last executing test programs: 1.075642748s ago: executing program 0 (id=1): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$sock_int(r0, 0x1, 0x24, &(0x7f00000002c0)=0x5f53, 0x4) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETTABLE(r1, &(0x7f0000000ec0)={0x0, 0x0, &(0x7f0000000e80)={&(0x7f0000000e40)={0x14, 0x1, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x2}}, 0x14}, 0x1, 0x0, 0x0, 0x40000000}, 0x40080) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r4, 0x107, 0x12, &(0x7f0000000000)={0x0, 0xb007}, 0x4) write$tun(r2, &(0x7f0000002240)=ANY=[@ANYBLOB="0800080000000200b7e71400020045b00fc0006801"], 0xfce) r5 = socket(0x40000000015, 0x5, 0x0) setsockopt$RDS_CONG_MONITOR(r5, 0x114, 0x6, &(0x7f0000000080)=0x1, 0x4) ppoll(&(0x7f0000000180)=[{r5}], 0x1, &(0x7f00000000c0)={0x0, 0x3938700}, 0x0, 0x0) bind$inet6(r0, 0x0, 0x0) 682.591678ms ago: executing program 0 (id=6): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r3, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2, 0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x6361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000440)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0xd}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_hhf={{0x8}, {0x4}}]}, 0x30}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) (async) writev(r2, &(0x7f0000001b40)=[{&(0x7f00000006c0)="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", 0x1000}, {&(0x7f00000016c0)="110c26d4a45275f071eebb5d0438cc17639cde154d282133008d599fc7c472b4aec00106d46d8546f83fd958f75efac4e9e1bc1e5b796fc44339b1741813327c3cbf1e4185dac06efab5c4052cf86bc62d4f3d4bc1a490b1b1c9cf0df7b063a6e005344b6de272e5dd57eaa1ea6e3c2dee06e652ef03a25373988d7a76424635c5f3f868c2c2c061ab4a5a0163d7b74aca0a480e1f84701f5cbecd5c7d445603069e7a1220e72ce58abe5d4735f575da50f0635cfaf557d3fe2fff4a1d5a18fd015354530f6e9bd4fc8f5212f14d4f842f8fcc89c4d0e0961ed5d4765a66a2397e4810c70c724df16d1026ccea4583", 0xef}, {&(0x7f00000017c0)="9a45332348c42d8716a64d9667d88bb2ec44a2c8372c8e027d857b1aa50eaa6e6883bd6633daa18aec16b6e6fa4b19ff5cfba2c0db99a3c56867dfdad6aa33312dcb0951821aadddf3", 0x49}, {&(0x7f0000001840)="a7e8abdbbde3325e8738230c3571f9a5deab033676cff2e3a94149a1f1c09f09e4e96598a1f8a6352d92ae45a07c4027feae56edf04f803c2bdbebd294008ddc6fe16ae958de88f64eb051fdd4101950faead8e2a0fd6c8ab8933272869a11fe77e277eddf86e20869d1ff11fd6e9e50e74c76101fc79e3565115e04aa74e13dd604cb89caa5fcd48213b45a7e7948db4a4414048fb6faf6278b460b82fec308b0d1905f983e102c7dfdb7adea71716ed2543f696e4940919617b620bd17aad44b62a8b8c1fc7324c6e66abf576e0a8e25cf3552ca14150f7b33d5d6d9095ee493d15d7c346f94d4db54a9777e", 0xed}, {&(0x7f0000001940)="832e3c4b7d3627083303677ce6fee5eb0c900dd9990a40da44f2c0c94c44134e34475ca3de6576d56b63eb6d1efd634195f0b72a0b1a2268d41a3004fef5f96c21488544adef21c7682d2007e46740b3dbad6f57f3c5bd0683231bc42b8c5f87a059c32707b358f7ba92e90372ed244bcc37a9f72426d72cf8b249f777b2937cc5a432b539a02b72b91b9ace1ef51f02f7c852ab5c8da9111b426948a595e31d6bc50ab1dbbaa89f27f5ab41d5f5bb8e100f380d6c5178bb57d3d6a00de6d57a527adcd86db7c2814bdabb850a67b5c871d8f2b97b8f306c7721d51468f20c20ae9c530b14bbf2", 0xe7}, {&(0x7f0000001a40)="166a0a74c9238c26228aa5da82b0e478c227e9cb56ad68c3602906f93f756afa297deed9f26f2101774d1389a974f9a0138e48d14468114fdaa71fcd2d889e7179d66f9ada7a27bffa49e7802dad01f96668f29918094f405e20aec881554375a41c1bb5dcf3b73a48e23f4fb0fc600cf3886ec441165d0fde9d23fd16402030010fd28b7906704b35800a3912e030de9f1e746b9202f6cf6d20c6160a816e42533ab816bc78652a3dd4addfd6580567603b4a5f1c1db14db542fbdcc9d4ec0615fd4933", 0xc4}], 0x6) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r4) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) 638.541958ms ago: executing program 3 (id=4): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) (async) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f0000000000), 0x4) (async) sendmsg$nl_route_sched(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x34, 0x2c, 0x400, 0x70bd28, 0x25dfdbfc, {0x0, 0x0, 0x0, r3, {0x0, 0x7}, {}, {0x7, 0xe}}, [@TCA_RATE={0x6, 0x5, {0x3, 0x1}}, @TCA_RATE={0x6, 0x5, {0x6, 0x8}}]}, 0x34}, 0x1, 0x0, 0x0, 0x80}, 0x24000880) 392.070582ms ago: executing program 3 (id=7): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000001c0)=ANY=[@ANYBLOB="5c0000000206050000000000000000000000000005000400000000000900020073797a30000000001400078008001340000000000800124000001800050005000000000005000100060000000d000300686173683a6d6163"], 0x5c}}, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r3 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000002c0)={'macvtap0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000680)={&(0x7f00000001c0)=@newqdisc={0x38, 0x24, 0xd0f, 0x70bd2d, 0x4, {0x60, 0x0, 0x0, r4, {0x0, 0xa}, {0xffff, 0xffff}, {0xc, 0xfff2}}, [@qdisc_kind_options=@q_fq={{0x7}, {0xc, 0x2, [@TCA_FQ_FLOW_REFILL_DELAY={0x8, 0x9, 0xffffffff}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x8000}, 0x44080) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000340)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd25, 0x25dfdbfd, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x3, 0x3, 0x4361, 0x7, 0xffffffff, 0x3}}}}]}, 0x4c}}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000640)=@newqdisc={0x88, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x25dfdbfc, {0x0, 0x0, 0x0, r6, {0x0, 0x2}, {0x6, 0xb}, {0xffff, 0xffe0}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0xf, [0xc, 0xc, 0x3, 0x7, 0xa, 0xd, 0x5, 0x3, 0x2, 0x3, 0x2, 0x4, 0x7, 0xc, 0xe, 0x1], 0x0, [0x40, 0x1, 0x0, 0x9, 0x5, 0x3, 0x401, 0x81, 0x1000, 0x152, 0x400, 0x7, 0x2, 0x7151, 