last executing test programs: 34.047286623s ago: executing program 2 (id=47): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000000c0)={0x12, 0xf, &(0x7f0000000540)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x9}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x8}, 0x90) listen(r1, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003d00000095"], &(0x7f00000000c0)='GPL\x00'}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000600)={0x6, 0x8, &(0x7f0000000a00)=ANY=[@ANYBLOB="18000000000000000000000000000000c60001002500000085100000010000009500000000000c0018400200ffffffff4881dd67000000009500000000000000"], &(0x7f0000000100)='GPL\x00', 0x5, 0xf6, &(0x7f0000000180)=""/246, 0x0, 0x20}, 0x90) bpf$MAP_CREATE(0x0, &(0x7f00000005c0)=@base={0x7, 0x4, 0x18, 0x28e, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x1a000000}, 0x48) syz_emit_ethernet(0x92, &(0x7f00000008c0)={@local, @link_local, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x84, 0x0, 0x0, 0x0, 0x21, 0x0, @loopback, @initdev={0xac, 0x1e, 0x1, 0x0}}, @redirect={0x5, 0x0, 0x0, @loopback, {0x18, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x64, 0x3, @remote, @dev, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x1c, 0x46, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @timestamp_addr={0x44, 0x2c, 0x98, 0x1, 0x3, [{@rand_addr=0x64010102, 0x10000}, {@loopback, 0x80}, {@broadcast}, {@multicast1, 0x9}, {@local, 0x8}]}]}}, "0000000000010008"}}}}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r3, 0x10e, 0xc, &(0x7f0000000640)=0x4, 0x4) sendmsg$netlink(r3, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000740)={0x150, 0x22, 0x601, 0x0, 0x0, "", [@typed={0xb1, 0x0, 0x0, 0x0, @binary="ee9fb3d868d099c46f4d090df62a1f64ebf717b4d4c0a673a3f9c2c135306aa7e82aaba63434a9f81ad349879c376464e29ba744dcd63a6b37df001243833932f86b2c7c76506379d677405bb6dbab8694b76d1c725761317a99147ffffa2cf66dbeb62b2656632c106924f91025df9232dd401cb8cd1b24ae729c34c269984510226e4fbf9dff44e3fc2409eba54f293126361a362d05717649679e31f77f8d9096cef2fc6c1d876308a01cc3"}, @generic="255a6a76e3ecd76032c83d3a966313fbdf7e73ea22fce8ef6c1febfc01d868eebb36a72035aeb483d3d0fb62bbf75150ad300b179c2b250a120def1e65f1fd8b8fa35a3d25e92992f8c3f882ec7fceda9e332246132964cee8eba2ed95caf0dafe87b15efaab2c81b64f25abdafb1a3d5e4a29971bd22b7b771502cb0da371b8be0738d505b3394a796150"]}, 0x150}], 0x1}, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000300), r3) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r4, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x14, r5, 0x20, 0x70bd2c, 0x25dfdbfb}, 0x14}, 0x1, 0x0, 0x0, 0x4841}, 0x4008040) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000000)={'lo\x00'}) sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) r6 = socket$rds(0x15, 0x5, 0x0) ppoll(&(0x7f0000000000)=[{r6}], 0x1, 0x0, 0x0, 0x0) bind$rds(r6, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) sendmsg$rds(r6, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r6, 0x114, 0x1, &(0x7f0000000ec0)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) sendto$unix(0xffffffffffffffff, &(0x7f0000000000)="ba", 0x1, 0x0, 0x0, 0x0) write$binfmt_elf32(0xffffffffffffffff, &(0x7f0000000600)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x38}, [{}]}, 0x58) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000005540)=@newqdisc={0x24, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$MPTCP_PM_CMD_SET_LIMITS(0xffffffffffffffff, &(0x7f0000000280)={&(0x7f0000000000), 0xc, 0x0, 0x1, 0x0, 0x0, 0x8011}, 0x20000400) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000023c0)=@base={0x12, 0x4, 0x8, 0xb}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f00000001c0)={@map=r7, r2, 0x7}, 0x10) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000500)={r7, &(0x7f0000000240), &(0x7f00000004c0)=@tcp6=r1}, 0x20) 16.870218106s ago: executing program 2 (id=56): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000004000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0xfff, 0x7}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r1, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 16.604785636s ago: executing program 2 (id=176): r0 = socket$netlink(0x10, 0x3, 0x10) bind$netlink(r0, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) socket$netlink(0x10, 0x3, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x0) r1 = socket$netlink(0x10, 0x3, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2}, 0x10) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="180000000000a6c9d5ebcc35000020b6b2ae4b516988000000a8000000950000000000000000"], &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) r6 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x70) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r7, r6, 0x2, 0x6, 0x4000}, 0x10) r8 = syz_genetlink_get_family_id$devlink(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_SET(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000640)={0x14, r8, 0x1}, 0x14}}, 0x0) bind$netlink(r1, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r1, 0x1, 0x8, &(0x7f0000000000)=0x80, 0x4) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r1, 0x10e, 0x4, &(0x7f0000000180)=0x800, 0x4) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r9, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=@newtaction={0x6c, 0x30, 0xcac229faa96ee7df, 0x0, 0x0, {}, [{0x58, 0x1, [@m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0xfffffffffffffe65, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x5}]}]}, {0x4}, {0xc, 0x4}, {0xc}}}]}]}, 0x6c}}, 0x0) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000080)={0x4, 0x2000}, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r1) r10 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r10, &(0x7f0000000600)={0x0, 0xfffffffe, &(0x7f0000000300)=[{&(0x7f0000000000)="2e00000010008188e6b62aa73772cc9f1ba1f848430000005e140602000000000e000a0010000000028000001294", 0x2e}], 0x1}, 0x0) 15.842792414s ago: executing program 2 (id=183): socket(0x0, 0x0, 0x0) connect$tipc(0xffffffffffffffff, 0x0, 0x0) r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'wg2\x00', 0x0}) setsockopt$ARPT_SO_SET_REPLACE(0xffffffffffffffff, 0x0, 0x60, 0x0, 0x0) setsockopt$inet_dccp_buf(r0, 0x21, 0xe, &(0x7f0000000280)="993c27ceaf3901441c9045161be766d5ede9f00bbdd86844fcf1f6d20c011e", 0x1f) sendmsg$nl_route_sched(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=@newqdisc={0x48, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x18, 0x2, [@TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x3b9aca00}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x48}}, 0x0) write$binfmt_misc(0xffffffffffffffff, 0x0, 0x2000011a) r3 = socket$rxrpc(0x21, 0x2, 0xa) bind$rxrpc(r3, &(0x7f0000000000)=@in6={0x21, 0x0, 0x2, 0x14, {0x10, 0x0, 0x0, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}}, 0x24) 15.281200735s ago: executing program 2 (id=189): tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012140100000000000000000008004f000000000008004b0013000000080003000000000008001500040000000800010000000000080015"], 0x40}}, 0x0) 2.55705245s ago: executing program 1 (id=286): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000180)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000500), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_STATION(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000680)={0x38, r2, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_STA_PLINK_ACTION={0x5, 0x19, 0x2}, @NL80211_ATTR_PEER_AID={0x6, 0xb5, 0x2c6}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0x40, 0x6942b24c}}]}, 0x38}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100), 0x48) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r3, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000100)=ANY=[@ANYRES8, @ANYRES32, @ANYBLOB="0000000000000000400012800c0001"], 0x68}}, 0x0) r4 = socket$igmp6(0xa, 0x3, 0x2) r5 = socket$kcm(0x2, 0xa, 0x2) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) syz_emit_ethernet(0x0, 0x0, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB], 0x80}}, 0x0) setsockopt$MRT_ADD_VIF(0xffffffffffffffff, 0x0, 0xca, &(0x7f00000002c0)={0x0, 0x0, 0x0, 0x0, @vifc_lcl_ifindex, @loopback}, 0x10) bpf$MAP_CREATE(0x0, 0x0, 0x0) sendmsg$IPSET_CMD_GET_BYNAME(r6, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)={0x28, 0xe, 0x6, 0x5, 0x0, 0x0, {0x8, 0x0, 0x4}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x28}, 0x1, 0x0, 0x0, 0x4800}, 0x10) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc2(0x0, 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r7, &(0x7f0000000540)={0x0, 0x0, 0x0}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000d40000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000bc000000160a01000000217100000001010000000900010073797a30000000000900020073797a30000000009000038008000240000000007c00038014000100626f6e64300000000000000000000016d8ce4db711d5e46c616e31000000000000000000140001006970766c616e300000000000000000001400010073697430000000000000fbffffffffffffff0100776c616e30000000000000000000000014000100677265e52ea619052f9c08000000040008000140000000005c000000180a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014000100626f6e64300000000000000000000000140001006970766c616e31"], 0x4b0}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x13, 0x16, &(0x7f0000000540)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00'}, 0x48) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=@dellink={0x4c, 0x11, 0x1, 0x40000000, 0x0, {}, [@IFLA_IFNAME={0x14, 0x3, 'macvlan0\x00'}, @IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x41}, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$sock_SIOCSIFVLAN_ADD_VLAN_CMD(r4, 0x8983, &(0x7f0000000300)={0x0, 'syzkaller1\x00'}) 2.212055276s ago: executing program 4 (id=290): r0 = socket(0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)={0x17c, r1, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xd5f, 0x14}}}}, [@NL80211_ATTR_TX_RATES={0x15c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0x0, 0x6, 0x3, 0x3, 0x2, 0x9, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x6}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x3, 0xe7ca, 0xb, 0x2, 0x2, 0x5608, 0xfff7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x3}, {0x6, 0x4}, {0x6}, {0x7, 0x9}, {0x3, 0xa}, {0x5, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x6, 0x9}, {0x2, 0x5}, {0x6, 0x4}, {0x1, 0xa}, {0x5, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6e, 0x5, 0x25ea, 0xa, 0x5, 0x4, 0x3, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0xe, 0x0, 0x8, 0x14, 0x3, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x8001, 0x3, 0x5, 0xd, 0x9, 0x4, 0x2]}}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x3, 0x6}, {0x1, 0x3}, {0x4, 0x9}, {0x0, 0x8}, {0x6, 0xa}, {0x4, 0x4}, {0x6}, {0x0, 0x1}, {0x6, 0x3}, {0x7, 0xa}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x5}, {0x7, 0x3}, {0x4, 0x1}, {0x1, 0x7}, {0x5, 0x9}, {0x5, 0x6}, {0x4, 0x2}, {0x0, 0x8}, {0x7, 0x1}, {0x1}, {0x6, 0x9}, {0x0, 0x8}, {0x1, 0xa}, {0x6, 0x1}, {0x0, 0x3}, {0x3}, {0x5, 0xa}, {0x2, 0xa}, {0x6, 0x9}, {0x6, 0x6}, {0x2, 0x6}, {0x0, 0x1}, {0x6, 0x9}, {0x1, 0x3}, {0x1}, {0x6, 0x1}, {0x0, 0x9}, {0x4, 0x6}, {0x3, 0x6}, {0x5, 0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x6, 0xa}, {0x7, 0x5}, {0x3, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0xe, 0xda, 0x8, 0x6, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x18, 0x7fff, 0x4, 0x61f1, 0x3154, 0x2, 0xd3c]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x48, 0x18, 0x16, 0x4, 0x3, 0x16, 0x1b, 0x16, 0x6, 0x12, 0x1, 0x4, 0xb, 0x12, 0x18, 0x30, 0x7d, 0xb, 0x30, 0x5, 0x4d, 0x36, 0x6c, 0x3, 0x6c, 0x12, 0xb, 0x9, 0x3, 0x24, 0x1b]}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x2, 0x0, 0x2) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@lli, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc7}}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0xed74dbbb8a72136, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x5b}, 0x9) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x25, &(0x7f00000000c0)={r7, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f00000001c0)=0x9c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 1.699600302s ago: executing program 4 (id=295): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090002010000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 1.506696501s ago: executing program 4 (id=297): syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) write$binfmt_script(0xffffffffffffffff, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000ffd000/0x2000)=nil, 0x2000, 0x1, 0x4000010, 0xffffffffffffffff, 0x0) r0 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) r1 = socket$unix(0x1, 0x2, 0x0) bind$unix(r1, &(0x7f0000000080)=@file={0x1, '\xe9\x1fq\x89Y\x1e\x923aK\x00'}, 0x6e) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=ANY=[@ANYBLOB="3c0000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="00000000000800001c0012800b0001006d616373656300ff7f0000000000000001000000c8223e1da52b0c81677f008da54b2e6b9575dded65da2449e0baeb789c76a6c429a427433fda81a7cbd92cade33d3d7a603625fdccbb3cc800b511fe83af9272043f84a6f78354994d861b668d3ac5b4e4224977d0f8344650d2dcbb6c974d51585f7480e026c8fc0717a485bfe0297adeeab11b353a4454b8ba8a14cff7c410380bd81265096aea8f14cba170f1c2b3083bb937d3d5b9115bce02a5180c0c6acbcd5d0befc3b75d5115ea153848e463b4b31941c72ade2bea78b3da7134e9982a4b2c0470af7b9d0a87fb"], 0x3c}}, 0x0) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a1d010000000000000000020000000900010073797a3000000000080002400000000098000000030a01020000000000000000020000000900010073797a30000000000900030073797a32000000006b00030091abc12404cf378042f26c43"], 0xfc}}, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x7, 0x3, &(0x7f0000000bc0)=ANY=[@ANYRES32, @ANYRESOCT=r2, @ANYRESOCT, @ANYRESOCT=r3, @ANYRES16=r4, @ANYRESHEX=r0], &(0x7f00000008c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2b, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f00000003c0)='io_uring_defer\x00', r5}, 0x10) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x4}, 0x48) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), 0xffffffffffffffff) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket$inet(0x2, 0x3, 0x8) setsockopt$IPT_SO_SET_REPLACE(r7, 0x0, 0x40, &(0x7f0000000480)=@raw={'raw\x00', 0x8, 0x3, 0x338, 0x0, 0xe138, 0x198, 0x0, 0x198, 0x2a0, 0x358, 0x358, 0x2a0, 0x358, 0x3, 0x0, {[{{@uncond, 0x0, 0x158, 0x1c0, 0x0, {}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'fsm\x00', "0d0004000000050000000404fff0cf81dfd28c89544e14cd3e01dd24289831867846c88621039b284c3ff45c42995560a99952bed40cf5a8c1df6cdbdb7e2378d5afd35f4c16827f55b3af494e39e8fb330200000000000032b6a99a8d87298e88a94cb519f5c17631af916a0002000000000000000000000000000000000049", 0x8, 0x3}}, @inet=@rpfilter={{0x28}}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp_trap\x00', 'syz0\x00'}}}, {{@uncond, 0x0, 0x98, 0xe0, 0x0, {}, [@inet=@rpfilter={{0x28}}]}, @unspec=@CT0={0x48, 'CT\x00', 0x0, {0x0, 0x0, 0x0, 0x0, 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28, '\x00', 0x4}}}}, 0x398) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000a40)=ANY=[@ANYRESDEC=r6, @ANYRES8=r1, @ANYBLOB="000000000012800e00010056703665727370616e0000001800028004001200080002000000000000", @ANYRES32=0x0, @ANYRESDEC], 