last executing test programs: 5.081161651s ago: executing program 3 (id=831): socket$nl_route(0x10, 0x3, 0x0) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000640)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x54, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x18, 0x11, 0x0, 0x1, @target={{0xb}, @val={0x8, 0x2, 0x0, 0x1, [@NFTA_TARGET_INFO={0x4}]}}}]}], {0x14, 0x10}}, 0x9c}}, 0x0) setsockopt$inet6_IPV6_ADDRFORM(0xffffffffffffffff, 0x29, 0x1, &(0x7f0000000700), 0x4) r1 = socket$packet(0x11, 0x2, 0x300) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa20000000000000702"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000740)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000780), 0x4) recvmsg$unix(r3, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000800)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r4, 0xff06, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000940)=@base={0x5, 0x8, 0x4, 0x8, 0x1}, 0x50) r5 = socket$inet6(0x2d, 0x2, 0x0) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r5, 0x11d, 0x76, 0x0, 0x0) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)=ANY=[@ANYBLOB="4400ecff0f00ffff25bd7000fddbdf2500000000", @ANYRES32=0x0, @ANYBLOB="1724000021200000240012800c0001006d6163766c616ef314000280080003000300000008"], 0x44}, 0x1, 0x0, 0x0, 0x20004000}, 0x8000002) sendmsg$nl_route(r6, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c0000001800010d00000000000000850a000000000000000500000014000500200100000000000000000100000000001c0009"], 0x4c}}, 0x4000040) sendmmsg(r6, &(0x7f0000000500), 0x4000000000001f2, 0xfc) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="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"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000180)=r7, 0x4) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a4c000000090a010400000000000000000a0000040900010073797a310000000008000540000000020900020073797a310000000008000a40fffffffc080003400000001408000c4000000e45400000000c0a010100000000000000000a0000060900020073797a31000000000900010073797a310000000014000380100000800c000180060001"], 0xb4}, 0x1, 0x0, 0x0, 0x4000850}, 0x40) 4.518416633s ago: executing program 2 (id=841): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000fd0f000002"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f9ffffffb703000000080000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x12, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x94) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) (async) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x1000001, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) getsockopt$CAN_RAW_FD_FRAMES(r1, 0x65, 0x5, 0x0, &(0x7f0000000000)) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x0, 0xb, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}}, 0x4000) (async) sendmsg$NFNL_MSG_COMPAT_GET(r2, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x14, 0x0, 0xb, 0x101, 0x0, 0x0, {0x0, 0x0, 0x6}}, 0x14}}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000200)=0x1, 0x4) (async) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r2, 0x10e, 0x4, &(0x7f0000000200)=0x1, 0x4) 4.388549757s ago: executing program 2 (id=845): socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f00000000c0)=[{&(0x7f0000000100)=""/164, 0xa4}], 0x1, &(0x7f0000000a80)=""/4096, 0x1000}, 0x3}], 0x1, 0x0, 0x0) write(r1, &(0x7f0000001a80)="d3", 0x1) r2 = socket(0x2b, 0x80801, 0x1) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="9feb0100180000000000000010000009006cbb0100000002000000000000000000000100000000000000"], 0x0, 0x2a, 0x0, 0x1}, 0x20) bind$tipc(r2, &(0x7f00000001c0)=@name={0x1e, 0x2, 0x3, {{0x2, 0x2}, 0x3}}, 0x10) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$IPVS_CMD_NEW_SERVICE(r3, &(0x7f0000000340)={0x0, 0x60, &(0x7f00000005c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000010000004000018007000600666f00000800080000000000060001000200000008000500000000000c0007000000000000000000080009000000000008000b"], 0x54}}, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000580)={&(0x7f00000002c0), 0xc, &(0x7f0000000540)={&(0x7f0000000500)={0x30, r4, 0x30, 0x70bd27, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DEST={0x1c, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_TUN_TYPE={0x5}, @IPVS_DEST_ATTR_TUN_FLAGS={0x6, 0xf, 0x8}, @IPVS_DEST_ATTR_ACTIVE_CONNS={0x8, 0x7, 0x7}]}]}, 0x30}}, 0x0) ioctl$SIOCPNDELRESOURCE(r2, 0x89ef, &(0x7f0000000200)=0x7fff) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x18, 0xe, &(0x7f0000000a00)=ANY=[@ANYBLOB="18080000d0ff0000000000003e00000018000000", @ANYRES8=r1, @ANYBLOB="00000000000000006608000000000000180100002028782500000000002020207b1bf0fd00000000bfa100000000000007010000f8fffeffb702000008000000b50afbff00000000850000000600000095"], &(0x7f0000000000)='GPL\x00', 0xc, 0x0, 0x0, 0x0, 0xc}, 0x94) 4.221395724s ago: executing program 2 (id=848): bpf$PROG_LOAD(0x5, &(0x7f0000004800)={0xa, 0x2, &(0x7f00000048c0)=@raw=[@generic={0x85, 0x0, 0x2, 0x0, 0x19cd2}, @generic={0x95}], &(0x7f0000004900)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x17, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000100)={0x20, 0x10, 0x701, 0x0, 0x0, {0xa}, [@typed={0xc, 0x2, 0x0, 0x0, @str='nl80211\x00'}]}, 0x20}}, 0x0) r1 = socket$nl_sock_diag(0x10, 0x3, 0x4) (async) r2 = socket$inet_sctp(0x2, 0x1, 0x84) bind$inet(r2, &(0x7f0000000280)={0x2, 0x4e22, @empty}, 0x10) listen(r2, 0x9) r3 = socket$inet_sctp(0x2, 0x5, 0x84) r4 = socket(0x2b, 0x1, 0x0) ioctl$sock_TIOCOUTQ(r4, 0x5411, &(0x7f0000000400)) (async) sendto$inet(r3, &(0x7f00000002c0)="ab", 0xfffd, 0xc1, &(0x7f0000000300)={0x2, 0x4e22, @loopback}, 0x10) (async) readv(r1, &(0x7f0000000340)=[{&(0x7f0000002600)=""/4089, 0xff9}, {&(0x7f0000003600)=""/4087, 0xff7}], 0x2) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000380)={r2}) sendmsg$IPCTNL_MSG_EXP_DELETE(r5, &(0x7f00000047c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000004780)={&(0x7f00000046c0)={0x98, 0x2, 0x2, 0x801, 0x0, 0x0, {0x7, 0x0, 0x4}, [@CTA_EXPECT_MASTER={0x84, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x41}}, {0x14, 0x4, @remote}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @dev={0xac, 0x14, 0x14, 0x30}}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}]}]}, 0x98}, 0x1, 0x0, 0x0, 0x20000002}, 0x48084) sendmsg$TCPDIAG_GETSOCK(r1, &(0x7f0000004600)={0x0, 0x0, &(0x7f0000004640)={&(0x7f0000004680)=ANY=[@ANYBLOB="4c000000140011f225bd7000fddbcf250284", @ANYRES32], 0x4c}, 0x1, 0x0, 0x0, 0x48000}, 0x40) (async) recvmmsg(r0, &(0x7f0000000140)=[{{0x0, 0x0, &(0x7f0000000200)=[{&(0x7f0000000240)=""/51, 0x33}, {&(0x7f0000000500)=""/4096, 0x1000}], 0x2}}, {{0x0, 0x0, &(0x7f0000001500)=[{&(0x7f0000001540)=""/4096, 0x1000}, {&(0x7f0000002540)=""/191, 0xbf}], 0x2}}, {{0x0, 0x0, 0x0}}], 0x3, 0x10000, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xa, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x6b, 0x11, 0x3b}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x53, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6}, 0x94) 4.179539275s ago: executing program 0 (id=849): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x660, 0x65, 0x200, 0x70bd2a, 0x25dfdbfc, {0x0, 0x0, 0x0, 0x0, {0x8, 0x2}, {0x0, 0x1}, {0x5}}, [@filter_kind_options=@f_bpf={{0x8}, {0x134, 0x2, [@TCA_BPF_ACT={0x130, 0x1, [@m_simple={0x12c, 0x1, 0x0, 0x0, {{0xb}, {0x70, 0x2, 0x0, 0x1, [@TCA_DEF_PARMS={0x18, 0x2, {0x2, 0x10, 0x6, 0xce6b, 0x6}}, @TCA_DEF_PARMS={0x18, 0x2, {0x0, 0x24aa7000, 0x7, 0x8, 0x80000001}}, @TCA_DEF_PARMS={0x18, 0x2, {0x876f, 0x96, 0x3, 0x40, 0x6}}, @TCA_DEF_DATA={0xa, 0x3, '#%@:/\x00'}, @TCA_DEF_DATA={0xd, 0x3, 'matchall\x00'}, @TCA_DEF_DATA={0x5, 0x3, '\x00'}]}, {0x91, 0x6, "9209be6ac2eb68ec44c03ad03ccfd5c9aff753ae7cef446e9abdc2009e245df08fa6cf4268a294d87a0186536d0c2458f0e060a1f4dfab45c4880975e027452a67ff09dc0cda2d51a28cf3834caa7aa64015620886e3c095d93664d00664ede4714e13cbf7a559b27b8e74bc4f58e2418eea9cf3966ac82d194b992695034782aaece271e1d165a896011eaa09"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x5, 0x2}}}}]}]}}, @filter_kind_options=@f_matchall={{0xd}, {0x4f0, 0x2, [@TCA_MATCHALL_FLAGS={0x8, 0x3, 0x3}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x1, 0xf}}, @TCA_MATCHALL_ACT={0x1fc, 0x2, [@m_connmark={0x1f8, 0xa, 0x0, 0x0, {{0xd}, {0xe4, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x0, 0xffffffffffffffff, 0x9, 0x4}, 0x7}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x5, 0x8, 0x8, 0x3ff}, 0x3}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x4, 0x7, 0x3, 0x1800, 0x7fff}, 0x8001}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0xfffffff7, 0x2, 0x7, 0x7ff}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x200, 0x9, 0x20000000, 0x2, 0x800}, 0x38}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x71c, 0x6, 0x6, 0x41, 0x7}}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x0, 0x3, 0x3, 0x7, 0x2}, 0x2}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x5, 0x3, 0x3, 0x9, 0x9}, 0x7}}]}, {0xe5, 0x6, "68d5f9b35942b1a9b81011af8ef9f58903979090153440330e71926cf16dfa6a95a63229ec1e046036f5951acc832298a090af5f8dd4c4eda121fe5c11e2758323235d7d4065e102fca2803e8455bbe375423a5083d857379e566a6b55eaa2a53c32659a3eed4669754e022d685f3904836ee46af5a86c45f1a6ba4ad03ce912f02efa3d485456cdbcd0db56ba63218491a6c93c649f1201f2dcdfb54f743ff852af6a7de13cd0d2252b2d6743c0774446a19f08b9f2c77f986ea287dabf7581d911194d13e1f29884a2081bbf43fce2a1a2b767905dd62ad427703c4290d86deb"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1, 0x4}}}}]}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_FLAGS={0x8}, @TCA_MATCHALL_CLASSID={0x8, 0x1, {0x4, 0xf}}, @TCA_MATCHALL_ACT={0x2c8, 0x2, [@m_csum={0x188, 0x0, 0x0, 0x0, {{0x9}, {0x74, 0x2, 0x0, 0x1, [@TCA_CSUM_PARMS={0x1c, 0x1, {{0x400000, 0x47, 0x3, 0x80000000, 0x6}, 0x3c}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x7, 0x40, 0x0, 0xffffffff, 0x2}, 0xb}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x8, 0x5, 0xfffffffffffffffc, 0x8, 0x3}, 0x4b}}, @TCA_CSUM_PARMS={0x1c, 0x1, {{0x530e, 0x9, 0x20000000, 0x7, 0xffffffff}, 0x1}}]}, {0xe9, 0x6, "8e742964a8bbfb3154844346644898de0354ee45597bbff6c1b4802726b2ca8b75ce550388c84cc686666dc0fd3ccd01f955cd351f6e0aee4e337b55bb5388a3b58420edfc59ade1349d7cc503101571895e677b64e3bfb9a5173fb1e737612ff18132f5bd2bc66d3b55ecbba2b5457b250035617dcdbdaec682f131f66bed12f8c9f14ba127f64337200b93d2baa76f2745a3aef055faebdf58456bed30345b2e556053be34feea35f858cc9db91981b08dd47caadf768a0b6974308b6864e3b32b95e11458f632c8a4b3de3d407dd970adc90d26a46a602356397bad1f3b4f5cae0b262f"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x3, 0x3}}}}, @m_vlan={0x13c, 0x15, 0x0, 0x0, {{0x9}, {0x3c, 0x2, 0x0, 0x1, [@TCA_VLAN_PARMS={0x1c, 0x2, {{0x1000, 0x40, 0x6, 0x2, 0xf}, 0x1}}, @TCA_VLAN_PARMS={0x1c, 0x2, {{0x6, 0x25a, 0x0, 0x80000001, 0x800}, 0x2}}]}, {0xd6, 0x6, "19a3953d78f1563aa910b5ab1c345795a9c5fdb59e62e379663a63a2410c14f25058686dc1f35162d1d61c9ef33f76b41308aa85786484bbc8df8cd7d6f79c7a8afa3f46c074bafc6b8e22601dba54f54cf84920df14f7fa820566ce9a7c7c8be49f40bb7b2f0cebdd8fb8e3d463ca5ef3a3b42ee142b1b380dd4e27c637e5eed7dc23e893606abf117d1645a88f80bd0099ddaaf047e8176c59ee4ad3dd6c16189178332362837467598d104a879c0c3e38990b7dbb96fafdf130365f21370f37f14adeb5658a62010e4723c70132a7d5e7"}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x1}}}}]}]}}]}, 0x660}, 0x1, 0x0, 0x0, 0x2404c080}, 0x20000080) r0 = socket(0x10, 0x803, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="6c00000008060104db406e3e0004000200000000100003006269746d61703a706f72740005000400000000000900020073797a32000000000500050000006c000500010006"], 0x6c}}, 0x0) r2 = socket$inet6(0xa, 0x2, 0x3a) setsockopt$inet6_int(r2, 0x29, 0xb, &(0x7f0000000300)=0x6, 0x64) sendto$inet6(r2, &(0x7f0000000340)="800037bbfa9ba1ce", 0x8, 0x48840, &(0x7f0000000540)={0xa, 0x1, 0x0, @loopback}, 0x1c) sendmsg$key(0xffffffffffffffff, &(0x7f0000000d00)={0x0, 0x0, &(0x7f0000000d40)={0x0, 0x22b}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000d80)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000e00)=ANY=[@ANYBLOB="020e000010000000000000000004830008001200000001000000ff000000400000001ea0abff7f00000000000000d41f9ab9000100700000ebdf000008000000c4fc0000100000000000e2ffff1c004f030006000020080002000080f5008e24ce6e4ae300a5000003000500001e001e02"], 0x80}}, 0x4814) r3 = socket$key(0xf, 0x3, 0x2) sendmmsg(r3, &(0x7f0000000e80), 0x229ffa1c4ce5369, 0x0) r4 = socket(0x10, 0x3, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f0000000780), r6) getsockname$packet(r6, &(0x7f0000000880)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000008c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000a00)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r7, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a80)={&(0x7f0000000ac0)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x2, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x7fffffff, 0x1}}]}}]}, 0x48}}, 0x8d0) sendmsg$nl_route(r5, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b80)={&(0x7f0000000bc0)=@can_delroute={0x54, 0x19, 0x400, 0x70bd2c, 0x25dfdbfb, {}, [@CGW_CS_XOR={0x8, 0x5, {0x7, 0xfffffffffffffff9, 0x7, 0x4}}, @CGW_DST_IF={0x8, 0xa, r7}, @CGW_MOD_XOR={0x15, 0x3, {{{0x2, 0x1, 0x1}, 0x8, 0x8cff5605425265a5, 0x0, 0x0, "1fa07befeaf8d94d"}, 0x1}}, @CGW_MOD_SET={0x15, 0x4, {{{0x2, 0x1}, 0x2, 0x2, 0x0, 0x0, "0c03290b9c02bd81"}, 0x7}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20000c00}, 0x20044894) sendmsg$nl_route_sched(r5, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c80)={&(0x7f0000000cc0)=@newtfilter={0xd8, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {0xc}, {0xfff2}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_bpf={{0x8}, {0xac, 0x2, [@TCA_BPF_ACT={0x4c}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}]}}]}, 0xd8}}, 0x0) r8 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r8, 0x6, 0x13, &(0x7f00000005c0)=0x100000001, 0x4) connect$inet6(r8, &(0x7f00000006c0)={0xa, 0x4e22, 0x1, @empty, 0x4}, 0x1c) setsockopt$SO_BINDTODEVICE_wg(r8, 0x1, 0x19, 0x0, 0x0) setsockopt$inet6_tcp_TCP_ULP(r8, 0x6, 0x1f, &(0x7f0000000700), 0x3) setsockopt$inet6_tcp_TLS_TX(r8, 0x11a, 0x2, &(0x7f0000000740)=@ccm_128={{0x303}, "51edef7214e4ff93", "42635001e90003a25f49631e467e1074", "6bbc39e1", "e01cf9ab6c03e72d"}, 0x28) recvmmsg(r2, &(0x7f0000000580)=[{{0x0, 0x0, 0x0}, 0xa569}], 0x1, 0x40010162, 0x0) sendto(r0, &(0x7f0000000040)="120000001200e7ef007b00000000000000a1", 0x12, 0x4044084, 0x0, 0x0) accept4$alg(r0, 0x0, 0x0, 0x80000) recvmmsg(r0, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0xffffffffffffff2f}}], 0x4000000000003b4, 0x2040000, &(0x7f0000003700)={0x77359400}) 4.171050497s ago: executing program 3 (id=850): r0 = socket$netlink(0x10, 0x3, 0x5) r1 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) ioctl$IOCTL_GET_NCIDEV_IDX(r1, 0x0, &(0x7f0000000100)=0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r3) sendmsg$NFC_CMD_DEV_UP(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)={0x1c, r4, 0x1, 0x123, 0x234, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r2}]}, 0x1c}}, 0x0) write$nci(r1, &(0x7f00000002c0)=@NCI_OP_CORE_RESET_RSP={0x0, 0x0, 0x2, 0x0, 0x3}, 0x6) write$nci(r1, &(0x7f0000000300)=@NCI_OP_CORE_INIT_RSP={0x0, 0x0, 0x2, 0x1, 0x11, {{}, {0x0, 0x0, 0xff}}}, 0x14) sendmsg$NFC_CMD_START_POLL(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000003c0)={0x14, r4, 0x1, 0x70bd29, 0x234}, 0x14}}, 0x8004) write$nci(r1, &(0x7f0000000400)=@NCI_OP_CORE_SET_CONFIG_RSP={0x0, 0x0, 0x2, 0x2, 0x2}, 0x5) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) getpeername$packet(r5, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0xfffffffffffffd46) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB="4800000010000305f8ffffff0000000000000000", @ANYRES32=0x0, @ANYBLOB="1111020031880000200012800b0001006d61637365630000100002800c0004000100000100c2800008000500", @ANYRES32=r6], 0x48}, 0x1, 0x0, 0x0, 0x48890}, 0x4000) 4.048939917s ago: executing program 2 (id=851): bpf$TOKEN_CREATE(0x24, &(0x7f0000000040), 0x8) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x14, 0x27, 0x1, 0x70bd2b, 0x25dfdbfc, {0x9}}, 0x14}}, 0x4004804) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="b4050000200080006110600000000000c60000000000000095000000000000009f332460916e6e893f1eeb0b723043c47c896ce0bce66a245ad99b8173d98cd824498949714ffaaca9f39817beb2de45406fb6db714e4b94bdae214fa68a0157eb3c00000000b6fc89398f2b9000f224891060017cfa6fa26fa7a34700458c60897d4a6148a1c11428607c40de60beac671e8e8fdecb03598aa623fa71f31bf0f871ab5c2ff88afc6002084e5b52710aee410e3e554d090d95983826fb8579c1fb47d2c5553d2ccb5fc5b51fe6b174ebd9907dcff414ed00000000"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000180), 0xffffffffffffffff) sendmsg$TIPC_CMD_RESET_LINK_STATS(r2, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x30, r3, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000080)={@map, r1, 0x5, 0x4}, 0x20) 3.897849589s ago: executing program 0 (id=853): getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(0xffffffffffffffff, 0x84, 0x1d, &(0x7f0000000000)={0x7, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000040)=0x20) setsockopt$inet_sctp_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={r1, 0x4}, 0x8) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$XFS_IOC_GETBMAP(r3, 0xc0205826, &(0x7f0000000100)={0x57, 0x1, 0xd0, 0x4}) ioctl$XFS_IOC_ATTRLIST_BY_HANDLE(r2, 0x4058587a, &(0x7f0000000280)={{r2, &(0x7f0000000140)='&&[,\x00', 0x406442, &(0x7f0000000180)={@_ha_fsid={[0x7, 0x1ff]}, {0x80, 0x9, 0x2, 0x4b}}, 0x80, &(0x7f00000001c0), &(0x7f0000000200)=0x2}, {[0x7fffffff, 0x1ff, 0x0, 0x6]}, 0x4, 0x12, &(0x7f0000000240)=""/18}) getsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, &(0x7f0000000300)={0x5, 0x208, 0x2, 0x7ff, r0}, &(0x7f0000000340)=0x10) sendmsg$nl_generic(r4, &(0x7f00000005c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000580)={&(0x7f00000003c0)={0x1a4, 0x32, 0x300, 0x70bd26, 0x25dfdbfd, {0x1c}, [@nested={0x84, 0x6e, 0x0, 0x1, [@typed={0xc, 0xdf, 0x0, 0x0, @u64=0x96}, @typed={0x72, 0x2d, 0x0, 0x0, @binary="9bcfa1d3d31a607acfd07fc6f251ce5128e69a3e49e0b0d272b8ec00f13349e97df4e2364694e1ec7ec2da30f65ca98c54cb6a04a011d49b42e205fa92c186ee638bd7076b661ca7ee7d8dd69f5fc4d5516f24ac6eb2da50e36c0bf3961c24637e6ac39119a87968d161f59394a9"}]}, @nested={0x14, 0x6, 0x0, 0x1, [@nested={0x4, 0xe}, @typed={0x8, 0x92, 0x0, 0x0, @ipv4=@private=0xa010101}, @nested={0x4, 0x8d}]}, @nested={0xe4, 0x1a, 0x0, 0x1, [@typed={0xe0, 0x164, 0x0, 0x0, @binary="0a72f4defa86dab2a2fe15272478a1fe5d0d2945ea4defd9d068f77d068798700f98f0f9ed458d31b3521ce1493924b38746d6f16efb1935888a26db24711ba62aa40cd8bbfb479379f2a5d57bdf2ece6306b3cb37ef2856110fa0f8b8ffd0f018006fdb7e029a803b185fd1797a58de71f67fe1d13d16e78b82bbfcf8cf594c6553a0dcad1d108e4398fb1621b009f42ec7df66675815b0287158417d45ff0492deb44f4983c3f6a16f994c20efa070457df56b844e411435da79189c1da3d9d9ced621d0c097ff1d0a87fd779f5336430043a31063097958a556be"}]}, @typed={0x14, 0xed, 0x0, 0x0, @ipv6=@ipv4={'\x00', '\xff\xff', @remote}}]}, 0x1a4}, 0x1, 0x0, 0x0, 0x4}, 0x8085) r5 = socket(0xde1024990fc45343, 0xa, 0x1) mkdirat$cgroup(r4, &(0x7f0000000600)='syz0\x00', 0x1ff) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000680), r5) sendmsg$IPVS_CMD_GET_DEST(r5, &(0x7f00000007c0)={&(0x7f0000000640)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000780)={&(0x7f00000006c0)={0xb8, r6, 0x100, 0x70bd26, 0x25dfdbfb, {}, [@IPVS_CMD_ATTR_DAEMON={0x58, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_STATE={0x8, 0x1, 0x1}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0xb9}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e21}, @IPVS_DAEMON_ATTR_SYNC_MAXLEN={0x6, 0x4, 0x4e83}, @IPVS_DAEMON_ATTR_MCAST_PORT={0x6, 0x7, 0x4e22}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_MCAST_GROUP6={0x14, 0x6, @private2={0xfc, 0x2, '\x00', 0x1}}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x2}, @IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x2}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x4}, @IPVS_CMD_ATTR_DAEMON={0x3c, 0x3, 0x0, 0x1, [@IPVS_DAEMON_ATTR_SYNC_ID={0x8, 0x3, 0x1}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'veth0_virt_wifi\x00'}, @IPVS_DAEMON_ATTR_MCAST_IFN={0x14, 0x2, 'nr0\x00'}, @IPVS_DAEMON_ATTR_MCAST_TTL={0x5, 0x8, 0x8}]}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x4}]}, 0xb8}, 0x1, 0x0, 0x0, 0x4008804}, 0x2004c005) close(r5) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000000840), r4) sendmsg$TIPC_CMD_GET_MAX_PORTS(r7, &(0x7f0000000900)={&(0x7f0000000800)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x1c, r8, 0x200, 0x70bd25, 0x25dfdbfb, {}, ["", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x40001}, 0x81) sendmsg$RDMA_NLDEV_CMD_SET(r5, &(0x7f0000000a00)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x18, 0x1402, 