last executing test programs: 12.717036915s ago: executing program 1 (id=2): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007ba0f8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000a500000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0xff8, &(0x7f0000001e00)=""/4088}, 0x94) 11.717810229s ago: executing program 1 (id=8): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) socket$netlink(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$PROG_BIND_MAP(0xa, 0x0, 0x0) socket$inet6_tcp(0xa, 0x1, 0x0) pipe(&(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) write(r2, &(0x7f0000000000)="fc0000001d000724ab09254ec100070007ab08001b000000f0ffff002100057e0000000000000e000039000000039815fad151ba0101099cecb94b46fe0000000a00020025", 0xffffff0c) r3 = socket$inet_udp(0x2, 0x2, 0x0) splice(r3, 0x0, r2, 0x0, 0x20e69a38, 0x0) close(r3) r4 = openat$tcp_mem(0xffffffffffffff9c, &(0x7f0000000000)='/proc/sys/net/ipv4/tcp_wmem\x00', 0x1, 0x0) write$cgroup_int(r4, &(0x7f0000001480)=0x2, 0x12) splice(r1, 0x0, r3, 0x0, 0x1100000000f336, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000000)) preadv(r0, &(0x7f0000000300)=[{&(0x7f00000003c0)=""/3, 0x3}], 0x1, 0xe, 0x6) 11.666408435s ago: executing program 3 (id=4): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f00000001c0)={0x2, 0x1, @local}, 0x10) connect$inet(r1, &(0x7f0000000480)={0x2, 0x4e22, @multicast1}, 0x10) getsockopt$inet_mtu(r0, 0x0, 0xa, &(0x7f0000000000), 0x0) sendmmsg(r1, &(0x7f0000007fc0), 0x800001d, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000100)=@newlink={0x30, 0x10, 0x1, 0x70bd25, 0x25dfdbf9, {0x0, 0x0, 0x600, 0x0, 0x48815, 0x40102}, [@IFLA_GROUP={0x8}, @IFLA_TXQLEN={0x8, 0xd, 0xd8b}]}, 0x30}, 0x1, 0x0, 0x0, 0x40810}, 0x4000000) 7.762659107s ago: executing program 4 (id=15): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'bridge0\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x25dfdbfe, {0x0, 0x0, 0x74, r1, 0x96282}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_GROUP_FWD_MASK={0x6, 0x9, 0xeaa9}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x810}, 0x20044880) 7.762337779s ago: executing program 1 (id=17): r0 = socket$inet6_udp(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000500)={0xa, 0x4e20, 0xffffffff, @empty, 0x4}, 0x1c) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000200)={0x1, &(0x7f0000000000)=[{0x6, 0x9, 0x8}]}, 0x10) syz_emit_ethernet(0x8d, &(0x7f0000000300)=ANY=[@ANYBLOB="ffffffffffffbbbbbbbbbbbb86dd6a06ff580057110000000000000000000000ffffac1414bbff0200000000000000000000000000014e224e20005790"], 0x0) 6.83587386s ago: executing program 0 (id=19): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50) 6.733005714s ago: executing program 4 (id=20): sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) sendmsg$NL80211_CMD_START_AP(r1, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000500)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="a1830000000000000000050000000800030027b558007e7d0c92f994adf6f33aefd336727d166a5b4595875e97d27aa04b8a04c3fe42cd91a696446fb43e04cb1af095"], 0x78}, 0x1, 0x0, 0x0, 0x4800}, 0x4048000) sendmsg$NL80211_CMD_ADD_NAN_FUNCTION(r0, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000540)={&(0x7f0000000300)={0x214, r2, 0x2, 0x70bd27, 0x25dfdbfd, {{}, {@void, @val={0xc, 0x99, {0xf, 0x74}}}}, [@NL80211_ATTR_NAN_FUNC={0x1f4, 0xf0, 0x0, 0x1, [@NL80211_NAN_FUNC_INSTANCE_ID={0x5, 0xf, 0xb2}, @NL80211_NAN_FUNC_SRF={0x1e8, 0xc, 0x0, 0x1, [@NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x6}, @NL80211_NAN_SRF_BF_IDX={0x5, 0x3, 0x1}, @NL80211_NAN_SRF_BF={0x103, 0x2, "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"}, @NL80211_NAN_SRF_INCLUDE={0x4}, @NL80211_NAN_SRF_MAC_ADDRS={0x58, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}]}, @NL80211_NAN_SRF_MAC_ADDRS={0x70, 0x4, 0x0, 0x1, [{0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @broadcast}, {0xa, 0x6, @device_b}, {0xa, 0x6, @broadcast}, {0xa}, {0xa}, {0xa, 0x6, @device_b}]}, @NL80211_NAN_SRF_INCLUDE={0x4}]}]}]}, 0x214}}, 0x4000005) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000070000040900010073797a30000000009c000000090a010400000000000000000700000308000a40000000000900020073797a30000000000900010073797a3000000000080005400000000d58001280200001800e000100636f6e6e6c696d69740000000c0002800800014000000008200001800e000100636f6e6e6c696d69740000000c00028008000140000000001400017b090001006cdbf80789f3f947dd000280080003"], 0xe4}, 0x1, 0x0, 0x0, 0x8001}, 0x20050840) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={0xffffffffffffffff, 0x5, 0x1, 0x0, &(0x7f00000002c0)='%', 0x0, 0xd01, 0x0, 0xffffffffffffff2e, 0x0, 0x0, 0x0, 0x2, 0x1100}, 0x50) r3 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000680)={0x1b, 0x0, 0x0, 0x8, 0x0, 0x1, 0x10000, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x0, 0x4}, 0x50) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x44, 0x4, 0x2, 0x0, 0x1}, 0x50) socketpair(0x1, 0x2, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000005c0)={r4, &(0x7f00000003c0), &(0x7f0000000580)=@tcp=r6}, 0x20) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000440)={r4, &(0x7f00000003c0)="01", &(0x7f0000000300)=@tcp=r5, 0x1}, 0x20) r7 = socket$inet6_udp(0xa, 0x2, 0x0) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000380)={r4, &(0x7f0000000140), &(0x7f0000000340)=@udp6=r7, 0x1}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000780)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000700), &(0x7f0000000740)}, 0x20) r9 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000007c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x2, '\x00', 0x0, 0xffffffffffffffff, 0x1, 0x1, 0x3}, 0x50) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000008c0)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000840), &(0x7f0000000880)}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xe, 0x22, &(0x7f0000000a40)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@map_fd={0x18, 0x6, 0x1, 0x0, r4}, @ringbuf_query={{0x18, 0x1, 0x1, 0x0, r8}}, @map_val={0x18, 0x0, 0x2, 0x0, r9}, @ldst={0x0, 0x3, 0x6, 0x2, 0x9, 0x18, 0xfffffffffffffffc}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r10}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x2}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @call={0x85, 0x0, 0x0, 0x67}], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000000)='syzkaller\x00', 0x2, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback=0x20, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8}, 0x94) r11 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000000)={'veth1_macvtap\x00', 0x0}) r13 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r13, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000240)=ANY=[@ANYBLOB="54000000100003052abd70000c00000000000000", @ANYRES32=0x0, @ANYBLOB="3a000000a8010200140012800b0001006d616373656300000400028008000500", @ANYRES32=r12, @ANYBLOB='\n\x00'], 0x54}}, 0x800) 6.732716115s ago: executing program 1 (id=21): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) r0 = socket$kcm(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, 0x0, &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x3, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x2000000000543}, {0x5, 0x7fffffffffffffff}, {0x2}, 0x70bd2c, 0x3500, 0xa, 0x4, 0x0, 0x50}}, 0xf0}, 0x1, 0x0, 0x0, 0x880}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 6.129949514s ago: executing program 2 (id=22): socket(0x10, 0x3, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r2], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 5.93293099s ago: executing program 0 (id=23): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dri(0x0, 0x5, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c0000000400000004"], 0x48) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000b00), 