last executing test programs: 56.96969731s ago: executing program 1 (id=246): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) (async) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[@ANYRES32=r2, @ANYRES32=r3, @ANYBLOB="0200"], 0x10) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000380)=ANY=[], 0x10) (async) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) (async) r4 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x5, 0x4, 0xfff, 0x7, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r4], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x20000, @void, @value}, 0x94) r6 = socket$netlink(0x10, 0x3, 0x0) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='sched_kthread_stop\x00', r5}, 0x10) sendmsg$nl_route(r6, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=ANY=[@ANYBLOB="4000000010001fff000000000000000000060000", @ANYRES32=0x0, @ANYBLOB="0000000000000000180012800e0001007769726567756172640000000400028008000a00b8"], 0x40}}, 0x0) 56.669489303s ago: executing program 1 (id=250): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB="68000000020601000000000600000000000000000e0003006269746d61703a697000000005000400000000000900020073797a30000000002000078005001400cc0000000c0001800800014080ffffff05000300000000000500050002000000050001000600"], 0x68}}, 0x0) r1 = socket$tipc(0x1e, 0x5, 0x0) r2 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_GET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000040)={0x10, 0x1401, 0x1, 0x70bd2d}, 0x10}}, 0x0) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x400000}, 0x10) r3 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r3, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r3, 0x10f, 0x87, &(0x7f0000000240)={0x100042}, 0x10) close(r1) r4 = accept4$packet(0xffffffffffffffff, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000140)=0x14, 0x80000) getsockname$packet(r4, &(0x7f00000001c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @link_local}, &(0x7f0000000200)=0x14) 56.301923109s ago: executing program 1 (id=256): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x5, 0x5, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0xfffffffffffffffe}], {0x95, 0x0, 0x0, 0x1a03d3}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1000070, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x2}, 0x1c) socket$rds(0x15, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x34, 0x2c, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0x2}, {}, {0x10, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x998, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0xb}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_bpf={{0x8}, {0x6c, 0x2, [@TCA_BPF_FLAGS={0x8}, @TCA_BPF_FD={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x2}}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x7}, {0x3c, 0x5, [{0x7, 0x6, 0x0, 0x8001}, {0x7, 0x3, 0x7, 0xb4e}, {0x3, 0x2, 0xb, 0x7}, {0x2, 0x0, 0x2, 0x5}, {0x5, 0x0, 0x7, 0x31d}, {0x0, 0xc2, 0x1, 0x400}, {0x6bb3, 0x1, 0x9, 0xfffffff4}]}}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_ICMPV4_CODE={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e21}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_ARP_TIP_MASK={0x8, 0x3c, 0xff000000}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}]}}, @filter_kind_options=@f_route={{0xa}, {0x89c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x828, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x9, 0x9, 0x100, 0x6, 0x46a07250, 0x7, 0x0, 0x7, 0x0, 0x4, 0x3, 0x0, 0x800, 0x9, 0x9, 0x5, 0x1, 0x7, 0x0, 0x1, 0x9, 0x6fa, 0x23a2, 0x5, 0x50a, 0x7, 0x5, 0x5, 0x2, 0xffffffff, 0x9, 0x7, 0x9, 0x401, 0x10000, 0x3, 0x1000, 0x6, 0x1, 0x1, 0x2, 0x1, 0x8, 0x5, 0x5, 0xe, 0xffffffff, 0xfff, 0x0, 0x4, 0xcd34, 0x332c, 0x1728, 0x34b2, 0x4, 0x6, 0x6, 0xfc4, 0x3, 0x5, 0x6, 0x6, 0x80000000, 0x32a8, 0xe52a, 0x10000, 0x10000, 0x5, 0x81, 0x1, 0x2c45271d, 0x7fff, 0x7, 0xfffffff8, 0x3, 0x100, 0x8, 0x5, 0x5, 0x1, 0x101, 0xb37f, 0xc, 0x2, 0x2, 0xfffff800, 0x4, 0x101, 0xcba, 0x0, 0xa1d4, 0x8, 0x38d, 0xf81, 0x0, 0x20000, 0x5, 0x1, 0x2fe, 0x8, 0x3, 0x1, 0x0, 0x4, 0x2, 0x81, 0x8001, 0x2, 0x1, 0x2, 0x1, 0x9, 0x9, 0x8, 0x0, 0x8, 0x8f6, 0x0, 0xffffb887, 0x8, 0x6, 0x6, 0x9, 0x9, 0x81, 0x3, 0x3, 0x6, 0x0, 0x101, 0x4, 0x9, 0x6, 0x8, 0xff, 0xffffffff, 0x6, 0x529, 0x4f, 0x29de, 0x875f, 0x6, 0x9, 0x1, 0x4, 0x2, 0xfff, 0x9, 0x31713b50, 0x3, 0x7, 0x9, 0x4, 0x91, 0x1, 0x3, 0x80000000, 0x75f, 0x7, 0xfffffff4, 0x1, 0xfffffc01, 0x35, 0x10, 0xd7, 0x2, 0xd, 0x0, 0x9, 0x3, 0xfffffff1, 0xfffff800, 0x6, 0x6, 0x1, 0xffff67c8, 0x9, 0x1, 0x9, 0x3, 0x10, 0x18800000, 0x2, 0x2, 0x3, 0x7, 0x8, 0x8, 0x81, 0x1, 0x1, 0xa, 0xb9, 0xfffffe01, 0x6, 0x1, 0x2, 0x3, 0x8, 0x2, 0x8, 0x3, 0x6, 0xc, 0xb024, 0x3, 0x3, 0x4, 0xd3ea, 0x6, 0x6, 0x8, 0x3, 0x0, 0xfd65, 0x5, 0x5, 0x3, 0xa, 0x8, 0x8, 0x0, 0x4, 0x2, 0x137, 0x0, 0xc, 0x8001, 0x401, 0xe5, 0x2, 0x9, 0x3, 0x6, 0x573, 0x33, 0x4, 0xff, 0x0, 0x1, 0x7ff, 0xffffff67, 0xfa6, 0x5c, 0xdd1, 0xe, 0x9, 0x7f, 0x3ff, 0x7fffffff, 0x1, 0x1, 0x8, 0xb, 0x2]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x10, 0xffff, 0x10001, 0x800, 0xfffffff7, 0x7, 0x80000001, 0xfffffffa, 0xe0, 0x80000001, 0x6, 0x2, 0x8, 0x2, 0x6, 0x3ff, 0x3, 0x0, 0x28, 0x6, 0x7f, 0xffffa9f4, 0x233, 0xc71, 0x5, 0x10001, 0x0, 0x6, 0xfffffff9, 0x7, 0x6, 0x6, 0x216, 0xfffffffb, 0x37e, 0xb8a, 0x32, 0x7, 0x2, 0x40, 0x0, 0x2400000, 0x6d, 0x9, 0xeb, 0x1, 0x4, 0x6, 0x0, 0x2, 0x7, 0x6, 0x8e, 0x9, 0x1, 0xd, 0x7, 0x1, 0x9, 0x9, 0x6, 0x0, 0x3, 0x5, 0x3f, 0x1ff, 0xabc4, 0x2, 0x2, 0x4, 0x2, 0x65e2, 0x5, 0x6, 0x1, 0xa33121c, 0x1ff, 0x1, 0x7, 0x0, 0x2, 0x4, 0x6, 0x484b313f, 0x3, 0x4, 0x2, 0x4, 0x52, 0x9607, 0x51, 0x3, 0xffffffff, 0x4, 0xfffffff2, 0x2, 0x5, 0x7, 0x8, 0x1, 0x8, 0x75c, 0x7, 0x7fffffff, 0xf272, 0xfffffffb, 0x4, 0x7d3, 0x9, 0x7, 0x9, 0x7, 0x8003, 0x2eb, 0x7, 0x1, 0x0, 0x0, 0x8001, 0x2, 0x10001, 0x5, 0x8001, 0x8, 0x2b, 0x1, 0x3, 0x80000000, 0x7fffffff, 0x1, 0x8, 0x401, 0x8001, 0x6, 0x5, 0x9, 0x1, 0x20, 0x4, 0x9, 0xb, 0xd, 0x2, 0xb, 0x7, 0x81, 0x98, 0x1, 0x80000000, 0x7, 0x7, 0x5, 0x3, 0x2, 0x0, 0xa40, 0xc0, 0x6, 0x3, 0xffff7fff, 0x5, 0x6, 0x4, 0x40, 0x7ff, 0x0, 0x17f, 0x1000, 0x401, 0x7fc6, 0xfffffff7, 0x100, 0xfffffff9, 0x7f, 0x8, 0xffff, 0x40000000, 0x6, 0x6, 0x10001, 0x7, 0x80, 0x8001, 0x6, 0xf, 0x6, 0x5, 0x4, 0x8, 0x9, 0x1, 0x6, 0x9bec, 0xfffffffb, 0x6, 0x1026, 0x3, 0x40000, 0x0, 0x9, 0xfff, 0xfffffffe, 0x7, 0x8001, 0x0, 0xfff, 0x7, 0x9, 0x5, 0x7f, 0x3ff, 0xc, 0x58c9, 0x3, 0x9, 0x5, 0x2e1, 0xbf8, 0x8, 0x79a0, 0x9, 0x7, 0x401, 0xebd6, 0x3, 0xffff, 0x1, 0x4, 0x200, 0x5, 0xfffff000, 0x8, 0x5, 0x7, 0xfffffffd, 0x8, 0x8, 0x3, 0x7f, 0x2, 0x0, 0x8001, 0x101, 0x191, 0x2, 0x800, 0x2, 0x1, 0x2, 0x5, 0x4, 0x4, 0x2, 0x2, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]}, @TCA_ROUTE4_ACT={0x60, 0x6, [@m_connmark={0x5c, 0x0, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x5, 0x2e, 0x800}, 0x6}}]}, {0xd, 0x6, "66396e732cf67237ec"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x998}, 0x1, 0x0, 0x0, 0x81}, 0x0) r1 = socket(0x10, 0x803, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a00000000000000000000000000000900010073797a30000000002c000000030a00000000000000000000000000000900010073797a30000000000900030073797a30000000006c000000060a000000000000000000000000000008000b4000000000440004802c0001800a0001006c696d69740000001c0002800c00014000005300000000000c0002400000000000000000140001800b0001006c6f6f6b75700000040002800900010073797a300000000014000000110001"], 0xe0}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}, 0x1, 0x0, 0x0, 0x881}, 0x0) 55.991585145s ago: executing program 4 (id=259): r0 = socket$packet(0x11, 0x2, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r0, 0x8933, &(0x7f00000001c0)={'batadv0\x00', 0x0}) sendto$packet(r0, &(0x7f00000000c0)='\x00\x00\x00', 0x3, 0x0, &(0x7f0000000080)={0x11, 0x8100, r1, 0x1, 0xd8, 0x6, @remote}, 0x14) 55.786724222s ago: executing program 4 (id=262): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) syz_emit_ethernet(0x56, &(0x7f0000000000)={@random="d52dcf45bc3c", @dev, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, "e7ff8c", 0x20, 0x6, 0x0, @local, @local, {[], {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x0, 0x8, 0x10, 0x0, 0x0, 0x0, {[@sack={0x5, 0xa, [0x9, 0x19]}]}}}}}}}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0xc, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000911071000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x34, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000002000000b7030000faffffff850000002d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x9, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, @void, @value}, 0x90) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xb, &(0x7f0000000180)=ANY=[], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000001180)={&(0x7f0000000080)='sched_switch\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x42) r2 = socket$inet_udp(0x2, 0x2, 0x0) r3 = socket$key(0xf, 0x3, 0x2) syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000400), 0xffffffffffffffff) sendmsg$NLBL_CIPSOV4_C_ADD(0xffffffffffffffff, &(0x7f00000006c0)={&(0x7f00000003c0)={0x10, 0x0, 0x0, 0x800000}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x800}, 0x4) sendmsg$key(r3, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="0207000902"], 0x10}}, 0x0) bind$inet(r2, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x16) connect$inet(r2, &(0x7f0000000200)={0x2, 0x0, @multicast2}, 0x10) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r5, 0x2, 0x0, 0x0, @void, @value}, 0x10) socket$inet_dccp(0x2, 0x6, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r6, 0x84, 0x74, &(0x7f00000011c0)=""/4096, &(0x7f0000000280)=0x1000) setsockopt$inet_IP_XFRM_POLICY(r2, 0x0, 0x11, &(0x7f00000002c0)={{{@in=@multicast1, @in6=@dev, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee01}, {}, {}, 0x0, 0x0, 0x1}, {{@in6=@dev, 0x0, 0x33}, 0x0, @in=@private=0xa010100, 0x0, 0x0, 0x0, 0xb7, 0xffffffff}}, 0xe8) sendmmsg(r2, &(0x7f0000007fc0), 0x800001d, 0x0) 54.402341443s ago: executing program 4 (id=268): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_HMAC_IDENT(r0, 0x84, 0x16, &(0x7f0000000000)={0x6, [0x0, 0xfffc, 0xffff, 0x1000, 0x4, 0x10]}, 0x10) (async) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_ipv6_tunnel_SIOCGETPRL(r1, 0x89f4, &(0x7f0000000080)={'sit0\x00', &(0x7f0000000040)={@multicast1, 0x0, 0x0, 0x20, 0x0, [{@loopback}, {@local}]}}) (async, rerun: 64) r2 = socket(0x8, 0x80000, 0xc00000) (rerun: 64) setsockopt$inet6_tcp_TCP_ULP(r2, 0x6, 0x1f, &(0x7f00000000c0), 0x4) (async) pread64(r0, &(0x7f0000000100)=""/76, 0x4c, 0x3) (async) sendmsg$NFQNL_MSG_VERDICT_BATCH(r2, &(0x7f0000000280)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000240)={&(0x7f00000001c0)={0x54, 0x3, 0x3, 0x3, 0x0, 0x0, {0x3, 0x0, 0x9}, [@NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x3}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xfffffffffffffffb, 0x1}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0x5}, @NFQA_VERDICT_HDR={0xc, 0x2, {0x0, 0x5}}, @NFQA_VERDICT_HDR={0xc, 0x2, {0xffffffffffffffff, 0x6872}}, @NFQA_MARK={0x8, 0x3, 0x1, 0x0, 0xfffffff8}]}, 0x54}, 0x1, 0x0, 0x0, 0x48000}, 0x20000001) (async, rerun: 32) r3 = accept4(r2, &(0x7f00000002c0)=@nfc_llcp, &(0x7f0000000340)=0x80, 0x80000) (rerun: 32) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r2, &(0x7f00000004c0)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0xa0, 0x0, 0x8, 0x101, 0x0, 0x0, {0x3}, [@CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0x9000}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @sctp=[@CTA_TIMEOUT_SCTP_COOKIE_ECHOED={0x8, 0x3, 0x1, 0x0, 0x4}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}, @CTA_TIMEOUT_DATA={0x44, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x9}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x7}, @CTA_TIMEOUT_TCP_LAST_ACK={0x8, 0x6, 0x1, 0x0, 0xfffffff9}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0x1fffe}, @CTA_TIMEOUT_TCP_ESTABLISHED={0x8, 0x3, 0x1, 0x0, 0x2}, @CTA_TIMEOUT_TCP_FIN_WAIT={0x8, 0x4, 0x1, 0x0, 0xd681}, @CTA_TIMEOUT_TCP_SYN_RECV={0x8, 0x2, 0x1, 0x0, 0xc1}, @CTA_TIMEOUT_TCP_UNACK={0x8, 0xb, 0x1, 0x0, 0x6}]}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz0\x00'}, @CTA_TIMEOUT_L3PROTO={0x6, 0x2, 0x1, 0x0, 0xf6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}]}, 0xa0}, 0x1, 0x0, 0x0, 0x4000010}, 0x40050) (async, rerun: 64) bpf$OBJ_GET_MAP(0x7, &(0x7f0000000540)=@generic={&(0x7f0000000500)='./file0\x00'}, 0x18) (async, rerun: 64) setsockopt$RDS_CANCEL_SENT_TO(r3, 0x114, 0x1, &(0x7f0000000580)={0x2, 0x4e21, @local}, 0x10) (async) ioctl$sock_ipv6_tunnel_SIOCADDPRL(r1, 0x89f5, &(0x7f0000000680)={'sit0\x00', &(0x7f00000005c0)={@multicast2, 0x1, 0x0, 0xa0, 0x0, [{@dev}, {@private}, {@dev}, {@local}, {@local}, {@initdev}, {@loopback}, {@initdev}, {@multicast1}, {}]}}) syz_genetlink_get_family_id$nl802154(&(0x7f00000006c0), 0xffffffffffffffff) syz_genetlink_get_family_id$tipc2(&(0x7f0000000700), r2) (async) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000980)={&(0x7f0000000740)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0xf1, 0xf1, 0xa, [@fwd={0x5}, @decl_tag={0xb, 0x0, 0x0, 0x11, 0x5, 0x5}, @datasec={0x1, 0x4, 0x0, 0xf, 0x1, [{0x1, 0x3, 0x7}, {0x5, 0x2, 0x3}, {0x5, 0x9, 0x80000001}, {0x5, 0x0, 0x5}], '\r'}, @int={0x6, 0x0, 0x0, 0x1, 0x0, 0x67, 0x0, 0x60, 0x6}, @var={0xd, 0x0, 0x0, 0xe, 0x3, 0x2}, @func={0x1, 0x0, 0x0, 0xc, 0x2}, @fwd={0x5}, @enum64={0x9, 0x6, 0x0, 0x13, 0x0, 0x1, [{0x8, 0x3ff, 0x6}, {0x10, 0x2957, 0x3}, {0xa, 0xd7b, 0x9}, {0x8, 0x8, 0x8}, {0x6, 0x7, 0x16af}, {0xa, 0x200, 0x9c6}]}, @restrict={0xc, 0x0, 0x0, 0xb, 0x1}]}, {0x0, [0x30, 0x3e, 0x2e, 0x0, 0x0, 0x61, 0x0, 0x5f]}}, &(0x7f0000000880)=""/221, 0x116, 0xdd, 0x0, 0x10, 0x0, @void, @value}, 0x28) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f0000000a80)={r4, 0x20, &(0x7f0000000a40)={&(0x7f00000009c0)=""/16, 0x10, 0x0, &(0x7f0000000a00)=""/31, 0x1f}}, 0x10) (async) openat$ppp(0xffffffffffffff9c, &(0x7f0000000ac0), 0x100, 0x0) sendmsg$kcm(r2, &(0x7f0000002640)={&(0x7f0000000b00)=@sco, 0x80, &(0x7f0000002040)=[{&(0x7f0000000b80)="25b90ba29094742edbc6d523551caa2bb8ac3fd149cca771818ffd5c2f0b02adc5e2ea157f2c6fa689ec3bb4ad6912856788bc2b41bfa3f1994a2c8d0411ac27e9447b4457096091ed8d42645030c766d2846a5ed7a44a9147b96174d9bcfedc6edc065fb3ae9dc330d81e52667f3d50a506b556290a174e554c013c20870f1432d707537e5fc262a1eee086b85cb3010d263b00d994aea2b0f9a2d6d4dada8b4e97c5740220aabc3bc7ccd09ff8b995232d342c", 0xb4}, {&(0x7f0000000c40)="8174181a6a733ea375735b08db88e0c6e7e48f5226cf5d3633036d2fe2370ecf3303a5a9afad589de9f2cee91e860615641b270f432970a81684961a0db72b50accf", 0x42}, {&(0x7f0000000cc0)="356efa3954aef5f0817b2cf5e79a4f646a20b06902833f0e802853e194a983c7fd6642c21de069c64bb7f6c15c1cdf11b9eaa5620943a394e43ccfebcdd4294bab9a693135a3e21a0c7738ef6e4a6504a991d259a4d06357e5b23b742c2001f1e66fc067968e2d4ee87595e402ba657c699ca5a0b15324e368ac5473f84777617da8c031019dc256d7c3e5fe0c48789d49523180d316bf649b18ec57b7146493630a1f3cb31a5c56ed95b285d09b0dcc2f77fdee310967ea91b9d179366ad5bf4f52b0e99a231c", 0xc7}, {&(0x7f0000000dc0)="b9ba059f4a52f148144533f8e56fae99aa5ab78ae3662a3e4fa16f70b85cfcc9ef2b756d975ca37b9ebb4b75da9d8e5aacd5e19dd24259a1cdc4f959d449eefa855dca220e481aa6760de6c267b2bc13a13c2448901c415eb17f190bd2a447cd86d2a632430c83783f65aaf4d6a58841c4076c053c985a978ffeffc6d806e1e4564dadc73b464914971344a63d2df29b51cb42c4a4", 0x95}, {&(0x7f0000000e80)="46f712b073f4ec59e0163a0243570e909b7813d560771b90e71674001794886c4a6a829c68a40fd753dd6034fc25ca902e28babec803167ab57f4838d67daff67a1bc54e5b176dfba9d9e4fa78b4c32a70f2c11d7833fa3727fa3f3110e6892d546bcb38691a982f7d025155bc3b3f8da256ef", 0x73}, {&(0x7f0000000f00)="42bbe40e0706db6bda005d461c3a4c64ce70fb4c4997119cc2de405cc7ab7191f1aa6ca02418436c367e06ed5211eadcbd3917e79cad6d723a1336f0f22d861cea317cfa75e48c8287bd1cea69ee9eef9383fa86cc766e607a7792b4ed48ee0ab2160189784fe2f0652061313394125cac9da5df2e7c49660903ae149419d49031319125819c8e70b4434debc23a97bea81f91386692280e6d39dc487b52bff41d403b74c0beca41bd5053b8587d9cac2e125143335412d07f2dce53ae26304ce0dfc321b28a80a8c034c164cb9cd8d57a4e6a23caae3d800e814f1fec29a640c9a970d6fae6eb5f2484920680ef6c60a98f1c29b5a4ae7a832fcd06beef1bd1c7eca27649c9b63ae400bea4f4b1a6520928b9f15780a425bd0b81305ddc9fe77cbbc7b360ad2b75a6e21bf37624015e26a4303c3b31e572e3346d38f7b9fb7c968fb24d52726dbcc4ebfdd1140e662ab2a3eb819abf377ecb9b034fe34f5e4c883dddb110b0dc999ec9190125a5a5ebd3a24177f70fab866c03dbaca70e31a1b75873867c01bea307d6c8a86e6862c28ab78e5c4790e4a9172b5133ae29ed53d1495cb581f7ae6a6d1eb9f6544ef606c1a312e2a704cb4db9fcb5fdac2f2224edf319be4970ed6d680f2bce19872c1231362d70e8edd1c9bc5748060a08c9ca71cc1aace86efac6f3547962cf5f1e939aa9c0abd93d3df9efbffda6dce16688f091a6902acc3937e7cd9950a227932ba91aca03aa45ee81ca12287862bdb5bcccbea8022a2dfd531c3827467fb8f30ce32695acadd862efa017d4dc10ef58fc964d9f6f6e4c176fa0389f387060d493ab139104a20fadad496741ec218f54a8e597b2f388752a117e28e2208a2fb42dbd84892649224c9f77df25e0ad973696963f42668f3a7be20572f12dbd91eaefdbce400f34ea73f8b63ec7bad5f4854df307b10440d4136b663316bb224c1980d7cccf282cef5828e2ffd3a63e4358a91dc32d8a318af5316d1a2ee992bf8ccec192d3483a93d6f6701623c0e7ed175e43c25cae0c775e860d09430a41a2c672e90205813e117c67ffd09df4b48f543bd3d61e8069a37efa4a43785623788d959a42d5dae43c9db864b6204876d373740a6c3b7c8e2beeaeb68b76f3153b92300b36e272b168ad0bd46c58137026f9bcb653fc8f9298388673321e55cc7d50028cb27754141dc79a9e6d3e5e288c319b804d89dacd594991ad080b359ec8e15ed19f8909732c9be81d005940fc2a1730e88437e9d37597f38192d29c05aff65d3bc67c7e9774ad5f1672abe8e7b90d817e8d1b9282a2a738e3b410dcc93c1f38f1df894bc37852df076a83f90a8099a2bdb47ee0d80888f7f1fb01f84ce32e2c4c5f3a249add10613548c7d5f8c461432635195049f936decd39be91294ab0a215d21ea33ff12075b15e3df1342ef698bb45b88678ed7cea86b9c6f142ab9516dee5b8c68535f037f7ff412485469d7a88b4011f4ad2a905c790843ad0a3e5a5aa37dd246a5ff5aa05fe9281fcdf0504fc26e2cbe0ac2ea1604dce28738eb9946676fed6cccf92284570d9fb36330541933343a1214d54ae6738bde085bbb7dbb64a513420bcda13a4d5816ef25484ad1d79a1b337707fb8214446d8f9f036fb577d31e5c23564370a566fe38b5dab8caada36eacbaee34d98b6ab1b49bb4db9941092bea12f4ff09f25a0326b1ee504d0a3d211c1ee89d107ea8a0e29bfad562746dac80225a800d617dcae8f827ac46b8fc5c95e16bf16d426758567e3b33c1167444d3abdf1ed1d95f39486af97a4aac7d65f78535c87a9c719603e4eaecd648b6ee476d0155ee9595f05349a55b3d90c70e9507a665e5225e9d3e411155f0d5bfc3bb221c81a1beb506b28e802296807e6e99bc8e502b44909d323c251ef0702a721dd5d132e72fe4283b7c7c98c6a84f768794bcadc6bbdc7fd74c3c89f83690d28debe06b864888034b3f930c147f2c7df5f0e6a919f1ac896a9858490e400eb521ce57c54247957b6fef2aded4e540cc37efabcd86a29ac3b60db60373f222f4a08924981bad614d3a77b57cd061eeb5f17eac1fcf9ab5b3ffa4d7cb6a359ad453e5dd6a6d1602a873841f096db5e30ae3d9a182a92a8b3e15d85e0b58ae80d5c3e0c76d6897f0e5d3e756432ca2df9c7efe1f5d5a12d71bcd0a5e7898433139ad7cb3264f12dc124e1d7f06b81e36c46edffc7075aea52abe962c6a11214300bc661db9ba61afbe19745553c9427ac4535e9ff9653da7c7ab6d88a18fb86ab26dabb3d9760f23a3e01195b0d35bf88200e5a479ae739f0852e4ddea872234b7c9e6a83c1dcace24c43113e5154848858fa87c4ce49e9c350d8999edbf92416313f55b9708f319cc575af8981b7c7ccccfe4a86dda2f2a1ca44b78614634d2ad993102201484424e26e661cf36a83c451985c40b1b978b79a8f5f560d1858520b1cf2fd65d17a1a4d947ffb992f450de4b6be15f8eb183923776f3c47130c44f2e3a1d22381018c3f3f09128b90c1d3d80b21590e8c349b57198b2ef9425ceb9af63ed294fb425fdddab5aab82c5645d489619c3a4e7b3bebe38e2d17b25bab6f6c96ff9e1f3699e22e64273230d8dd8f228677b0c11ca063c44b8266a3d974e60326d71c2b466f03294e7d35dfd2e623793742e65f7952788cafe7bf98a3a4fef124b931f4463e24208400b8b4e20c9bf704c8d6e6c67fc75e58704cad50c03b79c3a1e0b99a55eb38dac206e2df0eb1fa24576db99905bf87c79f90835ee8a92a1278f8dbe47658920e44f1995bb6a3245ded8dbf0f4198a63706a05c78aba2109e15a53a3aad6a93bf219dffe038b21a86839c809a11c3d31810df991b9729c93212397143cf3816255c8b9b20d0c2ed9f793d4c2d3ded1b9f4152adbf0bdb6a55a314e5a10743d2705935172dbc0385b73acb4056825a2a576c4e11d99c833160086d9a7902742cd3250876e20ae80984c09146d218f7680e1ab11b3e351b9b995c002fd07adfd8297d4c949ca064c8f8fc79499c033fa910d70169f36dbeeeac9c3314209e33507d1b68a204ea91fdb92b131b46f22887e72512cce5eed3fdd39f6ff1e1a8170db39504735996f5247859f4ba36140bc4c3f3be8d8d05e96c37bcb75ff4d706d9e2d4d5500c7ff70471ac6032cb6aa4a570b7b614e4d7540ea81fc93aa25c84a9e5885a25e5d0a62ad46c5f8ffd8b8604319a1ac215127707d3f713ce1c5f87735d9ac7a765e89674500fb52c120d13f09d39c0d8c5fa64d30fa1c2817010ac533893acd57110a337ab065d8d9c3b96a2297e728e6a39d8f6831d0c465aa416da25f09c931fbd53414758f386d49d79e3691a3914bbd5ed8adca74193d31258007b99aa73ee17403df4a7e935ca28936b0722c0a9803796a39a8df8bca97adef553c80458aec7f61f8be6eaaf4f0c81c27d95cdc44e735727fd574a4ab529218cae1956eaa974115a7483618c91456c628f1a38dde840991cfc94843b2a3a3d5941f9d29073b17f21af1e1b31b26d63b6c0a26d79f40b711bbda3a1a670f08a28a5286b99217fcf58d77e0590b969badd1a3235aae6204a69cbb426f9e4e9c461c6387dfad1c70c9c5f41b1add3dbe64e13ee1e26900f12a8ed48eb99a26ba022348ed21b8f691fc2c09d61d2c209b7e359d8f024801420424d5141983b07ce56c3c67d52c61c535f791f9da6571e772fea058ab82b4987855480c936550cb39f40f4b65ae57dc28d0419f46fd1c02df841cd476a7ec98296e0098c8a3c0dfb03c53d39ed6683bd4edd66cd4e3e04a43562a2daddf432f95627f98164b1c33954e7860cb0ce367ddbe88e9e1d62ac9130a66035951fc50faab675b23206711d96e0dcaed57e4c08921975de213f6ae34e314262c5fe32a02bbde2323ccfe5bde1d22945726486082a46d0bee8999978714eb8f55187f57ca2f8476fe738d1766d721fa58f40dc45c2c2c06f5d0eefad885485c50affba33435817a0a584dab5c923e83e2aa5871384554d7ab604471011d9eaa3b6f3e378c7e18ad7032f47b29c6bb3fed5f5263ef5aeace03e23c10b00f0dd8993643e2427578dedb905de92d4c9b2acf0a0c2bdd79509addb4469fc50d800cd7b544950d22fc79b657f7d13668beea2b97a22012e9d3e9629c5d3af248237cba4273e79406ceaad27f255deca26fe36fa9b487340ae1b7f55012ba7a26f219bc785bcc159832a227130bbac0cca51d323ac60020452a0ab7d5a99dc25b8a0862e0d14efa31f1231889b1e5f3717359a108df4512b11a891824851a73a769fed93e6bbae0582911b7311bb25268ba5a39ec5984ff1255ad3012ca5340687aafc8dcfdaf9415746fc99974b49ee81271639bc7fdbe26273495213e890756c9162323517a2d127f7f4eba68e70b63a4583c435c23c4f46e61a916de924cdcea15ee4f63f900aa9d5a5c427e823d2386dd75a5a70da8368083ac195ec2da5c2e7d83d00b36bab2080a34f47e48b30dfaa1c5ce5730b117090995d6e36606d3e7c1223cd9b644f7fded6d230942973eb008991c07b9ef360099005456a84c9d0b1b6614323cec8c17751d462b4cae797257b8045484ac5737799f3325eb3eeda11bb52ed2ef7e30edf2ae78a559da262f28eecb2ca63cd0aec60708d3f54c2d9f2128f43874a7924920c434582a68fc18250bcc96396969420ae7e20a3ebcc87c03ac364d5430667d88cda734a3b14e236807bdad76c13b736673c037a9a7a31e3ed146b5caa99c594af1838d0c9629fb103c6b93e41e8a1e6df8e841effbe6f2f960abab2653597b5ce5263e35796ec74319fc13b0252ca1932b3b4d5707757fe78d7148eb4339b09aebf9b4bb6508e01117ec41438c1f89b37a79757f5651a82600f3f5d3aec9b4794c8a420d3cc213d51084a0b9013fb601dfa933b951a517494edd0e5a2f5814ec396e3d83f4e7b7da2572401fa63d16e53963d5e05a2e864a1cfc9961a798c0edc187145c43edc7ccb3674ef5c9422a508f0ba3a7a1fd92d96b52b2c0acfb7b71453c56c0a7bc00fecaed7b7c8f894a3e80d6eed2415b05c49d5788abd1ac0b792de39ccb0b51d5be4e62467da95a61255e674506ff3b569648d8fca7b8b25e9bf025a63b1b2afccf47b08bd87bb415717f86ae00b3f028c44ea816743c37abd5af049aa458a6412ce5ca309a48a8f6ab7fbf797e9df41e9020079ba7d5999c7b3cafffdc4f19f6d383556f07116a7e45cc1a72cc022e1f034479566e560b8ed87de35070e2fab9d4796d17cac80d3b6d901b2c9eea26e7f214747da153ae8a12445e2b70dcd8729ceee5eaa690bfebb0f5982117d023553baa20a8fac1ae475be9a7bc98fe54d04c08642d4a78a0a266c4b4ed1b203bbef9f98d1d93edc73f8773884e4ad652062bf5730c9206ad948bc5abe4a35da2c777130d1a67f8a70e6774ac239d4bb3b2cdc8e1ec250319259aac43cecbb8ac7d9aed1151b4be874d0fae03c11f2d2e543551757f3978578855a4c42ae268ba5c25c37035236ac4e4d9a5c7a106fccc252490e4d18fdd8e4283b7a943477cd4a9ed63231e6100c631b452a4632accc15c164ddd8e5cd34900103b7449a78f5d58c81a391018936ab56fd9491718e60d4e5b7ed85d74f8746977b0cfd34c57d5e42a8014936b14436a2093ce50a5fda169f1ee3834a2ce0541b55d91a522f65cc0000e37d12de0415ad7aaaa439620c0347d27eb64250a5b61c1c55f2702eaa68ad13ffe37dc143d29eef116c219dd4400cf7", 0x1000}, {&(0x7f0000001f00)="ec3a3c90f30b7419feffd9b4508f3dd3bfa1b99cdea032fd98b157cece9531cc0951f8c37cb5a9c7dcbd20dcfba524383cdc406f721b0a012b9706930f22c172b06d8d7cc1b51ab731cb007cf9814362c34f3c8dd91fb84c29e69b927134eecb4bca", 