last executing test programs: 2.864585916s ago: executing program 1 (id=426): r0 = socket$tipc(0x1e, 0x5, 0x0) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, &(0x7f0000000100)={0x41}, 0x10) bind$tipc(r0, 0x0, 0x0) sendmsg$tipc(r0, &(0x7f0000000340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x3, {{0x41, 0x1}}}, 0x10, 0x0}, 0x1) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x8, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1802000000000000000000000000000085000000ba00000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x6, &(0x7f00000002c0)=@framed={{0x18, 0x8}, [@initr0, @alu={0x7, 0x1, 0xb}]}, &(0x7f0000000000)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x0, "", [@nested={0x106, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@local}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd"]}]}, 0x114}], 0x1}, 0x0) 2.692255258s ago: executing program 1 (id=430): bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x8, 0x4, &(0x7f0000000100)=ANY=[@ANYBLOB="850000000800000076000000000001003d0000000000000095000000000000000000a58fc9093e220f8900f3c474313bd69170d74a50a7eaa3da9dbfc07698cc25105bd66a97a236bc41073b6ecef48f25609e4a2ac44b7eb68c77a63aa393ad73bc897e0049e4b4fe"], &(0x7f0000000040)='syzkaller\x00', 0x8, 0x99, &(0x7f0000000180)=""/153, 0x0, 0x8e, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffffffffffed8, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x3f) r0 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x7ff, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x24, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000480)=@generic={&(0x7f0000000440)='./file0\x00', 0x0, 0x8}, 0x18) r2 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f00000004c0)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x3, 0x1, 0x0, @void, @value, @void, @value}, 0x50) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000005c0)={0x6, 0x17, &(0x7f0000000240)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x200, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@alu={0x4, 0x1, 0xc, 0x0, 0x3, 0xfffffffffffffef2}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}, @ldst={0x1, 0x0, 0x3, 0x1, 0x0, 0xffffffffffffffe0, 0x8}, @generic={0x53, 0x3, 0x8, 0x7, 0x1}, @map_idx={0x18, 0xa, 0x5, 0x0, 0x3}, @map_idx_val={0x18, 0x9}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x8, 0x99, &(0x7f0000000300)=""/153, 0x41100, 0x4, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, &(0x7f00000003c0)={0x8, 0x3}, 0x8, 0x10, &(0x7f0000000400)={0x3, 0xe, 0x80000000, 0x7}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000540)=[r1, r2], &(0x7f0000000580)=[{0x4, 0x3, 0xc, 0x9}, {0x0, 0x1, 0x3, 0x1}], 0x10, 0x0, @void, @value}, 0x94) 2.640075585s ago: executing program 1 (id=431): socket$key(0xf, 0x3, 0x2) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x58) r1 = socket(0x10, 0x3, 0x0) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r2, &(0x7f0000000200)='0', 0x1, 0x0, &(0x7f0000000240)={0xa, 0x0, 0x0, @initdev={0xfe, 0x88, '\x00', 0xfd, 0x0}, 0x1}, 0x1c) shutdown(r2, 0x1) setsockopt$inet_sctp6_SCTP_CONTEXT(r2, 0x84, 0x11, &(0x7f0000000780)={0x0, 0x7}, 0x8) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000000)={0x8}, 0x9) write(r1, &(0x7f00000000c0)="240000001e005f0214f6fffffffffff807000000000000000000ffa6080009000d000000", 0x24) bind$alg(r0, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'rfc4543(authenc(sha3-224-ce,xts-twofish-avx))\x00'}, 0x58) r3 = accept4(r0, 0x0, 0x0, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r1) socket$inet_udp(0x2, 0x2, 0x0) sendmsg$alg(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000980)="62daa1f3e2cf89479e33fd2f049c527341db5d1fe6513185a657858336a87de35f384024e8efcb63fd1c7ab1c501e7d3bf3f6118cd35e422445d9e2379dce8592e", 0x41}], 0x1}, 0x0) 1.874356471s ago: executing program 3 (id=440): r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000480)={0xa, 0x4e20, 0x0, @mcast1={0xff, 0x5}}, 0x1c) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r0, 0x29, 0x20, &(0x7f0000000000)={@ipv4={'\x00', '\xff\xff', @rand_addr=0x64010101}, 0x7, 0x2, 0x1, 0xe, 0x18, 0x80}, 0x20) syz_emit_ethernet(0x3a, &(0x7f0000002100)=ANY=[@ANYBLOB="0180c200000000000000000008004500002c0000bbe000020000000000000090780400c51f111500"/49], 0x0) 1.722262385s ago: executing program 3 (id=443): r0 = socket(0x11, 0x800000003, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) bind$unix(r1, &(0x7f00000005c0)=@abs={0x1, 0x0, 0x4e21}, 0x6e) connect$unix(r1, &(0x7f0000000280)=@abs={0x1, 0x0, 0x4e21}, 0x6e) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) r3 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendto$inet6(r3, &(0x7f0000000080)="b301", 0x2, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @mcast2}, 0x1c) setsockopt$SO_TIMESTAMP(r3, 0x1, 0x1d, &(0x7f0000000040)=0x40, 0x4) recvfrom$inet6(r3, &(0x7f00000004c0)=""/247, 0xf7, 0x80010022, 0x0, 0x0) r4 = socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$IPT_SO_GET_REVISION_MATCH(r4, 0x0, 0x42, 0x0, &(0x7f0000000080)) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r5, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000180)=@newqdisc={0x98, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x12, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x68, 0x2, [@TCA_TAPRIO_ATTR_PRIOMAP={0x56, 0x1, {0x2, [], 0x0, [0x8, 0x4]}}, @TCA_TAPRIO_ATTR_FLAGS={0x8, 0xa, 0x1}, @TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x98}}, 0x0) 1.624724544s ago: executing program 1 (id=445): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) ioctl$FS_IOC_SETFLAGS(r1, 0x40086602, &(0x7f0000000080)=0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xb, &(0x7f0000000240)=@framed={{}, [@printk={@p, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x20000000}, {0x85, 0x0, 0x0, 0x70}}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r2 = socket$inet(0x2, 0x3, 0x2) setsockopt$inet_mreqsrc(r2, 0x0, 0x27, &(0x7f0000000040)={@multicast2, @local, @local}, 0xc) setsockopt$inet_mreqn(r2, 0x0, 0x27, &(0x7f0000000000)={@multicast1, @local}, 0xc) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x0, 0x0, 0x0, 0x2, 0x0, @private, @multicast2}, @timestamp_reply={0x11}}}}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000040)=ANY=[@ANYBLOB="280400001600e5632bbd7000fedbdf25fc010000000000000000000000000000ac1414aa0000000000000000000000004e230fff4e2300050200808021000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="fe800000000000000000000000000035000004d432000000ac1414bb000000000000000000000000050000000000000002000000000000000004000000000000070000000000000007000000000000006cee0000000000000700000000000000ff03000000000000010000000100000005000000000000003f0000000000000009000000000000000800000001000080090000002bbd7000ff3400000a0000039400000000000000010000000e2dcf0905"], 0x428}}, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010000104000000000008000008794ee0", @ANYRESDEC=r4, @ANYBLOB="030012800c00f080080001000800000008000500023bdf34238b30e9aae67d0000000000000000", @ANYRES32=r4, @ANYRESHEX=r0, @ANYRES16], 0x4c}}, 0x0) 1.166379108s ago: executing program 0 (id=446): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x2}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x30c) 1.08346091s ago: executing program 4 (id=448): r0 = socket(0x10, 0x803, 0x0) sendto$inet6(r0, &(0x7f00000000c0)="1289a4d3638cd14acf80b352a1d6d9155a793972f5927bba5c2f8dcb8e39a22caf8dae57802694b148e28292725ee340b43ead53cfcbfb5d77774dd9bf621da7c4dc90bb41c23d65eee541b838b3005b76762afe19c6bf44999651bb98851c6af708cc783b8573cb2389eb7ce64ad946d4adf4b145fd2731690f5ff19469ff33cc56ed82a45500654058aa98ad92a6d8721b36f81e724d23165d437c7da80db6485ef67840de06bea888b6456b76a1e46315708f", 0xb4, 0x0, &(0x7f0000000180)={0xa, 0x4e24, 0x803f, @mcast1, 0x8}, 0x1c) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010003708000000ff0000000000000000", @ANYRES32=0x0, @ANYBLOB="00000000000000002c0012800b00010067726574617000001c0002800800040008000000060003008100000006000e0002000000"], 0x4c}}, 0x0) 1.070877051s ago: executing program 1 (id=449): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYRESDEC=0x0], 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x28) (async) r1 = socket(0x400000000010, 0x3, 0x0) write(r1, &(0x7f0000000040)="3a03000018002551075c0165ff0ffc0280200003031e000500e1000c0400070080000900", 0x33a) (async) r2 = socket$kcm(0xa, 0x5, 0x0) (async) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x14, 0x0, 0x4, 0x0, 0xc}, 0x14}, 0x1, 0x0, 0x0, 0xc044}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r4) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r4) sendmsg$NL802154_CMD_SET_SEC_PARAMS(r3, &(0x7f0000000680)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000002c0)={0x14, r5, 0x503, 0x70bd2b, 0x25dfdbff}, 0x14}}, 0x0) sendmsg$NL802154_CMD_NEW_INTERFACE(r0, &(0x7f0000000180)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)={0x40, r5, 0x16, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_EXTENDED_ADDR={0xc, 0x17, {0xaaaaaaaaaaaa0102}}, @NL802154_ATTR_IFTYPE={0x8}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}, @NL802154_ATTR_IFNAME={0xa, 0x4, 'wpan4\x00'}]}, 0x40}, 0x1, 0x0, 0x0, 0x28048824}, 0x20000000) (async) ioctl$sock_kcm_SIOCKCMCLONE(r2, 0x890b, &(0x7f0000000000)={r2}) 980.123415ms ago: executing program 4 (id=451): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0500957dcaf1000000000600000008000300", @ANYRES32=r3, @ANYBLOB="0800050003000000"], 0x24}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r4, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="1c0000005e000104000000001d0000000c0042800800710001"], 0x1c}], 0x1}, 0x0) socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) r5 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r5, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) socket(0x2a, 0x2, 0x0) socket$netlink(0x10, 0x3, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a50000000060a0b0400000000008b968eceb3b2f72ab9b7000000020000002400048020000180070001006374000014000280080002400000000f08000140000000140900010073797a300000000009000200735a8f73797a320000000014000000115e38339640d87f07fe92b82a3721d5712655735145ecf68720fe20db1aa345a98f3e35cf8413222567eb8f62ceb856253a4a3d3d37b70afa90fb4816678499b7c8102beeefbdf8"], 0x78}}, 0x0) setsockopt$inet_tcp_int(r5, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) connect$inet(r5, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendmsg$BATADV_CMD_GET_MESH(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)=ANY=[], 0x24}}, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r5, 0x6, 0x13, &(0x7f00000001c0), 0x4) 918.432597ms ago: executing program 0 (id=452): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000c80)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000001200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq={{0x7}, {0x1c, 0x2, [@TCA_FQ_FLOW_DEFAULT_RATE={0x18, 0x10, 0x3}, @TCA_FQ_TIMER_SLACK={0x0, 0xd, 0x5}, @TCA_FQ_QUANTUM={0x2, 0x2, 0x3001029}]}}]}, 0x48}}, 0x0) writev(r1, &(0x7f00000001c0)=[{&(0x7f0000000000)="480000001500190a20ffff7fffffff5602113e850e1de0974881030491720000de213ee23ffbf510040041feff5aff2b0000000000000700"/68, 0x44}, {&(0x7f0000000080)="c1130389", 0x4}], 0x2) sendmsg$netlink(r0, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000005800)={0x28, 0x2d, 0x1, 0x0, 0x0, "", [@typed={0x8, 0x0, 0x0, 0x0, @uid}, @nested={0xf, 0x1, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @generic='c$9']}]}, 0x28}], 0x1}, 0x0) 862.202703ms ago: executing program 1 (id=453): r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r1, &(0x7f0000000200)={0x2, 0x4e20, @empty}, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_CTHELPER_DEL(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)={0x50, 0x2, 0x9, 0x5, 0x0, 0x0, {}, [@NFCTH_TUPLE={0x3c, 0x2, [@CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @local}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5}}]}]}, 0x50}}, 0x0) setsockopt$inet_tcp_int(r1, 0x6, 0x2, &(0x7f0000000040)=0x2800, 0x4) setsockopt$SO_ATTACH_FILTER(r1, 0x1, 0x1a, &(0x7f00000000c0)={0x1, &(0x7f0000000080)=[{0x6, 0x0, 0x0, 0x7654}]}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r1, 0x6, 0xd, &(0x7f0000000380)='vegas\x00', 0x6) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x1c}}, 0x10) sendmsg$inet(r1, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) recvmsg(r1, 0x0, 0x700) getsockopt$MRT(r0, 0x0, 0xd0, &(0x7f0000000040), &(0x7f00000000c0)=0x4) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780), 0x0, 0x0, 0x0, 0x1f00c00e}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r3, 0x89b0, &(0x7f0000000040)={'bond0\x00', 0x2000}) ioctl$BTRFS_IOC_QUOTA_RESCAN_STATUS(r0, 0x8040942d, &(0x7f00000001c0)) connect$inet(r0, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) r4 = socket$kcm(0x10, 0x2, 0x4) sendmsg$kcm(r4, &(0x7f0000000180)={0x0, 0xffffffffffffff05, &(0x7f0000000080)=[{&(0x7f0000000100)="4c000000150097f87059ae08060c040002ff0f0200000000000001870182fa73a69d35a2cca84708f7abca1bac1414aabd7c493872f750375ed08a560400000003c48f93b82a03000000461e", 0x4c}], 0x1}, 0x0) 861.741306ms ago: executing program 2 (id=454): sendto$packet(0xffffffffffffffff, &(0x7f0000000000)="9a81a3ffa3b347befece", 0xa, 0x4000000, 0x0, 0x0) r0 = socket$inet_icmp(0x2, 0x2, 0x1) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000140), 0xffffffffffffffff) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r3, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_PAN_ID(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000180)={0x1c, r2, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r4}]}, 0x1c}, 0x1, 0x0, 0x0, 0x81}, 0x800) sendmmsg$inet(0xffffffffffffffff, &(0x7f0000000cc0)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x4}}], 0x18}}], 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000180)={'syztnl0\x00', &(0x7f0000000340)={'erspan0\x00', 0x0, 0x20, 0x10, 0xc72, 0x4, {{0x27, 0x4, 0x3, 0x0, 0x9c, 0x66, 0x0, 0x7f, 0x0, 0x0, @empty, @private=0xa010102, {[@cipso={0x86, 0x15, 0x0, [{0x0, 0x8, "fe3e96328525"}, {0x5, 0x7, "b808a4b652"}]}, @timestamp_addr={0x44, 0x34, 0x49, 0x1, 0x7, [{@local, 0x2}, {@rand_addr=0x64010102, 0x6}, {@remote, 0xffffffc0}, {@remote, 0x2c000000}, {@multicast2, 0x81}, {@multicast2, 0x10001}]}, @generic={0x7, 0x11, "c155b5ce7182487b1136b08d3d1397"}, @timestamp_addr={0x44, 0x2c, 0x2a, 0x1, 0x7, [{@loopback, 0xc351}, {@multicast2, 0x67}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x6}, {@multicast2, 0x2980000}, {@loopback, 0x1ff}]}]}}}}}) getsockopt$inet_pktinfo(r0, 0x0, 0x8, &(0x7f0000000600)={0x0, @local, @private}, &(0x7f0000000640)=0xc) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000000700)={0x1, 0x58, &(0x7f0000000680)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, &(0x7f0000000dc0)={'gre0\x00', &(0x7f0000000d00)={'tunl0\x00', 0x0, 0x7800, 0x40, 0x8001, 0xf, {{0x22, 0x4, 0x0, 0x3, 0x88, 0x68, 0x0, 0x2f, 0x29, 0x0, @multicast1, @remote, {[@ra={0x94, 0x4}, @rr={0x7, 0x13, 0xe2, [@empty, @remote, @local, @multicast1]}, @lsrr={0x83, 0x7, 0x71, [@multicast1]}, @timestamp_prespec={0x44, 0x54, 0xac, 0x3, 0x3, [{@multicast2, 0x7}, {@remote, 0x80}, {@dev={0xac, 0x14, 0x14, 0x22}, 0x6}, {@dev={0xac, 0x14, 0x14, 0x13}, 0x6}, {@remote, 0xffff}, {@private=0xa010101, 0x3}, {@local, 0x3}, {@dev={0xac, 0x14, 0x14, 0x43}, 0x3}, {@remote}, {@local, 0xfffffff7}]}]}}}}}) sendmmsg$inet(r5, &(0x7f0000000ec0)=[{{&(0x7f0000000080)={0x2, 0x4e20, @broadcast}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000240)="37067454e9b428f35f5bcf7afa88228a1411f457edefbdc2de94523ca0294b2af4efb7a23b3c368a45f2dd6bd81c2138c6e6131694b7f0c2b559b480e50fd21435df139dc62e3d4f880fceb1e7bf7fda88c0c5ba6fcdfc5cb9b20bc3036e5d567e41d0aa4d2e306b826029ba500caa626d2f500959e4c6bbea06f3bc3c1daa812b7dbc32325659340e86232bfd042246ef21bca88ecb9f1d0284665c1efd3285d3a5d8933a0a3433911bf4f512a1dad07d6629fcb2c95b17e0b653490c81ecaad4127699a236ca28", 0xc8}], 0x1, &(0x7f00000001c0)=[@ip_tos_int={{0x14, 0x0, 0x1, 0xe3a}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r6, @local, @multicast1}}}], 0x38}}, {{&(0x7f0000000400)={0x2, 0x4e22, @remote}, 0x10, &(0x7f00000005c0)=[{&(0x7f0000000440)="9a34752b8af796296767c9beb1af583f6aaa892240a9aa36f384cb85ce8c68c309f5d7b8674f28db345c9c9e485d32bd90e60daef276ef3f3330c086b450d35c7768199de8644cdf1efed5650375eb854e", 0x51}, {&(0x7f00000004c0)="a6aff205522318c4e46666fc6e19fa2235ff231f7055ec9740fc8e0c6451c5c3861bfc8a9ddba519bb7d6c0dbb992accfba25164789a16e30024a40aa7f38a37bde54594cba8f43299549d9131a972ce4ae61aa399bec0341a5ade470c423bc5a085b8288faffcdeca8c9ca75573244024761f611e5f1f8c3fb704363a0ef26688b2752913a19117dde9643346d251879bf148877c0b249a987eca2f39952bd76d549e8998f89099be0cdc08d6ad5312a08753260600e3a4ee82ca06b8f653725e0fcb3c01faa2d4f2e54073335fbc2bfc1126115ff03695e0e56c1e17520159a412243b52cdffd26970511a1093974237", 0xf1}], 0x2, &(0x7f0000000740)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r7, @broadcast, @multicast2}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r8, @broadcast, @loopback}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x7}}, @ip_ttl={{0x14, 0x0, 0x2, 0xbc9d7ac9}}], 0x70}}, {{&(0x7f00000007c0)={0x2, 0x4e21, @remote}, 0x10, &(0x7f00000008c0)=[{&(0x7f0000000800)="7e1a7d71371199ea18a4b5b5b83a9ee91b3eb4ad9456273c0d6b5c0e93093f26b8bfe4553ccbf0d5ed02efbf59eba0a5300f816a0e704f8e8b25af3ee4f44187ec7d78bbd7994c3c7d76fa618a11a28152b50cbb204980adb72dc67ae208055b6f7b3da3ccf8fb00db5977f0b3f934bcc386d58c85ef639c59b6d0b0bf4985cdad56939d465651f0a941e0f8d5c5433eee72b115f6af21af684752c280eaa721b7c6025974ae514b05543d28db", 0xad}], 0x1, &(0x7f0000000900)=[@ip_retopts={{0x40, 0x0, 0x7, {[@end, @noop, @timestamp_addr={0x44, 0x14, 0x97, 0x1, 0x5, [{@empty, 0x1}, {@multicast2, 0x40}]}, @lsrr={0x83, 0x17, 0x19, [@local, @rand_addr=0x64010102, @rand_addr=0x64010101, @broadcast, @dev={0xac, 