0xc409, 0x9], [0x8, 0x5, 0x0, 0x2, 0x8, 0x6, 0xf, 0x9, 0x200, 0x81, 0x9, 0x1, 0xe8, 0xabd8, 0x401, 0x2]}}}}]}, 0x88}, 0x1, 0x0, 0x0, 0x240040e0}, 0x4890) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000100)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000240)={&(0x7f0000000400)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="02002cbd7000fbdbdf253700000008000300", @ANYRES32=r7, @ANYBLOB="05000019010b000000050018013000000008002e009e09000008002700000000000800220100ca367b86bf222d4354eaac8c5519c0d2dd7205bcbe2f89a01b69def10acd387ef6d92f51aa52c203bb5da2b8786f08a4e01a25e93e2d8d7f7885af25b49b05100d71232d6b00a9a8141b3fb7000000d34c15b21daa8cb26152477dd26ea4919cc5c659bbaf40951076f46771a1029578b2e98e571718f2033bc534f67c5f75541ec47706f03fbd47fac189a9d244be69c6"], 0x4c}, 0x1, 0x0, 0x0, 0x20000000}, 0x20000044) 351.245751ms ago: executing program 2 (id=3): r0 = socket$alg(0x26, 0x5, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000340)=ANY=[@ANYBLOB="7c00000010000d0c26bd70000000000000000000", @ANYRES32=0x0, @ANYBLOB="b4000600400000002c0012800c0001006d6163766c616e001c0002000800090001800000080001001000001d0800010010000000140035006d6163766c616e30"], 0x7c}, 0x1, 0x0, 0x0, 0x8840}, 0x8000) bind$alg(r0, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-camellia-aesni-avx2\x00'}, 0x58) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r4, 0x0) r5 = socket(0x1e, 0x4, 0x0) ioctl$SIOCX25SSUBSCRIP(r5, 0x89e1, 0x0) sendmsg$TIPC_NL_KEY_SET(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000740)={0x30, r3, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0x1c, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_ID={0x15, 0x3, "0ebfd61996044fb4249989f65f4e7f3ee7"}]}]}, 0x30}, 0x1, 0x0, 0x0, 0x4000}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r6 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r6, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0x10}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048", 0x4d}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d", 0x4a}], 0x3, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) r7 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r7, 0x0, 0x80, &(0x7f0000000000)=@broute={'broute\x00', 0x20, 0x1, 0x12e, [0x0, 0x0, 0x0, 0x0, 0x0, 0x200000000180], 0x11, 0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="00000000000000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000feffffff010000000500000062000000891476657468305f6d6163767461702aae0000006e6963766630000000000000000000006e65747063693000000000000000000067726530000000000000000000000000ffffffffffffffff00ff8000aaaaaaaaaabb00000000ff806e0000006e0000009e000000000000000000000000000000000000001f0000000000000000000000000000000800000000000000fdffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000001000000feffffff0000"]}, 0x1a6) recvmsg(r6, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/76, 0x4c}, {&(0x7f0000000300)=""/90, 0x5a}], 0x2}, 0x0) sendmsg$IPCTNL_MSG_EXP_GET_STATS_CPU(r6, &(0x7f0000000140)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x14, 0x3, 0x2, 0x201, 0x0, 0x0, {0x2, 0x0, 0x9}, [""]}, 0x14}, 0x1, 0x0, 0x0, 0x4000}, 0x4040400) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@generic={0xbc, 0x8, 0x8, 0x8000, 0x8}]}, &(0x7f0000000040)='GPL\x00'}, 0x94) 129.857121ms ago: executing program 0 (id=8): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xf}]}, @NFT_MSG_NEWSETELEM={0x60, 0xc, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x34, 0x3, 0x0, 0x1, [{0x30, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x10, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8400000000000000}]}}}]}]}]}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x10}}, 0xe4}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x10, 0x9, 0x7, 0xfffffff9, 0x9, 0xffffff56, 0x8, 0x2, 0x6}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x40001}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000040), 0xffffffffffffffff) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IPVS_CMD_NEW_SERVICE(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000006c0)=ANY=[@ANYBLOB='T\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000000200000040000180060001000a00000008000500000000000c000700000000000000000008000900710000000700060072720000080008"], 0x54}, 0x1, 0x0, 0x0, 0x800}, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r9 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) r10 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$MPTCP_PM_CMD_REMOVE(r10, &(0x7f0000001800)={0x0, 0x0, &(0x7f00000017c0)={&(0x7f0000001740)={0x14, r9, 0x1, 0x70bd2c, 0x25dfdbfe}, 0x14}, 0x1, 0x0, 0x0, 0x8084}, 0x4000000) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r1, &(0x7f0000000380)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x86408940}, 0xc, &(0x7f0000000340)={&(0x7f0000000300)={0x14, r9, 0x400, 0x70bd25, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x40004}, 0x4000000) r11 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x0, 0x0) close(r11) socket$unix(0x1, 0x2, 0x0) ioctl$SIOCSIFHWADDR(r11, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$TUNSETPERSIST(r0, 0x400454cb, 0x1) r12 = socket$kcm(0x11, 0x3, 0x0) r13 = socket(0x400000000010, 0x3, 0x0) r14 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r14, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r13, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000022c0)=@newtfilter={0xea4, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r15, {0x5, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0xe70, 0x2, [@TCA_MATCHALL_ACT={0xe6c, 0x2, [@m_pedit={0xe68, 0x1, 