last executing test programs: 3.786626859s ago: executing program 3 (id=180): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000740)=ANY=[@ANYBLOB="4400000010000304000000000000000000027400", @ANYRES32, @ANYBLOB="0000000000000000240012800b00010062726964676500001400028006002700a1206b"], 0x44}, 0x1, 0x0, 0x0, 0x40880}, 0x0) 3.584009893s ago: executing program 3 (id=186): close(0xffffffffffffffff) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$alg(0x26, 0x5, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ipvs(0x0, 0xffffffffffffffff) socket$inet6(0xa, 0x2, 0x0) r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) openat$cgroup_subtree(r1, 0x0, 0x2, 0x0) openat$cgroup_type(r0, 0x0, 0x2, 0x0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socket$kcm(0x2, 0x200000000000001, 0x106) socket$nl_generic(0x10, 0x3, 0x10) syz_init_net_socket$nfc_llcp(0x27, 0x2, 0x1) socket$rds(0x15, 0x5, 0x0) r2 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r2, 0x10e, 0xc, &(0x7f0000000180)={0x6}, 0x10) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="300000001a00010000000000000000001c000000000000000000000014", @ANYRES8=0x0, @ANYRES32=r2], 0x30}, 0x1, 0x0, 0x0, 0x40004050}, 0x0) 3.347760728s ago: executing program 3 (id=190): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r1, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r1, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r1, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) sendto$inet6(r1, &(0x7f00000001c0)="a6e2976b5c4383036d32dadd2e144d8645ca8d1b230e105614396838da83c754887e7bea2f35d4ea667817d90d532af065f2e398dd9081ea16f8b371a202a6f9e505bbc964a0d3880bf0104a0a0a2f0d311efee1637e85a0125b38f961918f99bf9c2c146e42327f178dc2b3d4936e7f7f0a79f74ba464d83ab41742d11867", 0x7f, 0x840, 0x0, 0x0) mmap(&(0x7f0000ffb000/0x4000)=nil, 0x4000, 0x8, 0x13, r1, 0x98aa2000) ioctl$TUNSETIFF(r0, 0x400454ca, 0x0) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) syz_init_net_socket$llc(0x1a, 0x0, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000400)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3c000000120a09000000000000000000020000000900020073797a310000000008000440000000000900010073797a30000000000800034000000005"], 0x64}, 0x1, 0x0, 0x0, 0x890}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r6 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="fc0000001900674c0000000000000000e0000001000000000000000000000000e000000200000000000000000000000000000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="0000000000000000000000000000400000000000000000000000000000000000000000000000000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000044000500000000000000000000000000000000000000000033"], 0xfc}, 0x1, 0x0, 0x0, 0x4000844}, 0x0) r7 = socket$inet6(0xa, 0x1, 0x0) setsockopt$inet6_buf(r7, 0x29, 0x39, &(0x7f0000e86000)="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", 0x118) connect$inet6(r7, &(0x7f0000000080)={0xa, 0x4e20, 0x2, @rand_addr=' \x01\x00', 0x2}, 0x1c) syz_genetlink_get_family_id$fou(&(0x7f0000000640), r2) sendmsg$FOU_CMD_GET(r2, &(0x7f0000000700)={&(0x7f0000000600), 0xc, &(0x7f00000006c0)={0x0}}, 0xc000) sendmsg$NFNL_MSG_CTHELPER_NEW(r4, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000180)={&(0x7f00000002c0)={0xbc, 0x0, 0x9, 0x301, 0x0, 0x0, {0x1, 0x0, 0x1}, [@NFCTH_TUPLE={0x10, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}]}, @NFCTH_POLICY={0xc, 0x4, 0x0, 0x1, {0x8, 0x1, 0x1, 0x0, 0x4}}, @NFCTH_TUPLE={0x8c, 0x2, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @dev={0xfe, 0x80, '\x00', 0x17}}, {0x14, 0x4, @empty}}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @mcast2}, {0x14, 0x4, @mcast2}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x11}}]}]}, 0xbc}, 0x1, 0x0, 0x0, 0x4}, 0x44040) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x16, 0x6, &(0x7f0000000000)=ANY=[@ANYBLOB="b40000000000000071115300000000008510000002000000850000008800000095000000000000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x2, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x70) sendmsg$nl_route_sched(r2, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000004400)=@newtfilter={0x8b0, 0x2c, 0xd27, 0x30bd29, 0x25dfdc00, {0x0, 0x0, 0x0, r5, {0x0, 0x4}, {}, {0x8}}, [@filter_kind_options=@f_matchall={{0xd}, {0x87c, 0x2, [@TCA_MATCHALL_ACT={0x878, 0x2, [@m_police={0x874, 0x1, 0x0, 0x0, {{0xb}, {0x848, 0x2, 0x0, 0x1, [[@TCA_POLICE_RATE={0x404, 0x2, [0x1ff, 0x3, 0x10000, 0x81, 0x7f, 0xfffffffb, 0x4, 0x2, 0xffffffc0, 0x5, 0x2234, 0x7f, 0x81b, 0x800, 0x8, 0x0, 0x3, 0x7ed53619, 0x1, 0x2, 0x9644, 0x4, 0x58b, 0x85a, 0x3ff, 0x46, 0x2, 0x1, 0x1, 0x80000000, 0x10001, 0x790, 0x5, 0xab2, 0xfffffff9, 0x1a77, 0x9, 0x3, 0x400, 0x63c, 0x4, 0xffffffff, 0x1, 0x5, 0x1, 0x5b1f, 0x7b0, 0x7, 0x100, 0x6, 0xd, 0xff, 0x3, 0x10000, 0x6, 0x6b7, 0x1ff, 0x80, 0x4, 0x7, 0x3, 0xa14, 0x3, 0x2, 0x80000000, 0x81, 0x7, 0x8, 0x5, 0x10001, 0xf7, 0x3, 0xfffffff9, 0x9, 0x4, 0x8, 0xfff, 0x3, 0x1, 0x6, 0x7, 0x0, 0x100, 0xc0000000, 0x6, 0x6, 0x6, 0x8, 0x80000001, 0x8, 0x1d24, 0x2, 0x9, 0x0, 0x7f, 0x7, 0x63c, 0xff, 0x24, 0x5, 0x7, 0x6, 0x7a, 0x3ec, 0x0, 0x7, 0x470, 0x7f, 0x6, 0x0, 0x1, 0x0, 0x4, 0x9, 0x61, 0x200, 0x6, 0x2, 0x2, 0x800, 0x10001, 0x8, 0x7, 0xf, 0xda56, 0x80000000, 0x80, 0x2f0cb955, 0x7, 0xfed, 0xf, 0x6ae, 0x2, 0x1, 0x9, 0x8001, 0x0, 0xec000, 0x0, 0x1, 0x2, 0xfffffffb, 0x7, 0x8, 0x4, 0x1, 0xffffcf1b, 0x282, 0x5517bc7b, 0x3, 0x4, 0xb6b, 0x5, 0x0, 0xad, 0x9, 0x6, 0x10, 0x9, 0x8, 0x7ffffffd, 0x0, 0x74, 0x2, 0x7fffffff, 0x0, 0xa, 0x6, 0xffffffff, 0x8, 0x2, 0x7, 0x7f, 0x5, 0x3, 0xa, 0x1, 0x0, 0x9, 0x300, 0x5, 0x3, 0x6, 0xffffffff, 0xffb, 0xff, 0x5, 0x8, 0x3, 0xfff, 0x5, 0xfca, 0x399d, 0x6, 0x8ab6, 0x18000, 0x2, 0xfffffff9, 0x2, 0x2, 0x11, 0x5, 0x200, 0xac, 0xf, 0xd05, 0x9a2ce73, 0x4, 0x6, 0xe074, 0x6b10, 0x5, 0x1, 0x6, 0xb, 0xa26, 0xaf6, 0x0, 0xec, 0x8, 0xde16, 0xc418, 0xffffffff, 0xffffffff, 0x9, 0x400, 0x1, 0x5, 0x354d, 0x5, 0x2, 0x1, 0x7, 0x1, 0x177, 0x7, 0x3, 0x80, 0x5, 0x8, 0xfffffffb, 0x9, 0xe7b, 0x0, 0x7, 0x42bf, 0x10000, 0x9, 0x9, 0x6, 0x4b75, 0x80000001, 0x1000, 0x5915, 0x10001, 0x1]}], [@TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1000, 0x4, 0xec2, 0x6, 0x8, 0x400, 0x5, 0x1, 0x7, 0x470, 0x487, 0x100, 0xa99, 0xffffff01, 0x5, 0x37f, 0x9, 0x6, 0x3, 0x3, 0x800, 0xd2f5, 0x40, 0x4, 0x4, 0x5, 0x7, 0xe, 0x2, 0x8, 0x101, 0xffffffff, 0x2, 0x10000, 0xa6, 0x3, 0x10000, 0x5, 0x4, 0x0, 0x3, 0x0, 0xd, 0x8000, 0x98, 0x8, 0x6, 0x9, 0x1000, 0xb3000, 0xf, 0x3, 0x9, 0xb4, 0x94d, 0x9, 0x8, 0x6, 0x100, 0xec0, 0xffff, 0x4, 0x2, 0x3ff, 0x3e, 0xb828, 0x0, 0x0, 0x365, 0x8, 0x8, 0x8000f, 0x1, 0xfffffffe, 0xfffffff6, 0x93, 0x7ff, 0x92, 0x0, 0x7, 0xfffffffc, 0x7ff, 0x9, 0x2, 0x0, 0x2, 0x8, 0x4, 0x3, 0x9, 0xc, 0xfffffffc, 0x3, 0x1, 0x400, 0x100000, 0x7f, 0x2, 0x8, 0x4, 0x6, 0x4, 0x7, 0xfffffffa, 0x101, 0xadd9, 0x1, 0x0, 0x7, 0x7fffffff, 0x2, 0x4, 0x0, 0x5, 0x4, 0x3, 0x8, 0x9, 0x6, 0x6, 0xe, 0xb, 0x3, 0x7f, 0xffff, 0x401, 0x1685, 0xa252, 0x2, 0x200, 0x3, 0x1, 0x400, 0xfffffffb, 0xfffffffc, 0x1000, 0x7ff, 0x1, 0x1f6, 0x751, 0x7, 0x40000000, 0x4, 0xffffdbb7, 0x50, 0xf, 0xf, 0xe, 0x3, 0x0, 0x81, 0xfff80000, 0x7a7, 0x1, 0x6, 0x3, 0x8, 0x7, 0x5, 0x2, 0x0, 0x4e8, 0x80, 0x3, 0x8, 0x5, 0x0, 0x5, 0x7fff, 0x7, 0x8, 0x6a4941c5, 0x2ea567b4, 0x8, 0x80000000, 0x6, 0x40, 0x2, 0x9, 0x8, 0x3, 0x0, 0x1, 0x0, 0x0, 0xd3bed341, 0x691f, 0x0, 0x2, 0x9, 0x6, 0x0, 0x1ff, 0x3, 0x3, 0x6, 0x5fc8462f, 0x0, 0x7, 0xffff, 0xfffffffc, 0x5, 0x0, 0xb9a6, 0x522, 0x2, 0x2, 0x900, 0x8, 0xbb99, 0xb8000000, 0x8, 0x3, 0xc0a1, 0x5, 0x8, 0x7, 0x59, 0x9, 0x2, 0x101, 0x5f502dc7, 0x7, 0x0, 0x4, 0x6, 0x80000001, 0x3, 0xffffff97, 0x2, 0xfff, 0x1, 0x40, 0x8, 0x3, 0x710, 0x8, 0x1, 0xfffff339, 0x3, 0x8001, 0x1, 0x8001, 0x9, 0x8, 0xfffffffa, 0x4, 0x9, 0x3, 0xe, 0x10000, 0x9, 0x9, 0x7, 0xfffffff8]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xfffffe00, 0x5, 0x5, 0x1, 0xdbec, {0x8, 0x0, 0xb55, 0x5, 0x7, 0x5}, {0x6, 0x0, 0xd, 0x5, 0x1, 0x5d17}, 0x2, 0x0, 0x6}}]]}, {0x4}, {0xc}, {0xc, 0x8, {0x0, 0x3}}}}]}]}}]}, 0x8b0}, 0x1, 0x0, 0x0, 0x10}, 0x0) 2.392506385s ago: executing program 3 (id=206): r0 = socket$alg(0x26, 0x5, 0x0) r1 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r3 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r3, 0x8914, &(0x7f0000000000)) r4 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r1, 0x8914, &(0x7f0000000000)) setsockopt$ax25_SO_BINDTODEVICE(r4, 0x101, 0x19, &(0x7f0000000180)=@netrom={'nr', 0x0}, 0x10) bind$alg(r0, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb(blowfish)\x00'}, 0x58) r5 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000900)=ANY=[@ANYBLOB="240000001e00210000000000fcdbdf250a000000050000000000000008000d80"], 0x24}}, 0x0) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5", 0x4) r6 = accept4(r0, 0x0, 0x0, 0x80800) recvmsg(r6, 0x0, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f0000000180), r6) getsockopt$IP_VS_SO_GET_INFO(r6, 0x0, 0x481, &(0x7f0000000140), &(0x7f00000001c0)=0xc) r7 = syz_genetlink_get_family_id$tipc(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_CMD_SHOW_PORTS(r6, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x1c, r7, 0x800, 0x70bd29, 0x25dfdbfe, {}, ["", "", "", "", "", "", "", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000010}, 0x810) getsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r6, 0x84, 0x76, &(0x7f0000000200)={0x0, 0x1}, &(0x7f0000000240)=0x8) 2.179645869s ago: executing program 2 (id=208): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000680)={0x10, 0x4, 0x0, &(0x7f00000000c0)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x4, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000004c0)=ANY=[@ANYBLOB="3c0200001900010000ffea0010000000e0000001000000000000000000000000ac1414bb00000000000000000000000000000000ffff00000a00800000000000", @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000001000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000084010500ac1414aa000000000000000000000000000000003c00000000000000ffffffff0000000000000000000000000000000000000000000000000000000000000000ac1414aa000000000000000000000000000000003c00000000000000fe80000000000000000000000000000000000000000000000008000000000000000000007f000001000000000000000000000000000000003200000000000000e00000010000000000000000000000000000800003030000000000000000000000000000ff0100000000000000000000000000010000000033"], 0x23c}}, 0x0) 2.082707631s ago: executing program 3 (id=209): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x8004}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000600)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003801400010073797a5f74756e00000000000000000014000000110001"], 0x80}, 0x1, 0x0, 0x0, 0x20000080}, 0x4000) syz_emit_ethernet(0x32, &(0x7f00000007c0)={@local, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}, @val={@val={0x88a8, 0x5, 0x0, 0x4}, {0x8100, 0x2, 0x1, 0x3}}, {@ipv4={0x800, @igmp={{0x5, 0x4, 0x3, 0x18, 0x1c, 0x65, 0x0, 0x3, 0x2, 0x0, @rand_addr=0x64010101, @private=0xa010102}, {0x16, 0x4, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}}}}}}, 0x0) 2.038519661s ago: executing program 2 (id=210): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000080)={r0}, 0x4) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x11, &(0x7f0000000200)=@framed={{0x18, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7ed1}, [@call={0x85, 0x0, 0x0, 0xe}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xffffffff}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={r1, 0x0, 0xe, 0x0, &(0x7f0000000100)="b34715ecd04550d3abc89b6f7bec", 0x0, 0xfffdfffc, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.977112823s ago: executing program 4 (id=212): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x8, 0xfa, &(0x7f00000007c0)=""/250}, 0x94) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, 