0x4c}, 0x1, 0x0, 0x0, 0x8000}, 0x0) socket(0x1, 0x803, 0x0) r8 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x6, 0x4, 0x4, 0x4}, 0x48) r9 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x14, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000001000000000000000000000018010000786c6c2500000000070000007b1af8ff00000000bfa100000000000007010000f8ffffffb700000000000000b70300000000ffff850000000400000018110000", @ANYRES32=r8, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r9}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x20, 0x4, &(0x7f0000000900)=ANY=[@ANYBLOB="18000000010000000000000000000000791200000000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r10 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r10, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000600)=ANY=[@ANYBLOB="3c00000010000304000000000000000000000300", @ANYRES32=0x0, @ANYBLOB="032e000000000000140003006970766c616e3000000000000000000008100400000125a5"], 0x3c}}, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={0x0}}, 0x0) r11 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r11, &(0x7f0000000000)={0xa, 0x4001, 0x0, @dev={0xfe, 0x80, '\x00', 0x1b}, 0xd}, 0x1c) 1.354221525s ago: executing program 1 (id=298): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_audit(0x10, 0x3, 0x9) sendmsg$AUDIT_GET_FEATURE(r1, &(0x7f0000000740)={0x0, 0x0, &(0x7f0000000700)={&(0x7f00000006c0)={0x10}, 0x10}}, 0x0) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(0xffffffffffffffff, &(0x7f0000002280)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002240)={0x0}, 0x1, 0x0, 0x0, 0x4048801}, 0x4010) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x101000, 0x0) ioctl$BTRFS_IOC_SUBVOL_SETFLAGS(r3, 0x4008941a, &(0x7f0000000040)) r4 = socket$rds(0x15, 0x5, 0x0) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) recvmsg(r5, &(0x7f0000000400)={0x0, 0x0, 0x0}, 0x40010023) sendto$ax25(0xffffffffffffffff, &(0x7f00000010c0)="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", 0x1000, 0x4000080, &(0x7f00000020c0)={{0x3, @null, 0x3}, [@null, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}, @default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @bcast]}, 0x48) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xa, 0x0, 0x8, 0xe, 0xa}, 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000002140)=ANY=[@ANYBLOB="18000000005d9cece3ff00000000000018110000e8", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000300000085000000230000009500000000000000"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r7}, 0x10) bind$rds(r4, 0x0, 0x0) setsockopt$RDS_CONG_MONITOR(r4, 0x114, 0x6, &(0x7f0000000100), 0x4) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000003c0)={'netdevsim0\x00', 0x0}) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000000140), r9) sendmsg$NLBL_MGMT_C_ADDDEF(r9, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB='$\x00\x00\x00', @ANYRES16=r10, @ANYBLOB="0100000300000000000004000000080002000500000006000b0002"], 0x24}}, 0x0) r11 = syz_genetlink_get_family_id$fou(&(0x7f0000000280), r2) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000400)={&(0x7f0000000240)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000340)={&(0x7f00000002c0)=ANY=[@ANYBLOB="60100000", @ANYRES16=r11, @ANYBLOB="08002abd7000fbdbdf2503000000050002000a00000006000a004e24000006000a004e2400000500040002000000140009002001000000000000000000000000000106000a004e230000050004000000000008000b00", @ANYRES32=r8, @ANYBLOB], 0x60}, 0x1, 0x0, 0x0, 0x15}, 0x4048844) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r8}, [@IFLA_VFINFO_LIST={0x1c, 0x16, 0x0, 0x1, [{0x18, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14}]}]}, @IFLA_IFALIASn={0x4}]}, 0x40}}, 0x0) r12 = socket$nl_rdma(0x10, 0x3, 0x14) r13 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r13, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r13, 0x84, 0x80, &(0x7f0000000000)=""/4103, &(0x7f0000001080)=0x1007) r14 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_IPV6_FLOWLABEL_MGR(r14, 0x29, 0x20, &(0x7f0000000140)={@private2, 0x0, 0x0, 0x2, 0x1}, 0x20) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r12, &(0x7f0000000440)={&(0x7f00000000c0), 0xc, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000314010029bd7000ffdbdf254900020073797a30000000000800410072786500140033006e7230000000000000000000000000000900020073797a310000000008004100727865001400330077673100"/96], 0x60}, 0x1, 0x0, 0x0, 0x20000800}, 0x20000000) 1.33732008s ago: executing program 3 (id=299): r0 = socket(0x10, 0x803, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0x200000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe8000000000000000000000150000aa1400060014000000ffffffff"], 0x54}}, 0x0) 1.304796409s ago: executing program 0 (id=300): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x8000, 0x200, 0x80, 0x20000}, 0x1c) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0xc1842, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='blkio.bfq.group_wait_time\x00', 0x275a, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000800)=@getqdisc={0x34, 0x26, 0x800, 0x70bd27, 0x25dfdbfb, {0x0, 0x0, 0x0, 0x0, {0x7, 0x3}, {0xd, 0x5}, {0x8, 0xb}}, [{0xfffffffffffffe98}, {0x4}, {0x4}, {0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x4008085}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000240), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB=', \x00\x00', @ANYRES16=r3, @ANYBLOB="010000000000000000002b000000180001801400020076657468305f746f5f62617461647600"], 0x2c}}, 0x0) setsockopt$packet_int(0xffffffffffffffff, 0x107, 0x11, &(0x7f0000000200)=0x328, 0x4) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_COALESCE(r2, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200}, 0xc, &(0x7f0000000180)={&(0x7f0000000080)=ANY=[@ANYBLOB, @ANYRES16=r4, @ANYBLOB="040025bd7000fedbdf25650000000c0099000104000045000000"], 0x20}}, 0x20008000) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x2e, &(0x7f0000000280)=ANY=[@ANYBLOB="ffff9ce0bba9c2aaaaaaaa00080045000020070078566944d200"/38], 0x0) setsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x10, &(0x7f00000000c0)=0x7a, 0x4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000500)={0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x4, &(0x7f00000004c0)='GPL\x00'}, 0x30) bpf$BPF_PROG_GET_FD_BY_ID(0xd, 0x0, 0x0) sendto$inet(0xffffffffffffffff, 0x0, 0x0, 0x0, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, 0x0, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x19, 0x4, 0x8, 0x8}, 0x48) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1c1800dd8d1200000000000000020000000042900020000000000000"], 0x1c}}, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000003e7100000000000000000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000107b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000925e850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x6, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000009c0)={r7, 0xf, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) 1.088833774s ago: executing program 3 (id=301): bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(0xffffffffffffffff, 0x8933, 0x0) r0 = socket$netlink(0x10, 0x3, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'hsr0\x00'}) socket$inet_udp(0x2, 0x2, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYRESDEC=r1], 0x7c}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000100000000000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socket$inet_smc(0x2b, 0x1, 0x0) getsockopt$inet_tcp_int(0xffffffffffffffff, 0x6, 0x0, 0x0, 0x0) socket$packet(0x11, 0x3, 0x300) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@rose={'rose', 0x0}, 0x10) ioctl$sock_netdev_private(r4, 0x8914, &(0x7f0000000000)) ioctl$EXT4_IOC_SETFSUUID(r3, 0x4008662c, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f00000001c0), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_JOIN_MESH(r5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) r6 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340), 0x48) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x11, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000ffffffff000000000000000085000000a8000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r6, @ANYBLOB="0000000000000000b705000000000000850000007200000095"], &(0x7f0000000b00)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1a, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x5, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000030085000000a8000000850000000800000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r8, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r7, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) 997.321323ms ago: executing program 1 (id=302): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000180)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r0 = syz_open_procfs$namespace(0x0, &(0x7f0000000000)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000100)='blkio.bfq.dequeue\x00', 0x275a, 0x0) (async) r2 = socket$rds(0x15, 0x5, 0x0) bind$rds(r2, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) (async, rerun: 32) sendmsg$rds(r2, &(0x7f0000000080)={&(0x7f0000000180)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) (async, rerun: 32) sendmsg$rds(r2, &(0x7f0000000680)={&(0x7f00000000c0)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10, 0x0}, 0x0) setsockopt$RDS_CANCEL_SENT_TO(r2, 0x114, 0x1, &(0x7f0000000440)={0x2, 0x0, @remote}, 0x10) (async) write$binfmt_script(r1, &(0x7f0000000100), 0xfecc) sendfile(r0, r1, &(0x7f0000000040), 0x1) 905.289687ms ago: executing program 1 (id=303): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)={0xffffffffffffffff}) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDRS(0xffffffffffffffff, 0x84, 0x6c, &(0x7f0000000100)={0x0, 0x41, "f45629eaddf0f7fc72c04e16f63b75e4da66710eb03f007ade90984f1aaab9063c41750d84f8eb59ae49e417d41ae48f4e070d9ca28f72962005377ec1d31f98e8"}, &(0x7f0000000040)=0x49) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r2, 0x84, 0x72, &(0x7f00000001c0)={r3, 0xd, 0x20}, 0xc) setsockopt$inet6_buf(r1, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000000000210d0000aaa8fa017242ba9380d413600000000000000100000004000000", 0x6033) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000680)=ANY=[@ANYBLOB="a4010000160001000000000000000000fe8000000000000000000000000000bbfc0100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="fe8000000000000000000000000000aa0000000033"], 0x1a4}}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000000)=@flushsa={0x14, 0x1c, 0x1, 0x70bd26, 0x0, {0xff}}, 0x14}, 0x1, 0x0, 0x0, 0x20048080}, 0x4000000) 885.765229ms ago: executing program 0 (id=304): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f00000002c0), r0) sendmsg$NLBL_MGMT_C_REMOVE(r0, &(0x7f00000003c0)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20}, 0xc, &(0x7f0000000380)={&(0x7f0000000500)=ANY=[@ANYBLOB="590000008933aa8e8e01000000dffb9e16dc10e3e62f5a4e2f864a10bc83c755babec443570cea3b3962b471e465246e2088f25baa4a0c4100"/72, @ANYRES16=r1, @ANYBLOB="00042dbd7000fcdbdf25020000000800020007000000080008000000000014000600fe8000000000000000000000000000bb060001004000000014000600fc0200000000000000000000000000000f0001005e2c5c2121515b2a24240000080007000000000006000b001d00000008000400ffffffff"], 0x7c}, 0x1, 0x0, 0x0, 0x4800}, 0x835) r2 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000017b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f00000007c0)={{{@in6=@remote}}, {{@in=@multicast2}, 0x0, @in=@empty}}, &(0x7f0000000300)=0xe8) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000180), 0x8) openat$cgroup_ro(r3, &(0x7f0000000200)='cgroup.controllers\x00', 0x0, 0x0) getsockopt$inet6_IPV6_FLOWLABEL_MGR(0xffffffffffffffff, 0x29, 0x20, &(0x7f0000000100)={@remote, 0x0, 0x2}, 0x0) sendmsg$IPCTNL_MSG_EXP_DELETE(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x14}}, 0x0) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) ioctl$FS_IOC_GETFSLABEL(r4, 0x400452c8, &(0x7f0000000100)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018120000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000020100008500000043"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={0x0, r5}, 0x10) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000640)=@base={0x17, 0x0, 0x4, 0xff, 0x0, 0x1}, 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0}, 0x90) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000008000000000000000000018110000", @ANYRES32=r6, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0}, 0x90) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000500)='percpu_free_percpu\x00', r7}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x11, &(0x7f0000000100)=ANY=[@ANYBLOB="8ed3c31fcfbf25"], 0x0}, 0x90) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket(0x1, 0x803, 0x0) getsockname$packet(r9, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="4000000010000104000000000000002000000000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000300", @ANYRES32=r10], 0x40}, 0x1, 0xd}, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', 0x0, 0x0, 0x0) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r12 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r11) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000006c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r12, @ANYBLOB="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"], 0x38}, 0x1, 0xffffffff00000003}, 0x4000000) 832.977386ms ago: executing program 3 (id=305): r0 = socket(0x0, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), r0) sendmsg$NL80211_CMD_JOIN_MESH(0xffffffffffffffff, &(0x7f0000000200)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000006c0)={0x17c, r1, 0x8, 0x70bd27, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0xd5f, 0x14}}}}, [@NL80211_ATTR_TX_RATES={0x15c, 0x5a, 0x0, 0x1, [@NL80211_BAND_60GHZ={0x3c, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE={0x14, 0x5, {[0x10, 0x0, 0x6, 0x3, 0x3, 0x2, 0x9, 0x7]}}, @NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x6}, @NL80211_TXRATE_HE={0x14, 0x5, {[0xe, 0x3, 0xe7ca, 0xb, 0x2, 0x2, 0x5608, 0xfff7]}}, @NL80211_TXRATE_GI={0x5, 0x4, 0x2}]}, @NL80211_BAND_2GHZ={0x74, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_GI={0x5}, @NL80211_TXRATE_HE_LTF={0x5}, @NL80211_TXRATE_HT={0x11, 0x2, [{0x3}, {0x6, 0x4}, {0x6}, {0x7, 0x9}, {0x3, 0xa}, {0x5, 0x2}, {0x0, 0x7}, {0x2, 0x5}, {0x6, 0x9}, {0x2, 0x5}, {0x6, 0x4}, {0x1, 0xa}, {0x5, 0x1}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x6e, 0x5, 0x25ea, 0xa, 0x5, 0x4, 0x3, 0x3]}}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x6, 0xe, 0x0, 0x8, 0x14, 0x3, 0x7]}}, @NL80211_TXRATE_HE_GI={0x5}, @NL80211_TXRATE_HE={0x14, 0x5, {[0x6, 0x8001, 0x3, 0x5, 0xd, 0x9, 0x4, 0x2]}}]}, @NL80211_BAND_2GHZ={0x94, 0x0, 0x0, 0x1, [@NL80211_TXRATE_HE_LTF={0x5, 0x7, 0x2}, @NL80211_TXRATE_HT={0x33, 0x2, [{0x3, 0x6}, {0x1, 0x3}, {0x4, 0x9}, {0x0, 0x8}, {0x6, 0xa}, {0x4, 0x4}, {0x6}, {0x0, 0x1}, {0x6, 0x3}, {0x7, 0xa}, {0x4, 0x1}, {0x1, 0x1}, {0x4, 0x5}, {0x7, 0x3}, {0x4, 0x1}, {0x1, 0x7}, {0x5, 0x9}, {0x5, 0x6}, {0x4, 0x2}, {0x0, 0x8}, {0x7, 0x1}, {0x1}, {0x6, 0x9}, {0x0, 0x8}, {0x1, 