0x62}, {&(0x7f0000001f80)="094a9f2620280b28c1990b32be8f7607744744ea95292f85fa990b7bb61eb901b97bb62662357a4ef4a75371f31e4f045d1bf64d28c2c908896119bdcb8ec24e67749db091ec19cf3854c99ac944a188c4b642bf2a902d9e4c0b", 0x5a}, {&(0x7f0000002000)="aeee9d01d4cee9a1c3199f989d00a4c6a807e555d7de44ced2043557d3ef2985e8716e22d6655b44fd378e67e49ca308923dfa525c00a0da48b044e57c90fe94", 0x40}], 0x9, &(0x7f0000002100)=[{0xd8, 0x10e, 0x0, "ba9dd5dc61d5d5c282e78628a8a3af3aa6dfbe5cc8f661b1b0ffcd051271d825dee6eec6b75ef77e38ad29c1e0633e7accc34603adbac1edbd04e687a62ce1fc004e236604b44599c81c512ec0d32a4b63cc9c97f9e8986aee27565d0cc242da6e56bbb1c7801d421f5b624c049a4684ea3dc4183a3b446002ceb26ed7019b16e4f4f08719993ecb6d880ca58b91a5e73ed8ea79789c460c4182f2eb1e000bdc97c50b18281fc978e46972e436271d5052a17ff27f1b1cf92e100ac8675fd0331bf925"}, {0x88, 0x107, 0x13, "7e6b3534c7abbe2af04fd4195b54a8c7595d26d5dbe505009365c52f29b425133e3423e9a00e49f787227eff1cf0b18d1c2dd4353603e984ab3a34daab7245d789f09bf1f0323af028f1e7b387298b20c218abf46bd7739a9a13bc0315d790281b75849c0ae30c5168ade215d7d5e046bc3c1096e4f2be26"}, {0xf8, 0x109, 0x0, "3b8ab35910295f98c7f6067f5010fd0a04853976991a95029f7f242ba2f40fe4bf4f7f2d7d29e51edc7b3f48aabf7fc0c67d338b5645458c9ad5467dfac20dc652816c48ceb3f5fd3889899f0cd408aa8e15775298549335271d845c52efd727621542733169689e05927e0cf8c129821131f6faf36361e4c339394e62f9dcafd218de5dad94995ae3d079b11b9dcbf05e5383cb09d9213e7897e263de09e01628b4972a4d7a9e44f7b249f9ec79ddd9fd688b29d2ff3a464c0f2cbb3dbd7bdd6d8324d404bd5395dcf7f34a0be3d82db743f9d68811cf6dbfbab8bc815f0feb9d9465daf949fff6"}, {0xd0, 0x0, 0x9, "7e17da0535685209872bc51bba5cd7bbd10a4284939880a797e4a647be538be1be18eb892fd2ab471ef09ea92e8ab7dcc9614e2fd74bcb95d0a5919604c7d3f5d28506dd25fb6292489e5ba287258b4306c92aed4c44024a72217b725ef6c25be9b886218e687c124f67495cc95738d447260e60ea0243bb8c852a479f2c5d2de213dcc2907489c300529719537cab66472a6c313f5465309732113ae978ded09f5932779b79012267895c0a5703dca4dad7cb1f12151aa33163b5e36eba"}, {0x18, 0x102, 0x5, "b6dbe870173ccc"}, {0x78, 0x188, 0x6, "7eeeb7017961a4861b0e6083dabc36c1797a6bdb8dafc426816e60b87ea9e8a81e2523fcbc8bd008a41c77a9d689abf0080d2b093fd3b4814257ec1f474426d2af4a257958c492fba5192ac9f0a363d13439c1c9725e8898e57c21be203d5792dd"}, {0x78, 0x6, 0x5, "9bd9ebbce9132fcf938e669f0b43a2dffee59d12964aee00440855e6996dc6623c5a809ca87a8004e33ab1b1cd3bae101c7c624159ec7593653e3f9a41d8d23d72e47ab5c27685e1ff05ddb00bfdf63f30520ba2002b91763aabf02869df5fad6aba"}, {0xe8, 0x29, 0xff, "45e203bb63b40f215c64649a35e8e03240bfdeb04feadb0aa7b0f1848a63d985681faa8ee12625d1529222bf0df13a878e79ad60e54af79122b7d93b697eed6964f0e5ea58a3c7e579d1a6776f7a5bda9557a7503347f8233703d7e0355f593425b4f72f14dc11e95dd4afac758d62cff875fb69cc85d33649c5834cb3629b89d9dc40f7360f330bc968b642d38abc9783dfbb6f6de39e7b809730706d3b2d97c0fe33a51c6f4f8294d6677835ae5d5ece839d16d1264269f5351f34a7fe142325a32c9ea9b074f34615d588cb47b5940ea4e3"}], 0x518}, 0x0) (async) getsockopt$inet_sctp_SCTP_DEFAULT_PRINFO(r3, 0x84, 0x72, &(0x7f0000002680)={0x0, 0x3}, &(0x7f00000026c0)=0xc) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000002700)={r5, 0x3}, &(0x7f0000002740)=0x8) (async, rerun: 32) setsockopt$IP_VS_SO_SET_DEL(r3, 0x0, 0x484, &(0x7f0000002780)={0x8a, @multicast1, 0x4e21, 0x4, 'wrr\x00', 0x1, 0x0, 0x30}, 0x2c) (async, rerun: 32) setsockopt$inet_sctp6_SCTP_ASSOCINFO(r2, 0x84, 0x1, &(0x7f00000027c0)={r5, 0x4, 0x4, 0xb9, 0x3, 0x40}, 0x14) (async) r6 = accept4$ax25(r2, &(0x7f0000002800)={{0x3, @null}, [@rose, @default, @netrom, @default, @remote, @default, @remote, @rose]}, &(0x7f0000002880)=0x48, 0x80800) getsockname$ax25(r6, &(0x7f00000028c0)={{0x3, @bcast}, [@bcast, @rose, @netrom, @netrom, @netrom, @bcast, @netrom, @netrom]}, &(0x7f0000002940)=0x48) sendmsg$FOU_CMD_ADD(r3, &(0x7f0000002a40)={&(0x7f0000002980)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000002a00)={&(0x7f00000029c0)={0x3c, 0x0, 0x8, 0x70bd26, 0x25dfdbfe, {}, [@FOU_ATTR_LOCAL_V6={0x14, 0x7, @remote}, @FOU_ATTR_LOCAL_V6={0x14, 0x7, @private2={0xfc, 0x2, '\x00', 0x1}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x20000840}, 0x4011) (async, rerun: 32) sendmsg$nl_route(r2, &(0x7f0000002b40)={&(0x7f0000002a80)={0x10, 0x0, 0x0, 0x2}, 0xc, &(0x7f0000002b00)={&(0x7f0000002ac0)=@ipv6_getanyicast={0x14, 0x3e, 0x200, 0x70bd2d, 0x25dfdbfd, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20004041}, 0x20004001) (async, rerun: 32) connect$ax25(r3, &(0x7f0000002b80)={{0x3, @null}, [@rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @bcast, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x1}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x3}, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x0}]}, 0x48) (async) r7 = syz_genetlink_get_family_id$nl80211(&(0x7f0000002c40), r3) sendmsg$NL80211_CMD_RELOAD_REGDB(r2, &(0x7f0000002d00)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x40}, 0xc, &(0x7f0000002cc0)={&(0x7f0000002c80)={0x14, r7, 0xb1aa1ffd079d8e99, 0x70bd27, 0x25dfdbfc, {}, ["", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40050}, 0x8810) 53.589676919s ago: executing program 4 (id=273): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) sendmmsg$sock(r1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1a, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32=r4], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000935000/0x3000)=nil, 0x3000, 0xb, 0x2010, 0xffffffffffffffff, 0x0) shutdown(r0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt(r6, 0x1, 0x9, &(0x7f0000000000)=""/106, &(0x7f00000000c0)=0x6a) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7000000018000500000000000000000002000000000200090000000006001500040000004c00168048000880440001803e"], 0x70}}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES64=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001"], 0x84}}, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 40.820689367s ago: executing program 1 (id=256): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x5, 0x5, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0xfffffffffffffffe}], {0x95, 0x0, 0x0, 0x1a03d3}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1000070, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x2}, 0x1c) socket$rds(0x15, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x34, 0x2c, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0x2}, {}, {0x10, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x998, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0xb}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_bpf={{0x8}, {0x6c, 0x2, [@TCA_BPF_FLAGS={0x8}, @TCA_BPF_FD={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x2}}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x7}, {0x3c, 0x5, [{0x7, 0x6, 0x0, 0x8001}, {0x7, 0x3, 0x7, 0xb4e}, {0x3, 0x2, 0xb, 0x7}, {0x2, 0x0, 0x2, 0x5}, {0x5, 0x0, 0x7, 0x31d}, {0x0, 0xc2, 0x1, 0x400}, {0x6bb3, 0x1, 0x9, 0xfffffff4}]}}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_ICMPV4_CODE={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e21}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_ARP_TIP_MASK={0x8, 0x3c, 0xff000000}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}]}}, @filter_kind_options=@f_route={{0xa}, {0x89c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x828, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x9, 0x9, 0x100, 0x6, 0x46a07250, 0x7, 0x0, 0x7, 0x0, 0x4, 0x3, 0x0, 0x800, 0x9, 0x9, 0x5, 0x1, 0x7, 0x0, 0x1, 0x9, 0x6fa, 0x23a2, 0x5, 0x50a, 0x7, 0x5, 0x5, 0x2, 0xffffffff, 0x9, 0x7, 0x9, 0x401, 0x10000, 0x3, 0x1000, 0x6, 0x1, 0x1, 0x2, 0x1, 0x8, 0x5, 0x5, 0xe, 0xffffffff, 0xfff, 0x0, 0x4, 0xcd34, 0x332c, 0x1728, 0x34b2, 0x4, 0x6, 0x6, 0xfc4, 0x3, 0x5, 0x6, 0x6, 0x80000000, 0x32a8, 0xe52a, 0x10000, 0x10000, 0x5, 0x81, 0x1, 0x2c45271d, 0x7fff, 0x7, 0xfffffff8, 0x3, 0x100, 0x8, 0x5, 0x5, 0x1, 0x101, 0xb37f, 0xc, 0x2, 0x2, 0xfffff800, 0x4, 0x101, 0xcba, 0x0, 0xa1d4, 0x8, 0x38d, 0xf81, 0x0, 0x20000, 0x5, 0x1, 0x2fe, 0x8, 0x3, 0x1, 0x0, 0x4, 0x2, 0x81, 0x8001, 0x2, 0x1, 0x2, 0x1, 0x9, 0x9, 0x8, 0x0, 0x8, 0x8f6, 0x0, 0xffffb887, 0x8, 0x6, 0x6, 0x9, 0x9, 0x81, 0x3, 0x3, 0x6, 0x0, 0x101, 0x4, 0x9, 0x6, 0x8, 0xff, 0xffffffff, 0x6, 0x529, 0x4f, 0x29de, 0x875f, 0x6, 0x9, 0x1, 0x4, 0x2, 0xfff, 0x9, 0x31713b50, 0x3, 0x7, 0x9, 0x4, 0x91, 0x1, 0x3, 0x80000000, 0x75f, 0x7, 0xfffffff4, 0x1, 0xfffffc01, 0x35, 0x10, 0xd7, 0x2, 0xd, 0x0, 0x9, 0x3, 0xfffffff1, 0xfffff800, 0x6, 0x6, 0x1, 0xffff67c8, 0x9, 0x1, 0x9, 0x3, 0x10, 0x18800000, 0x2, 0x2, 0x3, 0x7, 0x8, 0x8, 0x81, 0x1, 0x1, 0xa, 0xb9, 0xfffffe01, 0x6, 0x1, 0x2, 0x3, 0x8, 0x2, 0x8, 0x3, 0x6, 0xc, 0xb024, 0x3, 0x3, 0x4, 0xd3ea, 0x6, 0x6, 0x8, 0x3, 0x0, 0xfd65, 0x5, 0x5, 0x3, 0xa, 0x8, 0x8, 0x0, 0x4, 0x2, 0x137, 0x0, 0xc, 0x8001, 0x401, 0xe5, 0x2, 0x9, 0x3, 0x6, 0x573, 0x33, 0x4, 0xff, 0x0, 0x1, 0x7ff, 0xffffff67, 0xfa6, 0x5c, 0xdd1, 0xe, 0x9, 0x7f, 0x3ff, 0x7fffffff, 0x1, 0x1, 0x8, 0xb, 0x2]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x10, 0xffff, 0x10001, 0x800, 0xfffffff7, 0x7, 0x80000001, 0xfffffffa, 0xe0, 0x80000001, 0x6, 0x2, 0x8, 0x2, 0x6, 0x3ff, 0x3, 0x0, 0x28, 0x6, 0x7f, 0xffffa9f4, 0x233, 0xc71, 0x5, 0x10001, 0x0, 0x6, 0xfffffff9, 0x7, 0x6, 0x6, 0x216, 0xfffffffb, 0x37e, 0xb8a, 0x32, 0x7, 0x2, 0x40, 0x0, 0x2400000, 0x6d, 0x9, 0xeb, 0x1, 0x4, 0x6, 0x0, 0x2, 0x7, 0x6, 0x8e, 0x9, 0x1, 0xd, 0x7, 0x1, 0x9, 0x9, 0x6, 0x0, 0x3, 0x5, 0x3f, 0x1ff, 0xabc4, 0x2, 0x2, 0x4, 0x2, 0x65e2, 0x5, 0x6, 0x1, 0xa33121c, 0x1ff, 0x1, 0x7, 0x0, 0x2, 0x4, 0x6, 0x484b313f, 0x3, 0x4, 0x2, 0x4, 0x52, 0x9607, 0x51, 0x3, 0xffffffff, 0x4, 0xfffffff2, 0x2, 0x5, 0x7, 0x8, 0x1, 0x8, 0x75c, 0x7, 0x7fffffff, 0xf272, 0xfffffffb, 0x4, 0x7d3, 0x9, 0x7, 0x9, 0x7, 0x8003, 0x2eb, 0x7, 0x1, 0x0, 0x0, 0x8001, 0x2, 0x10001, 0x5, 0x8001, 0x8, 0x2b, 0x1, 0x3, 0x80000000, 0x7fffffff, 0x1, 0x8, 0x401, 0x8001, 0x6, 0x5, 0x9, 0x1, 0x20, 0x4, 0x9, 0xb, 0xd, 0x2, 0xb, 0x7, 0x81, 0x98, 0x1, 0x80000000, 0x7, 0x7, 0x5, 0x3, 0x2, 0x0, 0xa40, 0xc0, 0x6, 0x3, 0xffff7fff, 0x5, 0x6, 0x4, 0x40, 0x7ff, 0x0, 0x17f, 0x1000, 0x401, 0x7fc6, 0xfffffff7, 0x100, 0xfffffff9, 0x7f, 0x8, 0xffff, 0x40000000, 0x6, 0x6, 0x10001, 0x7, 0x80, 0x8001, 0x6, 0xf, 0x6, 0x5, 0x4, 0x8, 0x9, 0x1, 0x6, 0x9bec, 0xfffffffb, 0x6, 0x1026, 0x3, 0x40000, 0x0, 0x9, 0xfff, 0xfffffffe, 0x7, 0x8001, 0x0, 0xfff, 0x7, 0x9, 0x5, 0x7f, 0x3ff, 0xc, 0x58c9, 0x3, 0x9, 0x5, 0x2e1, 0xbf8, 0x8, 0x79a0, 0x9, 0x7, 0x401, 0xebd6, 0x3, 0xffff, 0x1, 0x4, 0x200, 0x5, 0xfffff000, 0x8, 0x5, 0x7, 0xfffffffd, 0x8, 0x8, 0x3, 0x7f, 0x2, 0x0, 0x8001, 0x101, 0x191, 0x2, 0x800, 0x2, 0x1, 0x2, 0x5, 0x4, 0x4, 0x2, 0x2, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]}, @TCA_ROUTE4_ACT={0x60, 0x6, [@m_connmark={0x5c, 0x0, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x5, 0x2e, 0x800}, 0x6}}]}, {0xd, 0x6, "66396e732cf67237ec"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x998}, 0x1, 0x0, 0x0, 0x81}, 0x0) r1 = socket(0x10, 0x803, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a00000000000000000000000000000900010073797a30000000002c000000030a00000000000000000000000000000900010073797a30000000000900030073797a30000000006c000000060a000000000000000000000000000008000b4000000000440004802c0001800a0001006c696d69740000001c0002800c00014000005300000000000c0002400000000000000000140001800b0001006c6f6f6b75700000040002800900010073797a300000000014000000110001"], 0xe0}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}, 0x1, 0x0, 0x0, 0x881}, 0x0) 34.374236683s ago: executing program 4 (id=273): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) sendmmsg$sock(r1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1a, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32=r4], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000935000/0x3000)=nil, 0x3000, 0xb, 0x2010, 0xffffffffffffffff, 0x0) shutdown(r0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt(r6, 0x1, 0x9, &(0x7f0000000000)=""/106, &(0x7f00000000c0)=0x6a) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7000000018000500000000000000000002000000000200090000000006001500040000004c00168048000880440001803e"], 0x70}}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES64=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001"], 0x84}}, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 22.855132784s ago: executing program 1 (id=256): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x5, 0x5, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0xfffffffffffffffe}], {0x95, 0x0, 0x0, 0x1a03d3}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1000070, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x2}, 0x1c) socket$rds(0x15, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x34, 0x2c, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0x2}, {}, {0x10, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x998, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0xb}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_bpf={{0x8}, {0x6c, 0x2, [@TCA_BPF_FLAGS={0x8}, @TCA_BPF_FD={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x2}}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x7}, {0x3c, 0x5, [{0x7, 0x6, 0x0, 0x8001}, {0x7, 0x3, 0x7, 0xb4e}, {0x3, 0x2, 0xb, 0x7}, {0x2, 0x0, 0x2, 0x5}, {0x5, 0x0, 0x7, 0x31d}, {0x0, 0xc2, 0x1, 0x400}, {0x6bb3, 0x1, 0x9, 0xfffffff4}]}}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_ICMPV4_CODE={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e21}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_ARP_TIP_MASK={0x8, 0x3c, 0xff000000}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}]}}, @filter_kind_options=@f_route={{0xa}, {0x89c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x828, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x9, 0x9, 0x100, 0x6, 0x46a07250, 0x7, 0x0, 0x7, 0x0, 0x4, 0x3, 0x0, 0x800, 0x9, 0x9, 0x5, 0x1, 0x7, 0x0, 0x1, 0x9, 0x6fa, 0x23a2, 0x5, 0x50a, 0x7, 0x5, 0x5, 0x2, 0xffffffff, 0x9, 0x7, 0x9, 0x401, 0x10000, 0x3, 0x1000, 0x6, 0x1, 0x1, 0x2, 0x1, 0x8, 0x5, 0x5, 0xe, 0xffffffff, 0xfff, 0x0, 0x4, 0xcd34, 0x332c, 0x1728, 0x34b2, 0x4, 0x6, 0x6, 0xfc4, 0x3, 0x5, 0x6, 0x6, 0x80000000, 0x32a8, 0xe52a, 0x10000, 0x10000, 0x5, 0x81, 0x1, 0x2c45271d, 0x7fff, 0x7, 0xfffffff8, 0x3, 0x100, 0x8, 0x5, 0x5, 0x1, 0x101, 0xb37f, 0xc, 0x2, 0x2, 0xfffff800, 0x4, 0x101, 0xcba, 0x0, 0xa1d4, 0x8, 0x38d, 0xf81, 0x0, 0x20000, 0x5, 0x1, 0x2fe, 0x8, 0x3, 0x1, 0x0, 0x4, 0x2, 0x81, 0x8001, 0x2, 0x1, 0x2, 0x1, 0x9, 0x9, 0x8, 0x0, 0x8, 0x8f6, 0x0, 0xffffb887, 0x8, 0x6, 0x6, 0x9, 0x9, 0x81, 0x3, 0x3, 0x6, 0x0, 0x101, 0x4, 0x9, 0x6, 0x8, 0xff, 0xffffffff, 0x6, 0x529, 0x4f, 0x29de, 0x875f, 0x6, 0x9, 0x1, 0x4, 0x2, 0xfff, 0x9, 0x31713b50, 0x3, 0x7, 0x9, 0x4, 0x91, 0x1, 0x3, 0x80000000, 0x75f, 0x7, 0xfffffff4, 0x1, 0xfffffc01, 0x35, 0x10, 0xd7, 0x2, 0xd, 0x0, 0x9, 0x3, 0xfffffff1, 0xfffff800, 0x6, 0x6, 0x1, 0xffff67c8, 0x9, 0x1, 0x9, 0x3, 0x10, 0x18800000, 0x2, 0x2, 0x3, 0x7, 0x8, 0x8, 0x81, 0x1, 0x1, 0xa, 0xb9, 0xfffffe01, 0x6, 0x1, 0x2, 0x3, 0x8, 0x2, 0x8, 0x3, 0x6, 0xc, 0xb024, 0x3, 0x3, 0x4, 0xd3ea, 0x6, 0x6, 0x8, 0x3, 0x0, 0xfd65, 0x5, 0x5, 0x3, 0xa, 0x8, 0x8, 0x0, 0x4, 0x2, 0x137, 0x0, 0xc, 0x8001, 0x401, 0xe5, 0x2, 0x9, 0x3, 0x6, 0x573, 0x33, 0x4, 0xff, 0x0, 0x1, 0x7ff, 0xffffff67, 0xfa6, 0x5c, 0xdd1, 0xe, 0x9, 0x7f, 0x3ff, 0x7fffffff, 0x1, 0x1, 0x8, 0xb, 0x2]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x10, 0xffff, 0x10001, 0x800, 0xfffffff7, 0x7, 0x80000001, 0xfffffffa, 0xe0, 0x80000001, 0x6, 0x2, 0x8, 0x2, 0x6, 0x3ff, 0x3, 0x0, 0x28, 0x6, 0x7f, 0xffffa9f4, 0x233, 0xc71, 0x5, 0x10001, 0x0, 0x6, 0xfffffff9, 0x7, 0x6, 0x6, 0x216, 0xfffffffb, 0x37e, 0xb8a, 0x32, 0x7, 0x2, 0x40, 0x0, 0x2400000, 0x6d, 0x9, 0xeb, 0x1, 0x4, 0x6, 0x0, 0x2, 0x7, 0x6, 0x8e, 0x9, 0x1, 0xd, 0x7, 0x1, 0x9, 0x9, 0x6, 0x0, 0x3, 0x5, 0x3f, 0x1ff, 0xabc4, 0x2, 0x2, 0x4, 0x2, 0x65e2, 0x5, 0x6, 0x1, 0xa33121c, 0x1ff, 0x1, 0x7, 0x0, 0x2, 0x4, 0x6, 0x484b313f, 0x3, 0x4, 0x2, 0x4, 0x52, 0x9607, 0x51, 0x3, 0xffffffff, 0x4, 0xfffffff2, 0x2, 0x5, 0x7, 0x8, 0x1, 0x8, 0x75c, 0x7, 0x7fffffff, 0xf272, 0xfffffffb, 0x4, 0x7d3, 0x9, 0x7, 0x9, 0x7, 0x8003, 0x2eb, 0x7, 0x1, 0x0, 0x0, 0x8001, 0x2, 0x10001, 0x5, 0x8001, 0x8, 0x2b, 0x1, 0x3, 0x80000000, 0x7fffffff, 0x1, 0x8, 0x401, 0x8001, 0x6, 0x5, 0x9, 0x1, 0x20, 0x4, 0x9, 0xb, 0xd, 0x2, 0xb, 0x7, 0x81, 0x98, 0x1, 0x80000000, 0x7, 0x7, 0x5, 0x3, 0x2, 0x0, 0xa40, 0xc0, 0x6, 0x3, 0xffff7fff, 0x5, 0x6, 0x4, 0x40, 0x7ff, 0x0, 0x17f, 0x1000, 0x401, 0x7fc6, 0xfffffff7, 0x100, 0xfffffff9, 0x7f, 0x8, 0xffff, 0x40000000, 0x6, 0x6, 0x10001, 0x7, 0x80, 0x8001, 0x6, 0xf, 0x6, 0x5, 0x4, 0x8, 0x9, 0x1, 0x6, 0x9bec, 0xfffffffb, 0x6, 0x1026, 0x3, 0x40000, 0x0, 0x9, 0xfff, 0xfffffffe, 0x7, 0x8001, 0x0, 0xfff, 0x7, 0x9, 0x5, 0x7f, 0x3ff, 0xc, 0x58c9, 0x3, 0x9, 0x5, 0x2e1, 0xbf8, 0x8, 0x79a0, 0x9, 0x7, 0x401, 0xebd6, 0x3, 0xffff, 0x1, 0x4, 0x200, 0x5, 0xfffff000, 0x8, 0x5, 0x7, 0xfffffffd, 0x8, 0x8, 0x3, 0x7f, 0x2, 0x0, 0x8001, 0x101, 0x191, 0x2, 0x800, 0x2, 0x1, 0x2, 0x5, 0x4, 0x4, 0x2, 0x2, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]}, @TCA_ROUTE4_ACT={0x60, 0x6, [@m_connmark={0x5c, 0x0, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x5, 0x2e, 0x800}, 0x6}}]}, {0xd, 0x6, "66396e732cf67237ec"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x998}, 0x1, 0x0, 0x0, 0x81}, 0x0) r1 = socket(0x10, 0x803, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a00000000000000000000000000000900010073797a30000000002c000000030a00000000000000000000000000000900010073797a30000000000900030073797a30000000006c000000060a000000000000000000000000000008000b4000000000440004802c0001800a0001006c696d69740000001c0002800c00014000005300000000000c0002400000000000000000140001800b0001006c6f6f6b75700000040002800900010073797a300000000014000000110001"], 0xe0}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="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"], 0x4b0}, 0x1, 0x0, 0x0, 0x881}, 0x0) 16.443371455s ago: executing program 4 (id=273): r0 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) mmap(&(0x7f0000000000/0xa000)=nil, 0xa000, 0x2, 0x2172, 0xffffffffffffffff, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x2, 0x0) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, 0x0) r2 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r2, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) ioctl$TUNSETOWNER(0xffffffffffffffff, 0x400454cc, 0x0) ioctl$TUNSETGROUP(0xffffffffffffffff, 0x400454ce, 0x0) sendmmsg$sock(r1, 0x0, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x275a, 0x0) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)=ANY=[@ANYBLOB="02000000040000000800000001"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000001c0)={0x1a, 0x10, &(0x7f0000000000)=ANY=[@ANYRES32=r4], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x15, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r5 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000935000/0x3000)=nil, 0x3000, 0xb, 0x2010, 0xffffffffffffffff, 0x0) shutdown(r0, 0x0) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) getsockopt(r6, 0x1, 0x9, &(0x7f0000000000)=""/106, &(0x7f00000000c0)=0x6a) recvmmsg(r0, &(0x7f0000001d00)=[{{0x0, 0x0, &(0x7f0000001640)=[{&(0x7f0000001d40)=""/4078, 0xfee}, {&(0x7f0000000340)=""/141, 0x8d}, {&(0x7f0000002d40)=""/4116, 0x1005}, {&(0x7f0000000400)=""/6, 0x6}, {&(0x7f0000000440)=""/231, 0xe7}], 0x5}}], 0x3ffffbd, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x8, 0xe, &(0x7f0000000200)=ANY=[@ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000005c0)=ANY=[@ANYBLOB="7000000018000500000000000000000002000000000200090000000006001500040000004c00168048000880440001803e"], 0x70}}, 0x0) write$cgroup_subtree(r1, &(0x7f0000000000)=ANY=[@ANYBLOB="8fedcb7907009875f37538e486dd6317ce6203c23c00fe80000000000000875a65969ff57b00000000000000000000000000ac1414aa2c"], 0xfdef) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000b80)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYRES64=r5], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="14000000100001"], 0x84}}, 0x0) r8 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r8, 0x5, 0xb68, 0x1300, &(0x7f0000000000)='%', 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x0, 0x3032, 0xffffffffffffffff, 0x0) 5.097303463s ago: executing program 1 (id=256): bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000a00)={0x5, 0x5, &(0x7f0000000000)=@framed={{}, [@alu={0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff}, @jmp={0x5, 0x0, 0xe, 0x0, 0x0, 0xfffffffffffffffe}], {0x95, 0x0, 0x0, 0x1a03d3}}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1000070, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000000040)={0xa, 0xe22, 0x0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x10}, 0x1c) connect$inet6(r0, &(0x7f0000000600)={0x2, 0x4e23, 0x0, @dev}, 0x1c) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x0, 0x0, @empty, 0x2}, 0x1c) socket$rds(0x15, 0x5, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000080)=@newtfilter={0x34, 0x2c, 0x1, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0xfffa, 0x2}, {}, {0x10, 0xfff9}}, [@filter_kind_options=@f_flower={{0xb}, {0x4}}]}, 0x34}}, 0x4) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000001fc0)=@delchain={0x998, 0x65, 0x0, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x2, 0x2}, {0x0, 0x9}, {0x0, 0xb}}, [@TCA_CHAIN={0x8}, @filter_kind_options=@f_bpf={{0x8}, {0x6c, 0x2, [@TCA_BPF_FLAGS={0x8}, @TCA_BPF_FD={0x8}, @TCA_BPF_CLASSID={0x8, 0x3, {0xfff2, 0x2}}, @TCA_BPF_NAME={0xc, 0x7, './file0\x00'}, @TCA_BPF_OPS={{0x6, 0x4, 0x7}, {0x3c, 0x5, [{0x7, 0x6, 0x0, 0x8001}, {0x7, 0x3, 0x7, 0xb4e}, {0x3, 0x2, 0xb, 0x7}, {0x2, 0x0, 0x2, 0x5}, {0x5, 0x0, 0x7, 0x31d}, {0x0, 0xc2, 0x1, 0x400}, {0x6bb3, 0x1, 0x9, 0xfffffff4}]}}]}}, @TCA_CHAIN={0x8}, @filter_kind_options=@f_flower={{0xb}, {0x3c, 0x2, [@TCA_FLOWER_KEY_ICMPV4_CODE={0x5}, @TCA_FLOWER_KEY_ICMPV6_CODE={0x5}, @TCA_FLOWER_KEY_PORT_SRC_MAX={0x6, 0x58, 0x4e21}, @TCA_FLOWER_KEY_UDP_SRC_MASK={0x6}, @TCA_FLOWER_KEY_ICMPV6_TYPE={0x5}, @TCA_FLOWER_KEY_ARP_TIP_MASK={0x8, 0x3c, 0xff000000}, @TCA_FLOWER_KEY_SCTP_DST_MASK={0x6}]}}, @filter_kind_options=@f_route={{0xa}, {0x89c, 0x2, [@TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_FROM={0x8}, @TCA_ROUTE4_POLICE={0x828, 0x5, [@TCA_POLICE_RATE={0x404, 0x2, [0x2, 0x9, 0x9, 0x100, 0x6, 0x46a07250, 0x7, 0x0, 0x7, 0x0, 0x4, 0x3, 0x0, 0x800, 0x9, 0x9, 0x5, 0x1, 0x7, 0x0, 0x1, 0x9, 0x6fa, 0x23a2, 0x5, 0x50a, 0x7, 0x5, 0x5, 0x2, 0xffffffff, 0x9, 0x7, 0x9, 0x401, 0x10000, 0x3, 0x1000, 0x6, 0x1, 0x1, 0x2, 0x1, 0x8, 0x5, 0x5, 0xe, 0xffffffff, 0xfff, 0x0, 0x4, 0xcd34, 0x332c, 0x1728, 0x34b2, 0x4, 0x6, 0x6, 0xfc4, 0x3, 0x5, 0x6, 0x6, 0x80000000, 0x32a8, 0xe52a, 0x10000, 0x10000, 0x5, 0x81, 0x1, 0x2c45271d, 0x7fff, 0x7, 0xfffffff8, 0x3, 0x100, 0x8, 0x5, 0x5, 0x1, 0x101, 0xb37f, 0xc, 0x2, 0x2, 0xfffff800, 0x4, 0x101, 0xcba, 0x0, 0xa1d4, 0x8, 0x38d, 0xf81, 0x0, 0x20000, 0x5, 0x1, 0x2fe, 0x8, 0x3, 0x1, 0x0, 0x4, 0x2, 0x81, 0x8001, 0x2, 0x1, 0x2, 0x1, 0x9, 0x9, 0x8, 0x0, 0x8, 0x8f6, 0x0, 0xffffb887, 0x8, 0x6, 0x6, 0x9, 0x9, 0x81, 0x3, 0x3, 0x6, 0x0, 0x101, 0x4, 0x9, 0x6, 0x8, 0xff, 0xffffffff, 0x6, 0x529, 0x4f, 0x29de, 0x875f, 0x6, 0x9, 0x1, 0x4, 0x2, 0xfff, 0x9, 0x31713b50, 0x3, 0x7, 0x9, 0x4, 0x91, 0x1, 0x3, 0x80000000, 0x75f, 0x7, 0xfffffff4, 0x1, 0xfffffc01, 0x35, 0x10, 0xd7, 0x2, 0xd, 0x0, 0x9, 0x3, 0xfffffff1, 0xfffff800, 0x6, 0x6, 0x1, 0xffff67c8, 0x9, 0x1, 0x9, 0x3, 0x10, 0x18800000, 0x2, 0x2, 0x3, 0x7, 0x8, 0x8, 0x81, 0x1, 0x1, 0xa, 0xb9, 0xfffffe01, 0x6, 0x1, 0x2, 0x3, 0x8, 0x2, 0x8, 0x3, 0x6, 0xc, 0xb024, 0x3, 0x3, 0x4, 0xd3ea, 0x6, 0x6, 0x8, 0x3, 0x0, 0xfd65, 0x5, 0x5, 0x3, 0xa, 0x8, 0x8, 0x0, 0x4, 0x2, 0x137, 0x0, 0xc, 0x8001, 0x401, 0xe5, 0x2, 0x9, 0x3, 0x6, 0x573, 0x33, 0x4, 0xff, 0x0, 0x1, 0x7ff, 0xffffff67, 0xfa6, 0x5c, 0xdd1, 0xe, 0x9, 0x7f, 0x3ff, 0x7fffffff, 0x1, 0x1, 0x8, 0xb, 0x2]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x4}, @TCA_POLICE_PEAKRATE64={0xc, 0x9, 0x1}, @TCA_POLICE_RATE={0x404, 0x2, [0x6, 0x10, 0xffff, 0x10001, 0x800, 0xfffffff7, 0x7, 0x80000001, 0xfffffffa, 0xe0, 0x80000001, 0x6, 0x2, 0x8, 0x2, 0x6, 0x3ff, 0x3, 0x0, 0x28, 0x6, 0x7f, 0xffffa9f4, 0x233, 