0x100, 0x70bd2a, 0x25dfdbff, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8, 0x1, 0x1}]}, 0x18}, 0x1, 0x0, 0x0, 0x80}, 0x24044011) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000a80)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r7, &(0x7f0000000b80)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000b40)={&(0x7f0000000ac0)={0x74, 0x0, 0x400, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_MESH_ID={0xa}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @NL80211_ATTR_4ADDR={0x5, 0x53, 0x1}, @mon_options=[@NL80211_ATTR_MU_MIMO_GROUP_DATA={0x1c, 0xe7, "fef1b52aeab80251f118a87880b03fdb37986f770e5fd42f"}, @NL80211_ATTR_MU_MIMO_FOLLOW_MAC_ADDR={0xa}], @NL80211_ATTR_MESH_ID={0xa}]}, 0x74}, 0x1, 0x0, 0x0, 0x4004}, 0x4004000) openat$tun(0xffffffffffffff9c, &(0x7f0000000bc0), 0x20042, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r7, 0x0, 0x484, &(0x7f0000000c00)=""/82, &(0x7f0000000c80)=0x52) socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$BTRFS_IOC_INO_PATHS(r5, 0xc0389423, &(0x7f0000000d00)={0x10000, 0x8, [0xc, 0xff, 0x1, 0x9], &(0x7f0000000cc0)=[0x0]}) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r5, 0x84009422, &(0x7f0000000d40)={0x0, 0x0, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @struct}, {0x0, @struct}}) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000001180), r5) sendmsg$NL80211_CMD_SET_BEACON(r7, &(0x7f0000001240)={&(0x7f0000001140)={0x10, 0x0, 0x0, 0x400200}, 0xc, &(0x7f0000001200)={&(0x7f00000011c0)={0x14, r10, 0x10, 0x70bd25, 0x25dfdbfe, {{}, {@void, @void}}}, 0x14}, 0x1, 0x0, 0x0, 0x80}, 0x811) sendmsg$NL80211_CMD_DEAUTHENTICATE(0xffffffffffffffff, &(0x7f0000001500)={&(0x7f0000001280), 0xc, &(0x7f00000014c0)={&(0x7f00000012c0)={0x1ac, r10, 0x20, 0x70bd2d, 0x25dfdbfb, {{}, {@void, @val={0xc, 0x99, {0x5, 0x7a}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @random="ae9b4535045b"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x6}, @NL80211_ATTR_MAC={0xa, 0x6, @random="a471101cb082"}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_MAC={0xa, 0x6, @random="c4f3bacbf251"}, @NL80211_ATTR_IE={0x14f, 0x2a, [@random={0x8, 0x2a, "8f9f70c57bf09244bbfe2c97cd4de237d1f067bc813c028f2a7a04a7f7292e46985dd6096bdc1cf5aff4"}, @link_id={0x65, 0x12, {@random="68ec62b16550", @broadcast, @device_b}}, @perr={0x84, 0x109, {0x4, 0x11, [{{0x0, 0x1}, @device_b, 0xd1e, @value=@broadcast, 0x41}, {{0x0, 0x1}, @broadcast, 0x0, @value, 0xa}, {{}, @broadcast, 0x7fffffff, @void, 0x20}, {{0x0, 0x1}, @device_b, 0xc, @value=@broadcast, 0x17}, {{}, @device_b, 0x6, @void, 0x42}, {{}, @device_a, 0x2f88, @void, 0x30}, {{}, @device_b, 0xfffffffc, @void, 0x38}, {{}, @device_b, 0x8, @void, 0x20}, {{}, @device_a, 0x775, @void, 0x2}, {{0x0, 0x1}, @device_a, 0x2, @value=@device_b, 0x11}, {{0x0, 0x1}, @broadcast, 0x1a6e, @value, 0x8}, {{0x0, 0x1}, @broadcast, 0x3, @value=@broadcast, 0x32}, {{}, @device_b, 0x3, @void, 0x12}, {{}, @device_a, 0x74, @void, 0x1e}, {{}, @device_a, 0xa74d, @void, 0x3e}, {{0x0, 0x1}, @device_a, 0x9b5e, @value=@broadcast, 0x1b}, {{}, @broadcast, 0xff, @void, 0x3b}]}}]}, @NL80211_ATTR_LOCAL_STATE_CHANGE={0x4}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x1}]}, 0x1ac}, 0x1, 0x0, 0x0, 0x48080}, 0x20004000) close(r3) setsockopt$inet6_tcp_TCP_CONGESTION(r5, 0x6, 0xd, &(0x7f0000001540)='bbr', 0x3) getsockopt$IP6T_SO_GET_REVISION_TARGET(r4, 0x29, 0x45, &(0x7f0000001580)={'ipvs\x00'}, &(0x7f00000015c0)=0x1e) sendmsg$TIPC_NL_BEARER_DISABLE(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f0000001600), 0xc, &(0x7f00000017c0)={&(0x7f0000001680)={0x104, 0x0, 0x2, 0x70bd25, 0x25dfdbfc, {}, [@TIPC_NLA_BEARER={0x6c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xf, 0x1, @l2={'ib', 0x3a, 'batadv0\x00'}}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'ipvlan0\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e23, 0x1a23, @private1={0xfc, 0x1, '\x00', 0x1}, 0x9}}, {0x14, 0x2, @in={0x2, 0x4e21, @private=0xa010100}}}}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x6}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x3ff}]}, @TIPC_NLA_MEDIA={0x68, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x4}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x8}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0xffffffaf}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x45ce9c1e}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x19}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x9}]}]}]}, 0x104}, 0x1, 0x0, 0x0, 0x1}, 0x90) 3.781319245s ago: executing program 1 (id=855): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1c}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2c}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x94}}, 0x0) ioctl$XFS_IOC_START_COMMIT(r0, 0x80585882, &(0x7f0000000040)={0xffffffffffffffff}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000000280)={&(0x7f0000000180)={0x100, r2, 0x100, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x8, 0x49}}}}, [@NL80211_ATTR_FRAME={0xc0, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x1}, {0xe}, @device_b, @device_a, @initial, {0x5, 0x3}, @value=@ver_80211n={0x0, 0x2375, 0x1, 0x1, 0x0, 0x3, 0x1, 0x0, 0x1, 0x1}}, 0x58, @default, 0x90, @void, @void, @void, @void, @void, @val={0x5, 0x59, {0x61, 0x7c, 0x10, "de46bce41f5066a9fd908e53b898d8cd65a15229845ec6148bb81c3ad301e39b73a80241cf633ba7cc41ec8f8e9d75f616e5e119a92f6df6f37f908ba442751367051cbb729a74cf123b8913cecf67678fc72fb99390"}}, @void, @val={0x2a, 0x1, {0x0, 0x1, 0x1}}, @val={0x3c, 0x4, {0x1, 0x6, 0xb, 0xe}}, @void, @void, @void, @void, [{0xdd, 0x2e, "814448a3d0d016e2cb059624198869c8727a19ba752b9ef0ec570e4af5516586aeb07103feef69fd0e2158f9f06c"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x6}, @NL80211_ATTR_CENTER_FREQ2={0x8, 0xa1, 0x7}], @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x8, 0xcd, [0x86, 0x4a]}]}, 0x100}, 0x1, 0x0, 0x0, 0x20000000}, 0x4008000) 2.213455976s ago: executing program 4 (id=862): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000580)=@updpolicy={0x19c, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x400000000000, 0x0, 0xffffffffffffffff, 0x0, 0x2}, {0x0, 0xa00, 0x40800000010000, 0x800000000000000}}, [@sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0xf, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x16, 0x0, 0xee01}, {@in=@broadcast, 0x4d3, 0x6c}, @in=@broadcast, {0x400, 0x9, 0x60ff, 0x6, 0x8000000000000000, 0x2, 0x4, 0x9c32}, {0x2, 0x83, 0x3, 0x1b1e62ac}, {0x2, 0xffffff3c}, 0x70bd29, 0x3502, 0x2, 0x1, 0x0, 0x12}}]}, 0x19c}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="a00000002100010000000000feffffff7f0000010000000000000000000000000000000000000000000000fd00000001fffe0000000200000a00e08000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fc0200000020000000000000000000007688f27e0000000000040000dd4231fd00000000000000000000ffffffffffffffffffff0000000000000000000000006c01000004"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 2.212856849s ago: executing program 4 (id=863): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000000)=ANY=[@ANYBLOB="06000000040000000800000008"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0xc, &(0x7f0000000300)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x9, 0x4, &(0x7f0000000440)=ANY=[@ANYBLOB="b400000000000000dd0a"], 0x0, 0x5, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x19}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0xc, &(0x7f0000000540)=ANY=[], &(0x7f0000000580)='GPL\x00', 0xb, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000001c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x48, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x23, 0x33, @action_no_ack={{{0x0, 0x0, 0xe, 0x0, 0x0, 0x1, 0x1, 0x1, 0x0, 0x0, 0x1}, {0x810}, @device_a, @device_a, @random="43b13cf0f943", {0x0, 0x8}, @value=@ver_80211n={0x0, 0x5, 0x2, 0x1, 0x0, 0x2, 0x0, 0x0, 0x0, 0x1}}, @vht_op_mode_ntf={0x15, 0x2, {0x3, 0x1, 0x1}}}}, @NL80211_ATTR_DURATION={0x8, 0x57, 0xab4}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000000}, 0x8810) 1.020246064s ago: executing program 4 (id=864): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000100)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000300)={0x1c, 0x0, 0x0, 0x0, 0x0, {{}, {@val={0x8}, @void}}}, 0x1c}}, 0x4000004) ioctl$sock_SIOCBRDELBR(r1, 0x89a2, &(0x7f0000000340)='bridge0\x00') syz_emit_ethernet(0x36, &(0x7f0000000380)={@link_local, @local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x4, 0x2, 0x0, @empty=0xe0, @multicast2=0xe0000001}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x10002}}}}}, 0x0) r2 = socket$inet6_sctp(0xa, 0x801, 0x84) r3 = socket$phonet_pipe(0x23, 0x5, 0x2) ioctl$sock_SIOCETHTOOL(r3, 0x8946, &(0x7f00000000c0)={'batadv0\x00', &(0x7f0000000200)=@ethtool_drvinfo={0x3, "85f32f0a887130ebcad580f09d2604bb988cab295c5c7527d853d26cd74e83dd", "1cdde36751077a0258c5398b1f749e8f84542562f9023beb958bbe8fd36ccfb9", "28dd038b866b5ce68575f1eafc63bf169b1959a0718b9254945e6539a6af90e3", "b1148921ee9dd79fb881abd54c7e275e6c5b0273215b6ca5887aa46c91cbd211", "52b289bfc4d317e1e36be35d98d657ccbce94bf4f44b9aa90640146c0542331d", "0993d43fc40f59b0f334108b", 0x2, 0x1, 0x0, 0x9, 0x6}}) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r2, 0x84, 0x7b, &(0x7f0000000040), &(0x7f0000000080)=0x8) epoll_create(0x5) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="b700000081000000bfa300000000000007030000f1feffff720af0fff8ffffff71a4f0ff0000000071103100000000001d400500000000004704000001ed00000f030000000000006f44000000000000730a00fe000000007203000000000006b5000000000000009500000000000000023bc065b58111c6dfa041b63af4a3912435f18564a710aad58db6a693002e7f3be361917adef6ee1c8a2a4f8ef1e50becb19bc461e91a7168c50000000190f32050e436fe275daf51efd601b6bf01c8e8b1b526375ec4dd6fcd82e4fe51bef7af9aa0d7d600c095199fe3ff3128e599b0eaebbdbd732c9cc00eec363e4a8f6456e2cc21557c0afc646cb7798b3e6440c2fbdb00a3e35208b0bb0d2cd829e654400e2438ec649dc74a28610643a98d9ec21ead2ed51b104d4d91af25b845d8a7925c3109b151b8b9f75dd08d123deda88c658d42ecbf28bf7076c15b463bebc72f526d8e8afcb913466aaa7f6df70252e79166d858fcd0e06dd31af9612f2460d0b11008e59a5923906f88b53987ad1714e72ba7a54f0c33d39000d06a59ff616236fd9aa58f2477184b6a89adaf17b0a6041bdef728d236619074d6ebdfd1f5089048ddff6da40f9411fe722631cb467600ade70063e5291569b33d21dae356e1c51f03a801be8189679a16da18ec0ae564162a27afea62d84f3a10746443d6438e959532e0617d419c6bc6ea9f2bca4464f56e24e6d2105bd901204a1deeed4155617572652d950ad31928b0b0c3dc2869f478341d02d0f5ad94b081fcd507acb4b9c65fee9d5a17f48a7382f13d000000225d85ae49cee383dc5049076b989b40000000000000da60d2ae20cfb91d6a49964757cdf538f9ce2bdb1ab062cd54e67011d355d84ce97bb0c6b4a595e487efbb2d71cde2c140952f9a0f0bc6980fe78683ac5c0c31032599ddd71063be9261b2e1aab1675b34a22048ef8c126aeef5f510a8f1aded94a129e4aec6f8d9ab06faffc3a15d96c2ea3e2e04cfe031b2875353193f82ade69d0540059fe6c7fe7cd8697502c7596566d674e425da5e87e59602a9f6590521d31d3804b3e0a1053abdc31282dfb15eb6841bb64a1b304502dda787343ce3c953992e4a982f3c48153baae244e7bf37548c7f1a4cad2422ee965a38f7defbd2160242b104e20dc2d9b0c35608d402ccc99069bd50b994fda7a9de44028d6112a0c2d21b2dc98816106dec28eaeb883418f562ae00003ea96d10f172c0374d6eed826416050000000bfe9b4a9c5a90ff59d54d1f92ecc4e95dd2d18383117c039862198899b212c55318294270a1ad10c80fef7c24d47afce829ba0f85da6d888f18ea40ab959f6074ab2a40d85d15017ab513cdc6c0e57fb1c1ca571380d7b4ead35a385e0b4a26b702396df7e0c1e02b6e4114f244a9bf93f04bf072f0861f7580e69db384ac7eeedcf2ba1a9508f9d6aba582a896a9f1ffa968eacea75caf822a7a63ba34015ea5aacb1188883ad24b89b6a3b1832371fe5bc621426d1ed0a4a99702cc1b6912a1e717d29135753208165b9cdbae2ed9dc7358f0ebadde0b727f27feeb744ddcc536cbae315c7d1fe1399562ba6824840bd2951680f6f2f9a6a8346962a350845ffa0d829e4f79adc287906943408e6df3c391e97ba48db0a5adbfd03aac93df8866fb010aec0e92bed1fe39af169d2a466f0db6f3d9436a7d55fc30511d00e10000c95265b2bd83d64a532869d701723fedcbada1ee7baa5b6a686b50f0937f778af083e055f6138a757ebd0ed91124a6b244f9acf41ac5d73a008364e0606a594817031fc2f52c87852730a3bd7ac923fe0721719b3d654026c6ea08b83b123145ab5703dad844ceb201ddeb6dc5f6a903792283c42efc54fa84323afc4c10eff462c8843187f1dd48ef3fa293774d582956ff0f40b10ca94f6feeb2893c17888e1cdba94a6ea80c33ead5722c3293a493f1479531dd88261458f40d31fe8df15efaaeea831555877f9538d6ee6ba65893ff1f908ba7554ba583fef3ec7932f5954f31a878e2fae6691d1aee1da02ba516467df3e7d1daac43738012e4fee18a22da19fcdb4c2890cda1f96b952511e3a69d694d625e0b2f808890205f3a6da2819d2f9e77c7c64affa54fec0136cbafa5f6f096753b639a924599c1f69219927ea5301fff0a6063d427f0688430754c02180d61542c2571f983e9673560000000000000000005a7b57f03ca91a01ba2e30ca99e8ebc15ecb4d91675767999d146aef7799738b292fd640dfef6b04d086f737a159d7e0c6e4d81ad64a8bbca4856ff03b2969e2b15f36b788bce5ccdbaf75c94cb93499f6947a967a7bce14c6de4e7c0660d80010f5c653d22d490cba8c2a4ab595bf4238f18ca428dafc7ac96d404607a0000000051a2104f22e6db5a62b5089c1b45282d38864daa3ae81d6b0968d1d2867b91b7d120617d12d91db2633d6864da40b54783a17aaeb6737c323f9f98e354cc98dcfe23ad01bd1c61563e69ffe1c2c73e16e1461173f359e93d2c5e424c17998809ec8f0232b3955e052a4cecd89008f70314a0bdd491ec860cde7c79f7b4d4e24c62e8e3ed8bcb45202c3d4bbec8d722824c0ebca8db1ea4a003d2fbdc1f9be78537756ab5bbe4fe9af5d785d0128171c90d9900ce2532b0f9d01c4b450100000001000000393cb4e62e754598e47df6bd06431c94bc5d047899fd219f448bf9189c65c9d91eda6b52a373803a9efe44f86909bc90addb7b9aee813df534aac4b3093c91b8068cd84990453f006694d461b76a58d88cf0f520310a1e80dc18cde98d662eee077515d0a8811922929e085392ab3d1311b8243266d87047f601fa88a0da36b9f302e8262395174328f2482d14008de83070744f143fdec90ba5a82668d5fac114c13955ad6dca5db2231d8ba14c54c47ed04a4b4ace17e357e1d6432399f87a7a14245bbd796a09313b247b95d37ff40a404bdad74bd20000000000000000000099fef7cd7af3ce64a92f95d89d125b1e641240d7e5e27a3d1f7684448c3e3822d617e205061298b939a191be4b48e169bde2cae3accc5bd40a2968b59c93d35f8e42366fdef9a2abae1cf01ce68abff28861aac8302d268569dd42e194e330c7aaa54ebbcefd23f21ce8153b9926e12e925cb56119df72c7533a48d028ad0c74e2a9478fa3be18a1a2b65079cc1c00400000000000f59dd19e8d525206c0a728cfd42193abe8130bc01a2d69841f3d7799ac04bdc590bb1c89b9c695f163e57343c9bfb59909433c9001c5f8b23e38534a538fc933cac6c2a92d038df638a0f226df9fb857bd414c2cd69985e8053e3dfa41614d7c74d04d8c2471041d17c730fad28395f8d4688898cd58b9d600c851626529bb58aa364b55e73f053450665e7b94ed1012fd7a8139166fd599c028db4cb9680c8035f967db18de738844da7e260a830c1ffa49f5af3c15423a0e315acb82a3e89218cb314e68fda4d94aa1d815babc13b9fd336d205c5913ef67cf0216e2d81e6127bd9d7fab28800eaab2355992f8ce4cd38add4b272c0bee4076ca4847ffa691cf78fb7ec212bad3bef29f577ea7159b7f3025b3d977ff7c91024cf71126233cb80610eb37bd2d40ebdfed687f0b093e68f10b72146a0b749ee2105e2da94a288146abbbaf7c0b24fe0000000000000000f1a4f4de6a8d12dc9e71a20cbd412898586843b534d36e21379a8a06133c1babde9e5bd5b6afc5f684aada43ee560e800f58cb33b8483f6518abde7c86bd5d389c1b3c40fdd4bebe4adf87b1025ff57eb50984cc5bad9ea1c15484ea627c3c1501d612ed65939266e7332966f03e0376076e7c5dfe25f367dda7f69db89829b360dd2f59cbaad10f13e269eca792725bbacb96aa0a5c426ca76f84322661"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) 996.927989ms ago: executing program 0 (id=865): r0 = socket$inet_udp(0x2, 0x2, 0x0) getsockopt$ARPT_SO_GET_ENTRIES(r0, 0x0, 0x61, &(0x7f0000000000)={'filter\x00', 0x4, ';o\'.'}, &(0x7f0000000040)=0x2c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='hugetlb.2MB.usage_in_bytes\x00', 0x26e1, 0x0) close(r1) ioctl$SIOCSIFHWADDR(r1, 0x8b34, &(0x7f00000000c0)={'wlan1\x00', @random='\x00\x00\x00\x00\x00 '}) connect$bt_l2cap(r1, &(0x7f0000000100)={0x1f, 0xfffa, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x11}, 0x8, 0x2}, 0xe) 994.247073ms ago: executing program 3 (id=866): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB="1c0000001000010700000000000000000a2f0000060001"], 0x1c}}, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x1, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000300)=@deltaction={0x60, 0x18, 0x1, 0x70bd2b, 0x25dfdc00, {0xa}, [@TCA_ACT_TAB={0x4c, 0x1, [{0xc, 0x8d, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x14, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x6}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xa, 0x1, 'pedit\x00'}}, {0xc, 0x15, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}]}, 0x60}, 0x1, 0x0, 0x0, 0x44000}, 0x20040844) getpid() sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000400)={0x1c, 0x1, 0x4, 0x101, 0x0, 0x0, {0x1, 0x0, 0x400}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x60000081}, 0x800) sendmsg$NFULNL_MSG_CONFIG(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f00000004c0)={0x1c, 0x1, 0x4, 0x5, 0x0, 0x0, {0x3, 0x0, 0x10}, [@NFULA_CFG_CMD={0x5, 0x1, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x8000}, 0x26088888) close(0x3) r3 = socket(0x200000100000011, 0x803, 0x0) recvmmsg(r3, &(0x7f0000000180)=[{{0x0, 0x0, 0x0}, 0x8798}], 0x1, 0x40001041, 0x0) ioctl$sock_inet6_tcp_SIOCOUTQ(r3, 0x5411, &(0x7f00000001c0)) sendmsg$NFT_BATCH(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8080}, 0x20004450) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @payload={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_PAYLOAD_BASE={0x8, 0x2, 0x1, 0x0, 0x1}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}, 0x1, 0x0, 0x0, 0x20004000}, 0x24000840) 924.985171ms ago: executing program 1 (id=867): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000002840)=ANY=[], 0x50}, 0x1, 0x0, 0x0, 0x20000054}, 0x0) 923.794155ms ago: executing program 2 (id=868): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000600), 0xc0802, 0x0) ioctl$PPPIOCNEWUNIT(r1, 0xc004743e, &(0x7f0000000680)) ioctl$PPPIOCSMAXCID(r1, 0x40047451, &(0x7f00000006c0)=0x8) ioctl$PPPIOCSFLAGS1(r1, 0x40047459, &(0x7f0000000700)=0x2000004) pwritev(r1, &(0x7f0000000740)=[{&(0x7f0000000780)="00214717a70700000000430600000000000000000000721d5874f72c000000000000000feb56a29357215d78fc44fac3f44d", 0x32}], 0x1, 0x3e42, 0x407ff) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) getsockname$packet(0xffffffffffffffff, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000007c0), &(0x7f0000000800)=0xc) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r2, 0x89f1, &(0x7f00000008c0)={'syztnl0\x00', &(0x7f0000000840)={'syztnl2\x00', 0x0, 0x2f, 0x5, 0x39, 0x8, 0x30, @mcast2, @private1, 0x8, 0x8000, 0x80000000, 0x4}}) r3 = socket$nl_route(0x10, 0x3, 0x0) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000000900)={0x0, 0x0}, &(0x7f0000000940)=0xc) sendmsg$nl_route(r3, &(0x7f0000000980)={0x0, 0x0, &(0x7f00000009c0)={&(0x7f0000000a00)=@can_newroute={0x44, 0x18, 0x1, 0x0, 0x0, {}, [@CGW_DST_IF={0x8}, @CGW_SRC_IF={0x8}, @CGW_MOD_UID={0x8, 0xe, r4}, @CGW_MOD_SET={0x15, 0x4, {{{0x3, 0x1, 0x1, 0x1}, 0xa, 0x1, 0x0, 0x0, "0325175362eb4cf2"}, 0x4}}]}, 0x44}}, 0x0) r5 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000a80)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000ac0)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000240)=@deltaction={0xa0, 0x31, 0x400, 0x70bd2c, 0x25dfdbfc, {}, [@TCA_ACT_TAB={0x4}, @TCA_ACT_TAB={0x3c, 0x1, [{0x14, 0xc, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x2, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xfff}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4a8c8210}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}]}, @TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x1f, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7}}, {0x10, 0x16, 0x0, 0x0, @TCA_ACT_KIND={0xc, 0x1, 'skbedit\x00'}}, {0xc, 0x1, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1}}]}, @TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x17, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x3}}]}]}, 0xa0}, 0x1, 0x0, 0x0, 0x81}, 0x20000000) sendmsg$nl_route_sched(r5, &(0x7f0000000b80)={0x0, 0x0, &(0x7f0000000bc0)={&(0x7f0000000c00)=@newtfilter={0x4c, 0x2c, 0xd3f, 0x70bd25, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x2, 0x4}, {0x0, 0x9}, {0xf, 0x9}}, [@filter_kind_options=@f_flower={{0xb}, {0x1c, 0x2, [@TCA_FLOWER_KEY_ETH_TYPE={0x6, 0x8, 0x8848}, @TCA_FLOWER_KEY_MPLS_OPTS={0x10, 0x63, 0x0, 0x1, @TCA_FLOWER_KEY_MPLS_OPTS_LSE={0xc, 0x1, 0x0, 0x1, [@TCA_FLOWER_KEY_MPLS_OPT_LSE_DEPTH={0x5, 0x1, 0x81}]}}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x1}, 0x20040054) sendmsg$nl_xfrm(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@delsa={0x38, 0x11, 0x200, 0x70bd2a, 0x25dfdbfd, {@in=@dev={0xac, 0x14, 0x14, 0x1c}, 0x4d6, 0xa, 0x33}, [@replay_val={0x10, 0xa, {0x70bd2b, 0x70bd2a, 0x9}}]}, 0x38}}, 0x0) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r8, &(0x7f0000000600)=ANY=[], 0x3261e) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x9, 0x13, r8, 0x0) connect$inet(r8, &(0x7f0000000640)={0x2, 0x4e23, @rand_addr=0x64010102}, 0x10) sendmsg$TIPC_CMD_RESET_LINK_STATS(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x24, r7, 0x1, 0x0, 0x0, {{}, {}, {0x14, 0x14, 'broadcast-link\x00'}}}, 