0x0, 0x0, {{0xa}, {0xe3c, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS_EX={0xe38, 0x4, {{{0x2, 0x2, 0x5, 0x10004, 0x40}, 0x8, 0x5, [{0x100, 0xa, 0x3, 0x0, 0x1, 0x7}]}, [{0x7, 0x8, 0x2, 0x5, 0x2, 0x203}, {0xff, 0x7, 0x101, 0x8, 0x400810, 0xffffffff}, {0x5, 0x8, 0xfff, 0x2, 0xffffffff, 0xb93}, {0x6, 0x4, 0x3, 0xfffffff3, 0x4, 0x6}, {0xd3d4, 0x2, 0x8, 0x6, 0x101, 0x10}, {0x9, 0x40, 0x6, 0x80000000, 0x6, 0x10001}, {0x4, 0x9, 0x100, 0xf9d8, 0x7, 0x2}, {0x5796, 0xffff, 0xd44b, 0x8, 0x5, 0x37a}, {0x6, 0x3, 0x1, 0x80000001, 0x3f, 0x10}, {0x4, 0x9e9c, 0x60, 0x7, 0x0, 0x1}, {0xffe00000, 0x1, 0x8000, 0x4, 0x3, 0x7}, {0x101, 0x9, 0x400, 0x3, 0x9, 0x3}, {0xce9, 0xfffffffb, 0x4, 0xae5e, 0x3ff, 0x2}, {0x3, 0x5, 0x6, 0x4, 0x197d, 0xfb56}, {0x2, 0xc58, 0xf3, 0x0, 0x6, 0x101}, {0x4, 0x5, 0x74d77b97, 0xfffffd8b, 0x0, 0x4}, {0x7fff, 0x5b, 0xb3a, 0x6, 0x2, 0xb5e}, {0x4c5be96a, 0x2, 0x2, 0x5, 0xd2a1, 0xbe47}, {0x6, 0x9, 0x9, 0x5, 0x3, 0x10000001}, {0x3, 0x8, 0x7, 0x4, 0x95, 0x3}, {0x6, 0x5, 0x2, 0x7fffffff, 0x8, 0xff}, {0x1, 0x71, 0x800000, 0xcf55, 0x3, 0x9}, {0x7933, 0x6e20, 0x6, 0x81, 0x2, 0x8}, {0xff, 0x8001, 0xff, 0x10001, 0x5, 0x5}, {0x6, 0x5, 0x0, 0x6, 0xed, 0x5}, {0xce, 0xae, 0x4, 0x2, 0x10000, 0x800}, {0x200, 0x5, 0x6, 0x8, 0x9, 0x9}, {0x8, 0xdd8, 0x8, 0x8, 0x5}, {0x3, 0x3, 0xa, 0x6, 0x9, 0x9}, {0x9, 0x4, 0x9d42, 0x4, 0x1, 0xfffffffb}, {0x8c, 0x6b8, 0x6, 0x2, 0x2, 0xfffffffe}, {0x3, 0x811, 0x9, 0x5, 0x4}, {0x1, 0x80000001, 0x400, 0x2, 0x0, 0x8001}, {0xfffffe01, 0x2, 0x8, 0x2, 0x8, 0x8}, {0x0, 0x22, 0x5, 0x3, 0x401, 0x5}, {0xa, 0x5, 0x101, 0x5, 0xfffffc01}, {0x4, 0x5, 0x0, 0x0, 0xdb, 0x3d04b554}, {0x5, 0x9, 0xfffffffa, 0x1, 0xfffffffc, 0x2}, {0x8, 0x7, 0x7, 0x99f, 0x9, 0x3}, {0x5, 0x252, 0x8000, 0xffff8001, 0xb, 0x900}, {0x4, 0x3, 0x3, 0x21, 0x7, 0x7}, {0xfffffffb, 0x8a1, 0x2, 0x7, 0x0, 0x4}, {0x0, 0x7fff, 0x2, 0xfffff399, 0x20000009, 0xe756}, {0xfff, 0xc, 0x4, 0x8, 0x2, 0xe}, {0x6, 0x4, 0x6, 0x1, 0x80, 0x980}, {0x23ae789, 0xc, 0x4, 0x7, 0x200, 0x4}, {0x5, 0xe, 0x2, 0x9, 0x0, 0xf3}, {0x0, 0x9, 0x2, 0x4, 0x3, 0x4}, {0x8, 0x4, 0x5, 0xfffffffd, 0x400, 0x7f}, {0x9, 0x80, 0x6e6b, 0x6, 0x203}, {0x371cf7fc, 0x7, 0x2, 0x1ff, 0xfffffffa, 0x6a97}, {0xd1, 0x4, 0x4, 0x7, 0x5a, 0x9}, {0x8, 0x7f, 0x7fffffff, 0x7f, 0x2, 0x8}, {0x7ff, 0x1, 0x3, 0x2, 0x9, 0x400}, {0x6, 0x1ff, 0x0, 0x9, 0x7, 0x4}, {0x4, 0x6, 0xfe, 0x100, 0xc6}, {0x3, 0xfffffffd, 0xd, 0x6, 0xfffffffe, 0x1000}, {0x7, 0x2, 0x1, 0xd, 0xfffffffe, 0x3}, {0xfffffff9, 0x80000001, 0xe, 0x2, 0x200, 0x7}, {0x3, 0x0, 0xa820, 0x787e, 0x2, 0x2}, {0x8, 0x4, 0x5ae, 0x2, 0x8}, {0x5, 0x52, 0x8, 0x5, 0x10, 0x9}, {0x1, 0x7, 0x3, 0x280, 0x800, 0x6}, {0x10, 0x801, 0x0, 0x8, 0x3, 0xa}, {0xad, 0x8, 0x4, 0x5, 0x2, 0xfff}, {0x6, 0x6, 0x7fff, 0x0, 0xff, 0x7fffffff}, {0x8, 0x85e6, 0x3, 0x0, 0x5, 0xc}, {0x9, 0x78e3, 0x5, 0xbc27, 0x7, 0x887b}, {0x6, 0x7, 0x2, 0xdb60, 0x3}, {0x80000001, 0x0, 0x3, 0x1, 0x81, 0xba}, {0x10001, 0xfff, 0x7, 0x0, 0x9, 0xc29}, {0x100, 0x2, 0x9, 0x7, 0x84e1, 0x3ff}, {0xdc, 0x8, 0xe, 0x7, 0x9}, {0x7, 0x5, 0x1, 0x80, 0x6, 0xff}, {0xd5e, 0x5, 0x0, 0x100, 0x0, 0x10}, {0x200, 0x2, 0x8000, 0x0, 0x6b, 0x4}, {0x20000, 0x0, 0x9, 0x8, 0x100, 0x1000}, {0x4, 0x3ff, 0x0, 0x10000, 0x7, 0x7}, {0x6, 0x9, 0x1, 0x2001ff, 0x4, 0x1}, {0x4, 0xd38f, 0x6, 0x4, 0x170ddbc4, 0xe38}, {0x14a, 0x7, 0x0, 0x10001, 0x1, 0x2}, {0x9, 0x6, 0x1, 0x400, 0xffffffff, 0xfffffffc}, {0x7, 0x6, 0x3909, 0xffffffff, 0x1705, 0x7}, {0x3, 0x3b10fe2d, 0x4004, 0x5, 0x3, 0xffff7fff}, {0x9430, 0xb, 0x6, 0x2, 0x9, 0x5}, {0xa, 0xb1fb, 0x6, 0x6, 0xf, 0x9}, {0x2a455dad, 0x5, 0x29, 0xfffffff9, 0x800, 0x7fff}, {0x3, 0x3, 0xee, 0x9, 0x6, 0x8}, {0x5ce, 0x3, 0x1, 0xb, 0x8, 0x99}, {0x2, 0x9, 0xf623, 0x7, 0xff, 0x8}, {0x101, 0x6, 0x80000000, 0x9, 0xfffff697, 0x8}, {0x6, 0x8, 0x7, 0x2, 0xa226, 0x9}, {0x8, 0x8, 0x3, 0xfffff246, 0xf, 0x2}, {0x3, 0xaf, 0x7ff, 0xe0, 0x0, 0x7cf}, {0x8, 0x7, 0x29af2cf0, 0x1, 0x7, 0x80000000}, {0x7fff, 0x9, 0x4b, 0xa4e}, {0xffffffff, 0x7, 0xa, 0x80000000, 0x0, 0x69}, {0x4, 0x9, 0x9, 0x4, 0x100, 0x5}, {0x6, 0x6, 0x2, 0x80000001, 0x6, 0x9}, {0x6, 0x401, 0x2, 0x2, 0x3, 0xb}, {0xd, 0x40, 0x3, 0xa, 0xffffffff, 0x1d1a}, {0xc0, 0x81, 0xb, 0x3, 0xea, 0x3}, {0xc, 0x2, 0x1, 0xa, 0x1, 0x2f4}, {0xf, 0x6, 0x9, 0x73e7, 0x1000, 0x4}, {0x6, 0x8000, 0x3ff, 0x8dcc, 0x4, 0x7ff}, {0x7, 0x12, 0x8, 0x8, 0x69, 0x9}, {0x7f, 0x7, 0x4, 0x0, 0x3, 0x2}, {0x9, 0x0, 0x7a, 0x5, 0x4, 0x1000}, {0xb06, 0x7, 0x7ff, 0x400009, 0x0, 0x7bffffff}, {0x4, 0x7b, 0x3, 0x4, 0x0, 0xa7}, {0x81, 0x56c3, 0x1, 0xdda, 0x6, 0xb27d}, {0x4, 0x3, 0x401, 0xad, 0xcf5, 0xf8c}, {0x8, 0x1, 0x3, 0x40, 0x1, 0x4907}, {0x6, 0x4, 0x38, 0x4, 0x5, 0x6}, {0x7, 0x2, 0x1000f, 0x64, 0x1, 0x7}, {0x1, 0x2, 0x4010, 0xffffffad, 0x0, 0x751e}, {0xfff0, 0x2, 0x4, 0x3, 0x3, 0x5}, {0x5, 0x7, 0x8, 0x1, 0x5, 0xfff}, {0x4fb, 0x0, 0x0, 0x7ff, 0x4, 0x5}, {0xf455, 0x3, 0x7fff, 0x59ed, 0xb4e9, 0xe4}, {0x7, 0x2, 0xe, 0x0, 0x3da78e9c, 0x8000}, {0x2, 0x0, 0x400, 0x765, 0x7f, 0x7}, {0x5, 0x7, 0x5, 0x8, 0x8, 0x7}, {0x10, 0x3, 0x9, 0x5, 0x8, 0x2}, {0x6a, 0x200, 0x81, 0xffffffff, 0x4, 0x200}, {0x3, 0x8007, 0x3, 0x4a, 0x6, 0x1}, {0x0, 0x2, 0x7, 0x616, 0x5, 0x4}, {0x6, 0xb25b, 0x3, 0x0, 0x6, 0xb}], [{0x4, 0x1}, {0x5}, {0x4}, {}, {0x5, 0x1}, {}, {0x0, 0x1}, {0x5, 0x1}, {0x6}, {0x0, 0x1}, {0x2}, {0x4}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x1, 0x1}, {0x1}, {0x2}, {0x4}, {0x1}, {0x0, 0x1}, {0x5}, {0x5, 0x1}, {0x5}, {0x2, 0x1}, {0x0, 0x1}, {}, {0x5}, {0x4}, {0x3, 0x1}, {}, {0x3, 0x1}, {0x4}, {}, {0x5}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4, 0x1}, {0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x4}, {}, {0x5}, {0x3}, {0xd}, {0x0, 0x338f50ad6d91f11}, {0x1, 