0xc71, 0x5, 0x10001, 0x0, 0x6, 0xfffffff9, 0x7, 0x6, 0x6, 0x216, 0xfffffffb, 0x37e, 0xb8a, 0x32, 0x7, 0x2, 0x40, 0x0, 0x2400000, 0x6d, 0x9, 0xeb, 0x1, 0x4, 0x6, 0x0, 0x2, 0x7, 0x6, 0x8e, 0x9, 0x1, 0xd, 0x7, 0x1, 0x9, 0x9, 0x6, 0x0, 0x3, 0x5, 0x3f, 0x1ff, 0xabc4, 0x2, 0x2, 0x4, 0x2, 0x65e2, 0x5, 0x6, 0x1, 0xa33121c, 0x1ff, 0x1, 0x7, 0x0, 0x2, 0x4, 0x6, 0x484b313f, 0x3, 0x4, 0x2, 0x4, 0x52, 0x9607, 0x51, 0x3, 0xffffffff, 0x4, 0xfffffff2, 0x2, 0x5, 0x7, 0x8, 0x1, 0x8, 0x75c, 0x7, 0x7fffffff, 0xf272, 0xfffffffb, 0x4, 0x7d3, 0x9, 0x7, 0x9, 0x7, 0x8003, 0x2eb, 0x7, 0x1, 0x0, 0x0, 0x8001, 0x2, 0x10001, 0x5, 0x8001, 0x8, 0x2b, 0x1, 0x3, 0x80000000, 0x7fffffff, 0x1, 0x8, 0x401, 0x8001, 0x6, 0x5, 0x9, 0x1, 0x20, 0x4, 0x9, 0xb, 0xd, 0x2, 0xb, 0x7, 0x81, 0x98, 0x1, 0x80000000, 0x7, 0x7, 0x5, 0x3, 0x2, 0x0, 0xa40, 0xc0, 0x6, 0x3, 0xffff7fff, 0x5, 0x6, 0x4, 0x40, 0x7ff, 0x0, 0x17f, 0x1000, 0x401, 0x7fc6, 0xfffffff7, 0x100, 0xfffffff9, 0x7f, 0x8, 0xffff, 0x40000000, 0x6, 0x6, 0x10001, 0x7, 0x80, 0x8001, 0x6, 0xf, 0x6, 0x5, 0x4, 0x8, 0x9, 0x1, 0x6, 0x9bec, 0xfffffffb, 0x6, 0x1026, 0x3, 0x40000, 0x0, 0x9, 0xfff, 0xfffffffe, 0x7, 0x8001, 0x0, 0xfff, 0x7, 0x9, 0x5, 0x7f, 0x3ff, 0xc, 0x58c9, 0x3, 0x9, 0x5, 0x2e1, 0xbf8, 0x8, 0x79a0, 0x9, 0x7, 0x401, 0xebd6, 0x3, 0xffff, 0x1, 0x4, 0x200, 0x5, 0xfffff000, 0x8, 0x5, 0x7, 0xfffffffd, 0x8, 0x8, 0x3, 0x7f, 0x2, 0x0, 0x8001, 0x101, 0x191, 0x2, 0x800, 0x2, 0x1, 0x2, 0x5, 0x4, 0x4, 0x2, 0x2, 0x7]}, @TCA_POLICE_AVRATE={0x8, 0x4, 0x6}]}, @TCA_ROUTE4_ACT={0x60, 0x6, [@m_connmark={0x5c, 0x0, 0x0, 0x0, {{0xd}, {0x20, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x9, 0x8, 0x5, 0x2e, 0x800}, 0x6}}]}, {0xd, 0x6, "66396e732cf67237ec"}, {0xc}, {0xc, 0x8, {0x0, 0x1}}}}]}]}}]}, 0x998}, 0x1, 0x0, 0x0, 0x81}, 0x0) r1 = socket(0x10, 0x803, 0x0) recvmmsg(r1, &(0x7f00000037c0)=[{{&(0x7f00000004c0)=@ethernet={0x0, @random}, 0xfdf4, &(0x7f0000000380)=[{&(0x7f0000000140)=""/100, 0x365}, {&(0x7f0000000280)=""/85, 0x7c}, {&(0x7f0000000fc0)=""/4096, 0x197}, {&(0x7f0000000400)=""/106, 0x645}, {&(0x7f0000000980)=""/73, 0x1b}, {&(0x7f0000000200)=""/77, 0x14}, {&(0x7f00000007c0)=""/154, 0x21}, {&(0x7f00000001c0)=""/17, 0x1d8}], 0x21, &(0x7f0000000600)=""/191, 0x41}}], 0x4000000000003b4, 0x0, &(0x7f0000003700)={0x77359400}) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000004c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a00000000000000000000000000000900010073797a30000000002c000000030a00000000000000000000000000000900010073797a30000000000900030073797a30000000006c000000060a000000000000000000000000000008000b4000000000440004802c0001800a0001006c696d69740000001c0002800c00014000005300000000000c0002400000000000000000140001800b0001006c6f6f6b75700000040002800900010073797a300000000014000000110001"], 0xe0}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="140000001000d40000000000000000000000000a20000000000a03000000000000000000010000000900010073797a3000000000bc000000160a01000000000000000000010000000900010073797a30000000000900020073797a30000000009000038008000240000000007c00038014000100626f6e64300000000000000000000000140001006970766c616e31000000000000000000140001006970766c616e300000000000000000001400010073697430000000000000fbffffffffffffff0100776c616e300000000000000000000000140001006772653000000000000000000000040008000140000000005c000000180a01010000000000000000010000000900020073797a30000000000900010073797a3000000000300003802c00038014000100626f6e6430"], 0x4b0}, 0x1, 0x0, 0x0, 0x881}, 0x0) 2.62908345s ago: executing program 3 (id=514): socket$netlink(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, 0x4040850) r0 = socket$kcm(0xa, 0x2, 0x3a) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x1a00, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) 2.447137436s ago: executing program 0 (id=516): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000080)={'wlan0\x00', 0x0}) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x76dc) (async) connect$inet6(r3, &(0x7f0000000080)={0xa, 0x0, 0xc7}, 0x1c) (async) r4 = socket(0x40000000002, 0x3, 0x2) recvmmsg(r4, &(0x7f0000002200)=[{{0x0, 0x0, 0x0, 0x0, &(0x7f0000001bc0)=""/214, 0xd6}, 0x10001}], 0x1, 0x4002, 0x0) setsockopt$inet_int(r4, 0x0, 0xd, &(0x7f0000000000)=0x10004, 0xfe90) (async, rerun: 64) r5 = socket(0x40000000002, 0x3, 0x80000000002) (rerun: 64) setsockopt$SO_BINDTODEVICE(r5, 0x1, 0x19, &(0x7f0000000140)='veth1_virt_wifi\x00', 0x10) (async) sendto$unix(r5, 0x0, 0x0, 0x0, &(0x7f0000000180)=@abs={0x0, 0x0, 0x10000e0}, 0x6e) setsockopt$inet6_tcp_TCP_ULP(r3, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r3, 0x11a, 0x2, &(0x7f0000000b80)=@gcm_128={{0x303}, "cfc86a00", "4617a9f6040839230fb7fead776dd8dc", "c6db0872", "a44a883fca4400"}, 0x28) (async) recvmmsg(r3, &(0x7f0000001780)=[{{0x0, 0x0, &(0x7f0000000b00)=[{&(0x7f0000000700)=""/34, 0x22}], 0x1}, 0x9}], 0x1, 0x0, 0x0) (async, rerun: 64) recvmmsg(r3, &(0x7f0000000ac0)=[{{0x0, 0x0, 0x0}, 0x4}], 0x1, 0x60, 0x0) (async, rerun: 64) shutdown(r3, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_JOIN_MESH(r0, &(0x7f0000001b80)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)={0x28, r1, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r2}, @void}}, [@NL80211_ATTR_MESH_CONFIG={0xc, 0x23, 0x0, 0x1, [@NL80211_MESHCONF_PATH_REFRESH_TIME={0x8, 0x9, 0xffffdd1b}]}]}, 0x28}, 0x1, 0x0, 0x0, 0xc0c0}, 0x0) (async, rerun: 64) sendmsg$NET_DM_CMD_START(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={0x0}}, 0x0) (async, rerun: 64) r6 = socket$inet(0x2, 0x3, 0x2) (rerun: 64) setsockopt$inet_int(r6, 0x0, 0x22, 0x0, 0x0) (async) setsockopt$inet_mreqsrc(r6, 0x0, 0x27, &(0x7f0000000280)={@multicast2, @local, @remote}, 0xc) (async) setsockopt$inet_msfilter(r6, 0x0, 0x29, &(0x7f00000000c0)=ANY=[@ANYBLOB="e0000002ac1414aa0000000003"], 0x1c) (async) syz_emit_ethernet(0x36, &(0x7f0000001800)={@link_local, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x28, 0x64, 0x0, 0x0, 0x2, 0x0, @empty, @multicast2}, @timestamp_reply={0x11, 0x0, 0x0, 0xe000, 0x2, 0x2, 0x1000000}}}}}, 0x0) r7 = socket(0x2a, 0x2, 0x0) getsockname$packet(r7, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r8, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(r7, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000006c0)=@newtfilter={0x74, 0x2c, 0xd27, 0x0, 0x25dfdbfb, {0x0, 0x0, 0x0, r8, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_flow={{0x9}, {0x44, 0x2, [@TCA_FLOW_BASECLASS={0xe, 0x3, {0xffff, 0xfff2}}, @TCA_FLOW_EMATCHES={0x38, 0xb, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x4}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x64}}, @TCA_EMATCH_TREE_LIST={0x4}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0xd0}}, @TCA_EMATCH_TREE_LIST={0x0, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x0, 0x3, 0x0, 0x0, {{0xfff, 0x2, 0x5}, {0x7ff, 0x0, 0x0, "cfc90a6089"}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x3}}]}]}}]}, 0x74}}, 0x0) (rerun: 32) recvmsg$unix(r7, &(0x7f00000006c0)={&(0x7f00000000c0), 0x6e, &(0x7f00000007c0)=[{&(0x7f0000000140)=""/106, 0x6a}, {&(0x7f00000001c0)=""/169, 0xa9}, {&(0x7f0000000280)=""/55, 0x37}, {&(0x7f0000000300)=""/205, 0xcd}, {&(0x7f0000000400)=""/208, 0xd0}, {&(0x7f0000000500)=""/160, 0xa0}, {&(0x7f00000005c0)=""/239, 0xef}, {&(0x7f0000000740)=""/75, 0x4b}], 0x8, &(0x7f0000000840)=[@cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x24, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x34, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @cred={{0x1c}}, @rights={{0x20, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}, @rights={{0x18, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff]}}], 0x138}, 0x10140) 2.399041733s ago: executing program 3 (id=517): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x4, &(0x7f0000000180)=@framed={{}, [@alu={0x4, 0x0, 0x8, 0x0, 0x2}]}, &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000280)={@in={{0x2, 0x0, @loopback}}, 0x0, 0x2, 0x4d, 0x0, '\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\b\x00'}, 0xd8) close(r2) sendfile(r0, r0, &(0x7f0000000000)=0x2, 0x4) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)={0x4c, 0x2, 0x6, 0x801, 0x0, 0x0, {0x0, 0x0, 0x40}, [@IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0x11, 0x3, 'hash:ip,mark\x00'}]}, 0x4c}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)={0x48, 0x9, 0x6, 0x201, 0x0, 0x0, {0x2, 0x0, 0xffff}, [@IPSET_ATTR_DATA={0x20, 0x7, 0x0, 0x1, [@IPSET_ATTR_IP={0xc, 0x1, 0x0, 0x1, @IPSET_ATTR_IPADDR_IPV4={0x8, 0x1, 0x1, 0x0, @multicast2}}, @IPSET_ATTR_MARK={0x8, 0xa, 0x1, 0x0, 0x2}, @IPSET_ATTR_CIDR={0x5, 0x3, 0x2}]}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_PROTOCOL={0x5}]}, 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_ADD(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000180)=ANY=[@ANYBLOB='H\x00\x00\x00\n'], 0x48}, 0x1, 0x0, 0x0, 0x800}, 0x40c0080) 2.176752884s ago: executing program 3 (id=519): mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) r0 = socket$kcm(0xa, 0x6, 0x0) setsockopt$sock_attach_bpf(r0, 0x10d, 0xb, &(0x7f0000000000), 0x4) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) r2 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}, 0x1, 0x2}, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) r3 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r3) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x80000000}]}}}]}, 0x48}}, 0x0) mmap(&(0x7f0000000000/0xfbe000)=nil, 0xfbe000, 0x1, 0x31, 0xffffffffffffffff, 0x8871b000) (async) socket$kcm(0xa, 0x6, 0x0) (async) setsockopt$sock_attach_bpf(r0, 0x10d, 0xb, &(0x7f0000000000), 0x4) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) (async) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x2, 0x13, r1, 0x0) (async) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x6, 0x3, &(0x7f0000000d80)=ANY=[@ANYBLOB="1800000003000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x8000, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000000c0)={0x0, 0x44}, 0x1, 0x2}, 0x0) (async) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000040)={r2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x63, 0x0, &(0x7f00000000c0)='\x00', 0x0, 0x2}, 0x48) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$tipc(&(0x7f0000000100), r3) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r4, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000180)=@newlink={0x48, 0x10, 0x439, 0x0, 0x0, {0x0, 0x0, 0xe403}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @sit={{0x8}, {0x1c, 0x2, 0x0, 0x1, [@IFLA_IPTUN_REMOTE={0x8, 0x3, @dev}, @IFLA_IPTUN_6RD_PREFIXLEN={0x6}, @IFLA_IPTUN_6RD_RELAY_PREFIX={0x8, 0xc, 0x80000000}]}}}]}, 0x48}}, 0x0) (async) 2.176119741s ago: executing program 0 (id=520): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='blkio.bfq.time\x00', 0x26e1, 0x0) close(r0) socket$inet_icmp_raw(0x2, 0x3, 0x1) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000200)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x1, 0x10, &(0x7f0000000bc0)=ANY=[@ANYBLOB="1808000000000000000000000000000018120000", @ANYRES32=r3, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000001801000000082c2500000000002120207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000700000095"], &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) setsockopt$sock_attach_bpf(r1, 0x1, 0x32, &(0x7f00000000c0)=r4, 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r6, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="070000000000000000000200000020000180160004"], 0x34}, 0x1, 0x0, 0x0, 0x8081}, 0x24000800) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={r4, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000280)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x1, 0x2, &(0x7f00000002c0)=[0x0], &(0x7f0000000300)=[0x0, 0x0], 0x0, 0x93, &(0x7f0000000340)=[{}, {}, {}, {}, {}, {}, {}, {}, {}], 0x48, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xa1, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) sendmsg$MPTCP_PM_CMD_REMOVE(r0, &(0x7f0000000680)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f0000000640)={&(0x7f00000005c0)={0x68, r7, 0x400, 0x70bd29, 0x25dfdbfd, {}, [@MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x2}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x5}, @MPTCP_PM_ATTR_SUBFLOWS={0x8, 0x3, 0x4}, @MPTCP_PM_ATTR_ADDR_REMOTE={0x34, 0x6, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_IF_IDX={0x8, 0x7, r8}, @MPTCP_PM_ADDR_ATTR_PORT={0x6, 0x5, 0x4e21}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0x2}, @MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x80}, 0x24044881) r9 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r5, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000080)={0x14, r9, 0x301, 0x0, 0x25dfdbfc, {0x24}}, 0x14}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x6, 0xc, &(0x7f0000000140)=ANY=[@ANYBLOB="180200000400000000000000000000008500000041000000180100002020732500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000001700000095"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x10, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r10 = socket(0x28, 0x5, 0x0) bind$vsock_stream(r10, &(0x7f0000000040), 0x10) socket$nl_sock_diag(0x10, 0x3, 0x4) r11 = socket$netlink(0x10, 0x3, 0x0) bind$netlink(r11, &(0x7f0000514ff4)={0x10, 0x0, 0x0, 0x2ffffffff}, 0xc) setsockopt$sock_int(r11, 0x1, 0x8, &(0x7f0000000000), 0x4) r12 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$sock_linger(r12, 0x1, 0x3c, &(0x7f0000000100)={0x200000000000001}, 0x8) connect$inet6(r12, &(0x7f0000000000)={0xa, 0x0, 0x0, @dev, 0x5}, 0x1c) sendmmsg$inet6(r12, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4000000) setsockopt$SO_ATTACH_FILTER(r12, 0x1, 0x1a, &(0x7f0000000000)={0x2, &(0x7f0000000040)=[{0x30, 0x0, 0x0, 0xa50f}, {0x6}]}, 0x10) setsockopt$netlink_NETLINK_BROADCAST_ERROR(r11, 0x10e, 0x4, &(0x7f0000000140)=0x7, 0x4) socket(0x10, 0x3, 0x0) 1.792477747s ago: executing program 3 (id=522): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$IPT_SO_SET_REPLACE(r1, 0x8001000000000000, 0x40, &(0x7f0000000540)=@raw={'raw\x00', 0x8, 0x3, 0x3f8, 0x0, 0x11, 0x148, 0x0, 0x0, 0x360, 0x2a8, 0x2a8, 0x360, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x218, 0x260, 0x0, {0x0, 0x100000000000000}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg1\x00', {0x0, 0x0, 0x3f, 0x0, 0x0, 0x3, 0x7}}}, @common=@inet=@hashlimit2={{0x150}}]}, @unspec=@CT0={0x48}}, {{@ip={@multicast2, @initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 'vlan0\x00', 'netdevsim0\x00'}, 0x0, 0xd0, 0x100, 0x0, {}, [@inet=@rpfilter={{0x28}}, @common=@unspec=@quota={{0x38}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x458) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0x1, 0x7, 0x10001, 0x9, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18010000000000000000000000000000850000006d00000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008800000b704000000000000850000002300000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r3}, 0x10) shutdown(r0, 0x0) r4 = socket$igmp(0x2, 0x3, 0x2) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$inet6_opts(r6, 0x29, 0x40, &(0x7f0000000340)=ANY=[@ANYBLOB="000a0000000000000730000000000a000000000000000000000000000000000001000000000000000000000000000000000000000000000000000720000000000600000000000000000000000000000000000000fe"], 0x60) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000fc0)={&(0x7f00000000c0)={0x38, r8, 0x1, 0x800, 0x0, {{0x2}, {@val={0x8, 0x3, r7}, @val={0xc, 0x99, {0x0, 0x1d}}}}, [@chandef_params=[@NL80211_ATTR_CHANNEL_WIDTH={0x8, 0x9f, 0x7}], @chandef_params=[@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x980}]]}, 0x38}}, 0x0) setsockopt$MRT_FLUSH(r4, 0x0, 0xd4, &(0x7f00000008c0)=0x8, 0x4) 1.652943654s ago: executing program 2 (id=524): syz_emit_ethernet(0x3e, &(0x7f0000000000)={@local, @broadcast, @val={@void, {0x8100, 0x0, 0x1, 0x4}}, {@ipv4={0x800, @tcp={{0x6, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x6, 0x0, @remote, @local, {[@generic={0x7, 0x2}]}}, {{0x0, 0x4e22, 0x41424344, 0x41424344, 0x0, 0x2, 0x5, 0x4}}}}}}, 0x0) 1.583621161s ago: executing program 2 (id=525): socket(0x1, 0x800, 0x0) (async) socket(0x1, 0x800, 0x0) unshare(0x40600) r0 = socket$kcm(0x2, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) (async) r2 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_POOL_SET(r1, &(0x7f0000000200)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x184, r2, 0x200, 0x70bd26, 0x25dfdbfc, {}, [{@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0x5}, {0x8, 0x13, 0x18000000}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x8}, {0x6, 0x11, 0x2}, {0x8, 0x13, 0x40}, {0x5, 0x14, 0x1}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1cf7}, {0x6, 0x11, 0x7}, {0x8, 0x13, 0x8}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8}, {0x6, 0x11, 0x8}, {0x8, 0x13, 0x8}, {0x5}}, {@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x9}, {0x6, 0x11, 0xc8}, {0x8, 0x13, 0xc9b}, {0x5}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x800}, {0x6, 0x11, 0x101}, {0x8}, {0x5}}]}, 0x184}, 0x1, 0x0, 0x0, 0x48000}, 0x800) setsockopt$inet_buf(0xffffffffffffffff, 0x0, 0x2c, &(0x7f00000000c0)="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", 0xfb) sendmsg$inet(r0, &(0x7f0000001640)={&(0x7f0000000300)={0x2, 0x0, @multicast2=0xe0000001}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {0x0, @dev={0xac, 0x14, 0x14, 0x28}, @multicast1}}}, @ip_retopts={{0x10}}], 0x30}, 0x0) 1.434261338s ago: executing program 2 (id=526): r0 = socket$netlink(0x10, 0x3, 0x0) writev(r0, &(0x7f00000003c0)=[{&(0x7f0000000180)="390000001300034700bb65e1c3e4ffff01000000010000005600000025", 0x1d}], 0x1) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0xf29, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x2}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_RESEND_IGMP={0x8, 0x1e, 0x20}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x24000046}, 0x0) bind$bt_hci(r1, &(0x7f0000000000)={0x1f, 0xffffffffffffffff, 0x3}, 0x6) write$bt_hci(r1, &(0x7f0000000580)=ANY=[@ANYBLOB="5200000002"], 0x8) r3 = socket$inet6(0xa, 0x80001, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000fca000)={0x100000001, {{0xa, 0x0, 0x0, @mcast1}}}, 0x88) r4 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000540)={0x3, 0x4, 0x4, 0xa, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x3, 0x8, &(0x7f0000000740)=ANY=[@ANYRES32=r4, @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000"], &(0x7f0000000780)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000040)=ANY=[@ANYBLOB="01000000000000000a00000000000000ff010000000000000000000000000001000000000000000000000200000000000000000000000000000000000000000000000000e8ffffff000000000000180000000000000000000000000000000000000000000000000000000000000000000000000000000000000000585314f54f53fb255f000000000000000000000000000000000000000000d68f83e0d3d4cd68623ed5cf44ddb5692c71f4eda7f8d1951777b32dbfa4d0351166196feefcdd78e4f6b857a9549fad1cfb0d89337833399d403cc0b6fdd5a1dc4a8e356ba806"], 0x90) writev(r0, &(0x7f0000000300)=[{&(0x7f00000001c0)="390000001300034700bb5be1c3e4feff06000000010000004500000025000000190004000400ad000d00000000000006040000000005392955", 0xfffffffffffffefc}], 0x1) socket$igmp(0x2, 0x3, 0x2) 736.437596ms ago: executing program 3 (id=527): socket$netlink(0x10, 0x3, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)}, 0x4040850) r0 = socket$kcm(0xa, 0x2, 0x3a) r1 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000fc0)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) sendmsg$kcm(r0, &(0x7f0000000440)={&(0x7f0000000800)=@in6={0xa, 0x0, 0x3000, @mcast2, 0x1a}, 0x80, &(0x7f00000000c0)=[{&(0x7f0000000780)="80005b020eaa4da2", 0x8}], 0x1, 0x0, 0x0, 0x900}, 0x0) 704.296287ms ago: executing program 2 (id=528): ioctl$sock_SIOCSIFVLAN_SET_VLAN_NAME_TYPE_CMD(0xffffffffffffffff, 0x8983, &(0x7f0000000000)={0x6, 'wlan0\x00', {0x4}, 0x7f}) mmap(&(0x7f0000ffa000/0x6000)=nil, 0x6000, 0x0, 0x20010, 0xffffffffffffffff, 0xa4e59000) socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) r2 = socket$igmp(0x2, 0x3, 0x2) getpeername$packet(0xffffffffffffffff, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f00000000c0)=0x14) setsockopt$MRT_DEL_VIF(r2, 0x0, 0xcb, &(0x7f0000000100)={0x1, 0x8, 0xd, 0x8, @vifc_lcl_ifindex=r3, @loopback}, 0x10) setsockopt$SO_TIMESTAMP(r1, 0x1, 0x3f, &(0x7f0000000140)=0x800, 0x4) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r1, 0x8982, &(0x7f0000000180)={0x1, 'ip_vti0\x00', {}, 0x3}) r4 = accept4$bt_l2cap(0xffffffffffffffff, &(0x7f00000001c0), &(0x7f0000000200)=0xe, 0x180800) setsockopt$bt_BT_FLUSHABLE(r4, 0x112, 0x8, &(0x7f0000000240)=0x401, 0x4) ioctl$F2FS_IOC_WRITE_CHECKPOINT(r2, 0xf507, 0x0) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX_OLD(r4, 0x84, 0x6b, &(0x7f0000000280)=[@in6={0xa, 0x4e20, 0xcb, @empty, 0xfffffffb}, @in={0x2, 0x4e24, @rand_addr=0x64010102}], 0x2c) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$netlink_NETLINK_RX_RING(r5, 0x10e, 0x6, &(0x7f00000002c0)={0x7, 0xe08f, 0x400, 0x7}, 0x10) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000300)={'veth1_vlan\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000380)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_QOS_MAP(r4, &(0x7f0000000500)={&(0x7f0000000340)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f00000004c0)={&(0x7f00000003c0)={0xd4, 0x0, 0x600, 0x70bd2d, 0x25dfdbfe, {{}, {@val={0x8, 0x3, r7}, @void}}, [@NL80211_ATTR_QOS_MAP={0x1c, 0xc7, {[{0xd9}, {0xf8, 0x5}, {0x1, 0x2}, {0x80, 0x6}, {0x5, 0x1}, {0x1, 0x7}, {0xd, 0x7}, {0x5, 0x7}], "1af2ea29ded2adce"}}, @NL80211_ATTR_QOS_MAP={0x24, 0xc7, {[{0x2, 0x4}, {0x7, 0x6}, {0x80, 0x6}, {0xc, 0x5}, {0x81, 0x5}, {0x1}, {0x7, 0x6}, {0xfd, 0x3}, {0x7b, 0x2}, {0x4, 0x4}, {0x2, 0x7}, {0x0, 0x1}], "0813790fd987b879"}}, @NL80211_ATTR_QOS_MAP={0x2e, 0xc7, {[{0x91, 0x6}, {0xff, 0x4}, {0x9, 0x7}, {0x4, 0x2}, {0x0, 0x2}, {0x4, 0x7}, {0x43}, {0x4, 0x5}, {0xd, 0x7}, {0xc, 0x2}, {0x5, 0x5}, {0x4, 0x5}, {0x7, 0x5}, {0x2, 0x7}, {0x7, 0x5}, {0xf7, 0x7}, {0x4, 0x1}], "edf438b64863d5e9"}}, @NL80211_ATTR_QOS_MAP={0x28, 0xc7, {[{0x40, 0x1}, {0x8}, {0x9}, {0x2}, {0x9, 0x7}, {0x2, 0x1}, {0x7, 0x2}, {0x5, 0x6}, {0xb, 0x5}, {0x0, 0x3}, {0x8, 0x4}, {0xc, 0x6}, {0x4, 0x1}, {0xe5, 0x7}], "b004ad55bd220a01"}}, @NL80211_ATTR_QOS_MAP={0x20, 0xc7, {[{0x8, 0x7}, {0x9, 0x4}, {0x5, 0x2}, {0x6, 0x7}, {0x8, 0x4}, {0x0, 0x6}, {0x2, 0x4}, {0xff, 0x5}, {0x1, 0x1}, {0x5, 0x4}], "bc037612d274d6e6"}}]}, 0xd4}, 0x1, 0x0, 0x0, 0x40011}, 0x40808) r8 = socket$can_bcm(0x1d, 0x2, 0x2) shutdown(r8, 0x0) r9 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, &(0x7f0000000540)={0x0, 0x7, 0x13, 0x2, 0x1, 0x7f}, &(0x7f0000000580)=0x14) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r9, 0x84, 0x6f, &(0x7f0000000680)={r10, 0x88, &(0x7f00000005c0)=[@in6={0xa, 0x4e20, 0x8, @ipv4={'\x00', '\xff\xff', @multicast1}, 0x9}, @in={0x2, 0x4e24, @dev={0xac, 0x14, 0x14, 0x14}}, @in={0x2, 0x4e24, @rand_addr=0x64010100}, @in={0x2, 0x4e22, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in6={0xa, 0x4e21, 0x1, @remote, 0x31}, @in={0x2, 0x4e22, @multicast1}, @in={0x2, 0x4e21, @local}]}, &(0x7f00000006c0)=0x10) r11 = socket$pppl2tp(0x18, 0x1, 0x1) ioctl$sock_SIOCGIFINDEX_80211(r11, 0x8933, &(0x7f0000000700)={'wlan0\x00'}) getsockopt$SO_TIMESTAMPING(r0, 0x1, 0x25, &(0x7f0000000740), &(0x7f0000000780)=0x4) socket$netlink(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000880)={'ip_vti0\x00', &(0x7f00000007c0)={'erspan0\x00', r6, 0x8000, 0x40, 0x4, 0x0, {{0x1c, 0x4, 0x2, 0x20, 0x70, 0x64, 0x0, 0x2, 0x29, 0x0, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}, {[@lsrr={0x83, 0x17, 0x7c, [@empty, @loopback, @dev={0xac, 0x14, 0x14, 0x3c}, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast1]}, @lsrr={0x83, 0x7, 0x14, [@rand_addr=0x64010102]}, @timestamp_addr={0x44, 0x1c, 0xd7, 0x1, 0x1, [{@broadcast, 0x948c}, {@broadcast, 0x2}, {@multicast2}]}, @cipso={0x86, 0x1f, 0x1, [{0x5, 0x12, "4c35263ef412a8d04c7bf9ce470b220b"}, {0x1, 0x7, "cea1bec005"}]}]}}}}}) r13 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f00000008c0), 