0x2800, 0x0) ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, 0x0) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="040e06006220"], 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 5.592504917s ago: executing program 4 (id=24): socket$nl_xfrm(0x10, 0x3, 0x6) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) socket$netlink(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000280)={0x0, 0xffe, &(0x7f0000000940)={&(0x7f00000013c0)=ANY=[@ANYBLOB="640000001000030400"/20, @ANYRES32=0x0, @ANYBLOB="e5fda988000000002800128009000100766c616e00000000180002800c0002001c0000001f000000060001000700000008000500", @ANYRES32=r0, @ANYBLOB='\b\x00\n\x00', @ANYRES32, @ANYBLOB="0a000100000070"], 0x64}, 0x1, 0x0, 0x0, 0x8811}, 0x0) 5.239930822s ago: executing program 2 (id=25): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20048800) 4.750986045s ago: executing program 3 (id=26): r0 = socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$inet(r0, &(0x7f0000003080)={&(0x7f0000002c80)={0x2, 0x4e1f, @dev={0xac, 0x14, 0x14, 0x37}}, 0x10, 0x0, 0x0, &(0x7f0000000140)=[@ip_retopts={{0x1c, 0x0, 0x7, {[@timestamp_prespec={0x44, 0xc, 0x5, 0x3, 0x6, [{@multicast1, 0x6}]}]}}}], 0x20}, 0x148) 4.146558785s ago: executing program 2 (id=27): socket$inet_sctp(0x2, 0x1, 0x84) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$tun(0xffffffffffffff9c, 0x0, 0x103000, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f0000000600)={&(0x7f00000001c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0xfc) sendmsg$inet(0xffffffffffffffff, 0x0, 0x4000080) r0 = socket$kcm(0x29, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001000)=ANY=[@ANYBLOB="bf16000000000000b70700000100f0ff5070000000000000300000000000c00095000000000000002ba728041598d6fbd30cb599e83d24bd8137a3aa81e0ed139a85d36bb3019d13bd2321af3c2bd67ce68f15c0ec71d0e6adfefcf1d8f7faf75e0f226bd917060000007142fa9ea4318123751c0a0e168c1886d0d4d35379bd223ec839bc16ee988e6e0dc8cedf3ceb9fbfbf9b0a49ef42d430f6296b72a83438810720a159cda90363db3d221e152dfca64057ff3c4744aeaccd3641110bec4e9027a0c8055bbfc3a96d2e8910c2c39e4babe802f5ab3e89cf6c662ed40000000022278d00031e5388ee5c867ddd58211d6ece3ccb0cd2b6d3cffd962867a3a2f624f992daa94a6a556f3218ce740068725c37074e468ee207d2f73902ebcfcf49822775985bf31b715f5888b24efa190000000000000000000000000000ddffffff020000000000000000ddffffff0000b27cf3d1848a54d7132be1bfb0adf9deab3323aa9fdfb52faf9cb09c3bfd09000000b91ab219ef00bb7b3de8f67ffcad3f6c3c2b1f03550000000000001cf41ab11f12fb1e0a494034007de7c6592df1a6c64d8f20a67745409e011f1264d43f153b3d34889f40159e800ea2474b540500a30b23bcee46762e2093bcc9eae5ee3e980026c96f80ee1a00000000740750fa4d9aaa705989b8e673e3296e52d337c56abf112874ec51d6fe048ba6866adebab53168770a71ad901ace383e41d277b103923a9d961f7a2591dbe4a912ffaf6f658f3f9cd16286744f83a83f138f8f92efd92239eafcc5c1b3f97a297c9e49a0c3300ef7b7fb5f09e0c8a868a353409e34d3e82279637599f35ad3f7ffffff3cac394c7bbdcd0e0eb52162e0c410ade7000026a4e739c60f03cc4146a77af02c1d4cefd4a2b94c0aed8477dfa8ceefb467f05c6977c78cdbf3f704ec73754910fe050038ec9e47de89298b7bf4d769ccc18eedd9068ca1457870eb30d219e23ccc8e06dddeb61799257ab5000013c86ba99523d61a00000000c270246c878d01160e6c07bf6cf8809c3a0d062357ba2515567230a6f8b2ad1e1f4933545fc3c741374211663f6b63b1dd044dd0a2768e825972fc4300001467c89fa0f82e8440105051e5510a33dcda5e4e202bd622549c4cffffff501d3a5dd7143fbf221fff161c12ca389cbe0000000000000fff2ecf631c6c5fd9c26a54d43fa050b88d1d43a8645bd9109b7e07869bba7131421c0f397073943330baafd243c0c6ffe673bab4113be7664e08bdd7115c61afcb718cf3c4680b2f6c7a8400e378a9b15bc20f49e298727340e87cdefb40e56e9cfad9931b8c552b2c7c503f3d0e7ab0e958adb8629aeec90e6d1857da822e40009995ae166deb9856291a43a6f7eb2e32cefbf463789eaf79b8d4c22be89f44b032dad13007b82e6044f643fc8cd07ae636a5dbe9864a117d27326850a7c3b570863f532c218b10af13d7be94987005088a83880ccab9c9920c2d2af8c5e13d52c83ac3fa7c3ae6c08384865b66d2204c2e4f3ae200f279b512b4dcb5dd9cba16b62040bf8702ae12c77e6e34991af603e3856a346cf708feeb708ab22b560cf8a4a6f31ba6d9b8cb0908000000000000001a342c010000000000e667a7592b33406f1f71c739b55db91d2309dc7ae401005f52053a39e7307c09ff3ac3e820b01c57dd74d4aafc4c383a17bc1de5347bb71ca16dcbbbaa2935ae662082b56cf666e63a759e0ef3ea7af6881513be94b362e15ffca8ec453b3a2a67be70c17b0f9c2eac765816c30c2e7133dca1c7669522e8dff8bc570a93fbdb688c3aef810000007a6ea6b11163392a19d87995b51cb6febd5f34a34998d2010fd5facf68c4f84e2f66e27c81a149d7b331983d3b74444953fc1216dfec10b724be3733c26f12538376e177ffef6fd2020000000000000008e4919a463d5332a2546032a3c06b94f168e8fc4bda0c294723fe306f26c477af4b926644672985fab7cc67bc5b5f5d38cdd8df95147ebe1cd88b0a4c6cde9951be10ba7dfddfefb238fac2303cc8982f1e55b005afcfea5eb037248fefad6bb02c162ce92ab17744c8ec3d2e80cf3205d36699fd381bc81231fb5e12e45f3059f361d08d6a6d019ebf105eaf43083c29512bcedd79ca9bf24e063d0c273ed70a2b70be521ea27dc8cf3c9bdf83b93405db07e82e2db484f8673e0e97dd7e8a872148613c3a04f3d67f4375ba5c7f1b00ffffff7f000000000801f71d79d812ced782646b5f79c8fc08bb5c11020108d702edd2ea9c96cf0d2d48aa5fc0a7bf1b51afd85350ad00b78c598fa8701b000884de790b54e5ab2e8ff0c7ae23e0b6eeac95c4c2eef2e5eb1d019d52099fbd404e8ece970f67856ba7e960bd8b1e4105ce7e31f7c9c3e3fa61aaa967b90087e91d703e98535b107b8f4653be4c46a3a1adb07d226952b8573b417018316fa96e2b8e7370baa16d4122c863709b08d4639a19a46ac90ac48a13ee9bcaa875fc700000000000003b40dc5c745fe2491e8425e600000000000000000000000000000000000000000000000000000000000000250318a44ad31baac0520a913301e630ae540f3289aebde8633f6f450c0738e16df6c7f1e0832a2a16fe6e39959735758248032cdf7320c6dc87b01e3f9a7811b200000000ae189de4b9b25f7c7a9c070000002af1c06315270de4a6605e4b4b58bef76fac54f11b84bd7bcd6b6a485edfb7684c770a39b38b08e18a51a4d4e66ca21c06a4b4198e1bc2ef990c9ba911efed626e5ee341a17bf8132b09000000d31df213c802d74797056fd3bca8b2d6cb134437cba0193ba4360bdcc98aad2560aa48291c4eb9d4e08ad7a9c5f04be1ab597124d84dfc7bd8cca8f68154a0ed356e773a797ca6d66748857b4abbf8830abeea2a46342e6a7378173cb29d5cdcd698a0203f78116b710008000000000000007c2d86b94472807c10eb9a8e2fb8bd79fe3a8316deff3ee641c9a080a2173642e673a672279bae4e7e28055da9497d7edb53be6e80482bd4d9a74b8dd4221fff0f0000705d7257ff7f76c78ba0b44ec0bdfa0d32d7042059b13a079639f14f9032b856d892ad6af5124c9c3130485e9682ff1f3c54e475d5bb496aef4bb537d7e191dfdeba109fdcf7864763f87a6d711cf52e520a6ce30e134c55e0caac037209d2f14fcddd00000000000000000000000000000000e609893bdce015e8ccfb36399844db61f6171b0b0e845e48728450c6ba4f7098f8e000676b59ab9f851f3ab77847ce05c89411277ec69c409b7ec50a3337a78675f38a568612c235ab5f2cd6d035d5f5f6a693c381adbbf7b37e37292783b2c7efe7d3a067906552f76d419e0300000000000000000000008f3a20b49fe7636806867283e35cff8d00e7b251bab3cf6377a24f8e8d4bda7503674bc94bf7f4d2fa6f25944bf0a186436d9f6831995976328a1fdc78492c65c1434855dc35c3cf7cf9610c5387794443c99b304799114132362849c3fa85d6379729ff9094933db0cfbe8887c50b87e1469fdf454cef4cbc5f7bf384000000000000a4e8c1a25f47c440144a9776be6cb40aafdb9d3cc8f6a6050974e1c4000000000000008b753f4e1bef9556efcc087a99dbf231167013a4b2eaf6338a0b100c98a331dffc09"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @local}, 0x10, 0x0}, 0x20000891) ioctl$sock_kcm_SIOCKCMATTACH(r0, 0x89e0, &(0x7f0000000040)={r2, r1}) sendmsg$kcm(r0, &(0x7f0000002080)={0x0, 0x0, &(0x7f0000002000)=[{&(0x7f0000000880)="1a", 0x100000}], 0x1}, 0x0) 4.017736427s ago: executing program 0 (id=28): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r1, &(0x7f0000003400)=[{{0x0, 0x0, &(0x7f00000004c0)=[{&(0x7f0000000200)="dcd4d94b", 0x4}], 0x1}}, {{0x0, 0x0, &(0x7f0000000940)=[{&(0x7f00000007c0)="71ee1feb", 0x4}], 0x1, &(0x7f0000000980)=[{0x10, 0x10c, 0x5}, {0x10, 0x1, 0x80000000}], 0x20}}], 0x2, 0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f0000000080), 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f0000000500)=@l2tp6={0xa, 0x0, 0x3, @loopback, 0x1, 0xfffffffe}, 0x80, &(0x7f0000000140)=[{&(0x7f0000000280)="f4000900062b2b25fe80000000000000dc8b850f2323fcb11ea3548466cc00007a000000ad6e911b", 