last executing test programs: 4.886498397s ago: executing program 1 (id=76): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) sendmsg$NL80211_CMD_JOIN_IBSS(r0, 0x0, 0x20004800) 4.76165142s ago: executing program 4 (id=78): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="0100080200000018000066000000080003", @ANYRES32=r2, @ANYBLOB="08002600b40900000800b700"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 4.722220461s ago: executing program 1 (id=80): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}, 0x4) 4.566837478s ago: executing program 4 (id=82): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) 4.422771305s ago: executing program 0 (id=85): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r1, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000300)=ANY=[@ANYBLOB="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"], 0x98}}, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r0, &(0x7f00000002c0)={0x2, 0x4e21, @multicast2}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000000)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x3, 0x401}, @window], 0x63) socket$inet6_tcp(0xa, 0x1, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) r2 = socket$kcm(0x10, 0x2, 0x0) ioctl$sock_SIOCGIFVLAN_ADD_VLAN_CMD(r2, 0x8982, &(0x7f0000000400)={0x0, 'batadv0\x00', {0x5}}) r3 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000300)="2e00000011008108090f9becdb4cb92e0a4831371400000069bd6efb2502eaf60d000300020400bf050005001206", 0x2e}], 0x1}, 0x48000) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000580)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00'}, 0x94) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f00000000c0)={0x5, &(0x7f00000003c0)=[{0x15, 0x1, 0x3, 0x6000}, {0x60, 0x8, 0xff}, {}, {0x15, 0x0, 0x0, 0x3}, {0x6, 0x3, 0x0, 0x6a}]}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0xfe, 0x0, &(0x7f0000000100)="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", 0x0, 0xfe, 0x60000000, 0x0, 0x0, 0x0}, 0x50) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x12, 0x0, 0x12) recvfrom$inet(r0, &(0x7f0000000100)=""/24, 0xfffffffffffffd5b, 0xc9100120, 0x0, 0xfffffffffffffd25) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_inet_SIOCSIFFLAGS(r1, 0x8914, 0x0) sendmsg$NFT_BATCH(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000007c0)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000170900010073797a31000000000900030073797a320000000014000000110001"], 0x7c}}, 0x2000c450) sendmsg$NFT_BATCH(r6, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000280)=ANY=[@ANYBLOB="140000001000010000000000000000000300000a58000000060a01041b000000000000000a0000040900020073797a32000000002c000480180001800d00010073796e70726f7879000000000400028010000180090001006d617371000000000900010073797a310000000014000000060a0102000000000000000003000006140000001100010000000000000000000e00000a"], 0x94}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000840) r7 = epoll_create(0x0) epoll_pwait(r7, &(0x7f0000000040)=[{}, {}, {}, {}, {}, {}, {}], 0x7, 0x0, &(0x7f0000000140)={[0x2]}, 0x8) getsockopt$inet_mreqsrc(r7, 0x0, 0x28, &(0x7f0000000500)={@multicast2, @rand_addr, @remote}, &(0x7f0000000540)=0xc) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(0xffffffffffffffff, 0x89f1, 0x0) bpf$MAP_CREATE_TAIL_CALL(0x0, 0x0, 0x0) 4.395594262s ago: executing program 4 (id=86): r0 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_ASSOCIATE(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)={0x1c, r0, 0x1, 0x70bd2b, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000815}, 0x850) 4.257102475s ago: executing program 4 (id=87): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) socket$unix(0x1, 0x5, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r6, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r7) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r8 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r8, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r9, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}, 0x4) 3.116121429s ago: executing program 1 (id=89): socket$nl_xfrm(0x10, 0x3, 0x6) socket$unix(0x1, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x194, 0x24, 0xa00, 0x870bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0x2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3ff}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x8, 0x5, 0x300, 0x5, 0x4, 0x9, 0xe7b, 0x6001}}}}, @TCA_STAB={0x108, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x5, 0x8, 0xf30, 0x3, 0xfffffff8, 0x1, 0x5}}, {0xe, 0x2, [0x1c00, 0x924c, 0x6e16, 0x3, 0x90]}}, {{0x1c, 0x1, {0x5, 0x18, 0x5, 0xfffffffb, 0x0, 0x800, 0x7, 0x5}}, {0xe, 0x2, [0x8, 0x2, 0x5, 0x0, 0xf]}}, {{0x1c, 0x1, {0x4, 0x4, 0x9, 0x4, 0x1, 0x3ff, 0x0, 0x7}}, {0x12, 0x2, [0x99, 0x8, 0x40, 0x741c, 0x3, 0x8, 0x800]}}, {{0x1c, 0x1, {0xff, 0x1, 0x7, 0x0, 0x2, 0x5, 0x2, 0x4}}, {0xc, 0x2, [0x8000, 0x1, 0x3, 0x4100]}}, {{0x1c, 0x1, {0x9, 0xf6, 0x68b2, 0xd, 0x2, 0x2, 0x4, 0x1}}, {0x6, 0x2, [0xfff6]}}, {{0x1c, 0x1, {0x8, 0x0, 0x2, 0x4, 0x1, 0x2, 0x0, 0x7}}, {0x12, 0x2, [0x2, 0x8, 0xe1db, 0x10, 0xc0, 0x3, 0xfff8]}}]}, @qdisc_kind_options=@q_atm={0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xffffffff}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x52ab}, @qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x36}]}, 0x194}, 0x1, 0x0, 0x0, 0x40}, 0x48000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0xa}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4011}, 0x8e8ea1360cb3670) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 2.903495576s ago: executing program 4 (id=92): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r1, @ANYBLOB="08002600b40900000800b700"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 2.7758687s ago: executing program 2 (id=93): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="980000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00030000000000004c001280110001006272696467655f736c6176650000000034000580050019"], 0x98}}, 0x0) 2.740417103s ago: executing program 0 (id=94): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000940)=ANY=[@ANYBLOB="500100001a000100000000000200000002001c1f0000c808ffffffea0800", @ANYRES32=r0, @ANYBLOB="06001c004e21000008000100ac1414"], 0x150}, 0x1, 0x0, 0x0, 0x2000c094}, 0x4040080) 2.714257518s ago: executing program 4 (id=95): socket$nl_xfrm(0x10, 0x3, 0x6) socket$unix(0x1, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x194, 0x24, 0xa00, 0x870bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0x2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3ff}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x8, 0x5, 0x300, 0x5, 0x4, 0x9, 0xe7b, 0x6001}}}}, @TCA_STAB={0x108, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x5, 0x8, 0xf30, 0x3, 0xfffffff8, 0x1, 0x5}}, {0xe, 0x2, [0x1c00, 0x924c, 0x6e16, 0x3, 0x90]}}, {{0x1c, 0x1, {0x5, 0x18, 0x5, 0xfffffffb, 0x0, 0x800, 0x7, 0x5}}, {0xe, 0x2, [0x8, 0x2, 0x5, 0x0, 0xf]}}, {{0x1c, 0x1, {0x4, 0x4, 0x9, 0x4, 0x1, 0x3ff, 0x0, 0x7}}, {0x12, 0x2, [0x99, 0x8, 0x40, 0x741c, 0x3, 0x8, 0x800]}}, {{0x1c, 0x1, {0xff, 0x1, 0x7, 0x0, 0x2, 0x5, 0x2, 0x4}}, {0xc, 0x2, [0x8000, 0x1, 0x3, 0x4100]}}, {{0x1c, 0x1, {0x9, 0xf6, 0x68b2, 0xd, 0x2, 0x2, 0x4, 0x1}}, {0x6, 0x2, [0xfff6]}}, {{0x1c, 0x1, {0x8, 0x0, 0x2, 0x4, 0x1, 0x2, 0x0, 0x7}}, {0x12, 0x2, [0x2, 0x8, 0xe1db, 0x10, 0xc0, 0x3, 0xfff8]}}]}, @qdisc_kind_options=@q_atm={0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xffffffff}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x52ab}, @qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x36}]}, 0x194}, 0x1, 0x0, 0x0, 0x40}, 0x48000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0xa}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004055) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 