0x4) r14 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000900)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x6, '\x00', r12, r13, 0x4, 0x5, 0x4, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000980)={0x1b, 0x0, 0x0, 0xffffffff, 0x0, r14, 0xef0d, '\x00', r6, r13, 0x4, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) 641.537798ms ago: executing program 0 (id=529): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_xfrm(0x10, 0x3, 0x6) pipe(&(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) close(r2) socket$inet_udplite(0x2, 0x2, 0x88) write$cgroup_int(0xffffffffffffffff, &(0x7f0000000040), 0x12) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="4400000010000304000000000000000000007400", @ANYRES32, @ANYBLOB], 0x44}, 0x1, 0x0, 0x0, 0x40800}, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$SIOCSIFHWADDR(r3, 0x89f1, &(0x7f0000000900)={'ip6gre0\x00', @random="0600002000"}) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000190001000000000000000000e00000020000000000000000000000000000000000000000000000000000000000000000000000000a0000002900", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="00000000000000000000000000cb9f2cfcc837c14b000000000000000000000000000000000000000200000000000000ffffe2ffe0ffffff000000000000000000000000000000000000000000000000000000000000e1069346585daf1fd01200000200"/117], 0xb8}}, 0x4004) sendmsg$nl_xfrm(r1, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=@updpolicy={0xb8, 0x19, 0x1, 0x0, 0x2, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa}, {}, {0x0, 0xfffffffffffffffc}}}, 0xb8}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000040)=@newlink={0x3c, 0x10, 0x403, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x31}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x0) 454.937298ms ago: executing program 2 (id=530): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100), 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x0, @loopback}}, 0x0, 0x0, 0x34, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @private1}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in6={{0xa, 0x0, 0x5, @mcast1}}, 0x0, 0x0, 0x3e, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb499419be4f9142da0bc21470e441225642855b5f2b4b67efbff2fdf98328de9434031348589b763d46d14810acc5f7000000e3ffffff00"}, 0xd8) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r8, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r8, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_NEWRULE={0x50, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x24, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_DREG={0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0x17}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x78}}, 0x0) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) r9 = syz_genetlink_get_family_id$wireguard(&(0x7f00000001c0), r7) sendmsg$WG_CMD_SET_DEVICE(0xffffffffffffffff, &(0x7f0000000400)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x38, r9, 0x1, 0x70bd27, 0x25dfdbfd, {}, [@WGDEVICE_A_PRIVATE_KEY={0x24, 0x3, @c}]}, 0x38}, 0x1, 0x0, 0x0, 0x82}, 0x24044084) 381.7198ms ago: executing program 0 (id=531): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000100)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x8, 0x10, &(0x7f0000000000)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007baaf8ff00000000b5080400040000007b8af0ff00000000bfa100000000000007011400f8ffffffbfa40000000000000704000000feffffb70200000800002018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000800000085000000bb00000095"], &(0x7f0000000300)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 185.660351ms ago: executing program 0 (id=532): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) accept4(r0, 0x0, &(0x7f0000000000), 0x80800) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x301, 0x0, 0x0, {0x1, 0x0, 0x2}}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x6}]}], {0x14, 0x10}}, 0x98}}, 0x0) getsockopt$bt_BT_POWER(r0, 0x112, 0x9, 0x0, &(0x7f0000000080)=0xffffffffffffff34) 185.041273ms ago: executing program 3 (id=533): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='GPL\x00', 0x6, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) (async, rerun: 32) r2 = socket$nl_route(0x10, 0x3, 0x0) (rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2100000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffff"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) (async, rerun: 32) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) (rerun: 32) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="9c00000010000104000000000000000000480000", @ANYRES32=r3, @ANYBLOB="00000000000000000400140078001680740001800c0003000000000000000000280001"], 0x9c}}, 0x0) (async, rerun: 64) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000080)='percpu_alloc_percpu_fail\x00', r1, 0x0, 0x100000001}, 0x18) (rerun: 64) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000002580)=[{&(0x7f0000000000)=ANY=[@ANYBLOB="140000002500010000000000f100000006"], 0x14}], 0x1, 0x0, 0x0, 0x400048c0}, 0x0) 9.566995ms ago: executing program 0 (id=534): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$can_bcm(0x1d, 0x2, 0x2) socket$alg(0x26, 0x5, 0x0) r2 = socket(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000080)={'bridge0\x00'}) setsockopt$inet_sctp6_SCTP_AUTOCLOSE(r2, 0x84, 0x4, &(0x7f00000005c0)=0x4, 0x4) r3 = socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000740)={{0x14}, [@NFT_MSG_NEWRULE={0x78, 0x6, 0xa, 0x409, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x4c, 0x4, 0x0, 0x1, [{0x30, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x10, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8}]}]}, @NFTA_IMMEDIATE_DREG={0x8}]}}}, {0x18, 0x1, 0x0, 0x1, @synproxy={{0xd}, @val={0x4}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0xa0}}, 0x0) sendmsg$NFT_BATCH(r4, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000700000a14000000020a010200000000002bec8009085913120002000003140000001100010000000000000000000100000a00"/76], 0x3c}, 0x1, 0x0, 0x0, 0x4011}, 0x4000094) ioctl$SIOCGSTAMPNS(r0, 0x8907, &(0x7f0000000040)) setsockopt$netlink_NETLINK_NO_ENOBUFS(r3, 0x10e, 0x5, &(0x7f0000000300)=0x3, 0x4) ioctl$sock_ipv6_tunnel_SIOCADDTUNNEL(r3, 0x89f1, &(0x7f0000000200)={'syztnl1\x00', &(0x7f0000000080)={'ip6_vti0\x00', 0x0, 0x2f, 0x8, 0x6, 0x1, 0x8, @empty, @local, 0x7800, 0x1, 0x7, 0xb4}}) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xb, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x79, 0x10, 0x69}, [@ldst={0x7}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000280)={0x0, r1}, 0x8) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x0, @ANYBLOB='\x00'/20, @ANYRES32=r5, @ANYRES32, @ANYBLOB="0000000000400dfa21165655843a18c0645114c5000000000000000000000000000000000000000000000041eee9f6182f9b12f37dda7398a16e4cfb7c14c95d9ff10d78fe1c8252d5860199963a34fa51b1f8f2f4b6fcd5b163382c9b53c6802d9c7b8b8babf646c5750b1647cd4f3c9918e5c8c177a6915664799e39076da0ebd78ae7176643403e18014839fa70551acbeb1c8e774d"], 0x50) socketpair$unix(0x1, 0x0, 0x0, &(0x7f0000000100)) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000240)=0x14) r8 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000180)=@newlink={0x50, 0x10, 0x403, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, 0x0, 0xff7f}, [@IFLA_LINKINFO={0x28, 0x12, 0x0, 0x1, @macsec={{0xb}, {0x18, 0x2, 0x0, 0x1, [@IFLA_MACSEC_SCI={0xc, 0x1, 0x5}, @IFLA_MACSEC_ICV_LEN={0x5, 0x3, 0x10}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x50}}, 0x0) 0s ago: executing program 2 (id=535): sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000240)=@proc={0x10, 0x0, 0x25dfdbfe, 0x8}, 0xc, 0x0, 0x0, 0x0, 0x0, 0x44014}, 0x400c1) r0 = socket$nl_xfrm(0x10, 0x3, 0x6) r1 = socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000001c0)={'bridge0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x700, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="3800000055002f03020000000000000007000000", @ANYRES32=r3, @ANYBLOB="200001"], 0x38}, 0x1, 0x0, 0x0, 0xfe0f}, 0x0) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000900)=@updpolicy={0xc4, 0x19, 0x100, 0x0, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x0, 0x0, 0xa, 0x0, 0x0, 0x87, r3}, {0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0xfffffffffffffffb}}, [@mark={0xc, 0x15, {0x35075c, 0xfffffffb}}]}, 0xc4}}, 0x800) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="b8000000190001001b00000000000000e00000020000000000000000c40000000000000000000000000000000000000000000000000000000a00000011000000", @ANYRESHEX=r0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000fbffffffffffffff00"/101], 0xb8}}, 0x20004800) r5 = socket$phonet_pipe(0x23, 0x5, 0x2) r6 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) accept(r6, &(0x7f00000000c0)=@pptp={0x18, 0x2, {0x0, @empty}}, &(0x7f0000000140)=0x80) connect$phonet_pipe(r5, &(0x7f0000001700)={0x23, 0x1, 0x5, 0x6}, 0x10) r7 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r7, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000200)=ANY=[@ANYBLOB="b8000000150001"], 0xb8}}, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.142' (ED25519) to the list of known hosts. [ 74.983993][ T5830] cgroup: Unknown subsys name 'net' [ 75.156910][ T5830] cgroup: Unknown subsys name 'cpuset' [ 75.165663][ T5830] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 76.784688][ T5830] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 80.879416][ T5849] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 80.888382][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 80.892127][ T5851] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 80.899631][ T5849] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 80.904945][ T5851] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 80.911652][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 80.925510][ T5849] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 80.934231][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 80.934730][ T5851] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 80.942256][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 80.957361][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 80.963727][ T5851] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 80.971906][ T5851] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 80.982754][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 80.984958][ T5858] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 80.999481][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 81.000849][ T5858] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 81.015134][ T5858] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 81.020851][ T5859] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 81.024195][ T5858] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 81.029937][ T5859] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 81.036905][ T5858] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 81.052468][ T5859] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 81.053488][ T5858] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 81.064693][ T5859] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 81.067388][ T5858] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 81.075362][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 81.089182][ T5858] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 81.096930][ T5858] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 81.104745][ T5858] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 81.447295][ T5841] chnl_net:caif_netlink_parms(): no params data found [ 81.636539][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 81.655081][ T5841] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.663208][ T5841] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.670609][ T5841] bridge_slave_0: entered allmulticast mode [ 81.677955][ T5841] bridge_slave_0: entered promiscuous mode [ 81.736366][ T5841] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.743657][ T5841] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.751193][ T5841] bridge_slave_1: entered allmulticast mode [ 81.759740][ T5841] bridge_slave_1: entered promiscuous mode [ 81.829596][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 81.849404][ T5841] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.864414][ T5841] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.895047][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 81.920552][ T5848] chnl_net:caif_netlink_parms(): no params data found [ 81.950895][ T5841] team0: Port device team_slave_0 added [ 81.960542][ T5841] team0: Port device team_slave_1 added [ 82.038981][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.047057][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.056270][ T5854] bridge_slave_0: entered allmulticast mode [ 82.063875][ T5854] bridge_slave_0: entered promiscuous mode [ 82.097072][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.104303][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.130539][ T5841] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.152626][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.159860][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.167442][ T5854] bridge_slave_1: entered allmulticast mode [ 82.174766][ T5854] bridge_slave_1: entered promiscuous mode [ 82.215878][ T5841] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.223267][ T5841] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.249828][ T5841] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.291861][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.301331][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.309038][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.316451][ T5842] bridge_slave_0: entered allmulticast mode [ 82.323694][ T5842] bridge_slave_0: entered promiscuous mode [ 82.356127][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.375557][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.383082][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.390322][ T5842] bridge_slave_1: entered allmulticast mode [ 82.398556][ T5842] bridge_slave_1: entered promiscuous mode [ 82.459608][ T5854] team0: Port device team_slave_0 added [ 82.467844][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.480403][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.525815][ T5854] team0: Port device team_slave_1 added [ 82.558848][ T5848] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.566999][ T5848] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.574421][ T5848] bridge_slave_0: entered allmulticast mode [ 82.581179][ T5848] bridge_slave_0: entered promiscuous mode [ 82.588546][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 82.602821][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 82.610039][ T5840] bridge_slave_0: entered allmulticast mode [ 82.617007][ T5840] bridge_slave_0: entered promiscuous mode [ 82.625097][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.632211][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.639516][ T5840] bridge_slave_1: entered allmulticast mode [ 82.646658][ T5840] bridge_slave_1: entered promiscuous mode [ 82.667227][ T5841] hsr_slave_0: entered promiscuous mode [ 82.674071][ T5841] hsr_slave_1: entered promiscuous mode [ 82.690597][ T5848] bridge0: port 2(bridge_slave_1) entered blocking state [ 82.698118][ T5848] bridge0: port 2(bridge_slave_1) entered disabled state [ 82.705635][ T5848] bridge_slave_1: entered allmulticast mode [ 82.712414][ T5848] bridge_slave_1: entered promiscuous mode [ 82.746326][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.753596][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.779711][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 82.796527][ T5842] team0: Port device team_slave_0 added [ 82.805734][ T5842] team0: Port device team_slave_1 added [ 82.847734][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 82.855082][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.882085][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.896704][ T5848] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.908706][ T5848] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 82.919841][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 82.950236][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 82.957373][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.983833][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.006461][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 83.035220][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.042221][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.069604][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.084257][ T5856] Bluetooth: hci0: command tx timeout [ 83.099507][ T5848] team0: Port device team_slave_0 added [ 83.128875][ T5840] team0: Port device team_slave_0 added [ 83.151020][ T5848] team0: Port device team_slave_1 added [ 83.157354][ T5853] Bluetooth: hci2: command tx timeout [ 83.163356][ T5853] Bluetooth: hci1: command tx timeout [ 83.169564][ T5856] Bluetooth: hci3: command tx timeout [ 83.179703][ T5840] team0: Port device team_slave_1 added [ 83.243276][ T5856] Bluetooth: hci4: command tx timeout [ 83.261184][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.268694][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.294884][ T5848] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.306944][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 83.314613][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.341233][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 83.356644][ T5854] hsr_slave_0: entered promiscuous mode [ 83.363790][ T5854] hsr_slave_1: entered promiscuous mode [ 83.370266][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.378850][ T5854] Cannot create hsr debugfs directory [ 83.400399][ T5848] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.407982][ T5848] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.434836][ T5848] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.447059][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 83.454250][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 83.480403][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 83.513575][ T5842] hsr_slave_0: entered promiscuous mode [ 83.520027][ T5842] hsr_slave_1: entered promiscuous mode [ 83.527173][ T5842] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.535072][ T5842] Cannot create hsr debugfs directory [ 83.684750][ T5840] hsr_slave_0: entered promiscuous mode [ 83.691995][ T5840] hsr_slave_1: entered promiscuous mode [ 83.698550][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.706772][ T5840] Cannot create hsr debugfs directory [ 83.769792][ T5848] hsr_slave_0: entered promiscuous mode [ 83.776728][ T5848] hsr_slave_1: entered promiscuous mode [ 83.782984][ T5848] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 83.790606][ T5848] Cannot create hsr debugfs directory [ 83.864711][ T5841] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 83.881639][ T5841] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 83.916048][ T5841] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 83.950932][ T5841] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 84.039988][ T5854] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.069819][ T5854] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.098868][ T5854] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.136504][ T5854] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.202232][ T5842] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 84.236498][ T5842] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 84.266553][ T5842] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 84.282380][ T5842] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 84.299353][ T5840] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 84.310426][ T5840] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 84.337346][ T5840] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 84.364532][ T5840] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 84.454629][ T5848] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 84.476960][ T5848] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 84.487479][ T5848] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 84.500692][ T5848] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 84.562448][ T5841] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.620062][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.641552][ T5841] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.668204][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.675532][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.697710][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.720149][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 84.735135][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.742251][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.760541][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.786279][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.817322][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.824531][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.836842][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.844135][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.858647][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 84.895938][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.903772][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.914879][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 84.921990][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 84.976506][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 84.983689][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.998836][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.005978][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.045146][ T5848] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.135044][ T5840] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.153195][ T5856] Bluetooth: hci0: command tx timeout [ 85.219272][ T5842] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 85.233943][ T5856] Bluetooth: hci3: command tx timeout [ 85.238918][ T5846] Bluetooth: hci1: command tx timeout [ 85.239440][ T5856] Bluetooth: hci2: command tx timeout [ 85.272427][ T5842] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 85.315461][ T5856] Bluetooth: hci4: command tx timeout [ 85.319045][ T5848] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.358731][ T5001] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.366050][ T5001] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.402037][ T5001] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.409245][ T5001] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.494037][ T5841] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.574966][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.601321][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.737885][ T5841] veth0_vlan: entered promiscuous mode [ 85.774303][ T5854] veth0_vlan: entered promiscuous mode [ 85.789824][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 85.803491][ T5841] veth1_vlan: entered promiscuous mode [ 85.861812][ T5854] veth1_vlan: entered promiscuous mode [ 85.996279][ T5841] veth0_macvtap: entered promiscuous mode [ 86.014108][ T5854] veth0_macvtap: entered promiscuous mode [ 86.026718][ T5842] veth0_vlan: entered promiscuous mode [ 86.040413][ T5854] veth1_macvtap: entered promiscuous mode [ 86.057665][ T5848] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.074493][ T5841] veth1_macvtap: entered promiscuous mode [ 86.097947][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.111698][ T5842] veth1_vlan: entered promiscuous mode [ 86.158646][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.171275][ T5840] veth0_vlan: entered promiscuous mode [ 