0x28}, {0x0, 0xf5}], 0x2}, 0x900) sendmmsg$unix(r3, &(0x7f00000bd000), 0x318, 0x0) writev(r2, &(0x7f0000000640)=[{&(0x7f00000002c0)="5810", 0x2}], 0x1) close(r2) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000340), 0xffffffffffffffff) sendmsg$NL80211_CMD_TDLS_OPER(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000a00)={&(0x7f0000000980)={0x20, r5, 0x1, 0x0, 0x25dfdbfd, {{0x8}, {@void, @val={0xc, 0x99, {0x1, 0x1}}}}}, 0x20}}, 0x0) 3.028208239s ago: executing program 0 (id=29): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="04000000040000000400000005"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1b, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x9, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000838500000004"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$PROG_BIND_MAP(0xa, &(0x7f00000004c0)={r1}, 0xc) 2.969310952s ago: executing program 4 (id=30): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @multicast1}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000002d40)=[{{0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f0000000980)="91", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000700)=[{&(0x7f0000000140)="58fa6ed17795eed125fc7895c05810975f61986b48ac2a4a3e919387aab0e85ccd638f5dd686b5165f04a88a839b1f4aafa5cf8a571847ff28c490648eed244e7f0108fe6e41268f3890b11f119dccb49baa59e18948f426c382b7b00fd53547f87a021aa117572adef57ac1fa386428c4a34ac9d224", 0x76}, {&(0x7f00000002c0)="28d15ae660ca5f33b137aad9027a95d81d081c3c75f2cfe8ecd4a1fce89bbe9301052b8e26676f4d74504e6a8bad7ef9e64306a3f7e43a3358c94e979ed9eb6af3a0a1a844f8b741fd75b9b941ba4bd88109a6cc3e25d5264c0de5a1fb05f9a2bba473c9cefa230f36f8dde03427ea6f6a9064aba36b54377bdb6d7d78b56117dba63728d8a2b3a44819088d702e9b9158730a30db4ea5df54cb1703faee", 0x9e}, {&(0x7f0000000380)="10030a77c8297e3cb17b51930570136b41e071c457e59837a31d61035200eca6dd2900465c2c5e8a58159a9aaed3d405e77feee0ee4cea3e1810fc0e4cf922d169839614f0fbab4d68915e1df093d6c23e7f8e1c448a69aede724b54a1a7d6f126fba4604f585ac8882f8ed6bb94e4fd899d625dfa", 0x75}, {&(0x7f0000000400)="182c3bfe85e50f4ad113c9c09e072a281f2a0abca821229d24b707153c0e9135b31693987434c0b3a42848f8052ff2c7a17655", 0x33}, {&(0x7f0000000440)="e383f9d49d759003abb076489dff02e14f9e2235150734b5ca9134878f97fd1b5ab4e8921507bdbc6c5f30724aaa8e60bdd957f39476c287d70854ddbe2c20ae150032a00080459f971670d3893d538fe53df53987", 0x55}, {&(0x7f0000000500)="565f7c0b2726a5661a31b2b735d64b01c4cf9ba88cb4cab1564746580f90a6eae072f69a672adca7ab505d43b9b13e88672f256a49e82f777812edf80bb5f8006a00ab7e7caa96c4abfefd2953df47d6d5e359", 0x53}, {&(0x7f0000000600)="3ec4e720d789d8276cd589a5c31bbd85736a75929820e726681886ebd6834c87bef3a80939e058b79cf6dd", 0x2b}], 0x7}}, {{0x0, 0x0, &(0x7f0000000ac0)=[{&(0x7f0000000840)="dfdab1141c87185723b8d831b275ecbe70981fc3ee8d6992d3a8e4a970ec362228008828a1cd1660b59b9661cc", 0x2d}, {&(0x7f0000000fc0)="8e7b47ab4d1d7f377626eaac22b2c30c537cc029e52e5b2ac9f6a24020710d1960a3df627ddcad00bcacf296ac92daff97bc4e0367e0cfa20f3c9bb82d34a83441362399838c02156d3877a987d5c40b5bf7a305aef4122a982cbd743a6e90cdf26347f9e2f5be2623911956a9c68250654c11dee872dd44c47eabbc59a650e82a", 0x81}], 0x2, &(0x7f0000000b00)}}, {{0x0, 0x0, 0x0}}], 0x4, 0x2090) 2.920914215s ago: executing program 1 (id=31): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000440)={0xa, 0x4e21, 0x0, @empty, 0x4}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f0000000540), 0x28) setsockopt$inet6_tcp_int(r0, 0x11a, 0x3, &(0x7f0000000040), 0x4) 2.920591607s ago: executing program 2 (id=32): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000a40)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_NEWRULE={0x100, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0xcc, 0x4, 0x0, 0x1, [{0xc8, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xb8, 0x2, 0x0, 0x1, [@NFTA_MATCH_REV={0x8}, @NFTA_MATCH_NAME={0xb, 0x1, 'policy\x00'}, @NFTA_MATCH_INFO={0x9e, 0x3, "ebae551382395afa4d23edfcbe6d55b57cb15e63c15c46395916e2b388abc3d6ce2316334e8278ad51f6d123a616cf3eb44b275fe6bc6bf402a3f9335458bb7a92f23fc0aa88f2495ff70157ea6b29f7fab11ec362920cab3350208c749f342b38e0df9334cea6fe1e331d76beb7094102d5d409992dcd236e3fd7a8785f97ae9d01b0822c161a491bef0501f8e81ddd66d1b676e8c9f0b2159c"}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_USERDATA={0x5, 0x7, 0x1, 0x0, 'P'}]}], {0x14, 0x11, 0x20, 0x0, 0x0, {0x5}}}, 0x128}, 0x1, 0x0, 0x0, 0x8010}, 0x4000800) 2.540779801s ago: executing program 3 (id=33): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="02000000040000"], 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0xc, 0x4, 0x4, 0x10000, 0x0, r0, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x2}, 0x50) 2.248094287s ago: executing program 4 (id=34): bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x16, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000080000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0x24, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x10}, 0x94) r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=ANY=[@ANYBLOB="0b00000005000000000400000d00000001"], 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f00000004c0)={r0, &(0x7f0000000340), &(0x7f00000005c0)=""/155}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000800000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_BTF_LOAD(0x12, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x5, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r1, 0x2000002, 0x3a, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 2.24102848s ago: executing program 0 (id=35): socket(0x10, 0x3, 0x0) r0 = socket$igmp(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, 0x0) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000400)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000003b00000008000300", @ANYRES32, @ANYBLOB="1f003300d000000008021100000108021100000050505050505000001502", @ANYRES8=r2], 0x3c}, 0x1, 0x0, 0x0, 0x8800}, 0x10) 2.176825782s ago: executing program 1 (id=36): syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) r0 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000100)={'veth0_macvtap\x00', 0x0}) r2 = socket(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x70bd26, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0xffff}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x1, [0x0, 0x0, 0x4], 0x0, [0x1, 0x2, 0xfffe, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x5c4, 0x8000, 0x0, 0x0, 0x3dc], [0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x1000]}}}}]}, 0x88}}, 0x20000000) ioctl$FS_IOC_RESVSP(0xffffffffffffffff, 0xc0189436, 0x0) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r3, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r3, 0xfffffffc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000009b40)={0x0, 0x0, &(0x7f0000009b00)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a3c000000090a010400000000000000000a0000040900010073797a3100000000080005400000002b0c0009"], 0x64}, 0x1, 0x0, 0x0, 0x4000850}, 0x24000000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="4800000010000d0428bd7000fcdbff2500008000", @ANYRES32=0x0, @ANYBLOB="1000000000000000280012800b000100627269646765000018000280050019"], 0x48}, 0x1, 0x0, 0x0, 0x10}, 0x4008050) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x24, 0x24, 0x1, 0x70bd2a, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x5}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) r7 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000200)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x50) r8 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x1, '\x00', 0x0, 0x0}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f00000002c0)=@ringbuf={{0x18, 0x8, 0x0, 0x0, 0xfffff7dd}, {{0x18, 0x1, 0x1, 