0x30}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0xe, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="050000000000000071117500000000008510000002000000850000000500000095000000000000009500a50500000000"], &(0x7f0000000080)='GPL\x00', 0x5, 0xc3, &(0x7f0000000500)=""/195, 0x0, 0x74, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x6}, 0x94) 902.932549ms ago: executing program 0 (id=869): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x40241, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0xc201}) (async, rerun: 64) write$tun(r1, &(0x7f0000000240)=ANY=[@ANYBLOB='\x00\x00\x00\f'], 0x152) (async, rerun: 64) sendmsg$nl_xfrm(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="fc000000190001002dbd70000000000000000000000000000000000000000000ac1414aa00000000000000000000000000000000000000000a00000000000000", @ANYRES16=r1, @ANYRES32, @ANYBLOB="02000000000000000c000000000000000000000000000000aacc0000000000000000000000000000ffffffffffffffff000000000000000000000000000000000000000000000000000a000000000000feffffffff7f40000200000000000008000006000000000001000000000000004400050000000000000000000000000000000000fffffffc3c00000002000000ac1414aa000000000000002d000000000600000004"], 0xfc}}, 0x0) r2 = socket$pppl2tp(0x18, 0x1, 0x1) r3 = socket$inet6_udp(0xa, 0x2, 0x0) (async, rerun: 32) r4 = socket$kcm(0x10, 0x2, 0x4) (async, rerun: 32) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000280)={'veth0\x00', 0x0}) (async) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd28, 0x0, {0x0, 0x0, 0x0, r6, {0xfffa, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x4, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x7, 0x0, 0x0, 0x0, 0x14, 0x4, 0x0, 0x6, 0x0, 0x6], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0xfffc, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x9, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) (async) sendmsg$nl_route_sched(r7, &(0x7f0000000680)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000700)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd2e, 0xfffbffff, {0x0, 0x0, 0x0, r6, {0x0, 0x8}, {0xffff, 0xffff}, {0x8, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x1c, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@TCA_TAPRIO_SCHED_ENTRY_INTERVAL={0x8, 0x4, 0xff}]}]}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x2}]}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40001}, 0x4040010) sendmsg$kcm(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000180)="89000000120081ae08060cdc03a6000000000002000000006ee2ffca1b1f0000000004c00e72f750375ed08a563319bf9ed720000000d6e747033a0093b837dc6cc01e32efaec8c7a6ec0012100002400d0c0c00bdad446b9bbc7a46e3988285dcdf12f21308f868fece01955fed0009d78f0a947ee2b49e33538afa8af92347514f0b56a20ff27fff", 0x89}], 0x1}, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_mptcp_buf(r8, 0x11c, 0x1, 0x0, 0xffffffffffffffff) connect$pppl2tp(r2, &(0x7f00000004c0)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x20}}, 0x2}}, 0x2e) (async) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r9, &(0x7f0000000780)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000800)={0x6c, 0x0, 0x1, 0x401, 0x0, 0x1a14, {0x2, 0x0, 0x10}, [@CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}, @CTA_TIMEOUT={0x8, 0x7, 0x1, 0x0, 0x1}, @CTA_LABELS={0x8, 0x16, 0x1, 0x0, [0x2]}]}, 0x6c}}, 0x0) (async) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_NEW(r10, &(0x7f0000000880)={0x0, 0x0, &(0x7f00000008c0)={&(0x7f0000000900)={0x3c, 0x0, 0x1, 0x101, 0x0, 0x0, {0x2, 0x0, 0x2}, [@CTA_LABELS={0x4}, @CTA_TUPLE_ORIG={0x24, 0x1, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast1}, {0x8, 0x2, @multicast1}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4004881}, 0x20008820) (async) connect$inet6(r3, &(0x7f0000000500)={0xa, 0x4e1d, 0x0, @empty, 0x61}, 0x1c) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f00000002c0), 0xffffffffffffffff) (async) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r12, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x34, r11, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) 857.640006ms ago: executing program 1 (id=870): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) (async) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'pimreg0\x00', 0x7c2}) (async) ioctl$TUNSETQUEUE(r1, 0x400454d9, &(0x7f0000000080)={'macsec0\x00', 0x400}) r2 = openat$tun(0xffffffffffffff9c, &(0x7f00000000c0), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000100)={'pimreg0\x00', 0x7c2}) (async) r3 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000140)={'pimreg0\x00', 0x0}) (async) ioctl$TUNSETQUEUE(r2, 0x400454d9, &(0x7f0000000180)={'vlan0\x00', 0x400}) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000340)=@base={0x4, 0x4, 0x4, 0xbf25}, 0x48) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r5, &(0x7f0000000400), 0x0}, 0x20) (async) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="0b00000005000000000400000900000001"], 0x48) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x18, 0x5, &(0x7f0000000540)=ANY=[@ANYBLOB="1801000021"], 0x0, 0x40, 0x0, 0x0, 0x0, 0xb4a02fe0ce239f93, '\x00', 0x0, 0x2}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f0000000580)={0xe, 0x0, &(0x7f0000000640)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r6], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x59, '\x00', 0x0, @fallback=0x2a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, r7, 0x0, 0x0, 0x0, 0x0}, 0x94) r8 = bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x6, 0x25, &(0x7f0000000680)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7, 0x0, 0x0, 0x0, 0x5}, {{0x18, 0x1, 0x1, 0x0, r5}}, {}, [@map_idx={0x18, 0x8, 0x5, 0x0, 0x8}, @call={0x85, 0x0, 0x0, 0x48}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r6}}, @tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @ldst={0x2, 0x0, 0x6, 0x9, 0x6, 0x80}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000300)={r8, r4, 0x25, 0x0, @val=@netfilter={0x1, 0x0, 0x7}}, 0x20) (async) bind$bt_l2cap(r0, 0x0, 0x0) 780.530192ms ago: executing program 3 (id=871): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_int(r0, 0x6, 0x24, &(0x7f0000000000)=0x1, 0x4) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000440)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000001840)=@newqdisc={0x198, 0x24, 0x100, 0x70bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r1, {0x3, 0xfff1}, {0xa, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_choke={{0xa}, {0x168, 0x2, [@TCA_CHOKE_MAX_P={0x8}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x420}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0xfffffffb}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x7, 0x0, 0x40, 0xf, 0xe, 0x1, 0x7}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x6}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x8}, @TCA_CHOKE_STAB={0x104, 0x2, "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"}, @TCA_CHOKE_PARMS={0x14, 0x1, {0x10000, 0x3, 0x3, 0xf, 0x12, 0x18, 0x5}}, @TCA_CHOKE_MAX_P={0x8, 0x3, 0x2cf}]}}]}, 0x198}, 0x1, 0x0, 0x0, 0x5}, 0x20004080) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000005c0)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd24, 0x25dfdbfc, {0x0, 0x0, 0x0, r1, {0x4, 0xfff3}, {}, {0x9, 0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x10}, 0x20000000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000680)=@gettfilter={0x24, 0x2e, 0x205, 0x70bd2c, 0x25dfdafd, {0x0, 0x0, 0x0, r1, {0xc, 0xc}, {0x0, 0xfff1}, {0x0, 0x700}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000001800)={&(0x7f00000006c0)=@nameseq={0x1e, 0x1, 0x2, {0x2, 0x4, 0x4}}, 0x10, &(0x7f00000007c0)=[{&(0x7f0000000700)="07aaeb2338ee79b18c9d06e6514ce76e24013a18983843b71d12aaa03542d5884145662887a62c829c5317c327c6b43da86fc73b3bae", 0x36}, {&(0x7f0000000740)="925c82e66cfb77fab11838d02050eb3c7c6b9e02ecebbd39b06dc3afce9ecee6cef64aed0601a236c9c45ceb6bf178d66aa1608b817c686b1fa894ed25d3d8ffe512467aa08c4b54f0579707a78e94f898a47a765e7bc59cd1099e04bd916f4c01fe8882bc1c987274a77446259c75e5ee2e56648753b3", 0x77}], 0x2, &(0x7f0000000800)="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", 0x1000, 0x1}, 0x20048880) r2 = epoll_create1(0x80000) socket$inet_sctp(0x2, 0x5, 0x84) r3 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r3, 0x0, 0xc8, &(0x7f0000000280)=0x1, 0x4) setsockopt$MRT_ADD_VIF(r3, 0x0, 0xca, &(0x7f00000003c0)={0x0, 0x8, 0x0, 0x0, @vifc_lcl_ifindex=0x1, @empty}, 0x10) r4 = socket$nl_route(0x10, 0x3, 0x0) write(r4, &(0x7f0000000400)="340000001a000100000000000000000002202000000000000000000008000100e001020308000200ac1414bb0800030001000000", 0x34) sendto(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) close(0x4) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) connect$unix(r5, &(0x7f0000000180)=@abs, 0x6e) sendmmsg$unix(r6, &(0x7f0000000200), 0x17a, 0x0) epoll_pwait(r2, &(0x7f0000000240)=[{}], 0x1, 0x2d516fb6, 0x0, 0x0) recvmmsg(r5, &(0x7f0000000280), 0x10106, 0x2, 0x0) ioctl$F2FS_IOC_RESIZE_FS(r0, 0x4008f510, &(0x7f0000000200)=0x14000) epoll_ctl$EPOLL_CTL_ADD(r2, 0x1, r6, &(0x7f00000002c0)={0x20000014}) pselect6(0x40, &(0x7f0000000300)={0xa, 0x7ffffffe, 0x2, 0x10000000000006, 0xf, 0x8, 0x80000002, 0x8}, 0x0, 0x0, 0x0, 0x0) r7 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r7, &(0x7f0000000040)="c2", 0x1, 0x4050, &(0x7f0000000080)={0xa, 0xfffe, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}, 0x16) ioctl$XFS_IOC_INUMBERS(r0, 0x80405880, &(0x7f0000000340)={{0x3ff, 0x2, 0x80000001, 0xe}, [{0x80, 0x81, 0x1, 0x7}, {0x352c, 0x6, 0x37, 0x4}]}) shutdown(r0, 0x1) getsockopt$inet_sctp6_SCTP_DELAYED_SACK(r7, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x8000000, 0xffff}, &(0x7f0000000100)=0xc) recvmmsg(r0, &(0x7f00000003c0), 0x0, 0x3, 0x0) 778.302683ms ago: executing program 4 (id=872): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_ipv6_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000100)={'syztnl0\x00', &(0x7f0000000080)={'syztnl2\x00', 0x0, 0x4, 0x2b, 0x2, 0xfffff001, 0x36, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private1={0xfc, 0x1, '\x00', 0x1}, 0x8, 0x8, 0x0, 0x79}}) r2 = socket$igmp6(0xa, 0x3, 0x2) getsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, &(0x7f0000000200)={{{@in=@empty, @in=@loopback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@dev}, 0x0, @in=@initdev}}, &(0x7f0000000300)=0xe8) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f0000000580)=@updpolicy={0x248, 0x19, 0x1, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00', @in=@local, 0x0, 0x5, 0x0, 0x0, 0xa, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0xa9, 0x0, 0x400000000000, 0x0, 0xffffffffffffffff, 0x0, 0x2}, {0x0, 0xa00, 0x40800000010000, 0x800000000000000}}, [@policy={0xac, 0x7, {{@in6=@empty, @in6=@empty, 0x4e22, 0x4, 0x4e24, 0x4, 0x0, 0x60, 0x0, 0x73, r1, r3}, {0x100, 0xc39e, 0x1000, 0x7, 0x9, 0x5, 0x3, 0x80}, {0x6a08, 0x40000000000000, 0x2, 0x6}, 0x1c000000, 0x0, 0x2, 0x1}}, @sa={0xe4, 0x6, {{@in6=@ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x21}}, @in=@initdev={0xac, 0x1e, 0x1, 0x0}, 0x4e21, 0xf, 0x4e23, 0x0, 0xa, 0x0, 0x80, 0x16, r1, 0xee01}, {@in=@broadcast, 0x4d3, 0x6c}, @in=@broadcast, {0x400, 0x9, 0x60ff, 0x6, 0x8000000000000000, 0x2, 0x4, 0x9c32}, {0x2, 0x83, 0x3, 0x1b1e62ac}, {0x2, 0xffffff3c}, 0x70bd29, 0x3502, 0x2, 0x1, 0x0, 0x12}}]}, 0x248}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000003200)=@newsa={0x138, 0x10, 0x1, 0xfffffffe, 0x100, {{@in6=@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @in6=@private1={0xfc, 0x1, '\x00', 0x1}, 0x1, 0x714, 0x4e23, 0x5, 0x0, 0x0, 0x0, 0x3a}, {@in6=@private2, 0x4d4, 0x6c}, @in=@loopback, {0x0, 0x192, 0x6, 0xffff, 0x8251c, 0x2, 0xfffffffffffffff8}, {0xffffffffffffffff, 0x0, 0x1f, 0xfffffffffffffffe}, {0x2, 0xfffffffc}, 0x70bd2a, 0x3504, 0x2, 0x1, 0x0, 0x24}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x8801}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000140)=ANY=[@ANYBLOB="a00000002100010000000000feffffff7f00000100000000000000000000000000000000000000000000000000000001fffe0000000200000a00e08000ff8000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="020000000000000050001100fc0200000020000000000000000000007688f27e0000000000040000dd4231fd00000000000000000000ffffffffffffffffffff0000000000000000000000006c0100000435"], 0xa0}, 0x1, 0x0, 0x0, 0x800}, 0x4000000) 685.345947ms ago: executing program 4 (id=873): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge_slave_1\x00', 0x0}) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) getsockopt$inet6_tcp_int(r2, 0x6, 0x1e, 0xffffffffffffffff, &(0x7f0000000240)) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240), 0x200002, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x10, 0x4, &(0x7f0000000600)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x0, 0x79, 0x10, 0x48}, [@ldst={0x3, 0x0, 0x3}], {0x95, 0x0, 0x74}}, &(0x7f0000000640)='GPL\x00', 0x8, 0xc3, &(0x7f0000000680)=""/198, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xffffff52}, 0x37) r4 = openat$cgroup_procs(r3, &(0x7f0000000280)='cgroup.procs\x00', 0x2, 0x0) poll(&(0x7f00000002c0)=[{r4, 0x200}], 0x1, 0x30) syz_emit_ethernet(0x86, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaaaaaaaaaaaabb08004500007800000000000190780a010102ac1414aa05009078e00000024700000000000000001100000a010101ac1414aa441cfc01000000004e210000ac1414bb00000002ac1414aa000083ff442c0001e0000001000000000000000000000000ac141400000000000000000000000000ffffffff00000000"], 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x10, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', r1, 0xd}, 0x94) vmsplice(r0, &(0x7f0000000500)=[{&(0x7f0000000300)="99a385242c9433385b425f27b85bd2ad32fc0b6f99e10f9155c4740ddfd6bc98dda13c7b1fb2b91d9812652a92d878718d13fb462c2f5c226f36ba0dfa70662f957da6789788d215092c165fcca9326d17e75477fbacf3b2beea170e8a8ca669f91add86cc1665386b6b396a6efa350cbfbbf820330672", 0x77}, {&(0x7f0000000380)="df893f4db73ce56a4b93f3d9cc7b316a33d8e295e3189867e6f3c208234cdb9032be0b8adc28dc94b8", 0x29}, {&(0x7f00000003c0)="07eacc1f7acb4dd54c28b5b7", 0xc}, {&(0x7f0000000400)="fa92ff594008e28c540f2cbec62f9e1a3c446f7f00a47de4ef86024c42a476a9bd1c2be931408246e70151c28179be33ffee23a1395c77425ce9e6142ab9838f4c6ab869e4d0ca6f95b772188f5df565e54c1648b9a3adfa6a6d5c134f7e825477148b9f69ed691b17cb425569dc3f0fbea0fe7d5c06d68bec2ab1f17471e84c774b9845d3a802deeb821b4872e674216b9e72f7652f7cdf5d852c30051e07d513b3dfc50e7e2c29495cae8531cc51364ce1264c72b7a7ece6b916b400318ecd520dd5af79430aa0daa0b4169f394474dc4d81cb13a1507bf75e19677fc71c", 0xdf}], 0x4, 0x0) 575.155634ms ago: executing program 1 (id=874): r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$GTP_CMD_NEWPDP(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0706000000000000000000000000080005000000000008000400ac14140008000100", @ANYRES32=0x0, @ANYBLOB="0c0003000000000000000000080002000002"], 0x40}}, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000002c0)={0xe, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="180400000000000000000000000000007110a0000000000095"], &(0x7f00000003c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, 0xf}, 0x90) (async, rerun: 64) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0xd, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000009112c2000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xffffffff}, 0x94) (rerun: 64) 504.4313ms ago: executing program 3 (id=875): openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) r0 = socket$kcm(0x2, 0x3, 0x2) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x44004000) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x12a0, 0x1100, 0x18c, 0x203, 0x0, 0x19030000, 0x11d0, 0x2e0, 0x2e0, 0x11d0, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0x7fffffff, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0x10d8, 0x1100, 0x0, {0x1000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x7d, 0x1, 0x1, './cgroup.cpu/syz1\x00', 0xfffffffc, {0x3}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x9, 0x74c}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1300) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000300)=@raw={'raw\x00', 0x3c1, 0x3, 0x12a0, 0x1100, 0x18c, 0x203, 0x0, 0x19030000, 0x11d0, 0x2e0, 0x2e0, 0x11d0, 0x2e0, 0x7fffffe, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @mcast1, [0x0, 0x0, 0xff, 0xff], [0x7fffffff, 0xff000000, 0xff000000, 0xff000000], 'bond_slave_1\x00', 'bond0\x00', {}, {}, 0x84, 0x7, 0x2, 0x55}, 0x300, 0x10d8, 0x1100, 0x0, {0x1000000}, [@common=@unspec=@cgroup1={{0x1030}, {0x1, 0x7d, 0x1, 0x1, './cgroup.cpu/syz1\x00', 0xfffffffc, {0x3}}}]}, @common=@unspec=@NFQUEUE3={0x28, 'NFQUEUE\x00', 0x3, {0x0, 0x4}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @common=@inet=@SYNPROXY={0x28, 'SYNPROXY\x00', 0x0, {0x1, 0x9, 0x74c}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x1300) r2 = socket$inet_sctp(0x2, 0x1, 0x84) sendmmsg$inet_sctp(r2, &(0x7f0000001840)=[{&(0x7f0000001880)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10, &(0x7f00000018c0)=[{&(0x7f0000001900)="ec", 0xfffffffffffffef9}], 0x1, 0x0, 0x0, 0x90}], 0x1, 0x1) (async) sendmmsg$inet_sctp(r2, &(0x7f0000001840)=[{&(0x7f0000001880)=@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x11}}, 0x10, &(0x7f00000018c0)=[{&(0x7f0000001900)="ec", 0xfffffffffffffef9}], 0x1, 0x0, 0x0, 0x90}], 0x1, 0x1) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000001940)=0x6, 0x4) ioctl$SIOCSIFHWADDR(r0, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @broadcast}) close(0x3) socket$inet(0x2, 0x2, 0x1) (async) r3 = socket$inet(0x2, 0x2, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000001c0)={'veth0_vlan\x00', 0x0}) gettid() (async) r6 = gettid() r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000280)=ANY=[@ANYBLOB="4400000010000304f9fff2ffbedbdf2500007400", @ANYRES32=r5, @ANYBLOB="089805000750050008001300", @ANYRES32=r6, @ANYBLOB="08002c00050000001400030076"], 0x44}, 0x1, 0x0, 0x0, 0x44882}, 0x4000010) setsockopt$inet_sctp_SCTP_NODELAY(r7, 0x84, 0x3, &(0x7f00000002c0)=0x6, 0x4) (async) setsockopt$inet_sctp_SCTP_NODELAY(r7, 0x84, 0x3, &(0x7f00000002c0)=0x6, 0x4) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000100)='veth1_virt_wifi\x00', 0x10) (async) setsockopt$SO_BINDTODEVICE(r3, 0x1, 0x19, &(0x7f0000000100)='veth1_virt_wifi\x00', 0x10) setsockopt$inet_mreqn(r3, 0x0, 0x20, &(0x7f0000000140)={@private=0xa010100, @dev={0xac, 0x14, 0x14, 0x2e}}, 0xc) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r2, 0x84, 0x1e, &(0x7f0000000080), &(0x7f00000000c0)=0x4) 444.564619ms ago: executing program 4 (id=876): r0 = socket$igmp6(0xa, 0x3, 0x2) r1 = socket(0x28, 0x801, 0x0) sendmsg$xdp(r1, &(0x7f0000000040)={&(0x7f0000000140)={0x2c, 0x1, 0x0, 0x3}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x24008050}, 0x20000004) ioctl$BTRFS_IOC_BALANCE_PROGRESS(r0, 0x84009422, &(0x7f0000000340)) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_FLOW_MAX_RATE={0x2, 0x2}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x10270000}]}}]}, 0x48}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000840), 0x2002, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000880)={'syzkaller1\x00', 0x1}) r8 = socket$unix(0x1, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f00000008c0)={'syzkaller1\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@newqdisc={0x30, 0x24, 0x601, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {0x0, 0x10}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_ingress={0xc}]}, 0x30}}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000009c0)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000a40)=@gettfilter={0x2c, 0x2e, 0x1, 0x70bd2c, 0x25dfdbff, {0x0, 0x0, 0x0, r9, {0xd, 0xfff3}, {0x3, 0xffff}, {0x9, 0x9}}, [{0x8, 0xb, 0xfffffffc}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000040}, 0x24040800) r10 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r5) sendmsg$NL802154_CMD_SET_CHANNEL(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0000000000000000002509000000080001000100000005000800010000000500070006000000"], 0x2c}, 0x1, 0x0, 0x0, 0x44000}, 0x6010) r11 = openat$nci(0xffffffffffffff9c, 0x0, 0x2, 0x0) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r13 = syz_genetlink_get_family_id$nfc(&(0x7f0000000200), r12) ioctl$IOCTL_GET_NCIDEV_IDX(r11, 0x0, &(0x7f0000000280)=0x0) sendmsg$NFC_CMD_DEV_UP(r12, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000007c0)=ANY=[@ANYBLOB="1c0000", @ANYRES16=r13, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r14], 0x1c}}, 0x4008054) ioctl$IOCTL_GET_NCIDEV_IDX(0xffffffffffffffff, 0x0, &(0x7f0000000800)) sendmsg$nl_route(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={0x0}, 0x9, 0x0, 0x0, 0x4000000}, 0x0) 437.328325ms ago: executing program 0 (id=877): r0 = socket$inet_mptcp(0x2, 0x1, 0x106) shutdown(r0, 