0xa}, {0x6, 0x1}, {0x0, 0x3}, {0x3}, {0x5, 0xa}, {0x2, 0xa}, {0x6, 0x9}, {0x6, 0x6}, {0x2, 0x6}, {0x0, 0x1}, {0x6, 0x9}, {0x1, 0x3}, {0x1}, {0x6, 0x1}, {0x0, 0x9}, {0x4, 0x6}, {0x3, 0x6}, {0x5, 0x5}, {0x4, 0x1}, {0x5, 0x1}, {0x6, 0xa}, {0x7, 0x5}, {0x3, 0xa}]}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x2, 0x8, 0xe, 0xda, 0x8, 0x6, 0x2]}}, @NL80211_TXRATE_HE_GI={0x5, 0x6, 0x2}, @NL80211_TXRATE_VHT={0x14, 0x3, {[0x7, 0x18, 0x7fff, 0x4, 0x61f1, 0x3154, 0x2, 0xd3c]}}, @NL80211_TXRATE_LEGACY={0x23, 0x1, [0x48, 0x18, 0x16, 0x4, 0x3, 0x16, 0x1b, 0x16, 0x6, 0x12, 0x1, 0x4, 0xb, 0x12, 0x18, 0x30, 0x7d, 0xb, 0x30, 0x5, 0x4d, 0x36, 0x6c, 0x3, 0x6c, 0x12, 0xb, 0x9, 0x3, 0x24, 0x1b]}]}, @NL80211_BAND_60GHZ={0x14, 0x2, 0x0, 0x1, [@NL80211_TXRATE_HE_GI={0x5, 0x6, 0x1}, @NL80211_TXRATE_GI={0x5}]}]}]}, 0x17c}, 0x1, 0x0, 0x0, 0x10}, 0x1) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) socket$kcm(0x2, 0x0, 0x2) bind$alg(0xffffffffffffffff, 0x0, 0x0) r2 = syz_init_net_socket$802154_dgram(0x24, 0x2, 0x0) sendmsg$802154_dgram(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={0x0}}, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0xb, &(0x7f0000000140)=@framed={{}, [@printk={@lli, {0x3, 0x3, 0x3, 0xa, 0x1, 0xfe00}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xc7}}]}, &(0x7f0000000040)='syzkaller\x00', 0x1, 0xfe7, &(0x7f0000001e00)=""/4071}, 0x90) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x6, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8ab8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000006900000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0xed74dbbb8a72136, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x5b}, 0x9) shutdown(r6, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r6, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) getsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x25, &(0x7f00000000c0)={r7, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f00000001c0)=0x9c) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x58, 0x2, 0x6, 0x5, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_TIMEOUT={0x8, 0x6, 0x0}, @IPSET_ATTR_MAXELEM={0x8}]}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x58}}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000640)={r5, 0x5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 683.585411ms ago: executing program 1 (id=306): socket(0x840000000002, 0x3, 0xff) setsockopt$inet6_tcp_int(0xffffffffffffffff, 0x6, 0x0, &(0x7f0000000040)=0x100000001, 0x4) bpf$MAP_CREATE(0x0, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffffff, 0x0, 0x26e1, 0x0) syz_genetlink_get_family_id$mptcp(0x0, 0xffffffffffffffff) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x75) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f00000000c0)='cpu.stat\x00', 0x275a, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_tx_ring(r2, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r2, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000017000/0x4000)=nil, 0x4000, 0x0, 0x28011, r3, 0xffffc000) getsockopt$inet6_mreq(r3, 0x29, 0x1c, &(0x7f0000000300)={@remote, 0x0}, &(0x7f0000000280)=0xfffffffffffffdad) sendmsg$nl_route_sched(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newqdisc={0x24, 0x24, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {0xe, 0x2}}}, 0x24}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00002a0fb8)={0x3, 0x4, &(0x7f0000001180)=ANY=[@ANYBLOB="8500000061000000350000000000000085000000230000009500000000000000f4670880271e3542dfa8ba6287066c5197fabc5f7010e81ae0b737126ea6f7dc39cd340101000000000000e22ff5dde54704d25c79949c23e20100000000000000c09cc28de194f40800000000b0d3712c7e93366796c7224a0c2c0213af2eff010000e3d800000104f4b1fc30dc914bc16543d4baa2bb755af3d576090c4867a7b6393e366c6386d5ec7209d031f40f3012e95752003b2f7846c744ae6af3c037102124d8eb000013000000000000000000a46aac3abe6c4d7f47ef6d02bad9dddacecf7eaa4a9779f8555ed6aea768c1f28221c110ed050000000ee282ab76ef93d96bc46a7c04b8c5324812d992a4f8dc6fcba00b1b2da951667d0276a0327b56c0ebfb19b3426887b6f1b6070e0ce1f844ce32a9988ca042dca52fbb8c1452b683f60f2744419a2f238f173d0000003cf4fbd775d9c04dac60ff00a629b3b200000000000000000000000009001d004e41ff9b4d00e07ff771cea08bea2fa81fb4c4c43f74936f333e3ae44f7ddd2fb35d4c46392ae855531b1eaf40aee8c94fd812e40f14e519a264ff3c572eecd5f6ca98b55e78f8d94f57ed7e6a3ab5dd9a4adedbdf0e58f58eb2e83500000000000000934c92002eace9a8d6f3dd008acf8a5c0fb433678060ac0e201e401fb1711d41f45d90a1e19795c995ff7d0020ecccf41d81abc510cf773171407191872d0e3e62dd578d590e62ff74d667477ac69a806d4552084a87f74fdfc117d4975576c102976c1ef70ceac9ff714bab1f59f8ebd67f2aca41706c147e3e0d3e557de0349c5ca80f10361bedc4832ae62a2b045ef6587710a82c2e27bacc81877b996a708c3a9235bdbec2cde0cfca78205439b4fd312c7106000000000000000000000000df83e1a6c37e26d8f98d7e9419275bc3bba633b47d00000000000000000000000000000000000000000000009d6ccaab1c17bbfdd16cbf3bb706537fe8cfed4272e665566d6ae239a97a1f6d00df0d03a22818be6aba095303e587b2b4520b2c5959d6581b7fe36733eb690b3fad4da9652edab3e76432c4212a38119d64465532c7abdc6f71439ec93bae9cb88349c148dc7200a51da47238e0ba02e7d9d4e636acaae12c3853f388940cf59b056d8318d4cc52182acaa0de24a146"], &(0x7f0000000140)='GPL\x00', 0x0, 0xe0, &(0x7f0000000180)=""/153, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0xfffffc1a}, 0x15) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000611228000000000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000000c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x200}, 0x48) syz_init_net_socket$bt_sco(0x1f, 0x5, 0x5) syz_init_net_socket$rose(0xb, 0x5, 0x0) setsockopt$ALG_SET_KEY(0xffffffffffffffff, 0x117, 0x1, 0x0, 0x0) r5 = socket$l2tp(0x2, 0x2, 0x73) bind$l2tp(r5, &(0x7f00000000c0), 0x10) sendto$l2tp(r5, &(0x7f0000000040)="e5786a0d000000000000c83b", 0xc, 0x0, &(0x7f0000000100)={0x2, 0x0, @dev}, 0x10) close(r5) preadv(r1, &(0x7f0000000980)=[{&(0x7f00000003c0)=""/133, 0x85}], 0x1, 0x0, 0x0) socket(0x10, 0x3, 0x0) 682.739234ms ago: executing program 0 (id=307): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000340)={0x1, 0x1c, &(0x7f00000004c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000002ec0000850000008200000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090001020000005509010000000000950000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7020000000000008500000008000000bf91000000000000b7020000000000008500000084000000b70000000000000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) 509.055863ms ago: executing program 0 (id=308): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_cipso(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r0, &(0x7f0000000080)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x0, 0xfffffffd}}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$tipc(0x1e, 0x2, 0x0) bind$tipc(r2, &(0x7f00000006c0)=@name={0x1e, 0x2, 0x0, {{0x42}}}, 0x10) sendmsg$tipc(r1, &(0x7f0000000380)={&(0x7f0000000140)=@nameseq={0x1e, 0x1, 0x0, {0x42, 0x3, 0x4}}, 0x10, 0x0}, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$ethtool(&(0x7f0000003500), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_STRSET_GET(r3, &(0x7f0000005d80)={0x0, 0x0, &(0x7f0000005d40)={&(0x7f0000000040)={0x28, r4, 0x1, 0x0, 0x0, {}, [@ETHTOOL_A_STRSET_STRINGSETS={0x10, 0x2, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_STRINGSET_ID={0x8, 0x1, 0x8}]}]}, @ETHTOOL_A_STRSET_HEADER={0x4}]}, 0x28}}, 0x0) r5 = socket$netlink(0x10, 0x3, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_BINDX_ADD(0xffffffffffffffff, 0x84, 0x64, &(0x7f0000000080)=[@in={0x2, 0x4e20, @empty}], 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f00000000c0)={0x0, 0x0, 0x0}, &(0x7f0000000100)=0x10) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(0xffffffffffffffff, 0x84, 0x9, 0x0, 0x0) socket$inet_tcp(0x2, 0x1, 0x0) r6 = syz_genetlink_get_family_id$fou(&(0x7f00000001c0), r3) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000200)={@empty, 0x0}, &(0x7f0000000300)=0x14) sendmsg$FOU_CMD_ADD(r5, &(0x7f0000000480)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000000340)={&(0x7f0000000400)={0x44, r6, 0x1, 0x70bd2b, 0x25dfdbff, {}, [@FOU_ATTR_PEER_V6={0x14, 0x9, @local}, @FOU_ATTR_PEER_V6={0x14, 0x9, @dev={0xfe, 0x80, '\x00', 0x33}}, @FOU_ATTR_IFINDEX={0x8, 0xb, r7}]}, 0x44}, 0x1, 0x0, 0x0, 0x40080}, 0x4) syz_init_net_socket$rose(0xb, 0x5, 0x0) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) socket$nl_xfrm(0x10, 0x3, 0x6) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000000000000000000000000000950000000000000047b3af334df81231d00b4933b10ceb664100acb258b885"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@cgroup=r8, 0x2b, 0x0, 0x0, &(0x7f00000003c0)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) 489.122835ms ago: executing program 1 (id=309): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$MAP_CREATE(0x0, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x26e1, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x1ee9) bpf$MAP_CREATE(0x0, 0x0, 0xffffffffffffff49) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a05, 0x1700) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000440)={{}, &(0x7f00000003c0), 0x0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x15, &(0x7f0000000200)=ANY=[@ANYRES32], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(r0, 0x89f2, &(0x7f0000000580)={'ip6tnl0\x00', &(0x7f0000000840)={'syztnl2\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @remote, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x0, 0x0, 0x80000001}}) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000a40)=@bpf_ext={0x1c, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x41100, 0x0, '\x00', r1}, 0x90) bind$llc(r0, &(0x7f0000000000)={0x1a, 0x18, 0x4, 0x9, 0x1, 0x7, @broadcast}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x0, 0x3, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000e1a15462f375491a000000000000"], &(0x7f00000000c0)='GPL\x00'}, 0x90) r3 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000001280), 0x17) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000580)={r3}, 0x4) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000dc0)={0x6, 0x6, &(0x7f0000000640)=@framed={{}, [@map_fd={0x18, 0x0, 0x2, 0x0, r3}, @ldst={0x1, 0x3, 0x3}]}, &(0x7f0000000d40)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r2}, 0x10) r4 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f0000000980)={&(0x7f0000000940)="2b977fc29d4b5807e5a7e757050e9e47ea556f1826cbdcb0483826cb2d9a9298a86a0803d43976", &(0x7f0000000bc0)=""/161, &(0x7f0000000c80)="47d8dea9ffb10f6c3db9fc2b1e9909b2ad2ef288fe592895301cdfb38fbb6691c5e2f4831708cc04f41d1bf124c14ae2261a0cdabcac65189e8475d221928088a3363ef515b9cf011cbf003f3a5a91c0f2a04b859813f54baa9b4501a158186656e6c4aa1d9bc952c1b29a1cdc08293511fdc72ffaae6247d6aacbb5201f2defa85548518fe5ffd2d8f0ec70015b56fb23ef38bc28188a60c62ac54d0af084d9ff5c344da6f47c2fbcf1e0628b0947803877ccb8130d7bb16ddf7892aa34c9790cca8fd9a85d8af3e444325cd220a8a860e1077478363d84990970a4cc711993a591a2d5af7647c1877d3a7b7cec1c23df3a8060e6", &(0x7f0000000d80)="b929b632a43f30aec103bad219b8032840b8ff19ba91c34adfa4d6adc5fe2015f0b9c4cf27806ff6af22659dd89afb8cb451ce0dde2716771a66060268177478b1c28f008c4b3714c2870fa5e7385ea6406e5eca6235622559a1de5246c500949e99b93e9ca052c5b923a393677e5d7ebd57c1640daa26a9acd0", 0xb60, r0}, 0x38) ioctl$HCIINQUIRY(r4, 0x800448f0, &(0x7f0000000080)={0x0, 0x0, "00fa00"}) socket$nl_netfilter(0x10, 0x3, 0xc) 464.475435ms ago: executing program 4 (id=310): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$TIPC_NL_UDP_GET_REMOTEIP(r1, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000800)={&(0x7f0000000a40)={0x14}, 0x14}}, 0x0) getsockname$packet(r1, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000140)=[{&(0x7f0000000380)=""/156, 0x9c}], 0x1}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_USC={0x10}}}]}, 0x44}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000009240)={&(0x7f0000000600)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {}, {0xffff}}, [@filter_kind_options=@f_flower={{0xb}, {0x20, 0x2, [@TCA_FLOWER_KEY_ENC_IPV6_DST={0x14, 0x21, @loopback}, @TCA_FLOWER_KEY_ENC_IPV4_DST={0x8, 0x1d, @broadcast}]}}]}, 0x50}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x9, 0x4, &(0x7f0000000080)=ANY=[@ANYBLOB="b400383e6cd0d85189cf24000000000006007f000000cf1000000000009500000c00000000cb46"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f2, 0x10, &(0x7f0000000000), 0xfffffe51}, 0x48) 383.17287ms ago: executing program 3 (id=311): r0 = socket$nl_rdma(0x10, 0x3, 0x14) r1 = socket(0x15, 0x5, 0x0) sendto$inet6(r1, 0x0, 0x0, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @remote}, 0x1c) sendmsg$RDMA_NLDEV_CMD_STAT_GET(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000100)={0x28, 0x1411, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_DEV_INDEX={0x8}, @RDMA_NLDEV_ATTR_STAT_RES={0x8, 0x4b, 0x13}, @RDMA_NLDEV_ATTR_STAT_MODE={0x8}]}, 0x28}}, 0x0) (async) r2 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$kcm(r2, &(0x7f0000000700)={&(0x7f0000000040)=@llc={0x1a, 0x323, 0x4, 0x7, 0x2b, 0x80}, 0x80, &(0x7f00000004c0)=[{&(0x7f00000001c0)="a1c8347cbb89718b7c987b59a671f6cd51c68680e1696d240d956ec0a0eba93c5a1673b5ac05cabad57cdd95994801e56b172eb88e7e5655d95b89b726959f4a383c6b6b34d129946d9507686efd6136182baf2b6bb0184456d383ef4f9df1306679f209afe26ede674fadee43bf06534ec68d0c7d125aab2e810a45217977f0d83817a8d8f8dcfbe62ad8d10a5e2fa5b0fb78247e59e6881dac33474ce345f6294fe21620324711f30748a3171b651cec3b21603f3f921446553faf0cc92fefe0064dab1c6fa9b0bb8d3a10984573ac7d02838de9ed013685889cd2ca5a6847a0fc", 0xe2}, {&(0x7f00000000c0)="ce66cd268fe51db5a1ae4ee5", 0xc}, {&(0x7f00000002c0)="f426ae883adbb08ecbbff1623e404ea1d9b79c0fc8924a779183bfe7208e569188fad86746c2b6f527eee1982b061f3f7ad470a4aff0bb4de16450e771cdef4cfe7982ce16b4871442ba42837a6991f022295ba4cbf4f424ecc1b97b9c2efd15c1d676ad9e8e93798d883809d0f5ba0109715355f781367bb8135192313d161b68f19c46f766da5aab89eac334e9f4ba428c1130bb1c9ea8c5f8ebdd2175a841608211521646d7efbc6003389021c632de3ea715addadfd88fc8e3b0ad999bae2647163b283d28d9623d7046533a5be2bf617257e523f43b7e1649d4017ca3409ca3169f181d1c", 0xe7}, {&(0x7f00000003c0)="3aea6e995ed1bc65fb9ac84f24e9f8a744e84eb3af1cdbd16bd0304f42742e8d38cca51f5e0d7f5466c3baab7bf6e86d73745fa71c7b40c2d38a5e13ab979bef4c698e82dec97764a7be5bf6a0a1306e28062d1c1feb1441aa00ffc4f116ebd153214b0be57804c1282e507acfe661bd339ae3b49e244f82e3449da9dc5cd2fda35a43d0aab89e3261f34619e83aeb83568ad056769b6b779661eb6542d666614faba9a5f2c32133ab71c2d5fb73a2ad6e56da62a1833898e2ea8c44d4c43d6442241a8de1dc1389", 0xc8}], 0x4, &(0x7f0000000500)=[{0x60, 0x88, 0x4, "32e2f682fde930ca2e7681f9492aa0a24a9095257d8bd52c6b996890be0de147d9f51a0ca0d8ef6916b5f506220d18257c39799ffdc9f1ef2603796eeae6e7bddc2aa3ee1847fb9771cd3d9d"}, {0xe8, 0x112, 0x7, "78f2599094a92507c77f9d4c1169ac18fa5a88bf175c537bad5338ebe9728e17982444dc0e9cca6b1110c8b7789b2c46f7c86bfb99b6c903997e2bb97a0ed090e5e2a7b7991f39ff83f2d99fb349620901089aa5521f71da325577dceb91abd6e7216de091e5c4e99a6232b3779aa7b6fc0f0f29cd1c8190ef95f170dc1b4552a6b3243bb748c07999f1f13ca301c2264ae93e2de530e9bf6c53c3ac943daddf8069c185f7dfde5217a2a3b28a36b60c7c973cce252767111e4156a3364c797f1fab8242c8142b8740bb0a3c2cdb1de46530d8f4842cc5"}, {0x88, 0x88, 