0x0, r8}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x7, 0x0, 0xb, 0x2}, {0x3, 0x2, 0x3, 0xa, 0x9}, {0x5, 0x0, 0xb, 0x9, 0x0, 0x0, 0x1}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff8, 0xf1}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffdff}, {}, {}, {0x7, 0x0, 0xc}, {0x18, 0x2, 0x2, 0x0, r7}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000001b00)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0xa, '\x00', 0x0, @fallback=0x10, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800000}, 0x94) r9 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@lli, {}, {0x7, 0x1, 0x4}, {}, {}, {}, {0x85, 0x0, 0x0, 0x99}}]}, &(0x7f0000000000)='syzkaller\x00', 0xa, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90) r10 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, &(0x7f0000000600)="2e61b3e3dff01e19adc7beef915d564c90c200"/32, 0x20) r11 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r11, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r9, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)={0x28, r10, 0x7, 0x0, 0x0, {}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @local}]}]}, 0x28}}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r9) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01002cbd700000000001010000001c000180060001000200000008000300c51414370800060003000000"], 0x30}, 0x1, 0xff07}, 0x2000000) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffc0000, {0x0, 0x0, 0x0, r1, {0x0, 0x8}, {0xffff, 0xffff}, {0x9, 0xfff3}}, [@qdisc_kind_options=@q_taprio={{0xb}, {0x8, 0x2, [@TCA_TAPRIO_ATTR_SCHED_ENTRY_LIST={0x4}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x40001}, 0x10) 2.104509844s ago: executing program 2 (id=37): r0 = openat$binderfs(0xffffffffffffff9c, &(0x7f00000000c0)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_SET_CONTEXT_MGR_EXT(r0, 0x4018620d, 0x0) r1 = openat$binderfs(0xffffffffffffff9c, &(0x7f0000000200)='./binderfs/binder0\x00', 0x0, 0x0) ioctl$BINDER_WRITE_READ(r1, 0xc0306201, &(0x7f0000000080)={0x8, 0x0, &(0x7f0000000400)=[@increfs], 0x0, 0x0, 0x0}) r2 = dup3(r1, r0, 0x80000) ioctl$BINDER_WRITE_READ(r0, 0xc0306201, &(0x7f0000000040)={0x10, 0x0, &(0x7f0000000440)=[@request_death={0x400c6313}], 0xffffffffffffff9a, 0x1000000, 0x0}) ioctl$BINDER_WRITE_READ(r2, 0xc0306201, &(0x7f0000000640)={0x8, 0x0, &(0x7f0000000000)=[@decrefs={0x400c6314}], 0x0, 0x0, 0x0}) sendmsg$nl_generic(0xffffffffffffffff, 0x0, 0x20048800) 1.883590026s ago: executing program 3 (id=38): socket$nl_route(0x10, 0x3, 0x0) syz_open_dev$dri(0x0, 0x5, 0x40000) prlimit64(0x0, 0xe, &(0x7f0000000140)={0x8, 0x8b}, 0x0) sched_setscheduler(0x0, 0x2, &(0x7f0000000080)=0x8) r0 = getpid() sched_setscheduler(r0, 0x2, &(0x7f0000000200)=0x7) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0xb635773f06ebbeee, 0x8031, 0xffffffffffffffff, 0x0) socketpair$unix(0x1, 0x2, 0x0, 0x0) connect$unix(0xffffffffffffffff, &(0x7f0000000500)=@abs, 0x6e) sendmmsg$unix(0xffffffffffffffff, &(0x7f0000000000), 0x651, 0x0) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x2, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[], 0x50) bpf$MAP_CREATE(0x0, &(0x7f0000000380)=ANY=[@ANYBLOB="0c0000000400000004"], 0x48) r2 = openat$fb0(0xffffffffffffff9c, &(0x7f0000000b00), 0x2800, 0x0) ioctl$FBIOGET_CON2FBMAP(r2, 0x460f, 0x0) syz_emit_vhci(&(0x7f00000007c0)=ANY=[@ANYBLOB="040e06006220"], 0x9) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_PROG_ATTACH(0x8, 0x0, 0x20) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) 1.269654297s ago: executing program 0 (id=39): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r0, 0x107, 0xf, &(0x7f0000006ffc)=0x4000000000000200, 0xe50fb6c50bc849c9) r1 = socket$nl_route(0x10, 0x3, 0x0) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff}) setsockopt$TIPC_SRC_DROPPABLE(r2, 0x10f, 0x80, &(0x7f0000001640)=0x4f1d, 0x4) sendmmsg$inet(r2, &(0x7f0000001540)=[{{0x0, 0xfffffffffffffda1, 0x0}}], 0x40001b6, 0xf5) close(0x4) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000004c0)={0x0, 0x0, &(0x7f00000003c0)={0x0, 0x24}}, 0x0) getsockname$packet(r3, &(0x7f0000000380)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000180)=0x14) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffffffff00f687000000", @ANYRES32=r4, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r5, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000200)={&(0x7f0000000700)=ANY=[@ANYBLOB="c00000002f6b7c0854fe8a0ed49e28d8f88c11f0c4b0ea495e7e8b0d2a05e4f00ebc8be0aae1120d02e23a4981b8bf92ec30f9343d544c0dc0b68e216496426c8d0089b82a6c3542d1e767490d86a0b20b697f8308a86de9ae804a4ee436c9a91acfd4b617a0be9e6504c7986ad21a9ba2cc94a5f807ba6c621b2b502139fd34ed1e2aeb511ba010fc8fdb961aab77eb8a1c52c76b1d23bcc5", @ANYRES16=r6, @ANYBLOB="04002cbd7000fbdbdf2508000000ac0002809c000500b03b7ab033784e0a2ec38db554ae1b631adb128bc863eec6a292bcde8a7a0c0eaf0dd01800a37eae0b828f05ab90fa8c1241acd58104770ac84648efce8bf50ed5a1acdcc162ea82f901e7937e7311f6447858dd55e2bada1bf2a1248d2a83bf8d950703d33f24a1938de3137bea29d4f37391124f4213a527e97934d2c69454d39723b124b6d7cf845cc115ff629e1300ed42adb2fb81ff04000100080002004d000000"], 0xc0}, 0x1, 0x0, 0x0, 0x20040805}, 0x50) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) bpf$BPF_LINK_CREATE_XDP(0x1c, 0x0, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000000)=ANY=[], 0xfdef) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x20008090) socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$tipc(&(0x7f0000002dc0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SET_NETID(r5, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000440)={&(0x7f0000000400)={0x24, r8, 0x100, 0x70bd2a, 0x25dfdbfd, {{}, {}, {0x8, 0x2, 0x6}}, ["", "", "", "", "", "", ""]}, 0x24}, 0x1, 0x0, 0x0, 0x4880}, 0x20008000) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) r9 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r9, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2, 0x31}, 0x48) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r5) sendmsg$NL80211_CMD_GET_MPP(r5, &(0x7f0000000300)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f00000002c0)={&(0x7f0000000280)={0x2c, r10, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x3, 0x28}}}}, [@NL80211_ATTR_MPATH_NEXT_HOP={0xa}]}, 0x2c}, 0x1, 0x0, 0x0, 0x20000080}, 0x8000000) sendmsg$nl_xfrm(r7, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000001f40)={&(0x7f00000004c0)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x25dfdbfe, {{@in6=@remote, @in=@local, 0xfffc, 0x0, 0x0, 0x0, 0xa}, {0x0, 0xa9, 0x0, 0x0, 0x0, 0xffffffffffffffff}, {0x0, 0x9ff, 0x40800000000000, 0x800000000000000}}}, 0xb8}, 0x1, 0x0, 0x0, 0x20000c90}, 0x0) socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000380)={'bond0\x00'}) 1.238363009s ago: executing program 4 (id=40): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="640000000001010400000000141a00000200"], 0x64}}, 0x0) getsockopt$bt_hci(r0, 0x84, 0x85, &(0x7f0000000100)=""/4098, &(0x7f0000000040)=0x1002) 782.822197ms ago: executing program 2 (id=41): bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000300)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x60}, 0x94) r0 = socket$kcm(0x11, 0xa, 0x300) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001540)=ANY=[], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f0000000000)=r1, 0x4) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f00000006c0)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newsa={0xf0, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in=@rand_addr=0x64010101, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x0, 0x0, 0x4e21, 0x0, 0x2, 0x0, 0x0, 0x1d}, {@in6=@private1, 0xfe, 0x32}, @in6=@empty, {0x3, 0x0, 0xfffffffffffffffd, 0x8, 0x1, 0x9, 0x7fffffff, 0x2000000000543}, {0x5, 0x7fffffffffffffff}, {0x2}, 0x70bd2c, 0x3500, 0xa, 