2.605843279s ago: executing program 1 (id=97): ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_MGMT(0xffffffffffffffff, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)={0x34, r1, 0x1, 0x0, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r0}, @void}}, [@NL80211_ATTR_STATUS_CODE={0x6}, @NL80211_ATTR_TDLS_DIALOG_TOKEN={0x5}, @NL80211_ATTR_TDLS_ACTION={0x5}]}, 0x34}}, 0x0) 2.466272497s ago: executing program 0 (id=98): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000300), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x305200, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x70bd2c, 0xffffffff, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0x1, 0xc5, 0xe23, 0x3, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000b40)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x70bd26, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x9}, {0x5, 0xb}, {0xffe0, 0x3}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x0, 0x1, 0x406, 0x1, 0xffffffff, 0x9}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x2000c061}, 0x4008000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 2.409927727s ago: executing program 3 (id=99): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r4, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x38, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r7, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x4}}]}, 0x38}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) r8 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r8) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r8, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r9 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r9, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r10, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}, 0x4) 2.393277661s ago: executing program 1 (id=100): sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000280)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000080)={'bridge_slave_1\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000300)=ANY=[@ANYBLOB="980000001000010400"/20, @ANYRES32=r1, @ANYBLOB="00030000000000004c001280110001006272696467655f736c6176650000000034000580050019"], 0x98}}, 0x0) 2.24806741s ago: executing program 2 (id=101): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000080)={0x24, r1, 0x1, 0x70bd2d, 0x25dfdbfb, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_KEY={0x8, 0x50, 0x0, 0x1, [@NL80211_KEY_DEFAULT_MGMT={0x4}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x48001}, 0x4008050) 2.028219599s ago: executing program 1 (id=102): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00'}) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xfff3}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0xfffffffffffffdbc, 0x2, {{0x1, 0xd, 0x0, 0x9, 0x8}, 0x6, 0x1, 0x1, 0x4, 0x8, 0xe, 0x7, 0x1d, 0x3, 0x9, {0xa2d6, 0x200, 0xb, 0x40, 0x2, 0x1ff}}}}]}, 0x78}}, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) r8 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000340)=@newtfilter={0x84, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r9, {0x4, 0x5}, {}, {0x7, 0x5}}, [@filter_kind_options=@f_matchall={{0xd}, {0x50, 0x2, [@TCA_MATCHALL_ACT={0x4c, 0x2, [@m_ife={0x48, 0x1, 0x0, 0x0, {{0x8}, {0x20, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c, 0x1, {{0x4, 0xd, 0x0, 0x9, 0x3}}}]}, {0x4}, {0xc, 0x7, {0x0, 0x1}}, {0xc, 0x8, {0x2, 0x3}}}}]}]}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20048081}, 0xc0) r10 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r10) socket$nl_route(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000000)={'syzkaller0\x00', @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x3}}) r11 = socket$kcm(0x11, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r11, &(0x7f00000000c0)={&(0x7f0000000840)=@xdp={0x2c, 0x7, r12, 0x3e}, 0x80, &(0x7f0000000480)=[{&(0x7f00000002c0)='\x00', 0x1}], 0x1}, 0x4) sendmsg$nl_route_sched(r1, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={0x0}, 0x1, 0x0, 0x0, 0x20000801}, 0x4041080) 1.988815807s ago: executing program 2 (id=103): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r0, &(0x7f00000002c0)={0x1f, 0x0, @any, 0xfffa}, 0xe) connect$bt_l2cap(r0, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) sendmmsg$inet(r0, &(0x7f0000000b00)=[{{0x0, 0x0, &(0x7f0000000400)=[{0x0}], 0x1}}], 0x1, 0x40800) shutdown(r0, 0x1) 1.861672373s ago: executing program 2 (id=104): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00'}) syz_genetlink_get_family_id$nl80211(&(0x7f0000000640), r0) sendmsg$NL80211_CMD_NEW_KEY(r0, 0x0, 0x4008050) 1.781702927s ago: executing program 2 (id=105): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYBLOB="010008020000001800006600000008000300", @ANYRES32=r1, @ANYBLOB="08002600b40900000800b700"], 0x2c}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) 1.651946681s ago: executing program 2 (id=106): socket$nl_xfrm(0x10, 0x3, 0x6) socket$unix(0x1, 0x5, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) close(0x4) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/ipc\x00') unshare(0x6a040000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000940)=@newqdisc={0x194, 0x24, 0xa00, 0x870bd2a, 0x25dfdbfe, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5, 0x2}}, [@TCA_EGRESS_BLOCK={0x8, 0xe, 0x3ff}, @qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0x8, 0x8, 0x5, 0x300, 0x5, 0x4, 0x9, 0xe7b, 0x6001}}}}, @TCA_STAB={0x108, 0x8, 0x0, 0x1, [{{0x1c, 0x1, {0x4, 0x5, 0x8, 0xf30, 0x3, 0xfffffff8, 0x1, 0x5}}, {0xe, 0x2, [0x1c00, 0x924c, 0x6e16, 0x3, 0x90]}}, {{0x1c, 0x1, {0x5, 0x18, 0x5, 0xfffffffb, 0x0, 0x800, 0x7, 0x5}}, {0xe, 0x2, [0x8, 0x2, 0x5, 0x0, 0xf]}}, {{0x1c, 0x1, {0x4, 0x4, 0x9, 0x4, 0x1, 0x3ff, 0x0, 0x7}}, {0x12, 0x2, [0x99, 0x8, 0x40, 0x741c, 0x3, 0x8, 0x800]}}, {{0x1c, 0x1, {0xff, 0x1, 0x7, 0x0, 0x2, 0x5, 0x2, 0x4}}, {0xc, 0x2, [0x8000, 0x1, 0x3, 0x4100]}}, {{0x1c, 0x1, {0x9, 0xf6, 0x68b2, 0xd, 0x2, 0x2, 0x4, 0x1}}, {0x6, 0x2, [0xfff6]}}, {{0x1c, 0x1, {0x8, 0x0, 0x2, 0x4, 0x1, 0x2, 0x0, 0x7}}, {0x12, 0x2, [0x2, 0x8, 0xe1db, 0x10, 0xc0, 0x3, 0xfff8]}}]}, @qdisc_kind_options=@q_atm={0x8}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0xffffffff}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x52ab}, @qdisc_kind_options=@q_clsact={0xb}, @TCA_EGRESS_BLOCK={0x8, 0xe, 0x36}]}, 0x194}, 0x1, 0x0, 0x0, 0x40}, 0x48000) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000100)=@newqdisc={0x44, 0x24, 0x4, 0xc0000000, 0xfffffffe, {0x0, 0x0, 0x0, 0x0, {0x3, 0x3}, {0xa, 0xe}, {0x0, 0x9}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_BETA={0x8, 0x6, 0xa}, @TCA_FQ_PIE_TARGET={0x8, 0x3, 0x4}]}}]}, 0x44}}, 0x20004055) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={0x0}, 0x1, 0x0, 0x0, 0x4011}, 0x8e8ea1360cb3670) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) connect$inet(r0, &(0x7f00000000c0)={0x2, 0xfffa, @empty}, 0x10) syz_emit_ethernet(0x46, &(0x7f0000000000)={@link_local={0x3}, @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, @multicast1, @loopback}, "00186371ae9b1c03"}}}}}, 0x0) 644.914889ms ago: executing program 3 (id=107): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$unix(0x1, 0x5, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r2, 0x8933, &(0x7f0000000100)={'vcan0\x00', 0x0}) connect$can_bcm(r2, &(0x7f00000000c0)={0x1d, r3}, 0x10) sendmsg$can_bcm(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=ANY=[@ANYBLOB="0100000003ece1e40ad8871461ab0800", @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=0x0, @ANYRES64=r1, @ANYBLOB="3bf81bb9f9"], 0x20000600}, 0x1, 0x0, 0x0, 0x40000}, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x2}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000000cc0)=@newsa={0x138, 0x10, 0x1, 0x70bd28, 