0x0, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) sendmmsg(r8, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@ieee802154={0x24, @none={0x0, 0xffff}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000400)="274f49d7dcc3a2fefb972f34cef2651de6929970cd972f9660127d3869a4796cc9b330fb91fdf7dcdd343c324dec1d4d5fc28383cd3012e19b2394fe11989c3ead6620072c03b0deffbef8bfd7428e0aaa5855032e3b401e97a8eb5610c4fa5cc0", 0x61}, {&(0x7f0000000640)="6f0ed9abb789e1364b5d8a38cbf9e2c1a51ea99db9809fcfe9fda1f93ccdaf0c6f511d318c0ca5d88d86406c6d5e5f2809a90066f9793d69d45a68501b1406211e6b7fac044e50fc87ab67d7e051688517f5f682f080a0752e883ac1efda7302685718647d13cfc6b5fdb459efe245b08ed9bb1b988c1759926bad589c81d09f586cb16c70db82e24782a4d93c7a8a6920dc8b36487cb286bd15aa2e3e622c96b9010bcf9cd83ca50229ed1434a78f34886ffc750b3e8f29d5334f3b0c06e2eb219b9de5a181ab4ff88a538029a67526c3aad8b7321d5f50468afa43", 0xdc}], 0x2}}, {{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000b80)=[{0x68, 0x110, 0x2, "72b7361ef7f6907a7dda94aab1313c7a54d500fefa3e1501bb50ae52e33a5b372c9d50170ca77f4d1688ffb3fc4eb0f6ab8ad252e8be85faf083225d597034d838c7e3a3ff48d737337c785a9b357301da5b6305d67719"}, {0x48, 0x103, 0xfffffffa, "974f735b9f1eeba8569f58e50e3e6107fbb2ea80fe24c1bb12168d1ef08e39ebde5b74bcc3fca500bf2e50b98273bcc846f8"}, {0x98, 0x104, 0x7, "11cb84e7729cb5d740df96b895de0494a5313787bb293e5502b4b0c534727c997f7e55f8f1afddde1d4ea0a6b9e326ee4fc1aec07018d027b82be263f7aeeb6dcc164442e7a3a491846c5df89f5b924b1d40a2967159c900916e1435d7c4adfc810691673a448391d88640418ae84c5c13607cf7736f94ffd21463f53cae8f39046fa29b345b"}], 0x148}}], 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000020000210d0000aaa8fa017242ba9380d412000000000000002900000003000000", 0xeb0e7a7d4c6f0553) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r10, 0x21eae}}, 0x20}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r11, 0x0, 0x0) 1.957485953s ago: executing program 3 (id=213): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)={0x60, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0x14, 0x7, 0x0, 0x1, [@IPSET_ATTR_HASHSIZE={0x8}, @IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0x1}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x12, 0x3, 'hash:net,port\x00'}]}, 0x60}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000300)='blkio.bfq.time_recursive\x00', 0x7a44, 0x1700) mmap(&(0x7f0000001000/0x3000)=nil, 0x3000, 0x2000005, 0x13, r2, 0x607d8000) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector}, 0x94) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)={0x54, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2}, [@IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_DATA={0x2c, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @broadcast}}, @IPSET_ATTR_PROTO={0x5, 0x7, 0x84}, @IPSET_ATTR_PORT={0x6, 0x4, 0x1, 0x0, 0x4e22}, @IPSET_ATTR_IP_TO={0xc, 0x2, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @loopback}}]}]}, 0x54}, 0x1, 0x0, 0x0, 0x10000082}, 0x80) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, 0x0, 0x800) r4 = bpf$PROG_LOAD(0x5, 0x0, 0x0) close(0xffffffffffffffff) sendmsg$inet(0xffffffffffffffff, 0x0, 0x20000801) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r4, 0x18000000000002a0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x60000000, 0x0, 0x0, &(0x7f0000000000), 0x0}, 0x50) sendmsg$IEEE802154_LLSEC_ADD_DEV(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000010c0)=ANY=[], 0x38}, 0x4, 0x700000000000000}, 0x0) 1.843998146s ago: executing program 2 (id=214): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x4048801) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x40000) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x10}, 0x0) unshare(0x6a040000) socket$nl_netfilter(0x10, 0x3, 0xc) bpf$MAP_CREATE_CONST_STR(0x0, 0x0, 0x0) unshare(0x600) r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x80000000000002, &(0x7f00000004c0)=0x79, 0x4) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, 0x0, 0x0) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) sendmmsg$inet(r0, &(0x7f0000001c00)=[{{0x0, 0x0, &(0x7f0000000900)=[{&(0x7f0000000ac0)="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", 0x98e}, {&(0x7f0000000500)}, {0x0}], 0x3}}, {{&(0x7f0000000940)={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x1, 0x0}}, 0x10, 0x0, 0x0, &(0x7f0000001ac0)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x7}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x8}}], 0x30}}], 0x2, 0x34040050) 1.748756227s ago: executing program 4 (id=216): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0xc, 0xe, &(0x7f0000000a80)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0x2ca}, 0x48) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000080)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000040)="b90103600040f000009e0ff00800", 0x0, 0x104, 0x6000000000000000, 0xcc, 0x0, &(0x7f0000000400)="9209558f0c5fb25cd57f98113135c3171b8b331fbc04f0e6955a796ff8e3aae3cac46cec3030dfc999058aea01f0e6dcf2f9d480d328655aca003927bd50ed49d4843c8a0a2a4b26ceb747947200bd644c85e7a8a7d7cfce840c02a7d69c9e0bca410f64d43290abbbf3131e1fa8bd8c3e5f19d5a491d3d4c1a0fe47de9eebaf073ac3da6256bdb681d18fbd607c9b0d710442bcf78bc36fd3c035812bde582a262bff0e4d6181c818fccf542868c6e602d97bea23a101955dc76bcc984142ab305387aa348566d688edd291", 0x0}, 0x50) 1.539915231s ago: executing program 4 (id=218): r0 = socket$inet6(0xa, 0x802, 0x0) setsockopt$inet6_buf(r0, 0x29, 0x39, &(0x7f0000000040)="ff02040000ffffffffffffffff1f2be82db1af0000000000", 0x18) recvmmsg(r0, &(0x7f0000002180)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000000480)=""/200, 0xc8}, 0xf51}], 0x1, 0x40002105, 0x0) connect$inet6(r0, &(0x7f0000000240)={0xa, 0x6e23, 0xfffffdff, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x9}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000001840), 0x3b, 0x0) 1.356026644s ago: executing program 4 (id=221): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) bind$netlink(r0, &(0x7f00000000c0)={0x10, 0x0, 0x25dfdbfe, 0x8822d55593a217d}, 0xc) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000680)=@newsa={0x150, 0x10, 0x713, 0x0, 0x25dfdbfc, {{@in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', @in=@dev={0xac, 0x14, 0x14, 0x3d}, 0x0, 0x0, 0x4c21, 0x2, 0x0, 0x0, 0x0, 0x5c}, {@in6=@private1, 0xfe, 0x32}, @in6=@dev={0xfe, 0x80, '\x00', 0x1b}, {0x0, 0x0, 0x0, 0xe, 0x0, 0xe, 0x0, 0x543}, {0x4, 0x7fffffffffffffff}, {}, 0x70bd28, 0x3500, 0xa, 0x4, 0x0, 0x20}, [@algo_aead={0x60, 0x12, {{'rfc4106(gcm(aes))\x00'}, 0xa0, 0x40, "217d66d38547aa140db8a200000000c538c7cb7a"}}]}, 0x150}, 0x1, 0x0, 0x0, 0x880}, 0x0) 1.355702034s ago: executing program 2 (id=222): r0 = socket$kcm(0x21, 0x2, 0x2) r1 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0xa2f01, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000002020000000000000000100095"], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x8, '\x00', 0x0, @fallback=0x2e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFNL_MSG_ACCT_DEL(r4, &(0x7f0000000580)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000540)={&(0x7f0000000440)={0x20, 0x3, 0x7, 0x101, 0x0, 0x0, {0xa, 0x0, 0x4}, [@NFACCT_BYTES={0xc, 0x3, 0x1, 0x0, 0x812}]}, 0x20}}, 0x8801) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000004c0)={'syzkaller1\x00', 0x0}) r6 = bpf$BPF_LINK_CREATE_XDP(0x1c, &(0x7f0000000980)={r2, r5, 0x25, 0x4, @val=@uprobe_multi={0x0, 0x0, 0x0, 0x8}}, 0x40) r7 = socket$inet(0xa, 0x801, 0x84) connect$inet(r7, &(0x7f0000004cc0)={0x2, 0x0, @remote={0xac, 0x14, 0xffffffffffffffff}}, 0x10) listen(r7, 0x8) r8 = accept4(r7, 0x0, 0x0, 0x0) sendto$inet(r8, &(0x7f00000002c0)="cc", 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_DEFAULT_SNDINFO(r8, 0x84, 0x22, &(0x7f0000000580)={0x2, 0x0, 0x6, 0x3}, 0x10) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000b80)=@o_path={&(0x7f0000000a80)='./file0\x00', 0x0, 0x4018, r6}, 0x18) pipe(&(0x7f0000000080)={0xffffffffffffffff}) vmsplice(r10, &(0x7f0000001280)=[{&(0x7f0000001180)="830d", 0x2}], 0x1, 0x0) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000c80)=@bpf_tracing={0x1a, 0x25, &(0x7f0000000780)=@framed={{0x18, 0x0, 0x0, 0x0, 0xfffffffb, 0x0, 0x0, 0x0, 0x8000}, [@ringbuf_output={{}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x5}}, @ringbuf_query, @map_val={0x18, 0x8, 0x2, 0x0, r6}, @btf_id={0x18, 0x9, 0x3, 0x0, 0x2}, @jmp={0x5, 0x1, 0xc, 0x0, 0x4, 0x4, 0x8}, @snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x7}}, @map_val={0x18, 0x1, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x5}, @func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}]}, &(0x7f00000008c0)='GPL\x00', 0xffffff00, 0x0, 0x0, 0x41100, 0x48, '\x00', 0x0, 0x1a, 0xffffffffffffffff, 0x8, &(0x7f0000000900)={0x0, 0x4}, 0x8, 0x10, &(0x7f0000000600)={0x1, 0xe, 0x7, 0x4}, 0x10, 0x272df, r2, 0x6, &(0x7f0000000bc0)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, r9, r10, r3], &(0x7f0000000c00)=[{0x5, 0x3, 0x10, 0xb}, {0x5, 0x3, 0x6, 0x1}, {0x1, 0x2, 0x9, 0xa}, {0x4, 0x2, 0x2, 0x3}, {0x0, 0x4, 0x10, 0x6}, {0x0, 0x4, 0xf, 0x7}]}, 0x94) sendto$inet6(r8, &(0x7f0000000200)='x', 0x1, 0x0, 0x0, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r8, 0x84, 0x7b, &(0x7f0000000140)={0x0, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f0000001400)={0x0, 0x2, 0x1}, 0x8) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r8, 0x84, 0x7c, &(0x7f00000005c0)={0x0, 0x2, 0x47a}, 0x39) write$tun(r1, &(0x7f0000000340)=ANY=[], 0x4b) ioctl$TUNSETSTEERINGEBPF(r1, 0x800454e0, &(0x7f0000000100)=r2) sendmsg$kcm(r0, &(0x7f0000000040)={&(0x7f0000000080)=@rxrpc=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @local}}, 0x80, &(0x7f0000000000)=[{&(0x7f0000000ac0)="ee", 0x1}], 0x1, &(0x7f0000000200)=ANY=[@ANYBLOB="180000000000000010010000010000007d95df16a39b1a6c900000000000000001000005040500002b24ec10064b6f2f000000fb71658bda99b49720fdda5b00000009860f5878c37ffe36e1165814d435be5b317c6c8189767d2f97879f07a515bb7c169f46933d9338f4ab04834e6f618988c5944741afe403461323110f62055394412158e7a3adb164d641aa40d4ab077fe34232aa8b319d7666d0998a61d7da0c86d70000001010", @ANYRESOCT=r1, @ANYBLOB="8bfb15a558ffe15c6869234fef05d175131de0f75233c9040270ea005efc4946fcd09c26e6b6ceca9d17eaf6e496761d55cfbce6d58b8eb5c1723deee5db6f7a7e53ebf3f74132ac6260ebb7484c5466875940999ebf8bc5d125e34e975b45659032c2a4670716567b9bf340e87de715166261240ebab3b2a38e5865755bb058d5307ba64227afc568ab7f33841c1c5dc5447d9ddca083a0322b22ce54214bd3a081f3946e48b9f18ec2d73b6f"], 0x10b8}, 0x0) r11 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r12, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB='@\x00\x00\x00', @ANYRES16=r11, @ANYBLOB="01000cbd701004f7ffff04000000080009"], 0x40}, 0x1, 0x0, 0x0, 0x40811}, 0x20) recvmsg$kcm(r0, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f00000004c0)=""/43, 0x2b}, 0x202) 1.355560634s ago: executing program 0 (id=223): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000380)=ANY=[], 0x8) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendmmsg$inet6(r0, &(0x7f00000000c0)=[{{0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000140)="827d", 0x2}], 0x1}}], 0x1, 0x4400c800) sendto$inet6(r0, &(0x7f0000000180)='\x00\x00\x00\x00\x00\x00', 0x6, 0x3b00, 0x0, 0x0) 1.229834157s ago: executing program 1 (id=224): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f0000000180)={'batadv0\x00', 0x0}) r2 = syz_genetlink_get_family_id$batadv(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_HARDIF(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000100)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="2fd902000000fddbc1251000000008000600", @ANYRES32, @ANYBLOB="08000300", @ANYRES32=r1], 0x34}, 0x1, 0x0, 0x0, 0x2000c8d4}, 0x42054) 1.215646127s ago: executing program 0 (id=225): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r1, 0x400448ca, 0x0) bind$bt_hci(r1, &(0x7f0000000040)={0x1f, 0x0, 0x1}, 