0x4, 0x0, 0x50}}, 0xf0}, 0x1, 0x0, 0x0, 0x880}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xb68, 0x0, &(0x7f0000000000)='%', 0x0, 0xd01, 0x88be, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 0s ago: executing program 3 (id=42): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1000002, 0x31, 0xffffffffffffffff, 0xf679000) r0 = socket(0x1e, 0x2, 0x0) setsockopt$TIPC_DEST_DROPPABLE(r0, 0x10f, 0x81, &(0x7f0000000480), 0x4) recvmmsg(r0, &(0x7f0000000080)=[{{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000540)=""/174, 0xae}], 0x1, &(0x7f0000001fc0)=""/67, 0x43}, 0x1}], 0x1, 0x40002122, 0x0) sendmsg$tipc(r0, &(0x7f0000000100)={&(0x7f0000000040)=@nameseq={0x1e, 0x1, 0x3, {0x1, 0x1, 0x2}}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x4800) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.68' (ED25519) to the list of known hosts. [ 196.812689][ T5557] cgroup: Unknown subsys name 'net' [ 196.929875][ T5557] cgroup: Unknown subsys name 'cpuset' [ 196.946870][ T5557] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 203.932084][ T5557] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 204.360918][ T1308] ieee802154 phy0 wpan0: encryption failed: -22 [ 204.368131][ T1308] ieee802154 phy1 wpan1: encryption failed: -22 [ 208.909531][ T5575] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 208.922037][ T5580] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 208.932291][ T5580] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 208.949520][ T5581] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 208.965391][ T5581] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 208.975788][ T5581] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 208.985634][ T5581] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 208.997516][ T5581] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 209.027264][ T5581] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 209.031134][ T4876] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 209.046473][ T4876] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 209.056164][ T5586] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 209.085952][ T4876] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 209.097398][ T4876] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 209.098986][ T5585] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 209.110330][ T4876] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 209.118139][ T5585] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 209.130216][ T5585] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 209.162566][ T5585] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 209.175467][ T5585] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 209.230286][ T4876] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 209.243803][ T4876] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 209.256036][ T4876] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 209.273860][ T4876] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 209.287722][ T4876] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 211.157048][ T4876] Bluetooth: hci1: command tx timeout [ 211.239296][ T4876] Bluetooth: hci2: command tx timeout [ 211.239447][ T5581] Bluetooth: hci3: command tx timeout [ 211.239555][ T5581] Bluetooth: hci0: command tx timeout [ 211.394859][ T5581] Bluetooth: hci4: command tx timeout [ 213.246082][ T5581] Bluetooth: hci1: command tx timeout [ 213.316034][ T5581] Bluetooth: hci2: command tx timeout [ 213.316208][ T5585] Bluetooth: hci3: command tx timeout [ 213.321740][ T4876] Bluetooth: hci0: command tx timeout [ 213.475213][ T4876] Bluetooth: hci4: command tx timeout [ 214.417474][ T5582] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.429412][ T5582] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.439046][ T5582] bridge_slave_0: entered allmulticast mode [ 214.459186][ T5582] bridge_slave_0: entered promiscuous mode [ 214.511594][ T5582] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.519263][ T5582] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.527239][ T5582] bridge_slave_1: entered allmulticast mode [ 214.537443][ T5582] bridge_slave_1: entered promiscuous mode [ 214.868848][ T5587] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.896690][ T5587] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.914165][ T5587] bridge_slave_0: entered allmulticast mode [ 214.928641][ T5587] bridge_slave_0: entered promiscuous mode [ 214.947265][ T5587] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.955179][ T5587] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.962988][ T5587] bridge_slave_1: entered allmulticast mode [ 214.974933][ T5587] bridge_slave_1: entered promiscuous mode [ 215.047487][ T5582] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.315529][ T4876] Bluetooth: hci1: command tx timeout [ 215.396280][ T4876] Bluetooth: hci3: command tx timeout [ 215.402129][ T5581] Bluetooth: hci0: command tx timeout [ 215.402877][ T5582] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.407950][ T5581] Bluetooth: hci2: command tx timeout [ 215.455511][ T5574] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.463802][ T5574] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.471915][ T5574] bridge_slave_0: entered allmulticast mode [ 215.482391][ T5574] bridge_slave_0: entered promiscuous mode [ 215.514709][ T5587] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 215.556025][ T4876] Bluetooth: hci4: command tx timeout [ 215.601069][ T5574] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.609395][ T5574] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.617373][ T5574] bridge_slave_1: entered allmulticast mode [ 215.627036][ T5574] bridge_slave_1: entered promiscuous mode [ 215.646020][ T5587] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 215.693383][ T5582] team0: Port device team_slave_0 added [ 215.783772][ T5589] bridge0: port 1(bridge_slave_0) entered blocking state [ 215.791880][ T5589] bridge0: port 1(bridge_slave_0) entered disabled state [ 215.799607][ T5589] bridge_slave_0: entered allmulticast mode [ 215.808434][ T5589] bridge_slave_0: entered promiscuous mode [ 215.828165][ T5582] team0: Port device team_slave_1 added [ 215.919428][ T5589] bridge0: port 2(bridge_slave_1) entered blocking state [ 215.927463][ T5589] bridge0: port 2(bridge_slave_1) entered disabled state [ 215.935588][ T5589] bridge_slave_1: entered allmulticast mode [ 215.944556][ T5589] bridge_slave_1: entered promiscuous mode [ 215.995089][ T5574] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.005883][ T5576] bridge0: port 1(bridge_slave_0) entered blocking state [ 216.013567][ T5576] bridge0: port 1(bridge_slave_0) entered disabled state [ 216.021688][ T5576] bridge_slave_0: entered allmulticast mode [ 216.030845][ T5576] bridge_slave_0: entered promiscuous mode [ 216.051129][ T5587] team0: Port device team_slave_0 added [ 216.127195][ T5574] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.137915][ T5576] bridge0: port 2(bridge_slave_1) entered blocking state [ 216.148273][ T5576] bridge0: port 2(bridge_slave_1) entered disabled state [ 216.156998][ T5576] bridge_slave_1: entered allmulticast mode [ 216.168636][ T5576] bridge_slave_1: entered promiscuous mode [ 216.217614][ T5587] team0: Port device team_slave_1 added [ 216.253509][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.261315][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.287904][ T5582] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.397505][ T5589] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.411519][ T5582] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.420696][ T5582] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.447655][ T5582] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.505439][ T5576] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 216.553003][ T5589] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.589629][ T5574] team0: Port device team_slave_0 added [ 216.603623][ T5576] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 216.655066][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 216.662634][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.689160][ T5587] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 216.739011][ T5574] team0: Port device team_slave_1 added [ 216.776928][ T5587] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 216.784644][ T5587] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 216.811098][ T5587] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 216.864440][ T5589] team0: Port device team_slave_0 added [ 216.905181][ T5576] team0: Port device team_slave_0 added [ 216.962658][ T5589] team0: Port device team_slave_1 added [ 217.005019][ T5576] team0: Port device team_slave_1 added [ 217.086753][ T5574] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.093857][ T5574] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.120422][ T5574] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.178932][ T5582] hsr_slave_0: entered promiscuous mode [ 217.187998][ T5582] hsr_slave_1: entered promiscuous mode [ 217.227519][ T5574] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.235463][ T5574] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.262106][ T5574] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.335557][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.343195][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.369896][ T5589] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.395949][ T4876] Bluetooth: hci1: command tx timeout [ 217.409014][ T5576] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 217.416605][ T5576] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.443342][ T5576] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 217.474644][ T4876] Bluetooth: hci0: command tx timeout [ 217.486117][ T4876] Bluetooth: hci3: command tx timeout [ 217.486231][ T5581] Bluetooth: hci2: command tx timeout [ 217.525931][ T5589] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.533068][ T5589] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.559365][ T5589] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.599005][ T5576] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 217.607062][ T5576] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1532 would solve the problem. [ 217.633996][ T5576] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 217.655970][ T5581] Bluetooth: hci4: command tx timeout [ 217.664793][ T5587] hsr_slave_0: entered promiscuous mode [ 217.673863][ T5587] hsr_slave_1: entered promiscuous mode [ 217.682449][ T5587] debugfs: 'hsr0' already exists in 'hsr' [ 217.688556][ T5587] Cannot create hsr debugfs directory [ 218.003724][ T5574] hsr_slave_0: entered promiscuous mode [ 218.012631][ T5574] hsr_slave_1: entered promiscuous mode [ 218.021410][ T5574] debugfs: 'hsr0' already exists in 'hsr' [ 218.027349][ T5574] Cannot create hsr debugfs directory [ 218.047068][ T5589] hsr_slave_0: entered promiscuous mode [ 218.056669][ T5589] hsr_slave_1: entered promiscuous mode [ 218.064657][ T5589] debugfs: 'hsr0' already exists in 'hsr' [ 218.070546][ T5589] Cannot create hsr debugfs directory [ 218.217244][ T5576] hsr_slave_0: entered promiscuous mode [ 218.227009][ T5576] hsr_slave_1: entered promiscuous mode [ 218.235779][ T5576] debugfs: 'hsr0' already exists in 'hsr' [ 218.241710][ T5576] Cannot create hsr debugfs directory [ 219.521869][ T5582] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 219.549770][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 219.571590][ T5582] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 219.595371][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 219.606257][ T5582] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 219.626069][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 219.656761][ T5582] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 219.677737][ T5582] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 219.796990][ T5587] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 219.830456][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 219.843291][ T5587] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 219.865955][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 219.899809][ T5587] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 219.920762][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 219.958068][ T5587] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 219.981508][ T5587] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 220.116445][ T5574] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 220.146867][ T5574] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 220.158477][ T5574] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 220.183821][ T5574] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 220.193766][ T5574] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 220.214692][ T5574] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 220.224946][ T5574] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 220.247730][ T5574] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 220.518972][ T5589] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 220.541681][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 220.554714][ T5589] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 220.578099][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 220.611318][ T5589] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 220.634606][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 220.669108][ T5589] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 220.691064][ T5589] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 220.941839][ T5576] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 220.967646][ T5576] 8021q: adding VLAN 0 to HW filter on device netdevsim0 [ 221.020691][ T5576] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 221.043858][ T5576] 8021q: adding VLAN 0 to HW filter on device netdevsim1 [ 221.079895][ T5576] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 221.103126][ T5576] 8021q: adding VLAN 0 to HW filter on device netdevsim2 [ 221.141988][ T5576] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 221.165825][ T5576] 8021q: adding VLAN 0 to HW filter on device netdevsim3 [ 221.425365][ T5582] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.672276][ T5582] 8021q: adding VLAN 0 to HW filter on device team0 [ 221.797534][ T5587] 8021q: adding VLAN 0 to HW filter on device bond0 [ 221.845828][ T1026] bridge0: port 1(bridge_slave_0) entered blocking state [ 221.853411][ T1026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 221.920970][ T1026] bridge0: port 2(bridge_slave_1) entered blocking state [ 221.928657][ T1026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 221.983874][ T5574] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.133219][ T5587] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.203182][ T5589] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.233764][ T5574] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.310921][ T1026] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.318399][ T1026] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.401486][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.409042][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.440887][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.448394][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.490737][ T5576] 8021q: adding VLAN 0 to HW filter on device