0x0) recvmsg(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)=""/3, 0x3}], 0x1}, 0x10000) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f00000000c0)=0x474c, 0x4) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000180), 0x0) close(r3) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000200)='ns/net\x00') r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000380)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000480)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x80) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f00000004c0)={r4, 0x0, 0x24, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4}, 0xa) r5 = socket$kcm(0x10, 0x2, 0x4) sendmsg$inet(r5, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f00000005c0)="5c00000015006b03000000d86e6c1d000a117ea6ea6567e71b59", 0xfe86}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) bind$inet(r2, &(0x7f0000000100)={0x2, 0x0, @local}, 0x6f) connect$inet(r2, &(0x7f0000000140)={0x2, 0x0, @multicast1}, 0x10) sendmmsg(r2, &(0x7f0000000180), 0x800001d, 0x300) setsockopt$inet_int(r2, 0x0, 0x8, &(0x7f00000001c0)=0x3d, 0x4) recvmmsg(r2, &(0x7f0000000200), 0x291962b, 0x45833af92e4b39ff, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'netdevsim0\x00', 0x0}) r7 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000001340)=ANY=[@ANYBLOB="54000000100003052bbd7000249d020000000000", @ANYRES32=0x0, @ANYBLOB="1544010001800000240012800b0001006d616373656300001400028005000c0001000000080005000400000008000500", @ANYRES32=r6], 0x54}}, 0x800) 333.324727ms ago: executing program 2 (id=878): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) r3 = accept4$x25(0xffffffffffffffff, &(0x7f0000000000), &(0x7f0000000040)=0x12, 0x0) ioctl$SIOCX25SCAUSEDIAG(r3, 0x89ec, &(0x7f00000003c0)={0x10}) r4 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000100)={'wlan0\x00'}) bpf$MAP_CREATE(0x0, &(0x7f0000000700)=@base={0x6, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x48) (async) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000780)=ANY=[], 0x48) bpf$MAP_UPDATE_BATCH(0x1a, &(0x7f00000007c0)={0x0, 0x0, 0x0, 0x0, 0xca, r5, 0x18}, 0x38) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r4, 0x8914, &(0x7f0000000200)={'wlan0\x00', 0x1}) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) (async) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) (async) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000380)={0x3c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_STA_AID={0x6, 0x10, 0x1}, @NL80211_ATTR_STA_LISTEN_INTERVAL={0x6, 0x12, 0x1}, @NL80211_ATTR_STA_SUPPORTED_RATES={0x4}]}, 0x3c}}, 0x0) sendmsg$NL80211_CMD_NEW_MPATH(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000480)={0x34, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x34}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000006c0)={&(0x7f0000000540)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000680)={&(0x7f0000000580)=@ipv4_newroute={0xd0, 0x18, 0x400, 0x70bd2b, 0x25dfdbfe, {0x2, 0x0, 0xc42fd36e5f6ca50e, 0x0, 0x0, 0x0, 0xfe, 0x8, 0x400}, [@RTA_DPORT={0x6, 0x1d, 0x4e20}, @RTA_GATEWAY={0x8, 0x5, @remote}, @RTA_GATEWAY={0x8, 0x5, @multicast1}, @RTA_METRICS={0x93, 0x8, 0x0, 0x1, "8d326781ac599cbb513ffbd5e0c56f6db7086e93a5ad495bd6594a9118db26748761824e7473a7e513fecf41d02379654c9252f526a49649f48734a912014ec72d7630baeb5abb0386bef3805497b0a9834098ed64c66a3e094cb40a5871b07954c199a204edb3bd15f23aa466c155469fa415c886bd488f19c28a87bc9e400316497e056209403117d4d2c230b50b"}, @RTA_PRIORITY={0x8, 0x6, 0x6}]}, 0xd0}, 0x1, 0x0, 0x0, 0x20004080}, 0x0) r7 = socket$packet(0x11, 0x3, 0x300) bind$packet(r7, &(0x7f00000004c0)={0x11, 0x300, r2, 0x1, 0x0, 0x6, @random="080211000001"}, 0x14) write(r7, &(0x7f0000000500)="0802110000010802110000000800", 0xe) (async) write(r7, &(0x7f0000000500)="0802110000010802110000000800", 0xe) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000780)) (async) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000780)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$TIPC_DEST_DROPPABLE(r8, 0x10f, 0x81, &(0x7f0000000800)=0x100, 0x4) (async) setsockopt$TIPC_DEST_DROPPABLE(r8, 0x10f, 0x81, &(0x7f0000000800)=0x100, 0x4) 126.157329ms ago: executing program 1 (id=879): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$batadv(&(0x7f0000000040), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'batadv_slave_0\x00', 0x0}) sendmsg$BATADV_CMD_GET_ROUTING_ALGOS(r0, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x2c, r1, 0x2, 0x70bd25, 0x25dfdbfd, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0xb4}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r2}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4001}, 0x80) r3 = accept4$packet(0xffffffffffffffff, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f00000001c0)=0x14, 0x0) setsockopt$packet_add_memb(r3, 0x107, 0x1, &(0x7f0000000200)={r2, 0x1, 0x6, @random="a46100de488b"}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r0) sendmsg$NL80211_CMD_GET_MPATH(r0, &(0x7f0000000380)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)={0x70, r5, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa, 0x1a, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @broadcast}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x70}, 0x1, 0x0, 0x0, 0xc000}, 0x1) r6 = socket$packet(0x11, 0x2, 0x300) pipe(&(0x7f00000003c0)={0xffffffffffffffff, 0xffffffffffffffff}) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), 0xffffffffffffffff) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000004c0)={'tunl0\x00', &(0x7f0000000480)={'erspan0\x00', r4, 0x7, 0x80, 0x10000, 0x80000001, {{0x6, 0x4, 0x2, 0x6, 0x18, 0x68, 0x0, 0x0, 0x29, 0x0, @multicast2, @local, {[@ra={0x94, 0x4, 0x1}]}}}}}) sendmsg$ETHTOOL_MSG_PAUSE_GET(r7, &(0x7f0000000700)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000006c0)={&(0x7f0000000500)={0x184, r9, 0x400, 0x70bd29, 0x25dfdbfb, {}, [@HEADER={0x40, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'tunl0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'gre0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x74, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'macvtap0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ipvlan1\x00'}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'pim6reg0\x00'}]}, @HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'hsr0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bond\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}]}, @HEADER={0x34, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}]}]}, 0x184}, 0x1, 0x0, 0x0, 0x8000}, 0x40800) socket$packet(0x11, 0x3, 0x300) socket$nl_xfrm(0x10, 0x3, 0x6) nanosleep(&(0x7f0000000740)={0x0, 0x3938700}, &(0x7f0000000780)) r11 = syz_genetlink_get_family_id$batadv(&(0x7f0000000800), r7) sendmsg$BATADV_CMD_GET_NEIGHBORS(r8, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000840)={0x6c, r11, 0x8, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @remote}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x2}, @BATADV_ATTR_ORIG_INTERVAL={0x8, 0x39, 0x2}, @BATADV_ATTR_ORIG_ADDRESS={0xa, 0x9, @link_local}, @BATADV_ATTR_GW_BANDWIDTH_UP={0x8, 0x32, 0x62}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_ISOLATION_MASK={0x8, 0x2c, 0x3}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5}]}, 0x6c}, 0x1, 0x0, 0x0, 0x90}, 0x0) sendmsg$TIPC_NL_MON_SET(r7, &(0x7f0000000b40)={&(0x7f0000000940)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000980)={0x174, 0x0, 0x200, 0x70bd2a, 0x25dfdbfb, {}, [@TIPC_NLA_SOCK={0x20, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1ff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x3a4a}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0xf}]}, @TIPC_NLA_NET={0x28, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffffffffffff}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x7ff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x40}]}, @TIPC_NLA_NET={0x54, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0x66aacd73}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x5}, @TIPC_NLA_NET_NODEID={0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x2}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x4e}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x800}]}, @TIPC_NLA_PUBL={0x14, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x3}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x5ffa}]}, @TIPC_NLA_MEDIA={0x40, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_NAME={0x7, 0x1, 'ib\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x5}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x15}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x68c8}]}]}, @TIPC_NLA_MON={0x44, 0x9, 0x0, 0x1, [@TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x7fff}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x8a}, @TIPC_NLA_MON_REF={0x8, 0x2, 0x10001}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x2}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x81}, @TIPC_NLA_MON_REF={0x8, 0x2, 0xfffffaf9}, @TIPC_NLA_MON_ACTIVATION_THRESHOLD={0x8, 0x1, 0x1}, @TIPC_NLA_MON_REF={0x8}]}, @TIPC_NLA_SOCK={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x8}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}, @TIPC_NLA_SOCK={0x10, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x3ff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}]}]}, 0x174}, 0x1, 0x0, 0x0, 0x40000}, 0x40000) sendmsg$NFNL_MSG_CTHELPER_NEW(r3, &(0x7f0000000d40)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x104, 0x0, 0x9, 0x401, 0x0, 0x0, {0x3, 0x0, 0x4}, [@NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x8}}, @NFCTH_TUPLE={0xc, 0x2, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}]}, @NFCTH_TUPLE={0x54, 0x2, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @local}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @multicast2}, {0x8, 0x2, @loopback}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, @NFCTH_STATUS={0x8}, @NFCTH_TUPLE={0x6c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @local}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}, {0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x4}]}, @NFCTH_PRIV_DATA_LEN={0x8, 0x5, 0x1, 0x0, 0xa}, @NFCTH_QUEUE_NUM={0x8, 0x3, 0x1, 0x0, 0x40}]}, 0x104}, 0x1, 0x0, 0x0, 0x10}, 0xd4) ioctl$sock_SIOCGIFINDEX_80211(r6, 0x8933, &(0x7f0000000dc0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_GET_POWER_SAVE(r8, &(0x7f0000000e80)={&(0x7f0000000d80)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000000e40)={&(0x7f0000000e00)={0x28, 0x0, 0x100, 0x70bd2b, 0x25dfdbfd, {{}, {@val={0x8, 0x3, r12}, @val={0xc, 0x99, {0x3, 0x48}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4004000}, 0x81) recvfrom$packet(r7, &(0x7f0000000ec0)=""/200, 0xc8, 0x20000022, 0x0, 0x0) ioctl$FS_IOC_GET_ENCRYPTION_POLICY_EX(r0, 0xc0096616, &(0x7f0000000fc0)={0x1, [0x0]}) ioctl$BTRFS_IOC_QGROUP_LIMIT(r7, 0x8030942b, &(0x7f0000001000)={0x2, {0x4, 0x7, 0x2, 0x4}}) syz_genetlink_get_family_id$tipc2(&(0x7f0000001040), 0xffffffffffffffff) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r13, 0x10e, 0x2, &(0x7f0000001080)=0x12, 0x4) bind$802154_raw(r7, &(0x7f00000010c0)={0x24, @long={0x3, 0x2, {0xaaaaaaaaaaaa0202}}}, 0x14) ioctl$F2FS_IOC_DEFRAGMENT(0xffffffffffffffff, 0xc010f508, &(0x7f0000001180)={0x1, 0x8001}) 73.951729ms ago: executing program 0 (id=880): openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) socket$netlink(0x10, 0x3, 0x400000000000004) socket$xdp(0x2c, 0x3, 0x0) socket$tipc(0x1e, 0x2, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) getsockname$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000140)=0x14) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000440)) socket$kcm(0x23, 0x2, 0x0) socket$kcm(0x2, 0x3, 0x2) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="230000000800000002000000ffff000001"], 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000001c0)={0x0, 0x0, 0x0, 0x0, 0x3, r0, 0x4}, 0x38) socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$IPVS_CMD_GET_INFO(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x14, r2, 0x603}, 0x14}}, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) socket(0x10, 0x3, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f00000000c0)='./cgroup.net/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000240), 0x200002, 0x0) r5 = openat$cgroup_int(r4, &(0x7f0000000280)='cgroup.clone_children\x00', 0x2, 0x0) sendfile(r0, r5, 0x0, 0x100000000008) socket$nl_generic(0x10, 0x3, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) ioctl$EXT4_IOC_CHECKPOINT(r3, 0x4004662b, &(0x7f0000000000)=0x6) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000009a40)={&(0x7f0000000500)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000040900010073797a30000000002c000000030a01080000000000000000010000000900030073797a32000000000900010073797a300000000050000000060a010400000000000000000100000008000b40000000000900010073797a30000000002800048024000180090001006d6574610000000014000280080001400000001208000240000000", @ANYRES8=0x0], 0xc4}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) 16.5755ms ago: executing program 3 (id=881): r0 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_ASSOCINFO(r0, 0x84, 0x1, &(0x7f0000000000)={0x0, 0x6, 0x1ff, 0x5, 0x5, 0xfffff5e5}, &(0x7f0000000040)=0x14) r2 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENT(r2, 0x84, 0x7f, &(0x7f0000000080)={r1, 0x8000, 0x1}, 0x8) sendfile(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0xdc) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$BATADV_CMD_GET_GATEWAYS(0xffffffffffffffff, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x3c, r3, 0x200, 0x70bd27, 0x25dfdbfb, {}, [@BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_THROUGHPUT_OVERRIDE={0x8, 0x3b, 0x4}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x5}, @BATADV_ATTR_ORIG_INTERVAL={0x8}, @BATADV_ATTR_MULTICAST_FANOUT={0x8, 0x3c, 0x34}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4008804}, 0x4008000) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$inet_pktinfo(r5, 0x0, 0x8, &(0x7f0000000200)={0x0, @local, @empty}, &(0x7f0000000240)=0xc) sendmsg$nl_generic(r4, &(0x7f0000000340)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x24, 0x1f, 0x4, 0x70bd2a, 0x25dfdbfb, {0x8}, [@nested={0x4, 0x8b}, @typed={0xc, 0xc5, 0x0, 0x0, @u64=0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x880}, 0x14) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_generic(0x10, 0x3, 0x10) r8 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r7, 0x10e, 0x5, &(0x7f0000000380)=0x81, 0x4) sendmsg$BATADV_CMD_GET_VLAN(r8, &(0x7f0000000480)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x2c, r3, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_HARD_IFINDEX={0x8, 0x6, r6}, @BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40010}, 0x20004014) pipe(&(0x7f00000004c0)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$TCPDIAG_GETSOCK(r10, &(0x7f0000000800)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f00000007c0)={&(0x7f0000000540)={0x244, 0x12, 0x10, 0x70bd26, 0x25dfdbfb, {0x5d, 0x6, 0x7, 0x81, {0x4e22, 0x4e24, [0x0, 0xffffff9f, 0x4, 0x5], [0x6838, 0x3, 0x5, 0x8], 0x0, [0x3, 0xfffffe27]}, 0x5, 0x7}, [@INET_DIAG_REQ_BYTECODE={0x8d, 0x1, "861a697837d1bb93a05468a3db766648c1efa0168198860a6f5d31a5dfce52311dd2c2c2568356c4966a32aca2fd47c50bff2f732884d7fc6000a3ae706e9891954c6054375b67e3b1699cbfe8eb65872064632741385ff5e147e0f6a8c4346192c7f40be32cebea9c0a16851bad22540d473b14ae18ad8901d34953ae04cdce77f4ef07791687150b"}, @INET_DIAG_REQ_BYTECODE={0x6e, 0x1, "328960f71a804003d77c095f8b116ab6a987ddd367be628022ea032b89c452f9c838c3965f8bca3628be34e421d9e22ea073b3fb61877ea2d3a9081364fb78e642ddcbfb988c7d29f9faa80af359e694d5a2cfb83cbff832a496d17658c3e71a81c1eaecfe9c8e61b9e9"}, @INET_DIAG_REQ_BYTECODE={0x6e, 0x1, "744e9ec686ee164065c0442a058c197d83ef4e1efb0b803fd156f4deb30f0cfec42ce1e4837dd8e4992f1faaef848bb8a10ecfb65ffb42631d9825881cdf6f7db80519d8ca21b67864785be054c449f9067be3adf5ab6481e7cbebd1233fbe713a28c3093a4b471377a5"}, @INET_DIAG_REQ_BYTECODE={0x83, 0x1, "b77137bd9e828f350cc8ab82aed0d6193b9beaf06c11b0bca53256e1b77fdc6ee7e73dd23856baabd06e17980ebc1bf6b7166ea4d9de81502aee07ab5d49f2ed6495880aa65f7b585db223e3480eb4c0e886fe77dcd870251af0259f071ec550f085ce507fd33c3052289c28fb1b59ab19804cdd954bd4cfe1ccfe72003956"}, @INET_DIAG_REQ_BYTECODE={0x4}]}, 0x244}, 0x1, 0x0, 0x0, 0x8000}, 0x38) setsockopt$inet6_IPV6_DSTOPTS(r10, 0x29, 0x3b, &(0x7f0000000840)={0x3a, 0xb, '\x00', [@generic={0x94, 0x21, "fb8005918d8b1ed5d75184ae8bdc6fcc93cd901cdc3aee43e1f86d066c3151076d"}, @enc_lim={0x4, 0x1, 0x5}, @calipso={0x7, 0x30, {0x0, 0xa, 0x0, 0x861, [0x559e, 0x7, 0xffffffffffffffc0, 0x2a446b13, 0x4d]}}, @jumbo={0xc2, 0x4, 0x68}]}, 0x68) socket$inet6_mptcp(0xa, 0x1, 0x106) r11 = socket$pppl2tp(0x18, 0x1, 0x1) sendmsg$nl_generic(r4, &(0x7f0000000b40)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000b00)={&(0x7f0000000900)={0x1fc, 0x17, 0x300, 0x70bd28, 0x25dfdbfd, {0xe}, [@nested={0x1df, 0xc0, 0x0, 0x1, [@typed={0x4, 0x60}, @nested={0x4, 0x116}, @nested={0x4, 0x27}, @generic="54ae858c357978675ed64eab4bea2c89846aef00be7772dbb4af504c91fc162a776df821d925b3216dc02ffce897e50f8b7e06c77a7fc31e1eeb7e45fef2f27b15faf8b8b5b3bc31329fedf51ca48bf8ea741ff378a70ac06d840e14626544e9dfc3556f04cce46ca3fb920af0a00e490f7983198e94be673b4a50a33912c601602b07d2c3cf40e0676506374f161ae89db9986933150e4c5763b66b81a27ec6ca8d77ab4f6c4093f55685f7ecf0ff17379329d1a13e12947ed0694d2577872aca9b1f1ee9e7e13d3e6e15a469470b2e15406c5ccbda", @generic="2d25b51cd395bfb564a135c5b7ea28167d07572fa1ea7779d50f6da4b8202f25d6b12c2c7ecff1f8297bd47b05b7ad2b84412bc0534b199270a43da2a31e5146e026789a529689d2765854954681183a3007aefeb4e05f392c2ee1a8d89d90f9dde549ec0e36ed2e51cef74c48d042f25a1cd06d9b1bee976fa511380291517c066fcec11a178b3240abb992ec9d5791972a07ff03185fe83863b68cc6aeda657724f60bdf52ab2236804fe04a2b2b43ada03b82502b4814d604ef935c7562a4638702b854a7a873bc8e70bbb7c39a28c7304a3912be5a00b8d159a3bd73adc447", @typed={0x8, 0x6a, 0x0, 0x0, @fd=r11}, @typed={0x8, 0x8b, 0x0, 0x0, @str='\\).