0x6) write$bt_hci(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="01422006020607f6"], 0xa) bind$bt_hci(r1, &(0x7f00000019c0)={0x1f, 0x3, 0x2}, 0x6) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b80)=ANY=[@ANYBLOB="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"], 0x164}, 0x1, 0x0, 0x0, 0x4000819}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1b, 0x5, &(0x7f00000009c0)=ANY=[@ANYBLOB="180200000100000000000000010000008500000041080000850000007d00000095000000000000009fcc45f3b2cab310f6028175fbb8f3e2042618e78255412f41ed430274bf31ccfa932ab247b78b0923a1002d295089218644f5381193d9d466bd8af73222ddc25ed9a2b4a65a0f71f0c6d3ee4f776ae4594624213cd4c41cb751481dbc67c7daada8adc7da9a898fdb709e3ffad0186a7e062e0119bfb291eb602334abfd5425dd5ad19ea5de9073e9549dd16a455e4027f5d841deb382031c703dfd8ce84465832fa06d8f44810268b36ea9999c61ee7fe62cfcf069d74bce4054e0d1547390d6"], &(0x7f0000000340)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1}, 0x94) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f00000000c0)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000280)=ANY=[@ANYBLOB="480000001c00110c0000001400000f0007000000", @ANYRES32=r4, @ANYBLOB="800202000a000200577f00"], 0x48}}, 0x0) setsockopt$inet_tcp_TCP_CONGESTION(0xffffffffffffffff, 0x6, 0xd, &(0x7f0000000100)='hybla\x00', 0x6) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000480)=ANY=[@ANYBLOB="580000000008010200000000000000000200ffff0600024022eb000005000300ffff00000900010073797a3000000000260004"], 0x58}, 0x1, 0x0, 0x0, 0x20000015}, 0x40) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r6, &(0x7f0000000200), 0x806000) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) socket$kcm(0x2, 0xa, 0x2) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) r8 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) sendmsg$NFT_BATCH(r7, 0x0, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000ac0)=ANY=[@ANYBLOB="00000000bbbbbbbbbbbbaaaaaaaaaa3088a84d008100660086dd6eb3d5f001952fff"], 0x1d7) r9 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000002c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="9feb01001800000000000000a8000000a8000000070000000200000000000009050000000000000000000003000000000400000003000000010000000b0000000000000b030000001000000007000013050000001001000001000000008000001000000001090000000000000900000000800000080000000600000073150000008000000600000000000000d5bf00000500000000000000040000000100000001000080fdffffff0000000000000003000000000100000003000000b5f20000002e612e003000"], &(0x7f00000006c0)=""/237, 0xc7, 0xed, 0x1}, 0x28) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000800)={0x6, 0x1a, &(0x7f00000004c0)=ANY=[@ANYRES8, @ANYRES16=r0, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085200000030000009c700000fcffffff180100002020692500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000e900000085000000060000008520000002000000bf91000000000000b7020000010000008500000084000000b7000000000000009500000000000000"], &(0x7f0000000240)='syzkaller\x00', 0xf7, 0x0, 0x0, 0x40f00, 0x20, '\x00', r4, 0x25, r9, 0x8, &(0x7f0000000440)={0x3, 0x1}, 0x8, 0x10, &(0x7f00000003c0)={0x4, 0x6, 0x5}, 0x10, 0x0, 0x0, 0x2, &(0x7f0000000b00)=[r8, r5, r6, r6, r8, 0xffffffffffffffff, r8, r8, r5], &(0x7f00000007c0)=[{0x5, 0x3, 0x5, 0x4}, {0x0, 0x5, 0x6, 0x3}], 0x10, 0x7}, 0x94) ioctl$FS_IOC_RESVSP(r6, 0x40305829, &(0x7f0000000380)={0x0, 0x0, 0x0, 0xfca2}) sendmsg$IPCTNL_MSG_TIMEOUT_DELETE(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000300)={&(0x7f00000008c0)=ANY=[@ANYBLOB="a84593f64757fb93888d3c0957313bbf1b56eb2fa2f89195caaa21f92eef51a3e0dba1e22f4737ce23dc3bd8789d7b79b0d5b35f467225cdd2bfd024b9e3fde8d445e1e9f3943e951f546e9eb5e1b2d843240946bb6cf0383a8e3a09d5a3bbdf2e55f517231fae6b0a98cc880b4936f5611f6b2728319b151c2d845b55535e637d8e632a760a23f7ec4209957ad0f2c7fa24c9183f2410791a40f6d791432785d61d810e8ef2cfdeb2b1d999e22ffcdda4679d11a7ba23fb5139d34b60bbbc8e4f619b214664aa437c83e0f3e66bba965c0109167e06"], 0x20}, 0x1, 0x0, 0x0, 0xc101}, 0x0) socket$nl_route(0x10, 0x3, 0x0) 991.954921ms ago: executing program 1 (id=226): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x8, 0xfa, &(0x7f00000007c0)=""/250}, 0x94) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) sendmmsg(r8, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@ieee802154={0x24, @none={0x0, 0xffff}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000400)="274f49d7dcc3a2fefb972f34cef2651de6929970cd972f9660127d3869a4796cc9b330fb91fdf7dcdd343c324dec1d4d5fc28383cd3012e19b2394fe11989c3ead6620072c03b0deffbef8bfd7428e0aaa5855032e3b401e97a8eb5610c4fa5cc0", 0x61}, {&(0x7f0000000640)="6f0ed9abb789e1364b5d8a38cbf9e2c1a51ea99db9809fcfe9fda1f93ccdaf0c6f511d318c0ca5d88d86406c6d5e5f2809a90066f9793d69d45a68501b1406211e6b7fac044e50fc87ab67d7e051688517f5f682f080a0752e883ac1efda7302685718647d13cfc6b5fdb459efe245b08ed9bb1b988c1759926bad589c81d09f586cb16c70db82e24782a4d93c7a8a6920dc8b36487cb286bd15aa2e3e622c96b9010bcf9cd83ca50229ed1434a78f34886ffc750b3e8f29d5334f3b0c06e2eb219b9de5a181ab4ff88a538029a67526c3aad8b7321d5f50468afa43", 0xdc}], 0x2}}, {{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000b80)=[{0x68, 0x110, 0x2, "72b7361ef7f6907a7dda94aab1313c7a54d500fefa3e1501bb50ae52e33a5b372c9d50170ca77f4d1688ffb3fc4eb0f6ab8ad252e8be85faf083225d597034d838c7e3a3ff48d737337c785a9b357301da5b6305d67719"}, {0x48, 0x103, 0xfffffffa, "974f735b9f1eeba8569f58e50e3e6107fbb2ea80fe24c1bb12168d1ef08e39ebde5b74bcc3fca500bf2e50b98273bcc846f8"}, {0x98, 0x104, 0x7, "11cb84e7729cb5d740df96b895de0494a5313787bb293e5502b4b0c534727c997f7e55f8f1afddde1d4ea0a6b9e326ee4fc1aec07018d027b82be263f7aeeb6dcc164442e7a3a491846c5df89f5b924b1d40a2967159c900916e1435d7c4adfc810691673a448391d88640418ae84c5c13607cf7736f94ffd21463f53cae8f39046fa29b345b"}], 0x148}}], 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000020000210d0000aaa8fa017242ba9380d412000000000000002900000003000000", 0xeb0e7a7d4c6f0553) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r10, 0x21eae}}, 0x20}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r11, 0x0, 0x0) 916.852192ms ago: executing program 1 (id=227): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={0x0, 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f00000004c0), 0x100, 0x0) close(r3) r4 = socket$unix(0x1, 0x1, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r5, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000380)=@newqdisc={0x4c, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff1, 0xe}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x1c, 0x2, {{0x100, 0x7, 0x6361, 0x5, 0xfffffffd, 0x40000006}}}}]}, 0x4c}, 0x1, 0x0, 0x0, 0x20000001}, 0x0) sendmsg$nl_route_sched(r5, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x70b923, 0x80000, {0x0, 0x0, 0x0, r6, {0x0, 0xe}, {0x2, 0xb}, {0xd, 0xd}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0x6, 0x1d}}]}}]}, 0x48}}, 0x4008000) ioctl$SIOCSIFHWADDR(r3, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 860.514784ms ago: executing program 0 (id=228): r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f00000004c0)={0x26, 'aead\x00', 0x0, 0x0, 'gcm_base(ctr(aes-aesni),ghash-generic)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000280)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r1 = accept4(r0, 0x0, 0x0, 0x800) sendmmsg$alg(r1, &(0x7f0000000040)=[{0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000080)="f78d9ca38fff48f3be52163448412ba8", 0xfffffe3f}, {&(0x7f0000000140)="ebe3a0e9796cfd1647e299f4e376fdba128280b372219d205e81f4a7f71c1926aae1efd7e0054a863f3d5cfe6cb55b5bb9fa6935849e6098ed884e7cb51726b360fbb37b4fe035bbb095873048"}, {&(0x7f00000003c0)="e8700e444d50a969ff67347cff6127e6ef12ee3819271482a4975a52c1ab9b8b4db3945d1032005eabe97b4dc33a47d3a158da988456d30026b433186f53cdcdb93a4722bf306a10470d50f5cb1ece9ead3459bab1cf1538cd0b157653c5e892962c80f158c443e9c6ad7d2a8103ef2f4b93766b9a21501f94c1568b13756b66f74f46cf801704d2da8b96c34070b233af0afcc436712e58ed25e721193af05a045ad3fdc928f02f3dbad19d3e66eebda2e63f3f46ef4511cee26d7b48241847bf9e343ef4674c45e2a085060f11"}], 0x1, &(0x7f0000000380)=[@op={0x18, 0x117, 0x3, 0x1}], 0x18}], 0x1, 0x40800) recvmsg(r1, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) 591.151859ms ago: executing program 4 (id=229): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=ANY=[@ANYBLOB="0900000004000000dd0000000a"], 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x8, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="180000000000000000000000000000008500000022000000180100002020702500000000002020207b0af8ff00000000bfa10000000000000701"], 0x0, 0x0, 0x0, 0x0, 0x41100, 0x54, '\x00', 0x0, @fallback=0x1a, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x40}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000023c0)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="180200009b1aecb60000000000000000850000007500000095"], 0x0}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000400)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000001"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000bc0)={&(0x7f0000000940)='percpu_alloc_percpu\x00', r1}, 0x10) unshare(0x22020600) 590.207579ms ago: executing program 1 (id=230): r0 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) connect$inet6(r0, &(0x7f0000000100)={0xa, 0x0, 0x4, @mcast2={0xff, 0x3}}, 0x1c) setsockopt$inet6_IPV6_HOPOPTS(r0, 0x29, 0x36, &(0x7f0000000340)=ANY=[], 0x8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000080)='bridge0\x00', 0x10) sendto$inet6(r0, &(0x7f0000000180)="826bb66f03ee9a90", 0x5dc, 0x0, 0x0, 0x0) 427.983822ms ago: executing program 4 (id=231): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000380)={'syzkaller0\x00', 0x2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), r2) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x2c2b01, 0x0) close(r4) r5 = socket$unix(0x1, 0x1, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@newqdisc={0x84, 0x24, 0x4ee4e6a52ff56541, 0x70bd28, 0x8000000, {0x0, 0x0, 0x0, r7, {0x0, 0xb}, {0xffff, 0xffff}, {0xfff2}}, [@qdisc_kind_options=@q_netem={{0xa}, {0x54, 0x2, {{0x1000100, 0x7, 0x6361, 0x805, 0x9, 0x6}, [@TCA_NETEM_SLOT={0x2c, 0xc, {0xb0, 0x5, 0x8}}, @TCA_NETEM_LATENCY64={0xc, 0xa, 0x1}]}}}]}, 0x84}, 0x1, 0x0, 0x0, 0x20008050}, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)=@newqdisc={0x32, 0x24, 0x4ee4e6a52ff56441, 0x70bd29, 0x80000, {0x0, 0x0, 0x0, r7, {0x0, 0x11}, {0xffe6, 0xb}, {0xb, 0x4}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x34, 0x2, [@TCA_FQ_PIE_FLOWS={0x8, 0x2, 0xa47c}, @TCA_FQ_PIE_BYTEMODE={0x8, 0xb, 0x1}, @TCA_FQ_PIE_QUANTUM={0x8, 0x7, 0x9}, @TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0x2}, @TCA_FQ_PIE_LIMIT={0x8, 0x1, 0x1}, @TCA_FQ_PIE_ECN_PROB={0x8, 0x9, 0x5f}]}}]}, 0x64}, 0x1, 0x0, 0x0, 0x30004061}, 0x4000000) ioctl$SIOCSIFHWADDR(r4, 0x8922, &(0x7f0000002280)={'syzkaller0\x00', @random="2b0100004ec6"}) 427.820632ms ago: executing program 1 (id=232): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_NEWCHAIN={0x30, 0x3, 0xa, 0x201, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x4}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}]}, @NFT_MSG_DELCHAIN={0x4c, 0x5, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x2000}, [@NFTA_CHAIN_HANDLE={0xc, 0x2, 0x1, 0x0, 0x1}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_HOOK={0x20, 0x4, 0x0, 0x1, [@NFTA_HOOK_DEV={0x14, 0x3, 'veth1_macvtap\x00'}, @NFTA_HOOK_HOOKNUM={0x8, 0x1, 0x1, 0x0, 0x5}]}]}], {0x14}}, 0xc4}}, 0x0) 371.903833ms ago: executing program 0 (id=233): socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$FOU_CMD_DEL(r0, &(0x7f0000000200)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={0x0}, 0x1, 0x0, 0x0, 0x4000010}, 0x801) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0x7, 0x0, 0x0) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r0, &(0x7f00000004c0)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000480)={&(0x7f0000000400)={0x40, r1, 