bond0 [ 222.536619][ T14] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.544047][ T14] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.568268][ T5589] 8021q: adding VLAN 0 to HW filter on device team0 [ 222.662990][ T14] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.670519][ T14] bridge0: port 1(bridge_slave_0) entered forwarding state [ 222.788408][ T34] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.796052][ T34] bridge0: port 2(bridge_slave_1) entered forwarding state [ 222.837847][ T5576] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.016410][ T34] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.024141][ T34] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.208646][ T1026] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.216300][ T1026] bridge0: port 2(bridge_slave_1) entered forwarding state [ 226.709692][ T5582] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.632334][ T5582] veth0_vlan: entered promiscuous mode [ 227.745123][ T5587] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.897423][ T5574] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 227.951192][ T5582] veth1_vlan: entered promiscuous mode [ 228.022290][ T5589] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.246878][ T5576] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 228.581630][ T5582] veth0_macvtap: entered promiscuous mode [ 228.703561][ T5587] veth0_vlan: entered promiscuous mode [ 228.778578][ T5582] veth1_macvtap: entered promiscuous mode [ 228.863702][ T5574] veth0_vlan: entered promiscuous mode [ 228.911652][ T5587] veth1_vlan: entered promiscuous mode [ 228.940422][ T5589] veth0_vlan: entered promiscuous mode [ 229.070004][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 229.083156][ T5574] veth1_vlan: entered promiscuous mode [ 229.203578][ T5589] veth1_vlan: entered promiscuous mode [ 229.272231][ T5582] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 229.393232][ T34] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.403096][ T34] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.436692][ T34] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.451644][ T34] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 229.524862][ T5587] veth0_macvtap: entered promiscuous mode [ 229.633545][ T5587] veth1_macvtap: entered promiscuous mode [ 229.827136][ T5589] veth0_macvtap: entered promiscuous mode [ 229.873583][ T5574] veth0_macvtap: entered promiscuous mode [ 229.949369][ T5589] veth1_macvtap: entered promiscuous mode [ 230.015189][ T5574] veth1_macvtap: entered promiscuous mode [ 230.220079][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.301274][ T5576] veth0_vlan: entered promiscuous mode [ 230.423279][ T5587] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.538733][ T5576] veth1_vlan: entered promiscuous mode [ 230.601601][ T5574] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.669198][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 230.716939][ T65] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.735566][ T5703] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.780980][ T5703] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.793826][ T5703] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 230.850405][ T5574] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 230.887728][ T5589] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 231.012589][ T34] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.028072][ T34] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.072468][ T34] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.123650][ T5697] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.157568][ T5697] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.188485][ T34] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.223281][ T34] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.315613][ T34] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 231.478408][ T5576] veth0_macvtap: entered promiscuous mode [ 231.589127][ T5576] veth1_macvtap: entered promiscuous mode [ 231.911413][ T5576] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 232.097551][ T5576] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 232.223243][ T5697] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.265033][ T5697] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.284035][ T5697] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 232.297219][ T5697] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.133157][ T5697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.172281][ T5697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.416166][ T5703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.461981][ T5703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.940236][ T5582] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 237.819149][ T5831] bond1: option arp_all_targets: invalid value (247) [ 237.856754][ T5831] bond1 (unregistering): Released all slaves [ 238.422753][ T5703] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.450918][ T5703] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.735195][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.774655][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.993176][ T5840] syzkaller0: entered promiscuous mode [ 239.016170][ T5840] syzkaller0: entered allmulticast mode [ 239.067226][ T55] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.108470][ T55] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.770857][ T5703] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.808373][ T5703] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.871525][ T55] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.898540][ T55] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.307296][ T5697] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.348775][ T5697] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.532224][ T5765] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.580077][ T5765] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 240.763680][ T82] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 240.810193][ T82] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 243.435373][ T5581] Bluetooth: hci2: unexpected Set CIG Parameters response data [ 244.250092][ T5873] binder: 5872:5873 ioctl 4018620d 0 returned -22 [ 244.270187][ T5873] binder: 5872:5873 ioctl c0306201 200000000040 returned -22 [ 244.280886][ T5873] binder: 5872:5873 ioctl c0306201 200000000640 returned -22 [ 244.462583][ T5866] bridge0: port 3(vlan2) entered blocking state [ 244.476273][ T5866] bridge0: port 3(vlan2) entered disabled state [ 244.494002][ T5866] vlan2: entered allmulticast mode [ 244.530046][ T5866] geneve0: entered allmulticast mode [ 244.587368][ T5866] vlan2: entered promiscuous mode [ 244.644631][ T5866] geneve0: entered promiscuous mode [ 244.857473][ T5875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14'. [ 245.101707][ T5875] netlink: 4 bytes leftover after parsing attributes in process `syz.2.14'. [ 245.113133][ T5703] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.127628][ T5703] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.142735][ T5703] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.190475][ T5703] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 245.261830][ T5875] Zero length message leads to an empty skb [ 246.524571][ T5889] netlink: 92 bytes leftover after parsing attributes in process `syz.4.20'. [ 246.807699][ T5889] netlink: 4 bytes leftover after parsing attributes in process `syz.4.20'. [ 247.476108][ T5581] Bluetooth: hci2: Controller not accepting commands anymore: ncmd = 0 [ 247.485226][ T5581] Bluetooth: hci2: Injecting HCI hardware error event [ 247.493205][ T5581] Bluetooth: hci2: hardware error 