0x1, "982e0ea1d22898b55a85fe4accb544a1e0ab8706b2fe0cac199c1ad1b99bf326d4263ab0ee4b06d3deef17655f0b9c0052549700dbfd6062a93effbe684ecf0d35d89e09eb5dd01fedf0dc02898bab343d6e0c16f90b63cae2cd2db213637c6be1c0124081047cb3b659fd254b3e1fd2591035ef65c558"}, {0x18, 0x10a, 0x400, "18c77f19f6ad963a"}], 0x1e8}, 0x4000001) (async) r3 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000740)={0x0, 0x6, 0x10}, 0xc) ioctl$ifreq_SIOCGIFINDEX_wireguard(r2, 0x8933, &(0x7f0000000940)={'wg2\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x6, 0x9, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0xfffffff7}, [@generic={0x6, 0x3, 0x6, 0xf679, 0x80}, @map_val={0x18, 0x0, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x9}, @map_fd={0x18, 0x1, 0x1, 0x0, r3}, @alu={0x0, 0x0, 0x2, 0xb25ead3df6da2c4d, 0x7, 0x1, 0x1}]}, &(0x7f0000000800)='syzkaller\x00', 0x3, 0xd5, &(0x7f0000000840)=""/213, 0x41100, 0x4, '\x00', r4, 0x25, r2, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000980)={0x1, 0xd, 0x7, 0x8}, 0x10, 0x0, 0x0, 0x5, 0x0, &(0x7f00000009c0)=[{0x1, 0x1, 0x1, 0x2}, {0x4, 0x4, 0x8, 0x1}, {0x5, 0x4, 0x0, 0x4}, {0x0, 0x2, 0x5, 0x2}, {0x4, 0x2, 0xc, 0xb}]}, 0x90) 305.357444ms ago: executing program 0 (id=312): r0 = socket(0x10, 0x803, 0x0) socket$key(0xf, 0x3, 0x2) socket$inet_tcp(0x2, 0x1, 0x0) socket$xdp(0x2c, 0x3, 0x0) mmap(&(0x7f0000001000/0xc00000)=nil, 0x200000, 0x0, 0x10, 0xffffffffffffffff, 0x0) ioctl$sock_ipv6_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, 0x0) r1 = socket(0x200000100000011, 0x3, 0x0) r2 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_IPV6_XFRM_POLICY(r2, 0x29, 0x23, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000007c0)=ANY=[@ANYBLOB="540000001400b59500000000000000000a000000", @ANYRES32=r1, @ANYBLOB="140001000040000000000000000000000000000014000200fe80000000000000000000003f0000aa1400060014000000ffffffff"], 0x54}}, 0x0) 289.621732ms ago: executing program 3 (id=313): syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x3) (async) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) (async, rerun: 64) r0 = syz_genetlink_get_family_id$devlink(&(0x7f00000006c0), 0xffffffffffffffff) (rerun: 64) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$DEVLINK_CMD_TRAP_GROUP_GET(r1, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f00000009c0)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r0, @ANYBLOB="010000000000000000003a0000000e0001006e657464617673696d0000000f000200e66e21094ea7b9af6d3000000d0087006c325f64726f707300000000"], 0x44}}, 0x0) (async) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x6, 0x5, &(0x7f0000000200)=@framed={{0x18, 0x0, 0x0, 0x0, 0xaea2}, [@alu={0x7, 0x1, 0x0, 0xb, 0x1, 0xffffffffffffffff, 0x8}, @call={0x85, 0x0, 0x0, 0x7d}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1c, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async, rerun: 32) r3 = syz_init_net_socket$x25(0x9, 0x5, 0x0) (rerun: 32) getsockopt$X25_QBITINCL(r3, 0x106, 0x1, 0x0, &(0x7f0000000180)) (async) socket$kcm(0x11, 0xa, 0x300) (async) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], &(0x7f00000002c0)='syzkaller\x00'}, 0x80) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0x560b0000, &(0x7f0000000000)="259a53f271a76d2608024c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000500)={r2}, 0xc) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) socket(0x0, 0x0, 0x0) (async) r5 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) getsockopt$bt_BT_FLUSHABLE(r5, 0x112, 0x9, 0xfffffffffffffffe, &(0x7f0000000000)) (async) socket$pppoe(0x18, 0x1, 0x0) (async, rerun: 64) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (rerun: 64) r7 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r7, 0x8933, &(0x7f0000000200)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_BSS(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='<\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="010000000000000000001900000008000300", @ANYRES32=r8, @ANYBLOB="0500a300f0ba5a72397c4f3106000000056d0000800000040000000000000000"], 0x3c}, 0x1, 0x0, 0x0, 0x24008041}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000280)={'wlan0\x00'}) (async, rerun: 64) socket$nl_generic(0x10, 0x3, 0x10) (rerun: 64) 224.597269ms ago: executing program 4 (id=314): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES64, @ANYRESOCT=r0, @ANYBLOB="0000000012800c0001006d6163766c616e001400028008000100080000000800030000000008"], 0x4c}}, 0x0) 117.244625ms ago: executing program 0 (id=315): socket$nl_route(0x10, 0x3, 0x0) (async) socket$inet_dccp(0x2, 0x6, 0x0) r0 = socket$rxrpc(0x21, 0x2, 0xa) setsockopt$RXRPC_SECURITY_KEYRING(r0, 0x110, 0x2, 0x0, 0x0) (async) socketpair(0x5, 0x2, 0x6, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r4, {0x2, 0x0, @dev}, 0x2}}, 0x2e) close(r3) (async) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, 0xffffffffffffffff, {0x2, 0x0, @dev}, 0x2, 0x0, 0x0, 0x2}}, 0x2e) (async) ioctl$PPPIOCGL2TPSTATS(r1, 0x40047459, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), r2) (async) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000400)=ANY=[@ANYBLOB="9c000000", @ANYRES16=r6, @ANYBLOB="3b00000008000300"/18, @ANYRES32=r7, @ANYBLOB="8000330080000000ffffffffffff080211000000505050505050000000000000000000006400000000060202220202020101000406000000000000050300000025030000002d1a000012ff01000000000000070000000b0000008cc70000000007dd1d4681fcb2fb4323c9f657e659a392e70d299679756854196d371f504d9b"], 0x9c}}, 0x4c001) syz_genetlink_get_family_id$batadv(&(0x7f0000000400), 0xffffffffffffffff) (async) socket$inet_mptcp(0x2, 0x1, 0x106) (async) socket$nl_generic(0x10, 0x3, 0x10) (async, rerun: 64) close(r3) (async, rerun: 64) socket$inet_mptcp(0x2, 0x1, 0x106) socket$nl_route(0x10, 0x3, 0x0) r8 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r8, 0x107, 0x12, &(0x7f0000000140)={0x0, 0x1000}, 0x4) (async) socketpair$unix(0x1, 0x4, 0x0, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) (async, rerun: 64) r11 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 64) sendmsg$nl_route(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000100)=ANY=[@ANYBLOB="3c0000001000390400"/20, @ANYRES32=r10, @ANYBLOB="000000000000000014001680100001800c000900000810fa63e50000080004"], 0x3c}}, 0x0) socket$kcm(0x10, 0x2, 0x0) 107.203784ms ago: executing program 4 (id=316): r0 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r0, &(0x7f0000000040)={0x28, 0x0, 0x2710, @local}, 0x10) listen(r0, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'crct10dif\x00'}, 0x58) r3 = accept4$alg(r2, 0x0, 0x0, 0x0) sendmmsg$alg(r3, &(0x7f0000004680)=[{0x0, 0x0, &(0x7f0000000440)=[{&(0x7f0000000180)='T', 0x1}, {&(0x7f00000001c0)="8e0d7c8af2e4602072be92294c81df10", 0x10}], 0x2}], 0x1, 0x0) connect$vsock_stream(r1, &(0x7f0000000640)={0x28, 0x0, 0x2710}, 0x10) recvmmsg(r1, &(0x7f0000001b80)=[{{0x0, 0x0, &(0x7f0000000400)=[{&(0x7f00000002c0)=""/80, 0x50}], 0x1}}], 0x1, 0x0, 0x0) shutdown(r1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x80) socket$can_raw(0x1d, 0x3, 0x1) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r4}, 0x10) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) sendmmsg$inet6(0xffffffffffffffff, &(0x7f0000001c40)=[{{0x0, 0x0, &(0x7f0000000080)=[{0x0}], 0x1}}], 0x1, 0x0) ioctl$TUNSETIFF(r6, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0xca02}) close(r5) socket$netlink(0x10, 0x3, 0x0) preadv(r6, &(0x7f0000001300)=[{&(0x7f00000000c0)=""/124, 0xe}], 0x3e8, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r5, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 52.256467ms ago: executing program 3 (id=317): bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x1fc00, 0x0, 0x1, 0x9}, 0x48) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'dummy0\x00', 0x0}) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000000c0)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @macsec={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_MACSEC_ENCRYPT={0x5, 0xf, 0x2}]}}}, @IFLA_LINK={0x8, 0x5, r2}]}, 0x44}}, 0x0) write$binfmt_script(r0, &(0x7f0000000100), 0xfecc) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) bpf$MAP_DELETE_BATCH(0x1b, &(0x7f0000000200)={0x0, 0x0, 0x0, 0x0, 0x0, r4}, 0x38) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000400)={0x0, 0x0}, 0x20) 0s ago: executing program 2 (id=189): tee(0xffffffffffffffff, 0xffffffffffffffff, 0x0, 0x0) r0 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_STAT_DEL(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="4000000012140100000000000000000008004f000000000008004b0013000000080003000000000008001500040000000800010000000000080015"], 0x40}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.82' (ED25519) to the list of known hosts. [ 53.719018][ T5215] cgroup: Unknown subsys name 'net' [ 53.942263][ T5215] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 55.369746][ T5215] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 57.488716][ T5228] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 57.505454][ T5228] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 57.515172][ T5228] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 57.524039][ T5228] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 57.531939][ T5228] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 57.539879][ T5228] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 57.594546][ T5228] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 57.602567][ T5228] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 57.640698][ T54] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 57.649193][ T54] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 57.657959][ T54] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 57.666646][ T54] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 57.674400][ T54] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 57.682342][ T54] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 57.693566][ T5233] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 57.702252][ T5233] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 57.712344][ T5233] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 57.719903][ T5233] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 57.748415][ T4622] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 57.757314][ T4622] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 57.765464][ T4622] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 57.773565][ T4622] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 57.781466][ T4622] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 57.789148][ T4622] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 57.814180][ T5233] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 57.823117][ T5233] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 57.831196][ T5233] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 57.839926][ T5233] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 57.855069][ T5233] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 57.863502][ T5233] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 58.258653][ T5229] chnl_net:caif_netlink_parms(): no params data found [ 58.361063][ T5231] chnl_net:caif_netlink_parms(): no params data found [ 58.481913][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.489395][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.498742][ T5229] bridge_slave_0: entered allmulticast mode [ 58.505786][ T5229] bridge_slave_0: entered promiscuous mode [ 58.517724][ T5225] chnl_net:caif_netlink_parms(): no params data found [ 58.533918][ T5236] chnl_net:caif_netlink_parms(): no params data found [ 58.549063][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.556781][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.563939][ T5229] bridge_slave_1: entered allmulticast mode [ 58.571348][ T5229] bridge_slave_1: entered promiscuous mode [ 58.613174][ T5231] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.620663][ T5231] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.628331][ T5231] bridge_slave_0: entered allmulticast mode [ 58.636125][ T5231] bridge_slave_0: entered promiscuous mode [ 58.669918][ T5240] chnl_net:caif_netlink_parms(): no params data found [ 58.681049][ T5231] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.688400][ T5231] bridge0: port 2(bridge_slave_1) entered disabled state [ 58.696200][ T5231] bridge_slave_1: entered allmulticast mode [ 58.702904][ T5231] bridge_slave_1: entered promiscuous mode [ 58.776124][ T5229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.809935][ T5229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.829184][ T5231] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.841658][ T5231] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.953705][ T5236] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.961822][ T5236] bridge0: port 1(bridge_slave_0) entered disabled state [ 58.969386][ T5236] bridge_slave_0: entered allmulticast mode [ 58.976569][ T5236] bridge_slave_0: entered promiscuous mode [ 58.986882][ T5229] team0: Port device team_slave_0 added [ 58.993011][ T5225] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.000660][ T5225] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.008228][ T5225] bridge_slave_0: entered allmulticast mode [ 59.015407][ T5225] bridge_slave_0: entered promiscuous mode [ 59.035275][ T5231] team0: Port device team_slave_0 added [ 59.041591][ T5236] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.049521][ T5236] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.056743][ T5236] bridge_slave_1: entered allmulticast mode [ 59.063434][ T5236] bridge_slave_1: entered promiscuous mode [ 59.072274][ T5229] team0: Port device team_slave_1 added [ 59.089622][ T5225] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.096857][ T5225] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.103984][ T5225] bridge_slave_1: entered allmulticast mode [ 59.111491][ T5225] bridge_slave_1: entered promiscuous mode [ 59.129019][ T5240] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.136438][ T5240] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.143573][ T5240] bridge_slave_0: entered allmulticast mode [ 59.150976][ T5240] bridge_slave_0: entered promiscuous mode [ 59.158670][ T5240] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.166004][ T5240] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.173160][ T5240] bridge_slave_1: entered allmulticast mode [ 59.180235][ T5240] bridge_slave_1: entered promiscuous mode [ 59.188932][ T5231] team0: Port device team_slave_1 added [ 59.217560][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.224939][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.251120][ T5229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.330706][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.337912][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.364414][ T5229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.384300][ T5225] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.404456][ T5225] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.416692][ T5240] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.428371][ T5240] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.438621][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.445874][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.471974][ T5231] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.486228][ T5236] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.498678][ T5236] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.537519][ T5231] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.544519][ T5231] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.571003][ T5231] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.623233][ T5240] team0: Port device team_slave_0 added [ 59.632553][ T5240] team0: Port device team_slave_1 added [ 59.639078][ T4622] Bluetooth: hci0: command tx timeout [ 59.664609][ T5236] team0: Port device team_slave_0 added [ 59.674132][ T5225] team0: Port device team_slave_0 added [ 59.705070][ T4622] Bluetooth: hci2: command tx timeout [ 59.729515][ T5229] hsr_slave_0: entered promiscuous mode [ 59.736348][ T5229] hsr_slave_1: entered promiscuous mode [ 59.745192][ T5236] team0: Port device team_slave_1 added [ 59.752735][ T5225] team0: Port device team_slave_1 added [ 59.772568][ T5240] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.779644][ T5240] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.805774][ T5240] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 59.816413][ T4622] Bluetooth: hci1: command tx timeout [ 59.822498][ T5240] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 59.829779][ T5240] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.855728][ T5240] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 59.872651][ T5231] hsr_slave_0: entered promiscuous mode [ 59.875136][ T4622] Bluetooth: hci3: command tx timeout [ 59.884161][ T5231] hsr_slave_1: entered promiscuous mode [ 59.890561][ T5231] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 59.898409][ T5231] Cannot create hsr debugfs directory [ 59.937461][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 59.944452][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 59.944899][ T4622] Bluetooth: hci4: command tx timeout [ 59.971149][ T5225] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.024124][ T5225] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.031590][ T5225] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.057824][ T5225] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.109477][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.117369][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.143956][ T5236] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.172063][ T5240] hsr_slave_0: entered promiscuous mode [ 60.178878][ T5240] hsr_slave_1: entered promiscuous mode [ 60.185733][ T5240] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.193309][ T5240] Cannot create hsr debugfs directory [ 60.228508][ T5236] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.235653][ T5236] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.261686][ T5236] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.323900][ T5225] hsr_slave_0: entered promiscuous mode [ 60.330318][ T5225] hsr_slave_1: entered promiscuous mode [ 60.339032][ T5225] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.347433][ T5225] Cannot create hsr debugfs directory [ 60.504371][ T5236] hsr_slave_0: entered promiscuous mode [ 60.511243][ T5236] hsr_slave_1: entered promiscuous mode [ 60.518591][ T5236] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.526247][ T5236] Cannot create hsr debugfs directory [ 60.805472][ T5231] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 60.817170][ T5231] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 60.826943][ T5231] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 60.847487][ T5231] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 60.925890][ T5229] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 60.936665][ T5229] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 60.968862][ T5229] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 60.980768][ T5229] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.033484][ T5240] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.055144][ T5240] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.067160][ T5240] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.076944][ T5240] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.179528][ T5225] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.197884][ T5225] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.220360][ T5225] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.231370][ T5225] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.273316][ T5231] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.369973][ T5236] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.383601][ T5236] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.396252][ T5231] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.419691][ T5236] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.432152][ T5236] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.492441][ T5240] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.509361][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.521825][ T5274] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.529447][ T5274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.551009][ T5274] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.558148][ T5274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.600020][ T5240] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.630161][ T5272] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.637305][ T5272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.653640][ T5229] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.706040][ T4622] Bluetooth: hci0: command tx timeout [ 61.712530][ T5272] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.719702][ T5272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.731036][ T5272] bridge0: port 1(bridge_slave_0) entered blocking state [ 61.738250][ T5272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 61.756198][ T5231] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 61.767545][ T5231] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 61.784937][ T4622] Bluetooth: hci2: command tx timeout [ 61.843774][ T5272] bridge0: port 2(bridge_slave_1) entered blocking state [ 61.851016][ T5272] bridge0: port 2(bridge_slave_1) entered forwarding state [ 61.866178][ T4622] Bluetooth: hci1: command tx timeout [ 61.894421][ T5225] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.945895][ T4622] Bluetooth: hci3: command tx timeout [ 62.010946][ T5225] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.024881][ T4622] Bluetooth: hci4: command tx timeout [ 62.065813][ T5272] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.073528][ T5272] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.121601][ T5231] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.147836][ T5273] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.155034][ T5273] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.189867][ T5236] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.286046][ T5236] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.359739][ T5274] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.366969][ T5274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.387839][ T5274] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.395051][ T5274] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.492178][ T5240] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.590456][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.752428][ T5240] veth0_vlan: entered promiscuous mode [ 62.812036][ T5231] veth0_vlan: entered promiscuous mode [ 62.844365][ T5240] veth1_vlan: entered promiscuous mode [ 62.882503][ T5231] veth1_vlan: entered promiscuous mode [ 62.904356][ T5225] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.918630][ T5229] veth0_vlan: entered promiscuous mode [ 62.978163][ T5236] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 63.000340][ T5229] veth1_vlan: entered promiscuous mode [ 63.010388][ T5240] veth0_macvtap: entered promiscuous mode [ 63.046611][ T5240] veth1_macvtap: entered promiscuous mode [ 63.089430][ T5231] veth0_macvtap: entered promiscuous mode [ 63.113641][ T5240] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.122813][ T5231] veth1_macvtap: entered promiscuous mode [ 63.150491][ T5225] veth0_vlan: entered promiscuous mode [ 63.163119][ T5240] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.182866][ T5236] veth0_vlan: entered promiscuous mode [ 63.197410][ T5240] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.207809][ T5240] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.217068][ T5240] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.227180][ T5240] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.239776][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.251008][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.264065][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.280623][ T5225] veth1_vlan: entered promiscuous mode [ 63.312080][ T5231] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.323197][ T5231] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.336877][ T5231] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.347166][ T5236] veth1_vlan: entered promiscuous mode [ 63.355967][ T5231] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.366366][ T5231] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.376352][ T5231] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.387323][ T5231] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.398579][ T5229] veth0_macvtap: entered promiscuous mode [ 63.440363][ T5229] veth1_macvtap: entered promiscuous mode [ 63.522468][ T5225] veth0_macvtap: entered promiscuous mode [ 63.534409][ T5225] veth1_macvtap: entered promiscuous mode [ 63.555896][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.567539][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.579323][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.591178][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.603550][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.619951][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.636057][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.646578][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.657594][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.669337][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.690659][ T5236] veth0_macvtap: entered promiscuous mode [ 63.709973][ T5229] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.720818][ T5229] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.730354][ T5229] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.739574][ T5229] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.769319][ T5236] veth1_macvtap: entered promiscuous mode [ 63.786103][ T4622] Bluetooth: hci0: command tx timeout [ 63.804468][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.819637][ T3025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.821592][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.830186][ T3025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.838475][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.856709][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.866949][ T4622] Bluetooth: hci2: command tx timeout [ 63.871966][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.883667][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.895164][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.907388][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.917926][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.927813][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.938550][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.949711][ T4622] Bluetooth: hci1: command tx timeout [ 63.950725][ T5225] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.966679][ T5225] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.979205][ T5225] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.029290][ T4622] Bluetooth: hci3: command tx timeout [ 64.033264][ T5225] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.046949][ T5225] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.056510][ T5225] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.068556][ T5225] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.080689][ T3025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.094216][ T3025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.104864][ T4622] Bluetooth: hci4: command tx timeout [ 64.129872][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.140747][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.150851][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.161464][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.171349][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.182059][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.192661][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.203207][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.215836][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.230885][ T3025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.239711][ T3025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.253877][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.266832][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.277493][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.288045][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.298046][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.308682][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.323274][ T5236] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.334283][ T5236] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.346940][ T5236] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.360879][ T5236] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.370034][ T5236] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.384589][ T5236] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.393608][ T5236] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.439006][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.474220][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.550742][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.560711][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.656911][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.693312][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.792880][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.808995][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.824514][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.831593][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.918317][ T5306] Bluetooth: MGMT ver 1.23 [ 64.959160][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.999512][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.129552][ T3008] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.171827][ T3008] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.223452][ T5322] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.318332][ T5322] netlink: 209844 bytes leftover after parsing attributes in process `syz.0.1'. [ 65.558499][ T5328] netlink: 8 bytes leftover after parsing attributes in process `syz.2.3'. [ 65.637471][ T5328] IPVS: Error joining to the multicast group [ 65.870608][ T4622] Bluetooth: hci0: command tx timeout [ 65.912159][ T5334] tipc: Can't bind to reserved service type 1 [ 65.945257][ T4622] Bluetooth: hci2: command tx timeout [ 66.026268][ T4622] Bluetooth: hci1: command tx timeout [ 66.114768][ T4622] Bluetooth: hci3: command tx timeout [ 66.187715][ T4622] Bluetooth: hci4: command tx timeout [ 66.203333][ T5349] netlink: 24 bytes leftover after parsing attributes in process `syz.0.11'. [ 66.581617][ T5361] netlink: 56 bytes leftover after parsing attributes in process `syz.0.13'. [ 66.868994][ T5368] netlink: 'syz.1.17': attribute type 2 has an invalid length. [ 66.909258][ T5368] netlink: 8 bytes leftover after parsing attributes in process `syz.1.17'. [ 67.004256][ T5368] netlink: 12 bytes leftover after parsing attributes in process `syz.1.17'. [ 67.446963][ T5393] netlink: 80 bytes leftover after parsing attributes in process `syz.4.20'. [ 67.512086][ T5391] macvlan2: entered allmulticast mode [ 68.032059][ T5401] netlink: 'syz.1.25': attribute type 11 has an invalid length. [ 68.074112][ T5401] netlink: 8 bytes leftover after parsing attributes in process `syz.1.25'. [ 68.303709][ T5426] netlink: 48 bytes leftover after parsing attributes in process `syz.3.28'. [ 68.434965][ T5430] raw_sendmsg: syz.1.29 forgot to set AF_INET. Fix it! [ 68.490052][ T5430] RDS: rds_bind could not find a transport for fec0:ffff:ffff:ffff::1, load rds_tcp or rds_rdma? [ 68.606019][ T5432] syz.2.30 uses obsolete (PF_INET,SOCK_PACKET) [ 68.786779][ T5435] netlink: 'syz.2.30': attribute type 4 has an invalid length. [ 68.834888][ T5435] netlink: 116376 bytes leftover after parsing attributes in process `syz.2.30'. [ 68.900741][ T5440] netlink: 'syz.2.30': attribute type 1 has an invalid length. [ 69.032393][ T5450] ICMPv6: NA: aa:aa:aa:aa:aa:00 advertised our address fe80::aa on syz_tun! [ 69.648265][ T5471] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 69.677009][ T5473] openvswitch: netlink: Message has 1 unknown bytes. [ 69.842600][ T3025] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.931241][ T5479] FAULT_INJECTION: forcing a failure. [ 69.931241][ T5479] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 69.964495][ T5475] netlink: 'syz.0.44': attribute type 3 has an invalid length. [ 69.994909][ T5479] CPU: 1 UID: 0 PID: 5479 Comm: syz.4.45 Not tainted 6.11.0-rc1-syzkaller-00292-g2c14119ab8f3 #0 [ 70.005477][ T5479] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 70.015550][ T5479] Call Trace: [ 70.018825][ T5479] [ 70.021747][ T5479] dump_stack_lvl+0x241/0x360 [ 70.026437][ T5479] ? __pfx_dump_stack_lvl+0x10/0x10 [ 70.031627][ T5479] ? __pfx__printk+0x10/0x10 [ 70.036218][ T5479] should_fail_ex+0x3b0/0x4e0 [ 70.040899][ T5479] _copy_from_user+0x2f/0xe0 [ 70.045482][ T5479] move_addr_to_kernel+0x82/0x150 [ 70.050504][ T5479] copy_msghdr_from_user+0x43e/0x680 [ 70.055793][ T5479] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 70.061607][ T5479] __sys_sendmsg+0x23d/0x3a0 [ 70.066191][ T5479] ? __pfx___sys_sendmsg+0x10/0x10 [ 70.071289][ T5479] ? vfs_write+0x7c4/0xc90 [ 70.075727][ T5479] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 70.082052][ T5479] ? do_syscall_64+0x100/0x230 [ 70.086812][ T5479] ? do_syscall_64+0xb6/0x230 [ 70.091483][ T5479] do_syscall_64+0xf3/0x230 [ 70.095985][ T5479] ? clear_bhb_loop+0x35/0x90 [ 70.100655][ T5479] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 70.106554][ T5479] RIP: 0033:0x7f80fc3779f9 [ 70.110966][ T5479] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 70.130567][ T5479] RSP: 002b:00007f80fd134038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 70.139001][ T5479] RAX: ffffffffffffffda RBX: 00007f80fc505f80 RCX: 00007f80fc3779f9 [ 70.146963][ T5479] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 70.154930][ T5479] RBP: 00007f80fd134090 R08: 0000000000000000 R09: 0000000000000000 [ 70.162988][ T5479] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 70.170950][ T5479] R13: 0000000000000000 R14: 00007f80fc505f80 R15: 00007fff90e8c048 [ 70.178924][ T5479] [ 70.285288][ T3025] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.396728][ T3025] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.481897][ T5475] syzkaller0: entered allmulticast mode [ 70.557273][ T3025] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.615461][ T5485] syzkaller1: entered promiscuous mode [ 70.620990][ T5485] syzkaller1: entered allmulticast mode [ 70.895546][ T5233] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 70.906026][ T5233] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 70.914395][ T5233] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 70.927306][ T5233] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 70.935177][ T5233] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 70.942542][ T5233] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 71.037078][ T5498] __nla_validate_parse: 7 callbacks suppressed [ 71.037097][ T5498] netlink: 56 bytes leftover after parsing attributes in process `syz.4.52'. [ 71.060243][ T3025] bridge_slave_1: left allmulticast mode [ 71.089661][ T3025] bridge_slave_1: left promiscuous mode [ 71.166479][ T3025] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.201357][ T5233] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 71.210763][ T5233] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 71.219806][ T5233] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 71.238976][ T5233] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 71.247108][ T5233] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 71.254538][ T5233] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 71.333373][ T3025] bridge_slave_0: left allmulticast mode [ 71.343534][ T3025] bridge_slave_0: left promiscuous mode [ 71.361674][ T3025] bridge0: port 1(bridge_slave_0) entered disabled state [ 71.791757][ T1271] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.800275][ T1271] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.857142][ T3025] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 71.871695][ T3025] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 71.882801][ T3025] bond0 (unregistering): Released all slaves [ 72.230783][ T5544] Zero length message leads to an empty skb [ 72.241185][ T5545] dccp_invalid_packet: P.type (REQUEST) not Data || [Data]Ack, while P.X == 0 [ 72.313267][ T5544] netlink: 'syz.3.61': attribute type 3 has an invalid length. [ 72.352223][ T5544] netlink: 130984 bytes leftover after parsing attributes in process `syz.3.61'. [ 72.758231][ T5561] netlink: 56 bytes leftover after parsing attributes in process `syz.0.65'. [ 72.985444][ T4622] Bluetooth: hci3: command tx timeout [ 73.019371][ T3025] hsr_slave_0: left promiscuous mode [ 73.036864][ T3025] hsr_slave_1: left promiscuous mode [ 73.055731][ T3025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.063248][ T3025] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.085406][ T3025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.093275][ T3025] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.144393][ T3025] veth1_macvtap: left promiscuous mode [ 73.155195][ T3025] veth0_macvtap: left promiscuous mode [ 73.160891][ T3025] veth1_vlan: left promiscuous mode [ 73.182409][ T3025] veth0_vlan: left promiscuous mode [ 73.305457][ T4622] Bluetooth: hci4: command tx timeout [ 73.905795][ T3025] team0 (unregistering): Port device team_slave_1 removed [ 73.947428][ T3025] team0 (unregistering): Port device team_slave_0 removed [ 74.502649][ T29] audit: type=1107 audit(1723050629.981:2): pid=5619 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg=':Y$nJ5 9Icc}֨ V}L(ΤO*?S\HSsdLY۞D|UsH;=' [ 74.553582][ T5622] netlink: 36 bytes leftover after parsing attributes in process `syz.3.76'. [ 74.573547][ T5493] chnl_net:caif_netlink_parms(): no params data found [ 74.596266][ T5620] bridge0: port 2(bridge_slave_1) entered disabled state [ 74.604860][ T5620] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.642821][ T5625] netlink: 209844 bytes leftover after parsing attributes in process `syz.3.76'. [ 74.664189][ T5620] netlink: 24 bytes leftover after parsing attributes in process `syz.4.77'. [ 74.691938][ T5622] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 74.699699][ T5622] IPv6: NLM_F_CREATE should be set when creating new route [ 74.707014][ T5622] IPv6: NLM_F_CREATE should be set when creating new route [ 74.730085][ T5623] bridge0: port 2(bridge_slave_1) entered blocking state [ 74.737379][ T5623] bridge0: port 2(bridge_slave_1) entered forwarding state [ 74.745963][ T5623] bridge0: port 1(bridge_slave_0) entered blocking state [ 74.753170][ T5623] bridge0: port 1(bridge_slave_0) entered forwarding state [ 74.756636][ T5622] xt_bpf: check failed: parse error [ 74.770563][ T5623] bridge0: entered promiscuous mode [ 74.776061][ T5623] bridge0: entered allmulticast mode [ 74.957291][ T5505] chnl_net:caif_netlink_parms(): no params data found [ 75.068080][ T4622] Bluetooth: hci3: command tx timeout [ 75.076342][ T5493] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.098821][ T5493] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.108336][ T5493] bridge_slave_0: entered allmulticast mode [ 75.116465][ T5493] bridge_slave_0: entered promiscuous mode [ 75.133212][ T5493] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.153140][ T5493] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.179484][ T5493] bridge_slave_1: entered allmulticast mode [ 75.199044][ T5647] netlink: 209852 bytes leftover after parsing attributes in process `syz.3.80'. [ 75.201924][ T5493] bridge_slave_1: entered promiscuous mode [ 75.223724][ T5647] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 75.263678][ T5643] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 75.384796][ T4622] Bluetooth: hci4: command tx timeout [ 75.413196][ T5493] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.469464][ T5493] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.720939][ T5493] team0: Port device team_slave_0 added [ 75.759898][ T5493] team0: Port device team_slave_1 added [ 75.811480][ T5505] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.846867][ T5505] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.854140][ T5505] bridge_slave_0: entered allmulticast mode [ 75.873685][ T5505] bridge_slave_0: entered promiscuous mode [ 75.952537][ T5505] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.976508][ T5505] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.983781][ T5505] bridge_slave_1: entered allmulticast mode [ 76.002780][ T5505] bridge_slave_1: entered promiscuous mode [ 76.096924][ T5493] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.125201][ T5493] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.163541][ T5493] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.220254][ T3025] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.303101][ T5686] netlink: 56 bytes leftover after parsing attributes in process `syz.3.87'. [ 76.340918][ T5493] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.384809][ T5493] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.473542][ T5493] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.517668][ T5505] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.556642][ T5505] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.636755][ T3025] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.850692][ T3025] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 76.870712][ T5505] team0: Port device team_slave_0 added [ 76.882132][ T5505] team0: Port device team_slave_1 added [ 76.938580][ T940] cfg80211: failed to load regulatory.db [ 77.036276][ T3025] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 77.131780][ T5505] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 77.147007][ T4622] Bluetooth: hci3: command tx timeout [ 77.152918][ T5505] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.186229][ T5505] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 77.212560][ T5493] hsr_slave_0: entered promiscuous mode [ 77.223661][ T5493] hsr_slave_1: entered promiscuous mode [ 77.236046][ T5493] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.249877][ T5493] Cannot create hsr debugfs directory [ 77.271526][ T5505] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.297559][ T5505] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.354712][ T5505] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.474867][ T4622] Bluetooth: hci4: command tx timeout [ 77.566572][ T5724] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 77.631777][ T5723] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 77.753378][ T5726] netlink: 56 bytes leftover after parsing attributes in process `syz.4.99'. [ 77.772443][ T5505] hsr_slave_0: entered promiscuous mode [ 77.816461][ T5505] hsr_slave_1: entered promiscuous mode [ 77.853645][ T5505] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.891185][ T5505] Cannot create hsr debugfs directory [ 78.229260][ T3025] bridge_slave_1: left allmulticast mode [ 78.253586][ T3025] bridge_slave_1: left promiscuous mode [ 78.281127][ T3025] bridge0: port 2(bridge_slave_1) entered disabled state [ 78.312635][ T3025] bridge_slave_0: left allmulticast mode [ 78.323088][ T3025] bridge_slave_0: left promiscuous mode [ 78.331352][ T3025] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.707685][ T3025] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 78.719935][ T3025] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 78.731897][ T3025] bond0 (unregistering): Released all slaves [ 78.963167][ T5767] pimreg: entered allmulticast mode [ 79.092811][ T5775] IPVS: set_ctl: invalid protocol: 60 172.20.20.187:20004 [ 79.126511][ T5771] pimreg: left allmulticast mode [ 79.225434][ T4622] Bluetooth: hci3: command tx timeout [ 79.545173][ T4622] Bluetooth: hci4: command tx timeout [ 79.810979][ T3025] hsr_slave_0: left promiscuous mode [ 79.831679][ T5807] netlink: 12 bytes leftover after parsing attributes in process `syz.4.114'. [ 79.856938][ T3025] hsr_slave_1: left promiscuous mode [ 79.869426][ T3025] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 79.884915][ T5807] netlink: 68 bytes leftover after parsing attributes in process `syz.4.114'. [ 79.915084][ T3025] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 79.938011][ T3025] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 79.962896][ T3025] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 79.995217][ T5817] netlink: 32 bytes leftover after parsing attributes in process `syz.0.118'. [ 80.018612][ T3025] veth1_macvtap: left promiscuous mode [ 80.024213][ T3025] veth0_macvtap: left promiscuous mode [ 80.045461][ T3025] veth1_vlan: left promiscuous mode [ 80.050860][ T3025] veth0_vlan: left promiscuous mode [ 80.733002][ T3025] team0 (unregistering): Port device team_slave_1 removed [ 80.772207][ T3025] team0 (unregistering): Port device team_slave_0 removed [ 81.407072][ T5850] netlink: 156 bytes leftover after parsing attributes in process `syz.4.123'. [ 