0x1, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MAC={0xa}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x40}}, 0x0) 336.362333ms ago: executing program 2 (id=234): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x38, 0x16, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0xc, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_PRIORITY={0x8, 0x2, 0x1, 0x0, 0x3}]}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x60}}, 0x800) sendmsg$NFT_BATCH(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000440)={{0x14}, [@NFT_MSG_NEWFLOWTABLE={0x48, 0x16, 0xa, 0x801, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}, @NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_HOOK={0x1c, 0x3, 0x0, 0x1, [@NFTA_FLOWTABLE_HOOK_DEVS={0x18, 0x3, 0x0, 0x1, [{0x14, 0x1, 'geneve0\x00'}]}]}]}], {0x14}}, 0x70}}, 0x24040884) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000400003800800014000000000080002400000fbff2b0003801400010067656e65766530"], 0x110}}, 0x0) 203.971876ms ago: executing program 1 (id=235): socket$alg(0x26, 0x5, 0x0) r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'batadv_slave_0\x00'}) r2 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0x10) ioctl$sock_netdev_private(r2, 0x8914, &(0x7f0000000000)) r3 = syz_init_net_socket$ax25(0x3, 0x2, 0xcc) setsockopt$ax25_SO_BINDTODEVICE(r3, 0x101, 0x19, &(0x7f00000001c0)=@bpq0, 0x10) ioctl$sock_netrom_SIOCADDRT(0xffffffffffffffff, 0x890b, &(0x7f0000000000)={0x0, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bpq0, 0x1, 'syz1\x00', @default, 0x1, 0x0, [@null, @default, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @default]}) setsockopt$ax25_SO_BINDTODEVICE(0xffffffffffffffff, 0x101, 0x19, &(0x7f0000000000)=@bpq0, 0xfffffffffffffe1d) ioctl$sock_netdev_private(r0, 0x8914, &(0x7f0000000000)) 178.445106ms ago: executing program 0 (id=236): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000100)=0x1, 0x4) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) bpf$OBJ_GET_MAP(0x7, 0x0, 0x0) connect$inet6(r0, &(0x7f00000001c0)={0xa, 0x4000, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000280)={@in6={{0xa, 0x4e23, 0x4, @dev={0xfe, 0x80, '\x00', 0x2d}}}, 0x0, 0x0, 0x38, 0x0, "0f424a2bc651a9f11381328af8daf6f4bd2827984afeb6b627cea1ba22d1af57aa193c5024c9e8b22a8796a538ed893952a1aa555418ba1b4d0bc0712c028ec32a9bc2fb29b52d39e8626bc90abcc02a"}, 0xd8) setsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000240)='tunl0\x00', 0x10) setsockopt$inet6_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000), 0x4) sendmmsg$inet6(r0, &(0x7f00000038c0)=[{{0x0, 0x0, 0x0}}], 0x1, 0x8000) 175.060757ms ago: executing program 2 (id=237): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r2 = socket$qrtr(0x2a, 0x2, 0x0) ioctl$sock_inet_SIOCSIFFLAGS(r2, 0x8914, &(0x7f0000000000)={'wlan1\x00'}) r3 = socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000580)={0x5, 0x5, 0x0, &(0x7f0000000100)='GPL\x00', 0x8, 0xfa, &(0x7f00000007c0)=""/250}, 0x94) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)={0x24, r4, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x24}}, 0x10) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[], 0x0}, 0x94) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x0, 0x0, 0x0}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_INTERFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)={0x28, r1, 0x5, 0x3, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_MESH_ID={0xa}]}, 0x28}}, 0x0) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r7, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) r8 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r8, &(0x7f0000000040)={0x18, 0x0, {0x3, @random="00ff00", 'bond0\x00'}}, 0x1e) sendmmsg(r8, &(0x7f0000000d80)=[{{0x0, 0x0, 0x0}}, {{&(0x7f0000000300)=@ieee802154={0x24, @none={0x0, 0xffff}}, 0x80, &(0x7f0000000240)=[{&(0x7f0000000400)="274f49d7dcc3a2fefb972f34cef2651de6929970cd972f9660127d3869a4796cc9b330fb91fdf7dcdd343c324dec1d4d5fc28383cd3012e19b2394fe11989c3ead6620072c03b0deffbef8bfd7428e0aaa5855032e3b401e97a8eb5610c4fa5cc0", 0x61}, {&(0x7f0000000640)="6f0ed9abb789e1364b5d8a38cbf9e2c1a51ea99db9809fcfe9fda1f93ccdaf0c6f511d318c0ca5d88d86406c6d5e5f2809a90066f9793d69d45a68501b1406211e6b7fac044e50fc87ab67d7e051688517f5f682f080a0752e883ac1efda7302685718647d13cfc6b5fdb459efe245b08ed9bb1b988c1759926bad589c81d09f586cb16c70db82e24782a4d93c7a8a6920dc8b36487cb286bd15aa2e3e622c96b9010bcf9cd83ca50229ed1434a78f34886ffc750b3e8f29d5334f3b0c06e2eb219b9de5a181ab4ff88a538029a67526c3aad8b7321d5f50468afa43", 0xdc}], 0x2}}, {{0x0, 0x0, &(0x7f0000000380), 0x0, &(0x7f0000000b80)=[{0x68, 0x110, 0x2, "72b7361ef7f6907a7dda94aab1313c7a54d500fefa3e1501bb50ae52e33a5b372c9d50170ca77f4d1688ffb3fc4eb0f6ab8ad252e8be85faf083225d597034d838c7e3a3ff48d737337c785a9b357301da5b6305d67719"}, {0x48, 0x103, 0xfffffffa, "974f735b9f1eeba8569f58e50e3e6107fbb2ea80fe24c1bb12168d1ef08e39ebde5b74bcc3fca500bf2e50b98273bcc846f8"}, {0x98, 0x104, 0x7, "11cb84e7729cb5d740df96b895de0494a5313787bb293e5502b4b0c534727c997f7e55f8f1afddde1d4ea0a6b9e326ee4fc1aec07018d027b82be263f7aeeb6dcc164442e7a3a491846c5df89f5b924b1d40a2967159c900916e1435d7c4adfc810691673a448391d88640418ae84c5c13607cf7736f94ffd21463f53cae8f39046fa29b345b"}], 0x148}}], 0x3, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet6_buf(0xffffffffffffffff, 0x29, 0x20, &(0x7f00000000c0)="0bbb268dd6ffa80800000000000000020000210d0000aaa8fa017242ba9380d412000000000000002900000003000000", 0xeb0e7a7d4c6f0553) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r9, &(0x7f0000000040)={0x0, 0xf0, &(0x7f0000000100)={&(0x7f0000000280)=@newlink={0x20, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r10, 0x21eae}}, 0x20}}, 0x0) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$fou(0x0, 0xffffffffffffffff) sendmsg$FOU_CMD_ADD(r11, 0x0, 0x0) 0s ago: executing program 0 (id=238): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)=ANY=[@ANYBLOB="300000001900010000000000000000008020900000150005"], 0x30}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.28' (ED25519) to the list of known hosts. [ 60.271008][ T4173] cgroup: Unknown subsys name 'net' [ 60.393768][ T4173] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 61.833326][ T4173] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k FS [ 63.308204][ T4190] chnl_net:caif_netlink_parms(): no params data found [ 63.349353][ T4184] chnl_net:caif_netlink_parms(): no params data found [ 63.405280][ T4183] chnl_net:caif_netlink_parms(): no params data found [ 63.419783][ T4191] chnl_net:caif_netlink_parms(): no params data found [ 63.482067][ T4186] chnl_net:caif_netlink_parms(): no params data found [ 63.534532][ T4190] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.541822][ T4190] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.549932][ T4190] device bridge_slave_0 entered promiscuous mode [ 63.580239][ T4190] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.587461][ T4190] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.595863][ T4190] device bridge_slave_1 entered promiscuous mode [ 63.609913][ T4184] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.617063][ T4184] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.625670][ T4184] device bridge_slave_0 entered promiscuous mode [ 63.658410][ T4184] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.665635][ T4184] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.674571][ T4184] device bridge_slave_1 entered promiscuous mode [ 63.721550][ T4191] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.728692][ T4191] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.737256][ T4191] device bridge_slave_0 entered promiscuous mode [ 63.745796][ T4183] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.752960][ T4183] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.760944][ T4183] device bridge_slave_0 entered promiscuous mode [ 63.771276][ T4190] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.793460][ T4191] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.800772][ T4191] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.808538][ T4191] device bridge_slave_1 entered promiscuous mode [ 63.816043][ T4183] bridge0: port 2(bridge_slave_1) entered blocking state [ 63.823293][ T4183] bridge0: port 2(bridge_slave_1) entered disabled state [ 63.831190][ T4183] device bridge_slave_1 entered promiscuous mode [ 63.839518][ T4190] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.858162][ T4184] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.870089][ T4184] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 63.938087][ T4186] bridge0: port 1(bridge_slave_0) entered blocking state [ 63.945443][ T4186] bridge0: port 1(bridge_slave_0) entered disabled state [ 63.955349][ T4186] device bridge_slave_0 entered promiscuous mode [ 63.972428][ T4191] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.983386][ T4183] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 63.995105][ T4190] team0: Port device team_slave_0 added [ 64.001481][ T4186] bridge0: port 2(bridge_slave_1) entered blocking state [ 64.008544][ T4186] bridge0: port 2(bridge_slave_1) entered disabled state [ 64.016702][ T4186] device bridge_slave_1 entered promiscuous mode [ 64.026105][ T4184] team0: Port device team_slave_0 added [ 64.033902][ T4183] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.044597][ T4191] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.054835][ T4190] team0: Port device team_slave_1 added [ 64.069404][ T4184] team0: Port device team_slave_1 added [ 64.134458][ T4186] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 64.152486][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.159461][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.185731][ T4184] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.201435][ T4183] team0: Port device team_slave_0 added [ 64.209638][ T4191] team0: Port device team_slave_0 added [ 64.216265][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.223387][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.250070][ T4190] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.262892][ T4186] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 64.272644][ T4184] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.279586][ T4184] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.306136][ T4184] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.318428][ T4183] team0: Port device team_slave_1 added [ 64.332492][ T4191] team0: Port device team_slave_1 added [ 64.338607][ T4190] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.345696][ T4190] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.371945][ T4190] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.424835][ T4186] team0: Port device team_slave_0 added [ 64.452333][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.459390][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.486049][ T4191] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.498899][ T4186] team0: Port device team_slave_1 added [ 64.506045][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.513171][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.539803][ T4183] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.560085][ T4191] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.567075][ T4191] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.593001][ T4191] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.618169][ T4183] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.625380][ T4183] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.651706][ T4183] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.696295][ T4190] device hsr_slave_0 entered promiscuous mode [ 64.703193][ T4190] device hsr_slave_1 entered promiscuous mode [ 64.712175][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 64.719130][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.745334][ T4186] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 64.759350][ T4184] device hsr_slave_0 entered promiscuous mode [ 64.766571][ T4184] device hsr_slave_1 entered promiscuous mode [ 64.773420][ T4184] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.781580][ T4184] Cannot create hsr debugfs directory [ 64.804049][ T4186] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 64.811199][ T4186] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 64.837574][ T4186] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 64.868159][ T4191] device hsr_slave_0 entered promiscuous mode [ 64.874989][ T4191] device hsr_slave_1 entered promiscuous mode [ 64.881667][ T4191] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.889236][ T4191] Cannot create hsr debugfs directory [ 64.947074][ T4183] device hsr_slave_0 entered promiscuous mode [ 64.953839][ T4183] device hsr_slave_1 entered promiscuous mode [ 64.960711][ T4183] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 64.968292][ T4183] Cannot create hsr debugfs directory [ 65.001338][ T3520] Bluetooth: hci3: command 0x0409 tx timeout [ 65.002129][ T1107] Bluetooth: hci4: command 0x0409 tx timeout [ 65.014592][ T3520] Bluetooth: hci1: command 0x0409 tx timeout [ 65.017174][ T1107] Bluetooth: hci2: command 0x0409 tx timeout [ 65.026712][ T1107] Bluetooth: hci0: command 0x0409 tx timeout [ 65.038079][ T4186] device hsr_slave_0 entered promiscuous mode [ 65.045005][ T4186] device hsr_slave_1 entered promiscuous mode [ 65.052369][ T4186] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 65.059939][ T4186] Cannot create hsr debugfs directory [ 65.346190][ T4190] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 65.357833][ T4190] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 65.370848][ T4190] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 65.379858][ T4190] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 65.427330][ T4191] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 65.436570][ T4191] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 65.448817][ T4191] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 65.466394][ T4191] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 65.549841][ T4183] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 65.559228][ T4183] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 65.585782][ T4183] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 65.594828][ T4183] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 65.652501][ T4184] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 65.667495][ T4184] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 65.680149][ T4190] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.693696][ T4184] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 65.706722][ T4184] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 65.735366][ T4190] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.754223][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.764788][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.775353][ T4191] 8021q: adding VLAN 0 to HW filter on device bond0 [ 65.785589][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.795365][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.805219][ T144] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.812471][ T144] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.840888][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 65.855116][ T4191] 8021q: adding VLAN 0 to HW filter on device team0 [ 65.866401][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 65.876144][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 65.885077][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 65.897128][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 65.906201][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 65.913318][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 65.948037][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 65.957045][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 65.966793][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 65.975557][ T154] bridge0: port 1(bridge_slave_0) entered blocking state [ 65.982669][ T154] bridge0: port 1(bridge_slave_0) entered forwarding state [ 65.997235][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.005522][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.023897][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.033488][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.042098][ T154] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.049162][ T154] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.073453][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.084036][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.094548][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.103593][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.113427][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.121997][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.148622][ T4190] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.160464][ T4190] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.168358][ T4186] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 66.177487][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.185904][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.195409][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.204925][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.215582][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.224386][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.233096][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.243999][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.252417][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.261386][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.276388][ T4183] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.291708][ T4184] 8021q: adding VLAN 0 to HW filter on device bond0 [ 66.302958][ T4186] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 66.327572][ T4191] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 66.345273][ T4191] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 66.366701][ T4184] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.374912][ T4186] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 66.385585][ T4186] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 66.394981][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.403652][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.413372][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.422678][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.431293][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.438984][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.447480][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 66.455515][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 66.466633][ T4183] 8021q: adding VLAN 0 to HW filter on device team0 [ 66.485660][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 66.496127][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.508175][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.517357][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.524498][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.557766][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.568446][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.583708][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.595999][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.603148][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.617845][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.644360][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 66.659216][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 66.670248][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 66.677513][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 66.696300][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 66.706683][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 66.715641][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 66.722759][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 66.730830][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 66.738320][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 66.745872][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 66.758806][ T4190] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 66.786261][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 66.794893][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.804273][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.813686][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.827771][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.835905][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 66.845391][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 66.855242][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 66.891923][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 66.901157][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.909668][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 66.919587][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 66.930537][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 66.938725][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 66.947549][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 66.956399][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 66.965203][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 66.975702][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 66.984584][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.012309][ T4183] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.030004][ T4190] device veth0_vlan entered promiscuous mode [ 67.044523][ T4191] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.054071][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.062586][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.070024][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.079599][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.088032][ T4242] Bluetooth: hci2: command 0x041b tx timeout [ 67.090811][ T4257] Bluetooth: hci0: command 0x041b tx timeout [ 67.094551][ T4242] Bluetooth: hci1: command 0x041b tx timeout [ 67.100176][ T4257] Bluetooth: hci4: command 0x041b tx timeout [ 67.107603][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.120161][ T4242] Bluetooth: hci3: command 0x041b tx timeout [ 67.121570][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.146611][ T4190] device veth1_vlan entered promiscuous mode [ 67.176476][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.184822][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.200745][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 67.208901][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.221350][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.231329][ T4184] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 67.257628][ T4186] 8021q: adding VLAN 0 to HW filter on device bond0 [ 67.287613][ T4186] 8021q: adding VLAN 0 to HW filter on device team0 [ 67.324909][ T4190] device veth0_macvtap entered promiscuous mode [ 67.341115][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 67.353140][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1: link becomes ready [ 67.366641][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0: link becomes ready [ 67.375181][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.384277][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.393550][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.403424][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.418338][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 