0x25dfdbff, {{@in=@remote, @in=@loopback, 0x4e23, 0x0, 0x2000, 0x8000, 0xff80, 0x20, 0x0, 0xc}, {@in=@rand_addr=0x64010101, 0x20, 0x6c}, @in6=@local, {0xfffffffffffffffc, 0x0, 0x0, 0x800000000000001, 0x10000000002c8, 0x6, 0x4000000000000}, {0x1fffffffffff, 0x8, 0x0, 0x4}, {0x0, 0x8}, 0x0, 0x0, 0xa, 0x1, 0x0, 0x3}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}]}, 0x138}, 0x1, 0x0, 0x0, 0x4075}, 0x4800) 525.879906ms ago: executing program 0 (id=108): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000300)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_KEY(r0, &(0x7f0000001000)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f0000000180)={0x3c, 0x0, 0x1, 0x70bd29, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_KEY={0x20, 0x50, 0x0, 0x1, [@NL80211_KEY_IDX={0x5, 0x2, 0x4}, @NL80211_KEY_DATA_WEP104={0x11, 0x1, "2d929124a203894dee98262db7"}]}]}, 0x3c}, 0x1, 0x0, 0x0, 0x48001}, 0x4008050) 488.538846ms ago: executing program 0 (id=109): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEY(r1, 0x110, 0x1, &(0x7f0000000000)='\xe8!3\x00', 0x4) r2 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f00000002c0), r0) r3 = socket$inet_tcp(0x2, 0x1, 0x0) r4 = socket(0x2a, 0x2, 0x0) getsockname$packet(r4, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000800)=@gettaction={0x14, 0x32, 0x400, 0x70bd28, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x48010}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(r4, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000840)=@newtfilter={0x494, 0x2c, 0x200, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r5, {0x0, 0xffe0}, {0x0, 0xe}, {0xffff, 0x2}}, [@filter_kind_options=@f_u32={{0x8}, {0x468, 0x2, [@TCA_U32_ACT={0x40c, 0x7, [@m_pedit={0x188, 0xf, 0x0, 0x0, {{0xa}, {0x138, 0x2, 0x0, 0x1, [@TCA_PEDIT_KEYS_EX={0x7c, 0x5, 0x0, 0x1, [{0x1c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x4}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x24, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}]}, {0xc, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6}]}]}, @TCA_PEDIT_KEYS_EX={0xb8, 0x5, 0x0, 0x1, [{0x2c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x3}]}, {0x4c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x9de2fcb9ebbdad75}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}]}, {0x3c, 0x6, 0x0, 0x1, [@TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x5}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x7}, @TCA_PEDIT_KEY_EX_CMD={0x6, 0x2, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x1}, @TCA_PEDIT_KEY_EX_HTYPE={0x6, 0x1, 0x2}]}]}]}, {0x28, 0x6, "39e258625df388332f149524b618089ad42543827849279ef302b9055983a1c070b06fb9"}, {0xc}, {0xc, 0x8, {0x1, 0x3}}}}, @m_ctinfo={0xfc, 0xf, 0x0, 0x0, {{0xb}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8}, @TCA_CTINFO_PARMS_DSCP_STATEMASK={0x8, 0x6, 0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x3}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7}, @TCA_CTINFO_ZONE={0x6, 0x4, 0x40}, @TCA_CTINFO_PARMS_DSCP_MASK={0x8}, @TCA_CTINFO_PARMS_CPMARK_MASK={0x8, 0x7, 0x7ff}]}, {0x95, 0x6, "310d50d725ddbd65586e8f20250ce30ccc0c314928d5b6980fde0f33af4c164fa943eb767ea13b0f8c07a51115ded366518028b83a576b91fd4136d84cd461808fd719fe6dbf2fb20525d9b1f8c9c000c720ad09989a4117beaf4aba65315e386a36b1afcb0dd2efd5747b5cba660ec9e326ea67f060568480e14f29edd414a65a34bbbf18f2a3d905de6511aa8195a5d6"}, {0xc}, {0xc, 0x8, {0x2, 0x1}}}}, @m_tunnel_key={0x184, 0xe, 0x0, 0x0, {{0xf}, {0x74, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_ENC_KEY_ID={0x8, 0x7, 0x7fff}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @private1={0xfc, 0x1, '\x00', 0x1}}, @TCA_TUNNEL_KEY_NO_CSUM={0x5}, @TCA_TUNNEL_KEY_ENC_IPV6_SRC={0x14, 0x5, @private0={0xfc, 0x0, '\x00', 0x1}}, @TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{0x1, 0x6, 0x3, 0x100}, 0x1}}, @TCA_TUNNEL_KEY_ENC_IPV6_DST={0x14, 0x6, @remote}, @TCA_TUNNEL_KEY_ENC_IPV4_DST={0x8, 0x4, @empty}]}, {0xe1, 0x6, "031f99876b91ae3577c7e807081a97f3f08c040e18ba4721d179f3ed48edb18043422ce66bb8234878996b400cfbc8a16789bd3d0720bf42130fdb4e7ebcc83fbffb1a2cd3428879cd06e04c6915e2acd0cf4567eb0d720361921f0849a095e51b5de24228c62a468997f39bf2efb737b6a5e10fc0462c67cb1ab029d70f2fcfe3ad0378f65b40393300030f6efe94305a809f79292c589fd780aa42c099a403f31b2617f925ef67389d81301d94da5f7eeb10b61cf11c2da2dd4dc0acaec95f512a103ee62eda5e527af06dd314e07cedb2cd86b85f9d1f994f1e86e1"}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}, @TCA_U32_HASH={0x8, 0x2, 0x6}, @TCA_U32_INDEV={0x14, 0x8, 'pimreg\x00'}, @TCA_U32_MARK={0x10, 0xa, {0xd7, 0x53be5017}}, @TCA_U32_INDEV={0x14, 0x8, 'batadv_slave_1\x00'}, @TCA_U32_HASH={0x8, 0x2, 0x9}, @TCA_U32_DIVISOR={0x8, 0x4, 0xbf}, @TCA_U32_DIVISOR={0x8, 0x4, 0xe0}]}}]}, 0x494}}, 0x48c0) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) bind$inet(r3, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x47) setsockopt$inet_tcp_int(r3, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r3, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r3, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) sendto$inet(r3, &(0x7f0000002fc0)="5e000d001b71ecab36", 0x9, 0x8054, 0x0, 0x0) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r3, 0x6, 0x16, &(0x7f0000000100)=[@window={0x3, 0x1, 0x8}, @window={0x3, 0x6, 0x7}, @sack_perm, @timestamp, @mss={0x2, 0x5}, @window={0x3, 0x0, 0xe}, @window={0x3, 0x1, 0x10}, @window={0x3, 0x3, 0x99}], 0x8) setsockopt$inet_tcp_TCP_REPAIR(r3, 0x6, 0x13, &(0x7f00000001c0), 0x4) sendto$inet(r3, &(0x7f0000000240)="35569dc24431fad4348d7251545aef09c4def3321ca3", 0x16, 0x805, 0x0, 0x0) sendmsg$NLBL_CIPSOV4_C_ADD(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000580)=ANY=[@ANYBLOB="40000000e6761a860ca2d7e0357f000cef6e2a2112480361a6768459a1a1f472250bfdecd7931e11c0955354339d9bd070e789f8ae168472d617ab1ee67c1037c0fee5dac0f300b23eb57149d05c05764adcce639a1d3133683eabfa4040287deae6bd5647e5dcf2466845430bb31768682537431a63c1dc7acc850f164441c61703160678a68df38264c0ed1c49f3a8e70ffef46ac39130c09619af6d61aa7b09cbcc46469b846829994a28758a9a3493af7f7335d801dde632c5db14cd2889d59a7c1d9006feb6c2d8be", @ANYRES16=r2, @ANYBLOB="010027bd7000fbdbdf25010000002400048005000300050000000500030002000000050003000100000005000300060000000800020002000000"], 0x40}}, 0x40080) socket$kcm(0x21, 0x2, 0xa) bpf$MAP_CREATE(0x0, &(0x7f0000000300)=ANY=[@ANYBLOB="0a00000004000000040000000a"], 0x48) close(0x3) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000010000507000000000004000000000000", @ANYRES32, @ANYBLOB="000000160100000018001200080001007369"], 0x38}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r7, 0x8933, &(0x7f0000000440)={'batadv0\x00', 0x0}) sendmsg$BATADV_CMD_SET_MESH(r7, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYRES16=r8, @ANYRES32=r9, @ANYBLOB="050033"], 0x2c}}, 0x80) getsockname$packet(0xffffffffffffffff, 0x0, 0x0) 474.587572ms ago: executing program 3 (id=110): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000600)=ANY=[@ANYBLOB="10000000040000000400000002"], 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000800)=ANY=[@ANYBLOB="18000000000000000000000000000000850000007500000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b70400000000000085000000330000"], &(0x7f00000004c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000b80)={r1, 0x2000012, 0xe, 0x0, &(0x7f0000000280)="63ec33c9e9b98600000000000000", 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0xb}, 0x1f) 293.171698ms ago: executing program 3 (id=111): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a28000000000a030000000000000000000a00000708000240000000020900010073797a31000000002c000000030a010100000000000000000a0000070900010073797a31000000000900030073797a320000000014"], 