last executing test programs: 2.095113484s ago: executing program 0 (id=791): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), r0) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000280)={&(0x7f0000000140)={0x118, r1, 0x8, 0x70bd26, 0x25dfdbfe, {{}, {@void, @void}}, [@NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0xba88}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x4}, @NL80211_ATTR_COALESCE_RULE_PKT_PATTERN={0xd4, 0x3, 0x0, 0x1, [{0xd0, 0x0, 0x0, 0x1, @NL80211_PKTPAT_MASK={0xc9, 0x1, "867d9d96bfc5ce55886adaedcba5f55aa889209a7931d5c5f33b7ab1219750f0811ffa76dfe0e3cd18cf8bc1fce9203ea312c07c16cd1903c4ee53e45bf56012bfeebb62cb7ea53684b71d55abab4dc125474d67ddc1a6ebebea3874039810cf8085ad8d7f386b9c8243b706072b4c3eb84a3a37a045995c61631c152b9378e0c1f3393f4171514abec931a47ca4751c280f4ae6f34bbc1a23b41f827282c8fcbaf69a1ccbfa9187f841ff81213d37c3628a858b36770f1f920489b660f17a35cfb7828fef"}}]}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}, @NL80211_ATTR_COALESCE_RULE_DELAY={0x8, 0x1, 0x80}, @NL80211_ATTR_COALESCE_RULE_CONDITION={0x8, 0x2, 0x1}]}, 0x118}, 0x1, 0x0, 0x0, 0x4000041}, 0x11) (async) close(0x4) (async) syz_open_procfs$namespace(0x0, &(0x7f0000000080)='ns/uts\x00') (async) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x5) r2 = socket$inet6(0xa, 0x2, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r3 = socket(0x26, 0x2, 0x6) (async) r4 = epoll_create(0x9660) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r3, &(0x7f0000000100)) close(r3) (async) r5 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r6 = openat$cgroup_int(r5, &(0x7f0000000040)='hugetlb.1GB.rsvd.failcnt\x00', 0x2, 0x0) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r7) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r7) recvmmsg(r7, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, &(0x7f0000000500)=[{&(0x7f0000001b40)=""/153, 0x99}, {&(0x7f0000000840)=""/4097, 0x1001}, {&(0x7f0000002c40)=""/196, 0xc4}], 0x3}, 0x6}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f00000007c0)=[{&(0x7f0000000380)=""/188, 0xbc}, {&(0x7f0000000540)=""/227, 0xe3}, {&(0x7f0000000040)=""/48, 0x30}, {&(0x7f0000000440)=""/59, 0x3b}, {&(0x7f0000002fc0)=""/4096, 0x1000}, {&(0x7f0000000640)=""/68, 0x44}, {&(0x7f00000006c0)=""/243, 0xf3}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x27}], 0x5, 0x40000000, 0x0) (async) preadv(r6, &(0x7f0000001200)=[{&(0x7f0000000100)=""/4096, 0x1000}], 0x1, 0x0, 0x0) (async) setsockopt$inet6_int(r2, 0x29, 0x4e, &(0x7f0000000100)=0xfffffff7, 0x4) sendmmsg$inet6(r2, &(0x7f0000000e40)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @local, 0x7}, 0x1c, 0x0, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB='$\x00\x00\x00\x00\x00\x00\x00)\x00\x00\x002'], 0x28, 0x7ffffff7}}], 0x1, 0x0) 1.989922273s ago: executing program 1 (id=792): r0 = socket$kcm(0x10, 0x5, 0x0) sendmsg$kcm(r0, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848010000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x80) 1.825504216s ago: executing program 0 (id=794): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000000)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="010027bd7000fedbdf251200000008000300", @ANYRES32=r3, @ANYBLOB="0a118004000600"/20], 0x30}, 0x1, 0x0, 0x0, 0x81}, 0x0) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket$alg(0x26, 0x5, 0x0) recvmsg(r4, &(0x7f0000000500)={&(0x7f0000000300)=@l2={0x1f, 0x0, @fixed}, 0x80, &(0x7f0000000440)=[{&(0x7f00000003c0)=""/60, 0x3c}, {&(0x7f0000000400)=""/45, 0x2d}], 0x2, &(0x7f0000000480)=""/31, 0x1f}, 0x40) bind$alg(r5, &(0x7f0000000040)={0x26, 'aead\x00', 0x0, 0x0, 'ccm(aes)\x00'}, 0x3a) setsockopt$ALG_SET_AEAD_AUTHSIZE(r5, 0x117, 0x5, 0x0, 0x9) getsockopt$bt_hci(r4, 0x84, 0x17, 0x0, &(0x7f00000004c0)) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$tipc2(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_NL_MEDIA_SET(r6, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x1000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000200)={0x4c, r7, 0x300, 0x70bd2a, 0x25dfdbff, {}, [@TIPC_NLA_NET={0x38, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x60000}, @TIPC_NLA_NET_ADDR={0x8, 0x2, 0x6}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x895}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x8}, @TIPC_NLA_NET_NODEID={0xc, 0x3, 0x6}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$inet(r0, &(0x7f0000000380)={&(0x7f0000000000)={0x2, 0x4e22, @multicast2}, 0x10, &(0x7f0000000100)=[{&(0x7f0000000040)="6b1690bb8dc095ebae95baccdce177a97389ae7df65487e3996df64c35efa6e159bd2f2180", 0x25}], 0x1, &(0x7f0000000140)=ANY=[@ANYBLOB="1c000000000000000000000800000000", @ANYRES32=0x0, @ANYBLOB="ac1414aaac14141e00000000180000000000000000000000070000009404000000020000"], 0x38}, 0x0) openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x10000, 0x0) 1.749247596s ago: executing program 1 (id=797): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000500)=ANY=[@ANYBLOB="240000000408010800000000000000feff0000000600024000000000050003002f0000ff996894c5946900", @ANYBLOB="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"], 0x24}}, 0x0) 1.714006313s ago: executing program 4 (id=798): r0 = socket$kcm(0x10, 0x400000002, 0x0) recvmsg(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000001240)=[{&(0x7f0000004580)=""/4095, 0xfff}, {&(0x7f0000002580)=""/4092, 0xffa}, {&(0x7f0000001540)=""/4100, 0x1004}, {&(0x7f0000001140)=""/164, 0xffffffffffffffc5}], 0x4}, 0x20) 1.582034638s ago: executing program 2 (id=799): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) (async) setsockopt$inet6_int(r0, 0x29, 0x19, &(0x7f0000000000)=0x84, 0xfde1) sendto$inet6(r0, 0x0, 0xfffffffffffffe5d, 0x200c8084, &(0x7f0000000080)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) recvmmsg(r0, &(0x7f0000002480)=[{{0x0, 0x0, 0x0}}], 0x1, 0xc0000141, 0x0) 1.551923826s ago: executing program 1 (id=800): r0 = socket$inet6(0xa, 0x2, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000480)={'wlan0\x00', 0x0}) (async) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), r1) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbf9, {{}, {@val={0x8, 0x3, r2}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x40000}, 0x8000) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @rand_addr, 0x99f}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000340)={0x2, 0x4e21, 0x0, @private2}, 0x1c) r4 = socket$netlink(0x10, 0x3, 0x8000000004) connect$inet6(r0, &(0x7f0000001b40)={0xa, 0x4e24, 0x3, @mcast2, 0xfffffa8b}, 0x1c) (async) writev(r4, &(0x7f0000000000)=[{&(0x7f0000000080)="580000001500add427323b472545b45602117fffffff81000e224e217f000001925aa80020007b00090080007f000001e809000000ff0000f03ac7108bfaffffffffffffffffffffffe7ee00000000000000000200000000", 0x58}], 0x1) 1.531717951s ago: executing program 4 (id=801): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000240)=ANY=[@ANYBLOB="1c0000002d00210000000000000000000400008008000c0003"], 0x1c}], 0x1}, 0x0) ioctl$FAT_IOCTL_GET_VOLUME_ID(r0, 0x80047213, &(0x7f0000000040)) 1.429745457s ago: executing program 3 (id=802): r0 = socket$rds(0x15, 0x5, 0x0) bind$rds(r0, &(0x7f0000000040)={0x2, 0x0, @loopback}, 0x10) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = socket(0x2a, 0x2, 0x0) (async) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f00000003c0)=@newlink={0x48, 0x10, 0x437, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x4048b}, [@IFLA_ADDRESS={0xa, 0x1, @local}, @IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_PROTOCOL={0x6, 0x8, 0x8100}]}}}]}, 0x48}}, 0x88890) getsockname$packet(r2, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r4, {}, {0xfff1, 0xffff}, {0x0, 0x10}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) (async) r5 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r5, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) sendmsg$netlink(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002d0001fffffff3000000000001"], 0x114}], 0x1}, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=ANY=[@ANYBLOB="440000001000030400"/20, @ANYRES16=0x0, @ANYBLOB="0000000000000000240012800b00010065727370616e000014000280050016000000000006000e0011"], 0x44}}, 0x0) sendmsg$rds(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x2, 0x4e22, @remote}, 0x10, 0x0, 0x0, 0x0, 0x0, 0x400c895}, 0x8010) (async) r7 = socket$nl_generic(0x10, 0x3, 0x10) pselect6(0x40, &(0x7f0000000000)={0x8, 0x4, 0x400, 0x0, 0x0, 0x3ff, 0x8, 0x1}, 0x0, 0x0, 0x0, 0x0) (async) getsockopt$inet_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x23, &(0x7f0000000280)={&(0x7f00003f9000/0x4000)=nil, 0x4000, 0x0, 0x0, 0x0, &(0x7f0000000500)=""/231, 0xe7, 0x0, &(0x7f0000000440)=""/102, 0x66}, &(0x7f0000000340)=0x40) (async) sendmsg$nl_generic(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="1800000024000103000000000000000001"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) ioctl$SIOCGSTAMP(r3, 0x8906, &(0x7f0000000240)) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='blkio.bfq.io_merged_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10012, r8, 0x0) (async) r9 = syz_init_net_socket$x25(0x9, 0x5, 0x0) setsockopt$X25_QBITINCL(r9, 0x106, 0x1, &(0x7f0000000400), 0x4) r10 = socket$netlink(0x10, 0x3, 0x0) r11 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r11, 0x8933, &(0x7f0000000680)={'bridge0\x00', 0x0}) sendmsg$nl_route(r10, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000140)=@RTM_DELMDB={0x38, 0x54, 0x93d, 0x1000, 0x0, {0x7, r12}, [@MDBA_SET_ENTRY={0x20, 0x1, {r12, 0x1, 0x0, 0x0, {@ip4=@private=0xa010100, 0x86dd}}}]}, 0x38}}, 0x0) (async) syz_emit_ethernet(0x4e, &(0x7f0000000000)={@multicast, @multicast, @void, {@ipv6={0x86dd, @udp={0x0, 0x6, "ea0c00", 0x18, 0x88, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @local, {[@dstopts={0x1}], {0x0, 0x0, 0x10, 0x0, @gue={{0x2, 0x0, 0x0, 0x0, 0x100}}}}}}}}, 0x0) 1.403717947s ago: executing program 2 (id=803): ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={0xffffffffffffffff}) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x2, 0x4, &(0x7f0000000280)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xad}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bind$netlink(r0, &(0x7f0000000040)={0x10, 0x0, 0x25dfdbff, 0x2800}, 0xffffffffffffff35) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000003e00)={0x0, 0x0, &(0x7f0000003dc0)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000010000000000000000090000000a20000000000a05140000000000000000010000000900010073797a300000000058000000160a09000900000000000000010000000900010073797a30000000000900020073797a32000000002c00038018000380140001006d6163736563300000000000000000000800024000000000080001400000000014000000110001"], 0xa0}}, 0x0) 1.305983791s ago: executing program 1 (id=804): r0 = socket$can_j1939(0x1d, 0x2, 0x7) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='cgroup.controllers\x00', 0x275a, 0x0) write$tun(r1, &(0x7f0000000000)=ANY=[], 0x38) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r1, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="180a0000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000800000018230000", @ANYRES32=r2, @ANYBLOB="0000000000004000b70500000800000085000000a50000009500000000000000"], &(0x7f0000000300)='GPL\x00', 0x4, 0x14, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) write$cgroup_int(r1, &(0x7f0000000500)=0x8000000000000001, 0x12) setsockopt$SO_J1939_FILTER(r0, 0x6b, 0x1, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$tipc(&(0x7f00000001c0), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)={0x30, r4, 0x1, 0x70bd2a, 0x40000, {{}, {}, {0x14, 0x19, {0x2, 0x1, 0x1}}}}, 0x30}}, 0x4) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r5, &(0x7f00000005c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000240)=@migrate={0x27c, 0x21, 0x1, 0x0, 0x0, {{@in, @in6=@remote}}, [@migrate={0x1cc, 0x11, [{@in=@multicast1, @in=@local, @in=@local, @in=@broadcast}, {@in=@empty, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, @in=@multicast2, @in6=@mcast1}, {@in=@empty, @in=@private, @in6=@remote, @in6=@mcast2}, {@in=@local, @in6=@local, @in6=@empty, @in6=@private2}, {@in=@broadcast, @in6=@ipv4={'\x00', '\xff\xff', @multicast2}, @in=@private, @in=@dev}, {@in6=@mcast2, @in=@broadcast, @in6=@private2, @in6=@remote}]}, @policy_type={0xa}, @replay_esn_val={0x40, 0x17, {0x9, 0x0, 0x0, 0x0, 0x0, 0x0, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}}, @proto={0x5}, @mark={0xc}]}, 0x27c}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_PMK(r3, &(0x7f0000000140)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x28, r6, 0x1, 0x70bd2c, 0x25dfdbfd, {{}, {@void, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "1c79f252758620c924cfdbac3632539e"}]}, 0x28}, 0x1, 0x0, 0x0, 0x9e2ae127475ac851}, 0x4000) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x7, 0x6, &(0x7f0000000700)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x9, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000200), 0x40001, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8924, &(0x7f0000000240)={'macsec0\x00', @dev={'\xaa\xaa\xaa\xaa\xaa', 0x32}}) 1.145646716s ago: executing program 3 (id=805): socket$nl_route(0x10, 0x3, 0x0) (async) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000100)=ANY=[@ANYBLOB="44000000250001042fbd7000007ff60000000400", @ANYRES32, @ANYBLOB="000000000000000024001200000000006272696467651f736c617665000000000c000580"], 0x44}}, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000002c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000640)={&(0x7f00000000c0)={0x48, r2, 0x1, 0x2000, 0x0, {{}, {@val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_FRAME={0x2a, 0x33, @action={{{}, {}, @broadcast, @device_a, @random="71a9ff24c39e"}, @ext_ch_sw={0x4, 0x4, {{0x0, 0xc7, 0x5, 0x1}, @val={0x76, 0x6, {0x9, 0x1, 0x3, 0xfff}}}}}}]}, 0x48}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), r1) 1.140444388s ago: executing program 4 (id=806): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000000)=0xf3f, 0x4) recvmmsg(r1, &(0x7f0000006e40)=[{{0x0, 0x0, &(0x7f0000005300)=[{&(0x7f00000051c0)=""/73, 0x49}], 0x1}, 0x7}, {{0x0, 0x0, 0x0}}], 0x2, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f0000000000)=@framed={{0xffffffb4, 0x8, 0x0, 0x0, 0x0, 0x73, 0x11, 0x41}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0xb7}, @exit={0x95, 0x0, 0xc2}], {0x95, 0x0, 0x1200}}, &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$PROG_LOAD(0x1c, &(0x7f00000003c0)={0x3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000000900010073797a300000000058000000030a0102000000000000000001000000090003803d2175fbe782c2002c00048008000240172af2e40800014000000003080002401c791e7108000240423930ce08000140000000030900010073797a300000000088"], 