0x14, 0x14, 0x27}]}]}}}], 0x40}}, {{&(0x7f0000000940)={0x2, 0x4e22, @local}, 0x10, &(0x7f0000000a00)=[{&(0x7f0000000980)="5fe5568d84dce59619ab36", 0xb}, {&(0x7f00000009c0)="b04efd5177f4d951af", 0x9}], 0x2, &(0x7f0000000a40)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x101}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0x2}}, @ip_tos_u8={{0x11, 0x0, 0x1, 0xf9}}], 0x48}}, {{0x0, 0x0, &(0x7f0000000c80)=[{&(0x7f0000000ac0)="6f37ed25d410215f144682e0a1be1be5bbd334d6aa88b04d19890dfc05598b3454016647dfcfdb72fba1f4a2a6f7c0b3aeaa813e93fdc19223d63b9fb00d0c6f4c3ec645e7f5fd10ae732d4e17a2cee2cec0", 0x52}, {&(0x7f0000000b40)="11de605fbc284f5a49fee8116b967567c8a2fe57f45282f6f3a9eb23e915a962dd", 0x21}, {&(0x7f0000000b80)="1202840b1bfa492cc636ec3d4ddcba33ffaf5a77403965da38a883296b3987e1292ef1e37bf3f980c430b360fa63d0fdc711e598c1f7e9bbf92fa1c20d6f9c7c3f11b77d2fdfeebac66cced970e1b112ab3258b4fdc05614379fc872850867c9dae1c87b", 0x64}, {&(0x7f0000000c00)="211c1e1d17be3acb9086391f2e28c3be0b029b4cf36999f6db9accb41d4f677cb23b8b6ee919f042a131b0079f455f29be674891609c90941fd74935799e5cea1c6076f0cd602cf977b3378b1782cbc246eeeb7eec958593ac998a10e05ba4540ad6e78eaaef0b", 0x67}], 0x4, &(0x7f0000000e00)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r9, @multicast2, @broadcast}}}, @ip_retopts={{0x24, 0x0, 0x7, {[@timestamp={0x44, 0x14, 0x49, 0x0, 0x0, [0x7, 0x8, 0x0, 0x8]}]}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0xffffffff}}, @ip_ttl={{0x14, 0x0, 0x2, 0x4}}, @ip_retopts={{0x48, 0x0, 0x7, {[@ra={0x94, 0x4, 0x1}, @timestamp={0x44, 0x20, 0x58, 0x0, 0x4, [0x4, 0x2, 0x10000000, 0x3299, 0x40, 0x9cd0, 0x9]}, @lsrr={0x83, 0x13, 0xa9, [@multicast1, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1, @broadcast]}]}}}], 0xc0}}], 0x5, 0x8010) setsockopt$netlink_NETLINK_NO_ENOBUFS(r5, 0x10e, 0xc, &(0x7f0000000040)=0x7f, 0x4) sendmsg$nl_route(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_getaddrlabel={0x24, 0x1a, 0x1, 0x0, 0x0, {0x2}, [@IFAL_LABEL={0x8, 0x2, 0x7}]}, 0x24}}, 0x0) r10 = socket$nl_generic(0x10, 0x3, 0x10) syz_emit_ethernet(0x12, &(0x7f0000000000)=ANY=[@ANYBLOB="910418166421b54fa0aaaa050004424203"], 0x0) r11 = socket$rxrpc(0x21, 0x2, 0xa) r12 = socket(0x2, 0x2, 0x1) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r12, &(0x7f0000001280)={&(0x7f0000000000)={0x2}, 0xc, &(0x7f0000001240)={&(0x7f0000001340)=ANY=[@ANYBLOB='\b'], 0xffeb}}, 0x0) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r11, 0x110, 0x4, &(0x7f0000000180)=0x4, 0x4) ioctl$sock_SIOCBRDELBR(r10, 0x89a2, &(0x7f0000000200)='bond0\x00') 759.592504ms ago: executing program 3 (id=455): socket(0x10, 0x3, 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x482, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'none\x00'}, 0x2c) setsockopt$IP_VS_SO_SET_ADD(r0, 0x0, 0x483, &(0x7f0000000000)={0x6, @local, 0x0, 0x0, 'sh\x00'}, 0x2c) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) r3 = socket$inet(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'macvlan0\x00', 0x0}) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f00000004c0)={r4, 0x3, 0x6, @broadcast}, 0x10) r5 = socket$inet6_sctp(0xa, 0x5, 0x84) shutdown(r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) r7 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_DEL_MFC(r7, 0x0, 0x5, &(0x7f0000001740)={@dev, @private, 0x0, "50195b9ae2d280a88343baee300eb695f9a491328803d89ff721bbc0b17cce26"}, 0x3c) r8 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r8, 0x0, 0xc8, &(0x7f0000000100), 0x4) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(r5, 0x84, 0x71, &(0x7f0000000080)={r6}, &(0x7f00000000c0)=0x18) r9 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_add_memb(r2, 0x107, 0x1, &(0x7f0000000200)={r4, 0x3, 0x6}, 0x10) socket$inet_icmp(0x2, 0x2, 0x1) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r10, 0x8933, &(0x7f00000002c0)={'macvlan0\x00', 0x0}) r12 = socket$nl_route(0x10, 0x3, 0x0) r13 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_add_memb(r13, 0x107, 0x18, &(0x7f0000000800)={0x0, 0x1, 0x6, @local}, 0x10) sendmsg$nl_route(r12, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=r11, @ANYBLOB="000017"], 0x44}}, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a3000000000080003400000000134000000140a03000000000000000000020000000900010073797a300000000008000340ea0000010c000640", @ANYRES8=r9, @ANYRES64=r8], 0x98}}, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)) 708.574767ms ago: executing program 2 (id=456): r0 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), 0xffffffffffffffff) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$NLBL_UNLABEL_C_ACCEPT(r2, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x40, r3, 0x8, 0x70bd26, 0x25dfdbfd, {}, [@NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}, @NLBL_UNLABEL_A_IFACE={0x14, 0x6, 'caif0\x00'}, @NLBL_UNLABEL_A_IPV4ADDR={0x8, 0x4, @broadcast}, @NLBL_UNLABEL_A_ACPTFLG={0x5, 0x1, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x8000}, 0x40) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000280)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_ADD_IFACE(r4, &(0x7f0000000240)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="463c1685", @ANYRES16=r0, @ANYBLOB="080026bd7000fddbdf252100000009001f0070687931000000000c0005000202aaaaaaaaaaaa"], 0x2c}, 0x1, 0x0, 0x0, 0x10}, 0x4c0d0) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="4d7e00000000040000002a00000008002f0002000000c4633600000000000c0005000000000000000002050037000000000008000200", @ANYRES32=r5, @ANYBLOB="060006000300000006000400fe000000"], 0x50}, 0x4, 0x700000000000000}, 0x0) 654.280459ms ago: executing program 0 (id=457): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_AUTHENTICATE(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x50, r2, 0x11, 0x0, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @NL80211_ATTR_AUTH_TYPE={0x8, 0x35, 0x1}, @key_params=[@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY={0xc, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}, @NL80211_KEY_DEFAULT={0x4}]}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random}]]}, 0x50}}, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_GET_KEY(r4, &(0x7f00000001c0)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000180)={&(0x7f0000000100)={0x50, r5, 0x20, 0x70bd25, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r6}, @val={0xc, 0x99, {0x7, 0x6f}}}}, [@NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_KEY_DATA_WEP104={0x11, 0x7, "50afb574a2eb127294de892f16"}, @NL80211_ATTR_KEY_DEFAULT_MGMT={0x4}, @NL80211_ATTR_KEY_DEFAULT={0x4}]}, 0x50}}, 0x20000000) r7 = socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r7, 0x84, 0x85, &(0x7f0000000000)={0x0, @in6={{0xa, 0x4e20, 0x4, @loopback, 0x2}}, 0x0, 0x7ffe}, 0x90) sendmsg$NL80211_CMD_FLUSH_PMKSA(r4, &(0x7f0000000a40)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f00000009c0)={0x1c, r5, 0xe25, 0x70bd26, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r6}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x240488d0}, 0x20000004) 652.813166ms ago: executing program 4 (id=458): r0 = socket$unix(0x1, 0x1, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r2}, 0x10) bind$unix(r1, &(0x7f0000003000)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x0) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000000)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x10001, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket$netlink(0x10, 0x3, 0x0) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000140)={0x78, 0x0}, 0x8) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000300)=r5, 0x4) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000000)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@bridge_newvlan={0x30, 0x70, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, r7}, [@BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_INFO={0x8, 0x1, {0x10}}}, @BRIDGE_VLANDB_ENTRY={0xc, 0x1, 0x0, 0x1, @BRIDGE_VLANDB_ENTRY_STATE={0x5, 0x3, 0x3}}]}, 0x30}, 0x1, 0x0, 0x0, 0x40000}, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x13, r8, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000080)={0x3, 0x4, 0x4, 0xa, 0x0, r3, 0x81, '\x00', r7, r8, 0x3, 0x5, 0x2, 0x0, @void, @value, @void, @value}, 0x50) connect$unix(r0, &(0x7f0000000180)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) connect$unix(r0, &(0x7f0000000280)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) listen(r1, 0x800) 550.80642ms ago: executing program 4 (id=459): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000500)=ANY=[@ANYBLOB="05000000000000007111ad00000000008510000002000000850000000500000095000000000000009500a505000000005160b53d4aaf0ecda3e967683918fabfc90ec1e06c5f48cb9ce64e815b7b74d0c3e9365f188f6a00591b"], &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0x0, 0x0, 0x8, &(0x7f00000002c0), &(0x7f0000000300)=""/8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000340)={r0, 0xe0, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r1 = socket(0x2a, 0x2, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000b00)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000001500)=@newtfilter={0x54, 0x2c, 0xd27, 0x1000000, 0x25dfdbff, {0x0, 0x0, 0x0, r2, {0x5}, {}, {0xc}}, [@filter_kind_options=@f_bpf={{0x8}, {0x28, 0x2, [@TCA_BPF_OPS={{0x6, 0x4, 0x28}, {0xc, 0x5, [{0x6, 0xf1, 0x4, 0x4}]}}, @TCA_BPF_CLASSID={0xfffffffffffffcbb, 0x3, {0x3, 0x27}}, @TCA_BPF_FLAGS_GEN={0x8, 0x9, 0x2}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x8050}, 0x0) sendmsg$IPSET_CMD_CREATE(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYRES32=r2, @ANYBLOB="62b3e656ca8d2cee728fe19d0e98fcb96bbf903dd4546a9c58c8aac0f9b47423c25cbeaa3732da75b960155ebf62bb8b701c9d86c38f1709eee15839d3c34906dbd2026ccd90cec0b55727f6947f35898a7a"], 0x5c}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000280)=ANY=[@ANYBLOB="340000003b0007010000000000000008047c0000ec0000000c00018006000600800a0000100002800c000b0007"], 0x34}, 0x1, 0x0, 0x0, 0x4010}, 0xc000) 533.000991ms ago: executing program 0 (id=460): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) close(r0) ioctl$SIOCSIFHWADDR(r0, 0x8b14, &(0x7f00000000c0)={'wlan1\x00', @remote}) sendmmsg$alg(r0, &(0x7f0000000f40)=[{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000080)="68b4c5e66d14ff87c90342b98dae91c4aa281f7d0eb85b27b9d4380bd2e01346b117f85a2eaf97e109b7df86d02bf8fa2fc06661d435", 0x36}, {&(0x7f0000000140)="dc9fd0faf19f80d921908f4b027295a557dbd02b176d9b23ad52a6f20016a3a619d062f2c0e7cad23b6baa012f9481cecfd0e18a0639d180637a7f831179cb848dec35adde4ad5885bb447a008f83fd96a43bce485b57e9aed63a7f49333aa2c5cf45b713822ba086f7b1411eb7e04197992a223b7bdd6fd84848a677d9eb2378f3f408512d5905fd8ebc20e4f0b57125e1a98d29705a35cc2100a938be0eecba176994ace3345f857968f6eca86a5ebd0ae6308a432fa961152e4ea734d32372331dd55a6d45f", 0xc7}, {&(0x7f0000000300)="67297583c3088cdecea594c350532a7c4c2b6202debf909666682319d93f9a15e4747130b0e72d3cf73c305a188588bf692c8ec1056d0c4e356df0f53b667f13f59602a146286ccf9f6b271c96a8e20aca83737f8193f35aaa093e644abf0f2a72b45328b9943196fc75db039c003f14859a21bc6674d523364dfaf78581db1678e24886c8584576e9d280c293dff2f6cb95c016fa337e0299f7215869bc514269dbf3b4d6456c12b1d690fd013caa810a54ec73e6c75fb09f5eff77539a342db2d700da9efccc3ff8ae3bf04c6a6a4f8bed883176f313e366", 0xd9}, {&(0x7f0000000240)="20e0635dcea27b9fa0268fd95bec223ae0daff90eda40d9185be8033837b276ef1875015a6fcdafee26482bf7a9b00ff517539a4d630094f7296bf6855eb9a4f251de21edeaa37fce50a19f9cdf2d50da71682263a6ca9bf19175aeaa57104011efe56c9a39d92a49054278ea132f94b6ca2a19b3a1baa", 0x77}, {&(0x7f0000000400)="35d16626bb5e854b6dc877de83fa4984d5ace8589a030e73df8d382a0f7ae18ecc3c69dc8822b5b4f89a42353202c51e545cf46145f42646e73ceaaddbc84ea4f71671da71009bb4708241ce0856", 0x4e}, {&(0x7f0000000480)="4f2eb165bc7b170ff8346af1975b", 0xe}, {&(0x7f00000004c0)="0471bd5acf3da8558239e96d41b698413aa698d1f8b615b4b0c351cc5e2be801ecd6f91179a81fb1ef94e6c80be137d0c8ec731c120e440b5161d625cbfc1aeb4a930fdc424f5613a1d82311abff5022563b38fe6b750cda7d249a8d3571a4c3458d71905f2a60fbb3263c6162d1b1573becf13eabe72eecb2698a25c78780b2449c251a05ffac129504f34eaae9c6bdf249a4ff9830513ab316ebc5dcb38504e4470658d59a7c08c4af9f6e0bb52c0377fae90cb1afc7baf4dae062bad91b3c150b727442a888c402aa5bbf620fca", 0xcf}], 0x7, &(0x7f0000000640)=[@op={0x18, 0x117, 0x3, 0x1}, @op={0x18, 0x117, 0x3, 0x1}], 0x30, 0xc000}, {0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000680)="bf3a05b44e8ae9afacb8586c15af7c8b4181ac8793aa2b8d861244e0755a5a0f512defa3f650e217d9ce8e349d1d52d3cc8d97f94a1924a4a2d2d46d988cf16b9feb47b0aae0fb89e3d0c7e944dcd86451ade64516ad6b370fccc1da901019edd061688d4b0ad90baff08156b28b98a0a2beb27dfe388901b19c72817dbe", 0x7e}, {&(0x7f0000000700)="ece93b58b25475b51715d864121e0f45fc8f2d082b4c5760db9f66d606f5048f9ab6a296780d2a1c4a381ab89586e846f7378e15cd295e7200a0e44758ce0f3e5339ceff1104ca1e82ee114a0e2a93cda5642cd6c66cd4d3e82eeb18198bc5cfc230ac6974d7bcfa6f357d9b56a0fe0716ff5975868b97600ebb", 0x7a}, {&(0x7f0000000780)="24fb4094f97df07870268cdabc3ef67c531746371889af970ebf5c9411f37024235b197aacbb017538f8caefefcd022a0e53a9936321a6bc6e3674ce30d429c3643a0fb73b72c299be1bba14ac466e344161ede0b94f06673209d811812ca5c0f3e75c8517d7dc719c8106133d7f35604dc142539a51fb8dc0724ce9961a27aa42ae555382044a5c6472039e736b92f6671a7b6a81d00363938c457d0388f47621621a965d6653d4276742ab6fae4319554c173072dab441785e4d73857018240b92c2c3", 0xc4}, {&(0x7f0000000880)="4b3ece21b88d1275a6832f0bf179752f61e2b522596fe04ff6f55880", 0x1c}, {&(0x7f00000008c0)="529d4ded86178454051e1837d765c723fa135d9e79edb9d97c3487f138bb2dea1e513a109c4455c21b065ea004054399ebfb2e9d2a03d5a64ba72b1ad23b11f9eb6a712afb729f8367b3cdab1f1b24077b638403bc4389276fa96882b571645958168edbc03db388568469be18e2a48b94b35432b23caca44e18b3009bf29508d9ef16dec2317e97dc214c3569080daa8208fe23944bf3b2da906f9eef32f791a2dda59a40db1e33387a7e0e3cec4dcd1d6e000745d80b0cf883620605c21a2cb0ffed775c0d664764cdda720f00dc7313be0c3733048600be5c0626ad7fbebee48d4c274ecfca38fcb1c4ae517541", 0xef}, {&(0x7f00000009c0)="4def6a94390bd07070fd1cf52dd12884d797cc3732d3f26e053b540fad171a9ef4aec9267e5b5afb22a8d18e085e9c083e7ae8b107726f031ccde9704942b748b0ad103c289c1bea169cf33ed342abf0c64c1f19151fb4753bf9c03767e7c0583e45122a5db89df2789c6e50c78d7b53207f73f1c1257d0fa86f98b4cad9dfe4adeee97b00e44c7a80aa521160940304d9e10d6f7ba320a22ff937b47c459fe8ae7273d324ef", 0xa6}, {&(0x7f0000000a80)="65af15c40e1fbb00c8128418f5dde9e3193152539d4d1114196871b048f69cb48ec5775f0f66dc8abb1bf21e794039e44fe7bf122093e309c689de3a0c0858b536f727d7b9e5b040124a7183bb600c1e497a48d1ba4ca4009911e4e9f2e23e5f1a02d3798b776f18518dddffcc02378aeb679dc53135bc101d15cfbf26", 0x7d}], 0x7, 0x0, 0x0, 0x1}, {0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000b80)="5a38d4c174b0483ad94468bc9f14668bee6d2220967a95df910541668ef616d1659e4f9d439e19218e6db403a48da5e8a68ff96415aacd", 0x37}, {&(0x7f0000000bc0)="26b9850e45c55c977f63d6b62a4f013674c2a0d9f1996c2cca3d590401e02bc69fe92b19f449333f3e1ceaaa1a85af95aa4c9032a103e4e215c64b4cbd013549ae67b01012aae513578ba289ab9c81d41c3f72a4bebc0c9cab879f456b998a96abacb3dcecd4571cf907cc605acc706a02f3c2bb0f3df8c8966d92f43a80427cc7eb10aac1cbf70876162d548e1e3f04d25ac1e4d3d55d3d245d4cd0aa0d7c71da7498f13f40753017216c614c9b064fa197fa78775e2999e9f74f643e8fae81c9763022346d2a7b1724f42485e01f", 0xcf}], 0x2, &(0x7f0000000d00)=[@op={0x18, 0x117, 0x3, 0x1}, @iv={0xa8, 0x117, 0x2, 0x93, "1d7bd7f6ba97034c4aec3cb45ab8a51fd15b29e654d3204c0cdbe580659ea91f0eb49b3516bb3edc877b257220d862ebd21be522cb28e641587abd0eebdbf2da5ff95efcde099410cadf54da4b749f394076d2ea5075095732dbc705865cdb590601460ec383d8553c577fc11cf902ca3b86467d389d316ebfee5525d442cbf47e1a2619ec49619893932431aecdc2289747b5"}, @op={0x18, 0x117, 0x3, 0x1}, @assoc={0x18, 0x117, 0x4, 0x40}, @assoc={0x18, 0x117, 0x4, 0x9}, @assoc={0x18, 0x117, 0x4, 0x2fb}, @assoc={0x18, 0x117, 0x4, 0x6}, @iv={0xd8, 0x117, 0x2, 0xbe, "c266d4bf1d359f1bf83216aaba3e330313f215c2ace5597633014630eadc60d00e2885ac0aa8b226780ebd21ef1213655e08738434925048132a3134b3254fc0a25d5939e8be4c6587207ca95b7d08f7670b39000ac4abbf9c999f3bc5513f8c524ff14a864d9844aa885d31752cbace5f97bc252d735e656aab5798a003d3dcec749998983a42e0ffadfea33ab7d44129d3845eb11747c09c678aa734374146c63325306a42476d9435b4d65564f092db974d48ad2ca4d5fa1ff82022d4"}, @assoc={0x18, 0x117, 0x4, 0xfffffff8}], 0x228, 0x4000}], 0x3, 0x20008801) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000040)={'geneve0\x00', &(0x7f0000000000)=@ethtool_gstrings={0x14}}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000000c0)={'macvlan1\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="4c00000010000104000000000008000008794ee0", @ANYRES32=0x0, @ANYBLOB="03800000000000001c0012800c0001006d6163766c616e000c000280080001000800000008000500", @ANYRES32=r3], 0x4c}}, 0x0) 462.230248ms ago: executing program 3 (id=461): r0 = socket$nl_route(0x10, 0x3, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000040)={0x5, 0x0, 0x0, 0x0, 0x10000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r1 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r1, 0x10e, 0xc, &(0x7f0000000040)={0x80}, 0x213) sendmsg$nl_route(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000940)={&(0x7f0000000980)=@ipv6_getaddr={0x18, 0x16, 0x1, 0x70bd25, 0x0, {0xa, 0x3f, 0x0, 0xc8}}, 0x18}, 0x1, 0x0, 0x0, 0x8800}, 0x0) ioctl(r0, 0x8b2b, &(0x7f0000000040)) r2 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0x7, &(0x7f0000000340)={0x9, 0xb, 0x3, 0x80}, 0x10) r3 = syz_genetlink_get_family_id$batadv(&(0x7f0000000140), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_GET_TRANSTABLE_LOCAL(r2, &(0x7f0000000300)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x2c, r3, 0x4, 0x70bd2d, 0x25dfdbfc, {}, [@BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5, 0x29, 0x1}, @BATADV_ATTR_MESH_IFINDEX={0x8, 0x3, r4}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000010}, 