0x7c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000180)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x5}}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x401, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_RULE_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_DIRECTION={0x5, 0x3, 0x1}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xc}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x1}}}, 0x80}, 0x1, 0x0, 0x0, 0x4008091}, 0x24000000) syz_emit_ethernet(0x6e, &(0x7f00000002c0)={@random="e33110495bfd", @random="2387d3da4e2e", @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x38, 0x3a, 0xff, @dev, @private2={0xfc, 0x2, '\x00', 0x1}, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x2, "91fee621fd2286d6cff8a97faf7c"}]}}}}}}, 0x0) 245.486522ms ago: executing program 0 (id=112): r0 = socket$rds(0x15, 0x5, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bind$rds(r0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(0xffffffffffffffff, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000004c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010000000000000000003700000008000300", @ANYRES32=r1, @ANYBLOB="08002600901500000800570080"], 0x2c}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000780), r3) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000080)=ANY=[@ANYBLOB="88020000", @ANYRES16=r4, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32=r5, @ANYBLOB="6102330050300100080211000001080211000000505050505050"], 0x288}, 0x1, 0x0, 0x0, 0x800}, 0x40000) 161.548858ms ago: executing program 3 (id=113): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x20}, 0x50) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x3, 0x8, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffe, 0x0, 0x0, 0x0, 0xd}, [@call={0x85, 0x0, 0x0, 0x20}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r0}}]}, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0xa, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x5b, 0x0, 0x0, 0x10, 0x40}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2f, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0xa5bc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) (async) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r2, &(0x7f0000000180)={0xa, 0x4001, 0x1, @dev={0xfe, 0x80, '\x00', 0x39}, 0x3e}, 0x1c) (async) getsockopt$inet6_mreq(r2, 0x29, 0x1b, 0x0, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) setsockopt$inet_sctp_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000000)={0x2, 0x40, 0x1, 0x5, 0x1, 0x3, 0x2, 0x81, 0x4, 0x70, 0x8, 0xff, 0x40, 0x3}, 0xe) 0s ago: executing program 3 (id=114): syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00'}) sendmsg$NL80211_CMD_CHANNEL_SWITCH(r0, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x4000000}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.235' (ED25519) to the list of known hosts. [ 75.569122][ T5807] cgroup: Unknown subsys name 'net' [ 75.699070][ T5807] cgroup: Unknown subsys name 'cpuset' [ 75.708562][ T5807] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.279148][ T5807] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.025188][ T5822] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.033477][ T5828] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.047374][ T5822] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.055691][ T5822] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.063924][ T5822] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.072145][ T5822] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.082180][ T5822] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.083242][ T5828] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.098356][ T5826] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.106757][ T5831] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.116828][ T5831] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.124525][ T5831] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.129018][ T5835] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.139202][ T5835] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.146666][ T5835] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.156735][ T5831] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.164547][ T5831] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.172397][ T5835] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.180415][ T5835] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.187844][ T5835] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.234937][ T5835] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.243639][ T5835] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.252362][ T5835] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.262155][ T5835] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.270826][ T5835] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.771880][ T5819] chnl_net:caif_netlink_parms(): no params data found [ 81.899263][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 82.019616][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 82.032099][ T5820] chnl_net:caif_netlink_parms(): no params data found [ 82.091519][ T5819] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.100480][ T5819] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.107827][ T5819] bridge_slave_0: entered allmulticast mode [ 82.116190][ T5819] bridge_slave_0: entered promiscuous mode [ 82.170629][ T5819] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.177913][ T5819] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.185789][ T5819] bridge_slave_1: entered allmulticast mode [ 82.193004][ T5819] bridge_slave_1: entered promiscuous mode [ 82.260956][ T5836] chnl_net:caif_netlink_parms(): no params data found [ 82.272993][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.280825][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.288378][ T5829] bridge_slave_0: entered allmulticast mode [ 82.295867][ T5829] bridge_slave_0: entered promiscuous mode [ 82.333939][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.341224][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.348652][ T5829] bridge_slave_1: entered allmulticast mode [ 82.356166][ T5829] bridge_slave_1: entered promiscuous mode [ 82.366840][ T5819] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.411178][ T5819] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.511452][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.523529][ T5819] team0: Port device team_slave_0 added [ 82.529922][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.537164][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.544721][ T5833] bridge_slave_0: entered allmulticast mode [ 82.552283][ T5833] bridge_slave_0: entered promiscuous mode [ 82.559635][ T5820] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.567159][ T5820] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.574366][ T5820] bridge_slave_0: entered allmulticast mode [ 82.581875][ T5820] bridge_slave_0: entered promiscuous mode [ 82.591522][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.608877][ T5819] team0: Port device team_slave_1 added [ 82.624511][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.631817][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.639244][ T5833] bridge_slave_1: entered allmulticast mode [ 82.646777][ T5833] bridge_slave_1: entered promiscuous mode [ 82.653780][ T5820] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.661129][ T5820] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.668468][ T5820] bridge_slave_1: entered allmulticast mode [ 82.675972][ T5820] bridge_slave_1: entered promiscuous mode [ 82.767700][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.774701][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.800898][ T5819] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.814094][ T5819] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.821347][ T5819] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 82.847394][ T5819] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.871673][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.883459][ T5829] team0: Port device team_slave_0 added [ 82.911232][ T5820] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.923542][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.936025][ T5829] team0: Port device team_slave_1 added [ 82.941817][ T5836] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.953456][ T5836] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.960982][ T5836] bridge_slave_0: entered allmulticast mode [ 82.968409][ T5836] bridge_slave_0: entered promiscuous mode [ 82.977071][ T5836] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.984242][ T5836] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.991763][ T5836] bridge_slave_1: entered allmulticast mode [ 82.999405][ T5836] bridge_slave_1: entered promiscuous mode [ 83.008859][ T5820] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.125838][ T5833] team0: Port device team_slave_0 added [ 83.132200][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.139378][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.165651][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.182790][ T5819] hsr_slave_0: entered promiscuous mode [ 83.189499][ T5819] hsr_slave_1: entered promiscuous mode [ 83.196330][ T51] Bluetooth: hci1: command tx timeout [ 83.205471][ T5836] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.216878][ T5820] team0: Port device team_slave_0 added [ 83.225303][ T5836] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.236633][ T5833] team0: Port device team_slave_1 added [ 83.242869][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.249912][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.266564][ T5835] Bluetooth: hci2: command tx timeout [ 83.276896][ T5142] Bluetooth: hci3: command tx timeout [ 83.282158][ T51] Bluetooth: hci0: command tx timeout [ 83.288717][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.315216][ T5820] team0: Port device team_slave_1 added [ 83.345283][ T51] Bluetooth: hci4: command tx timeout [ 83.394775][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.402528][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.428728][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.471495][ T5836] team0: Port device team_slave_0 added [ 83.480064][ T5836] team0: Port device team_slave_1 added [ 83.487545][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.494517][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.520639][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.538513][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.545775][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.572160][ T5820] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.629068][ T5820] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.636172][ T5820] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.662318][ T5820] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.689431][ T5829] hsr_slave_0: entered promiscuous mode [ 83.696024][ T5829] hsr_slave_1: entered promiscuous mode [ 83.702654][ T5829] debugfs: 'hsr0' already exists in 'hsr' [ 83.708576][ T5829] Cannot create hsr debugfs directory [ 83.729913][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.736997][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.762974][ T5836] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.821135][ T5836] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.828775][ T5836] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 83.854857][ T5836] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.896614][ T5833] hsr_slave_0: entered promiscuous mode [ 83.903035][ T5833] hsr_slave_1: entered promiscuous mode [ 83.911255][ T5833] debugfs: 'hsr0' already exists in 'hsr' [ 83.917340][ T5833] Cannot create hsr debugfs directory [ 83.976487][ T5820] hsr_slave_0: entered promiscuous mode [ 83.983149][ T5820] hsr_slave_1: entered promiscuous mode [ 83.993250][ T5820] debugfs: 'hsr0' already exists in 'hsr' [ 83.999194][ T5820] Cannot create hsr debugfs directory [ 84.115316][ T5836] hsr_slave_0: entered promiscuous mode [ 84.121749][ T5836] hsr_slave_1: entered promiscuous mode [ 84.128275][ T5836] debugfs: 'hsr0' already exists in 'hsr' [ 84.134032][ T5836] Cannot create hsr debugfs directory [ 84.484257][ T5819] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.497997][ T5819] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.516091][ T5819] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.542895][ T5819] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.622859][ T5820] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.634864][ T5820] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.646326][ T5820] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.670150][ T5820] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.764903][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 84.779793][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 84.793000][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 84.807780][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.897250][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.923485][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.936508][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.981186][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.048735][ T5819] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.108792][ T5836] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.127342][ T5836] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.140481][ T5836] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.150918][ T5836] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.191593][ T5819] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.220641][ T3556] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.227964][ T3556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.239830][ T5820] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.265645][ T51] Bluetooth: hci1: command tx timeout [ 85.277828][ T3556] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.284982][ T3556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.309831][ T5820] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.320492][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.346682][ T51] Bluetooth: hci0: command tx timeout [ 85.346702][ T5142] Bluetooth: hci2: command tx timeout [ 85.352136][ T51] Bluetooth: hci3: command tx timeout [ 85.374058][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.381268][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.390604][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.397805][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.427352][ T51] Bluetooth: hci4: command tx timeout [ 85.491282][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.513422][ T3556] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.520615][ T3556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.591336][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.598562][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.614236][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.674686][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.742504][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.749829][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.837489][ T77] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.844655][ T77] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.867736][ T5820] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.887289][ T5836] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.990722][ T5836] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.039368][ T3556] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.046679][ T3556] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.110805][ T3556] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.118039][ T3556] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.142239][ T5819] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.203785][ T5820] veth0_vlan: entered promiscuous mode [ 86.271530][ T5820] veth1_vlan: entered promiscuous mode [ 86.409741][ T5820] veth0_macvtap: entered promiscuous mode [ 86.441260][ T5820] veth1_macvtap: entered promiscuous mode [ 86.478987][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.568581][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.611074][ T5820] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.637852][ T5829] veth0_vlan: entered promiscuous mode [ 86.703348][ T5829] veth1_vlan: entered promiscuous mode [ 86.710994][ T105] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.737203][ T13] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.746126][ T13] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.763177][ T13] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.818465][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.884256][ T5836] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.903971][ T5819] veth0_vlan: entered promiscuous mode [ 86.920547][ T5829] veth0_macvtap: entered promiscuous mode [ 86.977852][ T5829] veth1_macvtap: entered promiscuous mode [ 86.992696][ T5819] veth1_vlan: entered promiscuous mode [ 87.101489][ T5833] veth0_vlan: entered promiscuous mode [ 87.118178][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.132258][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.141962][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.173604][ T5833] veth1_vlan: entered promiscuous mode [ 87.201113][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.216103][ T5819] veth0_macvtap: entered promiscuous mode [ 87.256268][ T13] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.266616][ T5836] veth0_vlan: entered promiscuous mode [ 87.278037][ T5819] veth1_macvtap: entered promiscuous mode [ 87.305907][ T13] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.342118][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.350979][ T51] Bluetooth: hci1: command tx timeout [ 87.357822][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.364993][ T13] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.374813][ T5836] veth1_vlan: entered promiscuous mode [ 87.394131][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.410421][ T13] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.425919][ T51] Bluetooth: hci2: command tx timeout [ 87.426007][ T5835] Bluetooth: hci3: command tx timeout [ 87.438416][ T5142] Bluetooth: hci0: command tx timeout [ 87.477544][ T5819] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.490108][ T5833] veth0_macvtap: entered promiscuous mode [ 87.502894][ T5820] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 87.516980][ T5142] Bluetooth: hci4: command tx timeout [ 87.541541][ T5833] veth1_macvtap: entered promiscuous mode [ 87.548657][ T13] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.557752][ T13] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.567098][ T13] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.604245][ T13] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.637273][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.655770][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.708541][ T5836] veth0_macvtap: entered promiscuous mode [ 87.740826][ T5836] veth1_macvtap: entered promiscuous mode [ 87.775410][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.783526][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.801214][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.859310][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.873935][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.902845][ T5836] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.918254][ T1017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.931057][ T1017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.946701][ T150] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.961639][ T150] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.993398][ T150] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.015256][ T150] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.047615][ T150] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.073559][ T150] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.121725][ T150] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.134780][ T150] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.196439][ T1017] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.216046][ T1017] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.420358][ T1017] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.453848][ T1017] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.631092][ T3556] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.660352][ T3556] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.662449][ T105] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.764705][ T105] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.836933][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.862354][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.312790][ T5971] netlink: 44 bytes leftover after parsing attributes in process `syz.1.2'. [ 89.357293][ T5974] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 89.389805][ T5974] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 89.425377][ T5142] Bluetooth: hci1: command tx timeout [ 89.442660][ T5974] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 89.489369][ T5974] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 89.505636][ T5142] Bluetooth: hci2: command tx timeout [ 89.511404][ T5142] Bluetooth: hci0: command tx timeout [ 89.512297][ T5835] Bluetooth: hci3: command tx timeout [ 89.587042][ T5835] Bluetooth: hci4: command tx timeout [ 89.673677][ T5983] netlink: 'syz.3.16': attribute type 33 has an invalid length. [ 89.708141][ T5983] netlink: 152 bytes leftover after parsing attributes in process `syz.3.16'. [ 89.749170][ T5971] netlink: 40 bytes leftover after parsing attributes in process `syz.1.2'. [ 89.779703][ T5983] `: renamed from team0 (while UP) [ 90.404698][ T6004] tipc: Started in network mode [ 90.425592][ T6004] tipc: Node identity 0aab1d6c56a3, cluster identity 4711 [ 90.433150][ T6004] tipc: Enabled bearer , priority 0 [ 90.503151][ T6006] syzkaller0: entered promiscuous mode [ 90.536728][ T6006] syzkaller0: entered allmulticast mode [ 90.595809][ T6011] netlink: 44 bytes leftover after parsing attributes in process `syz.1.28'. [ 90.595844][ T6004] tipc: Resetting bearer [ 90.676496][ T6003] tipc: Resetting bearer [ 90.759146][ T6003] tipc: Disabling bearer [ 90.791828][ T6011] netlink: 40 bytes leftover after parsing attributes in process `syz.1.28'. [ 91.209881][ T6034] netlink: 276 bytes leftover after parsing attributes in process `syz.4.40'. [ 91.459556][ T6043] tipc: Started in network mode [ 91.464550][ T6043] tipc: Node identity 2a54476df7b4, cluster identity 4711 [ 91.490155][ T6048] netlink: 44 bytes leftover after parsing attributes in process `syz.2.45'. [ 91.494817][ T6043] tipc: Enabled bearer , priority 0 [ 91.523739][ T6045] warning: `syz.0.44' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 91.544916][ T6043] syzkaller0: entered promiscuous mode [ 91.548301][ T6045] netlink: 12 bytes leftover after parsing attributes in process `syz.0.44'. [ 91.563187][ T6045] Zero length message leads to an empty