0x00 [ 247.996945][ T5900] binder: 5899:5900 ioctl 4018620d 0 returned -22 [ 248.052038][ T5900] binder: 5899:5900 ioctl c0306201 200000000040 returned -22 [ 248.098841][ T5900] binder: 5899:5900 ioctl c0306201 200000000640 returned -22 [ 248.213043][ T4876] Bluetooth: hci0: unexpected Set CIG Parameters response data [ 248.487383][ T5898] syz_tun: entered promiscuous mode [ 248.541667][ T5898] vlan3: entered promiscuous mode [ 251.210138][ T5928] binder: 5926:5928 ioctl 4018620d 0 returned -22 [ 251.310020][ T5928] binder: 5926:5928 ioctl c0306201 200000000040 returned -22 [ 251.361505][ T5927] netlink: 8 bytes leftover after parsing attributes in process `syz.1.36'. [ 251.371155][ T5928] binder: 5926:5928 ioctl c0306201 200000000640 returned -22 [ 251.375793][ T5927] netlink: 'syz.1.36': attribute type 9 has an invalid length. [ 251.396654][ T5581] Bluetooth: hci2: Opcode 0x0c03 failed: -110 [ 252.247427][ T65] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.275692][ T5581] Bluetooth: hci0: Controller not accepting commands anymore: ncmd = 0 [ 252.287059][ T5581] Bluetooth: hci0: Injecting HCI hardware error event [ 252.306636][ T5581] Bluetooth: hci0: hardware error 0x00 [ 252.331158][ T4876] Bluetooth: hci4: unexpected Set CIG Parameters response data [ 252.407142][ T5939] netlink: 12 bytes leftover after parsing attributes in process `syz.0.39'. [ 252.467933][ T3311] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.583367][ T3311] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 252.719941][ T3311] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 253.080628][ T5924] ===================================================== [ 253.088388][ T5924] BUG: KMSAN: uninit-value in mptcp_established_options+0x112f/0x3530 [ 253.097238][ T5924] mptcp_established_options+0x112f/0x3530 [ 253.103395][ T5924] tcp_established_options+0x312/0xcc0 [ 253.109310][ T5924] __tcp_transmit_skb+0x5dc/0x5fe0 [ 253.114787][ T5924] __tcp_send_ack+0x967/0xad0 [ 253.119653][ T5924] tcp_send_ack+0x3d/0x60 [ 253.124424][ T5924] mptcp_subflow_shutdown+0x164/0x690 [ 253.130038][ T5924] mptcp_check_send_data_fin+0x31b/0x3d0 [ 253.148172][ T5924] __mptcp_close+0x860/0x1360 [ 253.158399][ T5924] mptcp_close+0x42/0x260 [ 253.162936][ T5924] inet_release+0x1ee/0x2a0 [ 253.169292][ T5924] sock_close+0xd6/0x2f0 [ 253.173818][ T5924] __fput+0x60e/0x1010 [ 253.178366][ T5924] ____fput+0x25/0x30 [ 253.182534][ T5924] task_work_run+0x208/0x2b0 [ 253.187597][ T5924] exit_to_user_mode_loop+0x505/0x2420 [ 253.193348][ T5924] do_syscall_64+0x261/0x3c0 [ 253.198434][ T5924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.204717][ T5924] [ 253.207157][ T5924] Local variable opts created at: [ 253.212285][ T5924] __tcp_transmit_skb+0x4d/0x5fe0 [ 253.217780][ T5924] __tcp_send_ack+0x967/0xad0 [ 253.222644][ T5924] [ 253.225927][ T5924] CPU: 0 UID: 0 PID: 5924 Comm: syz.1.36 Not tainted syzkaller #0 PREEMPT(lazy) [ 253.235481][ T5924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 253.255719][ T5924] ===================================================== [ 253.262958][ T5924] Disabling lock debugging due to kernel taint [ 253.376408][ T5924] Kernel panic - not syncing: kmsan.panic set ... [ 253.383044][ T5924] CPU: 0 UID: 0 PID: 5924 Comm: syz.1.36 Tainted: G B syzkaller #0 PREEMPT(lazy) [ 253.393962][ T5924] Tainted: [B]=BAD_PAGE [ 253.398248][ T5924] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/09/2026 [ 253.408468][ T5924] Call Trace: [ 253.411903][ T5924] [ 253.414945][ T5924] __dump_stack+0x26/0x30 [ 253.419488][ T5924] dump_stack_lvl+0x50/0x1c0 [ 253.424274][ T5924] ? dump_stack+0x12/0x25 [ 253.428820][ T5924] dump_stack+0x1e/0x25 [ 253.433184][ T5924] vpanic+0x7b4/0x1430 [ 253.437902][ T5924] panic+0x15d/0x160 [ 253.442083][ T5924] kmsan_report+0x31a/0x320 [ 253.446835][ T5924] ? __msan_warning+0x1b/0x30 [ 253.451734][ T5924] ? mptcp_established_options+0x112f/0x3530 [ 253.457971][ T5924] ? tcp_established_options+0x312/0xcc0 [ 253.463803][ T5924] ? __tcp_transmit_skb+0x5dc/0x5fe0 [ 253.469297][ T5924] ? __tcp_send_ack+0x967/0xad0 [ 253.474342][ T5924] ? tcp_send_ack+0x3d/0x60 [ 253.479174][ T5924] ? mptcp_subflow_shutdown+0x164/0x690 [ 253.484980][ T5924] ? mptcp_check_send_data_fin+0x31b/0x3d0 [ 253.491156][ T5924] ? __mptcp_close+0x860/0x1360 [ 253.496255][ T5924] ? mptcp_close+0x42/0x260 [ 253.501044][ T5924] ? inet_release+0x1ee/0x2a0 [ 253.505975][ T5924] ? sock_close+0xd6/0x2f0 [ 253.510610][ T5924] ? __fput+0x60e/0x1010 [ 253.515042][ T5924] ? ____fput+0x25/0x30 [ 253.519394][ T5924] ? task_work_run+0x208/0x2b0 [ 253.524858][ T5924] ? exit_to_user_mode_loop+0x505/0x2420 [ 253.530699][ T5924] ? do_syscall_64+0x261/0x3c0 [ 253.535716][ T5924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.542096][ T5924] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.548399][ T5924] ? kmsan_get_metadata+0xf1/0x160 [ 253.553877][ T5924] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 253.559950][ T5924] ? mptcp_established_options+0xa1/0x3530 [ 253.566028][ T5924] ? filter_irq_stacks+0x49/0x190 [ 253.571274][ T5924] ? stack_depot_save_flags+0x35/0x790 [ 253.576942][ T5924] ? kmsan_get_metadata+0xf1/0x160 [ 253.582306][ T5924] ? kmsan_internal_set_shadow_origin+0x7a/0x110 [ 253.588888][ T5924] ? kmsan_get_metadata+0xf1/0x160 [ 253.594272][ T5924] __msan_warning+0x1b/0x30 [ 253.599016][ T5924] mptcp_established_options+0x112f/0x3530 [ 253.605159][ T5924] tcp_established_options+0x312/0xcc0 [ 253.610869][ T5924] __tcp_transmit_skb+0x5dc/0x5fe0 [ 253.616206][ T5924] ? kmem_cache_alloc_node_noprof+0x3f5/0x12c0 [ 253.622911][ T5924] ? kmsan_get_metadata+0xf1/0x160 [ 253.628272][ T5924] ? kmsan_get_metadata+0xf1/0x160 [ 253.633647][ T5924] ? kmsan_get_metadata+0xf1/0x160 [ 253.639016][ T5924] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 253.645098][ T5924] ? __alloc_skb+0xb7d/0x1190 [ 253.650050][ T5924] __tcp_send_ack+0x967/0xad0 [ 253.654988][ T5924] tcp_send_ack+0x3d/0x60 [ 253.659578][ T5924] mptcp_subflow_shutdown+0x164/0x690 [ 253.665221][ T5924] ? kmsan_get_shadow_origin_ptr+0x4a/0xb0 [ 253.671322][ T5924] mptcp_check_send_data_fin+0x31b/0x3d0 [ 253.677252][ T5924] __mptcp_close+0x860/0x1360 [ 253.682210][ T5924] ? __pfx_mptcp_close+0x10/0x10 [ 253.687352][ T5924] mptcp_close+0x42/0x260 [ 253.691871][ T5924] ? __pfx_mptcp_close+0x10/0x10 [ 253.697006][ T5924] inet_release+0x1ee/0x2a0 [ 253.701764][ T5924] ? __pfx_inet_release+0x10/0x10 [ 253.707036][ T5924] sock_close+0xd6/0x2f0 [ 253.711481][ T5924] ? __pfx_sock_close+0x10/0x10 [ 253.716521][ T5924] __fput+0x60e/0x1010 [ 253.720827][ T5924] ? __pfx_____fput+0x10/0x10 [ 253.725720][ T5924] ____fput+0x25/0x30 [ 253.729893][ T5924] task_work_run+0x208/0x2b0 [ 253.734685][ T5924] exit_to_user_mode_loop+0x505/0x2420 [ 253.740491][ T5924] ? __x64_sys_close_range+0x97/0xe0 [ 253.746006][ T5924] do_syscall_64+0x261/0x3c0 [ 253.750878][ T5924] ? clear_bhb_loop+0x50/0xa0 [ 253.755763][ T5924] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 253.761861][ T5924] RIP: 0033:0x7f4a1ef9ce59 [ 253.766431][ T5924] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 253.786680][ T5924] RSP: 002b:00007fffefa4dc48 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 253.795311][ T5924] RAX: 0000000000000000 RBX: 00007fffefa4dd30 RCX: 00007f4a1ef9ce59 [ 253.803433][ T5924] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 253.811550][ T5924] RBP: 000000000003d470 R08: 0000000000000001 R09: 0000000000000000 [ 253.819769][ T5924] R10: 0000001b30220000 R11: 0000000000000246 R12: 00007fffefa4dd70 [ 253.828001][ T5924] R13: 00007f4a1f21627c R14: 000000000003dc6d R15: 00007f4a1f216270 [ 253.836186][ T5924] [ 253.839903][ T5924] Kernel Offset: disabled [ 253.844294][ T5924] Rebooting in 86400 seconds..