\x00'}, @typed={0x8, 0xd6, 0x0, 0x0, @uid=0xee01}]}, @typed={0x8, 0x66, 0x0, 0x0, @fd=r2}]}, 0x1fc}, 0x1, 0x0, 0x0, 0x4008040}, 0x0) ioctl$PPPIOCSFLAGS(r11, 0x40047459, &(0x7f0000000b80)=0x10810) ioctl$sock_inet_SIOCSIFFLAGS(r11, 0x8914, &(0x7f0000000bc0)={'batadv_slave_1\x00', 0x800}) r12 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$IOCTL_GET_NCIDEV_IDX(r9, 0x0, &(0x7f0000000c40)=0x0) sendmsg$NFC_CMD_DEV_DOWN(r12, &(0x7f0000000d00)={&(0x7f0000000c00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c80)={0x24, 0x0, 0x100, 0x70bd2b, 0x25dfdbfe, {}, [@NFC_ATTR_DEVICE_INDEX={0x8, 0x1, r13}, @NFC_ATTR_DEVICE_INDEX={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x4804}, 0x20000000) setsockopt$TIPC_IMPORTANCE(r10, 0x10f, 0x7f, &(0x7f0000000d40)=0x80000000, 0x4) recvmmsg(r2, &(0x7f0000001140)=[{{&(0x7f0000000d80)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @broadcast}, 0x80, &(0x7f0000000f00)=[{&(0x7f0000000e00)=""/149, 0x95}, {&(0x7f0000000ec0)=""/22, 0x16}], 0x2, &(0x7f0000000f40)=""/74, 0x4a}, 0x2}, {{&(0x7f0000000fc0)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, 0x80, &(0x7f0000001100)=[{&(0x7f0000001040)=""/189, 0xbd}], 0x1}}], 0x2, 0x40000122, &(0x7f00000011c0)={0x0, 0x989680}) getsockname$netlink(r10, &(0x7f0000001200), &(0x7f0000001240)=0xc) 0s ago: executing program 1 (id=882): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000180)={0x2, 0x0, @local}, 0x10) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000001c0)=0x1, 0x4) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000440)={&(0x7f0000000480)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x40, 0x40, 0xc, [@struct={0x4, 0x1, 0x0, 0x4, 0x1, 0x1, [{0xa, 0x3, 0x6}]}, @int={0x0, 0x0, 0x0, 0x1, 0x5, 0x20}, @array={0x0, 0x0, 0x0, 0x3, 0x0, {0x2, 0x2}}]}, {0x0, [0x61, 0x0, 0x2e, 0x2e, 0x61, 0x61, 0x0, 0x61, 0x0, 0x5f]}}, 0x0, 0x64}, 0x28) sendmmsg$inet(r1, &(0x7f0000000200)=[{{&(0x7f0000000240)={0x2, 0x4e23, @multicast1}, 0x10, 0x0}}], 0x1, 0x2400c0a2) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$sock_int(r2, 0x1, 0xf, &(0x7f0000000340)=0x800001, 0x4) bind$inet6(r2, &(0x7f0000000380)={0xa, 0x4e22, 0x0, @empty}, 0x1c) listen(r2, 0x0) syz_emit_ethernet(0x4a, &(0x7f00000003c0)={@local, @remote, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x14, 0x6, 0x0, @dev={0xfe, 0x80, '\x00', 0xd}, @local, {[], {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x0, 0x5, 0x10, 0x11, 0x0, 0x2}}}}}}}, 0x0) writev(r1, &(0x7f0000000280)=[{&(0x7f00000002c0)="b0", 0x306}], 0x1) ppoll(&(0x7f0000000300)=[{r1, 0x129}], 0x1, 0x0, 0x0, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={0x0}}, 0x20040000) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r4, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000640)={0x30, 0x41, 0x1, 0x7fffc, 0x4, {0x1}, [@nested={0x4, 0x48}, @nested={0x10, 0x1, 0x0, 0x1, [@nested={0xc, 0x10, 0x0, 0x1, [@nested={0x8, 0xb, 0x0, 0x1, [@typed={0x4, 0x1, 0x0, 0x0, @binary}]}]}]}, @typed={0x8, 0x2, 0x0, 0x0, @fd=r4}]}, 0x30}, 0x1, 0x0, 0x0, 0x400c801}, 0x4008014) socket$netlink(0x10, 0x3, 0x0) getsockname$packet(r3, &(0x7f0000000600)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_MAXSEG(r6, 0x84, 0xd, &(0x7f00000000c0)=@assoc_value={0x0, 0x4}, &(0x7f0000000140)=0x8) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000850600000000ff6122314a000800", @ANYRES32=r5, @ANYBLOB="f5ff0f00252155b21c0012000c000100626f6e64000000000c0002000800010001"], 0x3c}}, 0x40000) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.88' (ED25519) to the list of known hosts. [ 64.668209][ T5601] cgroup: Unknown subsys name 'net' [ 64.764816][ T5601] cgroup: Unknown subsys name 'cpuset' [ 64.767634][ T5601] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 66.067525][ T5601] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 69.927367][ T5623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 69.946754][ T5629] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 69.954948][ T5629] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 69.955360][ T5629] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 69.956485][ T5629] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 69.956951][ T5629] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 69.957661][ T5629] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 69.957992][ T5629] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 69.958746][ T5623] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 69.958900][ T5623] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 69.966192][ T5629] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 69.966443][ T5629] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 69.969777][ T5623] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 69.972523][ T5623] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 69.973588][ T5623] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 69.974287][ T5623] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 69.975712][ T5623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 69.975788][ T5629] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 69.976180][ T5625] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 69.979177][ T5625] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 69.979696][ T5625] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 69.982781][ T5625] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 69.985904][ T5625] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 70.002891][ T5625] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 70.017176][ T4935] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 70.923995][ T5614] rdma_rxe: Failed to create IPv4 UDP tunnel [ 70.936705][ T5622] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 70.938467][ T5613] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 70.945001][ T5618] rdma_rxe: rxe_newlink: failed to add rxe_eth0 [ 70.946440][ T5612] rxe_eth0 speed is unknown, defaulting to 1000 [ 70.954429][ T5612] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.010766][ T5612] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.294964][ T5612] infiniband rxe0: set active [ 71.294984][ T5612] infiniband rxe0: added rxe_eth0 [ 71.299766][ T1310] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.299836][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.354095][ T5612] smbdirect: ib_dev[rxe0]: added: IB_CA max_fast_reg_page_list_len=512 device_cap_flags=0x1c001223c76 kernel_cap_flags=0x14 page_size_cap=0xfffff000 [ 71.354133][ T5612] smbdirect: ib_dev[rxe0]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=32 max_cqe=32767 max_qp_wr=1048576 max_send_sge=32 max_recv_sge=32 [ 71.354167][ T5612] smbdirect: ib_dev[rxe0]PORT[1]: iwarp=0 ib=0 roce=1 v1=0 v2=1 core_cap_flags=0x803005 [ 71.393655][ T2242] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.473099][ T5612] RDS/IB: rxe0: added [ 71.473479][ T5612] smc: adding ib device rxe0 with port count 1 [ 71.473568][ T5612] smc: ib device rxe0 port 1 has no pnetid [ 71.502684][ T2242] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.534190][ T5612] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.924530][ T5612] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.984764][ T25] rxe_eth0 speed is unknown, defaulting to 1000 [ 71.985435][ T3106] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.011538][ T5616] Bluetooth: hci3: command tx timeout [ 72.011759][ T5625] Bluetooth: hci0: command tx timeout [ 72.091136][ T5616] Bluetooth: hci1: command tx timeout [ 72.091386][ T5616] Bluetooth: hci2: command tx timeout [ 72.091589][ T5625] Bluetooth: hci4: command tx timeout [ 72.316898][ T5612] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.367291][ T5622] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.368350][ T5622] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.368501][ T5622] bridge_slave_0: entered allmulticast mode [ 72.391437][ T5622] bridge_slave_0: entered promiscuous mode [ 72.463257][ T5622] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.463414][ T5622] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.463838][ T5622] bridge_slave_1: entered allmulticast mode [ 72.466897][ T5622] bridge_slave_1: entered promiscuous mode [ 72.567504][ T5612] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.594142][ T5614] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.595135][ T5614] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.595257][ T5614] bridge_slave_0: entered allmulticast mode [ 72.597118][ T5614] bridge_slave_0: entered promiscuous mode [ 72.626961][ T5618] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.627048][ T5618] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.627159][ T5618] bridge_slave_0: entered allmulticast mode [ 72.629133][ T5618] bridge_slave_0: entered promiscuous mode [ 72.677151][ T5622] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.677401][ T5614] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.677508][ T5614] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.677620][ T5614] bridge_slave_1: entered allmulticast mode [ 72.680037][ T5614] bridge_slave_1: entered promiscuous mode [ 72.706945][ T5618] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.707090][ T5618] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.707706][ T5618] bridge_slave_1: entered allmulticast mode [ 72.709331][ T5618] bridge_slave_1: entered promiscuous mode [ 72.764955][ T5622] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.804102][ T5613] bridge0: port 1(bridge_slave_0) entered blocking state [ 72.804270][ T5613] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.804382][ T5613] bridge_slave_0: entered allmulticast mode [ 72.807452][ T5613] bridge_slave_0: entered promiscuous mode [ 72.843103][ T5614] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.845549][ T5618] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 72.845764][ T5613] bridge0: port 2(bridge_slave_1) entered blocking state [ 72.845926][ T5613] bridge0: port 2(bridge_slave_1) entered disabled state [ 72.846364][ T5613] bridge_slave_1: entered allmulticast mode [ 72.847799][ T5613] bridge_slave_1: entered promiscuous mode [ 72.870388][ T5622] team0: Port device team_slave_0 added [ 72.876189][ T5614] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.909683][ T5618] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 72.924244][ T5622] team0: Port device team_slave_1 added [ 72.972653][ T5614] team0: Port device team_slave_0 added [ 72.972781][ T5612] rxe_eth0 speed is unknown, defaulting to 1000 [ 72.975020][ T5614] team0: Port device team_slave_1 added [ 72.993481][ T5613] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 73.042407][ T5618] team0: Port device team_slave_0 added [ 73.045889][ T5613] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 73.047396][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.047409][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.047429][ T5622] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.050442][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.050455][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.052810][ T5614] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.059705][ T5618] team0: Port device team_slave_1 added [ 73.116495][ T5622] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.116510][ T5622] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.116531][ T5622] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.142155][ T5614] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.142171][ T5614] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.142191][ T5614] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.253665][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.253681][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.253701][ T5618] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.317010][ T5613] team0: Port device team_slave_0 added [ 73.341457][ T5614] hsr_slave_0: entered promiscuous mode [ 73.342677][ T5614] hsr_slave_1: entered promiscuous mode [ 73.344529][ T5618] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.344541][ T5618] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.344563][ T5618] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.353965][ T5622] hsr_slave_0: entered promiscuous mode [ 73.355615][ T5622] hsr_slave_1: entered promiscuous mode [ 73.356374][ T5622] debugfs: 'hsr0' already exists in 'hsr' [ 73.356463][ T5622] Cannot create hsr debugfs directory [ 73.359253][ T5613] team0: Port device team_slave_1 added [ 73.474436][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 73.474450][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.474467][ T5613] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 73.521352][ T5613] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 73.521369][ T5613] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 73.521389][ T5613] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 73.570406][ T5618] hsr_slave_0: entered promiscuous mode [ 73.572703][ T5618] hsr_slave_1: entered promiscuous mode [ 73.573364][ T5618] debugfs: 'hsr0' already exists in 'hsr' [ 73.573381][ T5618] Cannot create hsr debugfs directory [ 73.664041][ T5613] hsr_slave_0: entered promiscuous mode [ 73.665051][ T5613] hsr_slave_1: entered promiscuous mode [ 73.665846][ T5613] debugfs: 'hsr0' already exists in 'hsr' [ 73.665864][ T5613] Cannot create hsr debugfs directory [ 74.066027][ T5614] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 74.085020][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.092230][ T4935] Bluetooth: hci3: command tx timeout [ 74.092314][ T5625] Bluetooth: hci0: command tx timeout [ 74.109898][ T5614] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 74.119038][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.120140][ T5614] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 74.131800][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.150823][ T5614] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 74.154007][ T5614] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.171320][ T4935] Bluetooth: hci2: command tx timeout [ 74.171349][ T4935] Bluetooth: hci1: command tx timeout [ 74.171465][ T5625] Bluetooth: hci4: command tx timeout [ 74.269244][ T5612] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.269418][ T5612] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.269782][ T5612] bridge_slave_0: entered allmulticast mode [ 74.272034][ T5612] bridge_slave_0: entered promiscuous mode [ 74.274711][ T5612] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.274832][ T5612] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.275225][ T5612] bridge_slave_1: entered allmulticast mode [ 74.276771][ T5612] bridge_slave_1: entered promiscuous mode [ 74.308839][ T5612] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 74.312349][ T5612] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 74.344112][ T5612] team0: Port device team_slave_0 added [ 74.346956][ T5612] team0: Port device team_slave_1 added [ 74.380024][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 74.380040][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.380060][ T5612] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 74.386646][ T5618] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 74.395848][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.396755][ T5618] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 74.418518][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.423040][ T5618] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 74.434371][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.440214][ T5612] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 74.440227][ T5612] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 74.440247][ T5612] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 74.444625][ T5618] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 74.449972][ T5618] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.567086][ T5612] hsr_slave_0: entered promiscuous mode [ 74.567670][ T5612] hsr_slave_1: entered promiscuous mode [ 74.568075][ T5612] debugfs: 'hsr0' already exists in 'hsr' [ 74.568092][ T5612] Cannot create hsr debugfs directory [ 74.651639][ T5622] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 74.654781][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.656074][ T5622] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 74.662338][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.678356][ T5622] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 74.686130][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.710608][ T5622] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 74.714180][ T5622] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.846240][ T5614] 8021q: adding VLAN 0 to HW filter on device bond0 [ 74.847972][ T5613] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 74.852395][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 74.883927][ T5613] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 74.886336][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 74.887111][ T5613] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 74.889203][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 74.889848][ T5613] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 74.898149][ T5613] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 74.954222][ T5614] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.003994][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.004114][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.053613][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.053929][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.064682][ T5618] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.069621][ T5622] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.097275][ T5612] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 75.100311][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 75.123732][ T5612] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 75.126215][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 75.126932][ T5612] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 75.128999][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 75.130333][ T5612] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 75.142004][ T5612] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 75.160255][ T5618] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.195443][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.195507][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.220389][ T5622] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.238206][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.238264][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.247468][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.247566][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.300916][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.301017][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.388347][ T5613] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.493240][ T5613] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.556133][ T3788] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.556237][ T3788] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.606845][ T50] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.606946][ T50] bridge0: port 2(bridge_slave_1) entered forwarding state [ 75.728966][ T5612] 8021q: adding VLAN 0 to HW filter on device bond0 [ 75.829222][ T5612] 8021q: adding VLAN 0 to HW filter on device team0 [ 75.864768][ T50] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.864868][ T50] bridge0: port 1(bridge_slave_0) entered forwarding state [ 75.911977][ T3751] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.912081][ T3751] bridge0: port 2(bridge_slave_1) entered forwarding state [ 76.170801][ T5616] Bluetooth: hci3: command tx timeout [ 76.170985][ T5625] Bluetooth: hci0: command tx timeout [ 76.250960][ T5616] Bluetooth: hci1: command tx timeout [ 76.250991][ T5616] Bluetooth: hci2: command tx timeout [ 76.251102][ T5625] Bluetooth: hci4: command tx timeout [ 76.437993][ T5614] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.604118][ T5614] veth0_vlan: entered promiscuous mode [ 76.626142][ T5614] veth1_vlan: entered promiscuous mode [ 76.633883][ T5622] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.710400][ T5618] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 76.799994][ T5614] veth0_macvtap: entered promiscuous mode [ 76.861408][ T5614] veth1_macvtap: entered promiscuous mode [ 76.923662][ T5622] veth0_vlan: entered promiscuous mode [ 76.965063][ T5622] veth1_vlan: entered promiscuous mode [ 76.989680][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.028659][ T5614] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.092965][ T3788] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.093500][ T3788] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.098503][ T5613] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.201835][ T159] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.201950][ T159] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.229650][ T5612] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 77.258082][ T5622] veth0_macvtap: entered promiscuous mode [ 77.289166][ T159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.289189][ T159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.307078][ T5622] veth1_macvtap: entered promiscuous mode [ 77.342262][ T5613] veth0_vlan: entered promiscuous mode [ 77.397484][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.411488][ T5613] veth1_vlan: entered promiscuous mode [ 77.413671][ T159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.413688][ T159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.418961][ T5618] veth0_vlan: entered promiscuous mode [ 77.427719][ T5618] veth1_vlan: entered promiscuous mode [ 77.465332][ T5622] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.469595][ T5618] veth0_macvtap: entered promiscuous mode [ 77.508868][ T5612] veth0_vlan: entered promiscuous mode [ 77.517243][ T5618] veth1_macvtap: entered promiscuous mode [ 77.548698][ T5614] soft_limit_in_bytes is deprecated and will be removed. Writing any value to this file has no effect. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 77.591964][ T154] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.592446][ T5612] veth1_vlan: entered promiscuous mode [ 77.614903][ T5613] veth0_macvtap: entered promiscuous mode [ 77.646452][ T3751] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.646524][ T3751] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.646574][ T3751] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 77.663188][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.663626][ T5613] veth1_macvtap: entered promiscuous mode [ 77.684275][ T5618] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.765283][ T159] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.765303][ T159] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.768803][ T5825] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1'. [ 77.781682][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 77.787469][ T5613] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 77.836214][ T5612] veth0_macvtap: entered promiscuous mode [ 77.913826][ T5612] veth1_macvtap: entered promiscuous mode [ 77.917837][ T3788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 77.917856][ T3788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 77.991253][ T159] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.111526][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 78.113482][ T154] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.113499][ T154] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.152514][ T3751] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.152559][ T3751] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.152590][ T3751] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.154520][ T5612] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 78.227741][ T5836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3'. [ 78.252607][ T4935] Bluetooth: hci3: command tx timeout [ 78.252649][ T5625] Bluetooth: hci0: command tx timeout [ 78.253734][ T3788] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.253750][ T3788] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.302646][ T3788] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.331092][ T4935] Bluetooth: hci2: command tx timeout [ 78.331123][ T4935] Bluetooth: hci1: command tx timeout [ 78.331173][ T5625] Bluetooth: hci4: command tx timeout [ 78.344083][ T159] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.344099][ T159] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.374243][ T3788] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.374612][ T3788] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.405947][ T5831] netlink: 20 bytes leftover after parsing attributes in process `syz.0.8'. [ 78.463283][ T3788] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.463301][ T3788] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.477008][ T3788] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.477369][ T3788] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.477646][ T3788] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.566918][ T3788] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.566937][ T3788] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.620873][ T154] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.621083][ T154] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 78.675189][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.675208][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.850102][ T5851] Zero length message leads to an empty skb [ 79.452505][ T5891] openvswitch: netlink: push_nsh: missing base or metadata attributes [ 79.778032][ T5904] syz.2.26 uses obsolete (PF_INET,SOCK_PACKET) [ 80.149842][ T5930] netlink: 8 bytes leftover after parsing attributes in process `syz.0.33'. [ 80.167886][ T5930] netlink: 12 bytes leftover after parsing attributes in process `syz.0.33'. [ 80.355239][ T5936] xt_CT: No such helper "pptp" [ 80.707578][ T5964] vxcan1: entered allmulticast mode [ 80.710071][ T5964] netlink: 20 bytes leftover after parsing attributes in process `syz.0.41'. [ 80.763281][ T5971] netlink: 156 bytes leftover after parsing attributes in process `syz.0.41'. [ 81.011748][ T5984] xt_esp: unknown flags DD [ 81.011892][ T5984] xt_esp: unknown flags DD [ 81.011986][ T5984] xt_esp: unknown flags DD [ 81.012066][ T5984] xt_esp: unknown flags DD [ 81.012150][ T5984] xt_esp: unknown flags DD [ 81.012233][ T5984] xt_esp: unknown flags DD [ 81.012315][ T5984] xt_esp: unknown flags DD [ 81.012395][ T5984] xt_esp: unknown flags DD [ 81.012478][ T5984] xt_esp: unknown flags DD [ 81.012558][ T5984] xt_esp: unknown flags DD [ 81.128418][ T5987] netlink: 'syz.4.47': attribute type 8 has an invalid length. [ 81.283200][ T5993] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 81.319295][ T5997] syzkaller0: entered promiscuous mode [ 81.319316][ T5997] syzkaller0: entered allmulticast mode [ 81.323563][ T5997] PF_CAN: dropped non conform CAN FD skbuff: dev type 280, len 65487 [ 81.419893][ T6012] ip_tables: iptables: counters copy to user failed while replacing table [ 81.609332][ T6021] macvlan2: entered promiscuous mode [ 81.609353][ T6021] macvlan2: entered allmulticast mode [ 81.802460][ T6024] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.803430][ T6024] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.803613][ T6024] bridge0: port 2(bridge_slave_1) entered forwarding state [ 81.985051][ T6035] netlink: 40 bytes leftover after parsing attributes in process `syz.0.60'. [ 82.027216][ T6029] netlink: 12 bytes leftover after parsing attributes in process `syz.2.57'. [ 82.040787][ T6032] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 82.046722][ T6033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 82.306684][ T6056] netlink: 8 bytes leftover after parsing attributes in process `syz.3.67'. [ 82.680901][ T6077] netlink: 'syz.3.72': attribute type 2 has an invalid length. [ 82.778469][ T6084] netlink: 'syz.2.73': attribute type 1 has an invalid length. [ 82.778489][ T6084] __nla_validate_parse: 7 callbacks suppressed [ 82.778499][ T6084] netlink: 224 bytes leftover after parsing attributes in process `syz.2.73'. [ 82.949047][ T6096] netlink: 8 bytes leftover after parsing attributes in process `syz.4.78'. [ 82.949068][ T6096] netlink: 24 bytes leftover after parsing attributes in process `syz.4.78'. [ 83.108673][ T6099] tipc: Enabling of bearer rejected, failed to enable media [ 83.229412][ T6109] netlink: 44 bytes leftover after parsing attributes in process `syz.1.83'. [ 83.588418][ T3106] rxe_eth0 speed is unknown, defaulting to 1000 [ 83.695030][ T6135] netlink: 16 bytes leftover after parsing attributes in process `syz.2.89'. [ 83.819278][ T6146] netlink: 20 bytes leftover after parsing attributes in process `syz.2.92'. [ 84.355967][ T6168] netlink: 'syz.4.98': attribute type 1 has an invalid length. [ 84.368489][ T6170] netlink: 56 bytes leftover after parsing attributes in process `syz.4.98'. [ 84.369897][ T6168] netlink: 56 bytes leftover after parsing attributes in process `syz.4.98'. [ 84.532840][ T6180] netlink: 32 bytes leftover after parsing attributes in process `syz.4.98'. [ 84.591101][ T6180] macsec0: entered promiscuous mode [ 84.925224][ T6205] ip_tables: iptables: counters copy to user failed while replacing table [ 84.937028][ T6205] netlink: 'syz.4.105': attribute type 3 has an invalid length. [ 85.141917][ T6216] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 85.188448][ T6221] netlink: 256 bytes leftover after parsing attributes in process `syz.2.109'. [ 85.199139][ T6222] veth1_macvtap: left promiscuous mode [ 85.386690][ T6235] netlink: 'syz.1.112': attribute type 8 has an invalid length. [ 85.890642][ T6259] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 85.902624][ T6257] netlink: 'syz.1.119': attribute type 11 has an invalid length. [ 85.902644][ T6257] netlink: 'syz.1.119': attribute type 11 has an invalid length. [ 85.921758][ T6269] netlink: 'syz.1.119': attribute type 11 has an invalid length. [ 85.921777][ T6269] netlink: 'syz.1.119': attribute type 11 has an invalid length. [ 86.059239][ T145] IPVS: starting estimator thread 0... [ 86.171510][ T6274] IPVS: using max 37 ests per chain, 88800 per kthread [ 86.240032][ T6287] Bluetooth: MGMT ver 1.23 [ 86.240074][ T6287] Bluetooth: hci0: unsupported parameter 5134 [ 86.240087][ T6287] Bluetooth: hci0: unsupported parameter 8192 [ 86.240101][ T6287] Bluetooth: hci0: unsupported parameter 5134 [ 86.240112][ T6287] Bluetooth: hci0: unsupported parameter 8192 [ 86.415198][ T6304] openvswitch: netlink: IP tunnel dst address not specified [ 86.673782][ T984] cfg80211: failed to load regulatory.db [ 86.882740][ T6334] IPVS: sync thread started: state = MASTER, mcast_ifn = team_slave_0, syncid = 4, id = 0 [ 87.406742][ T6355] IPVS: ip_vs_edit_dest(): server weight less than zero [ 87.407720][ T3751] IPVS: starting estimator thread 0... [ 87.501857][ T6356] IPVS: using max 31 ests per chain, 74400 per kthread [ 87.593457][ T6369] syzkaller1: entered promiscuous mode [ 87.593496][ T6369] syzkaller1: entered allmulticast mode [ 89.540335][ T6314] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 89.968183][ T6405] netlink: 'syz.0.159': attribute type 32 has an invalid length. [ 90.102244][ T6414] x_tables: duplicate underflow at hook 3 [ 90.298951][ T6431] __nla_validate_parse: 9 callbacks suppressed [ 90.298969][ T6431] netlink: 100 bytes leftover after parsing attributes in process `syz.2.167'. [ 90.306784][ T6416] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 90.327193][ T6416] bond1 (unregistering): Released all slaves [ 90.383559][ T6437] netlink: 'syz.0.169': attribute type 1 has an invalid length. [ 90.388481][ T6440] netlink: 100 bytes leftover after parsing attributes in process `syz.2.167'. [ 90.423284][ T6432] bond1: option active_slave: mode dependency failed, not supported in mode balance-rr(0) [ 90.425675][ T6432] bond1 (unregistering): Released all slaves [ 90.512910][ T6429] warning: `syz.1.168' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 90.738442][ T6451] netlink: 'syz.0.171': attribute type 30 has an invalid length. [ 90.933723][ T6448] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 90.979900][ T6467] netlink: 256 bytes leftover after parsing attributes in process `syz.3.174'. [ 91.006418][ T6469] IPVS: set_ctl: invalid protocol: 117 100.1.1.1:20003 [ 91.081165][ T6476] netlink: 8 bytes leftover after parsing attributes in process `syz.3.179'. [ 91.314742][ T6489] netlink: 72 bytes leftover after parsing attributes in process `syz.4.183'. [ 91.328848][ T6487] netlink: 60 bytes leftover after parsing attributes in process `syz.0.182'. [ 91.468904][ T6494] netlink: 'syz.2.184': attribute type 2 has an invalid length. [ 91.482287][ T6500] netlink: 'syz.2.184': attribute type 2 has an invalid length. [ 91.482326][ T6500] netlink: 'syz.2.184': attribute type 2 has an invalid length. [ 91.628616][ T6510] netlink: 48 bytes leftover after parsing attributes in process `syz.4.188'. [ 91.672596][ T6511] netlink: 4 bytes leftover after parsing attributes in process `syz.3.185'. [ 91.760247][ T6511] bond1: (slave bridge1): Enslaving as an active interface with an up link [ 92.437625][ T6542] netlink: 20 bytes leftover after parsing attributes in process `syz.1.198'. [ 92.437655][ T6542] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 92.524826][ T6548] netlink: 8 bytes leftover after parsing attributes in process `syz.2.199'. [ 92.588920][ T6553] netlink: 'syz.1.200': attribute type 9 has an invalid length. [ 92.717465][ T6557] bridge0: port 1(bridge_slave_0) entered disabled state [ 92.733712][ T6557] bridge_slave_0 (unregistering): left allmulticast mode [ 92.733737][ T6557] bridge_slave_0 (unregistering): left promiscuous mode [ 92.733824][ T6557] bridge0: port 1(bridge_slave_0) entered disabled state [ 93.125710][ T6586] netlink: 'syz.3.210': attribute type 1 has an invalid length. [ 93.676670][ T6611] xt_hashlimit: size too large, truncated to 1048576 [ 93.945984][ T6601] netdevsim netdevsim2 netdevsim0: entered promiscuous mode [ 94.616453][ T6653] netlink: 'syz.1.230': attribute type 3 has an invalid length. [ 94.616473][ T6653] netlink: 'syz.1.230': attribute type 1 has an invalid length. [ 94.871420][ T6656] syzkaller0: entered promiscuous mode [ 94.871457][ T6656] syzkaller0: entered allmulticast mode [ 94.943100][ T6673] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 94.943217][ T6673] syzkaller1: linktype set to 823 [ 95.225861][ T6704] nbd: must specify at least one socket [ 96.928981][ T6735] lo: entered promiscuous mode [ 96.936801][ T6740] __nla_validate_parse: 7 callbacks suppressed [ 96.936816][ T6740] netlink: 4 bytes leftover after parsing attributes in process `syz.1.242'. [ 96.965379][ T6735] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 97.013380][ T6741] netlink: Unknown conntrack attr (0) [ 97.063361][ T6747] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 97.178071][ T6758] netlink: 'syz.4.252': attribute type 21 has an invalid length. [ 97.178094][ T6758] netlink: 152 bytes leftover after parsing attributes in process `syz.4.252'. [ 97.341811][ T6771] nbd: must specify an index to disconnect [ 97.420322][ T6777] netlink: 'syz.2.256': attribute type 1 has an invalid length. [ 97.479514][ T6777] 8021q: adding VLAN 0 to HW filter on device bond1 [ 97.491021][ T6782] bond1: up delay (136) is not a multiple of miimon (100), value rounded to 100 ms [ 97.495951][ T6782] bond1: entered allmulticast mode [ 97.563254][ T6784] netlink: 60 bytes leftover after parsing attributes in process `syz.0.259'. [ 97.563892][ T6784] netlink: 60 bytes leftover after parsing attributes in process `syz.0.259'. [ 97.568777][ T6784] netlink: 36 bytes leftover after parsing attributes in process `syz.0.259'. [ 97.649704][ T6777] bond1: (slave ip6gretap1): Enslaving as an active interface with an up link [ 97.694273][ T6786] netlink: 16 bytes leftover after parsing attributes in process `syz.1.260'. [ 97.729017][ T6796] netlink: 20 bytes leftover after parsing attributes in process `syz.3.262'. [ 97.842937][ T6799] vlan2: entered promiscuous mode [ 97.842987][ T6799] bridge0: entered promiscuous mode [ 97.903428][ T6806] netlink: 4 bytes leftover after parsing attributes in process `syz.2.264'. [ 98.042783][ T6806] team0 (unregistering): Port device team_slave_0 removed [ 98.054798][ T6806] team0 (unregistering): Port device team_slave_1 removed [ 98.103616][ T6814] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 98.163841][ T6818] netlink: 56 bytes leftover after parsing attributes in process `syz.1.272'. [ 98.164448][ T6818] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.164468][ T6818] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 98.169115][ T6818] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 98.169136][ T6818] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 98.352072][ T6828] openvswitch: netlink: Tunnel attr 68 out of range max 16 [ 98.467263][ T6839] netlink: 16 bytes leftover after parsing attributes in process `syz.1.279'. [ 98.640713][ T145] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.640754][ T145] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.640910][ T145] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 98.640941][ T145] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 99.105284][ T6872] netlink: 'syz.1.289': attribute type 83 has an invalid length. [ 99.143372][ T6872] netlink: 'syz.1.289': attribute type 3 has an invalid length. [ 99.175549][ T6877] ip_tables: iptables: counters copy to user failed while replacing table [ 99.225434][ T6877] bond1: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 99.229418][ T6877] bond1 (unregistering): Released all slaves [ 99.412589][ T6884] netlink: 'syz.0.293': attribute type 1 has an invalid length. [ 99.998203][ T6926] xt_hashlimit: size too large, truncated to 1048576 [ 100.103711][ T6926] xt_hashlimit: invalid interval [ 100.476092][ T6956] xt_CT: You must specify a L4 protocol and not use inversions on it [ 100.601945][ T6959] netlink: Invalid conntrack timeout [ 100.601974][ T6959] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 100.886028][ T6988] IPv6: addrconf: prefix option has invalid lifetime [ 100.988248][ T6992] v: renamed from veth0_vlan [ 101.002544][ T6996] x_tables: duplicate underflow at hook 2 [ 101.019979][ T6995] syzkaller0: entered promiscuous mode [ 101.020002][ T6995] syzkaller0: entered allmulticast mode [ 101.784405][ T7006] batman_adv: batadv0: Adding interface: syz_tun [ 101.784423][ T7006] batman_adv: batadv0: The MTU of interface syz_tun is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 101.784445][ T7006] batman_adv: batadv0: Interface activated: syz_tun [ 103.631636][ T6970] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 103.884226][ T7022] __nla_validate_parse: 8 callbacks suppressed [ 103.884246][ T7022] netlink: 12 bytes leftover after parsing attributes in process `syz.3.331'. [ 103.928763][ T31] audit: type=1107 audit(1792297257.394:2): pid=7014 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='ً5%UA٠0ltݕ/ 6򊨊' [ 104.554170][ T7062] netlink: 12 bytes leftover after parsing attributes in process `syz.1.337'. [ 104.554492][ T7062] 8021q: VLANs not supported on ip_vti0 [ 104.852519][ T7077] netlink: 'syz.0.340': attribute type 9 has an invalid length. [ 104.952078][ T5279] v: left promiscuous mode [ 104.977455][ T5741] v: entered promiscuous mode [ 105.082851][ T7087] netlink: 56 bytes leftover after parsing attributes in process `syz.1.345'. [ 105.160099][ T7089] geneve2: entered promiscuous mode [ 105.234311][ T7096] netlink: 'syz.0.347': attribute type 2 has an invalid length. [ 105.304703][ T7101] netlink: 'syz.1.348': attribute type 30 has an invalid length. [ 105.363736][ T7101] bond1: option arp_missed_max: invalid value (0) [ 105.363759][ T7101] bond1: option arp_missed_max: allowed values 1 - 255 [ 105.370057][ T7101] bond1 (unregistering): Released all slaves [ 105.752650][ T7141] netlink: 'syz.4.353': attribute type 1 has an invalid length. [ 105.760417][ T7140] Bluetooth: hci0: Invalid link key type 76 for 00:00:4c:00:00:00 [ 106.011590][ T7141] bond1: (slave bridge2): making interface the new active one [ 106.029825][ T7141] bond1: (slave bridge2): Enslaving as an active interface with an up link [ 106.406639][ T7172] netlink: 8 bytes leftover after parsing attributes in process `syz.1.361'. [ 106.408649][ T7171] netlink: 8 bytes leftover after parsing attributes in process `syz.3.363'. [ 106.553816][ T7177] netlink: 8 bytes leftover after parsing attributes in process `syz.3.365'. [ 106.786072][ T7192] ieee802154 phy0 wpan0: encryption failed: -22 [ 107.126085][ T7212] netlink: 8 bytes leftover after parsing attributes in process `syz.2.375'. [ 107.126139][ T7212] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.155987][ T7214] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 107.157404][ T7214] netlink: 'syz.0.376': attribute type 3 has an invalid length. [ 107.538045][ T7248] netlink: 'syz.3.383': attribute type 1 has an invalid length. [ 107.658052][ T7248] 8021q: adding VLAN 0 to HW filter on device bond2 [ 107.707147][ T7249] bond2: (slave bridge4): making interface the new active one [ 107.709350][ T7249] bond2: (slave bridge4): Enslaving as an active interface with an up link [ 107.748998][ T7259] netlink: 4 bytes leftover after parsing attributes in process `syz.4.386'. [ 107.809114][ T7264] netlink: 12 bytes leftover after parsing attributes in process `syz.4.386'. [ 107.918221][ T7272] x_tables: duplicate underflow at hook 4 [ 107.950735][ T7279] netlink: 8 bytes leftover after parsing attributes in process `syz.2.391'. [ 108.415828][ T5625] Bluetooth: hci4: command tx timeout [ 108.565111][ T7316] netlink: 'syz.3.404': attribute type 1 has an invalid length. [ 109.016216][ T7343] __nla_validate_parse: 5 callbacks suppressed [ 109.016270][ T7343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.412'. [ 109.018797][ T7343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.412'. [ 109.019459][ T7343] netlink: 4 bytes leftover after parsing attributes in process `syz.1.412'. [ 109.256303][ T7354] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 109.257654][ T7354] netlink: 4 bytes leftover after parsing attributes in process `syz.1.417'. [ 109.257671][ T7354] netlink: 12 bytes leftover after parsing attributes in process `syz.1.417'. [ 109.308824][ T7357] smbdirect: ib_dev[syz1]: added: RNIC max_fast_reg_page_list_len=256 device_cap_flags=0x200000 kernel_cap_flags=0x10 page_size_cap=0x1000 [ 109.308856][ T7357] smbdirect: ib_dev[syz1]: num_ports=1 max_qp_rd_atom=128 max_qp_init_rd_atom=128 max_sgl_rd=0 max_sge_rd=1 max_cqe=3276800 max_qp_wr=32768 max_send_sge=6 max_recv_sge=6 [ 109.308887][ T7357] smbdirect: ib_dev[syz1]PORT[1]: iwarp=1 ib=0 roce=0 v1=0 v2=0 core_cap_flags=0x400008 [ 109.365737][ T7357] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 109.385217][ T7357] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 109.658779][ T7379] netlink: 52 bytes leftover after parsing attributes in process `syz.1.424'. [ 109.818074][ T7382] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 109.835803][ T7382] batman_adv: batadv0: Adding interface: gretap1 [ 109.835818][ T7382] batman_adv: batadv0: The MTU of interface gretap1 is too small (1462) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 109.835842][ T7382] batman_adv: batadv0: Interface activated: gretap1 [ 109.888311][ T7394] netlink: 'syz.1.429': attribute type 11 has an invalid length. [ 109.899466][ T7396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.426'. [ 109.899491][ T7396] netlink: 4 bytes leftover after parsing attributes in process `syz.3.426'. [ 110.186285][ T7419] netlink: 8 bytes leftover after parsing attributes in process `syz.4.431'. [ 110.412141][ T7424] bridge1: trying to set multicast startup query interval below minimum, setting to 100 (1000ms) [ 110.412192][ T7424] bridge1: entered promiscuous mode [ 110.412207][ T7424] bridge1: entered allmulticast mode [ 110.767581][ T7444] syzkaller0: entered promiscuous mode [ 110.767610][ T7444] syzkaller0: entered allmulticast mode [ 110.831110][ T7457] netlink: 28 bytes leftover after parsing attributes in process `syz.1.441'. [ 111.223922][ T7472] bond2: Invalid ad_actor_system MAC address. [ 111.223941][ T7472] bond2: option ad_actor_system: invalid value (1) [ 111.231412][ T7472] bond2 (unregistering): Released all slaves [ 112.803682][ T7553] vcan0: tx drop: invalid da for name 0x0000000000000003 [ 113.039780][ T7566] batadv_slave_1: entered promiscuous mode [ 113.071864][ T7564] batadv_slave_1: left promiscuous mode [ 113.204520][ T7569] netlink: 'syz.2.470': attribute type 1 has an invalid length. [ 113.382017][ T7576] netlink: 'syz.1.472': attribute type 32 has an invalid length. [ 113.384074][ T7569] 8021q: adding VLAN 0 to HW filter on device bond3 [ 113.507824][ T7569] bond3: (slave bridge2): making interface the new active one [ 113.522000][ T7569] bond3: (slave bridge2): Enslaving as an active interface with an up link [ 113.590059][ T7584] netdevsim netdevsim3 netdevsim0: entered promiscuous mode [ 113.862800][ T7604] batman_adv: batadv0: Adding interface: macvtap0 [ 113.862818][ T7604] batman_adv: batadv0: The MTU of interface macvtap0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 113.862843][ T7604] batman_adv: batadv0: Not using interface macvtap0 (retrying later): interface not active [ 113.958421][ T7604] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 114.235847][ T7629] Set syz0 is full, maxelem 2 reached [ 114.443648][ T7644] netlink: 'syz.0.489': attribute type 2 has an invalid length. [ 114.443670][ T7644] netlink: 'syz.0.489': attribute type 8 has an invalid length. [ 114.443679][ T7644] __nla_validate_parse: 17 callbacks suppressed [ 114.443688][ T7644] netlink: 132 bytes leftover after parsing attributes in process `syz.0.489'. [ 114.447155][ T7654] netlink: 104 bytes leftover after parsing attributes in process `syz.1.490'. [ 114.583995][ T7644] netlink: 'syz.0.489': attribute type 2 has an invalid length. [ 114.584020][ T7644] netlink: 'syz.0.489': attribute type 8 has an invalid length. [ 114.584030][ T7644] netlink: 132 bytes leftover after parsing attributes in process `syz.0.489'. [ 114.584231][ T7644] netlink: 'syz.0.489': attribute type 2 has an invalid length. [ 114.584243][ T7644] netlink: 'syz.0.489': attribute type 8 has an invalid length. [ 114.584253][ T7644] netlink: 132 bytes leftover after parsing attributes in process `syz.0.489'. [ 114.584466][ T7644] netlink: 'syz.0.489': attribute type 2 has an invalid length. [ 114.584478][ T7644] netlink: 'syz.0.489': attribute type 8 has an invalid length. [ 114.584487][ T7644] netlink: 132 bytes leftover after parsing attributes in process `syz.0.489'. [ 114.584795][ T7644] netlink: 132 bytes leftover after parsing attributes in process `syz.0.489'. [ 114.585072][ T7644] netlink: 132 bytes leftover after parsing attributes in process `syz.0.489'. [ 114.585312][ T7644] netlink: 132 bytes leftover after parsing attributes in process `syz.0.489'. [ 114.585517][ T7644] netlink: 132 bytes leftover after parsing attributes in process `syz.0.489'. [ 114.764069][ T7644] netlink: 132 bytes leftover after parsing attributes in process `syz.0.489'. [ 115.023538][ T7676] A link change request failed with some changes committed already. Interface veth0_vlan may have been left with an inconsistent configuration, please check. [ 115.049528][ T984] hid-generic 0005:0458:0009.0001: unknown main item tag 0x0 [ 115.049571][ T984] hid-generic 0005:0458:0009.0001: unknown main item tag 0x0 [ 115.113941][ T984] hid-generic 0005:0458:0009.0001: hidraw0: BLUETOOTH HID v0.03 Device [syz1] on aa:aa:aa:aa:aa:aa [ 115.909355][ T7730] openvswitch: netlink: Flow key attribute not present in set flow. [ 116.413600][ T7755] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 116.429071][ T7755] openvswitch: netlink: IPv4 frag type 132 is out of range max 2 [ 116.525581][ T7776] openvswitch: netlink: IPv4 frag type 132 is out of range max 2 [ 116.660343][ T7763] erspan0: entered promiscuous mode [ 116.994034][ T7798] bridge0: entered allmulticast mode [ 117.247347][ T5279] veth0_vlan: left promiscuous mode [ 117.277630][ T984] veth0_vlan: entered promiscuous mode [ 117.536106][ T7826] Bluetooth: MGMT ver 1.23 [ 118.149783][ T7852] syzkaller1: entered promiscuous mode [ 118.149805][ T7852] syzkaller1: entered allmulticast mode [ 119.312054][ T7902] ip6erspan0: entered allmulticast mode [ 119.369769][ T7911] netlink: Conntrack attr type has unexpected length (type=0, length=5, expected=0) [ 119.369805][ T7911] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 119.630985][ T7920] validate_nla: 59 callbacks suppressed [ 119.631006][ T7920] netlink: 'syz.1.543': attribute type 1 has an invalid length. [ 119.676403][ T7920] netlink: 'syz.1.543': attribute type 10 has an invalid length. [ 119.676428][ T7920] __nla_validate_parse: 35 callbacks suppressed [ 119.676438][ T7920] netlink: 40 bytes leftover after parsing attributes in process `syz.1.543'. [ 119.677423][ T7920] dummy0: entered promiscuous mode [ 120.195727][ T7959] ip_tables: iptables: counters copy to user failed while replacing table [ 120.259048][ T7962] ip_tables: iptables: counters copy to user failed while replacing table [ 120.415891][ T7973] netlink: 24 bytes leftover after parsing attributes in process `syz.3.552'. [ 120.645108][ T7973] netlink: 24 bytes leftover after parsing attributes in process `syz.3.552'. [ 120.742345][ T7987] netlink: 'syz.1.556': attribute type 1 has an invalid length. [ 120.941699][ T7998] netlink: 8 bytes leftover after parsing attributes in process `syz.0.558'. [ 120.959663][ T7994] 8021q: adding VLAN 0 to HW filter on device bond2 [ 120.974367][ T7994] bond1: (slave bond2): making interface the new active one [ 120.974851][ T7994] bond1: (slave bond2): Enslaving as an active interface with an up link [ 121.063429][ T7987] bond1: (slave gretap2): Enslaving as a backup interface with an up link [ 121.096699][ T7995] smc: net device lo applied user defined pnetid SYZ0 [ 121.106953][ T7995] smc: smcd device lo applied user defined pnetid SYZ0 [ 121.135570][ T8011] netlink: 'syz.4.560': attribute type 1 has an invalid length. [ 121.194406][ T8011] bond3: entered promiscuous mode [ 121.196036][ T8011] 8021q: adding VLAN 0 to HW filter on device bond3 [ 121.318550][ T8011] 8021q: adding VLAN 0 to HW filter on device bond3 [ 121.318956][ T8011] bond3: (slave gre1): The slave device specified does not support setting the MAC address [ 121.318974][ T8011] bond3: (slave gre1): Setting fail_over_mac to active for active-backup mode [ 121.358268][ T8011] bond3: (slave gre1): making interface the new active one [ 121.358292][ T8011] gre1: entered promiscuous mode [ 121.382574][ T8011] bond3: (slave gre1): Enslaving as an active interface with an up link [ 121.487525][ T8021] raw_sendmsg: syz.0.561 forgot to set AF_INET. Fix it! [ 121.527892][ T8023] netlink: 32 bytes leftover after parsing attributes in process `syz.1.562'. [ 121.547797][ T8023] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 121.572980][ T8027] netlink: 44 bytes leftover after parsing attributes in process `syz.2.563'. [ 121.573282][ T8027] netlink: 44 bytes leftover after parsing attributes in process `syz.2.563'. [ 121.573608][ T8027] netlink: 44 bytes leftover after parsing attributes in process `syz.2.563'. [ 121.573755][ T8027] netlink: 44 bytes leftover after parsing attributes in process `syz.2.563'. [ 121.573896][ T8027] netlink: 44 bytes leftover after parsing attributes in process `syz.2.563'. [ 121.750273][ T8034] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 121.772664][ T8034] openvswitch: netlink: Missing key (keys=c0, expected=480) [ 121.970425][ T8045] netlink: 'syz.2.570': attribute type 1 has an invalid length. [ 122.196537][ T8052] netdevsim netdevsim0: Direct firmware load for .. failed with error -2 [ 122.196571][ T8052] netdevsim netdevsim0: Falling back to sysfs fallback for: .. [ 122.275691][ T8074] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 122.342740][ T8078] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 122.937128][ T8114] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 123.103596][ T8119] tipc: Enabling of bearer rejected, failed to enable media [ 123.105785][ T8119] netlink: 'syz.2.587': attribute type 8 has an invalid length. [ 123.107672][ T8119] bridge0: port 2(bridge_slave_1) entered disabled state [ 123.108774][ T8119] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.709726][ T8160] Bluetooth: hci0: unsupported parameter 5135 [ 123.709747][ T8160] Bluetooth: hci0: unsupported parameter 8192 [ 123.709759][ T8160] Bluetooth: hci0: unsupported parameter 5135 [ 123.709769][ T8160] Bluetooth: hci0: unsupported parameter 8192 [ 123.839108][ T8159] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 123.867340][ T8164] netlink: Failed to add helper -22 [ 123.997463][ T8184] bond4: Invalid ad_actor_system MAC address. [ 123.997481][ T8184] bond4: option ad_actor_system: invalid value (1) [ 124.108974][ T5625] Bluetooth: hci4: Malformed HCI Event [ 124.445827][ T8184] bond4 (unregistering): Released all slaves [ 124.710661][ T8207] __nla_validate_parse: 49 callbacks suppressed [ 124.710682][ T8207] netlink: 8 bytes leftover after parsing attributes in process `syz.2.612'. [ 124.723382][ T8209] netlink: 8 bytes leftover after parsing attributes in process `syz.2.612'. [ 124.905975][ T8227] netlink: 4 bytes leftover after parsing attributes in process `syz.4.615'. [ 124.908860][ T8226] bond3: (slave lo): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 124.941314][ T8226] bond3: (slave lo): Enslaving as an active interface with an up link [ 124.965736][ T8226] net_ratelimit: 1 callbacks suppressed [ 124.965754][ T8226] A link change request failed with some changes committed already. Interface tunl0 may have been left with an inconsistent configuration, please check. [ 125.058857][ T8232] xt_l2tp: v2 tid > 0xffff: 4294967295 [ 125.059759][ T8232] netlink: 60 bytes leftover after parsing attributes in process `syz.2.617'. [ 125.114161][ T8219] netlink: 12 bytes leftover after parsing attributes in process `syz.0.616'. [ 125.153665][ T8233] netlink: 60 bytes leftover after parsing attributes in process `syz.2.617'. [ 125.220383][ T8219] 8021q: adding VLAN 0 to HW filter on device bond2 [ 125.334977][ T8248] netlink: 4 bytes leftover after parsing attributes in process `syz.3.620'. [ 125.335005][ T8248] netlink: 14 bytes leftover after parsing attributes in process `syz.3.620'. [ 125.512465][ T8256] ip_tables: iptables: counters copy to user failed while replacing table [ 126.258203][ T8272] netlink: 1047 bytes leftover after parsing attributes in process `syz.1.629'. [ 126.258226][ T8272] veth0_to_bond: default FDB implementation only supports local addresses [ 126.594889][ T8301] netlink: 12 bytes leftover after parsing attributes in process `syz.3.640'. [ 126.612021][ T8301] netlink: 'syz.3.640': attribute type 5 has an invalid length. [ 126.615254][ T8301] netlink: 'syz.3.640': attribute type 64 has an invalid length. [ 127.493352][ T8358] ip6t_REJECT: ECHOREPLY is not supported [ 127.808283][ T8386] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 127.899974][ T8394] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 128.037319][ T8380] virtio_blk virtio4: 1/0/0 default/read/poll queues [ 128.044134][ T8380] virtio_blk virtio4: [vda] 262144 512-byte logical blocks (134 MB/128 MiB) [ 128.323876][ T8419] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.340453][ T8420] Bluetooth: MGMT ver 1.23 [ 128.396439][ T8422] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 128.508838][ T8425] xt_hashlimit: size too large, truncated to 1048576 [ 128.526701][ T8425] ip_tables: iptables: counters copy to user failed while replacing table [ 128.774511][ T8412] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 128.774531][ T8412] IPv6: NLM_F_CREATE should be set when creating new route [ 128.938017][ T8442] Bluetooth: MGMT ver 1.23 [ 129.366193][ T8461] netlink: 'syz.0.678': attribute type 3 has an invalid length. [ 129.418968][ T8462] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 131.288577][ T8417] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 131.461950][ T8478] FAULT_INJECTION: forcing a failure. [ 131.461950][ T8478] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 131.461991][ T8478] CPU: 1 UID: 0 PID: 8478 Comm: syz.4.679 Not tainted syzkaller #0 PREEMPT(full) [ 131.462011][ T8478] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 131.462028][ T8478] Call Trace: [ 131.462038][ T8478] [ 131.462046][ T8478] dump_stack_lvl+0xe8/0x150 [ 131.462087][ T8478] should_fail_ex+0x410/0x560 [ 131.462124][ T8478] _copy_from_user+0x2d/0xb0 [ 131.462153][ T8478] ___sys_sendmsg+0x1c6/0x360 [ 131.462175][ T8478] ? __lock_acquire+0x747/0x2de0 [ 131.462200][ T8478] ? __pfx____sys_sendmsg+0x10/0x10 [ 131.462251][ T8478] ? __fget_files+0x2a/0x420 [ 131.462267][ T8478] ? __fget_files+0x3a2/0x420 [ 131.462293][ T8478] __x64_sys_sendmsg+0x1b1/0x290 [ 131.462316][ T8478] ? __pfx___x64_sys_sendmsg+0x10/0x10 [ 131.462356][ T8478] do_syscall_64+0x166/0x520 [ 131.462376][ T8478] ? trace_irq_disable+0x3b/0x140 [ 131.462396][ T8478] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.462415][ T8478] ? clear_bhb_loop+0x70/0xc0 [ 131.462437][ T8478] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 131.462455][ T8478] RIP: 0033:0x7feca999e559 [ 131.462477][ T8478] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 131.462491][ T8478] RSP: 002b:00007fecaa798028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 131.462515][ T8478] RAX: ffffffffffffffda RBX: 00007feca9c25fa0 RCX: 00007feca999e559 [ 131.462528][ T8478] RDX: 0000000000000000 RSI: 0000200000000340 RDI: 0000000000000004 [ 131.462540][ T8478] RBP: 00007fecaa798090 R08: 0000000000000000 R09: 0000000000000000 [ 131.462550][ T8478] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 131.462561][ T8478] R13: 00007feca9c26038 R14: 00007feca9c25fa0 R15: 00007ffff2308158 [ 131.462591][ T8478] [ 131.653826][ T8483] ip6_tables: ip6tables: counters copy to user failed while replacing table [ 131.755178][ T8493] netlink: 'syz.2.685': attribute type 3 has an invalid length. [ 131.755200][ T8493] __nla_validate_parse: 16 callbacks suppressed [ 131.755210][ T8493] netlink: 3 bytes leftover after parsing attributes in process `syz.2.685'. [ 131.759723][ T8493] netlink: 'syz.2.685': attribute type 1 has an invalid length. [ 132.738115][ T1310] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.823067][ T8528] netlink: 20 bytes leftover after parsing attributes in process `syz.3.693'. [ 133.124753][ T8550] Bluetooth: hci0: unsupported parameter 5135 [ 133.124775][ T8550] Bluetooth: hci0: unsupported parameter 8192 [ 133.124787][ T8550] Bluetooth: hci0: unsupported parameter 5135 [ 133.124798][ T8550] Bluetooth: hci0: unsupported parameter 8192 [ 133.278704][ T8561] lo: entered promiscuous mode [ 133.297025][ T8561] tunl0: entered promiscuous mode [ 133.300396][ T8561] gre0: entered promiscuous mode [ 133.330257][ T8561] gretap0: entered promiscuous mode [ 133.341612][ T8571] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 133.369589][ T8561] erspan0: entered promiscuous mode [ 133.433233][ T8561] ip_vti0: entered promiscuous mode [ 133.459644][ T8561] ip6_vti0: entered promiscuous mode [ 133.493804][ T8561] sit0: entered promiscuous mode [ 133.536422][ T8561] ip6tnl0: entered promiscuous mode [ 133.551082][ T8561] ip6gre0: entered promiscuous mode [ 133.569897][ T8561] syz_tun: entered promiscuous mode [ 133.594891][ T8561] ip6gretap0: entered promiscuous mode [ 133.609466][ T8561] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.611402][ T8561] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.628551][ T8561] bridge0: entered promiscuous mode [ 133.645369][ T8561] vcan0: entered promiscuous mode [ 133.650066][ T8561] bond0: entered promiscuous mode [ 133.650091][ T8561] bond_slave_0: entered promiscuous mode [ 133.650289][ T8561] bond_slave_1: entered promiscuous mode [ 133.684676][ T8561] team0: entered promiscuous mode [ 133.684698][ T8561] team_slave_0: entered promiscuous mode [ 133.684910][ T8561] team_slave_1: entered promiscuous mode [ 133.698584][ T8561] dummy0: entered promiscuous mode [ 133.721674][ T8561] nlmon0: entered promiscuous mode [ 133.733483][ T8561] batadv0: entered promiscuous mode [ 133.736871][ T8561] veth0: entered promiscuous mode [ 133.751640][ T8561] veth1: entered promiscuous mode [ 133.757583][ T8561] wg0: entered promiscuous mode [ 133.768697][ T8561] wg1: entered promiscuous mode [ 133.786657][ T8561] wg2: entered promiscuous mode [ 133.792000][ T8561] veth0_to_bridge: entered promiscuous mode [ 133.802320][ T8561] veth1_to_bridge: entered promiscuous mode [ 133.807781][ T8561] veth0_to_bond: entered promiscuous mode [ 133.824598][ T8561] veth1_to_bond: entered promiscuous mode [ 133.828648][ T8561] veth0_to_team: entered promiscuous mode [ 133.850158][ T8561] veth1_to_team: entered promiscuous mode [ 133.863090][ T8561] veth0_to_batadv: entered promiscuous mode [ 133.866137][ T8561] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.866192][ T8561] batadv_slave_0: entered promiscuous mode [ 133.895123][ T8561] veth1_to_batadv: entered promiscuous mode [ 133.898342][ T8561] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.898395][ T8561] batadv_slave_1: entered promiscuous mode [ 133.922949][ T8561] xfrm0: entered promiscuous mode [ 133.925349][ T8561] veth0_to_hsr: entered promiscuous mode [ 133.928905][ T8561] veth1_to_hsr: entered promiscuous mode [ 133.950620][ T8561] hsr0: entered promiscuous mode [ 133.952608][ T8561] veth1_virt_wifi: entered promiscuous mode [ 133.954656][ T8561] veth0_virt_wifi: entered promiscuous mode [ 133.957654][ T8561] virt_wifi0: entered promiscuous mode [ 133.986800][ T8561] vlan1: entered promiscuous mode [ 133.998210][ T8561] macvlan0: entered promiscuous mode [ 134.000389][ T8561] macvlan1: entered promiscuous mode [ 134.015768][ T8561] ipvlan0: entered promiscuous mode [ 134.015925][ T8561] ipvlan1: entered promiscuous mode [ 134.033767][ T8561] macvtap0: entered promiscuous mode [ 134.039503][ T8561] geneve0: entered promiscuous mode [ 134.055763][ T8561] geneve1: entered promiscuous mode [ 134.075804][ T8561] netdevsim netdevsim4 netdevsim1: entered promiscuous mode [ 134.079786][ T8561] netdevsim netdevsim4 netdevsim2: entered promiscuous mode [ 134.105743][ T8561] netdevsim netdevsim4 netdevsim3: entered promiscuous mode [ 134.122619][ T8561] mac80211_hwsim hwsim6 wlan0: entered promiscuous mode [ 134.130408][ T8561] mac80211_hwsim hwsim8 wlan1: entered promiscuous mode [ 134.132940][ T8561] bridge1: entered promiscuous mode [ 134.133163][ T8561] ip6gre1: entered promiscuous mode [ 134.134709][ T8561] pimreg1: entered promiscuous mode [ 134.134969][ T8561] bond1: entered promiscuous mode [ 134.134982][ T8561] bridge2: entered promiscuous mode [ 134.135370][ T8561] bond2: entered promiscuous mode [ 134.136997][ T8561] batman_adv: batadv0: Interface deactivated: gretap1 [ 134.147132][ T8561] gretap1: entered promiscuous mode [ 134.150346][ T8561] sit1: entered promiscuous mode [ 134.199108][ T8585] netlink: 4 bytes leftover after parsing attributes in process `syz.4.701'. [ 134.254571][ T8590] bond4: option ad_actor_sys_prio: mode dependency failed, not supported in mode balance-rr(0) [ 134.276091][ T8590] bond4 (unregistering): Released all slaves [ 134.334413][ T85] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.334457][ T85] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.334487][ T85] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.334517][ T85] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 134.393393][ T8597] netlink: 'syz.4.706': attribute type 11 has an invalid length. [ 134.418922][ T8601] netlink: 8 bytes leftover after parsing attributes in process `syz.2.708'. [ 134.648433][ T8615] openvswitch: netlink: Flow key attr not present in new flow. [ 135.239917][ T8642] netlink: 8 bytes leftover after parsing attributes in process `syz.1.721'. [ 135.273765][ T8645] netlink: 52 bytes leftover after parsing attributes in process `syz.4.724'. [ 135.276019][ T8647] netlink: 12 bytes leftover after parsing attributes in process `syz.3.723'. [ 135.276052][ T8647] netlink: 24 bytes leftover after