d92e8e570358285c582cf3b49411b4f65b26f0d9b813beadb71", 0xce}, {&(0x7f0000000a00)="0c6b4b1c25d328e4b520bcfc1ede9545f4eb2bb919b10db6e206ab103ee00aabd868", 0x22}, {&(0x7f0000000a40)="92ce4cb271c2025e551d059deb93979817c347c2f48432de61bc9daebd2725a724b7a66de7d6a8f19ffb9588ad356936fa4725600af5badadc130d888700dea7d840c3", 0x43}, {&(0x7f0000000ac0)="e1d86a850c1ef2878fae1978392b8b044286921594a555241aab", 0x1a}, {&(0x7f0000000b00)="6056d5185da8e8b87fc97068781708027877fdba9af54b4acade97900113cc7916b047173c01b407322f1e77890ee3bfdffc23bd7b77d2134bcaed8d0eeb08543b79863af570203ce30136a990505fb5eeaa1f0b8069692e4ae2f8fb5822848efa9f9e41f3175bc30a0b5f60afcc6b8e4ad9ab19eb0bd323e497484faddfbabe42ef3c865edc8ee6072a455d0beb83f54c9cf53af074f051863079df34fc790b1c59a1f6756b49b018b1f8d7fa9b74473e92e08a5498c904214e00517e612ca9f5d094767ecf7babbd9dbb7e985f6f6a848d54a9c0e48f6542e13cf29cb3f7df24586e60de6077919337d1", 0xeb}, {&(0x7f0000000c00)="cbfdf93df0db445d3693fc1504df40f39aa44f37322655550d41e679716b96feb8cf6a7c3c26f681c0c15cf35a77cc2d3920c5c82161c178ac76cc61bc4464a476655e14440163e388e8a37c13cd7f4fde65369e17d9e77391234eafae9789fe2734fe127f82e23e18b81f3bc381f09ca25850c8ac22cae67a0b90d6ffc2f550d0f1391da40953455b95ccf5d24fa043eecece6f5b83358e7dc858ed69387aa5009727f3972473a1857fbe54c17b1d34", 0xb0}], 0x6, 0x0, 0x0, 0x4008000}, {0x0, 0x0, &(0x7f0000000e80)=[{&(0x7f0000000d40)="c634e58ffc96ce6db14ef06be74e8bc0e00caacac45863598fe10b2070b3b2c08cfdaee5dfab059dadf1881709b9e151c043258b408a7288552a83516e9a55a3a96ad9e5cf69ac40e80c4ff9a9bf152908fd7e6ebc404f306162", 0x5a}, {&(0x7f0000000dc0)="ac9df6043b5c99d46a108811f2bbff0e9f19904ea425b641242ec6f116496f915d90711453992bbb83fb3dd58535fdcc3f641da5679ce978f61d6ce9f0a7da2b0cc2e7f7890af13ae19d6cfd08377872c95a09f9ea878ad42adc2acbf6988290a33c99f89e1bcf4e824717163045ea286601d5c1cae6a28035e10b074c8ec5eb6d5c5e8303cecbf12cd7fa08a2c893", 0x8f}], 0x2, &(0x7f0000000ec0)=[@iv={0x1018, 0x117, 0x2, 0x1000, "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"}, @assoc={0x18, 0x117, 0x4, 0x3}, @op={0x18}, @op={0x18}], 0x1060, 0x10}, {0x0, 0x0, &(0x7f00000033c0)=[{&(0x7f0000001f40)}, {&(0x7f0000001f80)="dfbffa64009d21194e1b68f9f8860ca9b1dfbfe044a2708ae18996bc0ea4fbfe9ecc5936ab584a5bf4b9184c56e425daa0b4ffa9a19931724ba6f8695c709ef2ecd41df1999a1edb877db7aa3941beaf59001e1ca45cce204a700347349f1f75d6d9c75792bdea87a185efd472ca7910ee14861775108b3b3fe9bb8b69ec850a6f865e90cb851d838fab6811d873742bfcf26018e7f0af15833940f12158a005b7899b07a86f9a8bfeea19b57604c5fc65d6925692fdb16d02a15284ad29bc22b46f2378b53ea6aeaec6bdbe4b7ed42133", 0xd1}, {&(0x7f0000002080)="c7d29ee08d8a5d19204d6706f966db4e2ac07fcae0897a70f59d576893080a9d8a500e71b7060e9f7b7ca347de81ec4cd6b0a074a6d031711695575225a18e2571a209b6e4970db3ce72c3d22e6357971d913a4d87aa1bf3f024b72624713852ded6d64b12803bf34d8306256a18a3217c95645d6212566c5a3c527690af975c78a636634dd232ae92ce0431f4ddc11253aa48e78254fa1ebaee1fab5007d6af1bd1f924df9a2e9785c141b5cd9f986eb338a97fda0b7eabac2bb59ace368418f0dc51af0559c206", 0xc8}, {&(0x7f0000002180)="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", 0x1000}, {&(0x7f0000003180)="27a114989cf658a6131fed38181432f7ce437f6b2a92281367fec18938b6bcbb171918e4e91347e0b6ecca25eb00efb63caf1097eb346a11d3fbbcba9f316339e66b9e70bc4f11b6b74941a4a3ccd6e1bb9c4d721271f2025d2701b93bad8cdb6c525556c6de412d7bf0d551f9dfba6abaa2638fd0a8ba64a31facc522ce1344ff95bab9", 0x84}, {&(0x7f0000003240)="7b095660cd4ef153ec675a55c4d3bbc3e7c7835a523262a7ba86bf463fa166f2cb632f8f61769942225332629f328b0ff5768e509d9dfacd635a2031abd9ea2c039fb4c1370b7c3dc573d1be4cbd7d2f65819d97e02ea9fcc2ac535b8f035889cc6c950f8cc43e4e76b07ae1ce5f43bb62", 0x71}, {&(0x7f00000032c0)="82294bed513fade90a116e753245d75a1934bfb2bef837f3a64f627d591844cc73c09faaf7c64601cbc5ac8cb4889615b9c40a65cd07306fddca855da26ff6848795e602d699e18b8a23259d28074abdea6eed070194d21c2e3cfa18e1811de554ffa73efc05e4d5c585e95a81e59ff39b6c5b323acb2b8c4744aade5def09f713e271fbaf6587979c96f10c7e687a7bb552666e15d036e733cc1efff5b3ff0cb0f8114aea9b2a8891e8151c9c2a80f3a9188490b686ae419a855dc56016c0fd69d5cf4b2637aa5ad0f87b630dea76268478c19882a99d8496fec71385bd8f9f6e1a361e177426e790e5c62d03", 0xed}], 0x7, 0x0, 0x0, 0x80}, {0x0, 0x0, &(0x7f0000003580)=[{&(0x7f0000003440)="18b21e3354370c3ebb4f4dc6e9aa7999b105ea426560bfc34104c927b16b6c03f0f3b694fe29959db74b6261cb7fe111b95a9da128e96d59a080c794c902e7afd75f51ac456fe77427d3dd023f70ccb607aeabebea958637f5c12ff8ac4b3c748f394116185452fea1af722ea2a86bb82494a02c016f56fd68329f0d4085500058aefcc27fa7292c5128174954e310755a8b8a9449", 0x95}], 0x1, &(0x7f00000035c0)=[@op={0x18}, @assoc={0x18, 0x117, 0x4, 0x2}, @iv={0x90, 0x117, 0x2, 0x79, "25351be7b69f54816fa7a483ded4b63ef5a3b07dcff20686e99d9a02da1779c32b3a2e57a55ffc08dc040878c68b4051ec12f6488f3a06c89a3a2b78b3e0072c973c48528b069817635766576f421cdc1e5cee606e238672c9eaba4ba9adf587e9667fe290e963d40968c6fb0a7d8263e49982d8fd71a0f94c"}, @assoc={0x18, 0x117, 0x4, 0x4}, @op={0x18}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x7}], 0x120, 0x40004}, {0x0, 0x0, &(0x7f0000003940)=[{&(0x7f0000003700)="c0c99b029d4274e82591eb08612cbe4254fbacb2764a8e7d213e2cfac31193f4d717b083e3136fa596564de2046b86ee726e86be546d6a66964fba1ba2eeb9", 0x3f}, {&(0x7f0000003740)="169d13296653415015ade56285589561ed36b7f51f79c3c1dafab82efa8ace41c4ca16a8c019e90042a86d290a293610a408efb734279d9ee39e9cc056d42449a357bbcbf8ea5caf22835d5bfd19b7c7a68a89df2a28942448b357237a4a49fff467443e9f8d5f37d11c84314882a84d8eafc0a1d7ceff9723855664f61ce8ce55ffaa58beb0fa5ad2cf6845d8757a937e047347701215a4ed24c16b9443604e6e512323a84b531c422788cde5d7f73a761d569011c1cd7a150c01a2b4e4e92f7bd7380c84fc1a1ab165bcec4f318d40b2cadfb3059c0ebaa99d279481f54e93b6fb00", 0xe3}, {&(0x7f0000003840)="f7baef31e40576f3b39b59b44d0ac4db129a464198996ab0840f25d121b538ea47a70814b84416a2dd27849665a8f3683af02875ff91a8f4", 0x38}, {&(0x7f0000003880)="c114b9358f467ac989a6a4189011063786f90f550c565d8f7bea84415f7c35b1537a1e5add9256c3783fc8c1c52a22b2d5f7c80b7e3b5d08d0801fdba542e319cfa1d3340e38097ed43eeb6d34792c13c68f7c9c16ace207d21f63aa6eb8c334454e15234675a31b02590ca3ecbf984b24f2b0dfa84d955dace7e10904afa9ea23636f4f4c161e1c", 0x88}], 0x4, &(0x7f0000003980)=[@iv={0x70, 0x117, 0x2, 0x55, "5796fd8b29eb43857f94f50790fa7c14408c0224eea8751833d1854f1e7ed341d78fe9fabe7e4de7d4665a13b17339970d2343b443870f04d5b6b41ba9f7658ed06bb36da0368082a3dfaf2c46d52cf10f59671c71"}, @op={0x18}, @iv={0x108, 0x117, 0x2, 0xed, "e32b1025291ae2f7e8c2b6e636f1d4d784d76b792a22d9d99019f926f989a1bdd4fcf0ecbcff0ba33656ce72758c9a3998f0a8c1891a9969b4eb62a33f94e77172b3cd02f405c0e584f02c4d716567f83990a841bfc5ff5d1c4dcf510aed33067871062f1ad0c5c04df7d01204370239763c763ef62a6e50958616ee8a75fb298de17e5dcc24fc833dc1e45942b8c2b0e1c83563f007f0eb9b3b587019bb08e5fac0cb563373038e98e3705ed174d72a4b067f49bfdb3b2bb64b7a579b19275013a2c9a3ef4da3fbbca70d3cb927e9463a66a196d63a42b96f79a8b9a4cea0eb27eecc1611968a24559db3f1f9"}], 0x190, 0x20000014}], 0x7, 0x20044c10) 2.971692848s ago: executing program 2 (id=457): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r1, 0x89f1, &(0x7f00000004c0)={'ip6_vti0\x00', &(0x7f0000000740)={'syztnl1\x00', 0x0, 0x29, 0x0, 0x3, 0x0, 0x4e, @dev={0xfe, 0x80, '\x00', 0x19}, @empty, 0x20, 0x7, 0x2, 0x80008}}) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000600)={'syztnl1\x00', 0x0}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x71, 0xffffffffffffffff, 0x46e4c000) connect$tipc(0xffffffffffffffff, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000e00), 0xffffffffffffffff) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) select(0x0, 0x0, 0x0, 0x0, &(0x7f0000000240)={0x0, 0xea60}) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r3, 0x0) sendmsg$IEEE802154_START_REQ(r0, &(0x7f0000000ec0)={&(0x7f0000000dc0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000e80)={&(0x7f0000000e40)={0x14, r2, 0x400, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x1}, 0x0) syz_emit_ethernet(0xb2, &(0x7f0000000f00)={@link_local, @random="1704b45adbde", @val={@void}, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0xa0, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x21, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0xac1414aa, @rand_addr, {[@cipso={0x86, 0x32, 0x3, [{0x1, 0xe, "f81b0d583cffa84b60dfdff2"}, {0x0, 0x11, "5dded75ee2229bdbd2ec33007e8368"}, {0x7, 0xd, "934f9c6b944fddbccf1cdf"}]}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private, 0x1000000}, {@private}, {@broadcast}, {@dev}, {@private}, {@empty}, {@private}]}]}}}}}}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) recvmmsg(r4, &(0x7f0000000c80)=[{{&(0x7f00000000c0)=@hci, 0x80, &(0x7f0000000280)=[{&(0x7f0000000140)=""/5, 0x5}, {&(0x7f0000000180)=""/227, 0xe3}], 0x2, &(0x7f00000002c0)=""/12, 0xc}, 0x2}, {{&(0x7f0000000300)=@ax25={{}, [@bcast, @default, @remote, @bcast, @netrom, @netrom, @null, @bcast]}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000380)=""/48, 0x30}, {&(0x7f00000003c0)=""/94, 0x5e}, {&(0x7f0000000440)=""/154, 0x9a}, {&(0x7f0000000500)=""/187, 0xbb}, {&(0x7f00000005c0)=""/210, 0xd2}], 0x5, &(0x7f0000000740)=""/2, 0x2}, 0x6}, {{&(0x7f0000000780)=@can, 0x80, &(0x7f00000009c0)=[{&(0x7f0000000800)=""/238, 0xee}, {&(0x7f0000000900)=""/173, 0xad}], 0x2, &(0x7f0000000a00)=""/64, 0x40}, 0x9}, {{&(0x7f0000000a40)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000b80)=[{&(0x7f0000000ac0)=""/184, 0xb8}], 0x1, &(0x7f0000000bc0)=""/177, 0xb1}, 0xb3}], 0x4, 0x2, &(0x7f0000000d80)) 2.137885712s ago: executing program 1 (id=466): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r0, 0x400452c9, &(0x7f0000000100)) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x2}]}}}]}, 0x3c}}, 0x0) 2.033993741s ago: executing program 3 (id=468): r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000004000000b703000000000000850000000400000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = socket$netlink(0x10, 0x3, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000380)={&(0x7f0000000080)='sched_kthread_stop\x00', r0}, 0x18) sendmsg$inet(0xffffffffffffffff, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r3, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r2, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000900), 0x100}, 0x0) r4 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, 0x0, 0x0) sendmsg$netlink(r4, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000900)=ANY=[@ANYBLOB="1c0100002b00010000000000fcdbdf250a01f2800c00090008ac0f0000000000140001"], 0x11c}], 0x1, 0x0, 0x0, 0x1}, 0x0) sendmsg$nl_route(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 1.923738759s ago: executing program 2 (id=469): r0 = socket$kcm(0x10, 0x2, 0x4) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x4e22, @empty}, 0x67) setsockopt$SO_BINDTODEVICE(r1, 0x1, 0x19, &(0x7f0000000000)='syz_tun\x00', 0x10) sendto$inet(r1, 0x0, 0x0, 0x20000800, &(0x7f0000000080)={0x2, 0x0, @remote}, 0x10) r2 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r2, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x4e22, @local}, 0x10) connect$inet(r2, &(0x7f0000000040)={0x2, 0x0, @remote}, 0x10) sendmsg$kcm(r0, &(0x7f0000000240)={0x0, 0xf0ffffff, &(0x7f0000000140)=[{&(0x7f0000000280)="89000000120081ae08060cdc0300fe007f03e3f7000000006ee2ffca1b1f0000000004c00e72f750375ed08a56331dbf9ed7815e381ad6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100001400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) 1.880477863s ago: executing program 1 (id=470): r0 = socket$kcm(0x10, 0x2, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000001c0)={0x1b, 0x0, 0x0, 0x7, 0x0, 0xffffffffffffffff, 0x556e, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x2, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000280)={{0x1, 0xffffffffffffffff}, &(0x7f0000000180), &(0x7f0000000240)}, 0x20) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x13, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0xa, &(0x7f0000000680)=@framed={{0x18, 0x8}, [@func={0x85, 0x0, 0x1, 0x0, 0x6}, @map_fd={0x18, 0x0, 0x0}, @generic={0x2f, 0x0, 0x0, 0x1}, @map_fd={0x18, 0x0, 0x1, 0x0, r2}, @exit={0x95, 0x0, 0xc00}], {0x95, 0x0, 0x7000}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x18, 0x8, &(0x7f00000004c0)=@raw=[@btf_id={0x18, 0xa, 0x3, 0x0, 0x5}, @ldst={0x1, 0x2, 0x2, 0x6, 0x6, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0x2}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r1}}], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = socket$phonet_pipe(0x23, 0x5, 0x2) recvfrom$phonet(r4, 0x0, 0x0, 0x0, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r3, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r8 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="1000000004000000040000000200000000000000", @ANYRES32=0x1, @ANYBLOB="00000000000000c7aa00859d37040e1a8bd30000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/19], 0x48) sendmsg$ETHTOOL_MSG_PAUSE_SET(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000cc0)={&(0x7f0000000080)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r8, @ANYBLOB="0100000010651fbe347b2c2b00000c00018008000100", @ANYRES8=r10], 0x20}}, 0x0) r11 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), 0xffffffffffffffff) sendmsg$NL80211_CMD_DEL_PMKSA(r9, &(0x7f0000000600)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000580)={0x34, r11, 0x4, 0x70bd29, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0x4, 0x77}}}}, [@NL80211_ATTR_PMK_LIFETIME={0x8, 0x11f, 0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="e7ae9845a64c"}]}, 0x34}, 0x1, 0x0, 0x0, 0x841}, 0x20000802) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)=ANY=[@ANYBLOB="2400000070000100000000000000000007000000", @ANYRES32=r7, @ANYBLOB="0c000280060012"], 0x24}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000140)={0x0, 0x25, &(0x7f0000000040)=[{&(0x7f0000000340)="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", 0x2e}], 0x1}, 0x404c110) 1.803970951s ago: executing program 4 (id=471): setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000080)=@rose={'rose', 0x0}, 0x10) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x4e, &(0x7f00000003c0)={@local, @broadcast, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "4dd308", 0x18, 0x6, 0x0, @local, @local, {[], {{0x0, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0x6, 0x2, 0x2, 0x0, 0x0, {[@sack={0x5, 0x2}]}}}}}}}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)=@newlink={0x48, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_AGEING_TIME={0x8, 0x8, 0x81}]}}}, @IFLA_ADDRESS={0x8, 0x1, @dev}]}, 0x48}}, 0x0) 1.639508272s ago: executing program 1 (id=472): r0 = socket(0x10, 0x803, 0x0) write(r0, &(0x7f0000000040)="2600000022004701050007108980e8ff06006d20002b1f00c0e90101c7bb0000b00000000000", 0x26) socket$nl_netfilter(0x10, 0x3, 