skb [ 91.576910][ T6043] syzkaller0: entered allmulticast mode [ 91.596230][ T6055] netlink: 12 bytes leftover after parsing attributes in process `syz.3.46'. [ 91.621620][ T6043] tipc: Resetting bearer [ 91.658835][ T6042] tipc: Resetting bearer [ 91.740277][ T6042] tipc: Disabling bearer [ 91.792732][ T6048] netlink: 40 bytes leftover after parsing attributes in process `syz.2.45'. [ 91.904951][ T6061] hsr0: entered promiscuous mode [ 91.920291][ T1025] cfg80211: failed to load regulatory.db [ 92.644724][ T6090] syz.1.61 uses obsolete (PF_INET,SOCK_PACKET) [ 93.368959][ T6135] Cannot find set identified by id 65534 to match [ 94.763155][ T6151] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 94.770991][ T6151] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 94.779579][ T6151] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.805141][ T6151] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.949176][ T6161] __nla_validate_parse: 8 callbacks suppressed [ 94.949197][ T6161] netlink: 76 bytes leftover after parsing attributes in process `syz.4.87'. [ 95.124512][ T6185] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 95.314576][ T6190] netlink: 44 bytes leftover after parsing attributes in process `syz.2.93'. [ 95.591381][ T6190] netlink: 40 bytes leftover after parsing attributes in process `syz.2.93'. [ 95.627453][ T6190] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.675891][ T6209] netlink: 44 bytes leftover after parsing attributes in process `syz.1.100'. [ 95.713540][ T6204] tipc: Enabled bearer , priority 0 [ 95.850947][ T6204] syzkaller0: entered promiscuous mode [ 95.857947][ T6204] syzkaller0: entered allmulticast mode [ 95.865923][ T6206] netlink: 76 bytes leftover after parsing attributes in process `syz.3.99'. [ 95.874792][ T6209] netlink: 40 bytes leftover after parsing attributes in process `syz.1.100'. [ 95.889657][ T6209] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.269190][ T6203] tipc: Resetting bearer [ 97.283217][ T6203] tipc: Disabling bearer [ 97.308682][ T6228] netlink: 76 bytes leftover after parsing attributes in process `syz.1.102'. [ 97.375829][ T24] tipc: Node number set to 1544035692 [ 97.771128][ T6259] netlink: 8 bytes leftover after parsing attributes in process `syz.0.112'. [ 98.010898][ T150] [ 98.013291][ T150] ============================================ [ 98.019492][ T150] WARNING: possible recursive locking detected [ 98.025680][ T150] syzkaller #0 Not tainted [ 98.030120][ T150] -------------------------------------------- [ 98.036288][ T150] kworker/u8:6/150 is trying to acquire lock: [ 98.042372][ T150] ffff888032bf6c60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: inet6_getname+0x15d/0x650 [ 98.051751][ T150] [ 98.051751][ T150] but task is already holding lock: [ 98.059143][ T150] ffff888032bf6c60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sock_set_cork+0x2c/0x2e0 [ 98.068759][ T150] [ 98.068759][ T150] other info that might help us debug this: [ 98.076864][ T150] Possible unsafe locking scenario: [ 98.076864][ T150] [ 98.084342][ T150] CPU0 [ 98.087647][ T150] ---- [ 98.090949][ T150] lock(k-sk_lock-AF_INET6); [ 98.095655][ T150] lock(k-sk_lock-AF_INET6); [ 98.100373][ T150] [ 98.100373][ T150] *** DEADLOCK *** [ 98.100373][ T150] [ 98.108543][ T150] May be due to missing lock nesting notation [ 98.108543][ T150] [ 98.116975][ T150] 4 locks held by kworker/u8:6/150: [ 98.122197][ T150] #0: ffff888056ae3148 ((wq_completion)krds_cp_wq#0/0){+.+.}-{0:0}, at: process_scheduled_works+0x9ea/0x1830 [ 98.133920][ T150] #1: ffffc90002ec7c40 ((work_completion)(&(&cp->cp_send_w)->work)){+.+.}-{0:0}, at: process_scheduled_works+0xa25/0x1830 [ 98.146772][ T150] #2: ffff888032bf6c60 (k-sk_lock-AF_INET6){+.+.}-{0:0}, at: tcp_sock_set_cork+0x2c/0x2e0 [ 98.156835][ T150] #3: ffff888032bf6e08 (k-clock-AF_INET6){++.-}-{3:3}, at: rds_tcp_data_ready+0x113/0x9a0 [ 98.166900][ T150] [ 98.166900][ T150] stack backtrace: [ 98.172830][ T150] CPU: 1 UID: 0 PID: 150 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 98.172856][ T150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 98.172870][ T150] Workqueue: krds_cp_wq#0/0 rds_send_worker [ 98.172912][ T150] Call Trace: [ 98.172920][ T150] [ 98.172928][ T150] dump_stack_lvl+0xe8/0x150 [ 98.172956][ T150] print_deadlock_bug+0x279/0x290 [ 98.172988][ T150] __lock_acquire+0x253f/0x2cf0 [ 98.173019][ T150] ? unwind_next_frame+0xa5/0x23c0 [ 98.173053][ T150] lock_acquire+0xf0/0x2e0 [ 98.173076][ T150] ? inet6_getname+0x15d/0x650 [ 98.173100][ T150] lock_sock_nested+0x48/0x100 [ 98.173121][ T150] ? inet6_getname+0x15d/0x650 [ 98.173141][ T150] inet6_getname+0x15d/0x650 [ 98.173165][ T150] rds_tcp_conn_slots_available+0x288/0x470 [ 98.173188][ T150] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 98.173225][ T150] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 98.173252][ T150] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 98.173274][ T150] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 98.173297][ T150] ? process_scheduled_works+0xb02/0x1830 [ 98.173321][ T150] ? worker_thread+0xa50/0xfc0 [ 98.173345][ T150] ? kthread+0x388/0x470 [ 98.173367][ T150] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 98.173396][ T150] rds_recv_incoming+0x9f6/0x12d0 [ 98.173422][ T150] ? __pfx_rds_recv_incoming+0x10/0x10 [ 98.173444][ T150] ? skb_copy_bits+0x7e5/0x8f0 [ 98.173474][ T150] rds_tcp_data_recv+0x7f1/0xa40 [ 98.173503][ T150] __tcp_read_sock+0x196/0x970 [ 98.173524][ T150] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 98.173546][ T150] rds_tcp_data_ready+0x369/0x9a0 [ 98.173566][ T150] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 98.173591][ T150] ? __pfx_sock_def_readable+0x10/0x10 [ 98.173611][ T150] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 98.173638][ T150] tcp_rcv_established+0x19f4/0x2740 [ 98.173673][ T150] ? __pfx_tcp_rcv_established+0x10/0x10 [ 98.173700][ T150] ? ip6_dst_check+0x10/0x7e0 [ 98.173723][ T150] ? ip6_dst_check+0xe2/0x7e0 [ 98.173743][ T150] ? ip6_dst_check+0x5e3/0x7e0 [ 98.173764][ T150] ? __pfx_ip6_dst_check+0x10/0x10 [ 98.173786][ T150] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 98.173807][ T150] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 98.173824][ T150] __release_sock+0x1b8/0x3a0 [ 98.173856][ T150] release_sock+0x5f/0x1f0 [ 98.173877][ T150] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 98.173899][ T150] rds_send_xmit+0x207e/0x28d0 [ 98.173939][ T150] ? __pfx_rds_send_xmit+0x10/0x10 [ 98.173968][ T150] rds_send_worker+0x7d/0x2e0 [ 98.173994][ T150] ? process_scheduled_works+0xa25/0x1830 [ 98.174019][ T150] process_scheduled_works+0xb02/0x1830 [ 98.174055][ T150] ? __pfx_process_scheduled_works+0x10/0x10 [ 98.174082][ T150] ? assign_work+0x3d5/0x5e0 [ 98.174106][ T150] worker_thread+0xa50/0xfc0 [ 98.174143][ T150] kthread+0x388/0x470 [ 98.174159][ T150] ? __pfx_worker_thread+0x10/0x10 [ 98.174182][ T150] ? __pfx_kthread+0x10/0x10 [ 98.174206][ T150] ret_from_fork+0x51e/0xb90 [ 98.174231][ T150] ? __pfx_ret_from_fork+0x10/0x10 [ 98.174254][ T150] ? __switch_to+0xc7d/0x1450 [ 98.174276][ T150] ? __pfx_kthread+0x10/0x10 [ 98.174293][ T150] ret_from_fork_asm+0x1a/0x30 [ 98.174327][ T150] [ 98.488065][ T150] BUG: sleeping function called from invalid context at net/core/sock.c:3782 [ 98.496872][ T150] in_atomic(): 1, irqs_disabled(): 0, non_block: 0, pid: 150, name: kworker/u8:6 [ 98.506053][ T150] preempt_count: 201, expected: 0 [ 98.511095][ T150] RCU nest depth: 0, expected: 0 [ 98.516077][ T150] INFO: lockdep is turned off. [ 98.520860][ T150] Preemption disabled at: [ 98.520872][ T150] [<0000000000000000>] 0x0 [ 98.529719][ T150] CPU: 1 UID: 0 PID: 150 Comm: kworker/u8:6 Not tainted syzkaller #0 PREEMPT(full) [ 