67.444478][ T4190] device veth1_macvtap entered promiscuous mode [ 67.456624][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 67.466242][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bridge: link becomes ready [ 67.475898][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_0: link becomes ready [ 67.485039][ T1145] bridge0: port 1(bridge_slave_0) entered blocking state [ 67.492163][ T1145] bridge0: port 1(bridge_slave_0) entered forwarding state [ 67.502126][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.511277][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.532364][ T4183] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.549218][ T4191] device veth0_vlan entered promiscuous mode [ 67.563685][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge0: link becomes ready [ 67.575957][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 67.584270][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 67.592771][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.600288][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.608300][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 67.616120][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 67.624700][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bridge: link becomes ready [ 67.633498][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): bridge_slave_1: link becomes ready [ 67.642631][ T1145] bridge0: port 2(bridge_slave_1) entered blocking state [ 67.649771][ T1145] bridge0: port 2(bridge_slave_1) entered forwarding state [ 67.685784][ T4191] device veth1_vlan entered promiscuous mode [ 67.695253][ T4184] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 67.704422][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_bond: link becomes ready [ 67.715031][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_bond: link becomes ready [ 67.725186][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_team: link becomes ready [ 67.737656][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_0: link becomes ready [ 67.747105][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_team: link becomes ready [ 67.756166][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): team_slave_1: link becomes ready [ 67.765028][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): team0: link becomes ready [ 67.797663][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 67.807378][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.817171][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.826776][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 67.835813][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 67.844844][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 67.853693][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 67.885214][ T4190] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 67.899770][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_hsr: link becomes ready [ 67.908938][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_0: link becomes ready [ 67.918291][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_hsr: link becomes ready [ 67.928748][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): hsr_slave_1: link becomes ready [ 67.937508][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 67.946160][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 67.955181][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 67.965335][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 67.975320][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 67.983898][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 67.993995][ T4186] IPv6: ADDRCONF(NETDEV_CHANGE): hsr0: link becomes ready [ 68.004617][ T4190] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.016481][ T4190] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.025662][ T4190] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.035187][ T4190] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.054702][ T4183] device veth0_vlan entered promiscuous mode [ 68.062405][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.070110][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.080002][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 68.088931][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 68.102610][ T4191] device veth0_macvtap entered promiscuous mode [ 68.125712][ T4183] device veth1_vlan entered promiscuous mode [ 68.140071][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.149672][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.165499][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 68.174155][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 68.196965][ T4191] device veth1_macvtap entered promiscuous mode [ 68.206685][ T4184] device veth0_vlan entered promiscuous mode [ 68.245533][ T4184] device veth1_vlan entered promiscuous mode [ 68.271818][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.290687][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.303005][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.313676][ T4191] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.324445][ T4191] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.336140][ T4191] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.350202][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.359436][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.368053][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan0: link becomes ready [ 68.378210][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.386966][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.395827][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.404993][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.414606][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.423282][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.434970][ T4183] device veth0_macvtap entered promiscuous mode [ 68.459003][ T4191] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.468543][ T4191] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.477884][ T4191] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.487092][ T4191] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.515898][ T4183] device veth1_macvtap entered promiscuous mode [ 68.545509][ T144] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.558864][ T144] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.572121][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvlan1: link becomes ready [ 68.582255][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.590290][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.598730][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan1: link becomes ready [ 68.608976][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): vxcan0: link becomes ready [ 68.617090][ T9] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 68.640704][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.651745][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.662646][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 68.673467][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.685902][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.699857][ T4186] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 68.719894][ T4184] device veth0_macvtap entered promiscuous mode [ 68.730570][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 68.739456][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 68.756000][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 68.777004][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 68.786110][ T144] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 68.822666][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.833552][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.843776][ T4183] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 68.854793][ T4183] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 68.866284][ T4183] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 68.878285][ T4184] device veth1_macvtap entered promiscuous mode [ 68.893485][ T9] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 68.902659][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 68.911834][ T9] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 68.920888][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 68.931127][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 68.939948][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 68.977228][ T4183] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 68.994776][ T4183] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.004245][ T4183] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.016082][ T4183] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.046611][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.058730][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.107251][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.119912][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.131535][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.142271][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.152365][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 69.160846][ T4250] Bluetooth: hci3: command 0x040f tx timeout [ 69.164108][ T4258] Bluetooth: hci1: command 0x040f tx timeout [ 69.169313][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.175403][ T4258] Bluetooth: hci4: command 0x040f tx timeout [ 69.191260][ T4258] Bluetooth: hci0: command 0x040f tx timeout [ 69.195402][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 69.197394][ T4258] Bluetooth: hci2: command 0x040f tx timeout [ 69.217706][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.230877][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.243851][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.254606][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.264449][ T4184] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 69.275252][ T4184] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 69.286721][ T4184] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 69.303790][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.312127][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 69.323365][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 69.332147][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 69.341856][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 69.392830][ T4184] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.417418][ T4184] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.431627][ T4184] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.440891][ T4184] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 69.497642][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_virt_wifi: link becomes ready [ 69.508300][ T297] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.519299][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_virt_wifi: link becomes ready [ 69.529909][ T297] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.545104][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 69.570279][ T4186] device veth0_vlan entered promiscuous mode [ 69.593100][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_vlan: link becomes ready [ 69.610090][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_vlan: link becomes ready [ 69.633416][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan0: link becomes ready [ 69.661868][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): vlan1: link becomes ready [ 69.727683][ T4186] device veth1_vlan entered promiscuous mode [ 69.785309][ T297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.798705][ T297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.819012][ T4301] netlink: 'syz.0.8': attribute type 2 has an invalid length. [ 69.828645][ T9] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.864302][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 69.876338][ T9] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.894548][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.931867][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 69.945075][ T4186] device veth0_macvtap entered promiscuous mode [ 69.963929][ T144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 69.999149][ T144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 70.003473][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 70.021374][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.029716][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_macvtap: link becomes ready [ 70.043809][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_macvtap: link becomes ready [ 70.069281][ T4186] device veth1_macvtap entered promiscuous mode [ 70.092654][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 70.119905][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): macvtap0: link becomes ready [ 70.157671][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): macsec0: link becomes ready [ 70.232530][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.241158][ T4313] netlink: 244 bytes leftover after parsing attributes in process `syz.0.11'. [ 70.264066][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.287353][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.305449][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.325137][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.339481][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.355833][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 70.369796][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.387963][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 70.406775][ T4317] netlink: 'syz.1.2': attribute type 1 has an invalid length. [ 70.417233][ T4317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 70.436867][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_0: link becomes ready [ 70.468360][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): veth0_to_batadv: link becomes ready [ 70.511721][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.546855][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.585091][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.598875][ T4331] Unknown options in mask b7f2 [ 70.605650][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.613389][ T4330] netlink: set zone limit has 8 unknown bytes [ 70.616354][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.633056][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.643259][ T4186] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 70.654124][ T4186] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 70.669734][ T4186] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 70.749646][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): batadv_slave_1: link becomes ready [ 70.770308][ T297] IPv6: ADDRCONF(NETDEV_CHANGE): veth1_to_batadv: link becomes ready [ 70.825295][ T4186] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.846742][ T4186] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.864651][ T4186] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 70.873613][ T4186] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 71.035777][ T4346] netlink: 8 bytes leftover after parsing attributes in process `syz.1.23'. [ 71.057592][ T4348] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 71.174320][ T1419] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.181202][ T1419] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.210981][ T297] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.218972][ T297] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.241175][ T4243] Bluetooth: hci2: command 0x0419 tx timeout [ 71.245648][ T3520] Bluetooth: hci3: command 0x0419 tx timeout [ 71.247302][ T4243] Bluetooth: hci0: command 0x0419 tx timeout [ 71.276142][ T4243] Bluetooth: hci4: command 0x0419 tx timeout [ 71.293360][ T4243] Bluetooth: hci1: command 0x0419 tx timeout [ 71.365036][ T1145] IPv6: ADDRCONF(NETDEV_CHANGE): wlan0: link becomes ready [ 71.392795][ T1145] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 71.431343][ T1145] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 71.492099][ T154] IPv6: ADDRCONF(NETDEV_CHANGE): wlan1: link becomes ready [ 71.512278][ T4364] Zero length message leads to an empty skb [ 71.555335][ T4367] syz.2.33 uses obsolete (PF_INET,SOCK_PACKET) [ 73.282038][ T4422] netlink: 'syz.0.55': attribute type 10 has an invalid length. [ 73.359586][ T4422] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 73.479250][ T4436] netlink: 'syz.4.60': attribute type 10 has an invalid length. [ 73.520728][ T4436] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 73.569270][ T4439] IPv6: ADDRCONF(NETDEV_CHANGE): rose0: link becomes ready [ 73.590320][ T4445] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 73.637966][ T4439] netlink: 256 bytes leftover after parsing attributes in process `syz.2.61'. [ 73.935934][ T4451] netlink: 4 bytes leftover after parsing attributes in process `syz.1.66'. [ 73.958282][ T4451] device bond_slave_1 entered promiscuous mode [ 74.333393][ T4480] netlink: 4 bytes leftover after parsing attributes in process `syz.1.77'. [ 74.483843][ T4476] netlink: 'syz.2.76': attribute type 10 has an invalid length. [ 74.559262][ T4476] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 74.809771][ T4504] netlink: 'syz.2.86': attribute type 10 has an invalid length. [ 75.152868][ T4518] netlink: 220 bytes leftover after parsing attributes in process `syz.4.92'. [ 75.194803][ T4518] netlink: 220 bytes leftover after parsing attributes in process `syz.4.92'. [ 75.239449][ T4525] device syzkaller0 entered promiscuous mode [ 75.746558][ T4552] netlink: 596 bytes leftover after parsing attributes in process `syz.0.104'. [ 75.849401][ T4559] tipc: Started in network mode [ 75.874351][ T4559] tipc: Node identity 6ef7e8aa1c3a, cluster identity 4711 [ 75.930019][ T4559] tipc: Enabled bearer , priority 0 [ 75.968507][ T4561] netlink: 4 bytes leftover after parsing attributes in process `syz.4.109'. [ 75.987286][ T4561] device veth0_to_batadv entered promiscuous mode [ 76.160258][ T4566] device syzkaller0 entered promiscuous mode [ 76.205544][ T4558] tipc: Resetting bearer [ 76.300873][ T4558] tipc: Disabling bearer [ 76.415633][ T4573] device syzkaller0 entered promiscuous mode [ 76.441517][ T4573] IPv6: ADDRCONF(NETDEV_CHANGE): syzkaller0: link becomes ready [ 76.542425][ T4587] netlink: 'syz.2.117': attribute type 10 has an invalid length. [ 76.797063][ T4598] netlink: 'syz.4.120': attribute type 10 has an invalid length. [ 77.071677][ T4608] netlink: 12 bytes leftover after parsing attributes in process `syz.2.125'. [ 77.206735][ T4612] netlink: 'syz.4.129': attribute type 10 has an invalid length. [ 77.244778][ T4615] netlink: 220 bytes leftover after parsing attributes in process `syz.1.127'. [ 77.254641][ T4615] netlink: 220 bytes leftover after parsing attributes in process `syz.1.127'. [ 77.780467][ T4627] bridge0: port 2(bridge_slave_1) entered disabled state [ 77.789167][ T4627] bridge0: port 1(bridge_slave_0) entered disabled state [ 78.162400][ T4641] nf_conntrack: default automatic helper assignment has been turned off for security reasons and CT-based firewall rule not found. Use the iptables CT target to attach helpers instead. [ 78.256593][ T4643] netlink: 64 bytes leftover after parsing attributes in process `syz.2.134'. [ 78.362126][ T4627] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 78.383618][ T4627] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 78.560180][ T4627] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.575733][ T4627] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.584826][ T4627] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.599609][ T4627] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 78.847215][ T4661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 78.892717][ T4664] netlink: 24 bytes leftover after parsing attributes in process `syz.0.139'. [ 78.934588][ T4661] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 79.043437][ T4671] netlink: 'syz.4.141': attribute type 10 has an invalid length. [ 79.061291][ T4670] batman_adv: batadv0: Adding interface: dummy0 [ 79.067678][ T4670] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 79.094190][ T4670] batman_adv: batadv0: Interface activated: dummy0 [ 79.122590][ T4674] batadv0: mtu less than device minimum [ 79.140659][ T4674] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 79.153307][ T4674] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 79.165878][ T4674] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 79.178203][ T4674] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 79.190801][ T4674] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 79.203350][ T4674] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 79.215882][ T4674] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 79.228384][ T4674] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 79.241007][ T4674] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-272) [ 79.856887][ T4710] device syzkaller0 entered promiscuous mode [ 80.304238][ T4715] netlink: 'syz.4.155': attribute type 10 has an invalid length. [ 80.655744][ T4728] netlink: 'syz.4.160': attribute type 10 has an invalid length. [ 80.730753][ T4728] team0: Device veth1_vlan failed to register rx_handler [ 81.011596][ T4745] bond0: (slave wlan1): Releasing backup interface [ 81.270031][ T4754] netlink: 'syz.1.166': attribute type 10 has an invalid length. [ 81.304819][ T4754] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 81.404083][ T21] cfg80211: failed to load regulatory.db [ 81.678538][ T4772] device syzkaller0 entered promiscuous mode [ 81.830887][ T4775] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 82.368631][ T4798] netlink: 'syz.1.183': attribute type 10 has an invalid length. [ 82.570568][ T4805] netlink: 'syz.0.188': attribute type 10 has an invalid length. [ 82.616129][ T4807] device syzkaller0 entered promiscuous mode [ 82.678985][ T4812] netlink: 4 bytes leftover after parsing attributes in process `syz.2.182'. [ 82.732826][ T4816] netlink: 4 bytes leftover after parsing attributes in process `syz.3.190'. [ 83.148004][ T4827] bond0: (slave wlan1): Releasing backup interface [ 83.263221][ T4836] netlink: 8 bytes leftover after parsing attributes in process `syz.2.198'. [ 83.266903][ T4837] netlink: 'syz.4.199': attribute type 10 has an invalid length. [ 83.725667][ T4860] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 84.152756][ T4873] netlink: 'syz.4.212': attribute type 10 has an invalid length. [ 84.632760][ T4892] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 84.816534][ T4903] netlink: 36 bytes leftover after parsing attributes in process `syz.2.222'. [ 84.881055][ T4905] netlink: 16 bytes leftover after parsing attributes in process `syz.1.224'. [ 84.883161][ T4902] netlink: 20 bytes leftover after parsing attributes in process `syz.0.225'. [ 84.932781][ T4902] netlink: 32 bytes leftover after parsing attributes in process `syz.0.225'. [ 84.992574][ T4911] netlink: 34 bytes leftover after parsing attributes in process `syz.0.225'. [ 85.005683][ T4910] netlink: 'syz.1.226': attribute type 10 has an invalid length. [ 85.173034][ T4917] device syzkaller0 entered promiscuous mode [ 85.623139][ T4938] tipc: Started in network mode [ 85.628145][ T4938] tipc: Node identity be84651d406f, cluster identity 4711 [ 85.670747][ T4938] tipc: Enabled bearer , priority 0 [ 85.706217][ T4945] device