0x80) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x12, &(0x7f0000000200)=ANY=[@ANYBLOB="180200000000000000000000000031d0851000000600000018040000", @ANYRES32, @ANYBLOB="0000000000000000665000000000000018000000000000000000000000000000950000000000000018010000202070250000000000202020db1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50200005000f100850000000600000095"], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 460.880038ms ago: executing program 2 (id=462): bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xd, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x2, 0x3, 0x0, 0x1, 0xb2}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sock_ops, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r0 = socket(0x10, 0x80002, 0x4) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newtaction={0x70, 0x13, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xff}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x70}}, 0x0) (async) sendmsg$nl_route_sched(r0, &(0x7f0000002980)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)=@newtaction={0x70, 0x13, 0x1, 0x0, 0x0, {}, [{0x5c, 0x1, [@m_sample={0x58, 0x0, 0x0, 0x0, {{0xb}, {0x2c, 0x2, 0x0, 0x1, [@TCA_SAMPLE_PSAMPLE_GROUP={0x8}, @TCA_SAMPLE_PARMS={0x18}, @TCA_SAMPLE_RATE={0x8, 0x3, 0xff}]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}, 0x70}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000b80)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000140)={&(0x7f0000000240)={0x910, r1, 0xddd6404d69c61573, 0x70bd28, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_FRAME={0x147, 0x33, @beacon={{{0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, {0x5}, @broadcast, @device_b, @random="ef670cd8728a", {0x9, 0x1c}, @value=@ver_80211n={0x0, 0x710, 0x2, 0x3, 0x0, 0x2, 0x0, 0x0, 0x1}}, 0xd, @random=0x7f, 0x200, @void, @val={0x1, 0x3, [{0x16, 0x1}, {0x3, 0x1}, {0x30}]}, @val={0x3, 0x1, 0xb2}, @val={0x4, 0x6, {0x1, 0x8, 0x4, 0x1}}, @val={0x6, 0x2, 0xd3}, @val={0x5, 0x60, {0x7, 0xd0, 0x4, "2df4d5b117c07da647fd37c7fe2cfa6a2125ff81f5a9c4b7d1d2a4e23598de8e3d7329d67672f1c23124a88d02f227155d71c7c81bf73bf812477b0b49a4e1190a0a54b22845c64605a5b0344a687259e7ca59e92f0fd55a8ba7a6e91f"}}, @val={0x25, 0x3, {0x1, 0x30, 0x91}}, @void, @val={0x3c, 0x4, {0x1, 0xe, 0xb0, 0x36}}, @val={0x2d, 0x1a, {0x2, 0x0, 0x1, 0x0, {0x3, 0xc8b, 0x0, 0x9c, 0x0, 0x1, 0x1, 0x2}, 0x800, 0x5, 0x5}}, @void, @void, @void, [{0xdd, 0x7c, "5a705bc5b2d4c8b39f9a4c8b202b099b044168220b47108384b278dd1b44c49aa87851736c0499fd8e36bd367dcae9afb6b0d1e506075cea09dfbdb3bf54f557edc1c2a1de946a7da95ce7de21dde403333a4f081c1bb191a011d91c85a03ac9826a55af9b0c896ec501edc9f2e0e36fca1a93376df974db4da8c9c5"}]}}, @NL80211_ATTR_FRAME={0x695, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1}, {0x3}, @broadcast, @device_b, @initial, {0x8, 0x9}}, 0x1829, 0x87ab, {0x0, 0x1d, @random="f8db54d8baf23261a37e5b139cfcad6313baba4f29cdf6acf1ba76e6eb"}, @val={0x1, 0x3, [{0x6, 0x1}, {0x6c, 0x1}, {0x48}]}, @void, [{0xdd, 0x92, "07b12f9f53d4ce627ffcc704e2de5286075e9604425abe93fa811f7f5662151c569fdb4de7553c1e90ca0cd530908e2b5e12247f191a9ed740033dd6ef77905c3b514c3b243099eab401dcf85ea1d292b654e2a341c8f02faf395fb68c641e3e22a0764c1441b66952b80681f4e0ba1159e8f2cafbdf6932c847870d1e103558f3f0c6fc00ede980437b5689516a17854a59"}, {0xdd, 0x8f, "0b00640bd03190f419edd8fa694029ca68de6784e6637a72c72866ce17769cf318490320b543ebdf6983c2a117d3f3b4bcea5b43aa839381d26b6a1459a0813ef81924b4626761b6c503a9bb4be03ed33293daee5f6b2d72e77b6b00a1c1f111258308390d3bb31f6048983943dd5b35dc57d25e18620d515d83e32c4ee068231b8a288ea7d86940ff47469112d2f7"}, {0xdd, 0x85, "fe3459a1ff821354c078f85966aa0c876a02e0c36ea89efa5197563dbafe2004fafa42375799101736b36819e841c88b0a457ab4b0c112416dde41750dacddcc3197d145a7c710e9d0b6ffbcbb10afea2fbbc5250b1af16ef0ce9066bdb3aa961903ae4e8f69091a1415a6af1bf257dbaa42e559eaf4cf14736c297b445aeb3e3ab314ec4c"}, {0xdd, 0xb2, "feb116efe06393eb48bc34816f03e08d29549809568063e2649658223d60bab62b8b6650c2b03a96448bcd7af8014265f3ffe55e75e9c375ace21c7f0adc9dfd3bc53c88472a12a11bcca109175e9dbe809a228a9096332d2e41d03a7bf21bbb5ac57cc350de1ec61a8c98b10569e61751dc07a3b922164debcb0d02ec063cadab5a4ccd21207bd0a1f0efd087ea7fd85c4f616cc52a699b840ac52026de13691a3ffe30d79675dd1fc142e3f9b5fc201ee8"}, {0xdd, 0xe5, "bc102a0b070c7e968e149948cb7546b7686b71c7b2b7519c09dc2c3f70924da3114ccd7bf9c89a559ba91ccd02f30f80d85281d61d41843d06f965566561e2d34c8c4190ac1edeb88cc762cac84eccbc0d4a1aee7413ca79b160c3dc9f286304221afd3d01c3b57650bdf2e61247620436e995abac1e65414e9513aa1b526351b099badac0e257cc6319c7b04d665b4581e928817c13ad7324c975f7a5066553b0097a2602301b7cdf86048c9810be7ea8e0374de484bc19e475dd5d729870780cc87909c40f2b32d8d5502caa7c88e1b13c3b024d336eb9b109e668f73b8ba054b355bf01"}, {0xdd, 0x3c, "6f66ead8fe11527debae71d49245793f8627aba35e1d5965b4ed483b382450355738df4c6cc84b2b884738b9b2df76bf96d65b2b5b9e6df4915d69a5"}, {0xdd, 0xb4, "d3af5e9da438c9f8f8b099b6d05bbc3643f496fab42440ad0da0dc4c7b1855981d4d1d3019be7f49239cd796870a60ce9fcbce35410c3d5c799ad97bb2c0baba92899b307adc5be373b30c49b80327ced068bfaec076790416afcc039859faadce4a69aa2951cb6d56a88c43fcbf19cd4c9c788d33d9c8abb531c024db956860eff9dec8270e94e7c8e79b52365a839f1f5d6cb05824a1673fe18b44cea506c21dd49ba169c3c35b20b2a30d05d73f082d743ec9"}, {0xdd, 0xcf, "f272a527e81d1ecd3d4a56af44aba47f82b6b3f6cf22610b737be02de784fa88a1e8b118dcb3a5cdc16c5a4281701f216d37837a08d4d4e929ba1b6f89bb5310826e42d63204c6b5cb7cfc4382b57728c08d6f62ff5995f1dba15387bbec06a58f23614b1dc1967ce315565eb03ab2541844837efb0ebefc4f4d196d3b18fdc6ec0633c7e39e9489f75db3641700b653f5c5e40ba02d691156c46fb5daa00c2afff4c0808743819d7d6a7a858cb1b485fadd6831a220dadd37b3c8b0bf0f8a339fb9e2ea1cf01a9dd15913fe435682"}, {0xdd, 0x62, "ff4bae99ee60e2114fbdbb6750719809e3e4d954fa10f9efdd4f53c3a087a69d287736f0ec0a4810b3e746bdbb27140bb96d7dcde72e0c6c473bee16b66d4f735ccda96431cc416213cca6eab20ad332bf2d1dd1527c885202e5b97f95b9064ac9e9"}, {0xdd, 0xdf, "62e6a6e138a0f408909a7a00fc84cde3ff1c028f6c9c3438dcf134aa7dd98037356e7c85e2ac79f003c81541c52200b5b2344a083d5fbafd59227bd1d320af070fbb693c01010e570cbacc31cbb934320f31a686f9baa8e049f2754d6c81957d0a488d330e8f729f234786224eb1c18120e505220c5a136a0522af8d7751e3ffb7e172017439b1f162939bb9b5acbb7672fb85d1f8ca7d8fd4573b9179712751e93c9c2848404f93df1f1f917afd6f54a8f36bad803798c233e54c162c9ddc7bc9e162ae8b10ca3ca59d56692b108feb99d993795d109889297dbd98fd693c"}]}}, @NL80211_ATTR_DONT_WAIT_FOR_ACK={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xa, 0xcd, [0x4, 0x5, 0x3]}, @NL80211_ATTR_FRAME={0xfd, 0x33, @reassoc_resp={{{0x0, 0x0, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1}, {0x2}, @device_a, @device_a, @from_mac=@broadcast, {0x6, 0x1}}, 0x8000, 0x3d, @default, @val={0x1, 0x5, [{0x6c}, {0xb55df02ddaeb2450, 0x1}, {0x3, 0x1}, {0x5}, {0x24}]}, @void, [{0xdd, 0x46, "344c8071474a488744d1b5c4079b5fb1b6e921a846b25cc1388ddef961b8fa2884faab38e760e3cd38d0b2aeec0509a61619b5c36bb7c5c015f20d10c7447bdb8a03741706b0"}, {0xdd, 0x8a, "013f49f6a388a4032b32a86780aa6c6221872044c2c128a5cd9e6f1e7af9345be73b3dc44f378205870b4cea6d224da243386d9bcc28e260a7b4ed84dab90e8ea7282af16e641921cce21a969fafa30af8fc43442718a2b59ea7665e884ee179351275de66c899205f0bfea316100a33a389415c8bcc6f69ba9adce98a195974cc2f6f731b8d9dab6304"}]}}]}, 0x910}, 0x1, 0x0, 0x0, 0x90}, 0x20002040) 380.198799ms ago: executing program 0 (id=463): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000280), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000180)={'rose0\x00', 0x2}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000001c6a000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000cc0)={{0x14}, [@NFT_MSG_NEWSETELEM={0x2c, 0xc, 0xa, 0x101, 0x0, 0x0, {0x2}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}]}], {0x14}}, 0x54}}, 0x0) r2 = socket$l2tp6(0xa, 0x2, 0x73) setsockopt$inet6_int(r2, 0x29, 0xcf, 0x0, 0x0) ioctl$TUNSETQUEUE(r0, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) 365.664995ms ago: executing program 4 (id=464): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000240)={&(0x7f0000000340)={0x508, r1, 0x1, 0x70bd26, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x4bf, 0x33, @probe_response={{{0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x1}, {}, @device_b, @device_b, @from_mac=@broadcast, {0x5, 0xffd}}, 0x6, @random=0x7ff, 0x90, @val={0x0, 0x6, @default_ap_ssid}, @val={0x1, 0x7, [{0x5, 0x1}, {0x9}, {0x5}, {0x16, 0x1}, {0x30}, {0x16, 0x1}, {0x1}]}, @void, @val={0x4, 0x6, {0x7, 0x40, 0x1, 0x7}}, @val={0x6, 0x2, 0x9}, @void, @val={0x72, 0x6}, @val={0x71, 0x7, {0x0, 0x1, 0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x7a, 0x21}}, [{0xdd, 0x92, "99af3a55f8a7c1db71af3889aac6e6ef36977ff2ad287b6b798f6d91ca8cc6c6302bcbe88fecd035ba99918f74ce3b696ead91ed91bd53cefe2fd912f52013f1ef5999ed8204fd0c7224211078c46a24eb8ceb3444c25a810da46fe1551ef3ad7e88623e6370f638a0ceb0eba5e54ced1c06be3bee67b295ea69cd3c821d5af4cab07a29cd0578cdb7a8e1304e88945e231d"}, {0xdd, 0x70, "04caf5013f226ca25cb9d917c6b0ed5f83318be344bcf3a1c1a8c6e5958b31c0a7f63d24004248f724ff0e13a8f833610d8416211665de7132634372915eb8b1799b6c9b361e79ff1d20ba45ca60966452dae35b10e625fbec270d5f849e9bccc92c6ca17221fd005e2834b3becd197f"}, {0xdd, 0x86, "27766705165462d44ca87ce5ef024174f822b45446b3b446101c67bc5ab5e04ae6b8dd2be6dc1adcc6219d40fe7f8a2c72f814b479521d2193290f098e96d12015ad892a351465d879bfff2d82eda52945a2190843eea7693cd873d8974d4432438da2932a0c43537290ff75551b27bd8e07c8ab437615d3404db20bd0f9a45a824129d472e8"}, {0xdd, 0x97, "c4dcb5b005eae53a9abf3246af3540bad715c67ad93e6e1253ee9f7d33d4d6e4c84eb55acd542b661127d8b6ece744f5ccd0ea2743ec5b51ef2f981ca6cea8fcd6e1500eddea500b82503de85e9b897162c45862daeabca9a88677e2f14fdf5ece412fab469ddbb15f43dccb1fbe3307dada840e46653707ba7234fc335dee8cf285a3dc49ccda7cd254a1ff2017172b51b21e97f555b8"}, {0xdd, 0x6e, "0a3d8b3e7e8691a270773325e83bd1e75b673c11c68a22156465a73508332c6549c1d82dff584720fd1802018a4e7212c0ab2019ff88b315f8d444c917d87e2bc4ce2addde00bccb200113b9bec1b11f6c20f1d3737e3d788e612550e1561f963c797edf8481d23b43c823c7a389"}, {0xdd, 0xaf, "f485daa66c93b15fb9ae115d095caa37f7b1d320cda60b5988d55b4b13813543bd71e0525f4706b1255006f5fa16fdcdbe03da044ab407be51d9d9d7c41f2bb1b6779b995876ffae5586aaa2f8edb39fc67cbdbea71898b95d2ccfebfccc1528d39bcb66a60ebba0b2dcd180206e53e49e74e6a3c8920b9b2c0484893749026959fc4271978425e6b1615fedf1e2b0c6d363648aa88a0a63973261f1ee7a04b8275e468349e72806c3511681f922f6"}, {0xdd, 0xe6, "4a704a29bde12e9113d67a542a66a8e90de1be25609f791cfc2800b57829150df565a7059904fa16b8c23a8dd271778270edfa687825d6e15d9f769fdc05483acd99951c7e770eeb52c2da6ad3108e969f72ae90dcc9d99a43dd50138589345a5e54666cc0344d5fd857ff2364ee259e1a10f9407fa3a6cc079ed9b5145f5000c452e25ebc5bcd4c0d94fdc2c24043d4d61a52fcc0d7b7f6335b19edf39d996d8a955d352bb0b3406be53db820fa4efbbd7796bcde13939c9be13eea6b935ba771af2ef5c3156e07083892484609d085b9dc70997d33de1960d67866e21f1027a43e4778d534"}, {0xdd, 0x37, "6b70422098246fecd6ec6de26c3d82ef0b9974f2e6a9773da4528a16d34c602dc8e13cfec20206c1514a24aecb2893c81a91ec89279a06"}]}}, @NL80211_ATTR_TX_NO_CCK_RATE={0x4}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0xc, 0xcd, [0xfc00, 0x9, 0xffff, 0x100]}, @NL80211_ATTR_CSA_C_OFFSETS_TX={0x16, 0xcd, [0xfffc, 0x6, 0x0, 0x40, 0x9, 0x9, 0xd93b, 0x7, 0x1]}]}, 0x508}}, 0x24000095) r4 = socket$alg(0x26, 0x5, 0x0) bind$alg(r4, &(0x7f0000000600)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(camellia)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r4, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5910fae9d6dcd3292ea54c7b6ef915d564c90c200", 0x18) r5 = accept4(r4, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$tipc2(&(0x7f0000000440), r5) sendmsg$nl_route_sched_retired(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000d80)=@deltclass={0x104c, 0x29, 0x400, 0x70bd28, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x4, 0x10}, {0x7, 0x9}, {0xd}}, [@c_cbq={{0x8}, {0x80c, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x23, 0xffffffff, 0x4, 0x3, 0x2, 0x5, 0xe, 0xee6, 0x3, 0x5, 0x6, 0xfffffff9, 0x80000000, 0x7f, 0x100, 0x2, 0x6, 0x1, 0xfffffe00, 0x0, 0xfffffffe, 0x6, 0x1ff, 0x2, 0x8, 0x8, 0x7, 0xa, 0x7, 0x1ff, 0x50e, 0x0, 0x0, 0xf, 0x0, 0x4, 0x9, 0xff, 0x5, 0xffff0000, 0x9, 0x1000, 0x6, 0xd, 0xa, 0x5, 0x7fffffff, 0x2, 0x4, 0x9, 0x7, 0xffffff6b, 0x3, 0x92, 0xa, 0x7fff, 0x1a3, 0x4, 0xfffffff8, 0x0, 0x401, 0xc13b, 0x9, 0x8, 0x1, 0x1000, 0x1, 0xd06, 0x6, 0x8454, 0x800, 0x1, 0x1000, 0x1000, 0x40, 0x9, 0x0, 0x8, 0x1, 0x2, 0x80000001, 0x1, 0x5, 0xc, 0x4, 0x1481, 0x5, 0xfffffff8, 0xe, 0x1, 0x5, 0xc, 0x80, 0x1, 0x2, 0xfffffffd, 0x5, 0xbbb3, 0x5, 0x5, 0x0, 0x0, 0x9, 0x7, 0xfffffff1, 0x10, 0xfffffff4, 0x4, 0x2, 0x8, 0x1, 0x7, 0xdb, 0x8, 0x7, 0x3, 0x7, 0x8001, 0x0, 0x7ff, 0xffffffff, 0xee45, 0x6, 0x82e1, 0x9, 0x2, 0x8, 0x7, 0x5, 0x1, 0x9, 0x5, 0x1, 0x2, 0x8, 0x8000, 0x6, 0xf5, 0xcfe7, 0x5, 0xfffffff7, 0x80, 0x6, 0x7, 0xc9, 0x7ff, 0x8000, 0x2, 0x5, 0x40, 0x5, 0x1, 0x1, 0x0, 0x4, 0xffff, 0x8, 0x1, 0x6, 0x9, 0x3, 0x9, 0x1, 0x3, 0x3, 0x9, 0x3, 0x10, 0x6, 0x6, 0x80000001, 0x7, 0x1000, 0x400, 0x1, 0xb, 0xcfad, 0x200, 0x2, 0xf807, 0x4, 0x8, 0x3, 0x8, 0x0, 0xfb4, 0x0, 0x1ef, 0x1, 0x7, 0x100, 0x80, 0x3, 0x9, 0x5a92, 0x2, 0x8, 0x0, 0x4, 0x81, 0x8, 0xe978, 0xfffffffb, 0x9, 0x6, 0x5, 0x3, 0x7, 0x2, 0x1ff, 0x63, 0x6dd, 0x51ce, 0x7, 0x3f, 0x0, 0x4, 0x0, 0xe051, 0x5, 0x8, 0x5, 0x3, 0x0, 0x10, 0x2, 0x5, 0x28000, 0x3, 0x0, 0x5, 0x1, 0xed, 0x6, 0xffffff81, 0x4, 0x9, 0x7, 0x7, 0xf, 0x10001, 0x7, 0x4, 0xb, 0x9, 0x8000, 0x10, 0x7f, 0x800, 0xf, 0x8, 0x7fff, 0x4, 0x8000, 0x100, 0xff]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x3, 0x200, 0x80000000, 0x80000001, 0x6, 0xa, 0x5, 0x0, 0x1, 0x8, 0x9, 0x5, 0x7, 0x2, 0x9, 0x1, 0x9, 0x3, 0x3ff, 0x3ff, 0xe7, 0x10000, 0x7, 0x80, 0x1, 0x2, 0x1, 0xd91, 0x9, 0x3, 0x8, 0xffff, 0x6, 0x2, 0x4, 0x5, 0x9, 0x1, 0x4006, 0x7f, 0x7, 0xb2f, 0x6, 0x2, 0x864, 0x2, 0xea, 0x9, 0x7, 0x9c, 0x1, 0xc, 0x6, 0x9, 0x9, 0x5, 0xffff, 0x2, 0x6, 0x8, 0xb, 0xed92, 0x8, 0x7f, 0x4a0f, 0x3ff, 0x3, 0xa, 0x100, 0xc00, 0x9, 0x2, 0x100, 0x7, 0x13bc0000, 0xfffffff5, 0x9, 0xf96, 0xfffffffb, 0x5, 0x8000, 0x6, 0xb, 0x80000001, 0x4, 0x1, 0x800, 0x2, 0x0, 0x5, 0x8, 0x5, 0x9, 0x7, 0x4, 0x1ff, 0xc, 0x4, 0x6, 0xfff, 0x6, 0x1, 0xcc, 0x5, 0x7, 0x7, 0x101, 0x3ff, 0x2, 0x8, 0x4, 0x3ff, 0x7, 0xa, 0xef17, 0x7, 0x100, 0x2, 0xb, 0x8, 0x8, 0x9, 0x3ff, 0x4, 0x7, 0x8, 0x9, 0x0, 0xff, 0x6, 0xa4, 0x5, 0x0, 0x669c, 0xffff, 0x3, 0x100, 0x7, 0x3a3b, 0x9, 0x9, 0x8, 0x8, 0x6, 0x2, 0x2, 0x7f, 0x1, 0x7ff, 0x9, 0x14, 0x0, 0xf734, 0x9, 0x3, 0xe8, 0x1, 0xfffffff8, 0x0, 0x10000, 0x9, 0x16, 0xf0, 0x3ff, 0x6, 0x3, 0x7, 0x6, 0x172a, 0x80000001, 0x94, 0x3, 0x6, 0x0, 0x5, 0x8000, 0x9e79, 0x4, 0xfff, 0xbec, 0x7, 0xac5c, 0x9, 0x1, 0xffffffff, 0x8000, 0x2, 0xb, 0x0, 0x3, 0x401, 0x80000000, 0x6, 0x1ff, 0x8000, 0x468, 0x0, 0x7, 0x1e, 0x5, 0x3, 0x180, 0x0, 0x4, 0xfff, 0x9d, 0x0, 0xffffffff, 0x9, 0x5, 0x0, 0x5, 0xcfa, 0x9, 0x8, 0x3, 0x7, 0x7, 0x7, 0x3, 0x8, 0x3, 0x4, 0x2, 0x7ff, 0xd129, 0xccd9, 0x10, 0x2, 0x9, 0x3, 0x81, 0xd, 0x8, 0x6, 0x3, 0x7, 0x4, 0x8, 0x5, 0x0, 0x4, 0xe, 0x4, 0x4, 0x4, 0x38, 0x6, 0x2, 0x3, 0x1, 0x80000000, 0x8, 0x2, 0x80000001, 0xff]}]}}, @c_cbq={{0x8}, {0x80c, 0x2, [@TCA_CBQ_RTAB={0x404, 0x6, [0x3, 0x7d, 0x0, 0x7, 0xa33, 0x2, 0x8, 0x7ff, 0x0, 0xae, 0x5, 0x25, 0x4, 0x9, 0x9, 0x7ff, 0x3ff, 0x41, 0xbb, 0x1b, 0x3, 0xffffff80, 0x81, 0x3, 0xfffeffff, 0x1, 0x5, 0x7, 0xffffdd22, 0x800, 0xfffffffc, 0xedc, 0x0, 0x5, 0xfffffbff, 0x8, 0x5, 0x10, 0x1, 0x0, 0x5, 0x8, 0x3, 0xf, 0x0, 0xb1ce, 0x5, 0xe, 0xd9d, 0xfff, 0x3, 0x3ff, 0x0, 0x0, 0x1, 0xffffffff, 0x3ff, 0x7, 0x9, 0x0, 0x7, 0x8, 0x8, 0x1, 0x53f, 0x5, 0x100, 0x0, 0x401, 0x5, 0x683, 0xc, 0x7, 0xff, 0xfffffffd, 0x80, 0x4, 0x7, 0x2, 0x3, 0x74e, 0x1, 0x0, 0x7, 0x5, 0x6, 0xef, 0xff, 0x800, 0xd, 0xe, 0x80000000, 0x6, 0x9, 0x1ff, 0x101, 0x8, 0x5, 0x0, 0xa7, 0x5, 0x1ff, 0x2, 0x4, 0x0, 0x3, 0x4, 0x6, 0x2, 0xbbbf, 0x35, 0x0, 0x0, 0x76, 0x6, 0x51, 0x6014, 0x7, 0x0, 0x81, 0x8e, 0x7b6c, 0xa8f8, 0x1, 0x0, 0xffffffff, 0x0, 0x48, 0x400, 0x10, 0x40, 0x6, 0x3, 0xa0b7, 0x3, 0x4000, 0xffffffc0, 0x6bad, 0xffffffff, 0x2, 0x6, 0x1, 0x6, 0x7, 0x798, 0xffff322f, 0xa, 0x3, 0x1, 0x7, 0x6, 0x5, 0x100, 0x9, 0x5f, 0x7, 0x0, 0x4, 0x9, 0x9, 0x8, 0x7, 0x2, 0x1b37, 0x1, 0x7, 0x80, 0x5, 0x8, 0x0, 0x7, 0x15, 0x8, 0x8, 0x7, 0x2, 0x400, 0x8, 0x2, 0x5, 0x7, 0x1, 0x8, 0x6, 0x6, 0xfff, 0x8, 0x3b2, 0x4, 0x2, 0x3d, 0x0, 0x4, 0x7ff, 0x100, 0xff, 0x7, 0xffff0000, 0xfffffff7, 0x7, 0x3, 0xfffffffa, 0x0, 0x4, 0x1ff, 0xffffffff, 0x3, 0x8, 0x50000000, 0x7, 0x6978, 0x4, 0x8d, 0xfffffe00, 0x80, 0x2, 0x7f, 0xb0, 0x7, 0x5, 0x2, 0x7fff, 0x7, 0x3, 0x5, 0x1, 0x10001, 0xffff8000, 0x568f, 0x54cb, 0x9, 0xbba, 0x3, 0x3, 0x4, 0x2, 0x1, 0x100, 0x9, 0x7, 0x5, 0xff, 0xffff, 0x80000000, 0x7, 0x3, 0x100, 0x6, 0x3, 0x200, 0x4, 0x8, 0x4, 0x8, 0x1, 0x2]}, @TCA_CBQ_RTAB={0x404, 0x6, [0x2, 0x400, 0xffff3e08, 0x4, 0x7fffffff, 0x6, 0x9, 0x4, 0x8, 0x8, 0xcc, 0x800, 0x2ac7, 0xb, 0x3, 0xb69, 0x7, 0x0, 0x4, 0x6, 0x57d9, 0x0, 0x2, 0xd5e, 0x7, 0xfffffc62, 0x7, 0x0, 0xcd1, 0x5, 0x5, 0x2, 0x2, 0x3, 0x6, 0x4, 0x3, 0x4, 0x6, 0x300, 0x81, 0x8, 0x89, 0x7fffffff, 0x3, 0x1, 0x5, 0x2, 0x7, 0x7, 0x5, 0x80000000, 0x4, 0x9, 0xc526aeb, 0x5, 0xa8e9, 0x400, 0x1, 0x5, 0xc, 0x80000000, 0x9f13, 0x10000, 0x40, 0x3, 0xdd9, 0xb4, 0x6, 0x6, 0xffffffff, 0xfff, 0xac0, 0x80000, 0x5, 0x92, 0x3, 0x5, 0x1000, 0x847, 0x7f, 0x5, 0x5, 0x7, 0x7, 0x8, 0xfff, 0xd37, 0x6, 0x6, 0x3, 0x3b, 0x3ff, 0xcd2, 0x3, 0x8000, 0x6, 0x1, 0x5, 0x1ff, 0x776e02a5, 0x400, 0x8b, 0x2, 0x8, 0x2, 0x3, 0x1, 0x8, 0xf83a, 0xee7d, 0x10, 0x7, 0xff, 0x688, 0x2, 0x4, 0x100, 0x80000001, 0x2, 0x10000, 0x4, 0xf1d, 0x2, 0x3, 0x7ff, 0x0, 0x2, 0x5, 0xb91, 0x0, 0x8, 0x1, 0x7, 0x6, 0x8, 0x1, 0xfffffffe, 0xe7, 0x2, 0x0, 0xfffffffc, 0x4, 0x3ff, 0x7, 0x2, 0x9, 0x0, 0x892, 0x3, 0xa5, 0x6a8, 0x200, 0x7, 0xfffffff7, 0xf4, 0x4, 0x9d, 0x4, 0x7, 0x3, 0xb, 0x5, 0xfffffffd, 0xd30, 0x53, 0xfffffff9, 0x6, 0x4, 0x8, 0xeda9, 0x80000001, 0x8001, 0x7fff, 0x3c, 0x5, 0xff30, 0x2, 0x8, 0x4, 0xffffffff, 0x5, 0x7, 0xf, 0x7, 0x400, 0x4, 0x1, 0x5a, 0x0, 0x7, 0x7debe027, 0x1, 0x723, 0x6, 0x28, 0x860, 0x7, 