0x122}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @objref={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_OBJREF_SET_SREG={0x8, 0x3, 0x1, 0x0, 0xb}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) r6 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_SEND_PRIO(r6, 0x6b, 0x3, &(0x7f0000000100), &(0x7f0000000140)=0x4) 1.138322275s ago: executing program 2 (id=807): bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@map, 0x36, 0x6595d904020e1262, 0xee30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x70bd28, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f00000004c0)={@map, 0x36, 0x6595d904020e1262, 0xee30, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000140)=@newlink={0x3c, 0x10, 0x49920d862a92153b, 0x70bd28, 0x0, {}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @veth={{0x9}, {0x4, 0x2, 0x0, 0x1, @void}}}, @IFLA_OPERSTATE={0x5, 0x10, 0x4}]}, 0x3c}, 0x1, 0x0, 0x0, 0x1}, 0x0) (async) 1.033868239s ago: executing program 0 (id=808): socket$can_bcm(0x1d, 0x2, 0x2) socket$can_bcm(0x1d, 0x2, 0x2) (async) r0 = socket(0x10, 0x3, 0x0) (async) r1 = socket$packet(0x11, 0x3, 0x300) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r3, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r3, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x9801}, [@IFLA_LINKINFO={0x20, 0x12, 0x0, 0x1, @gre={{0x8}, {0x14, 0x2, 0x0, 0x1, [@IFLA_GRE_REMOTE={0x8, 0x7, @dev}, @IFLA_GRE_OFLAGS={0x6, 0x3, 0x3f}]}}}]}, 0x40}}, 0x0) (async) sendto$packet(r1, &(0x7f0000000000)='1', 0x1, 0x40081, &(0x7f0000000200)={0x11, 0x0, r4, 0x1, 0x4, 0x6, @local}, 0x14) (async) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=@newlink={0x48, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, r4, 0x0, 0x2480c}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @vxcan={{0xa}, {0x18, 0x2, 0x0, 0x1, @val={0x14, 0x1, {{0x0, 0x0, 0x0, 0x0, 0x1}}}}}}]}, 0x48}, 0x1, 0x4801000000000000}, 0x0) 843.049565ms ago: executing program 4 (id=809): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) (async) r1 = socket(0x400000000010, 0x3, 0x0) (async) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) r5 = socket$nl_xfrm(0x10, 0x3, 0x6) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[@ANYBLOB="3801000010000100"/64, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="20010000000000000000000000000000000000006c0000007f0000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000350000020001000000000000000000480003006465666c617465"], 0x138}}, 0x0) (async) sendmsg$nl_xfrm(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000003c0)=ANY=[], 0x138}}, 0x0) syz_init_net_socket$netrom(0x6, 0x5, 0x0) r7 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000002780)=@newtfilter={0x3c, 0x2c, 0xd27, 0x30bd2b, 0x25dfdbfe, {0x0, 0x0, 0x0, r8, {0xd, 0x7}, {}, {0x7}}, [@filter_kind_options=@f_route={{0xa}, {0xc, 0x2, [@TCA_ROUTE4_FROM={0x8, 0x3, 0x5b}]}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x2008c014) 840.41358ms ago: executing program 3 (id=810): r0 = ioctl$TUNGETDEVNETNS(0xffffffffffffffff, 0x54e3, 0x0) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) r1 = socket$inet6(0xa, 0x6, 0xfffffffd) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'veth1_to_bond\x00', 0x0}) (async) shutdown(r1, 0x1) (async) getsockopt$IP_VS_SO_GET_SERVICE(r1, 0x0, 0x483, &(0x7f0000000040), &(0x7f00000000c0)=0x68) (async, rerun: 64) r3 = socket$inet6(0xa, 0x2, 0xffffffa0) (rerun: 64) r4 = accept$inet6(r3, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast1}, &(0x7f0000000140)=0x1c) (async, rerun: 32) r5 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (rerun: 32) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000000280)={&(0x7f00000001c0)={0x88, 0x1403, 0x200, 0x70bd2d, 0x25dfdbfd, "", [{{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'bridge_slave_0\x00'}}, {{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'pimreg1\x00'}}, {{0x9, 0x2, 'syz0\x00'}, {0x8, 0x41, 'siw\x00'}, {0x14, 0x33, 'bond0\x00'}}]}, 0x88}}, 0x4000) r6 = socket$packet(0x11, 0x2, 0x300) bind$packet(r6, &(0x7f0000000300)={0x11, 0x15, r2, 0x1, 0x3, 0x6, @local}, 0x14) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000340)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) (async) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000400)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000380), &(0x7f00000003c0)}, 0x20) r9 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000600)=0xffffffffffffffff, 0x4) r10 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000680)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x9, '\x00', r2, 0xffffffffffffffff, 0x2, 0x2, 0x5, 0x0, @void, @value, @void, @value}, 0x50) r11 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000700)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x95, '\x00', r2, 0xffffffffffffffff, 0x3, 0x4, 0x3, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000800)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000780), &(0x7f00000007c0)='%pI4 \x00'}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f00000008c0)={0x11, 0x27, &(0x7f0000000440)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x4}, [@tail_call={{0x18, 0x2, 0x1, 0x0, 0x1}}, @cb_func={0x18, 0x1, 0x4, 0x0, 0x5}, @jmp={0x5, 0x0, 0x4, 0x4, 0x4, 0x100, 0xfffffffffffffff0}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r7}}, @call={0x85, 0x0, 0x0, 0x82}, @ringbuf_output={{0x18, 0x1, 0x1, 0x0, r8}}, @tail_call={{0x18, 0x2, 0x1, 0x0, r0}}]}, &(0x7f0000000580)='syzkaller\x00', 0x7, 0x36, &(0x7f00000005c0)=""/54, 0x41100, 0x34, '\x00', 0x0, @fallback=0x20, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000640)={0x3, 0x5, 0x6, 0x6}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x1, &(0x7f0000000840)=[0xffffffffffffffff, r10, r11, r12], &(0x7f0000000880)=[{0x2, 0x1, 0x6, 0x8}], 0x10, 0x5, @void, @value}, 0x94) (async) r13 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000b80)={0x11, 0x6, &(0x7f0000000980)=@raw=[@map_idx_val={0x18, 0x4, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0xc}, @generic={0x2, 0x7, 0x3, 0x3, 0x9}, @exit, @btf_id={0x18, 0x6, 0x3, 0x0, 0x1}], &(0x7f00000009c0)='GPL\x00', 0x97, 0x55, &(0x7f0000000a00)=""/85, 0x41000, 0x1, '\x00', 0x0, 0x0, r9, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000a80)={0x0, 0x7, 0xfffffffd, 0x1645}, 0x10, 0x0, 0x0, 0x6, &(0x7f0000000ac0), &(0x7f0000000b00)=[{0x4, 0x1, 0x0, 0x2}, {0x1, 0x4, 0xb, 0x6}, {0x0, 0x1, 0x10, 0x8}, {0x2, 0x5, 0xa, 0x2}, {0x0, 0x4, 0x9, 0x8}, {0x1ff, 0x3, 0xa, 0x6}], 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 32) r14 = openat$tun(0xffffffffffffff9c, &(0x7f0000000c40), 0x200002, 0x0) (rerun: 32) ioctl$TUNSETFILTEREBPF(r14, 0x800454e1, &(0x7f0000000c80)=r13) (async) ioctl$sock_kcm_SIOCKCMCLONE(r6, 0x89e2, &(0x7f0000000cc0)={r4}) r16 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000d40), 0xffffffffffffffff) sendmsg$NL80211_CMD_CRIT_PROTOCOL_START(r15, &(0x7f0000000e00)={&(0x7f0000000d00)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d80)={0x40, r16, 0x200, 0x70bd2b, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x4, 0xa}}}}, [@NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x873}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x7df}, @NL80211_ATTR_MAX_CRIT_PROT_DURATION={0x6, 0xb4, 0x8d4}, @NL80211_ATTR_CRIT_PROT_ID={0x6, 0xb3, 0x1}]}, 0x40}, 0x1, 0x0, 0x0, 0x10040000}, 0x4004) (async, rerun: 64) ioctl$sock_SIOCADDDLCI(r4, 0x8980, &(0x7f0000000e40)={'nicvf0\x00', 0x101}) (rerun: 64) ioctl$NS_GET_USERNS(0xffffffffffffffff, 0xb701, 0x0) (async, rerun: 32) listen(r3, 0x6) (rerun: 32) ioctl$NS_GET_USERNS(r0, 0xb701, 0x0) close(r5) 777.97724ms ago: executing program 1 (id=811): r0 = socket$nl_route(0x10, 0x3, 0x0) socket$packet(0x11, 0x3, 0x300) (async) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'pimreg0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000140)=ANY=[@ANYBLOB="6400000010000d042dbd7000fedbdf2500000000", @ANYRES32=r1, @ANYBLOB="60c00000000000003c001280110001006272696467655f736c617665000000002400058006000200f7"], 0x64}, 0x1, 0x0, 0x0, 0x4000004}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_RATE_NEW(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x3c, r4, 0x1, 0x0, 0x3, {}, [@DEVLINK_ATTR_RATE_NODE_NAME={0x6, 0xa8, @random='5\x00'}, @handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x880}, 0x40000) (async) sendmsg$DEVLINK_CMD_PORT_GET(r2, &(0x7f0000000240)={&(0x7f00000000c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000100)={&(0x7f00000001c0)={0x80, r4, 0x0, 0x70bd2c, 0x25dfdbfd, {}, [{{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x2}}}]}, 0x80}, 0x1, 0x0, 0x0, 0x8001}, 0x4000890) 691.058852ms ago: executing program 2 (id=812): r0 = socket(0x10, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) getsockopt$netlink(r1, 0x10e, 0x1, &(0x7f0000000340)=""/57, &(0x7f0000000380)=0x39) sendmsg$RDMA_NLDEV_CMD_GET_CHARDEV(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x140f, 0x1, 0x0, 0x0, "", [@RDMA_NLDEV_ATTR_CHARDEV_TYPE={0xc, 0x45, 'rdma_cm\x00'}]}, 0x1c}}, 0x0) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth1_to_bridge\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f0000000540)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000000240)={&(0x7f0000000440)=@gettaction={0xdc, 0x32, 0x2, 0x70bd2d, 0x25dfdbff, {}, [@action_gd=@TCA_ACT_TAB={0x34, 0x1, [{0x10, 0x5, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0x14, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0xf, 0x1, 'tunnel_key\x00'}}, {0xc, 0x0, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xca94}}]}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0x8, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'gact\x00'}}]}, @action_dump_flags=@TCA_ROOT_TIME_DELTA={0x8}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc}, @action_gd=@TCA_ACT_TAB={0x14, 0x1, [{0x10, 0xf, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x3c, 0x1, [{0x10, 0x1, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0xb, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x4}}, {0xc, 0x10, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'police\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x10, 0x1, [{0xc, 0x1c, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x590}}]}]}, 0xdc}, 0x1, 0x0, 0x0, 0x640baa92a70bdaa9}, 0x20000011) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=@newqdisc={0x3c, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0xc, 0x8002, [@TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}]}}]}, 0x3c}}, 0x0) accept4(r1, &(0x7f0000000100)=@sco={0x1f, @fixed}, &(0x7f0000000180)=0x80, 0x80800) r4 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_PORT_GET(r4, &(0x7f0000000300)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000280)={&(0x7f00000003c0)={0x70, 0x1405, 0x8, 0x70bd2b, 0x25dfdbfa, "", [{{0x8, 0x1, 0x2}, {0x8, 0x3, 0x3}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x1}}, {{0x8, 0x1, 0x2}, {0x8, 0x3, 0x4}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x100}}, {{0x8, 0x1, 0x1}, {0x8, 0x3, 0x2}}, {{0x8, 0x1, 0x2}, {0x8}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4040005}, 0x4040000) 502.082724ms ago: executing program 3 (id=813): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB="4c0000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000002c00128009000100626f6e64000000001c00028005001d00000000000500010004000000050015"], 0x4c}}, 0x0) (async) r0 = socket(0x10, 0x3, 0x0) socket$inet6(0xa, 0x800000000000002, 0x0) (async) sendmmsg$inet6(r0, &(0x7f00000033c0)=[{{&(0x7f0000000000)={0xa, 0x4e22, 0x84, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x1}, 0x1c, 0x0}}, {{&(0x7f0000000140)={0xa, 0x4e24, 0xfc2, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x1000}, 0x1c, 0x0, 0x0, &(0x7f0000000280)=[@hopopts={{0x108, 0x29, 0x36, {0x1d, 0x1d, '\x00', [@hao={0xc9, 0x10, @mcast1}, @hao={0xc9, 0x10, @private1={0xfc, 0x1, '\x00', 0x1}}, @generic={0x1, 0xb8, "cd5bef50bd9bc1f355c937104de6b201ee97e490022a378967d02e322aa4e94b8339e2f328633d97610cf82f90050ea28c8ef50a03cdc86313c5f5e86240b1eccb0d3e7bd977f8bbf21157acaa09ed17e33287a2555100600c48c677f836758fa4edff55bd9688b8cf1c15e7f564f65d147bd20f351ff11c3c0f618d3da1177468bb8316426cae935dde2a8287194c1b4c01c6b306bbbdd53c56c33308d7335abba27fd943b844a1166dff65ee14ad400446f9fade247fa0"}, @ra={0x5, 0x2, 0x200}, @jumbo={0xc2, 0x4, 0xf}, @pad1, @pad1]}}}], 0x108}}], 0x2, 0x40004) (async) sendmmsg(r0, &(0x7f0000000000), 0x400000000000235, 0x0) 445.972958ms ago: executing program 0 (id=814): r0 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0x3, 0x3, &(0x7f00000000c0)=@framed={{0x46, 0xa, 0x0, 0x0, 0x0, 0x79, 0x10, 0x98}}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000080)={0x0, @empty, @initdev}, &(0x7f0000000100)=0xc) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000001c0)={'syztnl2\x00', &(0x7f0000000140)={'syztnl1\x00', 0x0, 0x29, 0x7, 0xb, 0x8, 0x0, @private1={0xfc, 0x1, '\x00', 0x1}, @private1, 0x8000, 0x7, 0x4, 0x5}}) getsockopt$PNPIPE_IFINDEX(r0, 0x113, 0x2, &(0x7f0000000200)=0x0, &(0x7f0000000240)=0x4) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000280)={0x0, @remote, @dev}, &(0x7f00000002c0)=0xc) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000004c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)=@RTM_NEWMDB={0x98, 0x54, 0x300, 0x70bd2b, 0x25dfdbff, {0x7, r1}, [@MDBA_SET_ENTRY={0x20, 0x1, {0x0, 0x0, 0x2, 0xb, {@in6_addr=@private0, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r2, 0x0, 0x1, 0x2, {@in6_addr=@empty, 0x800}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r3, 0x0, 0x0, 0x4, {@in6_addr=@private1}}}, @MDBA_SET_ENTRY={0x20, 0x1, {r4, 0x1, 0x1, 0x2, {@ip4=@initdev={0xac, 0x1e, 0x1, 0x0}}}}]}, 0x98}, 0x1, 0x0, 0x0, 0x4080}, 0x24000001) 438.088977ms ago: executing program 4 (id=815): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_TUNNEL_MODIFY(r0, &(0x7f0000000480)={&(0x7f0000000380), 0xc, &(0x7f0000000440)={&(0x7f00000004c0)=ANY=[@ANYBLOB='L\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="200025bd7000fbdbdf2503000000050013000500000008001900ac1e0101d6fc12000600000046001c00000700080011000000000006001b004e21000008000b0001080000772dd8022c85f2754eb31debe89bf9450246dd18"], 0x4c}, 0x1, 0x0, 0x0, 0x4048800}, 0x4004000) (async) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x400000000000000, 0x0, &(0x7f0000000080)={&(0x7f0000000140)={0x2, 0x3, 0x0, 0x0, 0x6, 0x0, 0x0, 0x0, [@sadb_x_nat_t_port={0x1, 0x15, 0x4e21}, @sadb_x_nat_t_type={0x1, 0x14, 0x16}, @sadb_ident={0x2, 0xb, 0x2, 0x0, 0x4}]}, 0x30}}, 0x0) (async) r1 = socket$inet6(0xa, 0x80002, 0x0) (async) r2 = socket$packet(0x11, 0x2, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'veth0_to_team\x00', 0x0}) (async) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r4, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x18}}]}, 0x78}}, 0x0) setsockopt$inet6_udp_int(r1, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) (async) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x4e23, 0x400, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x3b}}}, 0x1c) setsockopt$sock_linger(r1, 0x1, 0x3c, &(0x7f0000000180)={0x200000000000001}, 0x8) connect$inet6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @local, 0x2}, 0x1c) (async) sendmmsg$inet6(r1, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) r5 = accept4$inet6(r1, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, &(0x7f0000000240)=0x1c, 0x180000) socket$nl_route(0x10, 0x3, 0x0) (async) r6 = socket$inet6_sctp(0xa, 0x801, 0x84) sendto$inet6(r6, &(0x7f0000000000)="c5", 0x1, 0x0, &(0x7f00000000c0)={0xa, 0x0, 0x0, @dev, 0x15}, 0x1c) (async) setsockopt$inet6_mreq(r6, 0x29, 0x15, 0x0, 0x0) sendto$inet6(r5, &(0x7f0000000280)="8f96ba2c7dd04a5f397221e2e0f25320d811323f3271fc38b50e0d6831a342fe655021ce01bf52c1ab58b50454bd7d517bf8a43bbd214b71012ce4db4701de1f4a697bb8bffa87dc4b104db1d5ab9b8bc21ed4e4d3893d96650beaa59667dcc8a617f640a328e4d548dcbed2da9f9aa8ca5aa11a5e26d0bae1466cf4e89369c832117384bfb1461ca883dddf21ccdab0510dcc", 0x93, 0x40000, &(0x7f0000000340)={0xa, 0x4e22, 0x6, @local, 0xff}, 0x1c) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, 0x0) r7 = socket$inet6(0xa, 0x2, 0x0) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, 0x0, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(&(0x7f00000001c0), r0) (async) setsockopt$inet6_mreq(r7, 0x29, 0x14, &(0x7f0000000100)={@mcast1}, 0x14) (async) r8 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$SIOCSIFMTU(r8, 0x8922, &(0x7f0000000440)={'syz_tun\x00', 0x101}) (async) close(r7) 348.226596ms ago: executing program 1 (id=816): r0 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$EBT_SO_GET_INIT_ENTRIES(r0, 0x0, 0x83, &(0x7f0000000100)={'filter\x00', 0x0, 0x3, 0xad, [0x7f, 0x2008000, 0xfffffffffffffffe, 0x7, 0xa2c2], 0x1, &(0x7f0000000000)=[{}], &(0x7f0000000040)=""/173}, &(0x7f0000000180)=0x78) readv(r0, &(0x7f0000001540)=[{&(0x7f00000001c0)=""/78, 0x4e}, {&(0x7f0000000240)=""/138, 0x8a}, {&(0x7f0000000300)=""/4096, 0x1000}, {&(0x7f0000001300)=""/84, 0x54}, {&(0x7f0000001380)=""/172, 0xac}, {&(0x7f0000001440)=""/228, 0xe4}], 0x6) socketpair$unix(0x1, 0x1, 0x0, &(0x7f00000015c0)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$BTRFS_IOC_DEFRAG_RANGE(r1, 0x40309410, &(0x7f0000001600)={0xd34e, 0x0, 0x0, 0x6, 0x3, [0x10000, 0x6, 0x7, 0xb34]}) pread64(r2, &(0x7f0000001640)=""/241, 0xf1, 0x5) socket$inet_mptcp(0x2, 0x1, 0x106) getsockopt$IP_VS_SO_GET_SERVICE(r0, 0x0, 0x483, &(0x7f0000001740), &(0x7f00000017c0)=0x68) r3 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r3, 0x89e2, &(0x7f0000001800)={r1}) r5 = syz_genetlink_get_family_id$mptcp(&(0x7f0000001880), r4) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r4, &(0x7f0000001980)={&(0x7f0000001840)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000001940)={&(0x7f00000018c0)={0x48, r5, 0x4, 0x70bd26, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8}, @MPTCP_PM_ATTR_TOKEN={0x8, 0x4, 0x1}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x6}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x14, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x7}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x5}]}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}]}, 0x48}, 0x1, 0x0, 0x0, 0x20000884}, 0x20000000) ioctl$EXT4_IOC_GETFSUUID(r1, 0x8008662c, &(0x7f00000019c0)) sendto$inet6(r4, &(0x7f0000001a00)="c14444a9ca23d59a6126a0676b16ed816420fc8e92b122e8021c2bc4ff21eb3cd8b0e763fe7d897c9868b520c7251b311bd48a5a6fa28995d780ca05ed19cf4f31c9e6707ced4a2df90be0984fdcf9b58c8bfe9ded547243f031ab77af57974f800475341ea90f20a5f8d5ee6721d2831f3f4cbbbe4a760c91e2cbf4f4", 0x7d, 0x5, &(0x7f0000001a80)={0xa, 0x4e20, 0xfffffffc, @mcast1, 0x1}, 0x1c) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f0000001b40)={0x1, 0x58, &(0x7f0000001ac0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0}}, 0x10) ioctl$sock_inet6_SIOCDELRT(r4, 0x890c, &(0x7f0000001b80)={@mcast2, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @empty, 0x0, 0x0, 0x8, 0x100, 0xd, 0x2, r6}) ioctl$sock_SIOCOUTQNSD(r4, 0x894b, &(0x7f0000001c00)) mmap(&(0x7f0000ffd000/0x1000)=nil, 0x1000, 0x0, 0x4000010, 0xffffffffffffffff, 0xc8918000) recvfrom(r1, &(0x7f0000001c40)=""/171, 0xab, 0x10102, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0x2e, &(0x7f0000001d00)=0x5, 0x4) ioctl$EXT4_IOC_GET_ES_CACHE(r0, 0xc020662a, &(0x7f0000001d40)={0x646d, 0xfffffffffffffff7, 0xa79047d52e74ff02, 0x6, 0x4, 0x0, [{0x0, 0x100000001, 0x200, '\x00', 0x1001}, {0x8, 0x7f, 0x6d0, '\x00', 0x400}, {0xc, 0x2, 0x3, '\x00', 0x1000}, {0x0, 0x2, 0x7, '\x00', 0x1}]}) socket$nl_netfilter(0x10, 0x3, 0xc) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000001e40)={0xffffffffffffffff}) bind$alg(r4, &(0x7f0000001e80)={0x26, 'hash\x00', 0x0, 0x0, 'crc32c-intel\x00'}, 0x58) sendmsg(r7, &(0x7f0000002240)={0x0, 0x0, &(0x7f0000002200)=[{&(0x7f0000001f00)="812dbe473c599c49baf502fb2a89bf2a00870dd4d37cf16ee7999b48a2d50395a07cc40d2f6e67ced5037271319b20981fee9f8694f0897e8e1df2811470218b3f4c5c853774f3307b5074932b47d62df9517bcb67b006b029d81897962e8f22b17187314eb3334751737cfcb181302b6dc83dcbee7798f996b87ad7c30671c5024f20d6d4854a0ef6af354fe69c0d4d76d52cc3869e6472b0f33985e073da908b47beea6e34bc8e7534c0cd99dc03447d1863f6328321f8d1bdbdb9606040d170a85cfcfa1b208af92cc35d94624469052346013e26b379", 0xd8}, {&(0x7f0000002000)="e7cbb8eed6bff643668816e7fb06acee3001b4a7d38a3927a70b40ccbe696a2ed4558f90ace86ef5309aed108bc7e2ce54a2692a33e0f8812bb864d71ce2fb69b9d529898f1dbb9d59eaa6daa633a412d8dfbe201f7119c8c3", 0x59}, {&(0x7f0000002080)="9b232321e44d4be3888306e8ac09e8a903f43b321bf0d5bbccde33a16c57f17faecb7742ad259f736ecbe0e438a825f6578b0c392d812b24e85b78b1c280d9dd2ae3325c6262a0c55a97ff86e62189d05a673e5c8ed4a38b8c8dadb89e79c18d8bad197b2f8bded191a6c4b5f3cc3a199eaf2a2e2a071af7da61ada22040623e827a1859c2e126725e5690f9bd68af58952efeb7a0558c016a51de11cb5a", 0x9e}, {&(0x7f0000002140)="c3b980af48f9d7fe6a04aac37b74fdf6cb05984e38dfabcddf8a9e5208e470463179d628aab05a406c7b7e91f8b5dfc195b24fa2caf9062d284c193457705ab1508789dc26c87e1cce69874f48e1c889ff94a878978b4487fd96db926e618d4649a9e77c09a6b6767b24309360ba666dfcc573e8fa9cd19cf0b5f979f94fc6c17c153e46816cae3dfa9d7adec5f43a39a3ce736c36e4ca73f5d8b4b7b59993ddf02755db0285c1c5651f85e030e7a7", 0xaf}], 0x4}, 0x4000000) ioctl$BTRFS_IOC_SCRUB_CANCEL(r4, 0x941c, 0x0) getsockopt$inet_sctp6_SCTP_HMAC_IDENT(r4, 0x84, 0x16, &(0x7f0000002280)={0xa, [0x3, 0x6, 0xf, 0xff, 0x7ff, 0xb726, 0x7, 0x10, 0x2, 0x400]}, &(0x7f00000022c0)=0x18) sendmsg$MPTCP_PM_CMD_SUBFLOW_CREATE(r4, &(0x7f0000002440)={&(0x7f0000002300)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000002400)={&(0x7f0000002340)={0xa0, r5, 0x200, 0x70bd26, 0x25dfdbfc, {}, [@MPTCP_PM_ATTR_ADDR_REMOTE={0x20, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @loopback}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e22}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x4}, @MPTCP_PM_ATTR_ADDR={0x4c, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}}, @MPTCP_PM_ADDR_ATTR_ADDR4={0x8, 0x3, @loopback}, @MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x8}]}, @MPTCP_PM_ATTR_RCV_ADD_ADDRS={0x8, 0x2, 0x6}, @MPTCP_PM_ATTR_LOC_ID={0x5, 0x5, 0x3}, @MPTCP_PM_ATTR_SUBFLOWS={0x8}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4008000}, 0x10) r8 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_EVENTS(r8, 0x84, 0xb, &(0x7f0000002480), &(0x7f00000024c0)=0xe) 135.229165ms ago: executing program 2 (id=817): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000001c0)={0x1f, 0xb, &(0x7f0000000080)=@framed={{}, [@printk={@lli, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0xcb}}]}, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB='\x00\x00\x00\x00\x00\x00\aY\x00\x00\x00\x00\x00', @ANYRES32, @ANYBLOB="0300"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0400"/28], 0x48) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) ioctl$int_in(r1, 0x5452, &(0x7f0000000000)=0xbe3) close(r1) mmap(&(0x7f0000000000/0xc00000)=nil, 0xc00000, 0x2000002, 0x42073, 0xffffffffffffffff, 0xaba00000) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000040)={r0, 0x8, 0x4, 0x3}) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f0000000100)={r2, &(0x7f0000000280)="e34ef780ff46cc150cc91cd9c603d2a9d56ad0216adff74bd5f8113b6057afce30991be34cfd0ec945af32a5a13db28d20a52cd6fac7ef6b4abf0cef97ae6f27c662390aed530907c192ff5ed70d3e9a8220b9277206db75b248232ecfd628df3b0b3b6c364241f351b63cbac4b428dface01236ac2799717320beece92fac18e45ff91ee014f5d6ad87f014221167ccddcab635e35a784788b8217a8d8871f4b23e64c216dbcd19150638134fdcd6b016a0b3847d95e460e93ade7d22115955b0cb437545ebe73c91703d6b8e9b493c11303e5bc0910eb3f6a601a0173c9b06e98f03195596a1b00eff", &(0x7f0000000440)=""/131}, 0x20) 133.17857ms ago: executing program 0 (id=818): r0 = socket(0x10, 0x803, 0x0) r1 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_ADD_MFC(r1, 0x0, 0x5, &(0x7f0000000240)={@local, @dev={0xac, 0x14, 0x14, 0x28}, 0xfffe, "66c5aff8a7eb3af1f6cec2e7420000008c84aea31700", 0x3, 0x0, 0x80, 0x4f04}, 0x3c) setsockopt$inet_mreq(r1, 0x0, 0x24, &(0x7f0000000040)={@rand_addr=0x64010102, @broadcast}, 0x8) mmap(&(0x7f0000005000/0x3000)=nil, 0x3000, 0x0, 0x2172, r0, 0x79538000) r2 = socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000005000/0x1000)=nil, 0x1000, 0x0, 0x13, r2, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000001300)=ANY=[@ANYBLOB="18000000000000000000000000000000711206000000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r3 = socket$kcm(0x10, 0x2, 0x0) write$cgroup_subtree(r3, &(0x7f0000000000)=ANY=[], 0xfe33) setsockopt$MRT_ADD_MFC(r1, 0x0, 0x5, 0x0, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=@newlink={0x3c, 0x10, 0x401, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x40}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_ENCAP_TYPE={0x6, 0xf, 0x3}]}}}]}, 0x3c}}, 0x20004090) 132.711734ms ago: executing program 3 (id=819): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000001c0)=ANY=[@ANYBLOB="b40a000040000900000000000000000003000000040060809c0a01"], 0xab4}, 0x1, 0x0, 0x0, 0x80}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=@newqdisc={0x3c, 0x24, 0x0, 0x0, 0x0, {}, [@qdisc_kind_options=@q_codel={{0xa}, {0xc, 0x2, [@TCA_CODEL_TARGET={0x8}]}}]}, 0x3c}}, 0x0) r1 = socket(0x10, 0x3, 0x0) r2 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'veth0_to_hsr\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000380)=@newqdisc={0x50, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0x3}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x20, 0x2, [@TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x3}, @TCA_CAKE_BASE_RATE64={0xc, 0x2, 0x6}, @TCA_CAKE_FLOW_MODE={0x8, 0x5, 0x3}]}}]}, 0x50}, 0x1, 0x0, 0x0, 0x11}, 0x44040) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@bloom_filter={0x1e, 0x100, 0x7, 0x7bfe, 0x0, 0xffffffffffffffff, 0x6, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r4, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="3800000056000100000000f70000000007020000", @ANYRES32, @ANYBLOB="200001"], 0x38}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000000)={0x0, 0x51, &(0x7f0000000200)={&(0x7f0000000100)=ANY=[], 0x7c}, 0x1, 0x0, 0x0, 0x20000890}, 0x0) sendmsg$NFT_BATCH(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000ff0000000000000a58000000060a0b040000000000000000020000002c0004802800018007000100637400001c000280050003001b000000080002400000001108000440000000040900010073797a30000000000900020073797a32"], 0x80}}, 0x0) 41.76807ms ago: executing program 4 (id=820): r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007c80)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0xffe0}}]}}]}, 0x38}}, 0x4000) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk={@u, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socket(0x2a, 0x2, 0x0) (async) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000180)=@newqdisc={0x78, 0x24, 0xf0b, 0x70bd2a, 0x2001, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x5, 0xd}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0xff, 0xec2, 0x5, 0x2, 0x400}, 0x10000, 0x1, 0x7ff, 0x6, 0xe, 0x14, 0x1f, 0x1b, 0x6, 0x2, {0x6, 0x19d, 0xa9, 0x8, 0x7743, 0xfd1}}}}]}, 0x78}}, 0x0) (async) sendmsg$IPCTNL_MSG_CT_NEW(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000000c0)={0x0}}, 0x0) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000007c80)=@newtfilter={0x38, 0x2c, 0xd27, 0x70bd2d, 0x0, {0x0, 0x0, 0x0, r1, {0xe}, {}, {0x4, 0xfff1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x7, 0xffe0}}]}}]}, 0x38}}, 0x4000) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0x4, &(0x7f0000000000)=@framed={{0x18, 0x2, 0x0, 0x0, 0xfffffffa}, [@call={0x85, 0x0, 0x0, 0x2c}]}, &(0x7f0000000200)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x5, 0xb, &(0x7f00000009c0)=@framed={{}, [@printk={@u, {0x3, 0x3, 0x3, 0xa, 0x0}, {0x5}, {0x7, 0x0, 0x2}, {}, {}, {0x85, 0x0, 0x0, 0x1b}}]}, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) 39.067369ms ago: executing program 0 (id=821): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) (async, rerun: 64) r2 = socket(0x10, 0x803, 0x0) (rerun: 64) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010006"], 0x3c}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x1, 0x803, 0x0) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x0, {0x0, 0x0, 0x0, 0x0, 0x500}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @ip6erspan={{0xe}, {0x8, 0x2, 0x0, 0x1, [@IFLA_GRE_COLLECT_METADATA={0x4}]}}}, @IFLA_MASTER={0x8, 0xa, r6}]}, 0x44}, 0x1, 0x0, 0x0, 0x20000804}, 0x8000) (async) r7 = socket(0x1, 0x803, 0x0) getsockname$packet(r7, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) (async, rerun: 64) r8 = socket$kcm(0x10, 0x400000002, 0x0) (rerun: 64) sendmsg$inet(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000e00)=[{&(0x7f0000000d80)="170000007a006bcd9e3fe3dc6e08170007000054250000", 0x17}], 0x1, 0x0, 0x0, 0x1f00c00e}, 0x0) (async) r9 = socket(0x2, 0x3, 0x100000001) setsockopt(r9, 0xff, 0x1, &(0x7f0000000100)='O', 0x1) r10 = socket$inet(0x2, 0x2, 0x1) (async) r11 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r11, &(0x7f0000000040)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000200)=ANY=[@ANYBLOB="020300020c000000000000000000000003000600000000000200000000000000000000000000000002000100000008000000000000000000030005000000000002000000ac1414aa0000000000000000020008001000"], 