parsing attributes in process `syz.3.723'. [ 135.500126][ T8669] netlink: 4 bytes leftover after parsing attributes in process `syz.2.730'. [ 135.555513][ T8672] IPVS: sync thread started: state = MASTER, mcast_ifn = veth1_to_bridge, syncid = 32, id = 0 [ 135.941029][ T8694] netlink: 'syz.1.738': attribute type 1 has an invalid length. [ 136.413757][ T8720] netlink: 'syz.3.746': attribute type 5 has an invalid length. [ 136.413776][ T8720] netlink: 'syz.3.746': attribute type 9 has an invalid length. [ 136.413787][ T8720] netlink: 4 bytes leftover after parsing attributes in process `syz.3.746'. [ 136.423676][ T8723] netlink: 'syz.3.746': attribute type 5 has an invalid length. [ 136.423693][ T8723] netlink: 'syz.3.746': attribute type 9 has an invalid length. [ 136.470023][ T8725] : renamed from bond_slave_0 (while UP) [ 136.598742][ T8726] ip_tables: iptables: counters copy to user failed while replacing table [ 136.599094][ T8726] ip_tables: iptables: counters copy to user failed while replacing table [ 136.606823][ T8726] ip_tables: iptables: counters copy to user failed while replacing table [ 136.607193][ T8726] ip_tables: iptables: counters copy to user failed while replacing table [ 136.607468][ T8726] ip_tables: iptables: counters copy to user failed while replacing table [ 136.607741][ T8726] ip_tables: iptables: counters copy to user failed while replacing table [ 136.614179][ T8726] ip_tables: iptables: counters copy to user failed while replacing table [ 136.668108][ T8726] net_ratelimit: 37 callbacks suppressed [ 136.668129][ T8726] ip_tables: iptables: counters copy to user failed while replacing table [ 136.668417][ T8726] ip_tables: iptables: counters copy to user failed while replacing table [ 136.668761][ T8726] ip_tables: iptables: counters copy to user failed while replacing table [ 136.677089][ T8726] ip_tables: iptables: counters copy to user failed while replacing table [ 136.677441][ T8726] ip_tables: iptables: counters copy to user failed while replacing table [ 136.681755][ T8726] ip_tables: iptables: counters copy to user failed while replacing table [ 136.693363][ T8726] ip_tables: iptables: counters copy to user failed while replacing table [ 136.693696][ T8726] ip_tables: iptables: counters copy to user failed while replacing table [ 136.694024][ T8726] ip_tables: iptables: counters copy to user failed while replacing table [ 136.694302][ T8726] ip_tables: iptables: counters copy to user failed while replacing table [ 137.255591][ T8766] __nla_validate_parse: 4 callbacks suppressed [ 137.255610][ T8766] netlink: 256 bytes leftover after parsing attributes in process `syz.2.759'. [ 137.455074][ T8773] IPv6: sit2: Disabled Multicast RS [ 137.458138][ T8774] netlink: 4 bytes leftover after parsing attributes in process `syz.4.760'. [ 137.547797][ T8796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.762'. [ 137.580197][ T8796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.762'. [ 137.594098][ T8796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.762'. [ 137.594351][ T8796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.762'. [ 137.594597][ T8796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.762'. [ 137.594807][ T8796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.762'. [ 137.595068][ T8796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.762'. [ 137.595288][ T8796] netlink: 4 bytes leftover after parsing attributes in process `syz.0.762'. [ 137.865825][ T8810] netlink: 'syz.2.770': attribute type 83 has an invalid length. [ 137.871341][ T85] IPVS: starting estimator thread 0... [ 137.964932][ T8812] IPVS: using max 30 ests per chain, 72000 per kthread [ 138.714221][ T8866] netlink: 'syz.0.787': attribute type 21 has an invalid length. [ 138.899884][ T8874] bond4: entered promiscuous mode [ 138.903332][ T8874] 8021q: adding VLAN 0 to HW filter on device bond4 [ 138.954800][ T8883] netlink: 'syz.4.794': attribute type 3 has an invalid length. [ 139.076397][ T8895] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 139.145862][ T8900] bridge2: trying to set multicast startup query interval above maximum, setting to 8640000 (86400000ms) [ 139.148304][ T8900] netlink: 'syz.0.799': attribute type 4 has an invalid length. [ 139.916637][ T8939] netlink: 'syz.4.810': attribute type 9 has an invalid length. [ 141.823710][ T8946] net_ratelimit: 90 callbacks suppressed [ 141.823728][ T8946] openvswitch: netlink: IP tunnel dst address not specified [ 141.823752][ T8946] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 141.853902][ T8944] sctp: [Deprecated]: syz.2.813 (pid 8944) Use of struct sctp_assoc_value in delayed_ack socket option. [ 141.853902][ T8944] Use struct sctp_sack_info instead [ 141.997056][ T8956] xt_policy: too many policy elements [ 141.997232][ T8956] xt_policy: too many policy elements [ 141.997365][ T8956] xt_policy: too many policy elements [ 141.997484][ T8956] xt_policy: too many policy elements [ 141.997600][ T8956] xt_policy: too many policy elements [ 141.997714][ T8956] xt_policy: too many policy elements [ 141.997852][ T8956] xt_policy: too many policy elements [ 141.997974][ T8956] xt_policy: too many policy elements [ 141.998093][ T8956] xt_policy: too many policy elements [ 141.998218][ T8956] xt_policy: too many policy elements [ 142.230685][ T59] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.230731][ T59] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.230761][ T59] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.230791][ T59] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 142.346430][ T8983] tipc: Started in network mode [ 142.346451][ T8983] tipc: Node identity beef8e9f34a2, cluster identity 4711 [ 142.346715][ T8983] tipc: Enabled bearer , priority 0 [ 142.347928][ T8983] syzkaller0: MTU too low for tipc bearer [ 142.347942][ T8983] tipc: Disabling bearer [ 142.389396][ T8984] __nla_validate_parse: 68 callbacks suppressed [ 142.389415][ T8984] netlink: 16 bytes leftover after parsing attributes in process `syz.1.824'. [ 142.389428][ T8984] netlink: 4 bytes leftover after parsing attributes in process `syz.1.824'. [ 142.614180][ T8990] netlink: 64 bytes leftover after parsing attributes in process `syz.0.827'. [ 142.692282][ T8995] sctp: [Deprecated]: syz.0.827 (pid 8995) Use of struct sctp_assoc_value in delayed_ack socket option. [ 142.692282][ T8995] Use struct sctp_sack_info instead [ 142.692311][ T8991] tipc: New replicast peer: 255.255.255.255 [ 142.692997][ T8991] tipc: Enabled bearer , priority 10 [ 142.927382][ T9004] syzkaller0: default qdisc (pfifo_fast) fail, fallback to noqueue [ 142.942116][ T9004] syzkaller0: entered promiscuous mode [ 142.942131][ T9004] syzkaller0: entered allmulticast mode [ 142.943872][ T9004] netlink: 'syz.0.829': attribute type 23 has an invalid length. [ 143.047408][ T9009] openvswitch: netlink: nsh attribute has unmatched MD type 0. [ 143.501497][ T9030] netlink: 'syz.4.840': attribute type 1 has an invalid length. [ 143.501528][ T9030] netlink: 12 bytes leftover after parsing attributes in process `syz.4.840'. [ 143.817402][ T984] tipc: Node number set to 2320338591 [ 143.948823][ T9068] netlink: 36 bytes leftover after parsing attributes in process `syz.0.849'. [ 143.987232][ T9068] netlink: 12 bytes leftover after parsing attributes in process `syz.0.849'. [ 144.038517][ T9068] netlink: 92 bytes leftover after parsing attributes in process `syz.0.849'. [ 144.039582][ T9068] tls_set_device_offload_rx: netdev not found [ 144.743691][ T9099] Driver unsupported XDP return value 0 on prog (id 126) dev N/A, expect packet loss! [ 144.787629][ T9101] netlink: 36 bytes leftover after parsing attributes in process `syz.4.859'. [ 144.908574][ T9104] syzkaller1: entered promiscuous mode [ 144.908589][ T9104] syzkaller1: entered allmulticast mode [ 146.915162][ T9071] nci: __nci_request: wait_for_completion_interruptible_timeout failed -512 [ 147.166339][ T9131] netlink: 60 bytes leftover after parsing attributes in process `syz.0.869'. [ 147.333724][ T9149] lo: entered allmulticast mode [ 147.381766][ T9142] lo: left allmulticast mode [ 147.473062][ T9158] xt_cgroup: path and classid specified [ 147.478497][ T9160] xt_cgroup: path and classid specified [ 147.734596][ T9168] netlink: 8 bytes leftover after parsing attributes in process `syz.0.877'. [ 147.841557][ T9168] 8021q: adding VLAN 0 to HW filter on device macsec0 [ 148.029055][ T9173] ------------[ cut here ]------------ [ 148.029071][ T9173] sp->magic != HWSIM_STA_MAGIC [ 148.029083][ T9173] WARNING: drivers/net/wireless/virtual/mac80211_hwsim_main.c:258 at mac80211_hwsim_tx+0x1cec/0x2580, CPU#1: syz.2.878/9173 [ 148.053632][ T9173] Modules linked in: [ 148.057544][ T9173] CPU: 1 UID: 0 PID: 9173 Comm: syz.2.878 Not tainted syzkaller #0 PREEMPT(full) [ 148.061547][ T9188] openvswitch: netlink: VXLAN extension 1 has unexpected len 0 expected 4 [ 148.062607][ T9188] netlink: 'syz.1.882': attribute type 1 has an invalid length. [ 148.083331][ T9173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.093672][ T9173] RIP: 0010:mac80211_hwsim_tx+0x1cec/0x2580 [ 148.099628][ T9173] Code: e8 03 42 0f b6 04 20 84 c0 0f 85 ee 07 00 00 45 0f b6 8d 59 08 00 00 4c 89 ee 67 48 0f b9 3a e9 dc f4 ff ff e8 75 b9 8a fa 90 <0f> 0b 90 e9 3f f5 ff ff e8 67 b9 8a fa 90 0f 0b 90 48 8b 7c 24 20 [ 148.119304][ T9173] RSP: 0018:ffffc90005e26b80 EFLAGS: 00010293 [ 148.125439][ T9173] RAX: ffffffff873d570b RBX: 0000000000000000 RCX: ffff8880270f5dc0 [ 148.133467][ T9173] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006d537749 [ 148.141505][ T9173] RBP: ffffc90005e26d10 R08: ffff8880551e178f R09: 0000000000000000 [ 148.149503][ T9173] R10: ffff8880551e1780 R11: ffffffff873d3a20 R12: dffffc0000000000 [ 148.157560][ T9173] R13: 00000000ffffffff R14: 0000000000000000 R15: 1ffff92000bc4dbc [ 148.165604][ T9173] FS: 00007fc6a3df66c0(0000) GS:ffff888123bbf000(0000) knlGS:0000000000000000 [ 148.174692][ T9173] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 148.181328][ T9173] CR2: 0000200000000000 CR3: 0000000079f30000 CR4: 00000000003526f0 [ 148.189391][ T9173] Call Trace: [ 148.192760][ T9173] [ 148.195731][ T9173] ? __pfx_mac80211_hwsim_tx+0x10/0x10 [ 148.201373][ T9173] ieee80211_tx_frags+0x3df/0x890 [ 148.206465][ T9173] ? __pfx_ieee80211_tx_frags+0x10/0x10 [ 148.212108][ T9173] __ieee80211_xmit_fast+0xabf/0x2160 [ 148.217529][ T9173] ? __lock_acquire+0x747/0x2de0 [ 148.222555][ T9173] ? __flow_hash_from_keys+0x431/0x6c0 [ 148.228065][ T9173] ? cfg80211_classify8021d+0x67e/0x1220 [ 148.233789][ T9173] ? __pfx___ieee80211_xmit_fast+0x10/0x10 [ 148.239710][ T9173] ? ieee80211_downgrade_queue+0x432/0x5b0 [ 148.245614][ T9173] ? ieee80211_mesh_xmit_fast+0x902/0xe20 [ 148.251405][ T9173] ieee80211_mesh_xmit_fast+0xa6d/0xe20 [ 148.256983][ T9173] ? lock_acquire+0x115/0x350 [ 148.261703][ T9173] ? __pfx_ieee80211_mesh_xmit_fast+0x10/0x10 [ 148.267793][ T9173] ? __ieee80211_subif_start_xmit+0x2e6/0x1770 [ 148.274443][ T9173] __ieee80211_subif_start_xmit+0x706/0x1770 [ 148.280452][ T9173] ? sock_alloc_send_pskb+0x878/0x990 [ 148.285973][ T9173] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 148.292459][ T9173] ? vfs_write+0x612/0xba0 [ 148.296920][ T9173] ? ksys_write+0x150/0x270 [ 148.301495][ T9173] ? do_syscall_64+0x166/0x520 [ 148.306282][ T9173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.312600][ T9173] ieee80211_subif_start_xmit+0xf1/0x570 [ 148.318268][ T9173] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 148.324599][ T9173] ? netif_skb_features+0x8ba/0xf20 [ 148.329915][ T9173] ? __pfx_netif_skb_features+0x10/0x10 [ 148.335516][ T9173] ? __lock_acquire+0x747/0x2de0 [ 148.340538][ T9173] dev_hard_start_xmit+0x2cd/0x830 [ 148.345696][ T9173] __dev_queue_xmit+0x14d1/0x3920 [ 148.350793][ T9173] ? __dev_queue_xmit+0x29b/0x3920 [ 148.355925][ T9173] ? _copy_from_iter+0x21b/0x1660 [ 148.361013][ T9173] ? skb_set_owner_w+0x263/0x3d0 [ 148.365980][ T9173] ? __pfx___dev_queue_xmit+0x10/0x10 [ 148.371427][ T9173] ? __pfx__copy_from_iter+0x10/0x10 [ 148.376747][ T9173] ? __pfx_packet_parse_headers+0x10/0x10 [ 148.382546][ T9173] ? packet_xmit+0x68/0x330 [ 148.387058][ T9173] ? skb_put+0x112/0x210 [ 148.392855][ T9173] packet_sendmsg+0x3f11/0x51a0 [ 148.398013][ T9173] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 148.403456][ T9173] ? lock_acquire+0x115/0x350 [ 148.408161][ T9173] ? aa_file_perm+0x18b/0x15f0 [ 148.413254][ T9173] ? __pfx_packet_sendmsg+0x10/0x10 [ 148.418477][ T9173] ? aa_sk_perm+0x713/0x900 [ 148.423125][ T9173] ? __futex_wait+0x358/0x400 [ 148.427906][ T9173] ? __pfx_aa_sk_perm+0x10/0x10 [ 148.432813][ T9173] ? aa_sock_msg_perm+0x144/0x210 [ 148.437878][ T9173] ? apparmor_socket_sendmsg+0x98/0x360 [ 148.443509][ T9173] ? __pfx_packet_sendmsg+0x10/0x10 [ 148.448936][ T9173] sock_sendmsg_nosec+0x13a/0x180 [ 148.454051][ T9173] sock_write_iter+0x2de/0x3e0 [ 148.458848][ T9173] ? __pfx_sock_write_iter+0x10/0x10 [ 148.464193][ T9173] ? bpf_lsm_file_permission+0x9/0x20 [ 148.469577][ T9173] ? security_file_permission+0x75/0x260 [ 148.475288][ T9173] vfs_write+0x612/0xba0 [ 148.479665][ T9173] ? __pfx_vfs_write+0x10/0x10 [ 148.484513][ T9173] ? __fget_files+0x2a/0x420 [ 148.489219][ T9173] ksys_write+0x150/0x270 [ 148.493626][ T9173] ? __pfx_ksys_write+0x10/0x10 [ 148.498502][ T9173] do_syscall_64+0x166/0x520 [ 148.504579][ T9173] ? trace_irq_disable+0x3b/0x140 [ 148.509629][ T9173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.515956][ T9173] ? clear_bhb_loop+0x70/0xc0 [ 148.521027][ T9173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.526937][ T9173] RIP: 0033:0x7fc6a5b9e559 [ 148.531392][ T9173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 148.551051][ T9173] RSP: 002b:00007fc6a3df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 148.559492][ T9173] RAX: ffffffffffffffda RBX: 00007fc6a5e26090 RCX: 00007fc6a5b9e559 [ 148.567542][ T9173] RDX: 000000000000000e RSI: 0000200000000500 RDI: 0000000000000007 [ 148.575634][ T9173] RBP: 00007fc6a5c35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 148.583763][ T9173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 148.591795][ T9173] R13: 00007fc6a5e26128 R14: 00007fc6a5e26090 R15: 00007ffdb14dcec8 [ 148.600385][ T9173] [ 148.603467][ T9173] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 148.610762][ T9173] CPU: 1 UID: 0 PID: 9173 Comm: syz.2.878 Not tainted syzkaller #0 PREEMPT(full) [ 148.620047][ T9173] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 07/24/2026 [ 148.630105][ T9173] Call Trace: [ 148.633389][ T9173] [ 148.636323][ T9173] vpanic+0x56d/0xa60 [ 148.640347][ T9173] ? __pfx__printk+0x10/0x10 [ 148.644987][ T9173] ? __pfx_vpanic+0x10/0x10 [ 148.649511][ T9173] ? is_bpf_text_address+0x292/0x2b0 [ 148.654812][ T9173] ? is_bpf_text_address+0x26/0x2b0 [ 148.660038][ T9173] panic+0xc5/0xd0 [ 148.663767][ T9173] ? __pfx_panic+0x10/0x10 [ 148.668221][ T9173] __warn+0x315/0x4c0 [ 148.672200][ T9173] ? mac80211_hwsim_tx+0x1cec/0x2580 [ 148.677587][ T9173] ? mac80211_hwsim_tx+0x1cec/0x2580 [ 148.682870][ T9173] __report_bug+0x276/0x570 [ 148.687379][ T9173] ? mac80211_hwsim_tx+0x1cec/0x2580 [ 148.692686][ T9173] ? __pfx___report_bug+0x10/0x10 [ 148.697723][ T9173] ? ieee80211_encrypt_tx_skb+0x2fc/0x3f0 [ 148.703447][ T9173] ? mac80211_hwsim_tx+0x1cec/0x2580 [ 148.708736][ T9173] report_bug+0x16b/0x220 [ 148.713099][ T9173] ? mac80211_hwsim_tx+0x1cec/0x2580 [ 148.718480][ T9173] ? mac80211_hwsim_tx+0x1cee/0x2580 [ 148.723784][ T9173] handle_bug+0x9c/0x200 [ 148.728038][ T9173] exc_invalid_op+0x1a/0x50 [ 148.732546][ T9173] asm_exc_invalid_op+0x1a/0x20 [ 148.737430][ T9173] RIP: 0010:mac80211_hwsim_tx+0x1cec/0x2580 [ 148.743325][ T9173] Code: e8 03 42 0f b6 04 20 84 c0 0f 85 ee 07 00 00 45 0f b6 8d 59 08 00 00 4c 89 ee 67 48 0f b9 3a e9 dc f4 ff ff e8 75 b9 8a fa 90 <0f> 0b 90 e9 3f f5 ff ff e8 67 b9 8a fa 90 0f 0b 90 48 8b 7c 24 20 [ 148.762934][ T9173] RSP: 0018:ffffc90005e26b80 EFLAGS: 00010293 [ 148.769002][ T9173] RAX: ffffffff873d570b RBX: 0000000000000000 RCX: ffff8880270f5dc0 [ 148.776968][ T9173] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 000000006d537749 [ 148.784951][ T9173] RBP: ffffc90005e26d10 R08: ffff8880551e178f R09: 0000000000000000 [ 148.793098][ T9173] R10: ffff8880551e1780 R11: ffffffff873d3a20 R12: dffffc0000000000 [ 148.801066][ T9173] R13: 00000000ffffffff R14: 0000000000000000 R15: 1ffff92000bc4dbc [ 148.809124][ T9173] ? __pfx_mac80211_hwsim_tx+0x10/0x10 [ 148.814593][ T9173] ? mac80211_hwsim_tx+0x1ceb/0x2580 [ 148.819927][ T9173] ? __pfx_mac80211_hwsim_tx+0x10/0x10 [ 148.825412][ T9173] ieee80211_tx_frags+0x3df/0x890 [ 148.830553][ T9173] ? __pfx_ieee80211_tx_frags+0x10/0x10 [ 148.836109][ T9173] __ieee80211_xmit_fast+0xabf/0x2160 [ 148.841499][ T9173] ? __lock_acquire+0x747/0x2de0 [ 148.846438][ T9173] ? __flow_hash_from_keys+0x431/0x6c0 [ 148.851893][ T9173] ? cfg80211_classify8021d+0x67e/0x1220 [ 148.857625][ T9173] ? __pfx___ieee80211_xmit_fast+0x10/0x10 [ 148.863472][ T9173] ? ieee80211_downgrade_queue+0x432/0x5b0 [ 148.869294][ T9173] ? ieee80211_mesh_xmit_fast+0x902/0xe20 [ 148.875033][ T9173] ieee80211_mesh_xmit_fast+0xa6d/0xe20 [ 148.880609][ T9173] ? lock_acquire+0x115/0x350 [ 148.885291][ T9173] ? __pfx_ieee80211_mesh_xmit_fast+0x10/0x10 [ 148.891371][ T9173] ? __ieee80211_subif_start_xmit+0x2e6/0x1770 [ 148.897523][ T9173] __ieee80211_subif_start_xmit+0x706/0x1770 [ 148.903515][ T9173] ? sock_alloc_send_pskb+0x878/0x990 [ 148.908885][ T9173] ? __pfx___ieee80211_subif_start_xmit+0x10/0x10 [ 148.915556][ T9173] ? vfs_write+0x612/0xba0 [ 148.919966][ T9173] ? ksys_write+0x150/0x270 [ 148.924475][ T9173] ? do_syscall_64+0x166/0x520 [ 148.929257][ T9173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 148.935345][ T9173] ieee80211_subif_start_xmit+0xf1/0x570 [ 148.940987][ T9173] ? __pfx_ieee80211_subif_start_xmit+0x10/0x10 [ 148.947223][ T9173] ? netif_skb_features+0x8ba/0xf20 [ 148.952438][ T9173] ? __pfx_netif_skb_features+0x10/0x10 [ 148.957990][ T9173] ? __lock_acquire+0x747/0x2de0 [ 148.962961][ T9173] dev_hard_start_xmit+0x2cd/0x830 [ 148.968261][ T9173] __dev_queue_xmit+0x14d1/0x3920 [ 148.973292][ T9173] ? __dev_queue_xmit+0x29b/0x3920 [ 148.978409][ T9173] ? _copy_from_iter+0x21b/0x1660 [ 148.983444][ T9173] ? skb_set_owner_w+0x263/0x3d0 [ 148.988387][ T9173] ? __pfx___dev_queue_xmit+0x10/0x10 [ 148.993761][ T9173] ? __pfx__copy_from_iter+0x10/0x10 [ 148.999055][ T9173] ? __pfx_packet_parse_headers+0x10/0x10 [ 149.004772][ T9173] ? packet_xmit+0x68/0x330 [ 149.009272][ T9173] ? skb_put+0x112/0x210 [ 149.013597][ T9173] packet_sendmsg+0x3f11/0x51a0 [ 149.018456][ T9173] ? __pfx_aa_label_sk_perm+0x10/0x10 [ 149.024042][ T9173] ? lock_acquire+0x115/0x350 [ 149.028739][ T9173] ? aa_file_perm+0x18b/0x15f0 [ 149.033508][ T9173] ? __pfx_packet_sendmsg+0x10/0x10 [ 149.038705][ T9173] ? aa_sk_perm+0x713/0x900 [ 149.043210][ T9173] ? __futex_wait+0x358/0x400 [ 149.047902][ T9173] ? __pfx_aa_sk_perm+0x10/0x10 [ 149.052754][ T9173] ? aa_sock_msg_perm+0x144/0x210 [ 149.057802][ T9173] ? apparmor_socket_sendmsg+0x98/0x360 [ 149.063346][ T9173] ? __pfx_packet_sendmsg+0x10/0x10 [ 149.068545][ T9173] sock_sendmsg_nosec+0x13a/0x180 [ 149.073572][ T9173] sock_write_iter+0x2de/0x3e0 [ 149.078371][ T9173] ? __pfx_sock_write_iter+0x10/0x10 [ 149.083685][ T9173] ? bpf_lsm_file_permission+0x9/0x20 [ 149.089070][ T9173] ? security_file_permission+0x75/0x260 [ 149.094726][ T9173] vfs_write+0x612/0xba0 [ 149.099000][ T9173] ? __pfx_vfs_write+0x10/0x10 [ 149.103778][ T9173] ? __fget_files+0x2a/0x420 [ 149.108398][ T9173] ksys_write+0x150/0x270 [ 149.112726][ T9173] ? __pfx_ksys_write+0x10/0x10 [ 149.117849][ T9173] do_syscall_64+0x166/0x520 [ 149.122439][ T9173] ? trace_irq_disable+0x3b/0x140 [ 149.127471][ T9173] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.133542][ T9173] ? clear_bhb_loop+0x70/0xc0 [ 149.138230][ T9173] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 149.144220][ T9173] RIP: 0033:0x7fc6a5b9e559 [ 149.148996][ T9173] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 149.170059][ T9173] RSP: 002b:00007fc6a3df6028 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 149.178565][ T9173] RAX: ffffffffffffffda RBX: 00007fc6a5e26090 RCX: 00007fc6a5b9e559 [ 149.186717][ T9173] RDX: 000000000000000e RSI: 0000200000000500 RDI: 0000000000000007 [ 149.194904][ T9173] RBP: 00007fc6a5c35ab8 R08: 0000000000000000 R09: 0000000000000000 [ 149.202883][ T9173] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 149.210963][ T9173] R13: 00007fc6a5e26128 R14: 00007fc6a5e26090 R15: 00007ffdb14dcec8 [ 149.219047][ T9173] [ 149.222328][ T9173] Kernel Offset: disabled [ 149.227039][ T9173] Rebooting in 86400 seconds..