98.529747][ T150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 98.529757][ T150] Workqueue: krds_cp_wq#0/0 rds_send_worker [ 98.529782][ T150] Call Trace: [ 98.529788][ T150] [ 98.529794][ T150] dump_stack_lvl+0xe8/0x150 [ 98.529815][ T150] __might_resched+0x378/0x4d0 [ 98.529838][ T150] lock_sock_nested+0x5d/0x100 [ 98.529855][ T150] inet6_getname+0x15d/0x650 [ 98.529873][ T150] rds_tcp_conn_slots_available+0x288/0x470 [ 98.529890][ T150] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 98.529911][ T150] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 98.529937][ T150] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 98.529952][ T150] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 98.529968][ T150] ? process_scheduled_works+0xb02/0x1830 [ 98.529986][ T150] ? worker_thread+0xa50/0xfc0 [ 98.530003][ T150] ? kthread+0x388/0x470 [ 98.530019][ T150] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 98.530040][ T150] rds_recv_incoming+0x9f6/0x12d0 [ 98.530060][ T150] ? __pfx_rds_recv_incoming+0x10/0x10 [ 98.530076][ T150] ? skb_copy_bits+0x7e5/0x8f0 [ 98.530097][ T150] rds_tcp_data_recv+0x7f1/0xa40 [ 98.530119][ T150] __tcp_read_sock+0x196/0x970 [ 98.530134][ T150] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 98.530150][ T150] rds_tcp_data_ready+0x369/0x9a0 [ 98.530164][ T150] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 98.530189][ T150] ? __pfx_sock_def_readable+0x10/0x10 [ 98.530204][ T150] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 98.530236][ T150] tcp_rcv_established+0x19f4/0x2740 [ 98.530262][ T150] ? __pfx_tcp_rcv_established+0x10/0x10 [ 98.530282][ T150] ? ip6_dst_check+0x10/0x7e0 [ 98.530298][ T150] ? ip6_dst_check+0xe2/0x7e0 [ 98.530313][ T150] ? ip6_dst_check+0x5e3/0x7e0 [ 98.530328][ T150] ? __pfx_ip6_dst_check+0x10/0x10 [ 98.530344][ T150] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 98.530360][ T150] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 98.530372][ T150] __release_sock+0x1b8/0x3a0 [ 98.530396][ T150] release_sock+0x5f/0x1f0 [ 98.530410][ T150] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 98.530426][ T150] rds_send_xmit+0x207e/0x28d0 [ 98.530455][ T150] ? __pfx_rds_send_xmit+0x10/0x10 [ 98.530475][ T150] rds_send_worker+0x7d/0x2e0 [ 98.530493][ T150] ? process_scheduled_works+0xa25/0x1830 [ 98.530510][ T150] process_scheduled_works+0xb02/0x1830 [ 98.530536][ T150] ? __pfx_process_scheduled_works+0x10/0x10 [ 98.530555][ T150] ? assign_work+0x3d5/0x5e0 [ 98.530591][ T150] worker_thread+0xa50/0xfc0 [ 98.530629][ T150] kthread+0x388/0x470 [ 98.530651][ T150] ? __pfx_worker_thread+0x10/0x10 [ 98.530668][ T150] ? __pfx_kthread+0x10/0x10 [ 98.530681][ T150] ret_from_fork+0x51e/0xb90 [ 98.530700][ T150] ? __pfx_ret_from_fork+0x10/0x10 [ 98.530717][ T150] ? __switch_to+0xc7d/0x1450 [ 98.530733][ T150] ? __pfx_kthread+0x10/0x10 [ 98.530745][ T150] ret_from_fork_asm+0x1a/0x30 [ 98.530795][ T150] [ 98.530806][ T150] BUG: scheduling while atomic: kworker/u8:6/150/0x00000202 [ 98.827881][ T150] INFO: lockdep is turned off. [ 98.832653][ T150] Modules linked in: [ 98.836601][ T150] Preemption disabled at: [ 98.836614][ T150] [<0000000000000000>] 0x0 [ 98.845404][ T150] Kernel panic - not syncing: scheduling while atomic: panic_on_warn set ... [ 98.854200][ T150] CPU: 1 UID: 0 PID: 150 Comm: kworker/u8:6 Tainted: G W syzkaller #0 PREEMPT(full) [ 98.865177][ T150] Tainted: [W]=WARN [ 98.869035][ T150] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 98.879116][ T150] Workqueue: krds_cp_wq#0/0 rds_send_worker [ 98.885035][ T150] Call Trace: [ 98.888343][ T150] [ 98.891296][ T150] vpanic+0x56c/0xa60 [ 98.895301][ T150] ? __pfx_vpanic+0x10/0x10 [ 98.899835][ T150] ? rcu_is_watching+0x15/0xb0 [ 98.904647][ T150] panic+0xc5/0xd0 [ 98.908391][ T150] ? __pfx_panic+0x10/0x10 [ 98.912828][ T150] ? __pfx__printk+0x10/0x10 [ 98.917436][ T150] ? vprintk_emit+0x4eb/0x560 [ 98.922166][ T150] ? __pfx_vprintk_emit+0x10/0x10 [ 98.927242][ T150] check_panic_on_warn+0x89/0xb0 [ 98.932213][ T150] __schedule_bug+0xf6/0x150 [ 98.936820][ T150] __schedule+0x16a9/0x5340 [ 98.941361][ T150] ? __wake_up_klogd+0xe6/0x120 [ 98.946266][ T150] ? vprintk_emit+0x4eb/0x560 [ 98.950995][ T150] ? rcu_is_watching+0x15/0xb0 [ 98.955805][ T150] ? __pfx_vprintk_emit+0x10/0x10 [ 98.960854][ T150] ? unwind_next_frame+0xa5/0x23c0 [ 98.965982][ T150] ? do_raw_spin_lock+0x12b/0x2f0 [ 98.971017][ T150] ? __pfx___schedule+0x10/0x10 [ 98.975917][ T150] ? rcu_is_watching+0x15/0xb0 [ 98.980692][ T150] ? rcu_is_watching+0x15/0xb0 [ 98.985475][ T150] ? lock_release+0x4b/0x3d0 [ 98.990094][ T150] ? schedule+0x90/0x360 [ 98.994378][ T150] ? wq_worker_sleeping+0x63/0x250 [ 98.999536][ T150] schedule+0x164/0x360 [ 99.003735][ T150] __lock_sock+0x161/0x2c0 [ 99.008178][ T150] ? __pfx___lock_sock+0x10/0x10 [ 99.013148][ T150] ? do_raw_spin_lock+0x12b/0x2f0 [ 99.018176][ T150] ? __pfx_autoremove_wake_function+0x10/0x10 [ 99.024249][ T150] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 99.029731][ T150] ? lock_acquire+0x57/0x2e0 [ 99.034350][ T150] ? dump_stack_lvl+0x135/0x150 [ 99.039231][ T150] ? lock_sock_nested+0x6a/0x100 [ 99.044176][ T150] lock_sock_nested+0x9f/0x100 [ 99.048950][ T150] inet6_getname+0x15d/0x650 [ 99.053637][ T150] rds_tcp_conn_slots_available+0x288/0x470 [ 99.059537][ T150] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 99.065966][ T150] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 99.071779][ T150] ? __pfx_rds_tcp_conn_slots_available+0x10/0x10 [ 99.078213][ T150] rds_recv_hs_exthdrs+0x60f/0x7c0 [ 99.083354][ T150] ? process_scheduled_works+0xb02/0x1830 [ 99.089084][ T150] ? worker_thread+0xa50/0xfc0 [ 99.093873][ T150] ? kthread+0x388/0x470 [ 99.098141][ T150] ? __pfx_rds_recv_hs_exthdrs+0x10/0x10 [ 99.103967][ T150] rds_recv_incoming+0x9f6/0x12d0 [ 99.109011][ T150] ? __pfx_rds_recv_incoming+0x10/0x10 [ 99.114493][ T150] ? skb_copy_bits+0x7e5/0x8f0 [ 99.119274][ T150] rds_tcp_data_recv+0x7f1/0xa40 [ 99.124227][ T150] __tcp_read_sock+0x196/0x970 [ 99.128997][ T150] ? __pfx_rds_tcp_data_recv+0x10/0x10 [ 99.134460][ T150] rds_tcp_data_ready+0x369/0x9a0 [ 99.139498][ T150] ? _raw_spin_unlock_irqrestore+0x30/0x80 [ 99.145343][ T150] ? __pfx_sock_def_readable+0x10/0x10 [ 99.150843][ T150] ? __pfx_rds_tcp_data_ready+0x10/0x10 [ 99.156415][ T150] tcp_rcv_established+0x19f4/0x2740 [ 99.161725][ T150] ? __pfx_tcp_rcv_established+0x10/0x10 [ 99.167366][ T150] ? ip6_dst_check+0x10/0x7e0 [ 99.172050][ T150] ? ip6_dst_check+0xe2/0x7e0 [ 99.176730][ T150] ? ip6_dst_check+0x5e3/0x7e0 [ 99.181502][ T150] ? __pfx_ip6_dst_check+0x10/0x10 [ 99.186620][ T150] tcp_v6_do_rcv+0x8eb/0x1ba0 [ 99.191322][ T150] ? __pfx_tcp_v6_do_rcv+0x10/0x10 [ 99.196469][ T150] __release_sock+0x1b8/0x3a0 [ 99.201186][ T150] release_sock+0x5f/0x1f0 [ 99.205640][ T150] ? __pfx_rds_tcp_xmit_path_complete+0x10/0x10 [ 99.211910][ T150] rds_send_xmit+0x207e/0x28d0 [ 99.216726][ T150] ? __pfx_rds_send_xmit+0x10/0x10 [ 99.221887][ T150] rds_send_worker+0x7d/0x2e0 [ 99.226577][ T150] ? process_scheduled_works+0xa25/0x1830 [ 99.232333][ T150] process_scheduled_works+0xb02/0x1830 [ 99.237925][ T150] ? __pfx_process_scheduled_works+0x10/0x10 [ 99.243918][ T150] ? assign_work+0x3d5/0x5e0 [ 99.248519][ T150] worker_thread+0xa50/0xfc0 [ 99.253157][ T150] kthread+0x388/0x470 [ 99.257246][ T150] ? __pfx_worker_thread+0x10/0x10 [ 99.262389][ T150] ? __pfx_kthread+0x10/0x10 [ 99.266984][ T150] ret_from_fork+0x51e/0xb90 [ 99.271603][ T150] ? __pfx_ret_from_fork+0x10/0x10 [ 99.276722][ T150] ? __switch_to+0xc7d/0x1450 [ 99.281402][ T150] ? __pfx_kthread+0x10/0x10 [ 99.285989][ T150] ret_from_fork_asm+0x1a/0x30 [ 99.290768][ T150] [ 99.294406][ T150] Kernel Offset: disabled [ 99.298731][ T150] Rebooting in 86400 seconds..