0x60}, 0x1, 0x7}, 0x0) (async, rerun: 64) setsockopt$sock_int(r10, 0x1, 0xf, &(0x7f00000000c0)=0x101, 0x4) (rerun: 64) bind$inet(r10, &(0x7f0000000000)={0x2, 0x0, @empty}, 0x10) syz_emit_ethernet(0x9e, &(0x7f00000002c0)={@link_local, @remote, @void, {@ipv4={0x800, @icmp={{0x1d, 0x4, 0x0, 0x1, 0x90, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010100, @local, {[@ra={0x94, 0x4}, @timestamp={0x44, 0x8, 0xee, 0x0, 0x5, [0x3]}, @cipso={0x86, 0x4c, 0x3, [{0x7, 0x8, "c6a3719557dc"}, {0x1, 0xe, "46f760eb4db8222599b6497a"}, {0x0, 0x4, "f7c7"}, {0x5, 0x12, "d5fe903b37521e284ed2c8fdfbfbd2b4"}, {0x4, 0x10, "d604894999809f805a8b97c7b2dd"}, {0x1, 0xa, "0e34aeea0fb6a209"}]}, @noop, @ra={0x94, 0x4}]}}, @time_exceeded={0x3, 0x1, 0x0, 0x3, 0x0, 0x3f18, {0x5, 0x4, 0x0, 0x0, 0x0, 0x0, 0x400, 0x0, 0x0, 0x0, @empty, @multicast1}}}}}}, 0x0) (async) gettid() (async) ioctl$sock_FIOGETOWN(0xffffffffffffffff, 0x8903, &(0x7f0000000180)=0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000440)=@bridge_setlink={0x1a8, 0x13, 0x200, 0x70bd2a, 0x25dfdbfd, {0x7, 0x0, 0x0, r3, 0x40, 0x22}, [@IFLA_VFINFO_LIST={0x16c, 0x16, 0x0, 0x1, [{0x38, 0x1, 0x0, 0x1, [@IFLA_VF_LINK_STATE={0xc, 0x5, {0x2, 0x1}}, @IFLA_VF_VLAN={0x10, 0x2, {0x78, 0x66, 0x2}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x10, 0x4}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xffff112d, 0x2}}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_VF_IB_NODE_GUID={0x14, 0xa, {0x7fffffff, 0x6}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x9, 0x1}}]}, {0x48, 0x1, 0x0, 0x1, [@IFLA_VF_TX_RATE={0xc, 0x3, {0x4, 0xfffffffb}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x5, 0x2}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x8, 0x10}}, @IFLA_VF_RATE={0x10, 0x6, {0x7, 0x9, 0x10007}}]}, {0x48, 0x1, 0x0, 0x1, [@IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0x0, 0x7}}, @IFLA_VF_RATE={0x10, 0x6, {0x4, 0x7ff, 0x80000001}}, @IFLA_VF_MAC={0x28, 0x1, {0x1, @broadcast}}]}, {0x58, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x37f4, 0x5}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0x7fff, 0x1}}, @IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0xe8, 0x8}}, @IFLA_VF_RSS_QUERY_EN={0xc, 0x7, {0xf, 0xffff0001}}, @IFLA_VF_LINK_STATE={0xc, 0x5, {0xfffffffa, 0xfff}}, @IFLA_VF_VLAN={0x10, 0x2, {0x0, 0xa1e, 0x3}}]}, {0x24, 0x1, 0x0, 0x1, [@IFLA_VF_IB_PORT_GUID={0x14, 0xb, {0x4, 0x5}}, @IFLA_VF_SPOOFCHK={0xc, 0x4, {0x7fff, 0x6}}]}]}, @IFLA_NET_NS_PID={0x8, 0x13, r12}, @IFLA_IFNAME={0x14, 0x3, 'bond_slave_1\x00'}]}, 0x1a8}, 0x1, 0x0, 0x0, 0x600}, 0x0) 35.411269ms ago: executing program 2 (id=822): r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$bt_hci(0x1f, 0x2, 0x1) (async, rerun: 64) ioctl$sock_SIOCETHTOOL(r0, 0x89f1, &(0x7f0000000380)={'ip6gre0\x00', &(0x7f00000002c0)=@ethtool_cmd={0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x9}}) (async, rerun: 64) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x11, 0x24, &(0x7f00000003c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x7}, {}, {}, [@cb_func={0x18, 0xa}, @map_val={0x18, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x4}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0x7, 0x0, 0x0, 0x0, 0x9}, @ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x8001}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}, @map_idx={0x18, 0x7, 0x5, 0x0, 0x8}, @ldst={0x2, 0x0, 0x0, 0x4, 0xa, 0xfffffffffffffffe}, @func={0x85, 0x0, 0x1, 0x0, 0x5}, @map_idx_val={0x18, 0x4, 0x6, 0x0, 0xd, 0x0, 0x0, 0x0, 0x4}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000000c0)='GPL\x00', 0x80000001, 0x55, &(0x7f0000000100)=""/85, 0x41000, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f00000001c0)={0x5, 0x3}, 0x8, 0x10, &(0x7f0000000200)={0x0, 0xa, 0x2, 0x1}, 0x10, 0x0, 0x0, 0x5, &(0x7f0000000240)=[0x1, 0x1, 0x1, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000500)=[{0x0, 0x5, 0x8, 0x1}, {0x3, 0x5, 0x4, 0x9}, {0x4, 0x4, 0x6, 0x1}, {0x1, 0x3, 0x4, 0x6}, {0x3, 0x5, 0xd, 0x8}], 0x10, 0x1, @void, @value}, 0x94) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000940)={r1, 0xe0, &(0x7f0000000840)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x1, &(0x7f0000000300)=[0x0], &(0x7f0000000640)=[0x0], 0x0, 0x94, &(0x7f0000000680)=[{}], 0x8, 0x10, &(0x7f0000000780), &(0x7f00000007c0), 0x8, 0xb8, 0x8, 0x8, &(0x7f0000000800)}}, 0x10) (async) r2 = socket$nl_route(0x10, 0x3, 0x0) (async) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000004d00)=@newlink={0x54, 0x10, 0x1, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, 0xc060, 0x2d68}, [@IFLA_LINKINFO={0x34, 0x12, 0x0, 0x1, @bridge_slave={{0x11}, {0x1c, 0x5, 0x0, 0x1, [@IFLA_BRPORT_COST={0x8, 0x3, 0x79}, @IFLA_BRPORT_GUARD={0x5, 0x5, 0x1}, @IFLA_BRPORT_FAST_LEAVE={0x5}]}}}]}, 0x54}, 0x1, 0x0, 0x0, 0x4000004}, 0x40) (async, rerun: 32) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000340)={0x0, 0x0, 0x3}, 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 32) syz_emit_ethernet(0x5e, &(0x7f00000000c0)={@local, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x2b}, @void, {@ipv4={0x800, @tcp={{0x5, 0x4, 0x0, 0x0, 0x50, 0x4, 0x0, 0x0, 0x6, 0x0, @rand_addr=0x64010104, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x6, 0xf, 0x0, 0x5, 0x0, 0x0, {[@mss={0x2, 0x4, 0x499}, @md5sig={0x1d, 0x12, "910000000000006f00"}, @md5sig={0x13, 0x12, "047362d4843af5cce037a189c9077f3f"}]}}}}}}}, 0x0) (async) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r6, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)={0x1c, 0x7, 0x6, 0x801, 0x0, 0x0, {0xa, 0x0, 0x4}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000005}, 0x80) read(r6, 0x0, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000340)={r5, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x18, 0x0, &(0x7f0000000180)="a3233b30b806ab1987e2a36d64e521578557d1fdc9d65b9b"}, 0x50) 0s ago: executing program 3 (id=823): r0 = socket$inet6(0xa, 0x3, 0x3) setsockopt$inet6_mreq(r0, 0x29, 0x1b, &(0x7f0000000100)={@remote}, 0x14) socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000003e00270225bd7000ffdbdf250a"], 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x0) (async) sendmsg$nl_route(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=ANY=[@ANYBLOB="140000003e00270225bd7000ffdbdf250a"], 0x14}, 0x1, 0x0, 0x0, 0x40010}, 0x0) r2 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$inet6_group_source_req(r2, 0x29, 0x2e, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0xdb, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) (async) setsockopt$inet6_group_source_req(r2, 0x29, 0x2f, &(0x7f00000001c0)={0x0, {{0xa, 0x0, 0x0, @mcast1={0xff, 0xf}}}, {{0xa, 0x0, 0x0, @private0}}}, 0x108) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000440)={0xffffffffffffffff, 0xe0, &(0x7f0000000340)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7, &(0x7f0000000180), &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x92, &(0x7f0000000240)=[{}], 0x8, 0x10, &(0x7f0000000280), &(0x7f00000002c0), 0x8, 0x62, 0x8, 0x8, &(0x7f0000000300)}}, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) (async) socket$nl_generic(0x10, 0x3, 0x10) bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x1f, 0x10, &(0x7f0000000040)=ANY=[], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x11, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000500)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x2, 0x8, &(0x7f0000000040)=@raw=[@printk={@llu, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7}}], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r3, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.18' (ED25519) to the list of known hosts. [ 75.682359][ T5818] cgroup: Unknown subsys name 'net' [ 75.790141][ T5818] cgroup: Unknown subsys name 'cpuset' [ 75.801813][ T5818] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 77.346307][ T5818] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 81.544062][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 81.553171][ T5847] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 81.566832][ T5847] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 81.586825][ T5847] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 81.607275][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 81.615401][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.618491][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 81.637044][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.647142][ T5839] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.649932][ T5848] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 81.667236][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 81.675546][ T5140] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 81.680479][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 81.683739][ T5848] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 81.691019][ T5849] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.697880][ T5848] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 81.712212][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.713496][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.727579][ T5849] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.728203][ T5140] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 81.743240][ T5848] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.743253][ T5839] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.769117][ T5140] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.777068][ T5848] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 81.777441][ T5140] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 82.386583][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 82.426606][ T5828] chnl_net:caif_netlink_parms(): no params data found [ 82.438129][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 82.554924][ T5844] chnl_net:caif_netlink_parms(): no params data found [ 82.706173][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 82.748634][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.756741][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.764096][ T5829] bridge_slave_0: entered allmulticast mode [ 82.771551][ T5829] bridge_slave_0: entered promiscuous mode [ 82.820332][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.827865][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.835021][ T5829] bridge_slave_1: entered allmulticast mode [ 82.842703][ T5829] bridge_slave_1: entered promiscuous mode [ 82.858781][ T5828] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.866079][ T5828] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.873236][ T5828] bridge_slave_0: entered allmulticast mode [ 82.881220][ T5828] bridge_slave_0: entered promiscuous mode [ 82.888834][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.896492][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.903833][ T5840] bridge_slave_0: entered allmulticast mode [ 82.911376][ T5840] bridge_slave_0: entered promiscuous mode [ 82.969553][ T5828] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.977239][ T5828] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.984360][ T5828] bridge_slave_1: entered allmulticast mode [ 82.992546][ T5828] bridge_slave_1: entered promiscuous mode [ 82.999690][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.007190][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.014327][ T5840] bridge_slave_1: entered allmulticast mode [ 83.021875][ T5840] bridge_slave_1: entered promiscuous mode [ 83.043648][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.056523][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.102052][ T5844] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.109284][ T5844] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.116749][ T5844] bridge_slave_0: entered allmulticast mode [ 83.123771][ T5844] bridge_slave_0: entered promiscuous mode [ 83.173508][ T5844] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.181124][ T5844] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.188859][ T5844] bridge_slave_1: entered allmulticast mode [ 83.196380][ T5844] bridge_slave_1: entered promiscuous mode [ 83.243084][ T5828] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.254819][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.284008][ T5829] team0: Port device team_slave_0 added [ 83.306215][ T5828] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.319214][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.331434][ T5844] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.343681][ T5844] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.354912][ T5829] team0: Port device team_slave_1 added [ 83.373906][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.381380][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 83.389047][ T5830] bridge_slave_0: entered allmulticast mode [ 83.396703][ T5830] bridge_slave_0: entered promiscuous mode [ 83.452601][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.460231][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.468128][ T5830] bridge_slave_1: entered allmulticast mode [ 83.475304][ T5830] bridge_slave_1: entered promiscuous mode [ 83.521629][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.529008][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.555436][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.582846][ T5828] team0: Port device team_slave_0 added [ 83.592913][ T5840] team0: Port device team_slave_0 added [ 83.602578][ T5840] team0: Port device team_slave_1 added [ 83.611025][ T5844] team0: Port device team_slave_0 added [ 83.622723][ T5844] team0: Port device team_slave_1 added [ 83.629590][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.637227][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.663178][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.696645][ T5140] Bluetooth: hci1: command tx timeout [ 83.700068][ T5828] team0: Port device team_slave_1 added [ 83.761822][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.769065][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.795084][ T5844] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.809160][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 83.822958][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.858101][ T5140] Bluetooth: hci0: command tx timeout [ 83.858126][ T56] Bluetooth: hci4: command tx timeout [ 83.858162][ T5843] Bluetooth: hci3: command tx timeout [ 83.863891][ T5834] Bluetooth: hci2: command tx timeout [ 