0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4}, {}, {0x4}, {0x3}, {0x1, 0x1}, {0x4}, {0x5}, {0x4, 0x1}, {0x5, 0x1}, {}, {0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1}, {0x0, 0x1}, {0x5, 0x1}, {0x4}, {0x4, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x2, 0x1}, {0x3}, {0x1, 0x1}, {0x3, 0x1}, {0x1, 0x1}, {0x3, 0x1}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {0x4}, {0x3}, {0x3}, {}, {0x5, 0x1}, {0x2, 0x1}, {}, {0x1, 0x1}, {0x3}, {0x3, 0x1}, {0x5, 0x1}, {0x2, 0x1}, {0x5, 0x1}, {0x1}, {0x6, 0x1}, {0x5}, {0x3}, {0x1, 0x1}, {0x1, 0x1}, {0x3}, {0x2, 0x1}, {0x0, 0x1}, {0x4, 0x1}, {0x3}, {0x5, 0x1}, {0x3}, {0x3}, {0x3}, {0x4}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x2, 0x1}, {0x3}, {0x5}, {0x2, 0x1}, {0x2, 0x1}, {0x3}, {0x3, 0x1}, {0x4}, {0x4}, {0x5}, {0x5, 0x1}, {0x2, 0x1}, {0x2, 0x1}, {0x1, 0x1}, {0x4}]}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0xea4}, 0x1, 0x0, 0x0, 0x10}, 0x0) getsockopt$inet_sctp_SCTP_RECVNXTINFO(r1, 0x84, 0x21, &(0x7f0000000140), &(0x7f00000001c0)=0x4) setsockopt$sock_attach_bpf(r12, 0x107, 0xf, &(0x7f0000000600), 0x56) sendmsg$kcm(r12, &(0x7f00000000c0)={&(0x7f0000000500)=@xdp={0x2c, 0x0, r8, 0xc}, 0x80, &(0x7f00000006c0)=[{&(0x7f0000000180)="27030200590214000600002fb96dbcf706e10500000086ddffff1144ee163cd4b8bf", 0x22}, {&(0x7f0000000c00)="4307ed2e", 0x4}], 0x2}, 0x4) 68.110128ms ago: executing program 2 (id=9): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newqdisc={0x44, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x10, 0x3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x14, 0x2, [@TCA_GRED_DPS={0x10, 0x3, {0x4, 0x3, 0x0, 0x1}}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x51}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newqdisc={0x138, 0x24, 0xd0f, 0x200003, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xffe0}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_gred={{0x9}, {0x108, 0x2, [@TCA_GRED_STAB={0x104, 0x2, "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"}]}}]}, 0x138}, 0x1, 0x0, 0x0, 0x240400d0}, 0x24008004) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$gtp(&(0x7f0000000000), r4) sendmsg$GTP_CMD_DELPDP(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000080)={0x24, r5, 0x1, 0x70bd2c, 0xe, {}, [@GTPA_LINK={0x8}, @GTPA_VERSION={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x44800}, 0x20000000) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r6 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$alg(r6, &(0x7f0000000100)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000080)=[@assoc={0x18, 0x117, 0x4, 0x200}], 0x18}, 0x28000054) sendmsg$nl_route_sched_retired(r6, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000012100), 0xe078}}, 0x0) recvmmsg(r6, &(0x7f0000001200)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000500)=""/217, 0xd9}, {&(0x7f0000000340)=""/121, 0x79}, {&(0x7f0000000600)=""/126, 0x7e}, {&(0x7f0000000480)=""/21, 0x15}, {&(0x7f00000006c0)=""/21, 0x15}], 0x5}, 0x4}], 0x2, 0x60, 0x0) syz_genetlink_get_family_id$devlink(&(0x7f00000000c0), r6) 0s ago: executing program 3 (id=10): r0 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000540)={&(0x7f0000000080)=@newlink={0x3c, 0x10, 0xff05, 0x0, 0x0, {0x0, 0x0, 0x4a00}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_NUM_RX_QUEUES={0x8, 0x20, 0x9}]}, 0x3c}}, 0x0) socket$packet(0x11, 0x1, 0x300) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) sendmmsg$inet6(r1, &(0x7f0000002340)=[{{&(0x7f0000000300)={0xa, 0x4e21, 0x0, @private2={0xfc, 0x2, '\x00', 0x1}, 0x6}, 0x1c, &(0x7f0000000cc0)=[{&(0x7f00000000c0)='O', 0x1}], 0x1}}], 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000140)={'bond_slave_1\x00'}) shutdown(r1, 0x1) r2 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r2, 0x84, 0xc, &(0x7f0000000240)=@assoc_value={0x0}, &(0x7f0000000080)=0x8) getsockopt$inet_sctp6_SCTP_GET_LOCAL_ADDRS(r1, 0x84, 0x6d, &(0x7f00000002c0)={r3}, &(0x7f0000000100)=0x8) getsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f00000000c0)={r3, 0x48, &(0x7f0000000180)=[@in6={0xa, 0x4e23, 0xfff, @empty, 0x7fffffff}, @in6={0xa, 0x4e21, 0xffffffff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', 0x2}, @in={0x2, 0x4e24, @empty}]}, &(0x7f0000000100)=0x10) r4 = socket(0xa, 0x3, 0x3a) connect$phonet_pipe(r4, &(0x7f0000000000)={0x23, 0x8, 0x3}, 0x10) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.94' (ED25519) to the list of known hosts. [ 81.335928][ T5813] cgroup: Unknown subsys name 'net' [ 81.466149][ T5813] cgroup: Unknown subsys name 'cpuset' [ 81.475208][ T5813] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 83.082802][ T5813] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 87.134278][ T5842] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 87.142940][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 87.144278][ T5842] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 87.159485][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 87.159802][ T5843] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 87.169942][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 87.178866][ T5843] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 87.189236][ T5842] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 87.196978][ T5843] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 87.205691][ T5843] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 87.210682][ T5845] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 87.216444][ T5843] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 87.224492][ T5845] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 87.228451][ T5843] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 87.236872][ T5845] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 87.244090][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 87.257354][ T5845] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 87.265879][ T5845] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 87.274279][ T5847] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 87.281998][ T5847] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 87.284207][ T5845] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 87.296965][ T5845] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 87.306514][ T5838] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 87.321758][ T5838] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 87.338387][ T5847] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 88.144977][ T5826] chnl_net:caif_netlink_parms(): no params data found [ 88.160725][ T5827] chnl_net:caif_netlink_parms(): no params data found [ 88.260648][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 88.348593][ T5837] chnl_net:caif_netlink_parms(): no params data found [ 88.385342][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 88.540312][ T5826] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.549834][ T5826] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.557909][ T5826] bridge_slave_0: entered allmulticast mode [ 88.566140][ T5826] bridge_slave_0: entered promiscuous mode [ 88.589981][ T5827] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.597354][ T5827] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.605458][ T5827] bridge_slave_0: entered allmulticast mode [ 88.613017][ T5827] bridge_slave_0: entered promiscuous mode [ 88.627859][ T5827] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.635260][ T5827] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.642975][ T5827] bridge_slave_1: entered allmulticast mode [ 88.650838][ T5827] bridge_slave_1: entered promiscuous mode [ 88.677650][ T5826] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.684991][ T5826] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.692391][ T5826] bridge_slave_1: entered allmulticast mode [ 88.699799][ T5826] bridge_slave_1: entered promiscuous mode [ 88.783151][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.790630][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.798227][ T5828] bridge_slave_0: entered allmulticast mode [ 88.806069][ T5828] bridge_slave_0: entered promiscuous mode [ 88.848353][ T5827] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.862272][ T5827] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.873123][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.880361][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.887723][ T5828] bridge_slave_1: entered allmulticast mode [ 88.895367][ T5828] bridge_slave_1: entered promiscuous mode [ 88.905437][ T5826] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.926367][ T5837] bridge0: port 1(bridge_slave_0) entered blocking state [ 88.933655][ T5837] bridge0: port 1(bridge_slave_0) entered disabled state [ 88.941109][ T5837] bridge_slave_0: entered allmulticast mode [ 88.949456][ T5837] bridge_slave_0: entered promiscuous mode [ 88.981911][ T5826] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.006732][ T5837] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.014032][ T5837] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.021418][ T5837] bridge_slave_1: entered allmulticast mode [ 89.029188][ T5837] bridge_slave_1: entered promiscuous mode [ 89.070140][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.077341][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.085112][ T5830] bridge_slave_0: entered allmulticast mode [ 89.092681][ T5830] bridge_slave_0: entered promiscuous mode [ 89.113017][ T5827] team0: Port device team_slave_0 added [ 89.122118][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.143034][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.150308][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.158358][ T5830] bridge_slave_1: entered allmulticast mode [ 89.166051][ T5830] bridge_slave_1: entered promiscuous mode [ 89.186926][ T5827] team0: Port device team_slave_1 added [ 89.196166][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.207948][ T5826] team0: Port device team_slave_0 added [ 89.228409][ T5837] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.240855][ T5837] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.272930][ T5826] team0: Port device team_slave_1 added [ 89.332886][ T5828] team0: Port device team_slave_0 added [ 89.341839][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.353688][ T5847] Bluetooth: hci2: command tx timeout [ 89.359526][ T51] Bluetooth: hci3: command tx timeout [ 89.365572][ T5847] Bluetooth: hci1: command tx timeout [ 89.381952][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.389243][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.415980][ T5827] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.432404][ T5847] Bluetooth: hci4: command tx timeout [ 89.438430][ T51] Bluetooth: hci0: command tx timeout [ 89.449927][ T5828] team0: Port device team_slave_1 added [ 89.458286][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.469504][ T5837] team0: Port device team_slave_0 added [ 89.476056][ T5827] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.483313][ T5827] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.509320][ T5827] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.521358][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.528526][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.554847][ T5826] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.589585][ T5837] team0: Port device team_slave_1 added [ 89.615316][ T5826] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.622598][ T5826] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.648680][ T5826] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.716522][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.723632][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.750045][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.763698][ T5830] team0: Port device team_slave_0 added [ 89.769983][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.777403][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.804836][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.818234][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.825661][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.852807][ T5837] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.866110][ T5837] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.873621][ T5837] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 89.900144][ T5837] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.928124][ T5830] team0: Port device team_slave_1 added [ 89.968754][ T5826] hsr_slave_0: entered promiscuous mode [ 89.975597][ T5826] hsr_slave_1: entered promiscuous mode [ 90.017391][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 90.024532][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.050743][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 90.112713][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 90.119730][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 90.146509][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 90.171264][ T5827] hsr_slave_0: entered promiscuous mode [ 90.178403][ T5827] hsr_slave_1: entered promiscuous mode [ 90.184683][ T5827] debugfs: 'hsr0' already exists in 'hsr' [ 90.190541][ T5827] Cannot create hsr debugfs directory [ 90.263089][ T5828] hsr_slave_0: entered promiscuous mode [ 90.269679][ T5828] hsr_slave_1: entered promiscuous mode [ 90.276453][ T5828] debugfs: 'hsr0' already exists in 'hsr' [ 90.282274][ T5828] Cannot create hsr debugfs directory [ 90.305638][ T5837] hsr_slave_0: entered promiscuous mode [ 90.312702][ T5837] hsr_slave_1: entered promiscuous mode [ 90.319012][ T5837] debugfs: 'hsr0' already exists in 'hsr' [ 90.324927][ T5837] Cannot create hsr debugfs directory [ 90.374793][ T5830] hsr_slave_0: entered promiscuous mode [ 90.381725][ T5830] hsr_slave_1: entered promiscuous mode [ 90.388303][ T5830] debugfs: 'hsr0' already exists in 'hsr' [ 90.398450][ T5830] Cannot create hsr debugfs directory [ 90.964296][ T5826] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 90.977230][ T5826] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 90.999950][ T5826] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 91.011503][ T5826] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 91.073903][ T5827] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 91.085196][ T5827] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 91.098560][ T5827] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 91.126915][ T5827] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 91.234217][ T5837] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.248162][ T5837] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.277904][ T5837] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.305359][ T5837] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.381902][ T5828] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 91.394861][ T5828] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 91.413221][ T5826] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.432954][ T51] Bluetooth: hci3: command tx timeout [ 91.438540][ T51] Bluetooth: hci1: command tx timeout [ 91.445484][ T5847] Bluetooth: hci2: command tx timeout [ 91.460344][ T5828] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 91.490013][ T5828] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 91.512445][ T5847] Bluetooth: hci4: command tx timeout [ 91.518218][ T51] Bluetooth: hci0: command tx timeout [ 91.541563][ T5826] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.576510][ T5830] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 91.603917][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.611678][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.623993][ T5830] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.637274][ T5830] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.650974][ T5830] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.680208][ T999] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.687403][ T999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.715126][ T5827] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.784472][ T5827] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.811661][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.819108][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.851392][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.858744][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 91.924745][ T5837] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.005787][ T5837] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.048211][ T61] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.055505][ T61] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.084646][ T61] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.092220][ T61] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.119856][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.138796][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.201197][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.228850][ T999] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.236076][ T999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.274324][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.304034][ T999] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.311307][ T999] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.351679][ T999] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.358889][ T999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.371031][ T999] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.378332][ T999] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.396870][ T10] cfg80211: failed to load regulatory.db [ 92.486687][ T5826] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.735466][ T5827] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.864242][ T5837] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.876982][ T5826] veth0_vlan: entered promiscuous mode [ 92.921657][ T5826] veth1_vlan: entered promiscuous mode [ 93.056395][ T5826] veth0_macvtap: entered promiscuous mode [ 93.068440][ T5826] veth1_macvtap: entered promiscuous mode [ 93.085977][ T5827] veth0_vlan: entered promiscuous mode [ 93.110444][ T5837] veth0_vlan: entered promiscuous mode [ 93.119910][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.131683][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.164270][ T5826] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.175618][ T5827] veth1_vlan: entered promiscuous mode [ 93.191225][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 93.249438][ T5837] veth1_vlan: entered promiscuous mode [ 93.258087][ T36] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.270924][ T36] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.288863][ T36] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.300335][ T36] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.401717][ T5827] veth0_macvtap: entered promiscuous mode [ 93.420354][ T5827] veth1_macvtap: entered promiscuous mode [ 93.464973][ T5837] veth0_macvtap: entered promiscuous mode [ 93.506863][ T5828] veth0_vlan: entered promiscuous mode [ 93.512681][ T51] Bluetooth: hci3: command tx timeout [ 93.524977][ T51] Bluetooth: hci1: command tx timeout [ 93.530443][ T51] Bluetooth: hci2: command tx timeout [ 93.545100][ T5837] veth1_macvtap: entered promiscuous mode [ 93.585347][ T5828] veth1_vlan: entered promiscuous mode [ 93.594612][ T5847] Bluetooth: hci4: command tx timeout [ 93.600132][ T51] Bluetooth: hci0: command tx timeout [ 93.629864][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.639224][ T999] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.652703][ T999] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.677312][ T5827] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.694642][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.715694][ T12] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.743923][ T12] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.755996][ T12] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.786998][ T5837] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.797691][ T12] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.810515][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.819289][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.848415][ T58] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.869760][ T58] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.893675][ T5830] veth0_vlan: entered promiscuous mode [ 93.920805][ T5826] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 93.938217][ T58] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.949709][ T58] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.975445][ T5828] veth0_macvtap: entered promiscuous mode [ 94.020522][ T5830] veth1_vlan: entered promiscuous mode [ 94.043873][ T5828] veth1_macvtap: entered promiscuous mode [ 94.083149][ T58] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.100294][ T58] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.147091][ T5951] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 94.165144][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.186429][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.236223][ T999] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.245164][ T999] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.277599][ T58] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.286600][ T58] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.296656][ T58] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.317137][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.320354][ T58] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.352728][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.414026][ T5830] veth0_macvtap: entered promiscuous mode [ 94.529650][ T61] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.542824][ T61] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.559622][ T5830] veth1_macvtap: entered promiscuous mode [ 94.571980][ T5960] syzkaller0: entered promiscuous mode [ 94.578264][ T5960] syzkaller0: entered allmulticast mode [ 94.696638][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 94.754582][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 94.807064][ T5964] netlink: 28 bytes leftover after parsing attributes in