81.533727][ T5855] openvswitch: netlink: Missing key (keys=40, expected=200000) [ 81.657592][ T5855] ieee802154 phy0 wpan0: encryption failed: -22 [ 81.690844][ T5861] netlink: 16 bytes leftover after parsing attributes in process `syz.3.127'. [ 82.001363][ T5874] netlink: 488 bytes leftover after parsing attributes in process `syz.4.130'. [ 82.026941][ T5871] netlink: 48 bytes leftover after parsing attributes in process `syz.4.130'. [ 82.135694][ T5880] openvswitch: netlink: Unknown nsh attribute 0 [ 82.212998][ T5882] ieee802154 phy0 wpan0: encryption failed: -22 [ 82.232336][ T5883] netlink: 36 bytes leftover after parsing attributes in process `syz.3.132'. [ 82.297002][ T5505] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.321965][ T5505] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.362267][ T5505] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.405922][ T5505] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 82.688888][ T5493] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.726950][ T5493] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.770518][ T5493] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.796449][ T5493] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.978518][ T5912] netlink: 16 bytes leftover after parsing attributes in process `syz.3.136'. [ 83.130502][ T5505] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.211603][ T5493] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.218619][ T5918] netlink: 184 bytes leftover after parsing attributes in process `syz.0.139'. [ 83.233650][ T5918] netlink: 'syz.0.139': attribute type 1 has an invalid length. [ 83.269010][ T5918] netlink: 12 bytes leftover after parsing attributes in process `syz.0.139'. [ 83.292772][ T5505] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.338607][ T940] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.345861][ T940] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.413495][ T5493] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.500358][ T9] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.507589][ T9] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.528780][ T9] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.535992][ T9] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.583019][ T940] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.590396][ T940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.616183][ T5929] netlink: 'syz.0.142': attribute type 1 has an invalid length. [ 83.644172][ T5923] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 83.838852][ T5493] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 83.870816][ T5493] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 84.254222][ T5958] netlink: 16 bytes leftover after parsing attributes in process `syz.0.146'. [ 84.489986][ T5968] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 84.555259][ T5493] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.631102][ T5505] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.737683][ T5493] veth0_vlan: entered promiscuous mode [ 84.819887][ T5493] veth1_vlan: entered promiscuous mode [ 84.973202][ T5505] veth0_vlan: entered promiscuous mode [ 85.040061][ T5493] veth0_macvtap: entered promiscuous mode [ 85.073651][ T5493] veth1_macvtap: entered promiscuous mode [ 85.109403][ T5505] veth1_vlan: entered promiscuous mode [ 85.165122][ T5493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.205803][ T5493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.227659][ T5493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.263182][ T5493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.278359][ T5493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.289338][ T5493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.302599][ T5493] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.322110][ T5997] netlink: 56 bytes leftover after parsing attributes in process `syz.0.155'. [ 85.333146][ T5493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.367231][ T6006] x_tables: duplicate underflow at hook 1 [ 85.375021][ T5493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.395881][ T5493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.455283][ T5493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.514975][ T5493] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.545044][ T5493] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.591677][ T5493] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.710140][ T5493] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.731638][ T5493] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.763430][ T5493] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.800295][ T5493] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.914208][ T5505] veth0_macvtap: entered promiscuous mode [ 85.997759][ T5505] veth1_macvtap: entered promiscuous mode [ 86.197778][ T5505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.220263][ T5505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.231320][ T5505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.248401][ T5505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.258463][ T5505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.276292][ T5505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.294396][ T5505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.310584][ T5505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.342646][ T6058] netlink: 'syz.4.163': attribute type 3 has an invalid length. [ 86.351662][ T5505] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.424087][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.437675][ T5505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.452672][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.483092][ T5505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.509647][ T5505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.552413][ T5505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.586237][ T5505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.618365][ T5505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.628742][ T5505] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.646720][ T5505] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.664566][ T5505] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.698761][ T6074] dccp_invalid_packet: P.Data Offset(172) too large [ 86.731166][ T5505] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.749721][ T5505] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.762866][ T5505] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.775488][ T5505] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.819249][ T3025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.860608][ T3025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.064964][ T3025] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.072834][ T3025] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.132855][ T6085] __nla_validate_parse: 2 callbacks suppressed [ 87.132874][ T6085] netlink: 8 bytes leftover after parsing attributes in process `syz.1.46'. [ 87.286575][ T2998] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.344869][ T2998] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.968224][ T6125] netlink: 72 bytes leftover after parsing attributes in process `syz.2.176'. [ 88.015122][ T6125] netlink: 72 bytes leftover after parsing attributes in process `syz.2.176'. [ 88.100763][ T6128] bond0: entered promiscuous mode [ 88.110799][ T6128] bond_slave_0: entered promiscuous mode [ 88.156871][ T6128] bond_slave_1: entered promiscuous mode [ 88.238546][ T6125] netlink: 'syz.2.176': attribute type 10 has an invalid length. [ 88.313979][ T6125] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 88.326631][ T6125] team0: Failed to send options change via netlink (err -105) [ 88.339486][ T6125] team0: Port device netdevsim0 added [ 88.347378][ T6140] netlink: 8 bytes leftover after parsing attributes in process `syz.1.179'. [ 88.830231][ T6156] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.181'. [ 89.310301][ T2998] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.568852][ T2998] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.796825][ T2998] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.915589][ T6198] netem: incorrect ge model size [ 89.928422][ T6198] netem: change failed [ 90.148246][ T2998] team0: Port device netdevsim0 removed [ 90.189527][ T2998] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.501397][ T5233] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 90.528210][ T5233] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 90.528334][ T2998] bridge_slave_1: left allmulticast mode [ 90.553387][ T5233] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 90.561955][ T6227] netlink: 8 bytes leftover after parsing attributes in process `syz.3.195'. [ 90.581795][ T5233] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 90.588934][ T2998] bridge_slave_1: left promiscuous mode [ 90.589136][ T2998] bridge0: port 2(bridge_slave_1) entered disabled state [ 90.607970][ T5233] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 90.616063][ T5233] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 90.702873][ T2998] bridge_slave_0: left allmulticast mode [ 90.713125][ T2998] bridge_slave_0: left promiscuous mode [ 90.722941][ T2998] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.572643][ T2998] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.592345][ T2998] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 91.612104][ T2998] bond0 (unregistering): Released all slaves [ 91.653038][ T6252] netlink: 'syz.0.199': attribute type 12 has an invalid length. [ 91.674724][ T6252] netlink: 'syz.0.199': attribute type 11 has an invalid length. [ 91.713366][ T6252] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.722473][ T6252] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.731252][ T6252] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.740117][ T6252] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 91.768778][ T6252] vxlan0: entered promiscuous mode [ 91.805568][ T6266] macvlan2: entered allmulticast mode [ 91.833013][ T6266] team_slave_0: entered promiscuous mode [ 91.839077][ T6266] team_slave_1: entered promiscuous mode [ 91.883630][ T6266] team0: entered allmulticast mode [ 91.900405][ T6266] team_slave_0: entered allmulticast mode [ 91.928590][ T6266] team_slave_1: entered allmulticast mode [ 91.936489][ T6266] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 91.944374][ T6278] netlink: zone id is out of range [ 91.948021][ T6266] bond0: (slave macvlan2): Enslaving as an active interface with an up link [ 91.950832][ T6278] netlink: zone id is out of range [ 91.979056][ T6278] netlink: zone id is out of range [ 92.012275][ T6278] netlink: zone id is out of range [ 92.018134][ T6278] netlink: zone id is out of range [ 92.024422][ T6278] netlink: zone id is out of range [ 92.051163][ T6282] 8021q: VLANs not supported on lo [ 92.059741][ T6278] netlink: set zone limit has 4 unknown bytes [ 92.512641][ T6309] netlink: 4 bytes leftover after parsing attributes in process `syz.3.209'. [ 92.570480][ T6309] netlink: 8 bytes leftover after parsing attributes in process `syz.3.209'. [ 92.583092][ T2998] hsr_slave_0: left promiscuous mode [ 92.635667][ T2998] hsr_slave_1: left promiscuous mode [ 92.662676][ T2998] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 92.681523][ T2998] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 92.750751][ T2998] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 92.758387][ T5233] Bluetooth: hci4: command tx timeout [ 92.780406][ T2998] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 92.855869][ T6325] netlink: 12 bytes leftover after parsing attributes in process `syz.1.211'. [ 92.913904][ T2998] veth1_macvtap: left promiscuous mode [ 92.936034][ T2998] veth0_macvtap: left promiscuous mode [ 92.972191][ T2998] veth1_vlan: left promiscuous mode [ 93.013059][ T2998] veth0_vlan: left promiscuous mode [ 93.789991][ T2998] team0 (unregistering): Port device team_slave_1 removed [ 93.829945][ T2998] team0 (unregistering): Port device team_slave_0 removed [ 94.154823][ T6332] netlink: 36 bytes leftover after parsing attributes in process `syz.1.211'. [ 94.390461][ T6351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.218'. [ 94.491735][ T6224] chnl_net:caif_netlink_parms(): no params data found [ 94.573121][ T6354] netlink: 'syz.0.217': attribute type 1 has an invalid length. [ 94.658595][ T6362] bond1: (slave vcan1): The slave device specified does not support setting the MAC address [ 94.670110][ T6362] bond1: (slave vcan1): Setting fail_over_mac to active for active-backup mode [ 94.685463][ T6362] bond1: (slave vcan1): making interface the new active one [ 94.693966][ T6362] bond1: (slave vcan1): Enslaving as an active interface with an up link [ 94.749030][ T6367] pim6reg: entered allmulticast mode [ 94.762664][ T6366] netlink: 44 bytes leftover after parsing attributes in process `syz.0.217'. [ 94.828469][ T5233] Bluetooth: hci4: command tx timeout [ 94.856312][ T6371] pim6reg: left allmulticast mode [ 95.272537][ T6224] bridge0: port 1(bridge_slave_0) entered blocking state [ 95.298549][ T6224] bridge0: port 1(bridge_slave_0) entered disabled state [ 95.311101][ T6224] bridge_slave_0: entered allmulticast mode [ 95.321000][ T6224] bridge_slave_0: entered promiscuous mode [ 95.390462][ T6224] bridge0: port 2(bridge_slave_1) entered blocking state [ 95.409416][ T6224] bridge0: port 2(bridge_slave_1) entered disabled state [ 95.425464][ T6224] bridge_slave_1: entered allmulticast mode [ 95.441896][ T6224] bridge_slave_1: entered promiscuous mode [ 95.653566][ T6224] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 95.682274][ T6224] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.693451][ T6408] netlink: 'syz.3.228': attribute type 1 has an invalid length. [ 95.724124][ T6408] netlink: 'syz.3.228': attribute type 2 has an invalid length. [ 95.740367][ T6412] netlink: 28 bytes leftover after parsing attributes in process `syz.4.229'. [ 95.891026][ T6224] team0: Port device team_slave_0 added [ 95.917213][ T6224] team0: Port device team_slave_1 added [ 96.071606][ T6430] netlink: 20 bytes leftover after parsing attributes in process `syz.1.233'. [ 96.164108][ T6430] ip6t_rpfilter: unknown options [ 96.185869][ T6224] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 96.192867][ T6224] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.239936][ T6224] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 96.373314][ T6224] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 96.409769][ T6224] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 96.502555][ T6224] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 96.727307][ T6224] hsr_slave_0: entered promiscuous mode [ 96.751639][ T6224] hsr_slave_1: entered promiscuous mode [ 96.766040][ T6224] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 96.774166][ T6224] Cannot create hsr debugfs directory [ 96.805849][ T6459] mac80211_hwsim hwsim14 wlan0: entered promiscuous mode [ 96.818141][ T6459] macsec1: entered promiscuous mode [ 