0x4, 0xb7, 0x1, 0x1, 0x71b3, 0x3ff, 0x1, 0x9, 0x7fffffff, 0x8, 0x7, 0x1ff, 0x1d0bfe75, 0x9, 0x9, 0xa41e, 0x8, 0x8, 0x200, 0x4, 0x70, 0x9, 0x5, 0x7, 0x1000, 0x4, 0x0, 0x9, 0x1ff, 0x200, 0x2, 0x0, 0x1, 0xa652, 0x8, 0xfffffffd, 0x8a0d, 0xc, 0x7, 0x6, 0x3, 0x37c577ab, 0x2, 0x6, 0xffffffff, 0x3, 0x9, 0x2, 0xa, 0x3, 0x0, 0x1, 0x1, 0x1, 0x401, 0x2, 0x1, 0x8]}]}}]}, 0x104c}, 0x1, 0x0, 0x0, 0x480d1}, 0x80) close(r5) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x24, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x2}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_CONNECT(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)={0x4c, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ibss_ssid}, @NL80211_ATTR_HT_CAPABILITY_MASK={0x1e}, @NL80211_ATTR_BSS_SELECT={0x4}]}, 0x4c}}, 0x0) 258.132614ms ago: executing program 2 (id=465): bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x17, 0x4, &(0x7f0000000400)=ANY=[@ANYRESDEC=0x0], &(0x7f0000000080)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x3, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x8, @void, @value}, 0x94) (async) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000080)={0x26, 'rng\x00', 0x0, 0x0, 'drbg_nopr_ctr_aes128\x00'}, 0x58) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="3000000004080102000000000000000000000000060002400000000005000300880000000c0004800800074000000000fb327f612527132ae5c784b3a9697d65edf072079c6e8da769ade6846736c5e7991a7ce983811890e5ea1b3fb5f60ce493cd4c50808fe2787eef17c481514926221fe22103153cbd0d0efc34e6ab3e33b5e42a9304dd006c4e"], 0x30}}, 0x0) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000014c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_CQM(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000200)=ANY=[@ANYBLOB="34020000", @ANYRES16=r3, @ANYBLOB="050000000000000000003f00000008000300", @ANYRES32=r4, @ANYBLOB="6c005e80080003000300000008000200a609000008000600c0dc000008000900050000000800070098010000070001"], 0x234}}, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 32) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={0x0, 0x60}}, 0x0) (async, rerun: 32) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_freezer_state(r5, &(0x7f00000000c0), 0x2, 0x0) r7 = openat$cgroup_procs(r5, &(0x7f00000001c0)='tasks\x00', 0x2, 0x0) write$cgroup_pid(r7, &(0x7f0000000180), 0x12) (async) write$cgroup_freezer_state(r6, &(0x7f0000000400)='FROZEN\x00', 0x7) (async) write$cgroup_freezer_state(r6, &(0x7f0000000200)='THAWED\x00', 0x7) (async) getsockopt$sock_cred(0xffffffffffffffff, 0x1, 0x11, &(0x7f0000002840), &(0x7f0000002880)=0xc) (async, rerun: 32) r8 = socket(0x2a, 0x2, 0x0) (rerun: 32) getsockname$packet(r8, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (async, rerun: 32) r10 = socket$inet(0x2, 0x5, 0x5) (rerun: 32) bind$inet(r10, &(0x7f0000000040)={0x2, 0x0, @local}, 0x10) (async) setsockopt$inet_int(r10, 0x0, 0x13, &(0x7f0000000080)=0xfffffff7, 0x4) (async) connect$inet(r10, &(0x7f0000000340)={0x2, 0x0, @multicast1}, 0x10) (async) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="300000001000070100dd21200100005b91325b38", @ANYRES32=0x0, @ANYBLOB="000000000080000008001b"], 0x30}}, 0x0) (async) sendto$inet(r10, 0x0, 0x0, 0x0, 0x0, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r9, {}, {0xffff, 0xffff}, {0xb}}}, 0x24}}, 0x0) 247.896259ms ago: executing program 3 (id=466): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x18, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x34}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) socket$nl_netfilter(0x10, 0x3, 0xc) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x10) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001640)={{0x14}, [@NFT_MSG_NEWRULE={0x7c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x50, 0x4, 0x0, 0x1, [{0x4c, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_INNER_TYPE={0x8, 0x2, 0x1, 0x0, 0x84}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0x7}, @NFTA_INNER_HDRSIZE={0x8, 0x4, 0x1, 0x0, 0xf}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_EXPR={0x18, 0x5, 0x0, 0x1, @immediate={{0xe}, @val={0x4}}}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa4}}, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x34}, [@ldst={0x3, 0x0, 0x3, 0x1c10a1, 0x0, 0x2e}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x85, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x52) (async) 138.334332ms ago: executing program 3 (id=467): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) ioctl$sock_inet6_tcp_SIOCATMARK(r0, 0x8905, &(0x7f0000000000)) r1 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$IPT_SO_GET_INFO(r1, 0x0, 0x40, &(0x7f0000000040)={'mangle\x00', 0x0, [0x80, 0xcc14, 0x5, 0x3, 0x1]}, &(0x7f00000000c0)=0x54) sendmsg$TIPC_NL_BEARER_GET(0xffffffffffffffff, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20001000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x128, 0x0, 0x400, 0x70bd2c, 0x25dfdbfd, {}, [@TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID={0xc, 0x3, 0xe}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0xffffffff}, @TIPC_NLA_NET_ID={0x8}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x9}]}, @TIPC_NLA_BEARER={0xac, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x2}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e24, 0x4, @private1, 0xfa}}, {0x14, 0x2, @in={0x2, 0x4e22, @rand_addr=0x64010102}}}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x20, 0x1, @in6={0xa, 0x4e22, 0xffffffff, @mcast2}}, {0x14, 0x2, @in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x20}}}}}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0xf}, @TIPC_NLA_BEARER_NAME={0x10, 0x1, @l2={'eth', 0x3a, 'geneve0\x00'}}]}, @TIPC_NLA_PUBL={0x3c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x1}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x10001}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0x5}, @TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x8001}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0x8}]}]}, 0x128}, 0x1, 0x0, 0x0, 0x14}, 0x800) setsockopt$IP_VS_SO_SET_TIMEOUT(r1, 0x0, 0x48a, &(0x7f0000000300)={0x4, 0xed}, 0xc) getsockopt$EBT_SO_GET_INIT_INFO(r1, 0x0, 0x82, &(0x7f0000000340)={'filter\x00', 0x0, 0x0, 0x0, [0x4, 0x5, 0x80000001, 0x9, 0x5, 0x81]}, &(0x7f00000003c0)=0x78) setsockopt$inet_sctp_SCTP_DEFAULT_SEND_PARAM(r1, 0x84, 0xa, &(0x7f0000000400)={0xfffc, 0x99, 0x1, 0x6, 0x6, 0x4, 0xa00000, 0xa3}, 0x20) setsockopt$inet_sctp_SCTP_SOCKOPT_CONNECTX_OLD(r1, 0x84, 0x6b, &(0x7f0000000440)=[@in={0x2, 0x4e23, @dev={0xac, 0x14, 0x14, 0x34}}], 0x10) r2 = accept(r0, &(0x7f0000000480)=@phonet, &(0x7f0000000500)=0x80) setsockopt$inet_tcp_TCP_CONGESTION(r2, 0x6, 0xd, &(0x7f0000000540)='dctcp\x00', 0x6) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000580)={r2, 0x4, 0x2, 0x7ff}) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000600), r2) sendmsg$NL80211_CMD_START_P2P_DEVICE(r3, &(0x7f00000006c0)={&(0x7f00000005c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000680)={&(0x7f0000000640)={0x28, r4, 0x430, 0x70bd2a, 0x25dfdbfd, {{}, {@val={0x8}, @val={0xc, 0x99, {0x9, 0x66}}}}, ["", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x200040d1}, 0xc000044) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000740), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(0xffffffffffffffff, &(0x7f0000000800)={&(0x7f0000000700)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x30, r5, 0x2, 0x70bd25, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x87, 0x7, 0x6048d170, 0xf3}}}, ["", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x24000014}, 0x80) r6 = gettid() getsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f0000000840)={{{@in=@empty, @in=@remote, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@mcast2}, 0x0, @in6=@private0}}, &(0x7f0000000940)=0xe8) setsockopt$sock_cred(r1, 0x1, 0x11, &(0x7f0000000980)={r6, r8, 0xee01}, 0xc) getsockopt$inet_sctp_SCTP_SOCKOPT_PEELOFF(r1, 0x84, 0x66, &(0x7f00000009c0)={0x0, 0x5}, &(0x7f0000000a00)=0x8) sendmsg$nl_route(r3, &(0x7f0000000b00)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000ac0)={&(0x7f0000000a80)=@bridge_getlink={0x28, 0x12, 0x400, 0x70bd2d, 0x25dfdbfe, {0x7, 0x0, 0x0, r7, 0x1a410, 0x4000}, [@IFLA_PROMISCUITY={0x8, 0x1e, 0x2}]}, 0x28}}, 0x200008c1) sendmsg$nl_xfrm(r3, &(0x7f0000000c40)={&(0x7f0000000b40)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000c00)={&(0x7f0000000b80)=@getsadinfo={0x44, 0x23, 0x8, 0x70bd25, 0x25dfdbfb, 0x0, [@coaddr={0x14, 0xe, @in=@rand_addr=0x64010100}, @mark={0xc, 0x15, {0x35075b, 0x5}}, @replay_val={0x10, 0xa, {0x70bd28, 0x70bd27, 0x500000}}]}, 0x44}, 0x1, 0x0, 0x0, 0x20}, 0x80) recvmsg(r3, &(0x7f0000001e40)={&(0x7f0000000c80)=@qipcrtr, 0x80, &(0x7f0000001d80)=[{&(0x7f0000000d00)=""/4096, 0x1000}, {&(0x7f0000001d00)=""/121, 0x79}], 0x2, &(0x7f0000001dc0)=""/110, 0x6e}, 0x10001) setsockopt$inet_sctp6_SCTP_MAX_BURST(r2, 0x84, 0x14, &(0x7f0000001e80)=@int=0x3, 0x4) clock_gettime(0x0, &(0x7f0000001f80)={0x0, 0x0}) pselect6(0x40, &(0x7f0000001ec0)={0x0, 0x3cc8b88, 0x80000001, 0x8, 0x1, 0xffff, 0x9, 0xffffffffffffffb1}, &(0x7f0000001f00)={0x1, 0xff, 0x75, 0x5, 0x3, 0x1ff, 0x7, 0x7}, &(0x7f0000001f40)={0x9, 0x2, 0x80, 0x1c000000, 0xfffffffffffffffb, 0x1, 0xc, 0x3}, &(0x7f0000001fc0)={r9, r10+60000000}, &(0x7f0000002040)={&(0x7f0000002000)={[0x4]}, 0x8}) sendmsg$nl_route(r3, &(0x7f0000002180)={&(0x7f0000002080)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000002140)={&(0x7f00000020c0)=@ipmr_newroute={0x5c, 0x18, 0x8, 0x70bd2d, 0x25dfdbfd, {0x80, 0x10, 0x0, 0x3, 0xff, 0x0, 0xc8, 0x8, 0x3600}, [@RTA_GATEWAY={0x8, 0x5, @remote}, @RTA_SRC={0x8, 0x2, @multicast1}, @RTA_TABLE={0x8, 0xf, 0x7fff}, @RTA_IIF={0x8}, @RTA_FLOW={0x8, 0xb, 0x80}, @RTA_SPORT={0x6, 0x1c, 0x4e20}, @RTA_SPORT={0x6, 0x1c, 0x4e22}, @RTA_UID={0x8, 0x19, r8}]}, 0x5c}, 0x1, 0x0, 0x0, 0xc4}, 0x40040) sendmsg$nl_route(r3, &(0x7f00000023c0)={&(0x7f00000021c0)={0x10, 0x0, 0x0, 0x2000000}, 0xc, &(0x7f0000002380)={&(0x7f0000002200)=@can_newroute={0x164, 0x18, 0x10, 0x70bd2d, 0x25dfdbfd, {0x1d, 0x1, 0xe}, [@CGW_MOD_AND={0x15, 0x1, {{{0x0, 0x1, 0x1}, 0x1, 0x2, 0x0, 0x0, "97c29a81f55c6609"}, 0x2}}, @CGW_DST_IF={0x8, 0xa, r7}, @CGW_CS_CRC8={0x11e, 0x6, {0x59, 0x18, 0x2c, 0xa8, 0x3, "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", 0x3, "920226e464d1b2534bec841d2c07f8f274c63de4"}}, @CGW_LIM_HOPS={0x5, 0xd, 0x1}, @CGW_MOD_UID={0x8, 0xe, r8}]}, 0x164}, 0x1, 0x0, 0x0, 0x10}, 0x400e810) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0x8924, &(0x7f0000002400)={'team_slave_1\x00', @broadcast}) sendmsg$TEAM_CMD_OPTIONS_SET(r2, &(0x7f0000002580)={&(0x7f0000002440)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002540)={&(0x7f00000024c0)={0x5c, 0x0, 0x2, 0x70bd27, 0x25dfdbfe, {}, [{{0x8, 0x1, r7}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8, 0x6, r7}}}]}}]}, 0x5c}, 0x1, 0x0, 0x0, 0x40000}, 0x48000) 86.304601ms ago: executing program 2 (id=468): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x300, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) r2 = socket$inet6_sctp(0xa, 0x1, 0x84) connect$inet6(r2, 0x0, 0x0) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r1}, 0x57) 84.059594ms ago: executing program 4 (id=469): socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 64) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) (rerun: 64) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000020c0)=[@in6={0xa, 0x4000, 0x4, @remote, 0x834}]}, &(0x7f0000002100)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r0, 0x84, 0x1f, 0x0, &(0x7f0000000100)) (async) socket$inet_icmp_raw(0x2, 0x3, 0x1) (async, rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) r2 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="01000100550300000000045c00000e0001006e6574446594ba461af5485296c7f5467991fdea04ce6fefbb7e0a46843313f55a862d7cc08a72dc084d60dad7706dddd62594350cfaef58ae8526f6c03db3cf71d9ae7be0f2456900000000000000000000000000c1e66e1165c5cb3db9ee"], 0x3c}}, 0x0) (async) r3 = socket$inet(0x2, 0x80003, 0x8000) getsockopt$inet_int(r3, 0x0, 0xd, 0x0, &(0x7f0000000000)=0xffe3) 83.736827ms ago: executing program 0 (id=470): socket$inet_tcp(0x2, 0x1, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$can_raw(0x1d, 0x3, 0x1) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001000010000003a194618d96d6d2e8553", @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=ANY=[@ANYBLOB="3c00000010000100000000000000000000000000000527e262b519735f9100", @ANYRES32=0x0, @ANYBLOB="0221000000000000140003007767320000000000000000000000000008000a00", @ANYRES32=r1, @ANYBLOB], 0x3c}}, 0x0) 0s ago: executing program 2 (id=471): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r0, 0x400448ca, 0x0) (async) bind$bt_hci(r0, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a300000000008000540000000134400008a047d3e001e0a01020000000000000000070000000900020073797a31000000000900010073797a30000000001800038014000080080003400000000004000a8004000180140000001000010000000000000000000084000a"], 0xc8}}, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x4, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x43}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000040)='syzkaller\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback=0x2b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x6, @void, @value}, 0x94) r3 = socket$inet6_icmp(0xa, 0x2, 0x3a) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r2, 0xe0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x8, 0x1, &(0x7f0000000200)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000240)=[0x0], 0x0, 0x88, &(0x7f0000000280)=[{}], 0x8, 0x10, &(0x7f00000002c0), &(0x7f0000000300), 0x8, 0xb7, 0x8, 0x8, &(0x7f0000000340)}}, 0x10) ioctl$sock_inet6_SIOCDELRT(r3, 0x890c, &(0x7f00000003c0)={@private1={0xfc, 0x1, '\x00', 0x1}, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x7ff, 0x8, 0x1, 0x500, 0x5, 0x90001, r4}) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.78' (ED25519) to the list of known hosts. [ 50.359080][ T5219] cgroup: Unknown subsys name 'net' [ 50.509766][ T5219] cgroup: Unknown subsys name 'cpuset' [ 50.518458][ T5219] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.798576][ T5219] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 53.879647][ T5237] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 53.889178][ T5235] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 53.901568][ T5242] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 53.908853][ T5242] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 53.910967][ T5246] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 53.916410][ T5242] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 53.924850][ T5246] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 53.933323][ T5242] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 53.939404][ T5246] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 53.951530][ T5242] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 53.952753][ T5246] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 53.966183][ T5242] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 53.967066][ T5246] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 53.983678][ T5246] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 53.990836][ T5249] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 53.999020][ T5248] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 54.026983][ T5248] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 54.029508][ T5247] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 54.034946][ T5248] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 54.041996][ T5249] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 54.057384][ T5249] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 54.061678][ T5242] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 54.065016][ T5249] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 54.072735][ T5237] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 54.080785][ T5249] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 54.088808][ T5237] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 54.093135][ T5249] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 54.107873][ T5242] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 54.115378][ T5242] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 54.123416][ T5242] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 54.538962][ T5229] chnl_net:caif_netlink_parms(): no params data found [ 54.562607][ T5238] chnl_net:caif_netlink_parms(): no params data found [ 54.645907][ T5239] chnl_net:caif_netlink_parms(): no params data found [ 54.764283][ T5230] chnl_net:caif_netlink_parms(): no params data found [ 54.774367][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.782330][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.790285][ T5229] bridge_slave_0: entered allmulticast mode [ 54.797036][ T5229] bridge_slave_0: entered promiscuous mode [ 54.804668][ T5238] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.811863][ T5238] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.819200][ T5238] bridge_slave_0: entered allmulticast mode [ 54.825755][ T5238] bridge_slave_0: entered promiscuous mode [ 54.832714][ T5243] chnl_net:caif_netlink_parms(): no params data found [ 54.853402][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.860898][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.868390][ T5229] bridge_slave_1: entered allmulticast mode [ 54.875006][ T5229] bridge_slave_1: entered promiscuous mode [ 54.882165][ T5238] bridge0: port 2(bridge_slave_1) entered blocking state [ 54.889821][ T5238] bridge0: port 2(bridge_slave_1) entered disabled state [ 54.897369][ T5238] bridge_slave_1: entered allmulticast mode [ 54.903949][ T5238] bridge_slave_1: entered promiscuous mode [ 54.970554][ T5238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 54.982664][ T5239] bridge0: port 1(bridge_slave_0) entered blocking state [ 54.991156][ T5239] bridge0: port 1(bridge_slave_0) entered disabled state [ 54.998545][ T5239] bridge_slave_0: entered allmulticast mode [ 55.005102][ T5239] bridge_slave_0: entered promiscuous mode [ 55.014217][ T5229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.025979][ T5229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.037315][ T5238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.069706][ T5239] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.076966][ T5239] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.084152][ T5239] bridge_slave_1: entered allmulticast mode [ 55.091531][ T5239] bridge_slave_1: entered promiscuous mode [ 55.167965][ T5230] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.175170][ T5230] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.183463][ T5230] bridge_slave_0: entered allmulticast mode [ 55.190341][ T5230] bridge_slave_0: entered promiscuous mode [ 55.207344][ T5229] team0: Port device team_slave_0 added [ 55.216215][ T5238] team0: Port device team_slave_0 added [ 55.224326][ T5238] team0: Port device team_slave_1 added [ 55.250746][ T5230] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.257902][ T5230] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.265086][ T5230] bridge_slave_1: entered allmulticast mode [ 55.272218][ T5230] bridge_slave_1: entered promiscuous mode [ 55.280424][ T5239] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.290943][ T5229] team0: Port device team_slave_1 added [ 55.320448][ T5238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.330373][ T5238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.356564][ T5238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.384576][ T5239] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.402880][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.410143][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.436205][ T5229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.448082][ T5238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.455067][ T5238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.481836][ T5238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.493979][ T5243] bridge0: port 1(bridge_slave_0) entered blocking state [ 55.501658][ T5243] bridge0: port 1(bridge_slave_0) entered disabled state [ 55.509328][ T5243] bridge_slave_0: entered allmulticast mode [ 55.515874][ T5243] bridge_slave_0: entered promiscuous mode [ 55.523649][ T5243] bridge0: port 2(bridge_slave_1) entered blocking state [ 55.530910][ T5243] bridge0: port 2(bridge_slave_1) entered disabled state [ 55.538307][ T5243] bridge_slave_1: entered allmulticast mode [ 55.545149][ T5243] bridge_slave_1: entered promiscuous mode [ 55.562282][ T5230] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.585097][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.592151][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.619229][ T5229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.652559][ T5230] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.667173][ T5239] team0: Port device team_slave_0 added [ 55.710040][ T5239] team0: Port device team_slave_1 added [ 55.749077][ T5243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 55.762008][ T5243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 55.773963][ T5230] team0: Port device team_slave_0 added [ 55.781661][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 55.788945][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.815218][ T5239] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 55.832016][ T5238] hsr_slave_0: entered promiscuous mode [ 55.838340][ T5238] hsr_slave_1: entered promiscuous mode [ 55.855944][ T5230] team0: Port device team_slave_1 added [ 55.868864][ T5239] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 55.875845][ T5239] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 55.902468][ T5239] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 55.942117][ T5243] team0: Port device team_slave_0 added [ 55.950756][ T5243] team0: Port device team_slave_1 added [ 55.969255][ T5229] hsr_slave_0: entered promiscuous mode [ 55.975596][ T5229] hsr_slave_1: entered promiscuous mode [ 55.984131][ T5229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 55.992398][ T5229] Cannot create hsr debugfs directory [ 56.041673][ T5239] hsr_slave_0: entered promiscuous mode [ 56.048320][ T5239] hsr_slave_1: entered promiscuous mode [ 56.055108][ T5239] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.063147][ T5239] Cannot create hsr debugfs directory [ 56.074374][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.081489][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.107532][ T5230] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.118561][ T54] Bluetooth: hci3: command tx timeout [ 56.120232][ T5230] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.131096][ T5230] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.157111][ T5230] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.184067][ T5243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.191198][ T5243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.217782][ T5242] Bluetooth: hci2: command tx timeout [ 56.218008][ T54] Bluetooth: hci4: command tx timeout [ 56.223504][ T5243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.229556][ T5242] Bluetooth: hci1: command tx timeout [ 56.245407][ T5235] Bluetooth: hci0: command tx timeout [ 56.283706][ T5243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.291159][ T5243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.318707][ T5243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 56.407809][ T5230] hsr_slave_0: entered promiscuous mode [ 56.414195][ T5230] hsr_slave_1: entered promiscuous mode [ 56.420453][ T5230] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.428750][ T5230] Cannot create hsr debugfs directory [ 56.480414][ T5243] hsr_slave_0: entered promiscuous mode [ 56.486829][ T5243] hsr_slave_1: entered promiscuous mode [ 56.492983][ T5243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 56.500983][ T5243] Cannot create hsr debugfs directory [ 56.664205][ T5238] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 56.692942][ T5238] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 56.719785][ T5238] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 56.744120][ T5238] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 56.791045][ T5229] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 56.809271][ T5229] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 56.823804][ T5229] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 56.841882][ T5229] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 56.898432][ T5239] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 56.918260][ T5239] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 56.928657][ T5239] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 56.938732][ T5239] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 57.007830][ T5230] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 57.021229][ T5230] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 57.031679][ T5230] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 57.074366][ T5230] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 57.119111][ T5238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.141023][ T5243] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 57.153331][ T5243] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 57.163804][ T5243] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 57.173519][ T5243] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 57.213435][ T5238] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.250689][ T2914] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.258020][ T2914] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.275677][ T2914] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.282876][ T2914] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.360137][ T5239] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.383158][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.414797][ T5229] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.455005][ T1108] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.462172][ T1108] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.476528][ T5230] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.490931][ T5239] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.515132][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.522325][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.560702][ T5243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 57.570867][ T2971] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.578066][ T2971] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.604545][ T2971] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.611762][ T2971] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.643705][ T5243] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.684132][ T5230] 8021q: adding VLAN 0 to HW filter on device team0 [ 57.716426][ T2930] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.723619][ T2930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.741375][ T2930] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.748496][ T2930] bridge0: port 1(bridge_slave_0) entered forwarding state [ 57.772544][ T2930] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.779720][ T2930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.829889][ T2930] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.837082][ T2930] bridge0: port 2(bridge_slave_1) entered forwarding state [ 57.876269][ T5238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 57.943439][ T5230] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.009060][ T5243] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 58.026204][ T5243] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 58.108189][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.199623][ T5235] Bluetooth: hci3: command tx timeout [ 58.258771][ T5229] veth0_vlan: entered promiscuous mode [ 58.285125][ T5239] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.287020][ T5235] Bluetooth: hci1: command tx timeout [ 58.298080][ T5235] Bluetooth: hci4: command tx timeout [ 58.303821][ T5235] Bluetooth: hci0: command tx timeout [ 58.310068][ T5242] Bluetooth: hci2: command tx timeout [ 58.329074][ T5229] veth1_vlan: entered promiscuous mode [ 58.403623][ T5229] veth0_macvtap: entered promiscuous mode [ 58.431491][ T5229] veth1_macvtap: entered promiscuous mode [ 58.472661][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.493904][ T5230] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.511924][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 58.523826][ T5243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 58.542580][ T5239] veth0_vlan: entered promiscuous mode [ 58.557354][ T5229] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.566326][ T5229] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.576311][ T5229] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.588453][ T5229] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 58.616164][ T5239] veth1_vlan: entered promiscuous mode [ 58.704173][ T5238] veth0_vlan: entered promiscuous mode [ 58.707315][ T2930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.725674][ T2930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.780202][ T5238] veth1_vlan: entered promiscuous mode [ 58.788060][ T5230] veth0_vlan: entered promiscuous mode [ 58.802083][ T5239] veth0_macvtap: entered promiscuous mode [ 58.820962][ T5239] veth1_macvtap: entered promiscuous mode [ 58.829046][ T5243] veth0_vlan: entered promiscuous mode [ 58.844494][ T2930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 58.860772][ T2930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 58.865867][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 58.882838][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.894462][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 58.905802][ T5230] veth1_vlan: entered promiscuous mode [ 58.933854][ T5239] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 58.951493][ T5229] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 58.955081][ T5239] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 58.978137][ T5239] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.033341][ T5238] veth0_macvtap: entered promiscuous mode [ 59.061945][ T5243] veth1_vlan: entered promiscuous mode [ 59.090159][ T5239] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.100564][ T5239] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.110304][ T5239] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.119570][ T5239] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.133464][ T5238] veth1_macvtap: entered promiscuous mode [ 59.144922][ T5230] veth0_macvtap: entered promiscuous mode [ 59.173397][ T5230] veth1_macvtap: entered promiscuous mode [ 59.229793][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.251890][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.262062][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.273093][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.286086][ T5238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.298891][ T5319] netlink: 204 bytes leftover after parsing attributes in process `syz.3.6'. [ 59.312711][ T5319] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 59.320473][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.332813][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.343978][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.345257][ T5319] netlink: 'syz.3.6': attribute type 1 has an invalid length. [ 59.363132][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.371259][ T5319] netlink: 9340 bytes leftover after parsing attributes in process `syz.3.6'. [ 59.373444][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.388252][ T5319] netlink: 'syz.3.6': attribute type 1 has an invalid length. [ 59.392547][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.414071][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.422852][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.434114][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.461079][ T5238] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.472862][ T5238] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.491259][ T5238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.520487][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.531199][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.541991][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.553196][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.564098][ T5230] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.574943][ T5230] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.577137][ T5323] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 59.586362][ T5230] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.631591][ T5243] veth0_macvtap: entered promiscuous mode [ 59.646423][ T5230] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.657840][ T5230] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.666576][ T5230] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.675746][ T5230] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.695473][ T5238] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.704439][ T5238] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.713673][ T5238] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.723898][ T5238] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 59.747883][ T5243] veth1_macvtap: entered promiscuous mode [ 59.803589][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.815307][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.825547][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.836469][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.847125][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.858174][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.868159][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.885710][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.898063][ T5243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.937462][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 59.952088][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 59.978393][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.995485][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.026071][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.038607][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.048742][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.059792][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.069684][ T5243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.080284][ T5243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.092809][ T5243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.120415][ T5243] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.129583][ T5243] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.138675][ T5243] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.147814][ T5243] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.192597][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.202286][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.270096][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.287278][ T54] Bluetooth: hci3: command tx timeout [ 60.302483][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.338685][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.346543][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.357811][ T54] Bluetooth: hci0: command tx timeout [ 60.363369][ T5235] Bluetooth: hci2: command tx timeout [ 60.370494][ T5242] Bluetooth: hci4: command tx timeout [ 60.370509][ T5248] Bluetooth: hci1: command tx timeout [ 60.393729][ T2930] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.423927][ T2930] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.446073][ T5331] veth1_macvtap: left promiscuous mode [ 60.466294][ T5331] macsec0: entered promiscuous mode [ 60.472331][ T5331] macsec0: entered allmulticast mode [ 60.482091][ T5334] veth1_macvtap: entered promiscuous mode [ 60.488181][ T5334] veth1_macvtap: entered allmulticast mode [ 60.494319][ T5334] macsec0: left promiscuous mode [ 60.499513][ T5334] macsec0: left allmulticast mode [ 60.504650][ T5334] veth1_macvtap: left allmulticast mode [ 60.526100][ T2930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.540711][ T2930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.560613][ T2930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.604089][ T2930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.635418][ T2930] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.644194][ T2930] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.739390][ T5341] Bluetooth: MGMT ver 1.23 [ 60.791651][ T5341] netlink: 4 bytes leftover after parsing attributes in process `syz.0.12'. [ 60.803055][ T5341] bridge_slave_1: left allmulticast mode [ 60.811997][ T5341] bridge_slave_1: left promiscuous mode [ 60.820627][ T5341] bridge0: port 2(bridge_slave_1) entered disabled state [ 60.868785][ T5341] bridge_slave_0: left allmulticast mode [ 60.874578][ T5341] bridge_slave_0: left promiscuous mode [ 60.904674][ T5345] ip6t_srh: unknown srh invflags 5F00 [ 60.910021][ T5341] bridge0: port 1(bridge_slave_0) entered disabled state [ 61.043321][ T5354] nft_compat: unsupported protocol 0 [ 61.359801][ T5368] netlink: 8 bytes leftover after parsing attributes in process `syz.2.19'. [ 61.413928][ T5368] netlink: 4 bytes leftover after parsing attributes in process `syz.2.19'. [ 61.431494][ T5370] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.18'. [ 61.460477][ T5373] netlink: 65039 bytes leftover after parsing attributes in process `syz.4.18'. [ 61.898380][ T5385] netlink: 52 bytes leftover after parsing attributes in process `syz.2.22'. [ 61.927223][ T5385] netlink: 52 bytes leftover after parsing attributes in process `syz.2.22'. [ 61.939705][ T5385] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 61.947417][ T5395] netlink: 'syz.3.25': attribute type 1 has an invalid length. [ 61.963026][ T5386] netlink: 52 bytes leftover after parsing attributes in process `syz.2.22'. [ 61.978858][ T5386] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 62.017417][ T5396] syz.4.20 uses obsolete (PF_INET,SOCK_PACKET) [ 62.040906][ T5395] bridge1: entered promiscuous mode [ 62.046157][ T5395] bridge1: entered allmulticast mode [ 62.094508][ T5388] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.218449][ T5388] Cannot find del_set index 4 as target [ 62.337271][ T5406] openvswitch: netlink: Missing key (keys=40, expected=10000000) [ 62.338405][ T5410] netlink: 'syz.3.31': attribute type 1 has an invalid length. [ 62.357823][ T5242] Bluetooth: hci3: command tx timeout [ 62.397039][ T5410] netlink: 'syz.3.31': attribute type 1 has an invalid length. [ 62.438386][ T5242] Bluetooth: hci4: command tx timeout [ 62.438700][ T54] Bluetooth: hci0: command tx timeout [ 62.443875][ T5242] Bluetooth: hci2: command tx timeout [ 62.449269][ T5235] Bluetooth: hci1: command tx timeout [ 63.361972][ T5459] netlink: 'syz.1.47': attribute type 32 has an invalid length. [ 63.375405][ T5457] openvswitch: netlink: Geneve option length err (len 3060, max 255). [ 63.564351][ T5472] tipc: Started in network mode [ 63.573784][ T5472] tipc: Node identity , cluster identity 4711 [ 63.586422][ T5472] tipc: Failed to set node id, please configure manually [ 63.611446][ T5479] netlink: 'syz.1.53': attribute type 3 has an invalid length. [ 63.616808][ T5472] tipc: Enabling of bearer rejected, failed to enable media [ 63.731311][ T5472] : entered promiscuous mode [ 63.913592][ T5493] xt_cgroup: xt_cgroup: no path or classid specified [ 63.944934][ T5493] openvswitch: netlink: Actions may not be safe on all matching packets [ 64.303280][ T5517] netlink: 'syz.1.63': attribute type 1 has an invalid length. [ 64.345003][ T5518] __nla_validate_parse: 15 callbacks suppressed [ 64.345024][ T5518] netlink: 12 bytes leftover after parsing attributes in process `syz.0.62'. [ 64.379752][ T5515] ebt_limit: overflow, try lower: 570423552/2483027968 [ 64.421706][ T5513] Zero length message leads to an empty skb [ 64.522780][ T5520] netlink: 11 bytes leftover after parsing attributes in process `syz.4.64'. [ 64.531819][ T5520] netlink: 11 bytes leftover after parsing attributes in process `syz.4.64'. [ 64.549367][ T5242] Bluetooth: hci0: command tx timeout [ 64.564722][ T5530] netlink: 24 bytes leftover after parsing attributes in process `syz.0.65'. [ 64.609696][ T5532] warning: `syz.3.66' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 64.694777][ T5539] netlink: 8 bytes leftover after parsing attributes in process `syz.4.67'. [ 64.704066][ T5539] netlink: 12 bytes leftover after parsing attributes in process `syz.4.67'. [ 64.776024][ T5545] netlink: 24 bytes leftover after parsing attributes in process `syz.2.70'. [ 64.779376][ T5539] netlink: 'syz.4.67': attribute type 5 has an invalid length. [ 64.785332][ T5545] netlink: 272 bytes leftover after parsing attributes in process `syz.2.70'. [ 64.801726][ T5545] netlink: 8 bytes leftover after parsing attributes in process `syz.2.70'. [ 64.810685][ T5544] netlink: 24 bytes leftover after parsing attributes in process `syz.2.70'. [ 64.875603][ T5541] openvswitch: netlink: Flow key attribute not present in set flow. [ 64.992865][ T5555] netlink: 'syz.3.72': attribute type 2 has an invalid length. [ 65.044911][ T5560] tap0: tun_chr_ioctl cmd 2148553947 [ 65.063496][ T5562] netlink: 'syz.3.72': attribute type 2 has an invalid length. [ 65.418011][ T5585] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 65.862318][ T5609] netlink: 'syz.4.89': attribute type 13 has an invalid length. [ 66.254438][ T5632] netlink: 'syz.4.95': attribute type 10 has an invalid length. [ 66.289913][ T5636] dccp_v4_rcv: dropped packet with invalid checksum [ 66.321122][ T5632] netlink: 'syz.4.95': attribute type 1 has an invalid length. [ 66.351170][ T5638] netlink: 'syz.0.97': attribute type 1 has an invalid length. [ 66.367570][ T5638] netlink: 'syz.0.97': attribute type 1 has an invalid length. [ 66.534844][ T5645] ipt_ECN: cannot use operation on non-tcp rule [ 66.546172][ T25] IPVS: starting estimator thread 0... [ 66.561258][ T5648] IPVS: wlc: TCP [::]:0 - no destination available [ 66.636044][ T5648] syz.2.102 (5648) used greatest stack depth: 19352 bytes left [ 66.652198][ T5649] IPVS: using max 20 ests per chain, 48000 per kthread [ 66.805238][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 67.372490][ T5703] openvswitch: netlink: Key type 29 is not supported [ 67.700393][ T5724] netlink: 'syz.4.121': attribute type 3 has an invalid length. [ 67.734352][ T5722] netlink: 'syz.3.122': attribute type 29 has an invalid length. [ 67.754273][ T5726] bridge_slave_1: left allmulticast mode [ 67.770629][ T5726] bridge_slave_1: left promiscuous mode [ 67.790497][ T5726] bridge0: port 2(bridge_slave_1) entered disabled state [ 67.813862][ T5726] bridge_slave_0: left allmulticast mode [ 67.820993][ T5726] bridge_slave_0: left promiscuous mode [ 67.837041][ T5726] bridge0: port 1(bridge_slave_0) entered disabled state [ 67.916740][ T5741] xt_CT: You must specify a L4 protocol and not use inversions on it [ 68.014821][ T5744] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.024208][ T5744] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.033070][ T5744] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 68.042102][ T5744] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 69.411567][ T5849] __nla_validate_parse: 35 callbacks suppressed [ 69.411587][ T5849] netlink: 4 bytes leftover after parsing attributes in process `syz.0.154'. [ 69.516360][ T5853] Cannot find add_set index 0 as target [ 69.706384][ T5869] netlink: 4 bytes leftover after parsing attributes in process `syz.0.160'. [ 69.740550][ T5871] ipt_ECN: cannot use operation on non-tcp rule [ 70.010939][ T5889] netlink: 16 bytes leftover after parsing attributes in process `syz.1.165'. [ 70.035142][ T5888] validate_nla: 8 callbacks suppressed [ 70.035161][ T5888] netlink: 'syz.3.164': attribute type 1 has an invalid length. [ 70.049730][ T5888] netlink: 9116 bytes leftover after parsing attributes in process `syz.3.164'. [ 70.060392][ T5888] netlink: 'syz.3.164': attribute type 2 has an invalid length. [ 70.071603][ T5888] netlink: 185 bytes leftover after parsing attributes in process `syz.3.164'. [ 70.199759][ T5900] netlink: 8 bytes leftover after parsing attributes in process `syz.2.168'. [ 70.291049][ T5907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.170'. [ 70.315866][ T5907] netlink: 4 bytes leftover after parsing attributes in process `syz.3.170'. [ 70.576316][ T5927] netlink: 16 bytes leftover after parsing attributes in process `syz.2.176'. [ 70.693659][ T5934] netlink: 4 bytes leftover after parsing attributes in process `syz.1.177'. [ 71.018920][ T5952] (unnamed net_device) (uninitialized): option mode: invalid value (9) [ 71.023130][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:2. Sending cookies. [ 71.133974][ T5962] netlink: 'syz.0.189': attribute type 1 has an invalid length. [ 71.797423][ T5248] Bluetooth: hci4: command 0x0405 tx timeout [ 71.915510][ T5989] netlink: 'syz.2.199': attribute type 9 has an invalid length. [ 71.956008][ T5992] netlink: 'syz.3.200': attribute type 2 has an invalid length. [ 72.135229][ T6002] ipvlan2: entered promiscuous mode [ 72.564764][ T6024] openvswitch: netlink: Tunnel attr 0 has unexpected len 1 expected 8 [ 72.776071][ T6036] netlink: 'syz.0.215': attribute type 1 has an invalid length. [ 72.990974][ T6053] netlink: 'syz.4.218': attribute type 1 has an invalid length. [ 73.044795][ T6051] netlink: 'syz.4.218': attribute type 1 has an invalid length. [ 73.190283][ T6066] xt_bpf: check failed: parse error [ 74.389481][ T6098] netlink: 'syz.1.235': attribute type 11 has an invalid length. [ 74.436053][ T6100] openvswitch: netlink: Actions may not be safe on all matching packets [ 74.542142][ T6105] ªªªªªª: renamed from syzkaller0 [ 74.579339][ T6106] sctp: [Deprecated]: syz.3.237 (pid 6106) Use of int in max_burst socket option deprecated. [ 74.579339][ T6106] Use struct sctp_assoc_value instead [ 74.795096][ T6122] dccp_v6_rcv: dropped packet with invalid checksum [ 74.923468][ T6135] dccp_invalid_packet: P.Data Offset(0) too small [ 74.978199][ T6122] raw_sendmsg: syz.1.242 forgot to set AF_INET. Fix it! [ 74.984432][ T6141] openvswitch: netlink: Actions may not be safe on all matching packets [ 75.027658][ T6135] __nla_validate_parse: 10 callbacks suppressed [ 75.027676][ T6135] netlink: 16 bytes leftover after parsing attributes in process `syz.0.243'. [ 75.043485][ T6135] netlink: 16 bytes leftover after parsing attributes in process `syz.0.243'. [ 75.168641][ T6150] netlink: 132 bytes leftover after parsing attributes in process `syz.0.248'. [ 75.227758][ T6154] netlink: 209852 bytes leftover after parsing attributes in process `syz.2.247'. [ 75.262532][ T6154] openvswitch: netlink: Multiple metadata blocks provided [ 75.315070][ T6161] netlink: 16 bytes leftover after parsing attributes in process `syz.0.250'. [ 75.334577][ T6161] bridge_slave_0: entered promiscuous mode [ 75.635590][ T6185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.255'. [ 75.665574][ T6185] netlink: 12 bytes leftover after parsing attributes in process `syz.0.255'. [ 75.754337][ T6191] netlink: 'syz.2.257': attribute type 15 has an invalid length. [ 75.782310][ T6189] netlink: 16 bytes leftover after parsing attributes in process `syz.3.256'. [ 75.863978][ T6189] 8021q: adding VLAN 0 to HW filter on device bond1 [ 76.028016][ T6209] netlink: 4692 bytes leftover after parsing attributes in process `syz.0.262'. [ 76.085737][ T6212] sctp: [Deprecated]: syz.1.264 (pid 6212) Use of int in max_burst socket option. [ 76.085737][ T6212] Use struct sctp_assoc_value instead [ 76.305611][ T6229] netlink: 12 bytes leftover after parsing attributes in process `syz.0.267'. [ 76.394855][ T6233] netlink: 'syz.3.269': attribute type 2 has an invalid length. [ 76.484599][ T6240] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 76.694829][ T8] cfg80211: failed to load regulatory.db [ 76.734522][ T6251] netlink: zone id is out of range [ 76.740027][ T6251] netlink: zone id is out of range [ 76.745186][ T6251] netlink: zone id is out of range [ 76.751870][ T6253] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 76.759076][ T6251] netlink: zone id is out of range [ 76.773446][ T6251] netlink: zone id is out of range [ 76.779905][ T6251] netlink: zone id is out of range [ 76.786011][ T6251] netlink: zone id is out of range [ 76.804658][ T6251] netlink: zone id is out of range [ 76.813334][ T6251] netlink: zone id is out of range [ 76.813765][ T6258] openvswitch: netlink: Missing key (keys=40, expected=80) [ 77.171190][ T6274] netlink: 'syz.4.280': attribute type 10 has an invalid length. [ 77.182037][ T6274] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 77.213335][ T6274] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 77.226473][ T6274] bond0: (slave batadv_slave_0): Enslaving as an active interface with an up link [ 77.524185][ T6295] netlink: 'syz.0.290': attribute type 14 has an invalid length. [ 77.751861][ T6309] IPv6: sit2: Disabled Multicast RS [ 78.994311][ T6397] netlink: 'syz.4.307': attribute type 1 has an invalid length. [ 79.020476][ T6397] netlink: 'syz.4.307': attribute type 4 has an invalid length. [ 79.264766][ T6413] sctp: [Deprecated]: syz.4.310 (pid 6413) Use of int in max_burst socket option. [ 79.264766][ T6413] Use struct sctp_assoc_value instead [ 80.094371][ T6466] __nla_validate_parse: 84 callbacks suppressed [ 80.094391][ T6466] netlink: 44 bytes leftover after parsing attributes in process `syz.0.327'. [ 80.254178][ T6472] xt_hashlimit: max too large, truncated to 1048576 [ 80.312164][ T6474] netlink: 'syz.2.331': attribute type 10 has an invalid length. [ 80.441982][ T6482] netlink: 24 bytes leftover after parsing attributes in process `syz.4.334'. [ 80.556249][ T2971] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.714692][ T6499] netlink: 8 bytes leftover after parsing attributes in process `syz.4.341'. [ 80.826650][ T6502] netlink: 4 bytes leftover after parsing attributes in process `syz.2.340'. [ 80.843899][ T6506] FAULT_INJECTION: forcing a failure. [ 80.843899][ T6506] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 80.881809][ T6506] CPU: 0 UID: 0 PID: 6506 Comm: syz.1.343 Not tainted 6.12.0-rc2-syzkaller-00245-g11d06f0aaef8 #0 [ 80.892471][ T6506] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 80.902558][ T6506] Call Trace: [ 80.905873][ T6506] [ 80.908825][ T6506] dump_stack_lvl+0x241/0x360 [ 80.913552][ T6506] ? __pfx_dump_stack_lvl+0x10/0x10 [ 80.918776][ T6506] ? __pfx__printk+0x10/0x10 [ 80.923399][ T6506] ? __pfx_lock_release+0x10/0x10 [ 80.928462][ T6506] should_fail_ex+0x3b0/0x4e0 [ 80.933172][ T6506] _copy_from_user+0x2f/0xe0 [ 80.937793][ T6506] copy_msghdr_from_user+0xae/0x680 [ 80.943023][ T6506] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 80.948882][ T6506] __sys_sendmsg+0x22d/0x380 [ 80.953498][ T6506] ? __pfx___sys_sendmsg+0x10/0x10 [ 80.958643][ T6506] ? __pfx_vfs_write+0x10/0x10 [ 80.963458][ T6506] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 80.969817][ T6506] ? do_syscall_64+0x100/0x230 [ 80.971124][ T6513] netlink: 112 bytes leftover after parsing attributes in process `syz.0.347'. [ 80.974590][ T6506] ? do_syscall_64+0xb6/0x230 [ 80.974619][ T6506] do_syscall_64+0xf3/0x230 [ 80.974638][ T6506] ? clear_bhb_loop+0x35/0x90 [ 80.997428][ T6506] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.003366][ T6506] RIP: 0033:0x7fcc0997dff9 [ 81.007824][ T6506] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 81.027896][ T6506] RSP: 002b:00007fcc0a82b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 81.036342][ T6506] RAX: ffffffffffffffda RBX: 00007fcc09b35f80 RCX: 00007fcc0997dff9 [ 81.044341][ T6506] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 81.052334][ T6506] RBP: 00007fcc0a82b090 R08: 0000000000000000 R09: 0000000000000000 [ 81.060349][ T6506] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 81.068339][ T6506] R13: 0000000000000000 R14: 00007fcc09b35f80 R15: 00007ffe375bfed8 [ 81.076351][ T6506] [ 81.088255][ T5242] Bluetooth: hci0: Opcode 0x0401 failed: -110 [ 81.095692][ T5242] Bluetooth: hci0: command 0x0401 tx timeout [ 81.137822][ T6517] netlink: 'syz.4.348': attribute type 15 has an invalid length. [ 81.376380][ T6523] vcan0: entered allmulticast mode [ 81.429156][ T6531] netlink: 8 bytes leftover after parsing attributes in process `syz.1.354'. [ 81.449889][ T6535] netlink: 'syz.4.355': attribute type 9 has an invalid length. [ 81.479411][ T6535] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.355'. [ 81.588019][ C0] Unknown status report in ack skb [ 81.607132][ T6537] netlink: 'syz.4.355': attribute type 9 has an invalid length. [ 81.626148][ T6537] netlink: 209836 bytes leftover after parsing attributes in process `syz.4.355'. [ 81.791753][ T6552] FAULT_INJECTION: forcing a failure. [ 81.791753][ T6552] name failslab, interval 1, probability 0, space 0, times 1 [ 81.810738][ T6547] netlink: 80 bytes leftover after parsing attributes