83.883942][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.891051][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.917350][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.929327][ T5844] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.937237][ T5844] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.963321][ T5844] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.986941][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.993993][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.021038][ T5828] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.046997][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.053958][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.080447][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.113376][ T5828] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.120669][ T5828] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.146728][ T5828] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.186598][ T5829] hsr_slave_0: entered promiscuous mode [ 84.193134][ T5829] hsr_slave_1: entered promiscuous mode [ 84.204257][ T5830] team0: Port device team_slave_0 added [ 84.213339][ T5830] team0: Port device team_slave_1 added [ 84.307721][ T5828] hsr_slave_0: entered promiscuous mode [ 84.314148][ T5828] hsr_slave_1: entered promiscuous mode [ 84.320864][ T5828] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.328686][ T5828] Cannot create hsr debugfs directory [ 84.354406][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 84.361815][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.388516][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 84.438408][ T5844] hsr_slave_0: entered promiscuous mode [ 84.444953][ T5844] hsr_slave_1: entered promiscuous mode [ 84.451325][ T5844] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.461280][ T5844] Cannot create hsr debugfs directory [ 84.480337][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 84.487361][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 84.513500][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 84.535166][ T5840] hsr_slave_0: entered promiscuous mode [ 84.541485][ T5840] hsr_slave_1: entered promiscuous mode [ 84.547886][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.555446][ T5840] Cannot create hsr debugfs directory [ 84.639657][ T5830] hsr_slave_0: entered promiscuous mode [ 84.646541][ T5830] hsr_slave_1: entered promiscuous mode [ 84.652647][ T5830] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 84.660674][ T5830] Cannot create hsr debugfs directory [ 85.091501][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 85.131363][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 85.171776][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 85.202361][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 85.260693][ T5828] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 85.271870][ T5828] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 85.282767][ T5828] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 85.293946][ T5828] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 85.380731][ T5844] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 85.392563][ T5844] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 85.403364][ T5844] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 85.415211][ T5844] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 85.522099][ T5830] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 85.532896][ T5830] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 85.560078][ T5830] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 85.571983][ T5830] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 85.644489][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.694183][ T5840] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 85.705712][ T5840] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 85.723075][ T5840] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 85.733483][ T5840] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 85.752867][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.788727][ T5140] Bluetooth: hci1: command tx timeout [ 85.796517][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.803799][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.822874][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.830024][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.867596][ T5844] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.904937][ T5828] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.936338][ T5140] Bluetooth: hci0: command tx timeout [ 85.936358][ T5834] Bluetooth: hci3: command tx timeout [ 85.936378][ T5843] Bluetooth: hci2: command tx timeout [ 85.936391][ T56] Bluetooth: hci4: command tx timeout [ 85.981312][ T5844] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.009628][ T5828] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.042174][ T2973] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.049366][ T2973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.059594][ T2973] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.066764][ T2973] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.078786][ T2973] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.085981][ T2973] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.142657][ T36] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.149824][ T36] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.165869][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 86.245053][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.293180][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 86.330035][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.404286][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.411617][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.425551][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.432772][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.531286][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 86.594465][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 86.601756][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 86.623515][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.650457][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 86.657665][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 86.802184][ T5844] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.820896][ T5828] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.919551][ T5829] veth0_vlan: entered promiscuous mode [ 86.997993][ T5844] veth0_vlan: entered promiscuous mode [ 87.032314][ T5829] veth1_vlan: entered promiscuous mode [ 87.080281][ T5828] veth0_vlan: entered promiscuous mode [ 87.103065][ T5844] veth1_vlan: entered promiscuous mode [ 87.139160][ T5828] veth1_vlan: entered promiscuous mode [ 87.240257][ T5829] veth0_macvtap: entered promiscuous mode [ 87.255401][ T5829] veth1_macvtap: entered promiscuous mode [ 87.289794][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.323086][ T5828] veth0_macvtap: entered promiscuous mode [ 87.354762][ T5844] veth0_macvtap: entered promiscuous mode [ 87.395320][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.424797][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 87.442580][ T5828] veth1_macvtap: entered promiscuous mode [ 87.468659][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.520545][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.533181][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.546773][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.555509][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.567338][ T5844] veth1_macvtap: entered promiscuous mode [ 87.593392][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.607064][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.619976][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.662609][ T5828] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.674986][ T5828] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.688731][ T5828] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.715587][ T5828] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.728619][ T5828] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.738399][ T5828] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.747662][ T5828] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.786974][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.798112][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.809079][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.819725][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.831485][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.856868][ T5140] Bluetooth: hci1: command tx timeout [ 87.877447][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.888482][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.898652][ T5844] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.909401][ T5844] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.920943][ T5844] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.941673][ T2973] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.959566][ T2973] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.985028][ T5844] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.994624][ T5844] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.004436][ T5844] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.013750][ T5844] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.022413][ T5834] Bluetooth: hci4: command tx timeout [ 88.028199][ T56] Bluetooth: hci0: command tx timeout [ 88.028211][ T5843] Bluetooth: hci2: command tx timeout [ 88.039233][ T5140] Bluetooth: hci3: command tx timeout [ 88.083084][ T5830] veth0_vlan: entered promiscuous mode [ 88.112459][ T5830] veth1_vlan: entered promiscuous mode [ 88.133412][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.144820][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.163357][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.172751][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.199112][ T5840] veth0_vlan: entered promiscuous mode [ 88.243094][ T5840] veth1_vlan: entered promiscuous mode [ 88.279350][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.308278][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.321185][ T5830] veth0_macvtap: entered promiscuous mode [ 88.354737][ T5830] veth1_macvtap: entered promiscuous mode [ 88.356997][ T5829] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 88.393730][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.411886][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.432625][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.465687][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.480025][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.494111][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.504411][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.515316][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.528694][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 88.567146][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.580090][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.594155][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.598711][ T5917] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.607370][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.627221][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.638553][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.650068][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.678354][ T5840] veth0_macvtap: entered promiscuous mode [ 88.685480][ T5917] netlink: 'syz.0.1': attribute type 12 has an invalid length. [ 88.694157][ T5917] netlink: 'syz.0.1': attribute type 29 has an invalid length. [ 88.706275][ T5917] netlink: 148 bytes leftover after parsing attributes in process `syz.0.1'. [ 88.719422][ T5917] netlink: 59 bytes leftover after parsing attributes in process `syz.0.1'. [ 88.761675][ T5840] veth1_macvtap: entered promiscuous mode [ 88.790819][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.799538][ T5830] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.803577][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.820908][ T5830] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.836604][ T5830] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.845353][ T5830] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.925157][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.937520][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.951461][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 88.962579][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.986769][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.003726][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.019098][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 89.034652][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.048541][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 89.085022][ T5925] netlink: 12 bytes leftover after parsing attributes in process `syz.0.8'. [ 89.155120][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.223884][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.265977][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.306388][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.325935][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.355423][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.367632][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 89.378589][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 89.390585][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 89.436798][ T5840] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.445668][ T5840] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.456855][ T5840] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.465613][ T5840] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.478492][ T5944] netlink: 'syz.3.10': attribute type 1 has an invalid length. [ 89.496009][ T5944] netlink: 'syz.3.10': attribute type 1 has an invalid length. [ 89.570454][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.607611][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.754877][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.805044][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.831154][ T5950] C: renamed from lo (while UP) [ 89.850003][ T5950] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 89.881006][ T36] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.904803][ T36] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.938752][ T5140] Bluetooth: hci1: command tx timeout [ 90.069824][ T1013] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 90.092814][ T1013] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 90.101874][ T5140] Bluetooth: hci0: command tx timeout [ 90.102448][ T56] Bluetooth: hci4: command tx timeout [ 90.113286][ T5140] Bluetooth: hci3: command tx timeout [ 90.115819][ T5834] Bluetooth: hci2: command tx timeout [ 90.471486][ T5975] lo speed is unknown, defaulting to 1000 [ 90.558050][ T5975] lo speed is unknown, defaulting to 1000 [ 90.595098][ T5975] lo speed is unknown, defaulting to 1000 [ 90.659997][ T5986] tipc: Enabling of bearer rejected, failed to enable media [ 90.672431][ T5975] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 90.724829][ T5975] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 90.795510][ T5993] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5'. [ 90.835358][ T5986] 8021q: adding VLAN 0 to HW filter on device bond1 [ 90.851306][ T5975] lo speed is unknown, defaulting to 1000 [ 90.859039][ T5987] netlink: 64 bytes leftover after parsing attributes in process `syz.1.18'. [ 90.859789][ T5975] lo speed is unknown, defaulting to 1000 [ 90.890312][ T5975] lo speed is unknown, defaulting to 1000 [ 90.905849][ T5993] netlink: 156 bytes leftover after parsing attributes in process `syz.4.5'. [ 90.918792][ T5975] lo speed is unknown, defaulting to 1000 [ 90.942132][ T5975] lo speed is unknown, defaulting to 1000 [ 91.107344][ T6004] tipc: Started in network mode [ 91.112270][ T6004] tipc: Node identity , cluster identity 4711 [ 91.173879][ T6006] SET target dimension over the limit! [ 91.220539][ T6010] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 91.263572][ T6006] batadv0: entered promiscuous mode [ 91.282126][ T6006] team0: entered promiscuous mode [ 91.295455][ T6006] team_slave_0: entered promiscuous mode [ 91.304610][ T6006] team_slave_1: entered promiscuous mode [ 91.328466][ T6006] hsr1: entered promiscuous mode [ 91.345850][ T6006] hsr1: entered allmulticast mode [ 91.356141][ T6006] batadv0: entered allmulticast mode [ 91.373619][ T6006] team0: entered allmulticast mode [ 91.388353][ T6017] netlink: 4 bytes leftover after parsing attributes in process `syz.1.25'. [ 91.407478][ T6006] team_slave_0: entered allmulticast mode [ 91.413498][ T6006] team_slave_1: entered allmulticast mode [ 91.429379][ T6014] xt_CT: No such helper "snmp_trap" [ 91.805861][ T6027] netlink: 8 bytes leftover after parsing attributes in process `syz.4.28'. [ 91.818215][ T47] cfg80211: failed to load regulatory.db [ 91.898770][ T6042] netlink: 16 bytes leftover after parsing attributes in process `syz.1.32'. [ 91.950896][ T6042] netlink: 16 bytes leftover after parsing attributes in process `syz.1.32'. [ 92.006959][ T6046] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.082478][ T6048] dvmrp0: entered allmulticast mode [ 92.101830][ T6048] dvmrp0: left allmulticast mode [ 92.239659][ T6060] vlan2: entered promiscuous mode [ 92.250187][ T6060] bridge0: entered promiscuous mode [ 92.550547][ T6073] netlink: 'syz.3.41': attribute type 1 has an invalid length. [ 92.562413][ T6075] netlink: 'syz.4.43': attribute type 1 has an invalid length. [ 92.695227][ T6078] netlink: 'syz.0.45': attribute type 1 has an invalid length. [ 93.252186][ T6109] Bluetooth: MGMT ver 1.23 [ 93.539549][ T6126] syz.4.60 uses obsolete (PF_INET,SOCK_PACKET) [ 93.810079][ T6141] __nla_validate_parse: 3 callbacks suppressed [ 93.810097][ T6141] netlink: 24 bytes leftover after parsing attributes in process `syz.4.65'. [ 93.893741][ T6146] netlink: 'syz.0.64': attribute type 10 has an invalid length. [ 94.000597][ T6146] 8021q: adding VLAN 0 to HW filter on device team0 [ 94.064084][ T6146] bond0: (slave team0): Enslaving as an active interface with an up link [ 94.241404][ T6168] netlink: 28 bytes leftover after parsing attributes in process `syz.4.69'. [ 94.307528][ T6164] netlink: 8 bytes leftover after parsing attributes in process `syz.2.68'. [ 94.324937][ T6164] netlink: 24 bytes leftover after parsing attributes in process `syz.2.68'. [ 94.349391][ T6164] netlink: 24 bytes leftover after parsing attributes in process `syz.2.68'. [ 94.394180][ T6170] nftables ruleset with unbound set [ 94.625307][ T6174] xt_CT: No such helper "netbios-ns" [ 94.631270][ T6179] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 94.662967][ T6183] netlink: 48 bytes leftover after parsing attributes in process `syz.1.74'. [ 94.685615][ T6182] IPVS: set_ctl: invalid protocol: 58 224.0.0.2:20000 [ 94.823824][ T6188] xt_socket: unknown flags 0x2 [ 95.047278][ T6200] IPVS: set_ctl: invalid protocol: 58 0.0.0.0:20000 [ 95.074540][ T6203] warning: `syz.1.83' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.127563][ T6206] netlink: 8 bytes leftover after parsing attributes in process `syz.2.82'. [ 95.156075][ T6206] netlink: 4 bytes leftover after parsing attributes in process `syz.2.82'. [ 95.174639][ T6211] Zero length message leads to an empty skb [ 95.183864][ T6206] netdevsim netdevsim2 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.192998][ T6206] netdevsim netdevsim2 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.201784][ T6206] netdevsim netdevsim2 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.210581][ T6206] netdevsim netdevsim2 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 95.324267][ T5882] IPVS: starting estimator thread 0... [ 95.440965][ T6219] IPVS: using max 31 ests per chain, 74400 per kthread [ 95.459113][ T6222] netlink: 32 bytes leftover after parsing attributes in process `syz.1.85'. [ 95.734144][ T6235] netlink: 12 bytes leftover after parsing attributes in process `syz.0.90'. [ 95.880815][ T6242] tipc: Started in network mode [ 95.885738][ T6242] tipc: Node identity 8a7dbdd8cccf, cluster identity 4711 [ 95.938776][ T6242] tipc: Enabled bearer , priority 0 [ 96.085321][ T6259] af_packet: tpacket_rcv: packet too big, clamped from 32 to 4294967272. macoff=96 [ 96.105174][ T6254] syzkaller0: entered promiscuous mode [ 96.124261][ T6254] syzkaller0: entered allmulticast mode [ 96.209534][ T6264] netlink: 'syz.4.100': attribute type 1 has an invalid length. [ 96.276077][ T6242] tipc: Resetting bearer [ 96.330645][ T6240] tipc: Resetting bearer [ 96.387162][ T6240] tipc: Disabling bearer [ 97.274216][ T6318] netlink: 'syz.0.117': attribute type 18 has an invalid length. [ 97.464732][ T6318] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.474177][ T6318] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.483672][ T6318] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.492729][ T6318] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 97.585146][ T6330] (unnamed net_device) (uninitialized): option lp_interval: invalid value (0) [ 97.612690][ T6330] (unnamed net_device) (uninitialized): option lp_interval: allowed values 1 - 2147483647 [ 98.006367][ T6354] netlink: 'syz.0.124': attribute type 29 has an invalid length. [ 98.031815][ T6354] netlink: 'syz.0.124': attribute type 29 has an invalid length. [ 98.261779][ T6370] Bluetooth: MGMT ver 1.23 [ 98.346917][ T6372] raw_sendmsg: syz.3.127 forgot to set AF_INET. Fix it! [ 98.355783][ T6369] openvswitch: netlink: EtherType 50a is less than min 600 [ 98.806070][ T6384] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 99.611047][ T6392] ipt_REJECT: TCP_RESET invalid for non-tcp [ 99.750700][ T6400] __nla_validate_parse: 3 callbacks suppressed [ 99.750718][ T6400] netlink: 8 bytes leftover after parsing attributes in process `syz.4.139'. [ 99.775172][ T6400] netlink: 12 bytes leftover after parsing attributes in process `syz.4.139'. [ 99.959391][ T6411] netlink: 12 bytes leftover after parsing attributes in process `syz.3.142'. [ 100.013014][ T6411] netlink: 'syz.3.142': attribute type 28 has an invalid length. [ 100.034541][ T6411] netlink: 'syz.3.142': attribute type 3 has an invalid length. [ 100.061349][ T6411] netlink: 132 bytes leftover after parsing attributes in process `syz.3.142'. [ 100.765793][ T6462] netlink: 12 bytes leftover after parsing attributes in process `syz.2.155'. [ 101.086557][ T6473] netlink: 44 bytes leftover after parsing attributes in process `syz.4.159'. [ 101.114802][ T6473] smc: net device bond0 applied user defined pnetid SYZ2 [ 101.245408][ T6477] netlink: 20 bytes leftover after parsing attributes in process `syz.4.162'. [ 101.295520][ T6477] netlink: 28 bytes leftover after parsing attributes in process `syz.4.162'. [ 101.319078][ T6480] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !寿$ULvyآDUDw}z [ 101.936469][ T6505] lo speed is unknown, defaulting to 1000 [ 102.320540][ T6526] netlink: 'syz.4.172': attribute type 15 has an invalid length. [ 102.395121][ T6529] netlink: 20 bytes leftover after parsing attributes in process `syz.0.173'. [ 102.444811][ T6533] netlink: 'syz.2.174': attribute type 23 has an invalid length. [ 102.765111][ T6547] netlink: 4 bytes leftover after parsing attributes in process `syz.3.178'. [ 102.870170][ T6557] netlink: 'syz.2.179': attribute type 1 has an invalid length. [ 102.882553][ T6550] netlink: 'syz.3.178': attribute type 18 has an invalid length. [ 102.901473][ T6550] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.910655][ T6550] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.919572][ T6550] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.926110][ T6557] netlink: 'syz.2.179': attribute type 2 has an invalid length. [ 102.928479][ T6550] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 102.969136][ T6559] netlink: 'syz.4.180': attribute type 5 has an invalid length. [ 103.391573][ T6574] netlink: 'syz.0.185': attribute type 6 has an invalid length. [ 103.668023][ T6589] netlink: 'syz.3.189': attribute type 10 has an invalid length. [ 103.751137][ T6589] team0: Device veth0_macvtap failed to register rx_handler [ 103.804177][ T6594] xt_policy: output policy not valid in PREROUTING and INPUT [ 104.730873][ T6642] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 104.743422][ T6642] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 104.788330][ T6652] __nla_validate_parse: 6 callbacks suppressed [ 104.788349][ T6652] netlink: 4 bytes leftover after parsing attributes in process `syz.1.205'. [ 105.099731][ T6658] netlink: 8 bytes leftover after parsing attributes in process `syz.2.208'. [ 105.254961][ T6670] validate_nla: 1 callbacks suppressed [ 105.254981][ T6670] netlink: 'syz.1.210': attribute type 1 has an invalid length. [ 105.847896][ T6702] netlink: 'syz.1.221': attribute type 12 has an invalid length. [ 106.414242][ T6736] netlink: 'syz.1.227': attribute type 2 has an invalid length. [ 106.501763][ T6739] netlink: 24 bytes leftover after parsing attributes in process `syz.2.229'. [ 106.707181][ T6749] xt_ipcomp: unknown flags B [ 106.780945][ T6749] netlink: 12 bytes leftover after parsing attributes in process `syz.1.231'. [ 107.179397][ T6784] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 107.597400][ T6811] netlink: 668 bytes leftover after parsing attributes in process `syz.3.247'. [ 107.633062][ T6811] netlink: 668 bytes leftover after parsing attributes in process `syz.3.247'. [ 107.670634][ T6816] ieee802154 phy1 wpan1: encryption failed: -22 [ 107.788910][ T6820] netlink: 80 bytes leftover after parsing attributes in process `syz.4.249'. [ 107.798502][ T6820] netlink: 80 bytes leftover after parsing attributes in process `syz.4.249'. [ 107.834716][ T6821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.250'. [ 107.903241][ T6821] netlink: 4 bytes leftover after parsing attributes in process `syz.2.250'. [ 108.081195][ T6833] bridge0: port 3(vlan2) entered blocking state [ 108.120375][ T6833] bridge0: port 3(vlan2) entered disabled state [ 108.128023][ T6833] vlan2: entered allmulticast mode [ 108.138886][ T6833] bridge0: entered allmulticast mode [ 108.151462][ T6833] vlan2: left allmulticast mode [ 108.158766][ T6833] bridge0: left allmulticast mode [ 108.394546][ T6848] x_tables: duplicate underflow at hook 3 [ 109.132971][ T6877] netlink: 'syz.3.267': attribute type 1 has an invalid length. [ 109.413606][ T6899] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.500373][ T6899] bridge_slave_1 (unregistering): left allmulticast mode [ 109.511002][ T6899] bridge_slave_1 (unregistering): left promiscuous mode [ 109.518983][ T6899] bridge0: port 2(bridge_slave_1) entered disabled state [ 109.707630][ T6915] netlink: 'syz.1.277': attribute type 3 has an invalid length. [ 109.909428][ T6924] __nla_validate_parse: 9 callbacks suppressed [ 109.909448][ T6924] netlink: 68 bytes leftover after parsing attributes in process `syz.4.280'. [ 109.974276][ T6928] netlink: 16 bytes leftover after parsing attributes in process `syz.1.282'. [ 109.983987][ T6928] netlink: 12 bytes leftover after parsing attributes in process `syz.1.282'. [ 110.336239][ T6935] IPVS: lblc: UDP 224.0.0.2:0 - no destination available [ 110.364843][ T5882] IPVS: starting estimator thread 0... [ 110.405127][ T6949] netlink: 12 bytes leftover after parsing attributes in process `syz.4.289'. [ 110.476980][ T6948] IPVS: using max 32 ests per chain, 76800 per kthread [ 110.518853][ T6954] netlink: 'syz.3.291': attribute type 31 has an invalid length. [ 110.679059][ T6963] batadv_slave_1: default FDB implementation only supports local addresses [ 110.695019][ T6961] netlink: 8 bytes leftover after parsing attributes in process `syz.2.293'. [ 110.707830][ T6963] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 110.729235][ T6961] netlink: 16 bytes leftover after parsing attributes in process `syz.2.293'. [ 110.743670][ T6963] batadv_slave_1: entered promiscuous mode [ 110.759727][ T6963] batadv_slave_1: entered allmulticast mode [ 110.826014][ T6967] openvswitch: netlink: Key 6 has unexpected len 4 expected 2 [ 111.852384][ T7024] IPVS: ip_vs_edit_dest(): server weight less than zero [ 111.859564][ T5913] IPVS: starting estimator thread 0... [ 111.887068][ T7022] netlink: 40 bytes leftover after parsing attributes in process `syz.0.312'. [ 112.026077][ T7025] IPVS: using max 31 ests per chain, 74400 per kthread [ 112.210254][ T7046] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 112.345272][ T7055] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 112.527946][ T56] block nbd0: Receive control failed (result -32) [ 112.540450][ T7072] netlink: 12 bytes leftover after parsing attributes in process `syz.4.323'. [ 112.603946][ T7077] netlink: 28 bytes leftover after parsing attributes in process `syz.3.322'. [ 112.654128][ T7072] netlink: 'syz.4.323': attribute type 