96.823791][ T6459] macsec1: entered allmulticast mode [ 96.830548][ T6459] mac80211_hwsim hwsim14 wlan0: entered allmulticast mode [ 96.842352][ T6459] mac80211_hwsim hwsim14 wlan0: left allmulticast mode [ 96.852284][ T6459] mac80211_hwsim hwsim14 wlan0: left promiscuous mode [ 96.906213][ T5233] Bluetooth: hci4: command tx timeout [ 97.630765][ T6497] Illegal XDP return value 4294967274 on prog (id 69) dev N/A, expect packet loss! [ 98.482991][ T6534] geneve2: entered promiscuous mode [ 98.507192][ T6534] geneve2: entered allmulticast mode [ 98.717094][ T6224] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 98.740623][ T6224] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 98.749513][ T6554] No such timeout policy "syz0" [ 98.781237][ T6224] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 98.803599][ T6224] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 98.985785][ T5233] Bluetooth: hci4: command tx timeout [ 99.048665][ T6224] 8021q: adding VLAN 0 to HW filter on device bond0 [ 99.108190][ T6224] 8021q: adding VLAN 0 to HW filter on device team0 [ 99.163303][ T5274] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.170649][ T5274] bridge0: port 1(bridge_slave_0) entered forwarding state [ 99.258498][ T940] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.265727][ T940] bridge0: port 2(bridge_slave_1) entered forwarding state [ 99.393988][ T6577] netlink: 20 bytes leftover after parsing attributes in process `syz.4.262'. [ 99.433517][ T6578] netlink: 4 bytes leftover after parsing attributes in process `syz.3.261'. [ 99.487632][ T6577] ip6t_rpfilter: unknown options [ 99.516010][ T6582] netlink: 80 bytes leftover after parsing attributes in process `syz.0.263'. [ 99.521642][ T6224] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 99.546019][ T6224] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 99.649676][ T6584] netlink: 8 bytes leftover after parsing attributes in process `syz.1.264'. [ 99.855597][ T6587] netlink: 4 bytes leftover after parsing attributes in process `syz.0.263'. [ 99.883866][ T6598] netlink: 'syz.4.265': attribute type 3 has an invalid length. [ 99.926162][ T6587] netlink: 'syz.0.263': attribute type 29 has an invalid length. [ 100.211775][ T6224] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 100.417367][ T6620] netlink: 12 bytes leftover after parsing attributes in process `syz.1.272'. [ 100.470221][ T6224] veth0_vlan: entered promiscuous mode [ 100.555029][ T6224] veth1_vlan: entered promiscuous mode [ 100.698124][ T6224] veth0_macvtap: entered promiscuous mode [ 100.781113][ T6224] veth1_macvtap: entered promiscuous mode [ 100.867659][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.901275][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 100.934695][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 100.979859][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.014699][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.052172][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.078966][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 101.110386][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.158917][ T6224] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 101.197225][ T6645] netlink: 4 bytes leftover after parsing attributes in process `syz.1.277'. [ 101.252843][ T6649] netlink: 'syz.1.277': attribute type 15 has an invalid length. [ 101.277353][ T6649] netlink: 'syz.1.277': attribute type 1 has an invalid length. [ 101.339193][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.404769][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.434726][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.481982][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.535573][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.555655][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.566456][ T6224] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 101.585128][ T6224] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 101.632327][ T6224] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 101.693874][ T6679] netlink: 56 bytes leftover after parsing attributes in process `syz.1.283'. [ 101.722933][ T6224] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.774825][ T6224] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.805284][ T6224] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 101.837389][ T6224] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.120629][ T6702] macsec0: entered allmulticast mode [ 102.141515][ T6702] veth1_macvtap: entered allmulticast mode [ 102.380781][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.399366][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.599997][ T3025] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 102.617547][ T3025] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 102.648219][ T6724] tipc: Started in network mode [ 102.653138][ T6724] tipc: Node identity 1, cluster identity 2 [ 102.703282][ T6724] tipc: Node number set to 1 [ 103.134217][ T6740] netlink: 12 bytes leftover after parsing attributes in process `syz.4.297'. [ 103.189251][ T6747] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 103.238325][ T6740] netlink: 8 bytes leftover after parsing attributes in process `syz.4.297'. [ 103.262944][ T6740] ipvlan0: entered allmulticast mode [ 103.286358][ T6740] veth0_vlan: entered allmulticast mode [ 104.382389][ T6797] ------------[ cut here ]------------ [ 104.388169][ T6797] WARNING: CPU: 1 PID: 6797 at kernel/workqueue.c:2259 __queue_work+0xcd3/0xf50 [ 104.397236][ T6797] Modules linked in: [ 104.401207][ T6797] CPU: 1 UID: 0 PID: 6797 Comm: syz.0.315 Not tainted 6.11.0-rc1-syzkaller-00292-g2c14119ab8f3 #0 [ 104.411815][ T6797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 104.421899][ T6797] RIP: 0010:__queue_work+0xcd3/0xf50 [ 104.427250][ T6797] Code: ff e8 11 84 36 00 90 0f 0b 90 e9 1e fd ff ff e8 03 84 36 00 eb 13 e8 fc 83 36 00 eb 0c e8 f5 83 36 00 eb 05 e8 ee 83 36 00 90 <0f> 0b 90 48 83 c4 60 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 104.446887][ T6797] RSP: 0018:ffffc900035576a8 EFLAGS: 00010093 [ 104.452992][ T6797] RAX: ffffffff815ce274 RBX: ffff88802bf30000 RCX: ffff88802bf30000 [ 104.460995][ T6797] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 104.469001][ T6797] RBP: 0000000000000000 R08: ffffffff815cd6d4 R09: 0000000000000000 [ 104.476996][ T6797] R10: ffffc90003557780 R11: fffff520006aaef1 R12: ffff88802b18f800 [ 104.484998][ T6797] R13: ffff88802b18f9c0 R14: dffffc0000000000 R15: 0000000000000008 [ 104.493007][ T6797] FS: 0000000000000000(0000) GS:ffff8880b9300000(0000) knlGS:0000000000000000 [ 104.501965][ T6797] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 104.508661][ T6797] CR2: 0000000000000000 CR3: 0000000022988000 CR4: 00000000003506f0 [ 104.516674][ T6797] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 104.524757][ T6797] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 104.532749][ T6797] Call Trace: [ 104.536030][ T6797] [ 104.538956][ T6797] ? __warn+0x163/0x4e0 [ 104.543110][ T6797] ? __queue_work+0xcd3/0xf50 [ 104.547793][ T6797] ? report_bug+0x2b3/0x500 [ 104.552289][ T6797] ? __queue_work+0xcd3/0xf50 [ 104.556964][ T6797] ? handle_bug+0x3e/0x70 [ 104.561290][ T6797] ? exc_invalid_op+0x1a/0x50 [ 104.565965][ T6797] ? asm_exc_invalid_op+0x1a/0x20 [ 104.570993][ T6797] ? __queue_work+0x124/0xf50 [ 104.575664][ T6797] ? __queue_work+0xcc4/0xf50 [ 104.580336][ T6797] ? __queue_work+0xcd3/0xf50 [ 104.585016][ T6797] ? __queue_work+0xcc4/0xf50 [ 104.589710][ T6797] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 104.595433][ T6797] queue_work_on+0x1c2/0x380 [ 104.600021][ T6797] ? __pfx_queue_work_on+0x10/0x10 [ 104.605127][ T6797] ? __pfx_l2tp_sk_to_tunnel+0x10/0x10 [ 104.610576][ T6797] ? __local_bh_enable_ip+0x168/0x200 [ 104.615940][ T6797] ? udpv6_destroy_sock+0xd8/0x240 [ 104.621046][ T6797] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 104.626762][ T6797] l2tp_udp_encap_destroy+0x2a/0x40 [ 104.631955][ T6797] ? __pfx_l2tp_udp_encap_destroy+0x10/0x10 [ 104.637848][ T6797] udpv6_destroy_sock+0x19e/0x240 [ 104.642867][ T6797] ? __pfx_udpv6_destroy_sock+0x10/0x10 [ 104.648405][ T6797] sk_common_release+0x72/0x320 [ 104.653251][ T6797] inet_release+0x17d/0x200 [ 104.657749][ T6797] sock_close+0xbc/0x240 [ 104.661990][ T6797] ? __pfx_sock_close+0x10/0x10 [ 104.666840][ T6797] __fput+0x24a/0x8a0 [ 104.670826][ T6797] task_work_run+0x24f/0x310 [ 104.675412][ T6797] ? __pfx_task_work_run+0x10/0x10 [ 104.680550][ T6797] ? switch_task_namespaces+0xe1/0x110 [ 104.686022][ T6797] do_exit+0xa2f/0x27f0 [ 104.690195][ T6797] ? __pfx_do_exit+0x10/0x10 [ 104.694776][ T6797] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 104.700143][ T6797] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 104.706119][ T6797] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 104.712440][ T6797] ? _raw_spin_lock_irq+0xdf/0x120 [ 104.717547][ T6797] do_group_exit+0x207/0x2c0 [ 104.722127][ T6797] ? _raw_spin_unlock_irq+0x23/0x50 [ 104.727316][ T6797] ? lockdep_hardirqs_on+0x99/0x150 [ 104.732508][ T6797] get_signal+0x16a1/0x1740 [ 104.737019][ T6797] ? __pfx_get_signal+0x10/0x10 [ 104.741870][ T6797] arch_do_signal_or_restart+0x96/0x860 [ 104.747412][ T6797] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 104.753558][ T6797] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 104.759539][ T6797] ? syscall_exit_to_user_mode+0xa3/0x370 [ 104.765260][ T6797] syscall_exit_to_user_mode+0xc9/0x370 [ 104.770806][ T6797] do_syscall_64+0x100/0x230 [ 104.775392][ T6797] ? clear_bhb_loop+0x35/0x90 [ 104.780061][ T6797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 104.785955][ T6797] RIP: 0033:0x7f38cc3779f9 [ 104.790363][ T6797] Code: Unable to access opcode bytes at 0x7f38cc3779cf. [ 104.797371][ T6797] RSP: 002b:00007fff594e24f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 104.805778][ T6797] RAX: fffffffffffffdfc RBX: 00000000000197bb RCX: 00007f38cc3779f9 [ 104.813749][ T6797] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f38cc506214 [ 104.821708][ T6797] RBP: 00007f38cc506214 R08: 00007f38cc505f80 R09: 00007fff594e27df [ 104.829678][ T6797] R10: 00007fff594e25f0 R11: 0000000000000246 R12: 0000000000000032 [ 104.837661][ T6797] R13: 00007fff594e25f0 R14: 00007fff594e2610 R15: 0000000000019789 [ 104.845635][ T6797] [ 104.848647][ T6797] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 104.855916][ T6797] CPU: 1 UID: 0 PID: 6797 Comm: syz.0.315 Not tainted 6.11.0-rc1-syzkaller-00292-g2c14119ab8f3 #0 [ 104.866490][ T6797] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 06/27/2024 [ 104.876536][ T6797] Call Trace: [ 104.879811][ T6797] [ 104.882747][ T6797] dump_stack_lvl+0x241/0x360 [ 104.887427][ T6797] ? __pfx_dump_stack_lvl+0x10/0x10 [ 104.892707][ T6797] ? __pfx__printk+0x10/0x10 [ 104.897297][ T6797] ? vscnprintf+0x5d/0x90 [ 104.901623][ T6797] panic+0x349/0x860 [ 104.905510][ T6797] ? __warn+0x172/0x4e0 [ 104.909653][ T6797] ? __pfx_panic+0x10/0x10 [ 104.914072][ T6797] __warn+0x346/0x4e0 [ 104.918044][ T6797] ? __queue_work+0xcd3/0xf50 [ 104.922719][ T6797] report_bug+0x2b3/0x500 [ 104.927040][ T6797] ? __queue_work+0xcd3/0xf50 [ 104.931715][ T6797] handle_bug+0x3e/0x70 [ 104.935867][ T6797] exc_invalid_op+0x1a/0x50 [ 104.940363][ T6797] asm_exc_invalid_op+0x1a/0x20 [ 104.945209][ T6797] RIP: 0010:__queue_work+0xcd3/0xf50 [ 104.950490][ T6797] Code: ff e8 11 84 36 00 90 0f 0b 90 e9 1e fd ff ff e8 03 84 36 00 eb 13 e8 fc 83 36 00 eb 0c e8 f5 83 36 00 eb 05 e8 ee 83 36 00 90 <0f> 0b 90 48 83 c4 60 5b 41 5c 41 5d 41 5e 41 5f 5d c3 cc cc cc cc [ 104.970086][ T6797] RSP: 0018:ffffc900035576a8 EFLAGS: 00010093 [ 104.976148][ T6797] RAX: ffffffff815ce274 RBX: ffff88802bf30000 RCX: ffff88802bf30000 [ 104.984119][ T6797] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 104.992078][ T6797] RBP: 0000000000000000 R08: ffffffff815cd6d4 R09: 0000000000000000 [ 105.000039][ T6797] R10: ffffc90003557780 R11: fffff520006aaef1 R12: ffff88802b18f800 [ 105.008003][ T6797] R13: ffff88802b18f9c0 R14: dffffc0000000000 R15: 0000000000000008 [ 105.015970][ T6797] ? __queue_work+0x124/0xf50 [ 105.020648][ T6797] ? __queue_work+0xcc4/0xf50 [ 105.025323][ T6797] ? __queue_work+0xcc4/0xf50 [ 105.029993][ T6797] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 105.035711][ T6797] queue_work_on+0x1c2/0x380 [ 105.040299][ T6797] ? __pfx_queue_work_on+0x10/0x10 [ 105.045409][ T6797] ? __pfx_l2tp_sk_to_tunnel+0x10/0x10 [ 105.050857][ T6797] ? __local_bh_enable_ip+0x168/0x200 [ 105.056218][ T6797] ? udpv6_destroy_sock+0xd8/0x240 [ 105.061319][ T6797] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 105.067034][ T6797] l2tp_udp_encap_destroy+0x2a/0x40 [ 105.072226][ T6797] ? __pfx_l2tp_udp_encap_destroy+0x10/0x10 [ 105.078114][ T6797] udpv6_destroy_sock+0x19e/0x240 [ 105.083133][ T6797] ? __pfx_udpv6_destroy_sock+0x10/0x10 [ 105.088681][ T6797] sk_common_release+0x72/0x320 [ 105.093539][ T6797] inet_release+0x17d/0x200 [ 105.098037][ T6797] sock_close+0xbc/0x240 [ 105.102271][ T6797] ? __pfx_sock_close+0x10/0x10 [ 105.107114][ T6797] __fput+0x24a/0x8a0 [ 105.111096][ T6797] task_work_run+0x24f/0x310 [ 105.115682][ T6797] ? __pfx_task_work_run+0x10/0x10 [ 105.120786][ T6797] ? switch_task_namespaces+0xe1/0x110 [ 105.126239][ T6797] do_exit+0xa2f/0x27f0 [ 105.130391][ T6797] ? __pfx_do_exit+0x10/0x10 [ 105.134966][ T6797] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 105.140331][ T6797] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 105.146304][ T6797] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 105.152622][ T6797] ? _raw_spin_lock_irq+0xdf/0x120 [ 105.157727][ T6797] do_group_exit+0x207/0x2c0 [ 105.162304][ T6797] ? _raw_spin_unlock_irq+0x23/0x50 [ 105.167491][ T6797] ? lockdep_hardirqs_on+0x99/0x150 [ 105.172686][ T6797] get_signal+0x16a1/0x1740 [ 105.177205][ T6797] ? __pfx_get_signal+0x10/0x10 [ 105.182058][ T6797] arch_do_signal_or_restart+0x96/0x860 [ 105.187604][ T6797] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 105.193753][ T6797] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 105.199740][ T6797] ? syscall_exit_to_user_mode+0xa3/0x370 [ 105.205453][ T6797] syscall_exit_to_user_mode+0xc9/0x370 [ 105.210993][ T6797] do_syscall_64+0x100/0x230 [ 105.215579][ T6797] ? clear_bhb_loop+0x35/0x90 [ 105.220244][ T6797] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.226217][ T6797] RIP: 0033:0x7f38cc3779f9 [ 105.230620][ T6797] Code: Unable to access opcode bytes at 0x7f38cc3779cf. [ 105.237623][ T6797] RSP: 002b:00007fff594e24f8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 105.246029][ T6797] RAX: fffffffffffffdfc RBX: 00000000000197bb RCX: 00007f38cc3779f9 [ 105.253989][ T6797] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007f38cc506214 [ 105.261999][ T6797] RBP: 00007f38cc506214 R08: 00007f38cc505f80 R09: 00007fff594e27df [ 105.269961][ T6797] R10: 00007fff594e25f0 R11: 0000000000000246 R12: 0000000000000032 [ 105.277924][ T6797] R13: 00007fff594e25f0 R14: 00007fff594e2610 R15: 0000000000019789 [ 105.285902][ T6797] [ 105.289199][ T6797] Kernel Offset: disabled [ 105.293581][ T6797] Rebooting in 86400 seconds..