0xc) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000a40)={{0x14}, [@NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {}, [@NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x2c}, @NFTA_SET_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x230}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x40}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x6}]}], {0x14, 0x10}}, 0x74}}, 0x0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) (async) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000d9bffc), 0x4) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) (async) sendto(r0, &(0x7f00000005c0)="120000001200e7ef007b00000000000000a1", 0x12, 0x0, 0x0, 0x0) socket$inet(0x2, 0x6, 0xfffff241) (async) socket$inet(0x2, 0x6, 0xfffff241) recvmmsg(r0, 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0xa, 0x4, &(0x7f0000000040)=@framed={{}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x20}]}, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$ETHTOOL_MSG_WOL_SET(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000480)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16, @ANYBLOB="450400000000000000000a00"], 0x20}}, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(r0, 0x89f0, &(0x7f0000000580)={'ip6gre0\x00', &(0x7f0000000500)={'syztnl1\x00', 0x0, 0x2f, 0xd1, 0x4, 0xfff, 0x5e, @private1, @private0={0xfc, 0x0, '\x00', 0x1}, 0x700, 0x87095e5ed19412b5, 0xd, 0x248d74b0}}) socket$packet(0x11, 0x3, 0x300) (async) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r4, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)) (async) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) sendmmsg(r4, &(0x7f0000000440)=[{{&(0x7f0000000700)=@xdp={0x2c, 0x0, r6}, 0x80, &(0x7f00000004c0)=[{&(0x7f0000000180)='O', 0x36}], 0x1}}], 0x1, 0x0) getsockname$packet(r0, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) (async) getsockname$packet(r0, &(0x7f0000000700)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000740)=0x14) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r8, 0x8933, &(0x7f0000000140)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x18, 0x1, 0x70bd27, 0x0, {0x2, 0x0, 0x0, 0x20, 0x1, 0x3, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r10}, @RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x20}}]}, 0x2c}}, 0x0) (async) sendmsg$nl_route(r9, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000011c0)={&(0x7f0000000180)=@ipv4_newroute={0x2c, 0x18, 0x1, 0x70bd27, 0x0, {0x2, 0x0, 0x0, 0x20, 0x1, 0x3, 0xfe, 0x2}, [@RTA_OIF={0x8, 0x4, r10}, @RTA_PREFSRC={0x8, 0x7, @dev={0xac, 0x14, 0x14, 0x20}}]}, 0x2c}}, 0x0) sendmsg$ETHTOOL_MSG_PAUSE_GET(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000800)={&(0x7f0000000780)={0x74, 0x0, 0x1, 0x70bd2b, 0x25dfdbfe, {}, [@HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vxcan1\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}]}, @HEADER={0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r6}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r7}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x1}, 0x20000090) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000ac0), r11) sendmsg$IEEE802154_LLSEC_SETPARAMS(r11, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000b40)={&(0x7f0000000640)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r12, @ANYBLOB="050000000000000000002200f2ff090001007770616e3100"], 0x20}}, 0x0) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan1\x00'}) (async) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000200)={'wpan1\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="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", @ANYRES16=r12, @ANYBLOB="02002bbd7000ffdbdf252b0000000c00050000000000000000000a0001007770616e3300000008000200", @ANYRES32=r13, @ANYBLOB="0a0001007770616e340000000c0005000202aaaaaaaaaaaa"], 0x4c}, 0x1, 0x0, 0x0, 0x4040008}, 0x60) (async) sendmsg$IEEE802154_LLSEC_DEL_DEV(r2, &(0x7f0000000380)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000bc0)=ANY=[@ANYBLOB="4c000000000f13381ea4664853a8c133ebf7fd6cc7928881cea77002090a6ea4a32e477d1770fee6650bd91060def1bddaf4f166af78ce16f2be58820f53988d74f463c172e8bbd9170fd31faa7aca0736522757a308dede244f054703fce3320f54b6912e39583ec3ca69c11dedb2307b4b1b8ac23c28422e07b9dd6bd2d0d07cf210369b5dd2b049fba4b29760e78b5026c47c7a4d56146f7983a1601fc2f4c8d8d3908657780f05a60b0170785525b88b4d240aa12e4ba85ffa800e2fcc799d7dcf331a9d891e7bdd68ed8509e881eab0d52b996779ce6378b1405ff7cf666d5e16c1d4e5d291237f53dd716594fc9a4f89748ac752200ee5145a95702173d3b2c1cbefe70881426c0b21730c1b6d3d2cbb0b35fa15e7b6ad13379effa2611c7fc036f6f1ac75dea100000000", @ANYRES16=r12, @ANYBLOB="02002bbd7000ffdbdf252b0000000c00050000000000000000000a0001007770616e3300000008000200", @ANYRES32=r13, @ANYBLOB="0a0001007770616e340000000c0005000202aaaaaaaaaaaa"], 0x4c}, 0x1, 0x0, 0x0, 0x4040008}, 0x60) recvmmsg(r0, &(0x7f0000005500)=[{{0x0, 0x0, &(0x7f0000000480)=[{&(0x7f0000000400)=""/122, 0x80}, {&(0x7f0000001fc0)=""/4104, 0x1008}, {&(0x7f0000000600)=""/204, 0xcc}, {&(0x7f0000000840)=""/205, 0xcd}, {&(0x7f0000000080)=""/185, 0xb9}], 0x5}, 0x4702}, {{&(0x7f0000000300)=@x25, 0x80, 0x0}, 0x4}], 0x40000000000011d, 0x40010040, 0x0) getsockopt$inet_sctp6_SCTP_AUTO_ASCONF(r0, 0x84, 0x1e, &(0x7f0000000140), &(0x7f0000000180)=0x4) 1.62022938s ago: executing program 4 (id=473): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) getsockopt$llc_int(r2, 0x10c, 0x9, &(0x7f00000003c0), &(0x7f00000000c0)=0x4) r3 = socket$l2tp(0x2, 0x2, 0x73) setsockopt$inet_int(r3, 0x0, 0x21, &(0x7f0000000300)=0x8, 0x4) syz_80211_inject_frame(0x0, 0x0, 0x0) r4 = syz_init_net_socket$llc(0x1a, 0x2, 0x0) setsockopt$llc_int(r4, 0x10c, 0x4, &(0x7f0000000000)=0x1e2600, 0x4) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x2c, r7, 0x1, 0x0, 0xfffffffd, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) sendmsg$TIPC_NL_MON_SET(r5, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x144, r7, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x50}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5e9a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x31, 0x3, "e3505e80e6f2967270d2b3678f5e71f79d23348679fc6b3bea35b41497c3eca19d16550d9528c1f1df77244d66"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4014}, 0x24000001) syz_80211_inject_frame(0x0, 0x0, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x45) r8 = syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000007c0)={0x3c, r8, 0x1, 0x0, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}]}, 0x3c}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_route(0x10, 0x3, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) getsockopt$llc_int(r2, 0x10c, 0x9, &(0x7f00000003c0), &(0x7f00000000c0)=0x4) (async) socket$l2tp(0x2, 0x2, 0x73) (async) setsockopt$inet_int(r3, 0x0, 0x21, &(0x7f0000000300)=0x8, 0x4) (async) syz_80211_inject_frame(0x0, 0x0, 0x0) (async) syz_init_net_socket$llc(0x1a, 0x2, 0x0) (async) setsockopt$llc_int(r4, 0x10c, 0x4, &(0x7f0000000000)=0x1e2600, 0x4) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc2(&(0x7f0000000080), 0xffffffffffffffff) (async) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)={0x2c, r7, 0x1, 0x0, 0xfffffffd, {}, [@TIPC_NLA_MEDIA={0x18, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}]}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40d0}, 0x0) (async) sendmsg$TIPC_NL_MON_SET(r5, &(0x7f00000002c0)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000240)={&(0x7f00000000c0)={0x144, r7, 0x2, 0x70bd2c, 0x25dfdbfb, {}, [@TIPC_NLA_MON={0x3c, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x50}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x9}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x8}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x4}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0xfffffff9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA={0xc, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}]}, @TIPC_NLA_MEDIA={0x30, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7fffffff}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xe}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x101}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}]}]}, @TIPC_NLA_LINK={0x44, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz1\x00'}, @TIPC_NLA_LINK_NAME={0x9, 0x1, 'syz0\x00'}, @TIPC_NLA_LINK_PROP={0x1c, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5e9a}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x5}]}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x8000}]}]}, @TIPC_NLA_NET={0x24, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xd2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_NODE={0x50, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ADDR={0x8, 0x1, 0x1}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_ID={0x31, 0x3, "e3505e80e6f2967270d2b3678f5e71f79d23348679fc6b3bea35b41497c3eca19d16550d9528c1f1df77244d66"}, @TIPC_NLA_NODE_UP={0x4}, @TIPC_NLA_NODE_KEY_MASTER={0x4}]}]}, 0x144}, 0x1, 0x0, 0x0, 0x4014}, 0x24000001) (async) syz_80211_inject_frame(0x0, 0x0, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[], 0x1c}, 0x1, 0x0, 0x0, 0x4008001}, 0x45) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000280), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000007c0)={0x3c, r8, 0x1, 0x0, 0x25dfdbfb, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x8e, 0x1}}]}, 0x3c}}, 0x0) (async) 1.448365914s ago: executing program 3 (id=474): bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b7050000000400007910a800000000005d0a0000000000009500000000000000"], &(0x7f00000002c0)='GPL\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/188, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2a) r0 = socket(0x2b, 0x1, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={0x0}, 0x1, 0x0, 0x0, 0x80}, 0x20040894) (async) bind$unix(r0, &(0x7f0000000240)=@file={0x0, './file0\x00'}, 0x6e) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000005c0), r1) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r1, 0x8933, &(0x7f0000000600)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_VLAN(r1, &(0x7f0000000700)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000640)={0x1c, r2, 0x1, 0x70bd2a, 0x25dfdbfb, {}, [@BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r3}]}, 0x1c}}, 0x8004) syz_init_net_socket$netrom(0x6, 0x5, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) (async, rerun: 64) ioctl$sock_netdev_private(r5, 0x8914, &(0x7f0000000000)) (async, rerun: 64) socket$kcm(0x29, 0x0, 0x0) (async, rerun: 32) r6 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) (rerun: 32) ioctl$sock_netrom_SIOCDELRT(r6, 0x890c, &(0x7f0000000680)={0x1, @null, @bpq0, 0x89, 'syz1\x00', @null, 0x2, 0x8, [@null, @default, @null, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @default, @bcast, @bcast]}) (async) ioctl$sock_inet6_SIOCSIFDSTADDR(r0, 0x8918, &(0x7f00000000c0)={@remote, 0x43, r3}) 1.295675351s ago: executing program 4 (id=475): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, 0x0}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f00000001c0)={r2, @in={{0x2, 0x0, @empty}}}, 0x90) 1.290284775s ago: executing program 1 (id=476): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@bloom_filter={0x1e, 0x0, 0x3b, 0x3, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x40000000000000, @void, @value, @void, @value}, 0x48) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}}, 0x0) syz_emit_ethernet(0x36, &(0x7f0000000100)={@local, @link_local={0x3}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x6, 0x0, @dev, @initdev={0xac, 0x1e, 0x0, 0x0}}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x5}}}}}}, 0x0) syz_emit_ethernet(0x4c, &(0x7f00000001c0)=ANY=[@ANYBLOB="0180c20000006c06e3bcee5586dd6001010000161100fc020000000000000000000000000000fe8000000000000000000000000000aa00000e220006"], 0x0) 1.1661211s ago: executing program 3 (id=477): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xd, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x11, 0x38}, [@ldst={0x6, 0x3}], {0x95, 0x0, 0xc00}}, &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3c) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x8101}, {{0x0, 0x0, 0x0}, 0x10000}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000840)=""/245, 0xf5}, {&(0x7f0000000440)=""/84, 0x54}, {&(0x7f0000000940)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/6, 0x6}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x5}, 0x80000000}], 0x4, 0x20, 0x0) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000300)={'ip6_vti0\x00', 0x0}) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000400)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000e80)={0x0, 0x0, &(0x7f0000000e40)={&(0x7f0000000000)={0x24, r4, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_SCAN_FLAGS={0x8, 0x9e, 0x2406}]}, 0x24}, 0x1, 0x0, 0x0, 0x20000010}, 0x40000) sendto$packet(r1, &(0x7f0000000180)="10030600e0ff020004004788aa96a13b", 0x10, 0x80, &(0x7f0000000140)={0x11, 0x0, r2}, 0x14) (async) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r6) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000700)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_TRIGGER_SCAN(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000380)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="050000000000000000002100000008000300", @ANYRES32=r8, @ANYBLOB="10007d8005", @ANYRES8=0x0, @ANYRES32=r6], 0x2c}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) 1.075873577s ago: executing program 4 (id=478): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x4, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x8c}, [@call={0x85, 0x0, 0x0, 0xcc}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000080)={@empty, @private=0xa010102}, 0xc) (async) setsockopt$inet_mreqn(r0, 0x0, 0x24, &(0x7f0000000080)={@empty, @private=0xa010102}, 0xc) 1.03936501s ago: executing program 1 (id=479): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000040)={'syztnl1\x00', &(0x7f00000003c0)={'ip6tnl0\x00', 0x0, 0x29, 0x77, 0x9, 0x2, 0x42, @private2={0xfc, 0x2, '\x00', 0x1}, @dev={0xfe, 0x80, '\x00', 0x18}, 0x7800, 0x80, 0x68000, 0x620bca37}}) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000280)={0x0, 0x0, 0x20}, 0xc) bind$inet6(r1, &(0x7f0000000000)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) syz_emit_ethernet(0x7e, &(0x7f0000001a40)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb86dd6012001a67483a00000000000000000000000000000000ff0000000000000000000000000000000103009078000000006027738200002c00fc010000000000000000000000000000200100000000000000000000000000012f01000000000000070822ebffff00"/126], 0x0) r2 = socket$inet6_sctp(0xa, 0x5, 0x84) sendto$inet6(r2, &(0x7f0000000180)="1a", 0x1, 0x0, &(0x7f0000000480)={0xa, 0x4e23, 0x0, @private2}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, 0x0, 0x0) shutdown(r1, 0x1) 993.696894ms ago: executing program 2 (id=480): r0 = socket$netlink(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000006800)={&(0x7f0000000080)={0x14, r1, 0x615}, 0x14}, 0x5}, 0x4) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000640)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CONNECT(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x38, r3, 0x5, 0xffffffff, 0x1000000c, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CIPHER_SUITES_PAIRWISE={0x10, 0x49, [0xfac08, 0xfac06, 0xeb3ad754ca48937c]}]]}, 0x38}, 0x1, 0x0, 0x0, 0x801}, 0x880) r5 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) connect$bt_sco(r5, &(0x7f00000000c0)={0x1f, @none}, 0x8) r6 = syz_init_net_socket$ax25(0x3, 0x2, 0x0) connect$ax25(r6, &(0x7f0000000000)={{0x3, @default, 0x10000}, [@remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @bcast, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @bcast]}, 0x48) close(r6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000300)={0x11, 0x7, &(0x7f0000000280)=ANY=[@ANYBLOB="1800000000000000000000000000000046000200000000000700000000000000050001000000000085100000faffffff95"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 831.686371ms ago: executing program 4 (id=481): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xd, 0x4, &(0x7f0000000400)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x61, 0x14, 0x88}, [@ldst={0x6}]}, &(0x7f0000000080)='GPL\x00', 0xa, 0x3e0, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x76, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, &(0x7f0000000340)={'filter\x00', 0x7, 0x2, 0x408, 0x110, 0x0, 0x0, 0x320, 0x320, 0x320, 0x4, 0x0, {[{{@uncond, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@multicast, @mac=@local, @initdev={0xac, 0x1e, 0x0, 0x0}, @loopback}}}, {{@arp={@loopback, @multicast2, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@random}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'ipvlan0\x00', 'bond0\x00'}, 0xc0, 0x110}, @mangle={0x50, 'mangle\x00', 0x0, {@mac=@link_local, @empty, @empty, @local}}}, {{@arp={@private, @multicast1, 0x0, 0x0, 0x0, 0x0, {}, {@mac=@multicast}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 'veth0_to_team\x00', 'ipvlan0\x00'}, 0xc0, 0x100}, @unspec=@ERROR={0x40, 'ERROR\x00', 0x0, "7fe0262a2c3f61d8b01499b0a06dbe1103006325eb3b9094dcaad5273454"}}], {{'\x00', 0xc0, 0xe8}, {0x28}}}}, 0x49b) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket$inet6(0xa, 0x3, 0x8000000003c) connect$inet6(r1, &(0x7f0000000140)={0xa, 0x0, 0x0, @dev, 0x9}, 0x1c) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$NL80211_CMD_SET_REKEY_OFFLOAD(0xffffffffffffffff, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000004c0)=ANY=[@ANYBLOB="d8000000", @ANYRES16=0x0, @ANYBLOB="04002dbd7000f2dbdf254f0000000c00839ced540000680000004c007a8008000400000000181c000200134ecc4d908540c3c8630b918a29360800040004005111335ced5fd94e0800040009000000080004000300000048007a801400010003d869f47d8c428eaa74b31794b4b314b5000400000000000c0003004180081ee4f88f1a080004000c0000000c0003007858754e3c504054080004000800000004007a8020007a800800040005000000140002002929590c"], 0xd8}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8955, &(0x7f0000000000)={{0x2, 0x4e2a, @broadcast}, {0x0, @multicast}, 0x68, {0x2, 0xce23}, 'lo\x00'}) sendmsg(r1, &(0x7f00000000c0)={0x0, 0x9521, &(0x7f0000000100)=[{&(0x7f0000000000)="2c10", 0x5dc}], 0x1, 0x0, 0x0, 0x2c}, 0x44004) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000007480)={'wlan0\x00', 0x0}) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000075c0), r3) sendmsg$NL80211_CMD_DEL_PMKSA(r3, &(0x7f0000007700)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={0x28, r5, 0x1, 0x70bd0c, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_MAC={0xa}]}, 0x28}, 0x1, 0x0, 0x0, 0x4040}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r2, &(0x7f0000000180)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x30, r5, 0x20, 0x70bd2a, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x5, 0x7c}}}}, [@NL80211_ATTR_KEY_TYPE={0x8, 0x37, 0x1}]}, 0x30}, 0x1, 0x0, 0x0, 0x4800}, 0x400c005) 831.303144ms ago: executing program 3 (id=482): r0 = socket$netlink(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000200)={'geneve0\x00', 0x0}) r2 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xffffff1f, 0x70bd29, 0x0, {0x0, 0x0, 0x0, 0x0, 0xffffff81}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @gretap={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_GRE_TTL={0x5, 0x8, 0x5}]}}}]}, 0x3c}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="4400000010000100"/20, @ANYRES32=r1, @ANYBLOB="00000000000000001c0012800b00010067656e65766500000c00028008000200ac1414bb080004"], 0x44}, 0x1, 0x2}, 0x0) 671.9198ms ago: executing program 2 (id=483): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) r1 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r1, 0x400448c8, &(0x7f0000000280)={r0, r0, 0xc, 0x1, &(0x7f0000000340)='\x00', 0x9, 0x1, 0xb57, 0x9, 0x9, 0x1, 0x1, 'syz1\x00'}) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000540)={0x8, {{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @loopback}}, {{0xa, 0x0, 0x0, @rand_addr=' \x01\x00'}}]}, 0xe1e571d2193a0e72) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="1400000017000b63d25a80648c2594f93da3c92b", 0x14}], 0x1}, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="30000000100001000000ce6bb9092919507f3400", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) setsockopt$packet_int(r2, 0x107, 0x8, &(0x7f0000000080)=0x40049, 0x4) r6 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_int(r6, 0x0, 0x18, &(0x7f0000000000)=0x3ff, 0x4) bind$inet(r6, &(0x7f0000000080)={0x2, 0x0, @local}, 0x10) recvmmsg(r2, &(0x7f0000000480)=[{{0x0, 0x30, 0x0, 0x0, &(0x7f00000003c0)=""/11, 0x17}}], 0x400000000000179, 0x0, 0x0) 497.905783ms ago: executing program 4 (id=484): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x40000, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) close(r0) (async) close(r0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) 387.925691ms ago: executing program 3 (id=485): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = syz_init_net_socket$x25(0x9, 0x5, 0x0) ioctl$SIOCX25SCALLUSERDATA(r1, 0x89e5, &(0x7f0000000b40)={0x13, "dd6e4eaaff9e7199f5b246fb0144c42ce5a861c065a1424a20e8705c8a6d70b593a9c20eddcb4bf2a10b606ce6b400e06c17dc5c2ad6c632a3aa2d50f01ef1293ad45749226b7af96e58d1a92ac1d2ecd704a63548983cf9b60da2d6ce07bb02a3b3e9b1bb016997bff8ff78f44f6371b5c0f58260bf2d27ebbdba58224b0129"}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000000c0)={'veth0_to_batadv\x00', &(0x7f0000000080)=@ethtool_cmd={0x26, 0x6, 0x762c, 0x6, 0x0, 0x0, 0xe, 0x1, 0xc, 0xba, 0x8, 0x20000000, 0x3, 0x1, 0xfd, 0x680, [0xfffffbff, 0xfffffffc]}}) mmap(&(0x7f0000000000/0x1000)=nil, 0x1000, 0x3000002, 0x52, r0, 0xffffe000) 115.738363ms ago: executing program 1 (id=486): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udp(0x2, 0x2, 0x0) (async, rerun: 32) socket$unix(0x1, 0x1, 0x0) (rerun: 32) setsockopt$IPT_SO_SET_REPLACE(r1, 0x8001000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x480, 0x340, 0x11, 0x148, 0x340, 0x0, 0x440, 0x2a8, 0x2a8, 0x440, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2a0, 0x2e8, 0x4003, {}, [@common=@unspec=@bpf1={{0x230}, @pinned={0x1, 0x0, 0x0, './file0\x00'}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @empty, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x4e0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) (async) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0xb, &(0x7f0000000440)=ANY=[@ANYBLOB="180100000000000000000000000000001801000020696c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000008800000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4, @void, @value}, 0x90) (async) connect$bt_l2cap(r2, &(0x7f0000000000)={0x1f, 0x8ef, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}, 0xe) (async) r3 = syz_init_net_socket$bt_bnep(0x1f, 0x3, 0x4) ioctl$sock_bt_bnep_BNEPCONNADD(r3, 0x400442c8, &(0x7f0000000540)=ANY=[@ANYRES32=r2]) (async, rerun: 64) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) shutdown(r4, 0x0) setsockopt$inet_sctp6_SCTP_RTOINFO(r4, 0x84, 0x0, &(0x7f0000000100), 0x10) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000100)) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000240)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x28011, r5, 0x0) (async, rerun: 32) r6 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000940), 0xffffffffffffffff) (async) r8 = socket$alg(0x26, 0x5, 0x0) bind$alg(r8, &(0x7f0000000140)={0x26, 'hash\x00', 0x0, 0x0, 'wp384-generic\x00'}, 0x58) (async) r9 = accept$alg(r8, 0x0, 0x0) sendmmsg$alg(r9, &(0x7f00000004c0)=[{0x0, 0x0, &(0x7f00000002c0), 0x0, &(0x7f0000000b40)=[@assoc={0x18, 0x117, 0x4, 0x9}, @op={0x18, 0x117, 0x3, 0x1}, @iv={0x20, 0x117, 0x2, 0xc, "c28ad600323294d447212441"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x1}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x3}, @iv={0x110, 0x117, 0x2, 0xf7, "ca08871be974ba6d87201c9f9626f1d22ff204d4d488afad23c6bd07b8f2baa03f217288c3f5b730eb0b248efa057531b5399d9fb125f79a8254349a1ee4b97201f01fbb311f141cbd1ecd5888672592ca79651d2b32d2fefaa9b933ff78846140d1650ffe192f62b74c95205826c5f3a1ea7bc9dc66b1d0b1ecd0fe4dce271ffae340eb73f61adeb7ff545fcb1cf9a16eae8966e19da252248b438e617d763330fcf675b5cc885c775c3aab75fb3e87b6ec2958c590aea327da96bff469907e61a1dcfbe436a5c0d7db4d254a7a7afa29c1f2c7edd33725bc5223bf49fd0045cbe4a78beb4f4ca9f12ce191cadc688702a16952084474"}], 0x1c0, 0x40}, {0x0, 0x0, &(0x7f0000000400)=[{&(0x7f0000000a40)="af4ed57fbec493d0d5aa0dd3fc78eb9fecf62430d2ce7656a70e06d01ed61c3812c7ef12f394c4f9e0b2903f81fcecee2d7cf19fc2e5cd133ed239e6beed1645c40734af25ab9d424caea123fc8dca7bdf9ab20abf9f1241f81294a8168d90e595a461184216fb5097ad93d8cbace2921ee0e52140dac12c73fe3a905d629a79b9d6997ddf97be65a9c1b384efdf3c59c0b327203d0f357055", 0x99}, {&(0x7f0000000d00)="423208544d1d42e1a8bce2a221bd907e2fe9eb67e14e9848e9127a6d82b0dd3acd4829e9beaed165027620cbdea28b4fd99a9bb9a4d13a2d8c53012cfc057b87031ae2ae13208b5f83aaff07934a7db8f676ae266ed95ac14b46f86c83aef853208bdaa7ac35abf33ba2fee416058d83d81c429c042a069f6a536d0026d4017236fdf292dd6fe341", 0x88}, {&(0x7f00000003c0)="ac13716f105486c4d544d451c51225c758ce28d4b58015b46a65757390193fedeb4e0990cf8386aa48732bab18f1b93fdc7058bb4d1ac6955196", 0x3a}], 0x3, &(0x7f0000000f40)=[@assoc={0x18, 0x117, 0x4, 0x9678}, @assoc={0x18, 0x117, 0x4, 0x101}, @op={0x18}, @assoc={0x18, 0x117, 0x4, 0x1200000}, @op={0x18}, @assoc={0x18}, @iv={0xd8, 0x117, 0x2, 0xc2, "129c38196bfb901761ebf300c7a56df6f0d05c14f2d33c3cfa2e02c9ded8f91b0cab6e71795015dfa3669bd6213615e070ba5176e067c8aaa05f108ddad6a32e6e32a4b29b148236b362f0ca2b71b36ed37edca418c8540b4352558cc822752871c96b14f5bd2eb2a7364295f4c8f3ec2672a49c24a5e21dc2a23217f8aa36dbd778040072c55a96637d95a30b6e1d013abd1e98e861ac60412fba25704f7c6d60bee55acb431a66e8be5e6b5d6f6f561f6a6c6030249e6f0452a9e999043c3c82b7"}], 0x168, 0x800}], 0x2, 0x20040050) sendmmsg$alg(r9, &(0x7f0000000f00)=[{0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000005c0)="75e613512be654a19770bc090cc469914959de011f5a7bf4f91a4c398b4906b7db4037e4412e4822daec56626ea24a441f01c1e2de8a15af04a961b13fd9c2b85dc73224958588ade21603e50a6e446f10147b495a59bb8b9fe92e367c33c9a1f64f33eb750dfa75675fd23a3ac3ce6948aa843872bf16d2f4de10b9114a2177b52cf4ca0665e01359f0335dc1988bfe8f38740fb84ccbcc57c5958d29af3dc3884b7a275d3fce2702e651fb5c8636e21024e9ddcc8049b6dd504ba4409d36c30810a41baa70b8f807558c305aa937357b0daa79d9830c7745ce663172f92b2697e2", 0xe2}, {&(0x7f00000006c0)="006c471e00a5c7cf9cb0b86c113afa9eb388dfcf39b7cfea77bce5cf37e875509d4a49f7295e37d6cb4b12b2da57671322967a1d80305544e9471146fa52840d5df2299ef92c721d9a55084e9fde026638810eb5553d169c9862faed0d183e93df40c3ab485e77940ad7e104b02bf3711abc6f2e6fda689028c62c1079854c932d1a3b4b0a1f2a1c3123ed7c8aa796bb3e3a49ebed699ce941ae41149b", 0x9d}], 0x2}], 0x1, 0x0) (async) sendmsg$ETHTOOL_MSG_CHANNELS_SET(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x3c, r7, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_CHANNELS_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_team\x00'}]}, @ETHTOOL_A_CHANNELS_COMBINED_COUNT={0x8, 0x9, 0x487a3c76}, @ETHTOOL_A_CHANNELS_OTHER_COUNT={0x8, 0x8, 0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x44}, 0x0) (async) getsockopt$inet_tcp_int(r5, 0x6, 0xa, &(0x7f0000000280), &(0x7f00000000c0)=0x4) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000b00)={0x0}}, 0x0) (async) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x20004080}, 0x4004014) 86.08642ms ago: executing program 3 (id=487): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x4) ioctl$AUTOFS_IOC_READY(r0, 0x400442c9, 0x200000f3) (async) socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$inet6(0xa, 0x5, 0x0) setsockopt$sock_int(r1, 0x1, 0x4000000000000002, &(0x7f0000fee000)=0x3fa, 0x4) listen(r1, 0x80) (async) getsockopt$bt_hci(r0, 0x0, 0x2, 0x0, &(0x7f00000002c0)) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f00000005c0)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @usage, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}}) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r2, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r2, &(0x7f00000002c0)="9e", 0x1, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback, 0xe}, 0x1c) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r3) (async) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000280)=ANY=[@ANYBLOB='( \x00t', @ANYRES16=r4, @ANYBLOB="310d2dbd7000ffdbdf252500000008000300", @ANYRES32=r5, @ANYBLOB="0a0006005050505050500000"], 0x28}, 0x1, 0x0, 0x0, 0x4000005}, 0x20000010) (async) r6 = accept4$tipc(0xffffffffffffffff, &(0x7f0000000000)=@id, &(0x7f00000000c0)=0x10, 0x0) (async) r7 = socket(0x2b, 0x80801, 0x1) setsockopt$IP6T_SO_SET_REPLACE(r7, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x3c1, 0x3, 0x320, 0x140, 0x5c, 0x160, 0x140, 0x3e0, 0x250, 0x228, 0x25a, 0x250, 0x228, 0x4, 0x0, {[{{@ipv6={@remote, @dev, [], [], 'veth0_to_batadv\x00', 'wg1\x00', {}, {0x222cecdb0fb5a62a}, 0x3a}, 0x5002, 0xf8, 0x140, 0x52020000, {0x0, 0x6802000000000000}, [@common=@icmp6={{0x28}, {0x0, "d176"}}, @common=@unspec=@state={{0x28}, {0xfffffffd}}]}, @unspec=@CT0={0x48}}, {{@ipv6={@local, @private2, [], [0xff], 'veth1_to_hsr\x00', 'dummy0\x00', {}, {}, 0x88}, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x380) (async) getsockname(r6, &(0x7f0000000340)=@sco={0x1f, @fixed}, &(0x7f00000001c0)=0x80) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x200002, 0x30}, 0xc) sendmsg$inet6(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x34000}], 0x1}, 0x0) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f0000000140)={0x0, 0x1, 0x20}, 0xc) (async) writev(r2, &(0x7f0000000100)=[{&(0x7f0000000040)=',', 0x19fff}], 0x1) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r8, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r9, 0x107, 