86.188336][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.200605][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.217808][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.229743][ T5854] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.241152][ T5854] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.250459][ T5854] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.259958][ T5854] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.280185][ T5840] veth1_vlan: entered promiscuous mode [ 86.291529][ T5841] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.302733][ T5841] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.314055][ T5841] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.341867][ T5841] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.351025][ T5841] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.361121][ T5841] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.370416][ T5841] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.441525][ T5842] veth0_macvtap: entered promiscuous mode [ 86.484483][ T5842] veth1_macvtap: entered promiscuous mode [ 86.530846][ T5840] veth0_macvtap: entered promiscuous mode [ 86.551998][ T5848] veth0_vlan: entered promiscuous mode [ 86.552248][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.565773][ T5848] veth1_vlan: entered promiscuous mode [ 86.573456][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.590084][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.601342][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.611782][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.623824][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.635544][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.680999][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.692882][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.703304][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.715265][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.726662][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.738041][ T5842] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.747959][ T5842] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.758131][ T5842] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.767686][ T5842] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.779613][ T5840] veth1_macvtap: entered promiscuous mode [ 86.809491][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.817961][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.849746][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.861118][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.872295][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.883735][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.894068][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.904776][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.919038][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 86.938817][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.948591][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.958665][ T5848] veth0_macvtap: entered promiscuous mode [ 86.969132][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.979941][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.989953][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.001339][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.011405][ T5840] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.021977][ T5840] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.037083][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.089080][ T5848] veth1_macvtap: entered promiscuous mode [ 87.099974][ T5840] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.109912][ T5840] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.121454][ T5840] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.130729][ T5840] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 87.154432][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.162317][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.188767][ T5854] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 87.215303][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.227063][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.238354][ T5856] Bluetooth: hci0: command tx timeout [ 87.293469][ T35] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 87.301360][ T35] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.313468][ T5856] Bluetooth: hci2: command tx timeout [ 87.318985][ T5856] Bluetooth: hci1: command tx timeout [ 87.319251][ T5853] Bluetooth: hci3: command tx timeout [ 87.336142][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.360917][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.390424][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.420094][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.439256][ T5853] Bluetooth: hci4: command tx timeout [ 87.521470][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.538581][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.551367][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.643222][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.655634][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.674077][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.715770][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.771919][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.783793][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.800329][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.811531][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.822671][ T5848] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 87.834836][ T5848] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.850859][ T5848] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 87.988411][ T5848] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.012854][ T5848] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.021761][ T5848] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.034330][ T5848] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.066314][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.089645][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.236697][ T62] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.249193][ T62] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.348635][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.383294][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.499376][ T5001] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 88.538421][ T5001] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 88.734926][ T5936] netlink: 'syz.2.6': attribute type 10 has an invalid length. [ 88.818668][ T5936] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 88.873907][ T5936] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 88.949002][ T5936] syz.2.6 (5936) used greatest stack depth: 17776 bytes left [ 89.313648][ T5853] Bluetooth: hci0: command tx timeout [ 89.392686][ T5853] Bluetooth: hci1: command tx timeout [ 89.396393][ T5846] Bluetooth: hci2: command tx timeout [ 89.398325][ T5853] Bluetooth: hci3: command tx timeout [ 89.473316][ T5856] Bluetooth: hci4: command tx timeout [ 90.582806][ T5970] netlink: 28 bytes leftover after parsing attributes in process `syz.1.12'. [ 90.819996][ T5970] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 90.862024][ T5975] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 91.282019][ T5945] netlink: 'syz.3.4': attribute type 10 has an invalid length. [ 91.327241][ T5945] syz_tun: entered promiscuous mode [ 91.364370][ T5945] bond0: (slave syz_tun): Enslaving as an active interface with an up link [ 91.373641][ T5987] netlink: 'syz.2.18': attribute type 10 has an invalid length. [ 91.428337][ T5987] batman_adv: batadv0: Adding interface: team0 [ 91.439605][ T5987] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 91.471553][ T5987] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 91.484193][ T5988] netlink: 'syz.2.18': attribute type 10 has an invalid length. [ 91.505131][ T5988] netlink: 2 bytes leftover after parsing attributes in process `syz.2.18'. [ 91.598307][ T5988] team0: entered promiscuous mode [ 91.621967][ T5990] netlink: 4 bytes leftover after parsing attributes in process `syz.1.19'. [ 91.622422][ T5988] team_slave_0: entered promiscuous mode [ 91.695171][ T5988] team_slave_1: entered promiscuous mode [ 91.778920][ T5988] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.813630][ T5988] batman_adv: batadv0: Interface activated: team0 [ 91.851145][ T5988] batman_adv: batadv0: Interface deactivated: team0 [ 91.880281][ T5988] batman_adv: batadv0: Removing interface: team0 [ 91.897401][ T5988] bridge0: port 3(team0) entered blocking state [ 91.917055][ T5988] bridge0: port 3(team0) entered disabled state [ 91.929597][ T5988] team0: entered allmulticast mode [ 91.941842][ T5988] team_slave_0: entered allmulticast mode [ 91.959574][ T5988] team_slave_1: entered allmulticast mode [ 91.993499][ T5988] bridge0: port 3(team0) entered blocking state [ 92.000148][ T5988] bridge0: port 3(team0) entered forwarding state [ 92.111304][ T6007] netlink: 'syz.3.22': attribute type 64 has an invalid length. [ 92.184107][ T6010] ax25_connect(): syz.4.25 uses autobind, please contact jreuter@yaina.de [ 92.197729][ T6007] netlink: 20 bytes leftover after parsing attributes in process `syz.3.22'. [ 92.303104][ T8] cfg80211: failed to load regulatory.db [ 92.390323][ T6015] sock: sock_timestamping_bind_phc: sock not bind to device [ 92.553155][ T6024] netlink: 28 bytes leftover after parsing attributes in process `syz.1.24'. [ 92.567458][ T6021] xt_l2tp: wrong L2TP version: 0 [ 92.745176][ T6020] netlink: 40 bytes leftover after parsing attributes in process `syz.1.24'. [ 93.192072][ T6042] netlink: 4 bytes leftover after parsing attributes in process `syz.3.34'. [ 93.199872][ T6043] netlink: 12 bytes leftover after parsing attributes in process `syz.0.33'. [ 93.245898][ T6044] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.592958][ T6063] netlink: 68 bytes leftover after parsing attributes in process `syz.0.41'. [ 93.622724][ T6060] netlink: 68 bytes leftover after parsing attributes in process `syz.2.39'. [ 93.874247][ T6073] bridge: RTM_NEWNEIGH with invalid state 0x10 [ 94.622585][ T6103] macsec1: entered promiscuous mode [ 94.636773][ T6103] macsec1: entered allmulticast mode [ 94.655434][ T6105] Zero length message leads to an empty skb [ 95.010548][ T6122] warning: `syz.1.56' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 95.418192][ T6132] sctp: [Deprecated]: syz.3.59 (pid 6132) Use of int in maxseg socket option. [ 95.418192][ T6132] Use struct sctp_assoc_value instead [ 95.557458][ T6135] openvswitch: netlink: Multiple metadata blocks provided [ 95.762447][ T6143] __nla_validate_parse: 4 callbacks suppressed [ 95.762471][ T6143] netlink: 4 bytes leftover after parsing attributes in process `syz.3.63'. [ 95.970857][ T6136] veth0_to_team: entered promiscuous mode [ 95.976953][ T6136] veth0_to_team: entered allmulticast mode [ 96.007488][ T6138] netlink: 32 bytes leftover after parsing attributes in process `syz.4.60'. [ 96.080854][ T6151] netlink: 56 bytes leftover after parsing attributes in process `syz.0.65'. [ 96.149571][ T6136] tap0: tun_chr_ioctl cmd 1074025677 [ 96.167634][ T6136] tap0: linktype set to 0 [ 96.317460][ T6160] netlink: 4 bytes leftover after parsing attributes in process `syz.3.68'. [ 96.569721][ T6165] netlink: 1264 bytes leftover after parsing attributes in process `syz.2.70'. [ 96.573906][ T6167] netlink: 16 bytes leftover after parsing attributes in process `syz.3.72'. [ 96.590991][ T6165] syzkaller0: entered allmulticast mode [ 96.592410][ T6170] netlink: 44 bytes leftover after parsing attributes in process `syz.0.71'. [ 96.613865][ T6165] syzkaller0 (unregistering): left allmulticast mode [ 96.664767][ T6170] netlink: 8 bytes leftover after parsing attributes in process `syz.0.71'. [ 96.678265][ T6170] netlink: 48 bytes leftover after parsing attributes in process `syz.0.71'. [ 96.698349][ T6171] netlink: 8 bytes leftover after parsing attributes in process `syz.4.73'. [ 96.953540][ T6179] xt_ecn: cannot match TCP bits for non-tcp packets [ 97.208664][ T6187] Driver unsupported XDP return value 0 on prog (id 18) dev N/A, expect packet loss! [ 97.463528][ T6190] veth1_macvtap: left promiscuous mode [ 98.472977][ T6225] Bluetooth: MGMT ver 1.23 [ 98.501803][ T6226] xt_SECMARK: invalid mode: 0 [ 98.587007][ T6230] Cannot find set identified by id 0 to match [ 99.446009][ T6262] FAULT_INJECTION: forcing a failure. [ 99.446009][ T6262] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 99.510654][ T6262] CPU: 0 UID: 0 PID: 6262 Comm: syz.2.97 Not tainted 6.13.0-rc5-syzkaller-00769-g356939999438 #0 [ 99.521263][ T6262] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 99.531395][ T6262] Call Trace: [ 99.534715][ T6262] [ 99.537689][ T6262] dump_stack_lvl+0x241/0x360 [ 99.542449][ T6262] ? __pfx_dump_stack_lvl+0x10/0x10 [ 99.547965][ T6262] ? __pfx__printk+0x10/0x10 [ 99.553230][ T6262] ? snprintf+0xda/0x120 [ 99.557542][ T6262] should_fail_ex+0x3b0/0x4e0 [ 99.562377][ T6262] _copy_to_user+0x31/0xb0 [ 99.566954][ T6262] simple_read_from_buffer+0xca/0x150 [ 99.572427][ T6262] proc_fail_nth_read+0x1e9/0x250 [ 99.577504][ T6262] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 99.583143][ T6262] ? rw_verify_area+0x55e/0x6f0 [ 99.588037][ T6262] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 99.593636][ T6262] vfs_read+0x1fc/0xb70 [ 99.597839][ T6262] ? __pfx___mutex_lock+0x10/0x10 [ 99.602911][ T6262] ? __pfx_vfs_read+0x10/0x10 [ 99.607637][ T6262] ? __fget_files+0x2a/0x410 [ 99.612303][ T6262] ? __fget_files+0x395/0x410 [ 99.617045][ T6262] ? __fget_files+0x2a/0x410 [ 99.621710][ T6262] ksys_read+0x18f/0x2b0 [ 99.626116][ T6262] ? __pfx_ksys_read+0x10/0x10 [ 99.630929][ T6262] ? do_syscall_64+0x100/0x230 [ 99.635777][ T6262] ? do_syscall_64+0xb6/0x230 [ 99.640521][ T6262] do_syscall_64+0xf3/0x230 [ 99.645080][ T6262] ? clear_bhb_loop+0x35/0x90 [ 99.649856][ T6262] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 99.655985][ T6262] RIP: 0033:0x7fc8f018473c [ 99.660543][ T6262] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 99.680211][ T6262] RSP: 002b:00007fc8f1028030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 99.688720][ T6262] RAX: ffffffffffffffda RBX: 00007fc8f0375fa0 RCX: 00007fc8f018473c [ 99.696904][ T6262] RDX: 000000000000000f RSI: 00007fc8f10280a0 RDI: 0000000000000004 [ 99.704945][ T6262] RBP: 00007fc8f1028090 R08: 0000000000000000 R09: 0000000000000000 [ 99.712998][ T6262] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 99.721075][ T6262] R13: 0000000000000000 R14: 00007fc8f0375fa0 R15: 00007ffc8de7af68 [ 99.729176][ T6262] [ 99.874733][ T6267] xt_ecn: cannot match TCP bits for non-tcp packets [ 102.122553][ T6293] bond_slave_0: entered promiscuous mode [ 102.128514][ T6293] bond_slave_1: entered promiscuous mode [ 102.197821][ T6293] vlan2: entered promiscuous mode [ 102.215752][ T6293] bond0: entered promiscuous mode [ 102.230660][ T6293] vlan2: entered allmulticast mode [ 102.237627][ T6293] bond0: entered allmulticast mode [ 102.243020][ T6293] bond_slave_0: entered allmulticast mode [ 102.248804][ T6293] bond_slave_1: entered allmulticast mode [ 102.260830][ T6293] syz_tun: entered allmulticast mode [ 102.268187][ T6300] __nla_validate_parse: 3 callbacks suppressed [ 102.268207][ T6300] netlink: 24 bytes leftover after parsing attributes in process `syz.1.107'. [ 102.293266][ T6293] bond0: left allmulticast mode [ 102.298367][ T6293] bond_slave_0: left allmulticast mode [ 102.310259][ T6293] bond_slave_1: left allmulticast mode [ 102.318002][ T6293] syz_tun: left allmulticast mode [ 102.335513][ T6293] bond0: left promiscuous mode [ 102.341007][ T6293] bond_slave_0: left promiscuous mode [ 102.346577][ T6293] bond_slave_1: left promiscuous mode [ 102.588306][ T6315] xt_ecn: cannot match TCP bits for non-tcp packets [ 102.590804][ T6304] netlink: 144 bytes leftover after parsing attributes in process `syz.2.109'. [ 102.612286][ T6304] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 103.116551][ T6333] netlink: 12 bytes leftover after parsing attributes in process `syz.0.117'. [ 103.505684][ T6332] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.543151][ T6332] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.584596][ T6332] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 103.605088][ T6332] bond0 (unregistering): Released all slaves [ 103.646824][ T6342] netlink: 16186 bytes leftover after parsing attributes in process `syz.4.121'. [ 103.944487][ T6353] netlink: 3 bytes leftover after parsing attributes in process `syz.4.124'. [ 104.015952][ T6356] netlink: 4 bytes leftover after parsing attributes in process `syz.0.125'. [ 104.160525][ T6366] netlink: 88 bytes leftover after parsing attributes in process `syz.3.127'. [ 104.190890][ T6366] netlink: 8 bytes leftover after parsing attributes in process `syz.3.127'. [ 104.237557][ T6369] nbd: socks must be embedded in a SOCK_ITEM attr [ 104.926189][ T6400] sctp: failed to load transform for md5: -4 [ 105.273924][ T6427] netlink: zone id is out of range [ 105.324760][ T6427] netlink: zone id is out of range [ 105.329981][ T6427] netlink: zone id is out of range [ 105.364570][ T6431] xt_ecn: cannot match TCP bits for non-tcp packets [ 105.380960][ T6428] netlink: 24 bytes leftover after parsing attributes in process `syz.2.143'. [ 105.409721][ T6427] netlink: zone id is out of range [ 105.428875][ T6427] netlink: zone id is out of range [ 105.446374][ T6427] netlink: zone id is out of range [ 105.451879][ T6427] netlink: zone id is out of range [ 105.467031][ T6428] netlink: 'syz.2.143': attribute type 11 has an invalid length. [ 105.475641][ T6427] netlink: zone id is out of range [ 105.857293][ T6452] netlink: 12 bytes leftover after parsing attributes in process `syz.3.148'. [ 105.992439][ T6438] delete_channel: no stack [ 106.504945][ T6468] netem: incorrect ge model size [ 106.512260][ T6468] netem: change failed [ 107.174346][ T6500] netlink: 'syz.1.163': attribute type 2 has an invalid length. [ 107.221257][ T6500] netlink: 'syz.1.163': attribute type 2 has an invalid length. [ 107.261475][ T6500] netlink: 'syz.1.163': attribute type 2 has an invalid length. [ 107.323276][ T6500] netlink: 'syz.1.163': attribute type 2 has an invalid length. [ 107.360719][ T6500] netlink: 'syz.1.163': attribute type 1 has an invalid length. [ 107.691953][ T6506] xt_ecn: cannot match TCP bits for non-tcp packets [ 108.275641][ T6528] macvtap1: entered promiscuous mode [ 108.330360][ T6528] macvtap1: entered allmulticast mode [ 108.354581][ T6528] vlan0: entered allmulticast mode [ 108.363951][ T6528] veth0_vlan: entered allmulticast mode [ 108.383629][ T6528] vlan0: entered promiscuous mode [ 108.400564][ T6528] team0: Device macvtap1 failed to register rx_handler [ 108.473109][ T6528] vlan0: left allmulticast mode [ 108.498592][ T6528] veth0_vlan: left allmulticast mode [ 108.515473][ T6528] vlan0: left promiscuous mode [ 108.729816][ T6545] __nla_validate_parse: 3 callbacks suppressed [ 108.729838][ T6545] netlink: 4 bytes leftover after parsing attributes in process `syz.3.178'. [ 109.124025][ T6556] IPVS: set_ctl: invalid protocol: 44 172.20.20.170:20000 [ 109.287466][ T6564] pimreg: entered allmulticast mode [ 109.432890][ T6554] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.476931][ T6575] netlink: 164 bytes leftover after parsing attributes in process `syz.3.183'. [ 109.590693][ T6554] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.737812][ T6554] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.919533][ T6554] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.060451][ T6605] netlink: 'syz.3.192': attribute type 1 has an invalid length. [ 110.085689][ T6605] netlink: 8 bytes leftover after parsing attributes in process `syz.3.192'. [ 110.108025][ T6562] pimreg: left allmulticast mode [ 110.251246][ T6554] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.253954][ T6611] netlink: 4 bytes leftover after parsing attributes in process `syz.3.195'. [ 110.335277][ T6554] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.394068][ T6554] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.402400][ T6618] netlink: 8 bytes leftover after parsing attributes in process `syz.2.198'. [ 110.440329][ T6554] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.457645][ T6620] netlink: 'syz.0.196': attribute type 10 has an invalid length. [ 110.541132][ T6620] team0: Failed to send port change of device netdevsim0 via netlink (err -105) [ 110.579702][ T6620] team0: Failed to send options change via netlink (err -105) [ 110.594889][ T6620] team0: Port device netdevsim0 added [ 110.661379][ T6617] netlink: 12 bytes leftover after parsing attributes in process `syz.4.197'. [ 110.686339][ T6617] netlink: 16 bytes leftover after parsing attributes in process `syz.4.197'. [ 110.697911][ T6622] netlink: 8 bytes leftover after parsing attributes in process `syz.3.199'. [ 110.730261][ T6625] netlink: 'syz.2.200': attribute type 4 has an invalid length. [ 110.754971][ T6617] netlink: 8 bytes leftover after parsing attributes in process `syz.4.197'. [ 110.755002][ T6626] delete_channel: no stack [ 110.781427][ T6617] net_ratelimit: 6 callbacks suppressed [ 110.781452][ T6617] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 110.802321][ T6625] netlink: 'syz.2.200': attribute type 4 has an invalid length. [ 110.814323][ T6626] netlink: 'syz.1.201': attribute type 322 has an invalid length. [ 111.067543][ T6636] netlink: 8 bytes leftover after parsing attributes in process `syz.2.205'. [ 111.153754][ T6646] openvswitch: netlink: VXLAN extension 0 has unexpected len 3 expected 0 [ 111.202661][ T6642] bond1: (slave geneve2): making interface the new active one [ 111.211913][ T6642] bond1: (slave geneve2): Enslaving as an active interface with an up link [ 111.236273][ T6643] syz.1.206 uses obsolete (PF_INET,SOCK_PACKET) [ 111.295945][ T6646] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 111.687478][ T6657] veth0_vlan: left promiscuous mode [ 111.697755][ T6657] veth0_vlan: entered promiscuous mode [ 111.736389][ T6657] team0: Device veth0_vlan failed to register rx_handler [ 112.923556][ T6725] xt_ecn: cannot match TCP bits for non-tcp packets [ 113.591197][ T6757] bond0: Unable to set up delay as MII monitoring is disabled [ 113.617233][ T6758] pim6reg1: entered allmulticast mode [ 113.691393][ T6757] bridge0: port 3(ipvlan2) entered blocking state [ 113.733974][ T6757] bridge0: port 3(ipvlan2) entered disabled state [ 113.767019][ T6757] ipvlan2: entered allmulticast mode [ 113.772419][ T6757] bridge0: entered allmulticast mode [ 113.807366][ T6757] ipvlan2: left allmulticast mode [ 113.832982][ T6757] bridge0: left allmulticast mode [ 114.268084][ T6776] bridge1: entered promiscuous mode [ 114.282691][ T6776] bridge1: entered allmulticast mode [ 114.298933][ T6776] team0: Port device bridge1 added [ 114.354629][ T6776] validate_nla: 3 callbacks suppressed [ 114.354652][ T6776] netlink: 'syz.4.247': attribute type 10 has an invalid length. [ 114.383922][ T6784] netlink: 'syz.0.248': attribute type 1 has an invalid length. [ 114.422780][ T6786] __nla_validate_parse: 13 callbacks suppressed [ 114.422803][ T6786] netlink: 80 bytes leftover after parsing attributes in process `syz.3.249'. [ 114.472722][ T6776] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 114.507536][ T6783] bridge0: port 3(ip6gretap0) entered blocking state [ 114.524729][ T6783] bridge0: port 3(ip6gretap0) entered disabled state [ 114.531790][ T6783] ip6gretap0: entered allmulticast mode [ 114.539255][ T6783] ip6gretap0: entered promiscuous mode [ 114.546366][ T6783] bridge0: port 3(ip6gretap0) entered blocking state [ 114.553683][ T6783] bridge0: port 3(ip6gretap0) entered forwarding state [ 114.878817][ T6802] netlink: 8 bytes leftover after parsing attributes in process `syz.3.255'. [ 114.893940][ T35] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.061190][ T35] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.416425][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 115.423640][ T35] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.439119][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 115.448032][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 115.459091][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 115.471158][ T5853] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 115.479078][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 115.508319][ T35] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 115.789170][ T6835] openvswitch: netlink: Message has 4 unknown bytes. [ 116.295789][ T35] bridge_slave_1: left allmulticast mode [ 116.301847][ T35] bridge_slave_1: left promiscuous mode [ 116.322667][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.386288][ T35] bridge_slave_0: left allmulticast mode [ 116.428817][ T35] bridge_slave_0: left promiscuous mode [ 116.470985][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.080641][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 117.092425][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 117.103873][ T35] bond0 (unregistering): Released all slaves [ 117.131165][ T6846] IPv6: syztnl1: Disabled Multicast RS [ 117.139934][ T6848] netlink: 'syz.3.265': attribute type 21 has an invalid length. [ 117.167592][ T6848] netlink: 132 bytes leftover after parsing attributes in process `syz.3.265'. [ 117.442418][ T6885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.272'. [ 117.552854][ T5853] Bluetooth: hci2: command tx timeout [ 117.572654][ T6816] chnl_net:caif_netlink_parms(): no params data found [ 117.741036][ T6891] netlink: 20 bytes leftover after parsing attributes in process `syz.0.274'. [ 117.774886][ T6891] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 117.782610][ T6891] IPv6: NLM_F_CREATE should be set when creating new route [ 117.789933][ T6891] IPv6: NLM_F_CREATE should be set when creating new route [ 117.962275][ T35] hsr_slave_0: left promiscuous mode [ 117.994899][ T35] hsr_slave_1: left promiscuous mode [ 118.012873][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 118.020520][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 118.077416][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 118.102583][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 118.178019][ T35] veth1_macvtap: left promiscuous mode [ 118.197426][ T35] veth0_macvtap: left promiscuous mode [ 118.216741][ T35] veth1_vlan: left promiscuous mode [ 118.232961][ T35] veth0_vlan: left promiscuous mode [ 118.497196][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 118.508164][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 118.529821][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 118.540115][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 118.548999][ T5856] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 118.556815][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 118.907562][ T35] team0 (unregistering): Port device team_slave_1 removed [ 118.948728][ T35] team0 (unregistering): Port device team_slave_0 removed [ 119.367676][ T6916] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 119.557547][ T6926] netlink: 4 bytes leftover after parsing attributes in process `syz.2.280'. [ 119.593974][ T6934] netlink: 'syz.3.279': attribute type 10 has an invalid length. [ 119.606739][ T6816] bridge0: port 1(bridge_slave_0) entered blocking state [ 119.637267][ T6816] bridge0: port 1(bridge_slave_0) entered disabled state [ 119.642838][ T5856] Bluetooth: hci2: command tx timeout [ 119.661225][ T6816] bridge_slave_0: entered allmulticast mode [ 119.669818][ T6816] bridge_slave_0: entered promiscuous mode [ 119.696258][ T6934] 8021q: adding VLAN 0 to HW filter on device team0 [ 119.731714][ T6934] bond0: (slave team0): Enslaving as an active interface with an up link [ 119.777228][ T6816] bridge0: port 2(bridge_slave_1) entered blocking state [ 119.797374][ T6816] bridge0: port 2(bridge_slave_1) entered disabled state [ 119.810413][ T6816] bridge_slave_1: entered allmulticast mode [ 119.825711][ T6816] bridge_slave_1: entered promiscuous mode [ 119.966332][ T6816] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 120.010477][ T6816] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 120.130266][ T6816] team0: Port device team_slave_0 added [ 120.165000][ T6816] team0: Port device team_slave_1 added [ 120.247631][ T6956] syz.2.285[6956] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.247748][ T6956] syz.2.285[6956] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.288178][ T6956] syz.2.285[6956] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 120.356865][ T6962] netlink: 'syz.3.287': attribute type 1 has an invalid length. [ 120.491352][ T6962] bond1: entered promiscuous mode [ 120.507606][ T6962] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.527842][ T6816] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 120.539450][ T6971] netlink: 'syz.0.286': attribute type 4 has an invalid length. [ 120.548079][ T6816] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.574206][ T6816] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 120.589334][ T6816] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 120.596406][ T6816] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 120.627509][ T5856] Bluetooth: hci0: command tx timeout [ 120.632068][ T6816] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 120.663937][ T6967] 8021q: adding VLAN 0 to HW filter on device bond1 [ 120.671262][ T6967] bond1: (slave ip6gre1): The slave device specified does not support setting the MAC address [ 120.691262][ T6967] bond1: (slave ip6gre1): Setting fail_over_mac to active for active-backup mode [ 120.692795][ T6977] netlink: 4 bytes leftover after parsing attributes in process `syz.3.287'. [ 120.704016][ T6967] bond1: (slave ip6gre1): making interface the new active one [ 120.723300][ T6967] ip6gre1: entered promiscuous mode [ 120.729879][ T6967] bond1: (slave ip6gre1): Enslaving as an active interface with an up link [ 120.909989][ T6977] bond1 (unregistering): (slave ip6gre1): Releasing backup interface [ 120.918397][ T6977] ip6gre1: left promiscuous mode [ 120.932293][ T6977] bond1 (unregistering): Released all slaves [ 120.956012][ T6919] chnl_net:caif_netlink_parms(): no params data found [ 121.079240][ T6981] netlink: 8 bytes leftover after parsing attributes in process `syz.0.290'. [ 121.110996][ T25] IPVS: starting estimator thread 0... [ 121.133306][ T35] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.205097][ T6987] netlink: 8 bytes leftover after parsing attributes in process `syz.0.290'. [ 121.223177][ T6984] IPVS: using max 18 ests per chain, 43200 per kthread [ 121.263473][ T6987] netlink: 4 bytes leftover after parsing attributes in process `syz.0.290'. [ 121.272662][ T6987] netlink: 32 bytes leftover after parsing attributes in process `syz.0.290'. [ 121.286351][ T6981] netlink: 20 bytes leftover after parsing attributes in process `syz.0.290'. [ 121.309674][ T6816] hsr_slave_0: entered promiscuous mode [ 121.356755][ T6816] hsr_slave_1: entered promiscuous mode [ 121.362948][ T6997] xt_ecn: cannot match TCP bits for non-tcp packets [ 121.401372][ T6816] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 121.432933][ T6816] Cannot create hsr debugfs directory [ 121.486238][ T35] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.571415][ T6919] bridge0: port 1(bridge_slave_0) entered blocking state [ 121.603390][ T6919] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.618924][ T6919] bridge_slave_0: entered allmulticast mode [ 121.635599][ T6919] bridge_slave_0: entered promiscuous mode [ 121.713828][ T5856] Bluetooth: hci2: command tx timeout [ 121.775002][ T35] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 121.838490][ T6919] bridge0: port 2(bridge_slave_1) entered blocking state [ 121.869513][ T6919] bridge0: port 2(bridge_slave_1) entered disabled state [ 121.898085][ T6919] bridge_slave_1: entered allmulticast mode [ 121.919792][ T6919] bridge_slave_1: entered promiscuous mode [ 122.071770][ T35] bond0: (slave netdevsim0): Releasing backup interface [ 122.101769][ T35] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 122.225178][ T6919] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 122.264888][ T6919] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 122.413567][ T6919] team0: Port device team_slave_0 added [ 122.548043][ T7024] netlink: 4 bytes leftover after parsing attributes in process `syz.0.299'. [ 122.577019][ T6919] team0: Port device team_slave_1 added [ 122.621511][ T7031] netlink: 4 bytes leftover after parsing attributes in process `syz.2.301'. [ 122.644653][ T7029] Cannot find del_set index 3 as target [ 122.672996][ T5856] Bluetooth: hci0: command tx timeout [ 122.748940][ T35] ip6gretap0: left allmulticast mode [ 122.765447][ T35] ip6gretap0: left promiscuous mode [ 122.782861][ T35] bridge0: port 3(ip6gretap0) entered disabled state [ 122.831220][ T35] bridge_slave_1: left allmulticast mode [ 122.849619][ T35] bridge_slave_1: left promiscuous mode [ 122.856295][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 122.857804][ T7038] netlink: 24 bytes leftover after parsing attributes in process `syz.0.303'. [ 122.877106][ T35] bridge_slave_0: left allmulticast mode [ 122.884645][ T35] bridge_slave_0: left promiscuous mode [ 122.890809][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 123.137953][ T35] team0: Port device bridge1 removed [ 123.306341][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 123.318624][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 123.330868][ T35] bond0 (unregistering): Released all slaves [ 123.357020][ T6919] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 123.371393][ T6919] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.402678][ T6919] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 123.428037][ T6919] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 123.435750][ T6919] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 123.467901][ T6919] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 123.795738][ T5856] Bluetooth: hci2: command tx timeout [ 124.159021][ T6919] hsr_slave_0: entered promiscuous mode [ 124.175256][ T6919] hsr_slave_1: entered promiscuous mode [ 124.191291][ T6919] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 124.203720][ T6919] Cannot create hsr debugfs directory [ 124.576863][ T7079] openvswitch: netlink: Tunnel attr 43 out of range max 16 [ 124.596415][ T35] hsr_slave_0: left promiscuous mode [ 124.612075][ T35] hsr_slave_1: left promiscuous mode [ 124.656156][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 124.668879][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 124.689662][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 124.710376][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 124.761652][ T35] veth1_macvtap: left promiscuous mode [ 124.764724][ T5856] Bluetooth: hci0: command tx timeout [ 124.773865][ T35] veth0_macvtap: left promiscuous mode [ 124.779688][ T35] veth1_vlan: left promiscuous mode [ 124.799662][ T35] veth0_vlan: left promiscuous mode [ 125.266594][ T35] team0 (unregistering): Port device team_slave_1 removed [ 125.311769][ T35] team0 (unregistering): Port device team_slave_0 removed [ 125.743725][ T7088] mac80211_hwsim hwsim2 wlan0: entered promiscuous mode [ 125.762830][ T7088] macvlan3: entered allmulticast mode [ 125.779004][ T7088] mac80211_hwsim hwsim2 wlan0: entered allmulticast mode [ 125.794893][ T7088] mac80211_hwsim hwsim2 wlan0: left promiscuous mode [ 126.104559][ T7097] FAULT_INJECTION: forcing a failure. [ 126.104559][ T7097] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 126.159331][ T7097] CPU: 1 UID: 0 PID: 7097 Comm: syz.2.317 Not tainted 6.13.0-rc5-syzkaller-00769-g356939999438 #0 [ 126.170098][ T7097] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 126.180294][ T7097] Call Trace: [ 126.183613][ T7097] [ 126.186669][ T7097] dump_stack_lvl+0x241/0x360 [ 126.191445][ T7097] ? __pfx_dump_stack_lvl+0x10/0x10 [ 126.196790][ T7097] ? __pfx__printk+0x10/0x10 [ 126.201478][ T7097] ? snprintf+0xda/0x120 [ 126.205778][ T7097] should_fail_ex+0x3b0/0x4e0 [ 126.210538][ T7097] _copy_to_user+0x31/0xb0 [ 126.215076][ T7097] simple_read_from_buffer+0xca/0x150 [ 126.220599][ T7097] proc_fail_nth_read+0x1e9/0x250 [ 126.225862][ T7097] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 126.232281][ T7097] ? rw_verify_area+0x55e/0x6f0 [ 126.238069][ T7097] ? __pfx_proc_fail_nth_read+0x10/0x10 [ 126.244255][ T7097] vfs_read+0x1fc/0xb70 [ 126.248709][ T7097] ? __pfx___mutex_lock+0x10/0x10 [ 126.254872][ T6816] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 126.255262][ T7097] ? __pfx_vfs_read+0x10/0x10 [ 126.269423][ T7097] ? __fget_files+0x2a/0x410 [ 126.274286][ T7097] ? __fget_files+0x395/0x410 [ 126.279544][ T7097] ? __fget_files+0x2a/0x410 [ 126.284509][ T7097] ksys_read+0x18f/0x2b0 [ 126.288824][ T7097] ? __pfx_ksys_read+0x10/0x10 [ 126.293650][ T7097] ? do_syscall_64+0x100/0x230 [ 126.298474][ T7097] ? do_syscall_64+0xb6/0x230 [ 126.303197][ T7097] do_syscall_64+0xf3/0x230 [ 126.307765][ T7097] ? clear_bhb_loop+0x35/0x90 [ 126.312513][ T7097] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 126.318307][ T7101] xt_CT: You must specify a L4 protocol and not use inversions on it [ 126.318558][ T7097] RIP: 0033:0x7fc8f018473c [ 126.331119][ T7097] Code: ec 28 48 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 99 93 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 31 c0 0f 05 <48> 3d 00 f0 ff ff 77 34 44 89 c7 48 89 44 24 08 e8 ef 93 02 00 48 [ 126.350866][ T7097] RSP: 002b:00007fc8f1028030 EFLAGS: 00000246 ORIG_RAX: 0000000000000000 [ 126.358871][ T7101] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 126.359413][ T7097] RAX: ffffffffffffffda RBX: 00007fc8f0375fa0 RCX: 00007fc8f018473c [ 126.377220][ T7097] RDX: 000000000000000f RSI: 00007fc8f10280a0 RDI: 0000000000000004 [ 126.385229][ T7097] RBP: 00007fc8f1028090 R08: 0000000000000000 R09: 0000000000000014 [ 126.393243][ T7097] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 126.401237][ T7097] R13: 0000000000000000 R14: 00007fc8f0375fa0 R15: 00007ffc8de7af68 [ 126.409377][ T7097] [ 126.499572][ T6816] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 126.532117][ T7106] __nla_validate_parse: 2 callbacks suppressed [ 126.532139][ T7106] netlink: 4 bytes leftover after parsing attributes in process `syz.2.320'. [ 126.548490][ T7101] netlink: 'syz.0.318': attribute type 4 has an invalid length. [ 126.656311][ T6816] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 126.686104][ T6816] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 126.834383][ T5856] Bluetooth: hci0: command tx timeout [ 126.858686][ T7117] netlink: 8 bytes leftover after parsing attributes in process `syz.2.322'. [ 126.868563][ T7117] netlink: 12 bytes leftover after parsing attributes in process `syz.2.322'. [ 127.056309][ T6816] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.130723][ T6816] 8021q: adding VLAN 0 to HW filter on device team0 [ 127.182035][ T6867] bridge0: port 1(bridge_slave_0) entered blocking state [ 127.190190][ T6867] bridge0: port 1(bridge_slave_0) entered forwarding state [ 127.239292][ T6865] bridge0: port 2(bridge_slave_1) entered blocking state [ 127.246523][ T6865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 127.281466][ T7134] netlink: 165 bytes leftover after parsing attributes in process `syz.0.326'. [ 127.305186][ T7134] sock: sock_timestamping_bind_phc: sock not bind to device [ 127.435102][ T6816] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 127.478836][ T6816] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 127.522643][ T6919] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 127.582205][ T6919] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 127.623549][ T6919] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 127.691699][ T6919] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 127.792984][ T6919] 8021q: adding VLAN 0 to HW filter on device bond0 [ 127.799948][ T7145] syzkaller1: entered promiscuous mode [ 127.844239][ T7145] syzkaller1: entered allmulticast mode [ 127.939208][ T7160] netlink: 24 bytes leftover after parsing attributes in process `syz.2.330'. [ 127.989440][ T6919] 8021q: adding VLAN 0 to HW filter on device team0 [ 128.012235][ T1162] bridge0: port 1(bridge_slave_0) entered blocking state [ 128.019550][ T1162] bridge0: port 1(bridge_slave_0) entered forwarding state [ 128.082281][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 128.089515][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 128.184564][ T7167] netlink: 4 bytes leftover after parsing attributes in process `syz.0.332'. [ 128.227743][ T6816] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 128.716694][ T6816] veth0_vlan: entered promiscuous mode [ 128.751050][ T6816] veth1_vlan: entered promiscuous mode [ 128.905284][ T6816] veth0_macvtap: entered promiscuous mode [ 128.940518][ T6816] veth1_macvtap: entered promiscuous mode [ 129.026165][ T6816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.050321][ T6816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.067945][ T6816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.084318][ T6816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.094765][ T6816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 129.107759][ T6816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.120236][ T6816] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 129.133830][ T7200] ip6t_srh: unknown srh invflags 4000 [ 129.160905][ T7202] A link change request failed with some changes committed already. Interface batadv_slave_0 may have been left with an inconsistent configuration, please check. [ 129.180637][ T6816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.181094][ T7199] netlink: 28 bytes leftover after parsing attributes in process `syz.0.337'. [ 129.201485][ T7199] netlink: 28 bytes leftover after parsing attributes in process `syz.0.337'. [ 129.214608][ T6816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.224740][ T6816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.241996][ T6816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.252806][ T6816] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 129.263893][ T6816] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 129.275694][ T6816] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 129.285435][ T7205] IPv6: addrconf: prefix option has invalid lifetime [ 129.350717][ T7205] netlink: 8 bytes leftover after parsing attributes in process `syz.0.337'. [ 129.391512][ T6816] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.415050][ T6816] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.431269][ T6816] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.449604][ T6816] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 129.501308][ T6919] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 130.379136][ T6919] veth0_vlan: entered promiscuous mode [ 130.489197][ T6867] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.598934][ T6919] veth1_vlan: entered promiscuous mode [ 130.991462][ T5853] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 131.014138][ T5853] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 131.014416][ T6867] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.032993][ T5853] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 131.045901][ T5853] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 131.061342][ T5853] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 131.069347][ T5853] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 131.244706][ T6867] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.384690][ T6919] veth0_macvtap: entered promiscuous mode [ 131.427043][ T6919] veth1_macvtap: entered promiscuous mode [ 131.483620][ T6867] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 131.555802][ T7271] netlink: 'syz.0.345': attribute type 1 has an invalid length. [ 131.571295][ T6919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.594299][ T6919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.604977][ T6919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.616159][ T6919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.628551][ T6919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.640451][ T6919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.651416][ T6919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 131.662888][ T6919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.675489][ T6919] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 131.695636][ T6919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.712435][ T6919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.742089][ T6919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.753286][ T6919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.772605][ T6919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.788864][ T6919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.810059][ T6919] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 131.852251][ T6919] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 131.905652][ T6919] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 131.934904][ T7271] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 132.064946][ T6919] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.098478][ T6919] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.124521][ T6919] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.148442][ T6919] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 132.454830][ T7289] netlink: 'syz.3.347': attribute type 3 has an invalid length. [ 132.462750][ T7289] netlink: 132 bytes leftover after parsing attributes in process `syz.3.347'. [ 132.887304][ T6867] bridge_slave_1: left allmulticast mode [ 132.907968][ T6867] bridge_slave_1: left promiscuous mode [ 132.929626][ T6867] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.010701][ T6867] bridge_slave_0: left allmulticast mode [ 133.022261][ T6867] bridge_slave_0: left promiscuous mode [ 133.041824][ T6867] bridge0: port 1(bridge_slave_0) entered disabled state [ 133.163525][ T5856] Bluetooth: hci2: command tx timeout [ 133.285397][ T1298] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.292223][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.991686][ T6867] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 134.011289][ T6867] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 134.022633][ T6867] bond0 (unregistering): Released all slaves [ 134.044831][ T7294] ip6gretap0: entered promiscuous mode [ 134.051984][ T7294] batadv_slave_0: entered promiscuous mode [ 134.236488][ T7260] chnl_net:caif_netlink_parms(): no params data found [ 134.414225][ T7332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.352'. [ 134.423819][ T7332] netlink: 8 bytes leftover after parsing attributes in process `syz.0.352'. [ 134.480172][ T6867] hsr_slave_0: left promiscuous mode [ 134.499746][ T6867] hsr_slave_1: left promiscuous mode [ 134.520459][ T6867] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 134.540608][ T6867] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 134.564815][ T6867] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 134.573614][ T6867] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 134.606709][ T6867] veth1_macvtap: left promiscuous mode [ 134.618396][ T6867] veth0_macvtap: left promiscuous mode [ 134.630347][ T6867] veth1_vlan: left promiscuous mode [ 134.641938][ T6867] veth0_vlan: left promiscuous mode [ 135.233280][ T5856] Bluetooth: hci2: command tx timeout [ 135.831030][ T6867] team0 (unregistering): Port device team_slave_1 removed [ 135.899796][ T6867] team0 (unregistering): Port device team_slave_0 removed [ 136.470567][ T7354] netlink: 'syz.2.354': attribute type 4 has an invalid length. [ 136.606981][ T7348] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 136.778430][ T7358] tipc: Started in network mode [ 136.788167][ T7363] netlink: 4 bytes leftover after parsing attributes in process `syz.3.356'. [ 136.813187][ T7358] tipc: Node identity ac14142f, cluster identity 4711 [ 136.834430][ T7358] tipc: New replicast peer: 0.0.0.0 [ 136.848485][ T7358] tipc: Enabled bearer , priority 10 [ 136.899802][ T7361] tipc: New replicast peer: 0000:0000:0000:0000:0000:0000:0000:0000 [ 136.933518][ T7260] bridge0: port 1(bridge_slave_0) entered blocking state [ 136.970536][ T7260] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.990223][ T7260] bridge_slave_0: entered allmulticast mode [ 137.023285][ T7260] bridge_slave_0: entered promiscuous mode [ 137.044600][ T7260] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.051749][ T7260] bridge0: port 2(bridge_slave_1) entered disabled state [ 137.081153][ T7260] bridge_slave_1: entered allmulticast mode [ 137.104614][ T7260] bridge_slave_1: entered promiscuous mode [ 137.129541][ T7373] netlink: 'syz.0.358': attribute type 1 has an invalid length. [ 137.151400][ T7376] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci2/hci2:200/input5 [ 137.162649][ T7373] netlink: 'syz.0.358': attribute type 1 has an invalid length. [ 137.236119][ T7260] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 137.268932][ T7380] netlink: 4 bytes leftover after parsing attributes in process `syz.0.358'. [ 137.313080][ T5856] Bluetooth: hci2: command tx timeout [ 137.387070][ T7379] syzkaller1: entered promiscuous mode [ 137.436676][ T7379] syzkaller1: entered allmulticast mode [ 137.495206][ T7260] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 137.547095][ T7380] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 137.555374][ T7380] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 137.591289][ T7380] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 137.609180][ T7380] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 137.769187][ T5853] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 137.780811][ T5853] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 137.789573][ T5853] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 137.805288][ T5853] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 137.817656][ T5853] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 137.825526][ T5853] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 137.929060][ T7260] team0: Port device team_slave_0 added [ 137.974356][ T5917] tipc: Node number set to 2886997039 [ 137.988663][ T7260] team0: Port device team_slave_1 added [ 138.111335][ T7260] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 138.136560][ T7260] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.176287][ T7260] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 138.191339][ T7260] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 138.205403][ T7260] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 138.233775][ T7260] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 138.389666][ T6867] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.412943][ T7260] hsr_slave_0: entered promiscuous mode [ 138.419727][ T7260] hsr_slave_1: entered promiscuous mode [ 138.426711][ T7260] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 138.435303][ T7260] Cannot create hsr debugfs directory [ 138.490754][ T6867] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.641133][ T6867] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 138.829052][ T7424] ax25_connect(): syz.2.364 uses autobind, please contact jreuter@yaina.de [ 138.832150][ T6867] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 139.131095][ T7439] Bluetooth: MGMT ver 1.23 [ 139.224895][ T7428] netlink: 8 bytes leftover after parsing attributes in process `syz.3.366'. [ 139.282394][ T7433] bond_slave_0: entered promiscuous mode [ 139.288543][ T7433] bond_slave_1: entered promiscuous mode [ 139.294365][ T7433] team_slave_0: entered promiscuous mode [ 139.300458][ T7433] team_slave_1: entered promiscuous mode [ 139.313592][ T7433] vlan2: entered promiscuous mode [ 139.323253][ T7433] bond0: entered promiscuous mode [ 139.328719][ T7433] team0: entered promiscuous mode [ 139.383521][ T7433] vlan2: entered allmulticast mode [ 139.388739][ T7433] bond0: entered allmulticast mode [ 139.407123][ T5853] Bluetooth: hci2: command tx timeout [ 139.427419][ T7433] bond_slave_0: entered allmulticast mode [ 139.442842][ T7433] bond_slave_1: entered allmulticast mode [ 139.449234][ T7433] syz_tun: entered allmulticast mode [ 139.462708][ T7433] team0: entered allmulticast mode [ 139.476389][ T7433] team_slave_0: entered allmulticast mode [ 139.492917][ T7433] team_slave_1: entered allmulticast mode [ 139.503419][ T7433] bond0: left allmulticast mode [ 139.508510][ T7433] bond_slave_0: left allmulticast mode [ 139.514533][ T7433] bond_slave_1: left allmulticast mode [ 139.520056][ T7433] syz_tun: left allmulticast mode [ 139.525587][ T7433] team0: left allmulticast mode [ 139.530494][ T7433] team_slave_0: left allmulticast mode [ 139.537269][ T7433] team_slave_1: left allmulticast mode [ 139.543152][ T7433] bond0: left promiscuous mode [ 139.548465][ T7433] team0: left promiscuous mode [ 139.549225][ T7418] netlink: 24 bytes leftover after parsing attributes in process `syz.2.364'. [ 139.555263][ T7433] bond_slave_0: left promiscuous mode [ 139.568278][ T7433] bond_slave_1: left promiscuous mode [ 139.573843][ T7433] team_slave_0: left promiscuous mode [ 139.579323][ T7433] team_slave_1: left promiscuous mode [ 139.691866][ T7398] chnl_net:caif_netlink_parms(): no params data found [ 139.884562][ T5853] Bluetooth: hci0: command tx timeout [ 140.129607][ T7398] bridge0: port 1(bridge_slave_0) entered blocking state [ 140.138380][ T7398] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.156096][ T7398] bridge_slave_0: entered allmulticast mode [ 140.165897][ T7398] bridge_slave_0: entered promiscuous mode [ 140.267639][ T7398] bridge0: port 2(bridge_slave_1) entered blocking state [ 140.284084][ T7398] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.303054][ T7398] bridge_slave_1: entered allmulticast mode [ 140.343343][ T7398] bridge_slave_1: entered promiscuous mode [ 140.429367][ T7398] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 140.449432][ T6867] bridge_slave_1: left allmulticast mode [ 140.460772][ T6867] bridge_slave_1: left promiscuous mode [ 140.472972][ T6867] bridge0: port 2(bridge_slave_1) entered disabled state [ 140.494971][ T6867] bridge_slave_0: left allmulticast mode [ 140.500853][ T6867] bridge_slave_0: left promiscuous mode [ 140.506773][ T6867] bridge0: port 1(bridge_slave_0) entered disabled state [ 140.766344][ T7482] netlink: 20 bytes leftover after parsing attributes in process `syz.3.377'. [ 140.954789][ T6867] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 140.967346][ T6867] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 140.979589][ T6867] bond0 (unregistering): Released all slaves [ 140.996573][ T7398] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 141.030479][ T7480] pim6reg: entered allmulticast mode [ 141.055627][ T7483] pim6reg: left allmulticast mode [ 141.246195][ T7398] team0: Port device team_slave_0 added [ 141.315049][ T7398] team0: Port device team_slave_1 added [ 141.370187][ T6867] hsr_slave_0: left promiscuous mode [ 141.397440][ T6867] hsr_slave_1: left promiscuous mode [ 141.416236][ T6867] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 141.425458][ T6867] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 141.453322][ T6867] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 141.468234][ T6867] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 141.535267][ T6867] veth1_macvtap: left promiscuous mode [ 141.541433][ T6867] veth0_macvtap: left promiscuous mode [ 141.547652][ T6867] veth1_vlan: left promiscuous mode [ 141.562719][ T6867] veth0_vlan: left promiscuous mode [ 141.952652][ T5853] Bluetooth: hci0: command 0x041b tx timeout [ 142.081582][ T6867] team0 (unregistering): Port device team_slave_1 removed [ 142.124653][ T6867] team0 (unregistering): Port device team_slave_0 removed [ 142.548589][ T7502] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 142.556474][ T7502] macvtap1: entered promiscuous mode [ 142.721857][ T7398] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 142.745772][ T7398] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.780498][ T7398] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 142.792688][ T7524] netlink: 'syz.3.385': attribute type 1 has an invalid length. [ 142.823249][ T7398] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 142.830269][ T7398] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 142.903746][ T7398] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 142.958390][ T7260] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 142.983783][ T7260] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 143.012645][ T7260] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 143.045734][ T7260] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 143.074745][ T7530] Cannot find del_set index 3 as target [ 143.125128][ T7532] (unnamed net_device) (uninitialized): option arp_all_targets: invalid value (64) [ 143.189585][ T7398] hsr_slave_0: entered promiscuous mode [ 143.224139][ T7398] hsr_slave_1: entered promiscuous mode [ 143.226189][ T7539] netlink: 'syz.0.389': attribute type 9 has an invalid length. [ 143.240955][ T7398] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 143.248749][ T7539] netlink: 'syz.0.389': attribute type 7 has an invalid length. [ 143.248775][ T7539] netlink: 'syz.0.389': attribute type 8 has an invalid length. [ 143.292670][ T7398] Cannot create hsr debugfs directory [ 143.307890][ T7539] SET target dimension over the limit! [ 143.468167][ T7539] sock: sock_timestamping_bind_phc: sock not bind to device [ 143.563548][ T7543] netlink: 'syz.2.390': attribute type 2 has an invalid length. [ 143.611980][ T7260] 8021q: adding VLAN 0 to HW filter on device bond0 [ 143.780376][ T7260] 8021q: adding VLAN 0 to HW filter on device team0 [ 144.032776][ T5853] Bluetooth: hci0: command 0x041b tx timeout [ 144.048763][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 144.056003][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 144.599214][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 144.606444][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 145.020486][ T7260] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 145.138110][ T7260] veth0_vlan: entered promiscuous mode [ 145.211177][ T7260] veth1_vlan: entered promiscuous mode [ 145.227186][ T7398] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 145.232235][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ad72c00: rx timeout, send abort [ 145.244500][ C1] vcan0: j1939_tp_rxtimer: 0xffff88807ad73400: rx timeout, send abort [ 145.253069][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807ad72c00: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 145.268848][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff88807ad73400: 0x00000: (3) A timeout occurred and this is the connection abort to close the session. [ 145.285928][ T7398] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 145.296805][ T7588] netlink: 4 bytes leftover after parsing attributes in process `syz.3.397'. [ 145.359185][ T7588] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.366872][ T7588] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.382137][ T7593] netlink: 4 bytes leftover after parsing attributes in process `syz.2.398'. [ 145.409094][ T7588] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.422738][ T7588] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.479844][ T7398] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 145.501325][ T7593] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 145.513895][ T7593] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 145.535169][ T7593] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 145.555418][ T7593] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 145.678908][ T7398] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 145.729232][ T7260] veth0_macvtap: entered promiscuous mode [ 145.818724][ T7260] veth1_macvtap: entered promiscuous mode [ 145.910381][ T7260] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 145.932437][ T7260] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 145.951445][ T7260] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 145.990793][ T7260] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.011546][ T7260] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.023331][ T7622] netlink: 4 bytes leftover after parsing attributes in process `syz.3.401'. [ 146.028952][ T7260] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 146.121296][ T5853] Bluetooth: hci0: command 0x041b tx timeout [ 146.356724][ T7398] 8021q: adding VLAN 0 to HW filter on device bond0 [ 146.436467][ T7636] netlink: 68 bytes leftover after parsing attributes in process `syz.0.406'. [ 146.565090][ T7398] 8021q: adding VLAN 0 to HW filter on device team0 [ 146.640795][ T6865] bridge0: port 1(bridge_slave_0) entered blocking state [ 146.648027][ T6865] bridge0: port 1(bridge_slave_0) entered forwarding state [ 146.679914][ T6865] bridge0: port 2(bridge_slave_1) entered blocking state [ 146.687183][ T6865] bridge0: port 2(bridge_slave_1) entered forwarding state [ 146.755645][ T7642] netlink: 'syz.3.408': attribute type 1 has an invalid length. [ 146.790911][ T7642] netlink: 224 bytes leftover after parsing attributes in process `syz.3.408'. [ 146.961919][ T7660] netlink: 'syz.2.409': attribute type 10 has an invalid length. [ 147.221975][ T7398] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 147.241511][ T7670] GUP no longer grows the stack in syz.2.410 (7670): 20006000-2000a000 (20005000) [ 147.285570][ T7670] CPU: 1 UID: 0 PID: 7670 Comm: syz.2.410 Not tainted 6.13.0-rc5-syzkaller-00769-g356939999438 #0 [ 147.296249][ T7670] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 147.306360][ T7670] Call Trace: [ 147.309654][ T7670] [ 147.312615][ T7670] dump_stack_lvl+0x241/0x360 [ 147.317355][ T7670] ? __pfx_dump_stack_lvl+0x10/0x10 [ 147.322593][ T7670] ? __pfx__printk+0x10/0x10 [ 147.327215][ T7670] ? find_vma+0xf9/0x170 [ 147.331499][ T7670] ? vma_is_secretmem+0xd/0x50 [ 147.336281][ T7670] ? check_vma_flags+0x52b/0x5a0 [ 147.341275][ T7670] __get_user_pages+0x4385/0x49e0 [ 147.346337][ T7670] ? 0xffffffffa000095c [ 147.350540][ T7670] ? __pfx___get_user_pages+0x10/0x10 [ 147.355977][ T7670] __gup_longterm_locked+0x49a/0x17f0 [ 147.361391][ T7670] ? __pfx___might_resched+0x10/0x10 [ 147.366728][ T7670] ? __pfx___gup_longterm_locked+0x10/0x10 [ 147.372556][ T7670] ? down_read+0x82b/0xa40 [ 147.377010][ T7670] ? is_valid_gup_args+0x124/0x200 [ 147.382139][ T7670] pin_user_pages+0x137/0x1f0 [ 147.386862][ T7670] ? __pfx_pin_user_pages+0x10/0x10 [ 147.392075][ T7670] ? trace_kmalloc+0x1f/0xd0 [ 147.396698][ T7670] xdp_umem_create+0x978/0xf30 [ 147.401508][ T7670] xsk_setsockopt+0x732/0x950 [ 147.406209][ T7670] ? __pfx_xsk_setsockopt+0x10/0x10 [ 147.411439][ T7670] ? __pfx_lock_acquire+0x10/0x10 [ 147.416483][ T7670] ? aa_sock_opt_perm+0x79/0x120 [ 147.421443][ T7670] ? __pfx_xsk_setsockopt+0x10/0x10 [ 147.426667][ T7670] do_sock_setsockopt+0x3af/0x720 [ 147.431729][ T7670] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 147.437300][ T7670] ? __fget_files+0x395/0x410 [ 147.442000][ T7670] ? __fget_files+0x2a/0x410 [ 147.446645][ T7670] __x64_sys_setsockopt+0x1ee/0x280 [ 147.451874][ T7670] do_syscall_64+0xf3/0x230 [ 147.456402][ T7670] ? clear_bhb_loop+0x35/0x90 [ 147.461108][ T7670] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 147.467031][ T7670] RIP: 0033:0x7fc8f0185d29 [ 147.471637][ T7670] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 147.491268][ T7670] RSP: 002b:00007fc8f1028038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 147.499722][ T7670] RAX: ffffffffffffffda RBX: 00007fc8f0375fa0 RCX: 00007fc8f0185d29 [ 147.507709][ T7670] RDX: 0000000000000004 RSI: 000000000000011b RDI: 0000000000000006 [ 147.515702][ T7670] RBP: 00007fc8f0201b08 R08: 0000000000000020 R09: 0000000000000000 [ 147.523687][ T7670] R10: 0000000020000040 R11: 0000000000000246 R12: 0000000000000000 [ 147.531675][ T7670] R13: 0000000000000000 R14: 00007fc8f0375fa0 R15: 00007ffc8de7af68 [ 147.539681][ T7670] [ 147.674977][ T7679] netlink: 16 bytes leftover after parsing attributes in process `syz.2.410'. [ 147.826328][ T7680] IPVS: sync thread started: state = BACKUP, mcast_ifn = wg0, syncid = 4, id = 0 [ 148.234665][ T7698] netlink: 12 bytes leftover after parsing attributes in process `syz.3.415'. [ 148.273501][ T5853] Bluetooth: hci0: command 0x041b tx timeout [ 148.355693][ T62] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 148.647474][ T7675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.412'. [ 148.672994][ T7675] netlink: 12 bytes leftover after parsing attributes in process `syz.0.412'. [ 148.749055][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 148.758439][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 148.766849][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 148.776044][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 148.785194][ T5856] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 148.793113][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 148.851635][ C1] vcan0: j1939_tp_rxtimer: 0xffff888021367400: rx timeout, send abort [ 148.862593][ C1] vcan0: j1939_xtp_rx_abort_one: 0xffff888021367400: 0x30000: (3) A timeout occurred and this is the connection abort to close the session. [ 148.881168][ T7675] IPVS: set_ctl: invalid protocol: 255 127.0.0.1:20004 [ 148.908180][ T7717] netlink: 12 bytes leftover after parsing attributes in process `syz.2.416'. [ 149.282068][ T7717] bond0: entered promiscuous mode [ 149.458913][ T7698] 8021q: adding VLAN 0 to HW filter on device bond1 [ 149.610903][ T7695] bond1: (slave veth5): Enslaving as an active interface with an up link [ 149.686956][ T7716] gretap1: entered promiscuous mode [ 149.712201][ T7716] bond0: (slave gretap1): Enslaving as an active interface with an up link [ 149.840111][ T62] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 149.959986][ T62] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.051019][ T7398] veth0_vlan: entered promiscuous mode [ 150.160919][ T62] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 150.204252][ T7398] veth1_vlan: entered promiscuous mode [ 150.409072][ T7398] veth0_macvtap: entered promiscuous mode [ 150.589524][ T7398] veth1_macvtap: entered promiscuous mode [ 150.775231][ T62] bridge_slave_1: left allmulticast mode [ 150.780956][ T62] bridge_slave_1: left promiscuous mode [ 150.803060][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 150.832006][ T62] bridge_slave_0: left allmulticast mode [ 150.833343][ T5853] Bluetooth: hci2: command tx timeout [ 150.850220][ T62] bridge_slave_0: left promiscuous mode [ 150.889766][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 151.396645][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 151.408331][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 151.419449][ T62] bond0 (unregistering): Released all slaves [ 151.501335][ T7710] chnl_net:caif_netlink_parms(): no params data found [ 151.603837][ T7811] xt_ecn: cannot match TCP bits for non-tcp packets [ 151.652398][ T7398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 151.663937][ T7398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.676653][ T7398] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 151.687183][ T7398] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 151.703282][ T7398] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 151.723299][ T7398] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 151.744625][ T7398] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.762536][ T7398] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.771325][ T7398] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.802528][ T7398] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 151.826682][ T7809] __nla_validate_parse: 1 callbacks suppressed [ 151.826706][ T7809] netlink: 8 bytes leftover after parsing attributes in process `syz.0.430'. [ 151.937995][ T62] hsr_slave_0: left promiscuous mode [ 151.961485][ T62] hsr_slave_1: left promiscuous mode [ 152.003405][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 152.010899][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 152.050918][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 152.071323][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 152.109273][ T62] veth1_macvtap: left promiscuous mode [ 152.128785][ T62] veth0_macvtap: left promiscuous mode [ 152.141980][ T62] veth1_vlan: left promiscuous mode [ 152.148054][ T62] veth0_vlan: left promiscuous mode [ 152.752161][ T62] team0 (unregistering): Port device team_slave_1 removed [ 152.815713][ T62] team0 (unregistering): Port device team_slave_0 removed [ 152.917376][ T5853] Bluetooth: hci2: command tx timeout [ 153.289917][ T7817] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 153.375545][ T7816] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.504745][ T7816] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.598738][ T7853] netlink: 28 bytes leftover after parsing attributes in process `syz.3.436'. [ 153.646576][ T7816] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 153.699611][ T7710] bridge0: port 1(bridge_slave_0) entered blocking state [ 153.711350][ T7710] bridge0: port 1(bridge_slave_0) entered disabled state [ 153.720380][ T7710] bridge_slave_0: entered allmulticast mode [ 153.728064][ T7710] bridge_slave_0: entered promiscuous mode [ 153.797392][ T7857] netlink: 8 bytes leftover after parsing attributes in process `syz.3.436'. [ 153.920062][ T7816] team0: Port device netdevsim0 removed [ 153.950226][ T7816] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 154.028981][ T7710] bridge0: port 2(bridge_slave_1) entered blocking state [ 154.052157][ T7710] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.069842][ T7710] bridge_slave_1: entered allmulticast mode [ 154.082171][ T7710] bridge_slave_1: entered promiscuous mode [ 154.257073][ T7710] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 154.288681][ T7710] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 154.436061][ T7816] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.545391][ T7710] team0: Port device team_slave_0 added [ 154.579201][ T7816] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.620201][ T7710] team0: Port device team_slave_1 added [ 154.642264][ T7890] netlink: 12 bytes leftover after parsing attributes in process `syz.2.441'. [ 154.716416][ T7816] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.787391][ T7710] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 154.796861][ T7710] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.797489][ T7894] netlink: 'syz.3.442': attribute type 10 has an invalid length. [ 154.824327][ T7710] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 154.897167][ T7894] netlink: 40 bytes leftover after parsing attributes in process `syz.3.442'. [ 154.911300][ T7816] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 154.937960][ T7710] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 154.951243][ T7710] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 154.977614][ T7710] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 154.994470][ T7894] A link change request failed with some changes committed already. Interface virt_wifi0 may have been left with an inconsistent configuration, please check. [ 155.002541][ T5853] Bluetooth: hci2: command