process `syz.2.3'. [ 94.808845][ T12] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.827404][ T12] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.848185][ T12] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.860504][ T12] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 94.889902][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 94.928192][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.084875][ T5969] trusted_key: syz.2.9 sent an empty control message without MSG_MORE. [ 95.095706][ T5969] Oops: general protection fault, probably for non-canonical address 0xdffffc0000000001: 0000 [#1] SMP KASAN PTI [ 95.107643][ T5969] KASAN: null-ptr-deref in range [0x0000000000000008-0x000000000000000f] [ 95.116112][ T5969] CPU: 0 UID: 0 PID: 5969 Comm: syz.2.9 Not tainted syzkaller #0 PREEMPT(full) [ 95.125354][ T5969] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 03/18/2026 [ 95.135716][ T5969] RIP: 0010:memcpy_sglist+0x420/0x730 [ 95.141338][ T5969] Code: e8 55 b4 52 fd f6 c3 01 0f 85 0a 01 00 00 e8 67 af 52 fd 4c 89 f3 eb 07 e8 5d af 52 fd 31 db 4c 8d 7b 08 4c 89 f8 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 1d 02 00 00 41 8b 07 89 44 24 04 49 8d 7d [ 95.161172][ T5969] RSP: 0018:ffffc900048c7698 EFLAGS: 00010202 [ 95.167290][ T5969] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000080000 [ 95.175325][ T5969] RDX: ffffc9000d4f2000 RSI: 0000000000000235 RDI: 0000000000000236 [ 95.183342][ T5969] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 95.191352][ T5969] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000006 [ 95.199361][ T5969] R13: ffff88802d317700 R14: ffff888011e030a0 R15: 0000000000000008 [ 95.207373][ T5969] FS: 00007fd6d2f0b6c0(0000) GS:ffff888125454000(0000) knlGS:0000000000000000 [ 95.216340][ T5969] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.223400][ T5969] CR2: 0000200000001200 CR3: 000000001db9c000 CR4: 00000000003526f0 [ 95.231455][ T5969] Call Trace: [ 95.234799][ T5969] [ 95.237790][ T5969] aead_recvmsg+0x719/0x1030 [ 95.242446][ T5969] ? __pfx_aead_recvmsg+0x10/0x10 [ 95.247706][ T5969] ? __pfx_aead_recvmsg+0x10/0x10 [ 95.252829][ T5969] sock_recvmsg_nosec+0x10c/0x140 [ 95.255691][ T5975] netlink: 8 bytes leftover after parsing attributes in process `syz.0.8'. [ 95.257906][ T5969] ____sys_recvmsg+0x3e3/0x4a0 [ 95.267086][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 95.271287][ T5969] ? __pfx_____sys_recvmsg+0x10/0x10 [ 95.280082][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 95.284597][ T5969] ? import_iovec+0x73/0xa0 [ 95.284637][ T5969] ___sys_recvmsg+0x215/0x590 [ 95.284669][ T5969] ? __lock_acquire+0x6b5/0x2cf0 [ 95.306133][ T5969] ? __pfx____sys_recvmsg+0x10/0x10 [ 95.311406][ T5969] do_recvmmsg+0x334/0x800 [ 95.315885][ T5969] ? __pfx_do_recvmmsg+0x10/0x10 [ 95.320914][ T5969] ? __pfx_do_futex+0x10/0x10 [ 95.325658][ T5969] __x64_sys_recvmmsg+0x198/0x250 [ 95.330826][ T5969] ? __pfx___x64_sys_recvmmsg+0x10/0x10 [ 95.336438][ T5969] do_syscall_64+0x14d/0xf80 [ 95.341081][ T5969] ? trace_irq_disable+0x3b/0x150 [ 95.346164][ T5969] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.352270][ T5969] ? clear_bhb_loop+0x40/0x90 [ 95.357002][ T5969] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 95.362938][ T5969] RIP: 0033:0x7fd6d1f9c819 [ 95.367416][ T5969] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 95.387107][ T5969] RSP: 002b:00007fd6d2f0b028 EFLAGS: 00000246 ORIG_RAX: 000000000000012b [ 95.395575][ T5969] RAX: ffffffffffffffda RBX: 00007fd6d2215fa0 RCX: 00007fd6d1f9c819 [ 95.403591][ T5969] RDX: 0000000000000002 RSI: 0000200000001200 RDI: 0000000000000007 [ 95.411606][ T5969] RBP: 00007fd6d2032c91 R08: 0000000000000000 R09: 0000000000000000 [ 95.419625][ T5969] R10: 0000000000000060 R11: 0000000000000246 R12: 0000000000000000 [ 95.427652][ T5969] R13: 00007fd6d2216038 R14: 00007fd6d2215fa0 R15: 00007fffab93b568 [ 95.435669][ T5969] [ 95.438732][ T5969] Modules linked in: [ 95.444383][ T5969] ---[ end trace 0000000000000000 ]--- [ 95.454174][ T5907] GRED: Unable to relocate VQ 0x0 after dequeue, screwing up backlog [ 95.461280][ T5969] RIP: 0010:memcpy_sglist+0x420/0x730 [ 95.468080][ T5969] Code: e8 55 b4 52 fd f6 c3 01 0f 85 0a 01 00 00 e8 67 af 52 fd 4c 89 f3 eb 07 e8 5d af 52 fd 31 db 4c 8d 7b 08 4c 89 f8 48 c1 e8 03 <0f> b6 04 28 84 c0 0f 85 1d 02 00 00 41 8b 07 89 44 24 04 49 8d 7d [ 95.489435][ T5969] RSP: 0018:ffffc900048c7698 EFLAGS: 00010202 [ 95.496095][ T5969] RAX: 0000000000000001 RBX: 0000000000000000 RCX: 0000000000080000 [ 95.504667][ T5969] RDX: ffffc9000d4f2000 RSI: 0000000000000235 RDI: 0000000000000236 [ 95.523274][ T5969] RBP: dffffc0000000000 R08: 0000000000000000 R09: 0000000000000000 [ 95.531438][ T5969] R10: 0000000000000000 R11: 0000000000000000 R12: 0000000000000006 [ 95.540149][ T5969] R13: ffff88802d317700 R14: ffff888011e030a0 R15: 0000000000000008 [ 95.592842][ T51] Bluetooth: hci2: command tx timeout [ 95.598338][ T51] Bluetooth: hci1: command tx timeout [ 95.601401][ T5978] syzkaller0: entered promiscuous mode [ 95.606702][ T51] Bluetooth: hci3: command tx timeout [ 95.610046][ T5978] syzkaller0: entered allmulticast mode [ 95.620687][ T5969] FS: 00007fd6d2f0b6c0(0000) GS:ffff888125554000(0000) knlGS:0000000000000000 [ 95.630265][ T5969] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 95.637225][ T5969] CR2: 00007f532a9e9f00 CR3: 000000001db9c000 CR4: 00000000003526f0 [ 95.645678][ T5969] Kernel panic - not syncing: Fatal exception [ 95.652364][ T5969] Kernel Offset: disabled [ 95.656718][ T5969] Rebooting in 86400 seconds..