0xf, &(0x7f0000000080)=0xf41, 0x4) (async) r10 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r7, 0x89f2, &(0x7f0000000400)={'gretap0\x00', &(0x7f00000003c0)={'syztnl2\x00', 0x0, 0xfe4aa76486d65214, 0x10, 0x5, 0x200, {{0x7, 0x4, 0x3, 0x10, 0x1c, 0x68, 0x0, 0x9, 0x2f, 0x0, @empty, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@timestamp={0x44, 0x8, 0x18, 0x0, 0x5, [0x1]}]}}}}}) sendmsg$nl_route_sched(r10, &(0x7f0000000580)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000540)={&(0x7f0000000480)=@newqdisc={0xb0, 0x24, 0x2, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, r11, {0xd, 0x9}, {0x8, 0xfff3}, {0x9, 0xffff}}, [@TCA_STAB={0x8c, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x8a, 0xc, 0x100, 0xfff, 0x2, 0x1, 0xf2d5, 0x1}}, {0x6, 0x2, [0x2b]}}, {{0x1c, 0x1, {0x1, 0x82, 0x3, 0x41, 0x1, 0x4, 0x6, 0x7}}, {0x12, 0x2, [0x7fff, 0x4f31, 0x6, 0x4, 0x5, 0x7, 0xff7e]}}, {{0x1c, 0x1, {0x1, 0x4, 0x67, 0x2, 0x2, 0x6, 0x0, 0xa}}, {0x18, 0x2, [0x3, 0x9, 0x4, 0x6, 0x5, 0x62, 0x8, 0x6, 0x2, 0x9]}}]}]}, 0xb0}, 0x1, 0x0, 0x0, 0x20000000}, 0x8000041) 0s ago: executing program 2 (id=488): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)}, &(0x7f0000000180)=0x10) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0xd, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) r3 = socket(0x2, 0x80805, 0x0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r3, 0x84, 0x85, &(0x7f00000001c0)={r2, @in={{0x2, 0x0, @empty}}}, 0x90) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.3' (ED25519) to the list of known hosts. [ 82.751613][ T5815] cgroup: Unknown subsys name 'net' [ 82.889392][ T5815] cgroup: Unknown subsys name 'cpuset' [ 82.899932][ T5815] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 84.501702][ T5815] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 88.495738][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 88.503932][ T5847] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 88.511475][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 88.521085][ T5847] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 88.528663][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 88.536689][ T5847] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 88.538003][ T5848] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 88.545732][ T5847] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 88.564523][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 88.575519][ T5848] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 88.583058][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 88.584826][ T5847] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 88.590340][ T5848] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 88.605079][ T5848] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 88.613411][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.615357][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 88.621203][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 88.638182][ T5852] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 88.645393][ T5138] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 88.647512][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 88.654105][ T5138] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 88.663071][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 88.674470][ T5848] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 88.676053][ T5138] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 88.699808][ T5138] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 89.387007][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 89.409633][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 89.471527][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 89.526704][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 89.710851][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 89.793559][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.800882][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.809924][ T5833] bridge_slave_0: entered allmulticast mode [ 89.817439][ T5833] bridge_slave_0: entered promiscuous mode [ 89.852846][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.860138][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.867706][ T5839] bridge_slave_0: entered allmulticast mode [ 89.875362][ T5839] bridge_slave_0: entered promiscuous mode [ 89.909422][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.916798][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.923945][ T5833] bridge_slave_1: entered allmulticast mode [ 89.932000][ T5833] bridge_slave_1: entered promiscuous mode [ 89.954002][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.961183][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.968567][ T5839] bridge_slave_1: entered allmulticast mode [ 89.976304][ T5839] bridge_slave_1: entered promiscuous mode [ 90.041789][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.049757][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.057761][ T5829] bridge_slave_0: entered allmulticast mode [ 90.065541][ T5829] bridge_slave_0: entered promiscuous mode [ 90.102969][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.110238][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.118071][ T5830] bridge_slave_0: entered allmulticast mode [ 90.125821][ T5830] bridge_slave_0: entered promiscuous mode [ 90.136138][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.149670][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.159459][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.167717][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.175220][ T5829] bridge_slave_1: entered allmulticast mode [ 90.182512][ T5829] bridge_slave_1: entered promiscuous mode [ 90.191719][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.205328][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.233329][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.240841][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.248308][ T5830] bridge_slave_1: entered allmulticast mode [ 90.255651][ T5830] bridge_slave_1: entered promiscuous mode [ 90.361925][ T5833] team0: Port device team_slave_0 added [ 90.370499][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.383404][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.406224][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 90.413394][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 90.423329][ T5840] bridge_slave_0: entered allmulticast mode [ 90.430758][ T5840] bridge_slave_0: entered promiscuous mode [ 90.453865][ T5833] team0: Port device team_slave_1 added [ 90.491107][ T5839] team0: Port device team_slave_0 added [ 90.500462][ T5839] team0: Port device team_slave_1 added [ 90.520118][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 90.527388][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.534528][ T5840] bridge_slave_1: entered allmulticast mode [ 90.543528][ T5840] bridge_slave_1: entered promiscuous mode [ 90.552530][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.576773][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.583736][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.609715][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.678763][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.688519][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.696041][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.722720][ T5845] Bluetooth: hci0: command tx timeout [ 90.725380][ T5138] Bluetooth: hci1: command tx timeout [ 90.728242][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.755644][ T5829] team0: Port device team_slave_0 added [ 90.762337][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.769381][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.795605][ T5845] Bluetooth: hci4: command tx timeout [ 90.795906][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.811921][ T5845] Bluetooth: hci3: command tx timeout [ 90.812212][ T5845] Bluetooth: hci2: command tx timeout [ 90.827270][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 90.839479][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 90.864772][ T5829] team0: Port device team_slave_1 added [ 90.871705][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.879093][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 90.905173][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.953662][ T5830] team0: Port device team_slave_0 added [ 90.990155][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.997482][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.024178][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.065692][ T5830] team0: Port device team_slave_1 added [ 91.087723][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.094763][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.121107][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.136626][ T5840] team0: Port device team_slave_0 added [ 91.202269][ T5840] team0: Port device team_slave_1 added [ 91.213413][ T5833] hsr_slave_0: entered promiscuous mode [ 91.221580][ T5833] hsr_slave_1: entered promiscuous mode [ 91.229290][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.236689][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.262912][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.279679][ T5839] hsr_slave_0: entered promiscuous mode [ 91.286572][ T5839] hsr_slave_1: entered promiscuous mode [ 91.292841][ T5839] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.300788][ T5839] Cannot create hsr debugfs directory [ 91.353114][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.360184][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.386956][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.437613][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 91.444730][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.470908][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 91.501498][ T5829] hsr_slave_0: entered promiscuous mode [ 91.508384][ T5829] hsr_slave_1: entered promiscuous mode [ 91.514976][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.522581][ T5829] Cannot create hsr debugfs directory [ 91.543520][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 91.550631][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.577146][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 91.688436][ T5830] hsr_slave_0: entered promiscuous mode [ 91.695203][ T5830] hsr_slave_1: entered promiscuous mode [ 91.701365][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.709049][ T5830] Cannot create hsr debugfs directory [ 91.796484][ T5840] hsr_slave_0: entered promiscuous mode [ 91.802901][ T5840] hsr_slave_1: entered promiscuous mode [ 91.809718][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 91.817362][ T5840] Cannot create hsr debugfs directory [ 91.831609][ T24] cfg80211: failed to load regulatory.db [ 92.281866][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 92.303016][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 92.339631][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 92.350427][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 92.408188][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 92.419906][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 92.433041][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 92.443826][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 92.547488][ T5829] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 92.558720][ T5829] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 92.569434][ T5829] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 92.582508][ T5829] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 92.712296][ T5830] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 92.741068][ T5830] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 92.754060][ T5830] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 92.773766][ T5830] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 92.785051][ T5138] Bluetooth: hci0: command tx timeout [ 92.790510][ T5845] Bluetooth: hci1: command tx timeout [ 92.807083][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.850321][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.865452][ T5845] Bluetooth: hci2: command tx timeout [ 92.865486][ T5138] Bluetooth: hci3: command tx timeout [ 92.870932][ T5845] Bluetooth: hci4: command tx timeout [ 92.940798][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.950445][ T5840] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 92.962321][ T5840] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 92.973648][ T5840] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 92.999317][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.006630][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.017219][ T5840] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 93.054510][ T2998] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.061741][ T2998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.081569][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.122005][ T2998] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.129276][ T2998] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.159050][ T2998] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.166246][ T2998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.186227][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.258201][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.293788][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.333779][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.341026][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.389880][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.411945][ T2998] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.419132][ T2998] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.468836][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.476068][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 93.491192][ T1139] bridge0: port 2(bridge_slave_1) entered blocking state [ 93.498391][ T1139] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.684183][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.719249][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 93.830210][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 93.909714][ T1139] bridge0: port 1(bridge_slave_0) entered blocking state [ 93.916885][ T1139] bridge0: port 1(bridge_slave_0) entered forwarding state [ 94.002586][ T53] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.009816][ T53] bridge0: port 2(bridge_slave_1) entered forwarding state [ 94.061284][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.261111][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.313704][ T5833] veth0_vlan: entered promiscuous mode [ 94.349242][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.381473][ T5833] veth1_vlan: entered promiscuous mode [ 94.490841][ T5829] veth0_vlan: entered promiscuous mode [ 94.540809][ T5839] veth0_vlan: entered promiscuous mode [ 94.554128][ T5833] veth0_macvtap: entered promiscuous mode [ 94.572483][ T5830] veth0_vlan: entered promiscuous mode [ 94.589056][ T5829] veth1_vlan: entered promiscuous mode [ 94.603974][ T5833] veth1_macvtap: entered promiscuous mode [ 94.644640][ T5830] veth1_vlan: entered promiscuous mode [ 94.653902][ T5839] veth1_vlan: entered promiscuous mode [ 94.692349][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.707976][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.749472][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.759969][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.768786][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.778360][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.800313][ T5829] veth0_macvtap: entered promiscuous mode [ 94.817794][ T5830] veth0_macvtap: entered promiscuous mode [ 94.842392][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.855983][ T5839] veth0_macvtap: entered promiscuous mode [ 94.865907][ T5845] Bluetooth: hci0: command tx timeout [ 94.865960][ T5138] Bluetooth: hci1: command tx timeout [ 94.876496][ T5839] veth1_macvtap: entered promiscuous mode [ 94.889983][ T5830] veth1_macvtap: entered promiscuous mode [ 94.897878][ T5829] veth1_macvtap: entered promiscuous mode [ 94.945697][ T5138] Bluetooth: hci3: command tx timeout [ 94.945801][ T5845] Bluetooth: hci2: command tx timeout [ 94.951131][ T5836] Bluetooth: hci4: command tx timeout [ 94.967455][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.007774][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.022995][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.034475][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.046967][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.082719][ T5829] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.091716][ T5829] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.100848][ T5829] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.112216][ T5829] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.148786][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.173167][ T5830] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.182384][ T5830] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.192739][ T5830] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.201686][ T5830] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.215537][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.223573][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.233598][ T5839] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.243062][ T5839] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.253008][ T5839] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.261873][ T5839] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.317444][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.326713][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.413236][ T5905] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.419684][ T5840] veth0_vlan: entered promiscuous mode [ 95.424411][ T5905] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.473107][ T5833] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 95.482286][ T5840] veth1_vlan: entered promiscuous mode [ 95.556503][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.564352][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.663193][ T5840] veth0_macvtap: entered promiscuous mode [ 95.686541][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.707326][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.713446][ T5840] veth1_macvtap: entered promiscuous mode [ 95.720851][ T5919] netlink: 'syz.2.3': attribute type 1 has an invalid length. [ 95.760212][ T14] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.774202][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.791003][ T14] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.881125][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.895972][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.906640][ T5840] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.908261][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.924417][ T5840] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.933311][ T5840] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.942332][ T5840] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.987738][ T5922] veth3: entered promiscuous mode [ 96.020311][ T5921] netlink: 56 bytes leftover after parsing attributes in process `syz.1.2'. [ 96.039680][ T5921] netlink: 'syz.1.2': attribute type 13 has an invalid length. [ 96.048286][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.053275][ T5921] netlink: 'syz.1.2': attribute type 17 has an invalid length. [ 96.056790][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.179151][ T5921] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 96.431214][ T5930] Zero length message leads to an empty skb [ 96.477590][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.517566][ T5933] netlink: 'syz.4.5': attribute type 27 has an invalid length. [ 96.525641][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.591256][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.609733][ T5930] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7'. [ 96.612441][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.620520][ T5930] netlink: 44 bytes leftover after parsing attributes in process `syz.2.7'. [ 96.676217][ T5938] Bluetooth: MGMT ver 1.23 [ 96.888636][ T5941] netlink: 28 bytes leftover after parsing attributes in process `syz.1.10'. [ 96.945072][ T5138] Bluetooth: hci1: command tx timeout [ 96.950867][ T5836] Bluetooth: hci0: command tx timeout [ 97.000984][ T5943] bond0: entered promiscuous mode [ 97.012280][ T5943] bond_slave_0: entered promiscuous mode [ 97.026300][ T5138] Bluetooth: hci3: command tx timeout [ 97.032661][ T5836] Bluetooth: hci4: command tx timeout [ 97.032716][ T5845] Bluetooth: hci2: command tx timeout [ 97.040682][ T5943] bond_slave_1: entered promiscuous mode [ 97.174279][ T5949] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 97.380016][ T5947] bond1: entered promiscuous mode [ 97.395859][ T5947] bond1: entered allmulticast mode [ 97.402789][ T5947] 8021q: adding VLAN 0 to HW filter on device bond1 [ 98.084521][ T5989] netlink: 14 bytes leftover after parsing attributes in process `syz.0.25'. [ 98.113247][ T5994] ieee802154 phy0 wpan0: encryption failed: -22 [ 98.243097][ T6004] netlink: 16178 bytes leftover after parsing attributes in process `syz.4.28'. [ 98.363207][ T6009] netlink: 'syz.1.29': attribute type 1 has an invalid length. [ 98.383471][ T6009] netlink: 244 bytes leftover after parsing attributes in process `syz.1.29'. [ 98.593011][ T6002] syzkaller1: entered promiscuous mode [ 98.599289][ T6002] syzkaller1: entered allmulticast mode [ 98.913229][ T6014] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.972752][ T6021] netlink: 20 bytes leftover after parsing attributes in process `syz.0.33'. [ 99.039026][ T6024] netlink: 'syz.0.33': attribute type 8 has an invalid length. [ 99.049471][ T6027] netlink: 'syz.0.33': attribute type 8 has an invalid length. [ 99.175125][ T6029] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.595020][ T6051] syz.2.42 uses obsolete (PF_INET,SOCK_PACKET) [ 99.794796][ T6059] IPv4: Oversized IP packet from 172.20.20.24 [ 99.802514][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 99.809432][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 99.948359][ T6063] netlink: 244 bytes leftover after parsing attributes in process `syz.0.45'. [ 100.756657][ T6109] netlink: 212408 bytes leftover after parsing attributes in process `syz.4.52'. [ 100.989693][ T6119] sctp: [Deprecated]: syz.4.55 (pid 6119) Use of struct sctp_assoc_value in delayed_ack socket option. [ 100.989693][ T6119] Use struct sctp_sack_info instead [ 101.582866][ T6143] x_tables: ip6_tables: ipcomp match: only valid for protocol 108 [ 101.648609][ T6145] warning: `syz.1.63' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 101.698514][ T6145] : entered promiscuous mode [ 101.975846][ T6158] __nla_validate_parse: 1 callbacks suppressed [ 101.975865][ T6158] netlink: 44 bytes leftover after parsing attributes in process `syz.3.67'. [ 102.010425][ T6156] netlink: 44 bytes leftover after parsing attributes in process `syz.3.67'. [ 102.037311][ T6160] netlink: 4 bytes leftover after parsing attributes in process `syz.1.69'. [ 102.235499][ T6166] Bluetooth: MGMT ver 1.23 [ 102.287131][ T6168] netlink: 16 bytes leftover after parsing attributes in process `syz.3.72'. [ 102.768692][ T6192] syzkaller1: entered promiscuous mode [ 102.784506][ T6192] syzkaller1: entered allmulticast mode [ 102.796445][ T6192] netlink: 'syz.3.81': attribute type 10 has an invalid length. [ 102.810055][ T6196] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.840041][ T6196] bridge_slave_0 (unregistering): left allmulticast mode [ 102.847469][ T6196] bridge_slave_0 (unregistering): left promiscuous mode [ 102.854765][ T6196] bridge0: port 1(bridge_slave_0) entered disabled state [ 102.882544][ T6192] bond0: (slave dummy0): Enslaving as an active interface with an up link [ 103.041957][ T6204] netlink: 68 bytes leftover after parsing attributes in process `syz.3.84'. [ 103.171883][ T6212] xt_ecn: cannot match TCP bits for non-tcp packets [ 103.187631][ T6212] netlink: 4 bytes leftover after parsing attributes in process `syz.3.85'. [ 103.253872][ T6215] netlink: 'syz.0.86': attribute type 7 has an invalid length. [ 103.309789][ T6215] : entered promiscuous mode [ 103.339153][ T6215] netlink: 'syz.0.86': attribute type 7 has an invalid length. [ 103.373195][ T6215] netlink: 'syz.0.86': attribute type 7 has an invalid length. [ 103.395014][ T6215] netlink: 'syz.0.86': attribute type 7 has an invalid length. [ 103.418220][ T6220] netlink: 'syz.2.87': attribute type 1 has an invalid length. [ 103.428222][ T6215] netlink: 'syz.0.86': attribute type 7 has an invalid length. [ 103.437940][ T6215] netlink: 'syz.0.86': attribute type 7 has an invalid length. [ 103.458419][ T6215] netlink: 'syz.0.86': attribute type 7 has an invalid length. [ 103.478730][ T6215] netlink: 'syz.0.86': attribute type 7 has an invalid length. [ 103.785520][ T6231] bond1: entered promiscuous mode [ 103.814733][ T6231] bond1: entered allmulticast mode [ 103.835950][ T6231] 8021q: adding VLAN 0 to HW filter on device bond1 [ 103.873351][ T6235] veth1_to_team: entered promiscuous mode [ 103.979448][ T6235] veth1_to_team: left promiscuous mode [ 105.213040][ T6317] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 105.253976][ T6324] netlink: 4 bytes leftover after parsing attributes in process `syz.0.113'. [ 105.327667][ T6324] netlink: 12 bytes leftover after parsing attributes in process `syz.0.113'. [ 105.496270][ T6330] netlink: 8 bytes leftover after parsing attributes in process `syz.0.113'. [ 105.509812][ T30] audit: type=1800 audit(1747320261.380:2): pid=6324 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.0.113" name=4996AE17DFFC2E43C8174B54B620636894AAACF28FF62616363C70A440AEC4014CAF28C0ADC04308 dev="tmpfs" ino=124 res=0 errno=0 [ 105.585432][ C1] Illegal XDP return value 16128 on prog (id 29) dev lo, expect packet loss! [ 105.770143][ T6343] ieee802154 phy0 wpan0: encryption failed: -22 [ 106.593766][ T6392] netlink: 48 bytes leftover after parsing attributes in process `syz.2.132'. [ 106.656277][ T6390] macvlan2: entered promiscuous mode [ 106.695417][ T6390] macvlan2: entered allmulticast mode [ 106.795091][ T6399] ip6_tunnel: non-ECT from fc00:0000:0000:0000:0000:0000:0000:0000 with DS=0x3 [ 107.304386][ T6425] IPv6: sit1: Disabled Multicast RS [ 107.315901][ T6425] sit1: entered allmulticast mode [ 107.382087][ T6423] ip6gre1: entered promiscuous mode [ 107.437021][ T6428] team0: Device veth1_macvtap failed to register rx_handler [ 107.464160][ T6424] netlink: 4 bytes leftover after parsing attributes in process `syz.2.141'. [ 107.801820][ T6457] netlink: 20 bytes leftover after parsing attributes in process `syz.0.150'. [ 107.983458][ T6468] lo speed is unknown, defaulting to 1000 [ 108.026001][ T6471] pim6reg: entered allmulticast mode [ 108.038772][ T6468] lo speed is unknown, defaulting to 1000 [ 108.068520][ T6471] pim6reg: left allmulticast mode [ 108.116618][ T6468] lo speed is unknown, defaulting to 1000 [ 108.136539][ T6468] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 108.153718][ T6468] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 108.264188][ T6468] lo speed is unknown, defaulting to 1000 [ 108.317570][ T6468] lo speed is unknown, defaulting to 1000 [ 108.331658][ T6468] lo speed is unknown, defaulting to 1000 [ 108.341712][ T6468] lo speed is unknown, defaulting to 1000 [ 108.343095][ T6481] netlink: 60 bytes leftover after parsing attributes in process `syz.4.154'. [ 108.351432][ T6468] lo speed is unknown, defaulting to 1000 [ 108.444488][ T6481] validate_nla: 27 callbacks suppressed [ 108.444505][ T6481] netlink: 'syz.4.154': attribute type 2 has an invalid length. [ 108.507606][ T6481] netlink: 188 bytes leftover after parsing attributes in process `syz.4.154'. [ 108.647577][ T6490] netlink: 8 bytes leftover after parsing attributes in process `syz.2.156'. [ 108.676747][ T6491] netlink: 4 bytes leftover after parsing attributes in process `syz.1.157'. [ 108.699721][ T6490] tun0: tun_chr_ioctl cmd 1074025675 [ 108.722971][ T6490] tun0: persist disabled [ 108.977145][ T6510] netlink: 8 bytes leftover after parsing attributes in process `syz.4.163'. [ 109.000253][ T6512] netlink: 'syz.0.162': attribute type 1 has an invalid length. [ 109.049002][ T6512] netlink: 'syz.0.162': attribute type 4 has an invalid length. [ 109.102150][ T6512] netlink: 192 bytes leftover after parsing attributes in process `syz.0.162'. [ 109.292151][ T6527] netlink: 'syz.2.167': attribute type 11 has an invalid length. [ 109.303679][ T6527] netlink: 224 bytes leftover after parsing attributes in process `syz.2.167'. [ 109.470651][ T6535] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 109.547788][ T6535] netlink: 'syz.3.170': attribute type 15 has an invalid length. [ 109.580751][ T6535] netlink: 'syz.3.170': attribute type 21 has an invalid length. [ 109.607988][ T6535] netlink: 132 bytes leftover after parsing attributes in process `syz.3.170'. [ 109.838882][ T2998] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.910201][ T6548] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 109.995237][ T2998] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.194109][ T2998] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.319190][ T2998] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.535139][ T6571] openvswitch: netlink: Flow actions attr not present in new flow. [ 110.831593][ T6581] netlink: 'syz.3.183': attribute type 1 has an invalid length. [ 110.999919][ T6595] xt_policy: neither incoming nor outgoing policy selected [ 111.000421][ T6581] 8021q: adding VLAN 0 to HW filter on device bond2 [ 111.014853][ T6585] veth0: entered promiscuous mode [ 111.020294][ T2998] bridge_slave_1: left allmulticast mode [ 111.071816][ T2998] bridge_slave_1: left promiscuous mode [ 111.093201][ T2998] bridge0: port 2(bridge_slave_1) entered disabled state [ 111.319503][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 111.329187][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 111.346146][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 111.359860][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 111.377638][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 111.691943][ T2998] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 111.704127][ T2998] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 111.714329][ T2998] bond0 (unregistering): Released all slaves [ 111.740070][ T6587] bond2: (slave gretap1): making interface the new active one [ 111.750478][ T6587] bond2: (slave gretap1): Enslaving as an active interface with an up link [ 111.777366][ T6590] veth0: left promiscuous mode [ 111.782450][ T2998] : left promiscuous mode [ 111.803611][ T6587] syz.3.183 (6587) used greatest stack depth: 19040 bytes left [ 112.134044][ T6606] lo speed is unknown, defaulting to 1000 [ 112.144254][ T6618] netlink: 'syz.4.191': attribute type 18 has an invalid length. [ 112.151037][ T6623] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.532207][ T6639] netlink: 'syz.4.195': attribute type 39 has an invalid length. [ 112.928794][ T2998] hsr_slave_0: left promiscuous mode [ 112.948864][ T2998] hsr_slave_1: left promiscuous mode [ 112.960821][ T2998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 112.985034][ T2998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 113.014094][ T2998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 113.029361][ T2998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 113.120198][ T2998] veth1_macvtap: left promiscuous mode [ 113.132954][ T2998] veth0_macvtap: left promiscuous mode [ 113.139990][ T2998] veth1_vlan: left promiscuous mode [ 113.145928][ T2998] veth0_vlan: left promiscuous mode [ 113.436520][ T5845] Bluetooth: hci1: command tx timeout [ 113.571450][ T2998] team0 (unregistering): Port device team_slave_1 removed [ 113.602902][ T2998] team0 (unregistering): Port device team_slave_0 removed [ 113.899813][ T6655] __nla_validate_parse: 1 callbacks suppressed [ 113.899832][ T6655] netlink: 132 bytes leftover after parsing attributes in process `syz.2.196'. [ 113.926339][ T6658] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 114.151227][ T6680] netlink: 44 bytes leftover after parsing attributes in process `syz.3.201'. [ 114.166793][ T6677] netlink: 'syz.2.202': attribute type 13 has an invalid length. [ 114.228006][ T6677] netlink: 'syz.2.202': attribute type 17 has an invalid length. [ 114.278550][ T6606] chnl_net:caif_netlink_parms(): no params data found [ 114.510908][ T6677] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 114.708905][ T6700] netlink: 'syz.4.207': attribute type 3 has an invalid length. [ 114.774980][ T6700] netlink: 199836 bytes leftover after parsing attributes in process `syz.4.207'. [ 115.078862][ T6719] netlink: 8 bytes leftover after parsing attributes in process `syz.4.211'. [ 115.197148][ T6606] bridge0: port 1(bridge_slave_0) entered blocking state [ 115.204346][ T6606] bridge0: port 1(bridge_slave_0) entered disabled state [ 115.212840][ T6606] bridge_slave_0: entered allmulticast mode [ 115.221792][ T6606] bridge_slave_0: entered promiscuous mode [ 115.240752][ T6606] bridge0: port 2(bridge_slave_1) entered blocking state [ 115.254834][ T6606] bridge0: port 2(bridge_slave_1) entered disabled state [ 115.280344][ T6606] bridge_slave_1: entered allmulticast mode [ 115.310397][ T6606] bridge_slave_1: entered promiscuous mode [ 115.471616][ T6606] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 115.492945][ T6606] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 115.507280][ T5845] Bluetooth: hci1: command tx timeout [ 115.633733][ T6606] team0: Port device team_slave_0 added [ 115.651449][ T6606] team0: Port device team_slave_1 added [ 115.783408][ T6606] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 115.797564][ T6606] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.836716][ T6606] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 115.853061][ T6606] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 115.862937][ T6606] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 115.890370][ T6606] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 116.040674][ T6606] hsr_slave_0: entered promiscuous mode [ 116.048843][ T6606] hsr_slave_1: entered promiscuous mode [ 116.058193][ T6606] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 116.066405][ T6606] Cannot create hsr debugfs directory [ 116.067380][ T6759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.221'. [ 116.120300][ T6761] netlink: 4 bytes leftover after parsing attributes in process `syz.4.220'. [ 116.130246][ T6759] netlink: 4 bytes leftover after parsing attributes in process `syz.2.221'. [ 116.763734][ T6785] atomic_op ffff88807b4c9998 conn xmit_atomic 0000000000000000 [ 117.180685][ T6801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.230'. [ 117.193388][ T6801] netlink: 8 bytes leftover after parsing attributes in process `syz.3.230'. [ 117.511659][ T6817] openvswitch: netlink: IPv6 tunnel dst address is zero [ 117.529171][ T6812] 8021q: adding VLAN 0 to HW filter on device bond3 [ 117.553131][ T6812] bond0: (slave bond3): Enslaving as an active interface with an up link [ 117.566646][ T6818] netlink: 'syz.4.234': attribute type 12 has an invalid length. [ 117.587758][ T5845] Bluetooth: hci1: command tx timeout [ 117.594119][ T6818] netlink: 132 bytes leftover after parsing attributes in process `syz.4.234'. [ 117.868814][ T6606] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 117.899786][ T6606] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 117.954657][ T6606] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 118.139586][ T6606] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 118.601246][ T6606] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.693982][ T6606] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.778537][ T36] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.785790][ T36] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.873986][ T6880] bond0: (slave dummy0): Releasing backup interface [ 118.913152][ T6884] __nla_validate_parse: 3 callbacks suppressed [ 118.913171][ T6884] netlink: 16 bytes leftover after parsing attributes in process `syz.4.248'. [ 118.990763][ T6880] bridge_slave_0: left allmulticast mode [ 119.001378][ T6880] bridge_slave_0: left promiscuous mode [ 119.018464][ T6880] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.035742][ T6880] bridge_slave_1: left allmulticast mode [ 119.041623][ T6880] bridge_slave_1: left promiscuous mode [ 119.050611][ T6880] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.077229][ T6880] bond0: (slave bond_slave_0): Releasing backup interface [ 119.093465][ T5903] IPVS: starting estimator thread 0... [ 119.119092][ T6880] bond0: (slave bond_slave_1): Releasing backup interface [ 119.185557][ T6890] IPVS: using max 27 ests per chain, 64800 per kthread [ 119.201540][ T6880] team0: Port device team_slave_0 removed [ 119.269735][ T6880] team0: Port device team_slave_1 removed [ 119.317094][ T6880] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 119.344032][ T6880] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 119.436806][ T6880] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 119.476720][ T6880] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 119.552457][ T6880] bond2: (slave gretap1): Releasing active interface [ 119.609633][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.616967][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 119.685163][ T5845] Bluetooth: hci1: command tx timeout [ 119.928750][ T6906] netlink: 'syz.3.252': attribute type 4 has an invalid length. [ 120.271577][ T6917] netlink: 16 bytes leftover after parsing attributes in process `syz.3.255'. [ 120.536943][ T6930] netlink: 32 bytes leftover after parsing attributes in process `syz.2.257'. [ 120.569629][ T6606] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 120.605841][ T6932] netlink: 65047 bytes leftover after parsing attributes in process `syz.1.258'. [ 120.742795][ T6606] veth0_vlan: entered promiscuous mode [ 120.794163][ T6606] veth1_vlan: entered promiscuous mode [ 121.018446][ T6606] veth0_macvtap: entered promiscuous mode [ 121.052942][ T6606] veth1_macvtap: entered promiscuous mode [ 121.109437][ T6606] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 121.161491][ T6949] netlink: 44 bytes leftover after parsing attributes in process `syz.2.261'. [ 121.193177][ T6606] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 121.223464][ T6949] netlink: 43 bytes leftover after parsing attributes in process `syz.2.261'. [ 121.250410][ T6606] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.284698][ T6606] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.294843][ T6949] netlink: 'syz.2.261': attribute type 5 has an invalid length. [ 121.304482][ T6949] netlink: 43 bytes leftover after parsing attributes in process `syz.2.261'. [ 121.324050][ T6606] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.358487][ T6606] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 121.413078][ T6963] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 121.696912][ T6971] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.265'. [ 121.738547][ T6966] netlink: 16402 bytes leftover after parsing attributes in process `syz.2.265'. [ 121.745495][ T5845] Bluetooth: hci1: command tx timeout [ 121.795676][ T6966] raw_sendmsg: syz.2.265 forgot to set AF_INET. Fix it! [ 121.812174][ T6966] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 581 [ 121.891988][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 121.927366][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.077262][ T6980] netlink: 8 bytes leftover after parsing attributes in process `syz.1.266'. [ 122.119829][ T1139] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 122.178949][ T1139] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 122.202501][ T6991] pim6reg: entered allmulticast mode [ 122.785836][ T7004] netlink: 'syz.2.274': attribute type 8 has an invalid length. [ 122.841597][ T7006] A link change request failed with some changes committed already. Interface bond1 may have been left with an inconsistent configuration, please check. [ 123.052965][ T36] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.217342][ T36] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.348282][ T36] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.510734][ T36] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.958726][ T36] bridge_slave_1: left allmulticast mode [ 123.977272][ T36] bridge_slave_1: left promiscuous mode [ 123.995001][ T36] bridge0: port 2(bridge_slave_1) entered disabled state [ 124.046800][ T36] bridge_slave_0: left allmulticast mode [ 124.078511][ T36] bridge_slave_0: left promiscuous mode [ 124.093786][ T36] bridge0: port 1(bridge_slave_0) entered disabled state [ 124.431906][ T5836] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 124.440735][ T5836] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 124.452478][ T5836] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 124.461998][ T5836] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 124.481668][ T5836] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 124.755952][ T7055] netlink: 68 bytes leftover after parsing attributes in process `syz.2.285'. [ 124.873780][ T36] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 124.890085][ T36] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 124.900845][ T36] bond0 (unregistering): Released all slaves [ 124.937741][ T7055] team0: No ports can be present during mode change [ 124.990063][ T7045] lo speed is unknown, defaulting to 1000 [ 125.192446][ T7074] IPVS: set_ctl: invalid protocol: 44 10.1.1.0:20002 [ 125.908258][ T36] hsr_slave_0: left promiscuous mode [ 125.928320][ T36] hsr_slave_1: left promiscuous mode [ 125.933231][ T7108] netlink: 'syz.1.297': attribute type 10 has an invalid length. [ 125.934411][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 125.948034][ T7109] netlink: 'syz.2.298': attribute type 7 has an invalid length. [ 125.958562][ T36] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 125.970822][ T36] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 125.978956][ T36] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.032534][ T36] veth1_macvtap: left promiscuous mode [ 126.042150][ T36] veth0_macvtap: left promiscuous mode [ 126.055256][ T36] veth1_vlan: left promiscuous mode [ 126.060613][ T36] veth0_vlan: left promiscuous mode [ 126.511145][ T36] team0 (unregistering): Port device team_slave_1 removed [ 126.545218][ T5836] Bluetooth: hci1: command tx timeout [ 126.552798][ T36] team0 (unregistering): Port device team_slave_0 removed [ 126.920082][ T5886] lo speed is unknown, defaulting to 1000 [ 126.994690][ T5886] syz2: Port: 1 Link DOWN [ 127.071338][ T7123] netlink: 8 bytes leftover after parsing attributes in process `syz.3.300'. [ 127.175771][ T7127] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 127.187471][ T7124] xt_CT: You must specify a L4 protocol and not use inversions on it [ 127.188911][ T7128] IPVS: set_ctl: invalid protocol: 33 127.0.0.1:0 [ 127.231442][ T7045] chnl_net:caif_netlink_parms(): no params data found [ 127.511749][ T30] audit: type=1800 audit(1747320283.400:3): pid=7144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.3.305" name="memory.events" dev="tmpfs" ino=369 res=0 errno=0 [ 127.540664][ T30] audit: type=1804 audit(1747320283.400:4): pid=7144 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.3.305" name="/newroot/69/memory.events" dev="tmpfs" ino=369 res=1 errno=0 [ 127.618876][ T7045] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.637483][ T7045] bridge0: port 1(bridge_slave_0) entered disabled state [ 127.664369][ T7045] bridge_slave_0: entered allmulticast mode [ 127.676741][ T7045] bridge_slave_0: entered promiscuous mode [ 127.694774][ T7045] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.705180][ T7045] bridge0: port 2(bridge_slave_1) entered