in process `syz.3.358'. [ 81.820520][ T6552] CPU: 0 UID: 0 PID: 6552 Comm: syz.0.360 Not tainted 6.12.0-rc2-syzkaller-00245-g11d06f0aaef8 #0 [ 81.831150][ T6552] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 81.841229][ T6552] Call Trace: [ 81.844533][ T6552] [ 81.847488][ T6552] dump_stack_lvl+0x241/0x360 [ 81.852197][ T6552] ? __pfx_dump_stack_lvl+0x10/0x10 [ 81.857421][ T6552] ? __pfx__printk+0x10/0x10 [ 81.862050][ T6552] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 81.868067][ T6552] ? __pfx___might_resched+0x10/0x10 [ 81.873384][ T6552] should_fail_ex+0x3b0/0x4e0 [ 81.878099][ T6552] should_failslab+0xac/0x100 [ 81.882807][ T6552] ? __alloc_skb+0x1c3/0x440 [ 81.887420][ T6552] kmem_cache_alloc_node_noprof+0x71/0x320 [ 81.893261][ T6552] __alloc_skb+0x1c3/0x440 [ 81.897716][ T6552] ? __pfx___alloc_skb+0x10/0x10 [ 81.902680][ T6552] ? netlink_autobind+0xd6/0x2f0 [ 81.907649][ T6552] ? netlink_autobind+0x2b0/0x2f0 [ 81.912712][ T6552] netlink_sendmsg+0x638/0xcb0 [ 81.917512][ T6552] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.922823][ T6552] ? aa_sock_msg_perm+0x91/0x160 [ 81.927791][ T6552] ? __pfx_netlink_sendmsg+0x10/0x10 [ 81.933090][ T6552] __sock_sendmsg+0x221/0x270 [ 81.937776][ T6552] ____sys_sendmsg+0x52a/0x7e0 [ 81.942546][ T6552] ? __pfx_____sys_sendmsg+0x10/0x10 [ 81.947844][ T6552] __sys_sendmsg+0x292/0x380 [ 81.952431][ T6552] ? __pfx___sys_sendmsg+0x10/0x10 [ 81.957552][ T6552] ? __pfx_vfs_write+0x10/0x10 [ 81.962331][ T6552] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 81.968662][ T6552] ? do_syscall_64+0x100/0x230 [ 81.973435][ T6552] ? do_syscall_64+0xb6/0x230 [ 81.978123][ T6552] do_syscall_64+0xf3/0x230 [ 81.982627][ T6552] ? clear_bhb_loop+0x35/0x90 [ 81.987303][ T6552] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 81.993199][ T6552] RIP: 0033:0x7f8f9437dff9 [ 81.997611][ T6552] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 82.017211][ T6552] RSP: 002b:00007f8f950dd038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 82.025628][ T6552] RAX: ffffffffffffffda RBX: 00007f8f94535f80 RCX: 00007f8f9437dff9 [ 82.033599][ T6552] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 82.041568][ T6552] RBP: 00007f8f950dd090 R08: 0000000000000000 R09: 0000000000000000 [ 82.049795][ T6552] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 82.057766][ T6552] R13: 0000000000000000 R14: 00007f8f94535f80 R15: 00007ffd2e56c198 [ 82.065745][ T6552] [ 82.083226][ T6547] netlink: 24 bytes leftover after parsing attributes in process `syz.3.358'. [ 82.382778][ T6572] x_tables: duplicate underflow at hook 1 [ 82.406993][ T6572] x_tables: duplicate underflow at hook 1 [ 82.432434][ T6572] x_tables: duplicate underflow at hook 1 [ 82.456346][ T6572] x_tables: duplicate underflow at hook 1 [ 82.482181][ T6584] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 82.519555][ T6572] x_tables: duplicate underflow at hook 1 [ 82.525403][ T6572] x_tables: duplicate underflow at hook 1 [ 82.546967][ T6572] x_tables: duplicate underflow at hook 1 [ 82.553040][ T6572] x_tables: duplicate underflow at hook 1 [ 82.581433][ T6572] x_tables: duplicate underflow at hook 1 [ 82.605036][ T6572] x_tables: duplicate underflow at hook 1 [ 82.934545][ T6605] 8021q: VLANs not supported on ipvlan0 [ 83.088415][ T6570] syz.3.365 (6570) used greatest stack depth: 16880 bytes left [ 83.118789][ T6613] netlink: 'syz.1.381': attribute type 1 has an invalid length. [ 83.263267][ T6627] FAULT_INJECTION: forcing a failure. [ 83.263267][ T6627] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 83.276563][ T6627] CPU: 1 UID: 0 PID: 6627 Comm: syz.1.385 Not tainted 6.12.0-rc2-syzkaller-00245-g11d06f0aaef8 #0 [ 83.287179][ T6627] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 83.297256][ T6627] Call Trace: [ 83.300561][ T6627] [ 83.303516][ T6627] dump_stack_lvl+0x241/0x360 [ 83.308222][ T6627] ? __pfx_dump_stack_lvl+0x10/0x10 [ 83.313447][ T6627] ? __pfx__printk+0x10/0x10 [ 83.318069][ T6627] ? __pfx_lock_release+0x10/0x10 [ 83.323134][ T6627] should_fail_ex+0x3b0/0x4e0 [ 83.327847][ T6627] _copy_from_iter+0x1ed/0x1d60 [ 83.332725][ T6627] ? __virt_addr_valid+0x183/0x530 [ 83.337862][ T6627] ? __pfx_lock_release+0x10/0x10 [ 83.342921][ T6627] ? __alloc_skb+0x28f/0x440 [ 83.347537][ T6627] ? __pfx__copy_from_iter+0x10/0x10 [ 83.352850][ T6627] ? __virt_addr_valid+0x183/0x530 [ 83.357986][ T6627] ? __virt_addr_valid+0x183/0x530 [ 83.363108][ T6627] ? __virt_addr_valid+0x45f/0x530 [ 83.368279][ T6627] ? __check_object_size+0x48e/0x900 [ 83.373586][ T6627] netlink_sendmsg+0x73d/0xcb0 [ 83.378363][ T6627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.383649][ T6627] ? aa_sock_msg_perm+0x91/0x160 [ 83.388592][ T6627] ? __pfx_netlink_sendmsg+0x10/0x10 [ 83.393890][ T6627] __sock_sendmsg+0x221/0x270 [ 83.398590][ T6627] ____sys_sendmsg+0x52a/0x7e0 [ 83.403370][ T6627] ? __pfx_____sys_sendmsg+0x10/0x10 [ 83.408668][ T6627] __sys_sendmsg+0x292/0x380 [ 83.413275][ T6627] ? __pfx___sys_sendmsg+0x10/0x10 [ 83.418396][ T6627] ? __pfx_vfs_write+0x10/0x10 [ 83.423182][ T6627] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 83.429518][ T6627] ? do_syscall_64+0x100/0x230 [ 83.434295][ T6627] ? do_syscall_64+0xb6/0x230 [ 83.438970][ T6627] do_syscall_64+0xf3/0x230 [ 83.443469][ T6627] ? clear_bhb_loop+0x35/0x90 [ 83.448145][ T6627] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 83.454040][ T6627] RIP: 0033:0x7fcc0997dff9 [ 83.458456][ T6627] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 83.478148][ T6627] RSP: 002b:00007fcc0a82b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 83.486562][ T6627] RAX: ffffffffffffffda RBX: 00007fcc09b35f80 RCX: 00007fcc0997dff9 [ 83.494534][ T6627] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 83.502502][ T6627] RBP: 00007fcc0a82b090 R08: 0000000000000000 R09: 0000000000000000 [ 83.510472][ T6627] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 83.518464][ T6627] R13: 0000000000000000 R14: 00007fcc09b35f80 R15: 00007ffe375bfed8 [ 83.526468][ T6627] [ 83.614140][ T6638] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 83.664123][ T6639] vti0: entered allmulticast mode [ 84.254643][ T6652] Cannot find set identified by id 0 to match [ 84.627622][ T6668] FAULT_INJECTION: forcing a failure. [ 84.627622][ T6668] name failslab, interval 1, probability 0, space 0, times 0 [ 84.659095][ T6668] CPU: 1 UID: 0 PID: 6668 Comm: syz.1.397 Not tainted 6.12.0-rc2-syzkaller-00245-g11d06f0aaef8 #0 [ 84.669734][ T6668] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 84.679814][ T6668] Call Trace: [ 84.683105][ T6668] [ 84.686047][ T6668] dump_stack_lvl+0x241/0x360 [ 84.690749][ T6668] ? __pfx_dump_stack_lvl+0x10/0x10 [ 84.695967][ T6668] ? __pfx__printk+0x10/0x10 [ 84.700586][ T6668] ? ref_tracker_alloc+0x332/0x490 [ 84.705717][ T6668] should_fail_ex+0x3b0/0x4e0 [ 84.710425][ T6668] ? skb_clone+0x20c/0x390 [ 84.714859][ T6668] should_failslab+0xac/0x100 [ 84.719556][ T6668] ? skb_clone+0x20c/0x390 [ 84.723987][ T6668] kmem_cache_alloc_noprof+0x6c/0x2a0 [ 84.729388][ T6668] skb_clone+0x20c/0x390 [ 84.733659][ T6668] __netlink_deliver_tap+0x3cc/0x7c0 [ 84.738971][ T6668] ? netlink_deliver_tap+0x2e/0x1b0 [ 84.744199][ T6668] netlink_deliver_tap+0x19d/0x1b0 [ 84.749338][ T6668] netlink_unicast+0x7c4/0x990 [ 84.754131][ T6668] ? __pfx_netlink_unicast+0x10/0x10 [ 84.759433][ T6668] ? __virt_addr_valid+0x183/0x530 [ 84.764566][ T6668] ? __check_object_size+0x48e/0x900 [ 84.769873][ T6668] netlink_sendmsg+0x8e4/0xcb0 [ 84.774664][ T6668] ? __pfx_netlink_sendmsg+0x10/0x10 [ 84.779970][ T6668] ? aa_sock_msg_perm+0x91/0x160 [ 84.784930][ T6668] ? __pfx_netlink_sendmsg+0x10/0x10 [ 84.790228][ T6668] __sock_sendmsg+0x221/0x270 [ 84.794928][ T6668] ____sys_sendmsg+0x52a/0x7e0 [ 84.799721][ T6668] ? __pfx_____sys_sendmsg+0x10/0x10 [ 84.805047][ T6668] __sys_sendmsg+0x292/0x380 [ 84.809659][ T6668] ? __pfx___sys_sendmsg+0x10/0x10 [ 84.814802][ T6668] ? __pfx_vfs_write+0x10/0x10 [ 84.819611][ T6668] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 84.825965][ T6668] ? do_syscall_64+0x100/0x230 [ 84.830745][ T6668] ? do_syscall_64+0xb6/0x230 [ 84.835451][ T6668] do_syscall_64+0xf3/0x230 [ 84.839972][ T6668] ? clear_bhb_loop+0x35/0x90 [ 84.844680][ T6668] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 84.850612][ T6668] RIP: 0033:0x7fcc0997dff9 [ 84.855052][ T6668] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 84.874676][ T6668] RSP: 002b:00007fcc0a82b038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 84.883118][ T6668] RAX: ffffffffffffffda RBX: 00007fcc09b35f80 RCX: 00007fcc0997dff9 [ 84.891110][ T6668] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 84.899096][ T6668] RBP: 00007fcc0a82b090 R08: 0000000000000000 R09: 0000000000000000 [ 84.907081][ T6668] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 84.915067][ T6668] R13: 0000000000000000 R14: 00007fcc09b35f80 R15: 00007ffe375bfed8 [ 84.923081][ T6668] [ 85.682426][ T6687] __nla_validate_parse: 3 callbacks suppressed [ 85.682445][ T6687] netlink: 128 bytes leftover after parsing attributes in process `syz.4.405'. [ 85.764971][ T6688] netlink: 24 bytes leftover after parsing attributes in process `syz.1.401'. [ 85.937884][ T6696] xt_CT: You must specify a L4 protocol and not use inversions on it [ 86.003117][ T6698] netlink: 'syz.0.406': attribute type 1 has an invalid length. [ 86.011090][ T6698] netlink: 112860 bytes leftover after parsing attributes in process `syz.0.406'. [ 86.021967][ T6698] netlink: 'syz.0.406': attribute type 8 has an invalid length. [ 86.089818][ T6708] FAULT_INJECTION: forcing a failure. [ 86.089818][ T6708] name failslab, interval 1, probability 0, space 0, times 0 [ 86.101065][ T6714] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.412'. [ 86.123176][ T6714] net_ratelimit: 67 callbacks suppressed [ 86.123192][ T6714] openvswitch: netlink: Tunnel attr 0 has unexpected len 2 expected 8 [ 86.131173][ T6708] CPU: 1 UID: 0 PID: 6708 Comm: syz.2.410 Not tainted 6.12.0-rc2-syzkaller-00245-g11d06f0aaef8 #0 [ 86.147771][ T6708] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 86.157827][ T6708] Call Trace: [ 86.161103][ T6708] [ 86.164036][ T6708] dump_stack_lvl+0x241/0x360 [ 86.168743][ T6708] ? __pfx_dump_stack_lvl+0x10/0x10 [ 86.173947][ T6708] ? __pfx__printk+0x10/0x10 [ 86.178544][ T6708] ? __kmalloc_cache_noprof+0x44/0x2c0 [ 86.184005][ T6708] ? __pfx___might_resched+0x10/0x10 [ 86.189292][ T6708] ? netlink_unicast+0x7c4/0x990 [ 86.194233][ T6708] should_fail_ex+0x3b0/0x4e0 [ 86.198917][ T6708] should_failslab+0xac/0x100 [ 86.203594][ T6708] ? rtnl_newlink+0xf2/0x20a0 [ 86.208273][ T6708] __kmalloc_cache_noprof+0x6c/0x2c0 [ 86.213589][ T6708] rtnl_newlink+0xf2/0x20a0 [ 86.218107][ T6708] ? __mutex_trylock_common+0x183/0x2e0 [ 86.223656][ T6708] ? __pfx___might_resched+0x10/0x10 [ 86.228940][ T6708] ? __pfx_rtnl_newlink+0x10/0x10 [ 86.233958][ T6708] ? __pfx___mutex_trylock_common+0x10/0x10 [ 86.239848][ T6708] ? rcu_is_watching+0x15/0xb0 [ 86.244614][ T6708] ? trace_contention_end+0x3c/0x120 [ 86.249896][ T6708] ? __mutex_lock+0x2ef/0xd70 [ 86.254584][ T6708] ? rcu_read_unlock+0x87/0xa0 [ 86.259343][ T6708] ? __dev_queue_xmit+0x171d/0x3ed0 [ 86.264538][ T6708] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 86.269649][ T6708] ? __pfx_lock_release+0x10/0x10 [ 86.274681][ T6708] ? __pfx___mutex_lock+0x10/0x10 [ 86.279722][ T6708] ? __pfx_rtnl_newlink+0x10/0x10 [ 86.284752][ T6708] rtnetlink_rcv_msg+0x73f/0xcf0 [ 86.289693][ T6708] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 86.294806][ T6708] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 86.300267][ T6708] ? ref_tracker_free+0x643/0x7e0 [ 86.305303][ T6708] netlink_rcv_skb+0x1e3/0x430 [ 86.310068][ T6708] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 86.315527][ T6708] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 86.320829][ T6708] ? netlink_deliver_tap+0x2e/0x1b0 [ 86.326029][ T6708] netlink_unicast+0x7f6/0x990 [ 86.330796][ T6708] ? __pfx_netlink_unicast+0x10/0x10 [ 86.336094][ T6708] ? __virt_addr_valid+0x183/0x530 [ 86.341215][ T6708] ? __check_object_size+0x48e/0x900 [ 86.346511][ T6708] netlink_sendmsg+0x8e4/0xcb0 [ 86.351312][ T6708] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.356608][ T6708] ? aa_sock_msg_perm+0x91/0x160 [ 86.361550][ T6708] ? __pfx_netlink_sendmsg+0x10/0x10 [ 86.366832][ T6708] __sock_sendmsg+0x221/0x270 [ 86.371527][ T6708] ____sys_sendmsg+0x52a/0x7e0 [ 86.376309][ T6708] ? __pfx_____sys_sendmsg+0x10/0x10 [ 86.381610][ T6708] __sys_sendmsg+0x292/0x380 [ 86.386198][ T6708] ? __pfx___sys_sendmsg+0x10/0x10 [ 86.391317][ T6708] ? __pfx_vfs_write+0x10/0x10 [ 86.396093][ T6708] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 86.402422][ T6708] ? do_syscall_64+0x100/0x230 [ 86.407184][ T6708] ? do_syscall_64+0xb6/0x230 [ 86.411859][ T6708] do_syscall_64+0xf3/0x230 [ 86.416358][ T6708] ? clear_bhb_loop+0x35/0x90 [ 86.421034][ T6708] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 86.426928][ T6708] RIP: 0033:0x7f125cb7dff9 [ 86.431340][ T6708] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.450940][ T6708] RSP: 002b:00007f125d8b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 86.459351][ T6708] RAX: ffffffffffffffda RBX: 00007f125cd35f80 RCX: 00007f125cb7dff9 [ 86.467320][ T6708] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 86.475303][ T6708] RBP: 00007f125d8b7090 R08: 0000000000000000 R09: 0000000000000000 [ 86.483284][ T6708] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 86.491254][ T6708] R13: 0000000000000000 R14: 00007f125cd35f80 R15: 00007ffe89a6e548 [ 86.499240][ T6708] [ 86.825195][ T6736] netlink: 'syz.2.419': attribute type 29 has an invalid length. [ 86.855023][ T6735] netlink: 56 bytes leftover after parsing attributes in process `syz.1.420'. [ 86.876467][ T6739] netlink: 596 bytes leftover after parsing attributes in process `syz.2.419'. [ 86.897016][ T6738] netlink: 'syz.2.419': attribute type 29 has an invalid length. [ 86.908401][ T6740] netlink: 144316 bytes leftover after parsing attributes in process `syz.3.421'. [ 86.920886][ T6740] netlink: 'syz.3.421': attribute type 2 has an invalid length. [ 86.929675][ T6740] tipc: Started in network mode [ 86.935919][ T6740] tipc: Node identity a, cluster identity 4711 [ 86.946603][ T6740] tipc: Node number set to 10 [ 87.028278][ T6748] netlink: 'syz.0.423': attribute type 3 has an invalid length. [ 87.155490][ T6753] netlink: 8 bytes leftover after parsing attributes in process `syz.3.425'. [ 87.200775][ T6753] FAULT_INJECTION: forcing a failure. [ 87.200775][ T6753] name failslab, interval 1, probability 0, space 0, times 0 [ 87.225940][ T6756] netlink: 'syz.1.426': attribute type 1 has an invalid length. [ 87.244811][ T6753] CPU: 0 UID: 0 PID: 6753 Comm: syz.3.425 Not tainted 6.12.0-rc2-syzkaller-00245-g11d06f0aaef8 #0 [ 87.248873][ T6756] netlink: 224 bytes leftover after parsing attributes in process `syz.1.426'. [ 87.255449][ T6753] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 87.274472][ T6753] Call Trace: [ 87.277780][ T6753] [ 87.280733][ T6753] dump_stack_lvl+0x241/0x360 [ 87.285445][ T6753] ? __pfx_dump_stack_lvl+0x10/0x10 [ 87.290678][ T6753] ? __pfx__printk+0x10/0x10 [ 87.295311][ T6753] ? __kmalloc_node_noprof+0xb7/0x440 [ 87.300724][ T6753] ? __pfx___might_resched+0x10/0x10 [ 87.306049][ T6753] should_fail_ex+0x3b0/0x4e0 [ 87.310764][ T6753] should_failslab+0xac/0x100 [ 87.315474][ T6753] __kmalloc_node_noprof+0xdf/0x440 [ 87.320710][ T6753] ? __kvmalloc_node_noprof+0x72/0x190 [ 87.326206][ T6753] ? __pfx_macvlan_setup+0x10/0x10 [ 87.331350][ T6753] __kvmalloc_node_noprof+0x72/0x190 [ 87.336699][ T6753] alloc_netdev_mqs+0x9b/0x1000 [ 87.341579][ T6753] ? __pfx_macvlan_setup+0x10/0x10 [ 87.346720][ T6753] ? bpf_lsm_capable+0x9/0x10 [ 87.351428][ T6753] rtnl_create_link+0x2f9/0xc20 [ 87.356304][ T6753] rtnl_newlink+0x1423/0x20a0 [ 87.360983][ T6753] ? rtnl_newlink+0xae1/0x20a0 [ 87.365761][ T6753] ? __pfx_rtnl_newlink+0x10/0x10 [ 87.370789][ T6753] ? __pfx___mutex_trylock_common+0x10/0x10 [ 87.376692][ T6753] ? rcu_is_watching+0x15/0xb0 [ 87.381458][ T6753] ? trace_contention_end+0x3c/0x120 [ 87.386747][ T6753] ? __mutex_lock+0x2ef/0xd70 [ 87.391435][ T6753] ? __pfx_lock_release+0x10/0x10 [ 87.396471][ T6753] ? __pfx_rtnl_newlink+0x10/0x10 [ 87.401496][ T6753] rtnetlink_rcv_msg+0x73f/0xcf0 [ 87.406438][ T6753] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 87.411554][ T6753] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 87.417029][ T6753] ? ref_tracker_free+0x643/0x7e0 [ 87.422056][ T6753] netlink_rcv_skb+0x1e3/0x430 [ 87.426834][ T6753] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 87.432291][ T6753] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 87.437593][ T6753] ? netlink_deliver_tap+0x2e/0x1b0 [ 87.442794][ T6753] netlink_unicast+0x7f6/0x990 [ 87.447565][ T6753] ? __pfx_netlink_unicast+0x10/0x10 [ 87.452845][ T6753] ? __virt_addr_valid+0x183/0x530 [ 87.457954][ T6753] ? __check_object_size+0x48e/0x900 [ 87.463239][ T6753] netlink_sendmsg+0x8e4/0xcb0 [ 87.468006][ T6753] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.473288][ T6753] ? aa_sock_msg_perm+0x91/0x160 [ 87.478225][ T6753] ? __pfx_netlink_sendmsg+0x10/0x10 [ 87.483502][ T6753] __sock_sendmsg+0x221/0x270 [ 87.488194][ T6753] ____sys_sendmsg+0x52a/0x7e0 [ 87.492961][ T6753] ? __pfx_____sys_sendmsg+0x10/0x10 [ 87.498258][ T6753] __sys_sendmsg+0x292/0x380 [ 87.502849][ T6753] ? __pfx___sys_sendmsg+0x10/0x10 [ 87.507970][ T6753] ? __pfx_vfs_write+0x10/0x10 [ 87.512751][ T6753] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 87.519084][ T6753] ? do_syscall_64+0x100/0x230 [ 87.523844][ T6753] ? do_syscall_64+0xb6/0x230 [ 87.528519][ T6753] do_syscall_64+0xf3/0x230 [ 87.533019][ T6753] ? clear_bhb_loop+0x35/0x90 [ 87.537695][ T6753] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 87.543591][ T6753] RIP: 0033:0x7f3c0157dff9 [ 87.548005][ T6753] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.567621][ T6753] RSP: 002b:00007f3c022c1038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 87.576044][ T6753] RAX: ffffffffffffffda RBX: 00007f3c01735f80 RCX: 00007f3c0157dff9 [ 87.584017][ T6753] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 87.591997][ T6753] RBP: 00007f3c022c1090 R08: 0000000000000000 R09: 0000000000000000 [ 87.599974][ T6753] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 87.607946][ T6753] R13: 0000000000000000 R14: 00007f3c01735f80 R15: 00007ffdc218ca78 [ 87.615929][ T6753] [ 87.658077][ T6764] netlink: 108 bytes leftover after parsing attributes in process `syz.2.429'. [ 87.772174][ T6770] netlink: 'syz.0.434': attribute type 1 has an invalid length. [ 87.833564][ T6772] tap0: tun_chr_ioctl cmd 1074812118 [ 88.001506][ T6787] tipc: Invalid UDP bearer configuration [ 88.001546][ T6787] tipc: Enabling of bearer rejected, failed to enable media [ 88.354910][ T6809] FAULT_INJECTION: forcing a failure. [ 88.354910][ T6809] name failslab, interval 1, probability 0, space 0, times 0 [ 88.409100][ T6809] CPU: 1 UID: 0 PID: 6809 Comm: syz.2.442 Not tainted 6.12.0-rc2-syzkaller-00245-g11d06f0aaef8 #0 [ 88.419746][ T6809] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 88.429843][ T6809] Call Trace: [ 88.433142][ T6809] [ 88.436099][ T6809] dump_stack_lvl+0x241/0x360 [ 88.440807][ T6809] ? __pfx_dump_stack_lvl+0x10/0x10 [ 88.446021][ T6809] ? __pfx__printk+0x10/0x10 [ 88.450633][ T6809] should_fail_ex+0x3b0/0x4e0 [ 88.455326][ T6809] should_failslab+0xac/0x100 [ 88.459999][ T6809] ? __hw_addr_add_ex+0x1a8/0x610 [ 88.465024][ T6809] __kmalloc_cache_noprof+0x6c/0x2c0 [ 88.470304][ T6809] __hw_addr_add_ex+0x1a8/0x610 [ 88.475153][ T6809] dev_addr_init+0x143/0x230 [ 88.479742][ T6809] ? __pfx_dev_addr_init+0x10/0x10 [ 88.484854][ T6809] alloc_netdev_mqs+0x2a1/0x1000 [ 88.489788][ T6809] ? __pfx_macvlan_setup+0x10/0x10 [ 88.494896][ T6809] rtnl_create_link+0x2f9/0xc20 [ 88.499741][ T6809] rtnl_newlink+0x1423/0x20a0 [ 88.504419][ T6809] ? rtnl_newlink+0xae1/0x20a0 [ 88.509231][ T6809] ? __pfx_rtnl_newlink+0x10/0x10 [ 88.514308][ T6809] ? __pfx___mutex_trylock_common+0x10/0x10 [ 88.520219][ T6809] ? rcu_is_watching+0x15/0xb0 [ 88.524990][ T6809] ? trace_contention_end+0x3c/0x120 [ 88.530290][ T6809] ? __mutex_lock+0x2ef/0xd70 [ 88.534982][ T6809] ? __pfx_lock_release+0x10/0x10 [ 88.540015][ T6809] ? __pfx_rtnl_newlink+0x10/0x10 [ 88.545035][ T6809] rtnetlink_rcv_msg+0x73f/0xcf0 [ 88.549984][ T6809] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 88.555111][ T6809] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 88.560582][ T6809] ? ref_tracker_free+0x643/0x7e0 [ 88.565959][ T6809] netlink_rcv_skb+0x1e3/0x430 [ 88.570724][ T6809] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 88.576195][ T6809] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 88.581486][ T6809] ? netlink_deliver_tap+0x2e/0x1b0 [ 88.586687][ T6809] netlink_unicast+0x7f6/0x990 [ 88.591470][ T6809] ? __pfx_netlink_unicast+0x10/0x10 [ 88.596754][ T6809] ? __virt_addr_valid+0x183/0x530 [ 88.601878][ T6809] ? __check_object_size+0x48e/0x900 [ 88.607159][ T6809] netlink_sendmsg+0x8e4/0xcb0 [ 88.611916][ T6809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.617196][ T6809] ? aa_sock_msg_perm+0x91/0x160 [ 88.622134][ T6809] ? __pfx_netlink_sendmsg+0x10/0x10 [ 88.627407][ T6809] __sock_sendmsg+0x221/0x270 [ 88.632089][ T6809] ____sys_sendmsg+0x52a/0x7e0 [ 88.636863][ T6809] ? __pfx_____sys_sendmsg+0x10/0x10 [ 88.642169][ T6809] __sys_sendmsg+0x292/0x380 [ 88.646764][ T6809] ? __pfx___sys_sendmsg+0x10/0x10 [ 88.651891][ T6809] ? __pfx_vfs_write+0x10/0x10 [ 88.656656][ T6809] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 88.662990][ T6809] ? do_syscall_64+0x100/0x230 [ 88.667747][ T6809] ? do_syscall_64+0xb6/0x230 [ 88.672413][ T6809] do_syscall_64+0xf3/0x230 [ 88.676915][ T6809] ? clear_bhb_loop+0x35/0x90 [ 88.681600][ T6809] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 88.687489][ T6809] RIP: 0033:0x7f125cb7dff9 [ 88.691894][ T6809] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 88.711503][ T6809] RSP: 002b:00007f125d8b7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 88.719930][ T6809] RAX: ffffffffffffffda RBX: 00007f125cd35f80 RCX: 00007f125cb7dff9 [ 88.727896][ T6809] RDX: 0000000000000000 RSI: 00000000200002c0 RDI: 0000000000000003 [ 88.735862][ T6809] RBP: 00007f125d8b7090 R08: 0000000000000000 R09: 0000000000000000 [ 88.743835][ T6809] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 88.751799][ T6809] R13: 0000000000000000 R14: 00007f125cd35f80 R15: 00007ffe89a6e548 [ 88.759771][ T6809] [ 88.897163][ T6828] netlink: 'syz.2.447': attribute type 1 has an invalid length. [ 89.171780][ T6846] netlink: 'syz.1.453': attribute type 1 has an invalid length. [ 89.202103][ T6846] netlink: 'syz.1.453': attribute type 2 has an invalid length. [ 89.294721][ T8] IPVS: starting estimator thread 0... [ 89.417561][ T6853] IPVS: using max 19 ests per chain, 45600 per kthread [ 89.552421][ T6867] openvswitch: netlink: Actions may not be safe on all matching packets [ 90.070416][ T6905] ================================================================== [ 90.078529][ T6905] BUG: KASAN: slab-use-after-free in hci_sock_get_cookie+0x49/0x50 [ 90.086448][ T6905] Read of size 4 at addr ffff88801eaa65b8 by task syz.2.471/6905 [ 90.094174][ T6905] [ 90.096513][ T6905] CPU: 1 UID: 0 PID: 6905 Comm: syz.2.471 Not tainted 6.12.0-rc2-syzkaller-00245-g11d06f0aaef8 #0 [ 90.103918][ T6910] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 90.107091][ T6905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 90.107105][ T6905] Call Trace: [ 90.107112][ T6905] [ 90.107120][ T6905] dump_stack_lvl+0x241/0x360 [ 90.107145][ T6905] ? __pfx_dump_stack_lvl+0x10/0x10 [ 90.107163][ T6905] ? __pfx__printk+0x10/0x10 [ 90.107187][ T6905] ? _printk+0xd5/0x120 [ 90.151643][ T6905] ? __virt_addr_valid+0x183/0x530 [ 90.156759][ T6905] ? __virt_addr_valid+0x183/0x530 [ 90.161876][ T6905] print_report+0x169/0x550 [ 90.166374][ T6905] ? __virt_addr_valid+0x183/0x530 [ 90.171479][ T6905] ? __virt_addr_valid+0x183/0x530 [ 90.176584][ T6905] ? __virt_addr_valid+0x45f/0x530 [ 90.181686][ T6905] ? __phys_addr+0xba/0x170 [ 90.186178][ T6905] ? hci_sock_get_cookie+0x49/0x50 [ 90.191283][ T6905] kasan_report+0x143/0x180 [ 90.195780][ T6905] ? hci_sock_get_cookie+0x49/0x50 [ 90.200885][ T6905] hci_sock_get_cookie+0x49/0x50 [ 90.205828][ T6905] mgmt_cmd_status+0x1be/0x4d0 [ 90.210585][ T6905] cmd_complete_rsp+0x114/0x180 [ 90.215433][ T6905] mgmt_pending_foreach+0xd1/0x130 [ 90.220536][ T6905] ? __pfx_cmd_complete_rsp+0x10/0x10 [ 90.225901][ T6905] __mgmt_power_off+0x183/0x430 [ 90.230744][ T6905] ? __pfx___mgmt_power_off+0x10/0x10 [ 90.236302][ T6905] ? __mutex_trylock_common+0x183/0x2e0 [ 90.241841][ T6905] ? __pfx___might_resched+0x10/0x10 [ 90.247121][ T6905] ? __pfx___mutex_trylock_common+0x10/0x10 [ 90.253010][ T6905] ? rcu_is_watching+0x15/0xb0 [ 90.257764][ T6905] ? trace_contention_end+0x3c/0x120 [ 90.263041][ T6905] ? __mutex_lock+0x2ef/0xd70 [ 90.267716][ T6905] ? __mutex_unlock_slowpath+0x21d/0x750 [ 90.273339][ T6905] ? hci_dev_close_sync+0x572/0x11a0 [ 90.278617][ T6905] ? __pfx___mutex_lock+0x10/0x10 [ 90.283633][ T6905] ? lockdep_hardirqs_on+0x99/0x150 [ 90.288831][ T6905] ? _raw_spin_unlock_irq+0x2e/0x50 [ 90.294027][ T6905] ? drain_workqueue+0x2d3/0x3a0 [ 90.298955][ T6905] ? hci_discovery_set_state+0x57/0x180 [ 90.304504][ T6905] hci_dev_close_sync+0x665/0x11a0 [ 90.309611][ T6905] hci_dev_close+0x112/0x210 [ 90.314189][ T6905] sock_do_ioctl+0x158/0x460 [ 90.318776][ T6905] ? __pfx_sock_do_ioctl+0x10/0x10 [ 90.323884][ T6905] sock_ioctl+0x626/0x8e0 [ 90.328205][ T6905] ? __pfx_sock_ioctl+0x10/0x10 [ 90.333045][ T6905] ? __fget_files+0x29/0x470 [ 90.337624][ T6905] ? __fget_files+0x3f3/0x470 [ 90.342293][ T6905] ? __pfx_sock_ioctl+0x10/0x10 [ 90.347139][ T6905] __se_sys_ioctl+0xf9/0x170 [ 90.351723][ T6905] do_syscall_64+0xf3/0x230 [ 90.356227][ T6905] ? clear_bhb_loop+0x35/0x90 [ 90.360900][ T6905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.366808][ T6905] RIP: 0033:0x7f125cb7dff9 [ 90.371217][ T6905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 90.390819][ T6905] RSP: 002b:00007f125d8b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 90.399225][ T6905] RAX: ffffffffffffffda RBX: 00007f125cd35f80 RCX: 00007f125cb7dff9 [ 90.407191][ T6905] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000004 [ 90.415154][ T6905] RBP: 00007f125cbf0296 R08: 0000000000000000 R09: 0000000000000000 [ 90.423113][ T6905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.431074][ T6905] R13: 0000000000000000 R14: 00007f125cd35f80 R15: 00007ffe89a6e548 [ 90.439044][ T6905] [ 90.442056][ T6905] [ 90.444370][ T6905] Allocated by task 5341: [ 90.448685][ T6905] kasan_save_track+0x3f/0x80 [ 90.453353][ T6905] __kasan_kmalloc+0x98/0xb0 [ 90.457934][ T6905] __kmalloc_noprof+0x1fc/0x400 [ 90.462774][ T6905] sk_prot_alloc+0xe0/0x210 [ 90.467266][ T6905] sk_alloc+0x38/0x370 [ 90.471326][ T6905] bt_sock_alloc+0x3c/0x340 [ 90.475830][ T6905] hci_sock_create+0xa1/0x190 [ 90.480501][ T6905] bt_sock_create+0x161/0x230 [ 90.485257][ T6905] __sock_create+0x490/0x940 [ 90.489837][ T6905] __sys_socket+0x150/0x3c0 [ 90.494350][ T6905] __x64_sys_socket+0x7a/0x90 [ 90.499037][ T6905] do_syscall_64+0xf3/0x230 [ 90.503538][ T6905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.509433][ T6905] [ 90.511748][ T6905] Freed by task 6906: [ 90.515719][ T6905] kasan_save_track+0x3f/0x80 [ 90.520387][ T6905] kasan_save_free_info+0x40/0x50 [ 90.525409][ T6905] __kasan_slab_free+0x59/0x70 [ 90.530166][ T6905] kfree+0x1a0/0x440 [ 90.534051][ T6905] __sk_destruct+0x479/0x5f0 [ 90.538632][ T6905] mgmt_pending_remove+0x13e/0x1a0 [ 90.543737][ T6905] mgmt_pending_foreach+0xd1/0x130 [ 90.548840][ T6905] mgmt_index_removed+0x133/0x390 [ 90.553866][ T6905] hci_sock_bind+0xcce/0x1150 [ 90.558551][ T6905] __sys_bind+0x22d/0x2d0 [ 90.562886][ T6905] __x64_sys_bind+0x7a/0x90 [ 90.567393][ T6905] do_syscall_64+0xf3/0x230 [ 90.571890][ T6905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.577800][ T6905] [ 90.580113][ T6905] The buggy address belongs to the object at ffff88801eaa6000 [ 90.580113][ T6905] which belongs to the cache kmalloc-2k of size 2048 [ 90.594159][ T6905] The buggy address is located 1464 bytes inside of [ 90.594159][ T6905] freed 2048-byte region [ffff88801eaa6000, ffff88801eaa6800) [ 90.608120][ T6905] [ 90.610443][ T6905] The buggy address belongs to the physical page: [ 90.616838][ T6905] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0xffff88801eaa0000 pfn:0x1eaa0 [ 90.626906][ T6905] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 90.635408][ T6905] flags: 0xfff00000000240(workingset|head|node=0|zone=1|lastcpupid=0x7ff) [ 90.643921][ T6905] page_type: f5(slab) [ 90.647905][ T6905] raw: 00fff00000000240 ffff88801ac42000 ffffea000175c410 ffffea0000b67410 [ 90.656480][ T6905] raw: ffff88801eaa0000 0000000000080004 00000001f5000000 0000000000000000 [ 90.665056][ T6905] head: 00fff00000000240 ffff88801ac42000 ffffea000175c410 ffffea0000b67410 [ 90.673719][ T6905] head: ffff88801eaa0000 0000000000080004 00000001f5000000 0000000000000000 [ 90.682384][ T6905] head: 00fff00000000003 ffffea00007aa801 ffffffffffffffff 0000000000000000 [ 90.691046][ T6905] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 90.699700][ T6905] page dumped because: kasan: bad access detected [ 90.706108][ T6905] page_owner tracks the page as allocated [ 90.711807][ T6905] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd20c0(__GFP_IO|__GFP_FS|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 4676, tgid 4676 (klogd), ts 60673892555, free_ts 60633359320 [ 90.732562][ T6905] post_alloc_hook+0x1f3/0x230 [ 90.737334][ T6905] get_page_from_freelist+0x3045/0x3190 [ 90.742873][ T6905] __alloc_pages_noprof+0x292/0x710 [ 90.748089][ T6905] alloc_pages_mpol_noprof+0x3e8/0x680 [ 90.753540][ T6905] alloc_slab_page+0x6a/0x120 [ 90.758219][ T6905] allocate_slab+0x5a/0x2f0 [ 90.763252][ T6905] ___slab_alloc+0xcd1/0x14b0 [ 90.767932][ T6905] __slab_alloc+0x58/0xa0 [ 90.772255][ T6905] __kmalloc_cache_noprof+0x1d5/0x2c0 [ 90.777616][ T6905] syslog_print+0x121/0x9c0 [ 90.782117][ T6905] do_syslog+0x3bb/0x810 [ 90.786354][ T6905] __x64_sys_syslog+0x7c/0x90 [ 90.791020][ T6905] do_syscall_64+0xf3/0x230 [ 90.795510][ T6905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.801396][ T6905] page last free pid 5336 tgid 5335 stack trace: [ 90.807706][ T6905] free_unref_page+0xcfb/0xf20 [ 90.812466][ T6905] __put_partials+0xeb/0x130 [ 90.817053][ T6905] put_cpu_partial+0x17c/0x250 [ 90.821806][ T6905] __slab_free+0x2ea/0x3d0 [ 90.826207][ T6905] qlist_free_all+0x9a/0x140 [ 90.830783][ T6905] kasan_quarantine_reduce+0x14f/0x170 [ 90.836229][ T6905] __kasan_slab_alloc+0x23/0x80 [ 90.841067][ T6905] __kmalloc_noprof+0x1a6/0x400 [ 90.845912][ T6905] tomoyo_realpath_from_path+0xcf/0x5e0 [ 90.851452][ T6905] tomoyo_path_number_perm+0x23a/0x880 [ 90.856903][ T6905] security_file_ioctl+0xc6/0x2a0 [ 90.861927][ T6905] __se_sys_ioctl+0x47/0x170 [ 90.866510][ T6905] do_syscall_64+0xf3/0x230 [ 90.871001][ T6905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 90.876890][ T6905] [ 90.879207][ T6905] Memory state around the buggy address: [ 90.884826][ T6905] ffff88801eaa6480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 90.892874][ T6905] ffff88801eaa6500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 90.900931][ T6905] >ffff88801eaa6580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 90.908974][ T6905] ^ [ 90.914853][ T6905] ffff88801eaa6600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=-1 (errno 104: Connection reset by peer) [ 90.922906][ T6905] ffff88801eaa6680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 90.930950][ T6905] ================================================================== [ 90.986123][ T6903] bond0: (slave bond_slave_0): Releasing backup interface [ 90.996840][ T6905] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 91.004062][ T6905] CPU: 0 UID: 0 PID: 6905 Comm: syz.2.471 Not tainted 6.12.0-rc2-syzkaller-00245-g11d06f0aaef8 #0 [ 91.014647][ T6905] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 91.024720][ T6905] Call Trace: [ 91.028011][ T6905] [ 91.030952][ T6905] dump_stack_lvl+0x241/0x360 [ 91.035641][ T6905] ? __pfx_dump_stack_lvl+0x10/0x10 [ 91.040873][ T6905] ? __pfx__printk+0x10/0x10 [ 91.045486][ T6905] ? preempt_schedule+0xe1/0xf0 [ 91.050362][ T6905] ? vscnprintf+0x5d/0x90 [ 91.054714][ T6905] panic+0x349/0x880 [ 91.058632][ T6905] ? check_panic_on_warn+0x21/0xb0 [ 91.063760][ T6905] ? __pfx_panic+0x10/0x10 [ 91.068203][ T6905] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 91.074205][ T6905] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 91.080553][ T6905] ? print_report+0x502/0x550 [ 91.085253][ T6905] check_panic_on_warn+0x86/0xb0 [ 91.090203][ T6905] ? hci_sock_get_cookie+0x49/0x50 [ 91.095332][ T6905] end_report+0x77/0x160 [ 91.099591][ T6905] kasan_report+0x154/0x180 [ 91.104122][ T6905] ? hci_sock_get_cookie+0x49/0x50 [ 91.109262][ T6905] hci_sock_get_cookie+0x49/0x50 [ 91.114222][ T6905] mgmt_cmd_status+0x1be/0x4d0 [ 91.119003][ T6905] cmd_complete_rsp+0x114/0x180 [ 91.123856][ T6905] mgmt_pending_foreach+0xd1/0x130 [ 91.128965][ T6905] ? __pfx_cmd_complete_rsp+0x10/0x10 [ 91.134334][ T6905] __mgmt_power_off+0x183/0x430 [ 91.139173][ T6905] ? __pfx___mgmt_power_off+0x10/0x10 [ 91.144539][ T6905] ? __mutex_trylock_common+0x183/0x2e0 [ 91.150079][ T6905] ? __pfx___might_resched+0x10/0x10 [ 91.155359][ T6905] ? __pfx___mutex_trylock_common+0x10/0x10 [ 91.161247][ T6905] ? rcu_is_watching+0x15/0xb0 [ 91.166005][ T6905] ? trace_contention_end+0x3c/0x120 [ 91.171283][ T6905] ? __mutex_lock+0x2ef/0xd70 [ 91.175949][ T6905] ? __mutex_unlock_slowpath+0x21d/0x750 [ 91.181574][ T6905] ? hci_dev_close_sync+0x572/0x11a0 [ 91.186859][ T6905] ? __pfx___mutex_lock+0x10/0x10 [ 91.191878][ T6905] ? lockdep_hardirqs_on+0x99/0x150 [ 91.197078][ T6905] ? _raw_spin_unlock_irq+0x2e/0x50 [ 91.202275][ T6905] ? drain_workqueue+0x2d3/0x3a0 [ 91.207204][ T6905] ? hci_discovery_set_state+0x57/0x180 [ 91.212747][ T6905] hci_dev_close_sync+0x665/0x11a0 [ 91.217857][ T6905] hci_dev_close+0x112/0x210 [ 91.222438][ T6905] sock_do_ioctl+0x158/0x460 [ 91.227027][ T6905] ? __pfx_sock_do_ioctl+0x10/0x10 [ 91.232146][ T6905] sock_ioctl+0x626/0x8e0 [ 91.236467][ T6905] ? __pfx_sock_ioctl+0x10/0x10 [ 91.241313][ T6905] ? __fget_files+0x29/0x470 [ 91.245897][ T6905] ? __fget_files+0x3f3/0x470 [ 91.250570][ T6905] ? __pfx_sock_ioctl+0x10/0x10 [ 91.255413][ T6905] __se_sys_ioctl+0xf9/0x170 [ 91.260000][ T6905] do_syscall_64+0xf3/0x230 [ 91.264494][ T6905] ? clear_bhb_loop+0x35/0x90 [ 91.269162][ T6905] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 91.275052][ T6905] RIP: 0033:0x7f125cb7dff9 [ 91.279458][ T6905] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 91.299054][ T6905] RSP: 002b:00007f125d8b7038 EFLAGS: 00000246 ORIG_RAX: 0000000000000010 [ 91.307460][ T6905] RAX: ffffffffffffffda RBX: 00007f125cd35f80 RCX: 00007f125cb7dff9 [ 91.315424][ T6905] RDX: 0000000000000000 RSI: 00000000400448ca RDI: 0000000000000004 [ 91.323384][ T6905] RBP: 00007f125cbf0296 R08: 0000000000000000 R09: 0000000000000000 [ 91.331361][ T6905] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 91.339333][ T6905] R13: 0000000000000000 R14: 00007f125cd35f80 R15: 00007ffe89a6e548 [ 91.347309][ T6905] [ 91.350609][ T6905] Kernel Offset: disabled [ 91.354930][ T6905] Rebooting in 86400 seconds..