syzkaller0 entered promiscuous mode [ 85.761165][ T4938] netlink: 2 bytes leftover after parsing attributes in process `syz.4.231'. [ 85.830983][ T4938] tipc: Resetting bearer [ 85.866727][ T4947] IPv6: ADDRCONF(NETDEV_CHANGE): bpq0: link becomes ready [ 85.940835][ T4937] tipc: Resetting bearer [ 86.008649][ T4937] tipc: Disabling bearer [ 86.035996][ T4946] ================================================================== [ 86.044289][ T4946] BUG: KASAN: use-after-free in ax25_release+0x5ca/0x870 [ 86.051355][ T4946] Read of size 8 at addr ffff8880247f8408 by task syz.1.235/4946 [ 86.059090][ T4946] [ 86.061448][ T4946] CPU: 0 PID: 4946 Comm: syz.1.235 Not tainted syzkaller #0 [ 86.068749][ T4946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 86.078838][ T4946] Call Trace: [ 86.082144][ T4946] [ 86.085096][ T4946] dump_stack_lvl+0x168/0x230 [ 86.089809][ T4946] ? show_regs_print_info+0x20/0x20 [ 86.095038][ T4946] ? _printk+0xcc/0x110 [ 86.099219][ T4946] ? ax25_release+0x5ca/0x870 [ 86.103926][ T4946] ? load_image+0x3b0/0x3b0 [ 86.108461][ T4946] print_address_description+0x60/0x2d0 [ 86.114036][ T4946] ? ax25_release+0x5ca/0x870 [ 86.118736][ T4946] kasan_report+0xdf/0x130 [ 86.123180][ T4946] ? ax25_release+0x5ca/0x870 [ 86.127879][ T4946] ax25_release+0x5ca/0x870 [ 86.132408][ T4946] sock_close+0xd5/0x240 [ 86.136689][ T4946] ? sock_mmap+0x90/0x90 [ 86.140951][ T4946] __fput+0x234/0x930 [ 86.144967][ T4946] task_work_run+0x125/0x1a0 [ 86.149676][ T4946] exit_to_user_mode_loop+0x10f/0x130 [ 86.155072][ T4946] exit_to_user_mode_prepare+0xee/0x180 [ 86.160640][ T4946] syscall_exit_to_user_mode+0x16/0x40 [ 86.166126][ T4946] do_syscall_64+0x58/0xa0 [ 86.170588][ T4946] ? clear_bhb_loop+0x30/0x80 [ 86.175386][ T4946] ? clear_bhb_loop+0x30/0x80 [ 86.180081][ T4946] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.186000][ T4946] RIP: 0033:0x7f0e9daacba9 [ 86.190530][ T4946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 86.210143][ T4946] RSP: 002b:00007fff6ffa29a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 86.218568][ T4946] RAX: 0000000000000000 RBX: 00007f0e9dcf5da0 RCX: 00007f0e9daacba9 [ 86.226544][ T4946] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 86.234523][ T4946] RBP: 00007f0e9dcf5da0 R08: 0000000000002ff4 R09: 0000000c6ffa2c9f [ 86.242495][ T4946] R10: 00000000003fcde8 R11: 0000000000000246 R12: 0000000000015238 [ 86.250465][ T4946] R13: 00007fff6ffa2aa0 R14: ffffffffffffffff R15: 00007fff6ffa2ac0 [ 86.258446][ T4946] [ 86.261470][ T4946] [ 86.263793][ T4946] Allocated by task 4947: [ 86.268117][ T4946] __kasan_kmalloc+0xb5/0xf0 [ 86.272710][ T4946] ax25_dev_device_up+0x50/0x580 [ 86.277650][ T4946] ax25_device_event+0x483/0x4f0 [ 86.282590][ T4946] raw_notifier_call_chain+0xcb/0x160 [ 86.287961][ T4946] __dev_notify_flags+0x178/0x2d0 [ 86.292989][ T4946] dev_change_flags+0xe3/0x1a0 [ 86.297757][ T4946] dev_ifsioc+0x147/0xe70 [ 86.302088][ T4946] dev_ioctl+0x55f/0xe50 [ 86.306328][ T4946] sock_do_ioctl+0x222/0x2f0 [ 86.310920][ T4946] sock_ioctl+0x4ed/0x6e0 [ 86.315252][ T4946] __se_sys_ioctl+0xfa/0x170 [ 86.319844][ T4946] do_syscall_64+0x4c/0xa0 [ 86.324269][ T4946] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.330160][ T4946] [ 86.332485][ T4946] Freed by task 4953: [ 86.336460][ T4946] kasan_set_track+0x4b/0x70 [ 86.341051][ T4946] kasan_set_free_info+0x1f/0x40 [ 86.345987][ T4946] ____kasan_slab_free+0xd5/0x110 [ 86.351012][ T4946] slab_free_freelist_hook+0xea/0x170 [ 86.356381][ T4946] kfree+0xef/0x2a0 [ 86.360188][ T4946] ax25_device_event+0x4b4/0x4f0 [ 86.365120][ T4946] raw_notifier_call_chain+0xcb/0x160 [ 86.370493][ T4946] __dev_notify_flags+0x178/0x2d0 [ 86.375535][ T4946] dev_change_flags+0xe3/0x1a0 [ 86.380294][ T4946] dev_ifsioc+0x147/0xe70 [ 86.384625][ T4946] dev_ioctl+0x55f/0xe50 [ 86.388870][ T4946] sock_do_ioctl+0x222/0x2f0 [ 86.393461][ T4946] sock_ioctl+0x4ed/0x6e0 [ 86.397792][ T4946] __se_sys_ioctl+0xfa/0x170 [ 86.402380][ T4946] do_syscall_64+0x4c/0xa0 [ 86.406800][ T4946] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.412696][ T4946] [ 86.415014][ T4946] Last potentially related work creation: [ 86.420723][ T4946] kasan_save_stack+0x35/0x60 [ 86.425423][ T4946] kasan_record_aux_stack+0xb8/0x100 [ 86.430722][ T4946] insert_work+0x54/0x3d0 [ 86.435064][ T4946] __queue_work+0x9c5/0xd50 [ 86.439574][ T4946] queue_work_on+0x11d/0x1d0 [ 86.444174][ T4946] inet6addr_event+0x9c/0xc0 [ 86.448768][ T4946] atomic_notifier_call_chain+0x15d/0x280 [ 86.454577][ T4946] addrconf_ifdown+0xdf4/0x1970 [ 86.459439][ T4946] addrconf_notify+0x445/0xf00 [ 86.464218][ T4946] raw_notifier_call_chain+0xcb/0x160 [ 86.469605][ T4946] __dev_notify_flags+0x178/0x2d0 [ 86.474641][ T4946] dev_change_flags+0xe3/0x1a0 [ 86.479418][ T4946] do_setlink+0xc01/0x3980 [ 86.483836][ T4946] rtnl_newlink+0xd87/0x17d0 [ 86.488604][ T4946] rtnetlink_rcv_msg+0x9b9/0xe60 [ 86.493558][ T4946] netlink_rcv_skb+0x1e0/0x430 [ 86.498340][ T4946] netlink_unicast+0x774/0x920 [ 86.503105][ T4946] netlink_sendmsg+0x8ab/0xbc0 [ 86.507876][ T4946] ____sys_sendmsg+0x5a2/0x8c0 [ 86.512639][ T4946] ___sys_sendmsg+0x1f0/0x260 [ 86.517346][ T4946] __se_sys_sendmsg+0x190/0x250 [ 86.522207][ T4946] do_syscall_64+0x4c/0xa0 [ 86.526626][ T4946] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.532533][ T4946] [ 86.534858][ T4946] Second to last potentially related work creation: [ 86.541436][ T4946] kasan_save_stack+0x35/0x60 [ 86.546116][ T4946] kasan_record_aux_stack+0xb8/0x100 [ 86.551400][ T4946] insert_work+0x54/0x3d0 [ 86.555731][ T4946] __queue_work+0x9c5/0xd50 [ 86.560228][ T4946] queue_work_on+0x11d/0x1d0 [ 86.564812][ T4946] netdevice_event+0x803/0x900 [ 86.569586][ T4946] raw_notifier_call_chain+0xcb/0x160 [ 86.575102][ T4946] register_netdevice+0x1275/0x16b0 [ 86.580303][ T4946] nsim_create+0x32d/0x3e0 [ 86.584725][ T4946] __nsim_dev_port_add+0x5c7/0x980 [ 86.589845][ T4946] nsim_dev_port_add_all+0x37/0x100 [ 86.595135][ T4946] nsim_dev_probe+0x754/0x9c0 [ 86.599820][ T4946] really_probe+0x284/0xc80 [ 86.604327][ T4946] __driver_probe_device+0x18c/0x330 [ 86.609630][ T4946] driver_probe_device+0x4f/0x420 [ 86.614683][ T4946] __device_attach_driver+0x2b0/0x500 [ 86.620081][ T4946] bus_for_each_drv+0x175/0x200 [ 86.624941][ T4946] __device_attach+0x29b/0x460 [ 86.629707][ T4946] bus_probe_device+0xbc/0x1e0 [ 86.634474][ T4946] device_add+0xa00/0xfb0 [ 86.638808][ T4946] new_device_store+0x3d8/0x740 [ 86.643663][ T4946] kernfs_fop_write_iter+0x379/0x4c0 [ 86.648958][ T4946] vfs_write+0x712/0xd00 [ 86.653323][ T4946] ksys_write+0x14d/0x250 [ 86.657667][ T4946] do_syscall_64+0x4c/0xa0 [ 86.662087][ T4946] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 86.668000][ T4946] [ 86.670325][ T4946] The buggy address belongs to the object at ffff8880247f8400 [ 86.670325][ T4946] which belongs to the cache kmalloc-192 of size 192 [ 86.684523][ T4946] The buggy address is located 8 bytes inside of [ 86.684523][ T4946] 192-byte region [ffff8880247f8400, ffff8880247f84c0) [ 86.697635][ T4946] The buggy address belongs to the page: [ 86.703277][ T4946] page:ffffea000091fe00 refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x247f8 [ 86.713553][ T4946] flags: 0xfff00000000200(slab|node=0|zone=1|lastcpupid=0x7ff) [ 86.721130][ T4946] raw: 00fff00000000200 ffffea0000919f00 0000000800000008 ffff888016841a00 [ 86.729876][ T4946] raw: 0000000000000000 0000000000100010 00000001ffffffff 0000000000000000 [ 86.738459][ T4946] page dumped because: kasan: bad access detected [ 86.744878][ T4946] page_owner tracks the page as allocated [ 86.750596][ T4946] page last allocated via order 0, migratetype Unmovable, gfp_mask 0x12c00(GFP_NOIO|__GFP_NOWARN|__GFP_NORETRY), pid 1, ts 12193323766, free_ts 0 [ 86.765355][ T4946] get_page_from_freelist+0x1b77/0x1c60 [ 86.770920][ T4946] __alloc_pages+0x1e1/0x470 [ 86.775510][ T4946] alloc_page_interleave+0x24/0x1e0 [ 86.780706][ T4946] new_slab+0xc0/0x4b0 [ 86.784769][ T4946] ___slab_alloc+0x81e/0xdf0 [ 86.789355][ T4946] __kmalloc+0x1cd/0x330 [ 86.793622][ T4946] usb_alloc_urb+0x3f/0x140 [ 86.798125][ T4946] usb_control_msg+0x115/0x3e0 [ 86.802890][ T4946] hub_power_on+0x1b6/0x420 [ 86.807389][ T4946] hub_activate+0x347/0x1a30 [ 86.811977][ T4946] hub_probe+0x276c/0x35e0 [ 86.816390][ T4946] usb_probe_interface+0x5a0/0xaf0 [ 86.821496][ T4946] really_probe+0x284/0xc80 [ 86.825994][ T4946] __driver_probe_device+0x18c/0x330 [ 86.831275][ T4946] driver_probe_device+0x4f/0x420 [ 86.836392][ T4946] __device_attach_driver+0x2b0/0x500 [ 86.841760][ T4946] page_owner free stack trace missing [ 86.847129][ T4946] [ 86.849446][ T4946] Memory state around the buggy address: [ 86.855073][ T4946] ffff8880247f8300: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 86.863129][ T4946] ffff8880247f8380: 00 00 00 fc fc fc fc fc fc fc fc fc fc fc fc fc [ 86.871187][ T4946] >ffff8880247f8400: fa fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 86.879237][ T4946] ^ [ 86.883560][ T4946] ffff8880247f8480: fb fb fb fb fb fb fb fb fc fc fc fc fc fc fc fc [ 86.891630][ T4946] ffff8880247f8500: 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 00 [ 86.899687][ T4946] ================================================================== [ 86.907736][ T4946] Disabling lock debugging due to kernel taint [ 86.920856][ T4952] netlink: 'syz.2.237': attribute type 10 has an invalid length. [ 86.944412][ T4958] netlink: 20 bytes leftover after parsing attributes in process `syz.0.238'. [ 87.022443][ T4946] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 87.029685][ T4946] CPU: 1 PID: 4946 Comm: syz.1.235 Tainted: G B syzkaller #0 [ 87.038389][ T4946] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/18/2025 [ 87.048457][ T4946] Call Trace: [ 87.051745][ T4946] [ 87.054689][ T4946] dump_stack_lvl+0x168/0x230 [ 87.059386][ T4946] ? show_regs_print_info+0x20/0x20 [ 87.064607][ T4946] ? load_image+0x3b0/0x3b0 [ 87.069129][ T4946] panic+0x2c9/0x7f0 [ 87.073049][ T4946] ? bpf_jit_dump+0xd0/0xd0 [ 87.077573][ T4946] ? _raw_spin_unlock_irqrestore+0xf6/0x100 [ 87.083491][ T4946] ? _raw_spin_unlock+0x40/0x40 [ 87.088359][ T4946] ? print_memory_metadata+0x314/0x400 [ 87.093831][ T4946] ? ax25_release+0x5ca/0x870 [ 87.098522][ T4946] check_panic_on_warn+0x80/0xa0 [ 87.103471][ T4946] ? ax25_release+0x5ca/0x870 [ 87.108158][ T4946] end_report+0x6d/0xf0 [ 87.112322][ T4946] kasan_report+0x102/0x130 [ 87.116841][ T4946] ? ax25_release+0x5ca/0x870 [ 87.121530][ T4946] ax25_release+0x5ca/0x870 [ 87.126048][ T4946] sock_close+0xd5/0x240 [ 87.130324][ T4946] ? sock_mmap+0x90/0x90 [ 87.134604][ T4946] __fput+0x234/0x930 [ 87.138612][ T4946] task_work_run+0x125/0x1a0 [ 87.143220][ T4946] exit_to_user_mode_loop+0x10f/0x130 [ 87.148606][ T4946] exit_to_user_mode_prepare+0xee/0x180 [ 87.154170][ T4946] syscall_exit_to_user_mode+0x16/0x40 [ 87.159642][ T4946] do_syscall_64+0x58/0xa0 [ 87.164086][ T4946] ? clear_bhb_loop+0x30/0x80 [ 87.168779][ T4946] ? clear_bhb_loop+0x30/0x80 [ 87.173465][ T4946] entry_SYSCALL_64_after_hwframe+0x66/0xd0 [ 87.179380][ T4946] RIP: 0033:0x7f0e9daacba9 [ 87.183810][ T4946] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 87.203423][ T4946] RSP: 002b:00007fff6ffa29a8 EFLAGS: 00000246 ORIG_RAX: 00000000000001b4 [ 87.211847][ T4946] RAX: 0000000000000000 RBX: 00007f0e9dcf5da0 RCX: 00007f0e9daacba9 [ 87.219828][ T4946] RDX: 0000000000000000 RSI: 000000000000001e RDI: 0000000000000003 [ 87.227810][ T4946] RBP: 00007f0e9dcf5da0 R08: 0000000000002ff4 R09: 0000000c6ffa2c9f [ 87.235790][ T4946] R10: 00000000003fcde8 R11: 0000000000000246 R12: 0000000000015238 [ 87.243770][ T4946] R13: 00007fff6ffa2aa0 R14: ffffffffffffffff R15: 00007fff6ffa2ac0 [ 87.251776][ T4946] [ 87.255109][ T4946] Kernel Offset: disabled [ 87.259442][ T4946] Rebooting in 86400 seconds..