39 has an invalid length. [ 112.755685][ T7086] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 112.996822][ T7098] netlink: 'syz.0.329': attribute type 10 has an invalid length. [ 113.020645][ T7098] vlan0: entered allmulticast mode [ 113.036499][ T7098] veth0_vlan: entered allmulticast mode [ 113.072838][ T7098] team0: Port device vlan0 added [ 113.083323][ T7103] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 113.092033][ T7100] IPVS: ip_vs_edit_dest(): lower threshold is higher than upper threshold [ 113.333724][ T7118] netlink: 'syz.2.336': attribute type 21 has an invalid length. [ 113.371227][ T7118] netlink: 128 bytes leftover after parsing attributes in process `syz.2.336'. [ 113.452593][ T7118] netlink: 'syz.2.336': attribute type 4 has an invalid length. [ 113.469446][ T7125] netlink: 'syz.2.336': attribute type 21 has an invalid length. [ 113.495077][ T7118] netlink: 'syz.2.336': attribute type 5 has an invalid length. [ 113.537480][ T5835] TC_ACT_REPEAT abuse ? [ 113.656945][ T7125] netlink: 'syz.2.336': attribute type 4 has an invalid length. [ 113.666223][ T7125] netlink: 'syz.2.336': attribute type 5 has an invalid length. [ 114.108829][ T7162] trusted_key: syz.2.346 sent an empty control message without MSG_MORE. [ 114.364916][ T7181] netlink: 'syz.3.350': attribute type 10 has an invalid length. [ 114.404453][ T7181] hsr0: entered promiscuous mode [ 114.425095][ T7181] bond0: (slave hsr0): The slave device specified does not support setting the MAC address [ 114.471357][ T7186] x_tables: duplicate entry at hook 1 [ 114.509781][ T7181] hsr0: A HSR master's MTU cannot be greater than the smallest MTU of its slaves minus the HSR Tag length (6 octets). [ 114.569329][ T7181] bond0: (slave hsr0): Error -22 calling dev_set_mtu [ 115.431606][ T7237] __nla_validate_parse: 5 callbacks suppressed [ 115.431623][ T7237] netlink: 80 bytes leftover after parsing attributes in process `syz.0.365'. [ 115.475734][ T7237] nbd: illegal input index 61504 [ 115.499379][ T7238] netlink: 12 bytes leftover after parsing attributes in process `syz.2.364'. [ 115.775737][ T7253] validate_nla: 1 callbacks suppressed [ 115.775769][ T7253] netlink: 'syz.3.370': attribute type 39 has an invalid length. [ 115.806720][ T7260] xt_l2tp: v2 doesn't support IP mode [ 116.137839][ T7271] TC_ACT_REPEAT abuse ? [ 116.143368][ C0] TC_ACT_REPEAT abuse ? [ 116.432458][ T7283] openvswitch: netlink: Multiple metadata blocks provided [ 116.439160][ T7285] netlink: 'syz.1.381': attribute type 11 has an invalid length. [ 116.481286][ T7285] netlink: 224 bytes leftover after parsing attributes in process `syz.1.381'. [ 116.519394][ T7290] xt_addrtype: input interface limitation not valid in POSTROUTING and OUTPUT [ 116.585247][ T7294] Unsupported ieee802154 address type: 0 [ 116.794833][ T7300] netlink: 'syz.3.387': attribute type 4 has an invalid length. [ 116.813541][ T7302] netlink: 8 bytes leftover after parsing attributes in process `syz.1.388'. [ 116.840871][ T7307] netlink: 8 bytes leftover after parsing attributes in process `syz.4.389'. [ 116.867663][ T7300] netlink: 'syz.3.387': attribute type 4 has an invalid length. [ 117.045719][ T5882] lo speed is unknown, defaulting to 1000 [ 117.208656][ T7321] netlink: 8 bytes leftover after parsing attributes in process `syz.1.392'. [ 117.217847][ T5882] lo speed is unknown, defaulting to 1000 [ 118.314859][ T7329] bridge_slave_0: left allmulticast mode [ 118.329711][ T7329] bridge_slave_0: left promiscuous mode [ 118.335593][ T7329] bridge0: port 1(bridge_slave_0) entered disabled state [ 118.430912][ T7329] bridge_slave_1: left allmulticast mode [ 118.437726][ T7329] bridge_slave_1: left promiscuous mode [ 118.457003][ T7329] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.617800][ T7329] bond0: (slave bond_slave_0): Releasing backup interface [ 118.642873][ T7329] bond0: (slave bond_slave_1): Releasing backup interface [ 118.765879][ T7329] team0: Port device team_slave_0 removed [ 118.795220][ T7329] team0: Port device team_slave_1 removed [ 118.829889][ T7329] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.840458][ T7329] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.863090][ T7356] netlink: 'syz.1.405': attribute type 1 has an invalid length. [ 118.873719][ T7329] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.883383][ T7329] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.957454][ T7360] veth0_to_bridge: entered promiscuous mode [ 119.004186][ T1013] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.144433][ T7370] netlink: 16 bytes leftover after parsing attributes in process `syz.1.407'. [ 119.165645][ T7367] IPVS: stopping backup sync thread 7372 ... [ 119.179374][ T7372] IPVS: sync thread started: state = BACKUP, mcast_ifn = ip6gretap0, syncid = 3, id = 0 [ 119.212291][ T7367] netlink: 8 bytes leftover after parsing attributes in process `syz.2.408'. [ 119.239752][ T7367] netlink: 12 bytes leftover after parsing attributes in process `syz.2.408'. [ 119.272444][ T7367] netlink: 272 bytes leftover after parsing attributes in process `syz.2.408'. [ 119.300729][ T7379] netlink: 'syz.3.411': attribute type 14 has an invalid length. [ 119.307459][ T977] TC_ACT_REPEAT abuse ? [ 119.496665][ T7386] netlink: 'syz.1.412': attribute type 21 has an invalid length. [ 119.615296][ T7397] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 120.575788][ T7451] netlink: 'syz.0.426': attribute type 1 has an invalid length. [ 121.231833][ T977] TC_ACT_REPEAT abuse ? [ 121.856809][ C0] TC_ACT_REPEAT abuse ? [ 122.306095][ T7493] __nla_validate_parse: 7 callbacks suppressed [ 122.306113][ T7493] netlink: 16 bytes leftover after parsing attributes in process `syz.4.433'. [ 122.613138][ T7513] netlink: 256 bytes leftover after parsing attributes in process `syz.0.441'. [ 122.669385][ T53] bond0: (slave bond_slave_0): link status definitely down, disabling slave [ 122.953326][ T7527] netlink: 8 bytes leftover after parsing attributes in process `syz.4.446'. [ 122.980404][ T7530] netlink: 4 bytes leftover after parsing attributes in process `syz.3.447'. [ 123.020626][ T7530] netlink: 20 bytes leftover after parsing attributes in process `syz.3.447'. [ 123.118300][ T7535] bridge3: entered promiscuous mode [ 123.152750][ T7537] netlink: 'syz.2.450': attribute type 10 has an invalid length. [ 123.190241][ T7537] batman_adv: batadv0: Adding interface: wlan0 [ 123.230123][ T7537] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.284196][ T7537] batman_adv: batadv0: Interface activated: wlan0 [ 123.331186][ T7550] netlink: 'syz.1.454': attribute type 12 has an invalid length. [ 123.412016][ T7550] TC_ACT_REPEAT abuse ? [ 123.416517][ T7555] TC_ACT_REPEAT abuse ? [ 123.421284][ C0] TC_ACT_REPEAT abuse ? [ 123.470172][ T7555] TC_ACT_REPEAT abuse ? [ 123.475078][ T7550] TC_ACT_REPEAT abuse ? [ 123.481898][ T7550] TC_ACT_REPEAT abuse ? [ 123.490102][ T7550] TC_ACT_REPEAT abuse ? [ 123.516327][ T7555] TC_ACT_REPEAT abuse ? [ 123.575396][ T7565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.457'. [ 123.654682][ T7565] netlink: 4 bytes leftover after parsing attributes in process `syz.2.457'. [ 123.716123][ T7555] netlink: 8 bytes leftover after parsing attributes in process `syz.1.454'. [ 123.746101][ T7555] netlink: 24 bytes leftover after parsing attributes in process `syz.1.454'. [ 123.805387][ T7576] netlink: 'syz.4.463': attribute type 2 has an invalid length. [ 123.827282][ T7576] netlink: 'syz.4.463': attribute type 8 has an invalid length. [ 123.843870][ T7576] netlink: 132 bytes leftover after parsing attributes in process `syz.4.463'. [ 124.069725][ T7585] netlink: 'syz.4.465': attribute type 1 has an invalid length. [ 124.088419][ T7585] netlink: 'syz.4.465': attribute type 2 has an invalid length. [ 124.557364][ T7609] netlink: 'syz.1.472': attribute type 10 has an invalid length. [ 124.565685][ T7609] bridge0: port 3(team0) entered blocking state [ 124.574916][ T7609] bridge0: port 3(team0) entered disabled state [ 124.583155][ T7609] team0: entered allmulticast mode [ 124.588594][ T7609] team_slave_0: entered allmulticast mode [ 124.594593][ T7609] team_slave_1: entered allmulticast mode [ 124.603591][ T7609] team0: entered promiscuous mode [ 124.609901][ T7609] team_slave_0: entered promiscuous mode [ 124.628563][ T7609] team_slave_1: entered promiscuous mode [ 124.660381][ T7609] bridge0: port 3(team0) entered blocking state [ 124.667013][ T7609] bridge0: port 3(team0) entered forwarding state [ 125.326704][ T7641] Driver unsupported XDP return value 0 on prog (id 153) dev N/A, expect packet loss! [ 125.472793][ T977] hid-generic 0005:0458:005C.0001: item fetching failed at offset 0/1 [ 125.558241][ T977] hid-generic 0005:0458:005C.0001: probe with driver hid-generic failed with error -22 [ 126.270606][ T7696] ieee802154 phy1 wpan1: encryption failed: -22 [ 127.900175][ T7716] netlink: 'syz.1.505': attribute type 21 has an invalid length. [ 127.911795][ T7716] __nla_validate_parse: 11 callbacks suppressed [ 127.911820][ T7716] netlink: 156 bytes leftover after parsing attributes in process `syz.1.505'. [ 128.098645][ T7746] netlink: 284 bytes leftover after parsing attributes in process `syz.4.512'. [ 128.324361][ T7761] xt_hashlimit: max too large, truncated to 1048576 [ 128.893185][ T7792] netlink: 164 bytes leftover after parsing attributes in process `syz.4.525'. [ 128.969580][ T7797] netlink: 12 bytes leftover after parsing attributes in process `syz.3.526'. [ 129.247191][ T7817] netlink: 24 bytes leftover after parsing attributes in process `syz.3.529'. [ 129.365116][ T7817] netlink: 24 bytes leftover after parsing attributes in process `syz.3.529'. [ 129.619306][ T7841] netlink: 'syz.3.535': attribute type 62 has an invalid length. [ 129.647989][ T7840] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 129.834989][ T7850] nbd: device at index 4 is going down [ 129.930055][ T7857] netlink: 4 bytes leftover after parsing attributes in process `syz.0.540'. [ 129.944812][ T7854] x_tables: duplicate underflow at hook 3 [ 129.963750][ T7857] ipvlan2: entered allmulticast mode [ 130.076728][ T7863] netlink: 8 bytes leftover after parsing attributes in process `syz.4.541'. [ 130.116678][ T7863] netlink: 24 bytes leftover after parsing attributes in process `syz.4.541'. [ 130.180882][ T7865] netlink: 'syz.0.542': attribute type 23 has an invalid length. [ 130.182890][ T7867] netlink: 356 bytes leftover after parsing attributes in process `syz.2.543'. [ 130.197976][ T7867] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 130.205497][ T7867] IPv6: NLM_F_CREATE should be set when creating new route [ 130.212832][ T7867] IPv6: NLM_F_CREATE should be set when creating new route [ 130.313493][ T7865] erspan0: entered promiscuous mode [ 130.370697][ T7865] erspan0: left promiscuous mode [ 130.388979][ T7870] netlink: 'syz.1.546': attribute type 1 has an invalid length. [ 130.415329][ T7864] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 130.424243][ T7870] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 130.432400][ T7870] IPv6: NLM_F_CREATE should be set when creating new route [ 130.442479][ T7881] netlink: 'syz.1.546': attribute type 1 has an invalid length. [ 130.492804][ T7875] netlink: 'syz.1.546': attribute type 1 has an invalid length. [ 130.503255][ T7875] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 130.517449][ T7883] netlink: 'syz.4.548': attribute type 11 has an invalid length. [ 130.830916][ T5913] net_ratelimit: 1018 callbacks suppressed [ 130.830934][ T5913] TC_ACT_REPEAT abuse ? [ 130.859902][ T7899] IPv6: NLM_F_CREATE should be specified when creating new route [ 131.258668][ T7926] xt_TPROXY: Can be used only with -p tcp or -p udp [ 131.325419][ T7930] netlink: 'syz.2.563': attribute type 3 has an invalid length. [ 131.340782][ T7930] netlink: 'syz.2.563': attribute type 3 has an invalid length. [ 132.319134][ T7975] veth7: entered allmulticast mode [ 132.325002][ T7978] tipc: Started in network mode [ 132.331841][ T7978] tipc: Node identity e0000002, cluster identity 4711 [ 132.339295][ T7978] tipc: Enabling of bearer rejected, failed to enable media [ 132.359348][ T7979] syz.0.580 (7979) used obsolete PPPIOCDETACH ioctl [ 132.524812][ T7992] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 132.642711][ T8000] netlink: 'syz.0.586': attribute type 3 has an invalid length. [ 132.745330][ T1299] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.776154][ T8005] team0: left allmulticast mode [ 132.805662][ T8005] team_slave_0: left allmulticast mode [ 132.853355][ T8005] team_slave_1: left allmulticast mode [ 132.883993][ T8005] team0: left promiscuous mode [ 132.909114][ T8005] team_slave_0: left promiscuous mode [ 132.923347][ T8005] team_slave_1: left promiscuous mode [ 132.937426][ T8005] bridge0: port 3(team0) entered disabled state [ 132.969477][ T8005] bridge_slave_1: left allmulticast mode [ 132.984304][ T8005] bridge_slave_1: left promiscuous mode [ 132.990718][ T8005] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.001852][ T8005] bridge_slave_0: left allmulticast mode [ 133.008015][ T8005] bridge_slave_0: left promiscuous mode [ 133.014155][ T8005] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.055317][ T8017] sctp: [Deprecated]: syz.3.591 (pid 8017) Use of struct sctp_assoc_value in delayed_ack socket option. [ 133.055317][ T8017] Use struct sctp_sack_info instead [ 133.122696][ T8007] netlink: 'syz.0.588': attribute type 2 has an invalid length. [ 133.130972][ T8007] netlink: 'syz.0.588': attribute type 6 has an invalid length. [ 133.142059][ T8012] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 133.149508][ T8012] IPv6: NLM_F_CREATE should be set when creating new route [ 133.484966][ T8027] netlink: 'syz.1.594': attribute type 11 has an invalid length. [ 133.489117][ T8033] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2 [ 133.495297][ T8027] __nla_validate_parse: 10 callbacks suppressed [ 133.495316][ T8027] netlink: 228 bytes leftover after parsing attributes in process `syz.1.594'. [ 133.540376][ T8033] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2 [ 133.566247][ T8033] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2 [ 133.574734][ T8037] netlink: 48 bytes leftover after parsing attributes in process `syz.0.595'. [ 133.576521][ T8033] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2 [ 133.676199][ T8033] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2 [ 133.683007][ T8033] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2 [ 133.691369][ T8033] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2 [ 133.702760][ T8033] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2 [ 133.925413][ T8045] netlink: 244 bytes leftover after parsing attributes in process `syz.1.600'. [ 134.428897][ T8069] @: renamed from bond_slave_0 (while UP) [ 134.751776][ T8087] netlink: 96 bytes leftover after parsing attributes in process `syz.1.611'. [ 134.808356][ T8089] ip6t_srh: unknown srh invflags 4449 [ 134.814455][ T8092] netlink: 240 bytes leftover after parsing attributes in process `syz.2.614'. [ 134.946896][ T8093] netlink: 16 bytes leftover after parsing attributes in process `syz.4.612'. [ 135.006809][ T8097] netlink: 8 bytes leftover after parsing attributes in process `syz.2.616'. [ 135.180802][ T8100] netlink: 104 bytes leftover after parsing attributes in process `syz.1.617'. [ 135.522471][ T8118] Cannot find set identified by id 752 to match [ 135.529513][ T8119] Cannot find set identified by id 752 to match [ 135.676311][ T8123] validate_nla: 3 callbacks suppressed [ 135.676329][ T8123] netlink: 'syz.1.623': attribute type 1 has an invalid length. [ 135.720225][ T8122] netlink: 24 bytes leftover after parsing attributes in process `syz.1.623'. [ 135.968556][ T8127] workqueue: Failed to create a rescuer kthread for wq "wg-crypt-wireguard%d": -EINTR [ 136.252367][ T8144] 8021q: adding VLAN 0 to HW filter on device bond0 [ 136.577221][ T63] net_ratelimit: 28 callbacks suppressed [ 136.577238][ T63] TC_ACT_REPEAT abuse ? [ 136.715631][ T8176] netlink: 216 bytes leftover after parsing attributes in process `syz.4.633'. [ 136.981169][ T8186] netlink: 'syz.0.634': attribute type 3 has an invalid length. [ 137.109471][ T8193] netlink: 'syz.4.636': attribute type 10 has an invalid length. [ 137.211759][ T8200] set match dimension is over the limit! [ 137.220482][ T8199] set match dimension is over the limit! [ 137.423424][ T8193] team0: Port device geneve0 added [ 137.701172][ T8214] netlink: 'syz.3.644': attribute type 3 has an invalid length. [ 137.735984][ T8214] netlink: 'syz.3.644': attribute type 2 has an invalid length. [ 138.448534][ T8266] veth0_to_bridge: entered promiscuous mode [ 138.474450][ T83] bridge0: port 1(bridge_slave_0) entered disabled state [ 138.731992][ T8279] sctp: [Deprecated]: syz.4.657 (pid 8279) Use of int in max_burst socket option. [ 138.731992][ T8279] Use struct sctp_assoc_value instead [ 138.778538][ T8284] __nla_validate_parse: 7 callbacks suppressed [ 138.778557][ T8284] netlink: 188 bytes leftover after parsing attributes in process `syz.2.658'. [ 138.866808][ T8284] netlink: 4 bytes leftover after parsing attributes in process `syz.2.658'. [ 138.904091][ T8288] netlink: 'syz.0.659': attribute type 1 has an invalid length. [ 138.976910][ T8288] netlink: 224 bytes leftover after parsing attributes in process `syz.0.659'. [ 139.103751][ T8299] netlink: 20 bytes leftover after parsing attributes in process `syz.2.662'. [ 139.484274][ T8300] netlink: 'syz.3.661': attribute type 11 has an invalid length. [ 139.495220][ T8300] netlink: 224 bytes leftover after parsing attributes in process `syz.3.661'. [ 139.535450][ T8310] syzkaller0: entered promiscuous mode [ 139.550133][ T8310] syzkaller0: entered allmulticast mode [ 139.733610][ T8328] netlink: 'syz.4.663': attribute type 5 has an invalid length. [ 139.870342][ T8333] xt_hashlimit: size too large, truncated to 1048576 [ 139.946471][ T8338] xt_hashlimit: size too large, truncated to 1048576 [ 140.023047][ T8342] xt_hashlimit: size too large, truncated to 1048576 [ 140.040418][ T8339] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 140.089763][ T8346] netlink: 'syz.0.668': attribute type 9 has an invalid length. [ 140.117066][ T8348] netlink: 4 bytes leftover after parsing attributes in process `syz.2.667'. [ 140.192859][ T8350] netlink: 24 bytes leftover after parsing attributes in process `syz.2.667'. [ 140.416865][ T977] TC_ACT_REPEAT abuse ? [ 140.536866][ T8364] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 140.657218][ T8374] netlink: 8 bytes leftover after parsing attributes in process `syz.3.673'. [ 140.693034][ T8374] netlink: 12 bytes leftover after parsing attributes in process `syz.3.673'. [ 140.750235][ T8380] RDS: rds_bind could not find a transport for ::ffff:10.1.1.1, load rds_tcp or rds_rdma? [ 140.766996][ T8381] netlink: 'syz.4.675': attribute type 2 has an invalid length. [ 140.978550][ T8387] batman_adv: batadv0: adding TT local entry aa:aa:aa:aa:aa:2a to non-existent VLAN 32 [ 141.148913][ T8394] tap0: tun_chr_ioctl cmd 1074025672 [ 141.154273][ T8394] tap0: ignored: set checksum disabled [ 141.200691][ T30] audit: type=1800 audit(1745867267.877:2): pid=8394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz.2.681" name="memory.events" dev="tmpfs" ino=747 res=0 errno=0 [ 141.233683][ T8398] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 141.253075][ T30] audit: type=1804 audit(1745867267.877:3): pid=8394 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz.2.681" name="/newroot/142/memory.events" dev="tmpfs" ino=747 res=1 errno=0 [ 141.533991][ T8421] netlink: 16 bytes leftover after parsing attributes in process `syz.0.688'. [ 142.022769][ T8453] veth0: entered promiscuous mode [ 142.230827][ T8453] veth0: left promiscuous mode [ 142.339336][ T36] TC_ACT_REPEAT abuse ? [ 142.839798][ T8499] TC_ACT_REPEAT abuse ? [ 143.312572][ T8532] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 143.336205][ T8533] openvswitch: netlink: ufid size 3068 bytes exceeds the range (1, 16) [ 143.382014][ T56] Bluetooth: hci4: command 0x0405 tx timeout [ 143.677665][ T8545] netdevsim netdevsim1 netdevsim1: Unsupported IPsec algorithm [ 143.844907][ T8567] __nla_validate_parse: 6 callbacks suppressed [ 143.844925][ T8567] netlink: 24 bytes leftover after parsing attributes in process `syz.2.728'. [ 143.895360][ T8567] netlink: 24 bytes leftover after parsing attributes in process `syz.2.728'. [ 143.931264][ T8569] netlink: 'syz.3.729': attribute type 1 has an invalid length. [ 144.595813][ T8596] xt_CT: You must specify a L4 protocol and not use inversions on it [ 144.717373][ T8598] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.982491][ T8598] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.127818][ T8598] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.178245][ T8635] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 145.222465][ T8598] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 145.348172][ T8598] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.413263][ T8598] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.502760][ T8598] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.565131][ T8598] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.605087][ T8651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.756'. [ 145.641345][ T8651] netlink: 4 bytes leftover after parsing attributes in process `syz.0.756'. [ 145.710849][ T8655] netlink: 8 bytes leftover after parsing attributes in process `syz.2.758'. [ 145.810188][ T8659] veth0: entered promiscuous mode [ 145.827467][ T8660] netlink: 'syz.0.761': attribute type 1 has an invalid length. [ 145.871536][ T8656] veth0: left promiscuous mode [ 145.931243][ T8665] sctp: [Deprecated]: syz.2.762 (pid 8665) Use of int in max_burst socket option. [ 145.931243][ T8665] Use struct sctp_assoc_value instead [ 146.454043][ T8695] xt_time: unknown flags 0x4 [ 146.578013][ T47] TC_ACT_REPEAT abuse ? [ 146.732419][ T8709] netlink: 'syz.0.775': attribute type 1 has an invalid length. [ 146.849964][ T8709] 8021q: adding VLAN 0 to HW filter on device bond2 [ 146.878322][ T8719] ip6gre1: entered allmulticast mode [ 146.940407][ T8720] vlan2: entered promiscuous mode [ 146.945490][ T8720] bridge0: entered promiscuous mode [ 146.996364][ T47] TC_ACT_REPEAT abuse ? [ 147.258443][ T8741] netlink: 8 bytes leftover after parsing attributes in process `syz.0.784'. [ 147.715276][ T8769] netlink: 8 bytes leftover after parsing attributes in process `syz.4.789'. [ 148.048414][ T8786] netlink: 20 bytes leftover after parsing attributes in process `syz.0.794'. [ 148.110938][ T2973] TC_ACT_REPEAT abuse ? [ 148.688143][ T8821] netlink: 32 bytes leftover after parsing attributes in process `syz.3.805'. [ 149.009701][ T8839] netlink: 8 bytes leftover after parsing attributes in process `syz.1.811'. [ 149.366832][ T8862] netlink: 52 bytes leftover after parsing attributes in process `syz.4.815'. [ 149.572522][ T8876] netlink: 'syz.3.819': attribute type 1 has an invalid length. [ 149.792911][ T12] wlan1: Trigger new scan to find an IBSS to join [ 149.810293][ T12] ------------[ cut here ]------------ [ 149.815825][ T12] WARNING: CPU: 0 PID: 12 at net/mac80211/scan.c:1213 ieee80211_request_ibss_scan+0x82e/0x8b0 [ 149.826904][ T12] Modules linked in: [ 149.831151][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.15.0-rc3-syzkaller-00109-gf73f05c6f711 #0 PREEMPT(full) [ 149.843255][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 149.853690][ T12] Workqueue: events_unbound cfg80211_wiphy_work [ 149.855381][ T8885] netlink: 'syz.0.821': attribute type 1 has an invalid length. [ 149.860224][ T12] RIP: 0010:ieee80211_request_ibss_scan+0x82e/0x8b0 [ 149.874463][ T12] Code: e8 87 c5 f7 f6 eb 05 e8 80 c5 f7 f6 b8 ea ff ff ff e9 fb f8 ff ff e8 71 c5 f7 f6 90 0f 0b 90 e9 bb f8 ff ff e8 63 c5 f7 f6 90 <0f> 0b 90 eb dd 48 c7 c1 50 ed 7e 8f 80 e1 07 80 c1 03 38 c1 0f 8c [ 149.895069][ T12] RSP: 0018:ffffc900001178a0 EFLAGS: 00010293 [ 149.901360][ T12] RAX: ffffffff8ac7f81d RBX: 0000000000000000 RCX: ffff88801b685a00 [ 149.909406][ T12] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 149.917740][ T12] RBP: 0000000000000001 R08: 0000000000000000 R09: 1ffff92000022ec4 [ 149.925747][ T12] R10: dffffc0000000000 R11: fffff52000022ec5 R12: ffff88804263b268 [ 149.933840][ T12] R13: ffff888042638e80 R14: dffffc0000000000 R15: 0000000000000c80 [ 149.942989][ T12] FS: 0000000000000000(0000) GS:ffff8881260cf000(0000) knlGS:0000000000000000 [ 149.952471][ T12] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 149.959144][ T12] CR2: 00007fcbc45edd58 CR3: 000000002c33a000 CR4: 00000000003526f0 [ 149.967194][ T12] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 149.975191][ T12] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 149.983567][ T12] Call Trace: [ 149.986956][ T12] [ 149.989932][ T12] ieee80211_ibss_work+0xde7/0x1060 [ 149.995189][ T12] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 150.000967][ T12] ? ieee80211_iface_work+0xf39/0xfe0 [ 150.006711][ T12] ? rcu_is_watching+0x15/0xb0 [ 150.011533][ T12] cfg80211_wiphy_work+0x2dc/0x460 [ 150.019449][ T12] ? process_scheduled_works+0x9ec/0x17a0 [ 150.025216][ T12] process_scheduled_works+0xadb/0x17a0 [ 150.031925][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 150.038313][ T12] worker_thread+0x8a0/0xda0 [ 150.042964][ T12] kthread+0x70e/0x8a0 [ 150.047117][ T12] ? __pfx_worker_thread+0x10/0x10 [ 150.052248][ T12] ? __pfx_kthread+0x10/0x10 [ 150.057319][ T12] ? __pfx_kthread+0x10/0x10 [ 150.061932][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 150.067479][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 150.072732][ T12] ? __pfx_kthread+0x10/0x10 [ 150.077450][ T12] ret_from_fork+0x4b/0x80 [ 150.081901][ T12] ? __pfx_kthread+0x10/0x10 [ 150.086580][ T12] ret_from_fork_asm+0x1a/0x30 [ 150.091376][ T12] [ 150.094460][ T12] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 150.101740][ T12] CPU: 0 UID: 0 PID: 12 Comm: kworker/u8:0 Not tainted 6.15.0-rc3-syzkaller-00109-gf73f05c6f711 #0 PREEMPT(full) [ 150.113728][ T12] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 04/19/2025 [ 150.123809][ T12] Workqueue: events_unbound cfg80211_wiphy_work [ 150.130059][ T12] Call Trace: [ 150.133360][ T12] [ 150.136310][ T12] dump_stack_lvl+0x99/0x250 [ 150.140938][ T12] ? __asan_memcpy+0x40/0x70 [ 150.145551][ T12] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.150866][ T12] ? __pfx__printk+0x10/0x10 [ 150.155481][ T12] panic+0x2db/0x790 [ 150.159433][ T12] ? __pfx_panic+0x10/0x10 [ 150.163876][ T12] ? show_trace_log_lvl+0x4fb/0x550 [ 150.169105][ T12] ? ret_from_fork_asm+0x1a/0x30 [ 150.174075][ T12] __warn+0x31b/0x4b0 [ 150.178070][ T12] ? ieee80211_request_ibss_scan+0x82e/0x8b0 [ 150.184071][ T12] ? ieee80211_request_ibss_scan+0x82e/0x8b0 [ 150.190059][ T12] report_bug+0x2be/0x4f0 [ 150.194403][ T12] ? ieee80211_request_ibss_scan+0x82e/0x8b0 [ 150.200403][ T12] ? ieee80211_request_ibss_scan+0x82e/0x8b0 [ 150.206410][ T12] ? ieee80211_request_ibss_scan+0x830/0x8b0 [ 150.212484][ T12] handle_bug+0x84/0x160 [ 150.216743][ T12] exc_invalid_op+0x1a/0x50 [ 150.221252][ T12] asm_exc_invalid_op+0x1a/0x20 [ 150.226104][ T12] RIP: 0010:ieee80211_request_ibss_scan+0x82e/0x8b0 [ 150.232699][ T12] Code: e8 87 c5 f7 f6 eb 05 e8 80 c5 f7 f6 b8 ea ff ff ff e9 fb f8 ff ff e8 71 c5 f7 f6 90 0f 0b 90 e9 bb f8 ff ff e8 63 c5 f7 f6 90 <0f> 0b 90 eb dd 48 c7 c1 50 ed 7e 8f 80 e1 07 80 c1 03 38 c1 0f 8c [ 150.252306][ T12] RSP: 0018:ffffc900001178a0 EFLAGS: 00010293 [ 150.258380][ T12] RAX: ffffffff8ac7f81d RBX: 0000000000000000 RCX: ffff88801b685a00 [ 150.266349][ T12] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 150.274321][ T12] RBP: 0000000000000001 R08: 0000000000000000 R09: 1ffff92000022ec4 [ 150.282292][ T12] R10: dffffc0000000000 R11: fffff52000022ec5 R12: ffff88804263b268 [ 150.290262][ T12] R13: ffff888042638e80 R14: dffffc0000000000 R15: 0000000000000c80 [ 150.298234][ T12] ? ieee80211_request_ibss_scan+0x82d/0x8b0 [ 150.304243][ T12] ieee80211_ibss_work+0xde7/0x1060 [ 150.309457][ T12] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 150.315114][ T12] ? ieee80211_iface_work+0xf39/0xfe0 [ 150.320493][ T12] ? rcu_is_watching+0x15/0xb0 [ 150.325279][ T12] cfg80211_wiphy_work+0x2dc/0x460 [ 150.330401][ T12] ? process_scheduled_works+0x9ec/0x17a0 [ 150.336136][ T12] process_scheduled_works+0xadb/0x17a0 [ 150.341714][ T12] ? __pfx_process_scheduled_works+0x10/0x10 [ 150.347722][ T12] worker_thread+0x8a0/0xda0 [ 150.352338][ T12] kthread+0x70e/0x8a0 [ 150.356418][ T12] ? __pfx_worker_thread+0x10/0x10 [ 150.361536][ T12] ? __pfx_kthread+0x10/0x10 [ 150.366134][ T12] ? __pfx_kthread+0x10/0x10 [ 150.370727][ T12] ? _raw_spin_unlock_irq+0x23/0x50 [ 150.375935][ T12] ? lockdep_hardirqs_on+0x9c/0x150 [ 150.381154][ T12] ? __pfx_kthread+0x10/0x10 [ 150.385748][ T12] ret_from_fork+0x4b/0x80 [ 150.390168][ T12] ? __pfx_kthread+0x10/0x10 [ 150.394762][ T12] ret_from_fork_asm+0x1a/0x30 [ 150.399545][ T12] [ 150.402872][ T12] Kernel Offset: disabled [ 150.407196][ T12] Rebooting in 86400 seconds..