disabled state [ 127.726399][ T7045] bridge_slave_1: entered allmulticast mode [ 127.763417][ T7045] bridge_slave_1: entered promiscuous mode [ 127.845460][ T7156] unsupported nlmsg_type 40 [ 128.027219][ T7045] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 128.080121][ T7165] netlink: 20 bytes leftover after parsing attributes in process `syz.4.309'. [ 128.110081][ T7045] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.265248][ T7174] netlink: 4 bytes leftover after parsing attributes in process `syz.2.311'. [ 128.553656][ T7045] team0: Port device team_slave_0 added [ 128.600725][ T7045] team0: Port device team_slave_1 added [ 128.626897][ T5836] Bluetooth: hci1: command tx timeout [ 128.815562][ T7045] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.830336][ T7045] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.885657][ T7192] netlink: 64 bytes leftover after parsing attributes in process `syz.2.316'. [ 128.905118][ T7045] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 128.931329][ T7045] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 128.938973][ T7045] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.979724][ T7045] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 128.997727][ T7195] netlink: 16 bytes leftover after parsing attributes in process `syz.1.315'. [ 129.143659][ T7201] netlink: 'syz.4.318': attribute type 1 has an invalid length. [ 129.176764][ T7201] netlink: 12 bytes leftover after parsing attributes in process `syz.4.318'. [ 129.193026][ T7204] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 129.215242][ T7204] team0: Device ipvlan2 is already an upper device of the team interface [ 129.268588][ T7045] hsr_slave_0: entered promiscuous mode [ 129.278012][ T7045] hsr_slave_1: entered promiscuous mode [ 129.297163][ T7045] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.315209][ T7045] Cannot create hsr debugfs directory [ 129.448687][ T7223] netlink: 4 bytes leftover after parsing attributes in process `syz.4.324'. [ 129.604140][ T7228] netlink: 'syz.3.325': attribute type 2 has an invalid length. [ 129.857693][ T7242] netlink: 8 bytes leftover after parsing attributes in process `syz.4.328'. [ 130.203700][ T7257] netlink: 40 bytes leftover after parsing attributes in process `syz.3.332'. [ 130.558576][ T7272] netlink: 8 bytes leftover after parsing attributes in process `syz.2.336'. [ 130.603652][ T7274] netlink: 'syz.3.337': attribute type 10 has an invalid length. [ 130.670615][ T7274] team0: Device lo is loopback device. Loopback devices can't be added as a team port [ 130.683910][ T7274] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 130.703606][ T7045] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 130.715115][ T5836] Bluetooth: hci1: command tx timeout [ 130.743997][ T7045] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 130.809387][ T7045] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 130.837731][ T7276] netlink: 'syz.2.338': attribute type 8 has an invalid length. [ 130.852556][ T7280] xt_ecn: cannot match TCP bits for non-tcp packets [ 130.862206][ T7045] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 130.881497][ T7278] netlink: 10 bytes leftover after parsing attributes in process `syz.3.340'. [ 131.011741][ T7287] netlink: 'syz.3.340': attribute type 10 has an invalid length. [ 131.265723][ T7301] veth1_macvtap: left promiscuous mode [ 131.420848][ T7045] 8021q: adding VLAN 0 to HW filter on device bond0 [ 131.453288][ T7304] netlink: 40 bytes leftover after parsing attributes in process `syz.3.345'. [ 131.454030][ T7305] veth0: entered promiscuous mode [ 131.523724][ T7045] 8021q: adding VLAN 0 to HW filter on device team0 [ 131.594329][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 131.601549][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 131.693644][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 131.700864][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 131.868040][ T7328] netlink: 'syz.3.351': attribute type 10 has an invalid length. [ 132.128744][ T7341] bond0: option mode: unable to set because the bond device is up [ 132.244119][ T7302] veth0: left promiscuous mode [ 132.646247][ T7045] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 132.743240][ T7366] netlink: 40 bytes leftover after parsing attributes in process `syz.1.359'. [ 132.791707][ T5836] Bluetooth: hci1: command tx timeout [ 132.891824][ T7045] veth0_vlan: entered promiscuous mode [ 132.954023][ T7045] veth1_vlan: entered promiscuous mode [ 133.031896][ T7375] netlink: 52 bytes leftover after parsing attributes in process `syz.3.362'. [ 133.051387][ T7376] xt_cgroup: invalid path, errno=-2 [ 133.065893][ T7045] veth0_macvtap: entered promiscuous mode [ 133.087291][ T7045] veth1_macvtap: entered promiscuous mode [ 133.139945][ T7045] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 133.182526][ T7045] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 133.228303][ T7045] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.264623][ T7045] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.273403][ T7045] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.315204][ T7045] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 133.397978][ T7384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.432999][ T7384] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 133.672260][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.685054][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.763346][ T5902] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 133.801989][ T5902] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 133.967114][ T7409] netlink: 40 bytes leftover after parsing attributes in process `syz.1.371'. [ 134.355887][ T7423] netlink: 8 bytes leftover after parsing attributes in process `syz.3.377'. [ 134.379314][ T7425] netlink: 5 bytes leftover after parsing attributes in process `syz.4.376'. [ 134.403658][ T7425] 0ªÃøÂFNð¡: renamed from bond_slave_0 (while UP) [ 134.452279][ T7425] 0ªÃøÂFNð¡: entered allmulticast mode [ 134.697529][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.856464][ T7448] IPVS: set_ctl: invalid protocol: 2 172.20.20.170:20003 [ 135.011248][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.233762][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 135.337306][ T7464] __nla_validate_parse: 1 callbacks suppressed [ 135.337327][ T7464] netlink: 14 bytes leftover after parsing attributes in process `syz.2.382'. [ 135.564704][ T7475] netlink: 40 bytes leftover after parsing attributes in process `syz.4.385'. [ 135.848522][ T7485] Cannot find set identified by id 0 to match [ 135.933916][ T7464] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 135.984158][ T7464] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.021561][ T7464] bond0 (unregistering): Released all slaves [ 136.049913][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 136.061184][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 136.069472][ T5845] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 136.088123][ T5845] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 136.098451][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 136.144343][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 136.282412][ T7489] lo speed is unknown, defaulting to 1000 [ 136.668943][ T12] bridge_slave_1: left allmulticast mode [ 136.690453][ T12] bridge_slave_1: left promiscuous mode [ 136.737692][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 136.800942][ T12] bridge_slave_0: left allmulticast mode [ 136.813573][ T12] bridge_slave_0: left promiscuous mode [ 136.828368][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 137.204123][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 137.218784][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 137.229411][ T12] bond0 (unregistering): Released all slaves [ 137.764111][ T7544] netlink: 40 bytes leftover after parsing attributes in process `syz.3.402'. [ 137.793762][ T7543] netlink: 4 bytes leftover after parsing attributes in process `syz.1.403'. [ 138.039606][ T7563] netlink: 4 bytes leftover after parsing attributes in process `syz.2.406'. [ 138.145303][ T5836] Bluetooth: hci1: command tx timeout [ 138.146410][ T5845] Bluetooth: hci0: command tx timeout [ 138.325998][ T7563] team0: Port device team_slave_0 removed [ 138.340753][ T7489] chnl_net:caif_netlink_parms(): no params data found [ 138.538662][ T12] hsr_slave_0: left promiscuous mode [ 138.582412][ T12] hsr_slave_1: left promiscuous mode [ 138.591492][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 138.601484][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 138.624502][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 138.632669][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 138.669379][ T12] veth1_macvtap: left promiscuous mode [ 138.679628][ T12] veth0_macvtap: left promiscuous mode [ 138.686325][ T12] veth1_vlan: left promiscuous mode [ 138.691736][ T12] veth0_vlan: left promiscuous mode [ 138.964493][ T7593] netlink: 4 bytes leftover after parsing attributes in process `syz.1.411'. [ 139.213052][ T12] team0 (unregistering): Port device team_slave_1 removed [ 139.246578][ T12] team0 (unregistering): Port device team_slave_0 removed [ 139.722286][ T7600] netlink: 72 bytes leftover after parsing attributes in process `syz.3.413'. [ 139.751160][ T7602] netlink: 36 bytes leftover after parsing attributes in process `syz.4.414'. [ 139.979833][ T7613] netlink: 40 bytes leftover after parsing attributes in process `syz.2.417'. [ 140.026578][ T7614] netlink: 8 bytes leftover after parsing attributes in process `syz.1.415'. [ 140.108513][ T7611] netlink: 'syz.3.416': attribute type 29 has an invalid length. [ 140.125895][ T7618] netlink: 'syz.3.416': attribute type 29 has an invalid length. [ 140.141744][ T7489] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.155421][ T7611] unsupported nla_type 58 [ 140.184860][ T7489] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.192131][ T7489] bridge_slave_0: entered allmulticast mode [ 140.224772][ T5845] Bluetooth: hci1: command tx timeout [ 140.250969][ T7489] bridge_slave_0: entered promiscuous mode [ 140.274332][ T7489] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.317532][ T7489] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.364896][ T7489] bridge_slave_1: entered allmulticast mode [ 140.393152][ T7489] bridge_slave_1: entered promiscuous mode [ 140.408594][ T7627] __nla_validate_parse: 3 callbacks suppressed [ 140.408611][ T7627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.421'. [ 140.436914][ T7625] netlink: 432 bytes leftover after parsing attributes in process `syz.2.420'. [ 140.470556][ T7617] bond1: entered promiscuous mode [ 140.476596][ T7617] bond1: entered allmulticast mode [ 140.482192][ T7617] 8021q: adding VLAN 0 to HW filter on device bond1 [ 140.722466][ T7489] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.800255][ T7489] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 140.952349][ T7489] team0: Port device team_slave_0 added [ 140.969428][ T7489] team0: Port device team_slave_1 added [ 141.023443][ T7650] netlink: 20 bytes leftover after parsing attributes in process `syz.1.426'. [ 141.070495][ T7489] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 141.077975][ T7489] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.129354][ T7489] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 141.148078][ T7489] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 141.159006][ T7489] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 141.192521][ T7489] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 141.378006][ T7489] hsr_slave_0: entered promiscuous mode [ 141.414968][ T7489] hsr_slave_1: entered promiscuous mode [ 141.421374][ T7489] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 141.464970][ T7489] Cannot create hsr debugfs directory [ 141.511963][ T7669] netlink: 40 bytes leftover after parsing attributes in process `syz.1.430'. [ 141.970437][ T7682] netlink: 8 bytes leftover after parsing attributes in process `syz.1.432'. [ 142.107770][ T7693] x_tables: arp_tables: MARK.2 target: invalid size 8 (kernel) != (user) 0 [ 142.304815][ T5845] Bluetooth: hci1: command tx timeout [ 142.905084][ T7729] tls_set_device_offload_rx: netdev not found [ 143.002813][ T7736] netlink: 40 bytes leftover after parsing attributes in process `syz.1.448'. [ 143.365717][ T7753] netlink: 4 bytes leftover after parsing attributes in process `syz.1.451'. [ 143.393146][ T7489] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 143.430731][ T7489] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 143.495764][ T7489] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 143.541538][ T7489] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 143.895789][ T7489] 8021q: adding VLAN 0 to HW filter on device bond0 [ 144.004516][ T7489] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.062167][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.069390][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.113934][ T5905] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.121192][ T5905] bridge0: port 2(bridge_slave_1) entered forwarding state [ 144.385860][ T5845] Bluetooth: hci1: command tx timeout [ 144.416239][ T7797] netlink: 40 bytes leftover after parsing attributes in process `syz.4.461'. [ 144.614006][ T7804] pimreg3: entered allmulticast mode [ 144.623818][ T7805] netlink: 76 bytes leftover after parsing attributes in process `syz.1.462'. [ 144.967105][ T7822] netlink: 'syz.3.468': attribute type 1 has an invalid length. [ 145.014806][ T7822] netlink: 24 bytes leftover after parsing attributes in process `syz.3.468'. [ 145.128349][ T7833] netlink: 'syz.4.471': attribute type 8 has an invalid length. [ 145.178100][ T7489] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.319060][ T7489] veth0_vlan: entered promiscuous mode [ 145.354003][ T7489] veth1_vlan: entered promiscuous mode [ 145.380608][ T7842] tipc: MTU too low for tipc bearer [ 145.460862][ T7489] veth0_macvtap: entered promiscuous mode [ 145.470323][ T7847] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 145.491684][ T7489] veth1_macvtap: entered promiscuous mode [ 145.573346][ T7489] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.631979][ T7489] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.665656][ T7489] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.684832][ T7489] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.709216][ T7489] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.726966][ T7489] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.060692][ T1139] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.097145][ T1139] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.223457][ T7882] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 146.294456][ T5886] hid-generic 0005:0B57:0009.0001: unknown main item tag 0x0 [ 146.311254][ T5886] hid-generic 0005:0B57:0009.0001: hidraw0: BLUETOOTH HID v0.09 Device [syz1] on aa:aa:aa:aa:aa:aa [ 146.332137][ T7888] bridge_slave_0: left allmulticast mode [ 146.390774][ T7888] bridge_slave_0: left promiscuous mode [ 146.417682][ T7888] bridge0: port 1(bridge_slave_0) entered disabled state [ 146.441936][ T7888] bridge_slave_1: left allmulticast mode [ 146.471928][ T7888] bridge_slave_1: left promiscuous mode [ 146.477896][ T7888] bridge0: port 2(bridge_slave_1) entered disabled state [ 146.537415][ T7888] team0: Port device team_slave_1 removed [ 146.547031][ T7888] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 146.556116][ T7888] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 146.572290][ T7888] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 146.588460][ T7888] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 146.624520][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 146.637145][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 146.931325][ T7909] kobject: kobject_add_internal failed for queues (error: -2 parent: bnep0) [ 146.953296][ T7909] ================================================================== [ 146.961407][ T7909] BUG: KASAN: slab-use-after-free in cfusbl_device_notify+0x150/0x6a0 [ 146.969618][ T7909] Read of size 8 at addr ffff888024148c50 by task syz.1.486/7909 [ 146.977359][ T7909] [ 146.979726][ T7909] CPU: 0 UID: 0 PID: 7909 Comm: syz.1.486 Not tainted 6.15.0-rc5-syzkaller-00163-g09db7a4d287d #0 PREEMPT(full) [ 146.979750][ T7909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 146.979766][ T7909] Call Trace: [ 146.979777][ T7909] [ 146.979786][ T7909] dump_stack_lvl+0x189/0x250 [ 146.979815][ T7909] ? __virt_addr_valid+0x18c/0x540 [ 146.979837][ T7909] ? rcu_is_watching+0x15/0xb0 [ 146.979864][ T7909] ? __kasan_check_byte+0x12/0x40 [ 146.979886][ T7909] ? __pfx_dump_stack_lvl+0x10/0x10 [ 146.979910][ T7909] ? rcu_is_watching+0x15/0xb0 [ 146.979938][ T7909] ? lock_release+0x4b/0x3e0 [ 146.979966][ T7909] ? __virt_addr_valid+0x18c/0x540 [ 146.979996][ T7909] ? __virt_addr_valid+0x469/0x540 [ 146.980021][ T7909] print_report+0xb4/0x290 [ 146.980044][ T7909] ? cfusbl_device_notify+0x150/0x6a0 [ 146.980071][ T7909] kasan_report+0x118/0x150 [ 146.980095][ T7909] ? cfusbl_device_notify+0x150/0x6a0 [ 146.980127][ T7909] cfusbl_device_notify+0x150/0x6a0 [ 146.980154][ T7909] ? net_generic+0x1e/0x240 [ 146.980180][ T7909] ? __pfx_cfusbl_device_notify+0x10/0x10 [ 146.980208][ T7909] ? caif_device_notify+0x250/0xfc0 [ 146.980236][ T7909] ? smc_pnet_netdev_event+0x3b5/0x6c0 [ 146.980267][ T7909] notifier_call_chain+0x1b3/0x3e0 [ 146.980290][ T7909] register_netdevice+0x12ee/0x1af0 [ 146.980325][ T7909] ? __pfx_register_netdevice+0x10/0x10 [ 146.980354][ T7909] ? __asan_memset+0x22/0x50 [ 146.980372][ T7909] ? dev_addr_mod+0x2ce/0x3d0 [ 146.980395][ T7909] register_netdev+0x40/0x60 [ 146.980415][ T7909] bnep_add_connection+0x6bf/0xbf0 [ 146.980438][ T7909] ? __pfx_bnep_add_connection+0x10/0x10 [ 146.980456][ T7909] ? __fget_files+0x3a0/0x420 [ 146.980480][ T7909] do_bnep_sock_ioctl+0x40e/0x640 [ 146.980500][ T7909] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 146.980522][ T7909] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 146.980549][ T7909] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 146.980575][ T7909] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 146.980603][ T7909] sock_do_ioctl+0xd9/0x300 [ 146.980628][ T7909] ? __pfx_sock_do_ioctl+0x10/0x10 [ 146.980651][ T7909] ? __lock_acquire+0xaac/0xd20 [ 146.980676][ T7909] sock_ioctl+0x576/0x790 [ 146.980699][ T7909] ? __pfx_sock_ioctl+0x10/0x10 [ 146.980728][ T7909] ? __fget_files+0x3a0/0x420 [ 146.980747][ T7909] ? __fget_files+0x2a/0x420 [ 146.980767][ T7909] ? bpf_lsm_file_ioctl+0x9/0x20 [ 146.980786][ T7909] ? __pfx_sock_ioctl+0x10/0x10 [ 146.980808][ T7909] __se_sys_ioctl+0xf9/0x170 [ 146.980823][ T7909] do_syscall_64+0xf6/0x210 [ 146.980842][ T7909] ? clear_bhb_loop+0x45/0xa0 [ 146.980860][ T7909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 146.980874][ T7909] RIP: 0033:0x7fd5d078e969 [ 146.980893][ T7909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 146.980906][ T7909] RSP: 002b:00007fd5d1530038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 146.980929][ T7909] RAX: ffffffffffffffda RBX: 00007fd5d09b6080 RCX: 00007fd5d078e969 [ 146.980940][ T7909] RDX: 0000200000000540 RSI: 00000000400442c8 RDI: 0000000000000048 [ 146.980950][ T7909] RBP: 00007fd5d0810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 146.980960][ T7909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 146.980968][ T7909] R13: 0000000000000000 R14: 00007fd5d09b6080 R15: 00007ffda946c5f8 [ 146.980991][ T7909] [ 146.980996][ T7909] [ 147.311000][ T7909] Allocated by task 5836: [ 147.315344][ T7909] kasan_save_track+0x3e/0x80 [ 147.320040][ T7909] __kasan_kmalloc+0x93/0xb0 [ 147.324639][ T7909] __kmalloc_cache_noprof+0x230/0x3d0 [ 147.330023][ T7909] __hci_conn_add+0x1ed/0x1aa0 [ 147.334793][ T7909] hci_conn_request_evt+0x528/0xb50 [ 147.339995][ T7909] hci_event_packet+0x7fb/0x1270 [ 147.344939][ T7909] hci_rx_work+0x46a/0xe80 [ 147.349359][ T7909] process_scheduled_works+0xadb/0x17a0 [ 147.354919][ T7909] worker_thread+0x8a0/0xda0 [ 147.359515][ T7909] kthread+0x70e/0x8a0 [ 147.363600][ T7909] ret_from_fork+0x4b/0x80 [ 147.368035][ T7909] ret_from_fork_asm+0x1a/0x30 [ 147.372807][ T7909] [ 147.375134][ T7909] Freed by task 7909: [ 147.379108][ T7909] kasan_save_track+0x3e/0x80 [ 147.383788][ T7909] kasan_save_free_info+0x46/0x50 [ 147.388836][ T7909] __kasan_slab_free+0x62/0x70 [ 147.393600][ T7909] kfree+0x193/0x440 [ 147.397496][ T7909] device_release+0x99/0x1c0 [ 147.402093][ T7909] kobject_put+0x228/0x480 [ 147.406529][ T7909] device_del+0x7a4/0x8e0 [ 147.410864][ T7909] netdev_register_kobject+0x290/0x2f0 [ 147.416333][ T7909] register_netdevice+0x126c/0x1af0 [ 147.421543][ T7909] register_netdev+0x40/0x60 [ 147.426155][ T7909] bnep_add_connection+0x6bf/0xbf0 [ 147.431287][ T7909] do_bnep_sock_ioctl+0x40e/0x640 [ 147.436409][ T7909] sock_do_ioctl+0xd9/0x300 [ 147.441013][ T7909] sock_ioctl+0x576/0x790 [ 147.445352][ T7909] __se_sys_ioctl+0xf9/0x170 [ 147.449948][ T7909] do_syscall_64+0xf6/0x210 [ 147.454458][ T7909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.460353][ T7909] [ 147.462701][ T7909] Last potentially related work creation: [ 147.468418][ T7909] kasan_save_stack+0x3e/0x60 [ 147.473101][ T7909] kasan_record_aux_stack+0xbc/0xd0 [ 147.478306][ T7909] insert_work+0x3d/0x330 [ 147.482639][ T7909] __queue_work+0xcfc/0xfe0 [ 147.487172][ T7909] queue_delayed_work_on+0x18b/0x280 [ 147.492454][ T7909] l2cap_chan_del+0x285/0x5e0 [ 147.497134][ T7909] l2cap_conn_del+0x388/0x680 [ 147.501808][ T7909] hci_conn_hash_flush+0x10a/0x230 [ 147.506917][ T7909] hci_dev_close_sync+0xaef/0x1330 [ 147.512048][ T7909] hci_unregister_dev+0x206/0x500 [ 147.517089][ T7909] vhci_release+0x80/0xd0 [ 147.521416][ T7909] __fput+0x449/0xa70 [ 147.525406][ T7909] task_work_run+0x1d1/0x260 [ 147.530001][ T7909] do_exit+0x8d6/0x2550 [ 147.534159][ T7909] do_group_exit+0x21c/0x2d0 [ 147.538749][ T7909] __x64_sys_exit_group+0x3f/0x40 [ 147.543796][ T7909] x64_sys_call+0x21ba/0x21c0 [ 147.548474][ T7909] do_syscall_64+0xf6/0x210 [ 147.552979][ T7909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.558875][ T7909] [ 147.561196][ T7909] The buggy address belongs to the object at ffff888024148000 [ 147.561196][ T7909] which belongs to the cache kmalloc-8k of size 8192 [ 147.575243][ T7909] The buggy address is located 3152 bytes inside of [ 147.575243][ T7909] freed 8192-byte region [ffff888024148000, ffff88802414a000) [ 147.589208][ T7909] [ 147.591525][ T7909] The buggy address belongs to the physical page: [ 147.597929][ T7909] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x24148 [ 147.606687][ T7909] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 147.615177][ T7909] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 147.622716][ T7909] page_type: f5(slab) [ 147.626715][ T7909] raw: 00fff00000000040 ffff88801a042280 dead000000000100 dead000000000122 [ 147.635299][ T7909] raw: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 147.643885][ T7909] head: 00fff00000000040 ffff88801a042280 dead000000000100 dead000000000122 [ 147.652559][ T7909] head: 0000000000000000 0000000000020002 00000000f5000000 0000000000000000 [ 147.661228][ T7909] head: 00fff00000000003 ffffea0000905201 00000000ffffffff 00000000ffffffff [ 147.669896][ T7909] head: ffffffffffffffff 0000000000000000 00000000ffffffff 0000000000000008 [ 147.678564][ T7909] page dumped because: kasan: bad access detected [ 147.685199][ T7909] page_owner tracks the page as allocated [ 147.690920][ T7909] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 6606, tgid 6606 (syz-executor), ts 116453898880, free_ts 116429314479 [ 147.712490][ T7909] post_alloc_hook+0x1d8/0x230 [ 147.717361][ T7909] get_page_from_freelist+0x21ce/0x22b0 [ 147.722926][ T7909] __alloc_frozen_pages_noprof+0x181/0x370 [ 147.728751][ T7909] alloc_pages_mpol+0x232/0x4a0 [ 147.733631][ T7909] allocate_slab+0x8a/0x3b0 [ 147.738138][ T7909] ___slab_alloc+0xbfc/0x1480 [ 147.742826][ T7909] __kmalloc_cache_noprof+0x296/0x3d0 [ 147.748205][ T7909] macvlan_common_newlink+0x5a3/0x1980 [ 147.753668][ T7909] macvtap_newlink+0x13c/0x1b0 [ 147.758435][ T7909] rtnl_newlink_create+0x305/0xaf0 [ 147.763554][ T7909] rtnl_newlink+0x16d6/0x1c70 [ 147.768234][ T7909] rtnetlink_rcv_msg+0x7cc/0xb70 [ 147.773179][ T7909] netlink_rcv_skb+0x219/0x490 [ 147.777944][ T7909] netlink_unicast+0x758/0x8d0 [ 147.782706][ T7909] netlink_sendmsg+0x805/0xb30 [ 147.787471][ T7909] __sock_sendmsg+0x219/0x270 [ 147.792149][ T7909] page last free pid 6770 tgid 6770 stack trace: [ 147.798469][ T7909] __free_frozen_pages+0xb0e/0xcd0 [ 147.803587][ T7909] __slab_free+0x326/0x400 [ 147.808034][ T7909] qlist_free_all+0x9a/0x140 [ 147.812629][ T7909] kasan_quarantine_reduce+0x148/0x160 [ 147.818099][ T7909] __kasan_slab_alloc+0x22/0x80 [ 147.822958][ T7909] kmem_cache_alloc_noprof+0x1c1/0x3c0 [ 147.828435][ T7909] getname_flags+0xb8/0x540 [ 147.832964][ T7909] vfs_fstatat+0x43/0x160 [ 147.837301][ T7909] __x64_sys_newfstatat+0x11c/0x1a0 [ 147.842507][ T7909] do_syscall_64+0xf6/0x210 [ 147.847016][ T7909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.852912][ T7909] [ 147.855239][ T7909] Memory state around the buggy address: [ 147.860869][ T7909] ffff888024148b00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 147.868937][ T7909] ffff888024148b80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 147.877001][ T7909] >ffff888024148c00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 147.885057][ T7909] ^ [ 147.891741][ T7909] ffff888024148c80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 147.899805][ T7909] ffff888024148d00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 147.907862][ T7909] ================================================================== [ 147.964716][ T7909] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 147.971973][ T7909] CPU: 1 UID: 0 PID: 7909 Comm: syz.1.486 Not tainted 6.15.0-rc5-syzkaller-00163-g09db7a4d287d #0 PREEMPT(full) [ 147.983898][ T7909] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 147.993986][ T7909] Call Trace: [ 147.997303][ T7909] [ 148.000349][ T7909] dump_stack_lvl+0x99/0x250 [ 148.004961][ T7909] ? __asan_memcpy+0x40/0x70 [ 148.009588][ T7909] ? __pfx_dump_stack_lvl+0x10/0x10 [ 148.014802][ T7909] ? __pfx__printk+0x10/0x10 [ 148.019401][ T7909] panic+0x2db/0x790 [ 148.023310][ T7909] ? __pfx_panic+0x10/0x10 [ 148.027740][ T7909] ? _raw_spin_unlock_irqrestore+0xfd/0x110 [ 148.033641][ T7909] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 148.039971][ T7909] ? print_memory_metadata+0x314/0x400 [ 148.045438][ T7909] ? cfusbl_device_notify+0x150/0x6a0 [ 148.050821][ T7909] check_panic_on_warn+0x89/0xb0 [ 148.055777][ T7909] ? cfusbl_device_notify+0x150/0x6a0 [ 148.061156][ T7909] end_report+0x78/0x160 [ 148.065406][ T7909] kasan_report+0x129/0x150 [ 148.069918][ T7909] ? cfusbl_device_notify+0x150/0x6a0 [ 148.075304][ T7909] cfusbl_device_notify+0x150/0x6a0 [ 148.080514][ T7909] ? net_generic+0x1e/0x240 [ 148.085028][ T7909] ? __pfx_cfusbl_device_notify+0x10/0x10 [ 148.090760][ T7909] ? caif_device_notify+0x250/0xfc0 [ 148.095970][ T7909] ? smc_pnet_netdev_event+0x3b5/0x6c0 [ 148.101442][ T7909] notifier_call_chain+0x1b3/0x3e0 [ 148.106567][ T7909] register_netdevice+0x12ee/0x1af0 [ 148.111781][ T7909] ? __pfx_register_netdevice+0x10/0x10 [ 148.117334][ T7909] ? __asan_memset+0x22/0x50 [ 148.121921][ T7909] ? dev_addr_mod+0x2ce/0x3d0 [ 148.126608][ T7909] register_netdev+0x40/0x60 [ 148.131211][ T7909] bnep_add_connection+0x6bf/0xbf0 [ 148.136338][ T7909] ? __pfx_bnep_add_connection+0x10/0x10 [ 148.141981][ T7909] ? __fget_files+0x3a0/0x420 [ 148.146674][ T7909] do_bnep_sock_ioctl+0x40e/0x640 [ 148.151741][ T7909] ? __pfx_do_bnep_sock_ioctl+0x10/0x10 [ 148.157298][ T7909] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 148.162949][ T7909] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 148.168594][ T7909] ? tomoyo_path_number_perm+0x1bc/0x5a0 [ 148.174240][ T7909] sock_do_ioctl+0xd9/0x300 [ 148.178751][ T7909] ? __pfx_sock_do_ioctl+0x10/0x10 [ 148.183876][ T7909] ? __lock_acquire+0xaac/0xd20 [ 148.188742][ T7909] sock_ioctl+0x576/0x790 [ 148.193086][ T7909] ? __pfx_sock_ioctl+0x10/0x10 [ 148.197948][ T7909] ? __fget_files+0x3a0/0x420 [ 148.202640][ T7909] ? __fget_files+0x2a/0x420 [ 148.207237][ T7909] ? bpf_lsm_file_ioctl+0x9/0x20 [ 148.212182][ T7909] ? __pfx_sock_ioctl+0x10/0x10 [ 148.217043][ T7909] __se_sys_ioctl+0xf9/0x170 [ 148.221639][ T7909] do_syscall_64+0xf6/0x210 [ 148.226151][ T7909] ? clear_bhb_loop+0x45/0xa0 [ 148.230834][ T7909] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.236738][ T7909] RIP: 0033:0x7fd5d078e969 [ 148.241155][ T7909] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 148.260774][ T7909] RSP: 002b:00007fd5d1530038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 148.269202][ T7909] RAX: ffffffffffffffda RBX: 00007fd5d09b6080 RCX: 00007fd5d078e969 [ 148.277189][ T7909] RDX: 0000200000000540 RSI: 00000000400442c8 RDI: 0000000000000048 [ 148.285164][ T7909] RBP: 00007fd5d0810ab1 R08: 0000000000000000 R09: 0000000000000000 [ 148.293135][ T7909] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.301105][ T7909] R13: 0000000000000000 R14: 00007fd5d09b6080 R15: 00007ffda946c5f8 [ 148.309085][ T7909] [ 148.312257][ T7909] Kernel Offset: disabled [ 148.316585][ T7909] Rebooting in 86400 seconds..