tx timeout [ 155.150607][ T62] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.222070][ T7898] xt_ecn: cannot match TCP bits for non-tcp packets [ 155.302906][ T7710] hsr_slave_0: entered promiscuous mode [ 155.319616][ T7710] hsr_slave_1: entered promiscuous mode [ 155.340035][ T7710] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 155.356868][ T7710] Cannot create hsr debugfs directory [ 155.357568][ T5856] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 155.375290][ T5856] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 155.397389][ T5856] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 155.410738][ T5856] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 155.419485][ T5856] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 155.428892][ T5856] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 155.433716][ T62] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.482339][ T7904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.444'. [ 155.588293][ T62] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.784242][ T62] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 155.866351][ T7928] netlink: 8 bytes leftover after parsing attributes in process `syz.3.446'. [ 156.229597][ T7940] bridge0: port 3(team0) entered disabled state [ 156.398030][ T7940] team0 (unregistering): left allmulticast mode [ 156.404926][ T7940] team_slave_0: left allmulticast mode [ 156.410620][ T7940] team_slave_1: left allmulticast mode [ 156.419361][ T7940] team0 (unregistering): left promiscuous mode [ 156.426101][ T7940] team_slave_0: left promiscuous mode [ 156.431894][ T7940] team_slave_1: left promiscuous mode [ 156.444115][ T7940] bridge0: port 3(team0) entered disabled state [ 156.469629][ T7940] team0 (unregistering): Port device team_slave_0 removed [ 156.490261][ T7940] team0 (unregistering): Port device team_slave_1 removed [ 156.824381][ T62] bridge_slave_1: left allmulticast mode [ 156.830387][ T62] bridge_slave_1: left promiscuous mode [ 156.849872][ T62] bridge0: port 2(bridge_slave_1) entered disabled state [ 156.869724][ T62] bridge_slave_0: left allmulticast mode [ 156.878245][ T62] bridge_slave_0: left promiscuous mode [ 156.885273][ T62] bridge0: port 1(bridge_slave_0) entered disabled state [ 157.092626][ T5853] Bluetooth: hci2: command tx timeout [ 157.473778][ T5853] Bluetooth: hci0: command tx timeout [ 157.768309][ T62] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 157.780452][ T62] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 157.791535][ T62] bond0 (unregistering): Released all slaves [ 157.960638][ T7946] netlink: 'syz.2.451': attribute type 1 has an invalid length. [ 158.095166][ T7977] xt_TCPMSS: Only works on TCP SYN packets [ 158.119993][ T7965] syzkaller0: entered promiscuous mode [ 158.126682][ T7965] syzkaller0: entered allmulticast mode [ 158.357194][ T7992] xt_ecn: cannot match TCP bits for non-tcp packets [ 159.556401][ T5853] Bluetooth: hci0: command tx timeout [ 159.670920][ T7902] chnl_net:caif_netlink_parms(): no params data found [ 159.895816][ T62] hsr_slave_0: left promiscuous mode [ 159.902297][ T62] hsr_slave_1: left promiscuous mode [ 159.938120][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 159.946003][ T62] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 159.967793][ T62] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 160.007294][ T62] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 160.039016][ T8009] netlink: 260 bytes leftover after parsing attributes in process `syz.0.466'. [ 160.049198][ T8008] netlink: 260 bytes leftover after parsing attributes in process `syz.0.466'. [ 160.071099][ T62] veth1_macvtap: left promiscuous mode [ 160.077412][ T62] veth0_macvtap: left promiscuous mode [ 160.115005][ T62] veth1_vlan: left promiscuous mode [ 160.120408][ T62] veth0_vlan: left promiscuous mode [ 160.303842][ T8015] netlink: 32 bytes leftover after parsing attributes in process `syz.3.467'. [ 160.389696][ T8019] openvswitch: netlink: IP tunnel dst address not specified [ 160.831068][ T62] team0 (unregistering): Port device team_slave_1 removed [ 160.852805][ T8030] netlink: 224 bytes leftover after parsing attributes in process `syz.2.470'. [ 160.866381][ T8030] netlink: 48 bytes leftover after parsing attributes in process `syz.2.470'. [ 160.876404][ T8030] netlink: 16 bytes leftover after parsing attributes in process `syz.2.470'. [ 160.900533][ T62] team0 (unregistering): Port device team_slave_0 removed [ 161.520343][ T7710] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 161.550443][ T7710] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 161.576236][ T7902] bridge0: port 1(bridge_slave_0) entered blocking state [ 161.583491][ T7902] bridge0: port 1(bridge_slave_0) entered disabled state [ 161.590946][ T7902] bridge_slave_0: entered allmulticast mode [ 161.598709][ T7902] bridge_slave_0: entered promiscuous mode [ 161.607536][ T8049] xt_CT: You must specify a L4 protocol and not use inversions on it [ 161.619900][ T7902] bridge0: port 2(bridge_slave_1) entered blocking state [ 161.625411][ T8050] netlink: 8 bytes leftover after parsing attributes in process `syz.3.471'. [ 161.643416][ T5853] Bluetooth: hci0: command tx timeout [ 161.649190][ T7902] bridge0: port 2(bridge_slave_1) entered disabled state [ 161.665080][ T7902] bridge_slave_1: entered allmulticast mode [ 161.674525][ T7902] bridge_slave_1: entered promiscuous mode [ 161.690392][ T7710] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 161.702312][ T8046] netlink: 28 bytes leftover after parsing attributes in process `syz.3.471'. [ 161.704332][ T7710] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 161.777086][ T8046] netlink: 16 bytes leftover after parsing attributes in process `syz.3.471'. [ 161.820197][ T7902] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 161.852706][ T8055] netlink: 'syz.2.474': attribute type 1 has an invalid length. [ 161.878954][ T7902] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 162.096700][ T7902] team0: Port device team_slave_0 added [ 162.272296][ T7902] team0: Port device team_slave_1 added [ 162.541100][ C1] IPv4: Oversized IP packet from 172.20.20.24 [ 162.542567][ T8077] bridge0: port 1(bridge_slave_0) entered disabled state [ 162.550079][ T8085] netlink: 68 bytes leftover after parsing attributes in process `syz.3.480'. [ 162.562230][ T8077] bridge0: port 2(bridge_slave_1) entered disabled state [ 162.648224][ T7902] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 162.664286][ T7902] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.711389][ T7902] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 162.727572][ T7902] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 162.734849][ T7902] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 162.761338][ T7902] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 162.930839][ T7902] hsr_slave_0: entered promiscuous mode [ 162.938776][ T7902] hsr_slave_1: entered promiscuous mode [ 162.946436][ T7902] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 162.954615][ T7902] Cannot create hsr debugfs directory [ 163.026181][ T7710] 8021q: adding VLAN 0 to HW filter on device bond0 [ 163.221243][ T8102] ipvlan1: entered allmulticast mode [ 163.255671][ T8102] veth0_vlan: entered allmulticast mode [ 163.291063][ T7710] 8021q: adding VLAN 0 to HW filter on device team0 [ 163.369007][ T7710] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 163.379534][ T7710] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 163.416429][ T570] bridge0: port 1(bridge_slave_0) entered blocking state [ 163.423669][ T570] bridge0: port 1(bridge_slave_0) entered forwarding state [ 163.433295][ T570] bridge0: port 2(bridge_slave_1) entered blocking state [ 163.440440][ T570] bridge0: port 2(bridge_slave_1) entered forwarding state [ 163.713088][ T5853] Bluetooth: hci0: command tx timeout [ 164.063092][ T7710] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 164.230056][ T8142] netlink: 'syz.3.492': attribute type 1 has an invalid length. [ 164.279778][ T7710] veth0_vlan: entered promiscuous mode [ 164.553771][ T7710] veth1_vlan: entered promiscuous mode [ 164.798642][ T7710] veth0_macvtap: entered promiscuous mode [ 164.866093][ T7710] veth1_macvtap: entered promiscuous mode [ 164.927666][ T7710] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 164.968846][ T7710] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 164.986794][ T7902] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 165.029134][ T7710] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.039227][ T7710] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.055001][ T7710] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.074576][ T7710] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 165.101984][ T7902] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 165.132378][ T7902] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 165.252779][ T8179] __nla_validate_parse: 10 callbacks suppressed [ 165.252800][ T8179] netlink: 24 bytes leftover after parsing attributes in process `syz.2.500'. [ 165.287966][ T7902] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 165.349061][ T8177] netlink: 4 bytes leftover after parsing attributes in process `syz.2.500'. [ 165.370019][ T8179] nbd: must specify at least one socket [ 165.723671][ T7902] 8021q: adding VLAN 0 to HW filter on device bond0 [ 165.760815][ T7902] 8021q: adding VLAN 0 to HW filter on device team0 [ 165.804110][ T1143] bridge0: port 1(bridge_slave_0) entered blocking state [ 165.811332][ T1143] bridge0: port 1(bridge_slave_0) entered forwarding state [ 165.830897][ T1143] bridge0: port 2(bridge_slave_1) entered blocking state [ 165.838139][ T1143] bridge0: port 2(bridge_slave_1) entered forwarding state [ 165.974551][ T7902] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 166.087639][ T52] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.388965][ T52] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.487768][ T52] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.567424][ T7902] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 166.824220][ T52] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 166.943003][ T8251] syz.0.507 (8251) used obsolete PPPIOCDETACH ioctl [ 166.951569][ T8251] netlink: 'syz.0.507': attribute type 1 has an invalid length. [ 166.959486][ T8251] netlink: 224 bytes leftover after parsing attributes in process `syz.0.507'. [ 166.976807][ T8251] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 167.106818][ T8255] netlink: 52 bytes leftover after parsing attributes in process `syz.3.509'. [ 167.122730][ T8255] netlink: 24 bytes leftover after parsing attributes in process `syz.3.509'. [ 167.238255][ T7902] veth0_vlan: entered promiscuous mode [ 167.357451][ T52] bridge_slave_1: left allmulticast mode [ 167.375331][ T52] bridge_slave_1: left promiscuous mode [ 167.394716][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 167.430342][ T52] bridge_slave_0: left allmulticast mode [ 167.447170][ T52] bridge_slave_0: left promiscuous mode [ 167.462220][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 167.640750][ T5856] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 167.652441][ T5856] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 167.664410][ T5856] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 167.679349][ T5856] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 167.689824][ T5856] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 167.698699][ T5856] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 168.223983][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 168.236419][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 168.248249][ T52] bond0 (unregistering): Released all slaves [ 168.381760][ T7902] veth1_vlan: entered promiscuous mode [ 168.570811][ T8303] mac80211_hwsim hwsim2 wlan0: (WE) : Wireless Event (cmd=0x8B1A) too big (33) [ 168.675013][ T8303] Cannot find add_set index 0 as target [ 168.733680][ T52] hsr_slave_0: left promiscuous mode [ 168.749998][ T52] hsr_slave_1: left promiscuous mode [ 168.768779][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 168.777361][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 168.804174][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 168.811680][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 168.885336][ T52] veth1_macvtap: left promiscuous mode [ 168.890942][ T52] veth0_macvtap: left promiscuous mode [ 168.919866][ T52] veth1_vlan: left promiscuous mode [ 168.935472][ T52] veth0_vlan: left promiscuous mode [ 168.979323][ T8329] FAULT_INJECTION: forcing a failure. [ 168.979323][ T8329] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 169.025661][ T8329] CPU: 1 UID: 0 PID: 8329 Comm: syz.2.521 Not tainted 6.13.0-rc5-syzkaller-00769-g356939999438 #0 [ 169.036344][ T8329] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 169.046446][ T8329] Call Trace: [ 169.049767][ T8329] [ 169.052738][ T8329] dump_stack_lvl+0x241/0x360 [ 169.057481][ T8329] ? __pfx_dump_stack_lvl+0x10/0x10 [ 169.062737][ T8329] ? __pfx__printk+0x10/0x10 [ 169.067386][ T8329] ? __pfx_lock_release+0x10/0x10 [ 169.072468][ T8329] should_fail_ex+0x3b0/0x4e0 [ 169.077206][ T8329] _copy_from_iter+0x1e9/0x1c20 [ 169.082104][ T8329] ? __virt_addr_valid+0x183/0x530 [ 169.087275][ T8329] ? __alloc_skb+0x28f/0x440 [ 169.091909][ T8329] ? __pfx__copy_from_iter+0x10/0x10 [ 169.097265][ T8329] ? __virt_addr_valid+0x183/0x530 [ 169.102427][ T8329] ? __virt_addr_valid+0x183/0x530 [ 169.107590][ T8329] ? __virt_addr_valid+0x45f/0x530 [ 169.112760][ T8329] ? __phys_addr_symbol+0x2f/0x70 [ 169.117843][ T8329] ? __check_object_size+0x47a/0x730 [ 169.123200][ T8329] netlink_sendmsg+0x73d/0xcb0 [ 169.128037][ T8329] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.133379][ T8329] ? __pfx_aa_file_perm+0x10/0x10 [ 169.138451][ T8329] ? aa_sock_msg_perm+0x91/0x160 [ 169.143432][ T8329] ? __pfx_netlink_sendmsg+0x10/0x10 [ 169.148773][ T8329] __sock_sendmsg+0x221/0x270 [ 169.153607][ T8329] sock_write_iter+0x2d7/0x3f0 [ 169.158432][ T8329] ? __pfx_sock_write_iter+0x10/0x10 [ 169.163777][ T8329] ? bpf_lsm_file_permission+0x9/0x10 [ 169.169206][ T8329] ? security_file_permission+0x74/0x280 [ 169.174988][ T8329] vfs_write+0xaeb/0xd30 [ 169.179291][ T8329] ? __pfx_sock_write_iter+0x10/0x10 [ 169.184638][ T8329] ? __pfx_vfs_write+0x10/0x10 [ 169.189454][ T8329] ? __fget_files+0x2a/0x410 [ 169.194095][ T8329] ? __fget_files+0x2a/0x410 [ 169.198738][ T8329] ksys_write+0x18f/0x2b0 [ 169.203110][ T8329] ? __pfx_ksys_write+0x10/0x10 [ 169.208014][ T8329] ? do_syscall_64+0x100/0x230 [ 169.212810][ T8329] ? do_syscall_64+0xb6/0x230 [ 169.217510][ T8329] do_syscall_64+0xf3/0x230 [ 169.222038][ T8329] ? clear_bhb_loop+0x35/0x90 [ 169.226742][ T8329] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 169.232665][ T8329] RIP: 0033:0x7fc8f0185d29 [ 169.237108][ T8329] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 169.256742][ T8329] RSP: 002b:00007fc8f1028038 EFLAGS: 00000246 ORIG_RAX: 0000000000000001 [ 169.265184][ T8329] RAX: ffffffffffffffda RBX: 00007fc8f0375fa0 RCX: 00007fc8f0185d29 [ 169.273168][ T8329] RDX: 0000000000000024 RSI: 00000000200000c0 RDI: 0000000000000004 [ 169.281151][ T8329] RBP: 00007fc8f1028090 R08: 0000000000000000 R09: 0000000000000000 [ 169.289133][ T8329] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 169.297117][ T8329] R13: 0000000000000000 R14: 00007fc8f0375fa0 R15: 00007ffc8de7af68 [ 169.305113][ T8329] [ 169.659620][ T8347] netlink: 'syz.2.526': attribute type 30 has an invalid length. [ 169.733084][ T8348] Bluetooth: MGMT ver 1.23 [ 169.800853][ T52] team0 (unregistering): Port device team_slave_1 removed [ 169.802765][ T5856] Bluetooth: hci2: command tx timeout [ 169.849728][ T52] team0 (unregistering): Port device team_slave_0 removed [ 170.357537][ T7902] veth0_macvtap: entered promiscuous mode [ 170.435796][ T8273] chnl_net:caif_netlink_parms(): no params data found [ 170.479228][ T7902] veth1_macvtap: entered promiscuous mode [ 170.629007][ T7902] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 170.710991][ T7902] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 170.814385][ T7902] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.833815][ T7902] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.853313][ T7902] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.872065][ T7902] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 170.983381][ T8273] bridge0: port 1(bridge_slave_0) entered blocking state [ 170.998641][ T8273] bridge0: port 1(bridge_slave_0) entered disabled state [ 171.036187][ T8273] bridge_slave_0: entered allmulticast mode [ 171.052365][ T8273] bridge_slave_0: entered promiscuous mode [ 171.080375][ T8273] bridge0: port 2(bridge_slave_1) entered blocking state [ 171.113741][ T8273] bridge0: port 2(bridge_slave_1) entered disabled state [ 171.121297][ T8273] bridge_slave_1: entered allmulticast mode [ 171.163216][ T8273] bridge_slave_1: entered promiscuous mode [ 171.182817][ T8386] netlink: 60 bytes leftover after parsing attributes in process `syz.3.533'. [ 171.193695][ T8386] A link change request failed with some changes committed already. Interface wlan1 may have been left with an inconsistent configuration, please check. [ 171.277616][ T8273] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 171.320302][ T1143] wlan0: Trigger new scan to find an IBSS to join [ 171.332701][ T1143] ------------[ cut here ]------------ [ 171.338278][ T1143] WARNING: CPU: 0 PID: 1143 at net/mac80211/scan.c:1213 ieee80211_request_ibss_scan+0x6e4/0x770 [ 171.349275][ T1143] Modules linked in: [ 171.353615][ T1143] CPU: 0 UID: 0 PID: 1143 Comm: kworker/u8:6 Not tainted 6.13.0-rc5-syzkaller-00769-g356939999438 #0 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 171.364851][ T1143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 171.375442][ T1143] Workqueue: events_unbound cfg80211_wiphy_work [ 171.382030][ T1143] RIP: 0010:ieee80211_request_ibss_scan+0x6e4/0x770 [ 171.388879][ T1143] Code: e8 41 06 67 f6 eb 05 e8 3a 06 67 f6 b8 ea ff ff ff e9 41 fa ff ff e8 2b 06 67 f6 90 0f 0b 90 e9 01 fa ff ff e8 1d 06 67 f6 90 <0f> 0b 90 eb dd 48 c7 c1 50 6e 1a 90 80 e1 07 80 c1 03 38 c1 0f 8c [ 171.409172][ T1143] RSP: 0018:ffffc9000405f920 EFLAGS: 00010293 [ 171.415601][ T1143] RAX: ffffffff8b386dc3 RBX: 0000000000000000 RCX: ffff888027140000 [ 171.423720][ T1143] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 171.431751][ T1143] RBP: ffffc9000405fb60 R08: ffffffff8b386c1f R09: 1ffff9200080bed4 [ 171.439836][ T1143] R10: dffffc0000000000 R11: fffff5200080bed5 R12: 0000000000000006 [ 171.447948][ T1143] R13: 0000000000000c80 R14: dffffc0000000000 R15: ffff8880279b8e80 [ 171.456209][ T1143] FS: 0000000000000000(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 171.465279][ T1143] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 171.471919][ T1143] CR2: 0000000020001700 CR3: 000000006d4d0000 CR4: 00000000003526f0 [ 171.480121][ T1143] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 171.488264][ T1143] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 171.496327][ T1143] Call Trace: [ 171.499634][ T1143] [ 171.502785][ T1143] ? __warn+0x165/0x4d0 [ 171.506993][ T1143] ? ieee80211_request_ibss_scan+0x6e4/0x770 [ 171.513331][ T1143] ? report_bug+0x2b3/0x500 [ 171.517885][ T1143] ? ieee80211_request_ibss_scan+0x6e4/0x770 [ 171.524106][ T1143] ? handle_bug+0x60/0x90 [ 171.528488][ T1143] ? exc_invalid_op+0x1a/0x50 [ 171.533324][ T1143] ? asm_exc_invalid_op+0x1a/0x20 [ 171.538404][ T1143] ? ieee80211_request_ibss_scan+0x53f/0x770 [ 171.544551][ T1143] ? ieee80211_request_ibss_scan+0x6e3/0x770 [ 171.550590][ T1143] ? ieee80211_request_ibss_scan+0x6e4/0x770 [ 171.556831][ T1143] ieee80211_ibss_work+0xe1b/0x14c0 [ 171.562110][ T1143] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 171.567940][ T1143] ? ieee80211_iface_work+0xe6b/0xf20 [ 171.573471][ T1143] ? rcu_is_watching+0x15/0xb0 [ 171.578300][ T1143] cfg80211_wiphy_work+0x2f0/0x490 [ 171.583544][ T1143] ? process_scheduled_works+0x976/0x1840 [ 171.589316][ T1143] process_scheduled_works+0xa66/0x1840 [ 171.595071][ T1143] ? __pfx_process_scheduled_works+0x10/0x10 [ 171.601130][ T1143] ? assign_work+0x364/0x3d0 [ 171.605892][ T1143] worker_thread+0x870/0xd30 [ 171.610567][ T1143] ? __kthread_parkme+0x169/0x1d0 [ 171.615962][ T1143] ? __pfx_worker_thread+0x10/0x10 [ 171.621152][ T1143] kthread+0x2f0/0x390 [ 171.625489][ T1143] ? __pfx_worker_thread+0x10/0x10 [ 171.630671][ T1143] ? __pfx_kthread+0x10/0x10 [ 171.635497][ T1143] ret_from_fork+0x4b/0x80 [ 171.639976][ T1143] ? __pfx_kthread+0x10/0x10 [ 171.644876][ T1143] ret_from_fork_asm+0x1a/0x30 [ 171.649724][ T1143] [ 171.652863][ T1143] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 171.660194][ T1143] CPU: 0 UID: 0 PID: 1143 Comm: kworker/u8:6 Not tainted 6.13.0-rc5-syzkaller-00769-g356939999438 #0 [ 171.671069][ T1143] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 171.681314][ T1143] Workqueue: events_unbound cfg80211_wiphy_work [ 171.687596][ T1143] Call Trace: [ 171.690884][ T1143] [ 171.693828][ T1143] dump_stack_lvl+0x241/0x360 [ 171.698535][ T1143] ? __pfx_dump_stack_lvl+0x10/0x10 [ 171.703755][ T1143] ? __pfx__printk+0x10/0x10 [ 171.708364][ T1143] ? _printk+0xd5/0x120 [ 171.712543][ T1143] ? __init_begin+0x41000/0x41000 [ 171.717598][ T1143] ? vscnprintf+0x5d/0x90 [ 171.721977][ T1143] panic+0x349/0x880 [ 171.725909][ T1143] ? __warn+0x174/0x4d0 [ 171.730107][ T1143] ? __pfx_panic+0x10/0x10 [ 171.734582][ T1143] ? ret_from_fork_asm+0x1a/0x30 [ 171.739652][ T1143] __warn+0x344/0x4d0 [ 171.743668][ T1143] ? ieee80211_request_ibss_scan+0x6e4/0x770 [ 171.749711][ T1143] report_bug+0x2b3/0x500 [ 171.754070][ T1143] ? ieee80211_request_ibss_scan+0x6e4/0x770 [ 171.760091][ T1143] handle_bug+0x60/0x90 [ 171.764279][ T1143] exc_invalid_op+0x1a/0x50 [ 171.768838][ T1143] asm_exc_invalid_op+0x1a/0x20 [ 171.773721][ T1143] RIP: 0010:ieee80211_request_ibss_scan+0x6e4/0x770 [ 171.780345][ T1143] Code: e8 41 06 67 f6 eb 05 e8 3a 06 67 f6 b8 ea ff ff ff e9 41 fa ff ff e8 2b 06 67 f6 90 0f 0b 90 e9 01 fa ff ff e8 1d 06 67 f6 90 <0f> 0b 90 eb dd 48 c7 c1 50 6e 1a 90 80 e1 07 80 c1 03 38 c1 0f 8c [ 171.799972][ T1143] RSP: 0018:ffffc9000405f920 EFLAGS: 00010293 [ 171.806059][ T1143] RAX: ffffffff8b386dc3 RBX: 0000000000000000 RCX: ffff888027140000 [ 171.814061][ T1143] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000000 [ 171.822065][ T1143] RBP: ffffc9000405fb60 R08: ffffffff8b386c1f R09: 1ffff9200080bed4 [ 171.830059][ T1143] R10: dffffc0000000000 R11: fffff5200080bed5 R12: 0000000000000006 [ 171.838068][ T1143] R13: 0000000000000c80 R14: dffffc0000000000 R15: ffff8880279b8e80 [ 171.846166][ T1143] ? ieee80211_request_ibss_scan+0x53f/0x770 [ 171.852190][ T1143] ? ieee80211_request_ibss_scan+0x6e3/0x770 [ 171.858243][ T1143] ieee80211_ibss_work+0xe1b/0x14c0 [ 171.863584][ T1143] ? __pfx_ieee80211_ibss_work+0x10/0x10 [ 171.869259][ T1143] ? ieee80211_iface_work+0xe6b/0xf20 [ 171.874847][ T1143] ? rcu_is_watching+0x15/0xb0 [ 171.879742][ T1143] cfg80211_wiphy_work+0x2f0/0x490 [ 171.884917][ T1143] ? process_scheduled_works+0x976/0x1840 [ 171.890661][ T1143] process_scheduled_works+0xa66/0x1840 [ 171.896245][ T1143] ? __pfx_process_scheduled_works+0x10/0x10 [ 171.902266][ T1143] ? assign_work+0x364/0x3d0 [ 171.906876][ T1143] worker_thread+0x870/0xd30 [ 171.911493][ T1143] ? __kthread_parkme+0x169/0x1d0 [ 171.916569][ T1143] ? __pfx_worker_thread+0x10/0x10 [ 171.921697][ T1143] kthread+0x2f0/0x390 [ 171.925784][ T1143] ? __pfx_worker_thread+0x10/0x10 [ 171.930911][ T1143] ? __pfx_kthread+0x10/0x10 [ 171.935519][ T1143] ret_from_fork+0x4b/0x80 [ 171.939950][ T1143] ? __pfx_kthread+0x10/0x10 [ 171.944563][ T1143] ret_from_fork_asm+0x1a/0x30 [ 171.949352][ T1143] [ 171.952693][ T1143] Kernel Offset: disabled [ 171.957105][ T1143] Rebooting in 86400 seconds..