last executing test programs: 39.440402682s ago: executing program 4 (id=25): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_LLSEC_ADD_DEV(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000440)=ANY=[@ANYBLOB="14000000", @ANYRES16=r1, @ANYBLOB="4de026bd7000000000002a"], 0x14}, 0x4, 0x700000000000000}, 0x0) 39.332683477s ago: executing program 4 (id=28): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000001000/0x2000)=nil, 0x2000, 0x1, 0x12, r1, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r2, r3, 0x2, 0x2, 0x0, @void, @value}, 0x10) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000280)={@cgroup=r4, 0x2, 0x0, 0x3ff, &(0x7f0000001440)=[0x0], 0x1, 0x0, 0x0, 0x0, 0x0}, 0x40) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000640)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01040000000000000000010000000900010073797a300000000034000000030a010100000000000000000100000009000b0073797a31000000000900010073797a300000000008000a400000000414000000020a05"], 0x90}}, 0x0) 39.079305088s ago: executing program 4 (id=32): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[], &(0x7f0000000740)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xdd) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r2, &(0x7f0000000200), 0x806000) read$alg(r2, 0x0, 0x0) r3 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r3) r4 = syz_init_net_socket$rose(0xb, 0x5, 0x0) ioctl$sock_proto_private(r4, 0x89ed, &(0x7f0000000200)="57be99282310b20aa4c8f73a") r5 = bpf$MAP_CREATE(0x0, &(0x7f00000002c0)=@base={0x4, 0x4, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x51f31aa, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r5, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={r6, 0xfca804a0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) 38.712985326s ago: executing program 4 (id=34): sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x700) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000005, 0x41071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000bd1000/0x3000)=nil, 0x3000, 0x5000000, 0x20000000ec071, 0xffffffffffffffff, 0x4000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xfffffff9}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x20, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc8, &(0x7f0000000480)=""/200, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x228, 0x12, 0x60d, 0x0, 0x202, 0x338, 0x2e8, 0x2e8, 0x338, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @remote, [], [], 'veth0_to_team\x00', 'macsec0\x00', {}, {}, 0x89}, 0x0, 0x100, 0x228, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x3, 0x4, 0x8, 0x1}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7, 'system_u:object_r:devicekit_var_run_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xd, 0x2, 0x6, 0x6, 'syz0\x00', 'syz1\x00', {0x1400000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 30.912163975s ago: executing program 2 (id=100): r0 = socket(0x2a, 0x2, 0xffffffff) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@getchain={0x24, 0x66, 0x200, 0xb8000000, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7, 0xffe0}, {0xffff, 0x3}, {0xc, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004000) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0xd}}}, 0x24}}, 0x40808c4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 30.591387154s ago: executing program 2 (id=102): ioctl$SIOCX25SCUDMATCHLEN(0xffffffffffffffff, 0x89e7, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) bpf$BPF_PROG_DETACH(0x9, 0x0, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2, 0x0, @void, @value}, 0x10) r3 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r3, r4, 0x2, 0x2, 0x0, @void, @value}, 0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000100)={'netdevsim0\x00', 0x0}) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000140)=ANY=[@ANYBLOB="0100000007000000612200000200000000000000d9", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=r6, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000005c0)={r7, 0x0, 0x0}, 0x10) 30.324364911s ago: executing program 2 (id=103): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01020000000000000000010000000900010073797a300000000040000000160a01000000000000000000010000000900010073797a30000000000900020073797a3000000000140003800800014000000000080002400000000040000000180a01d71c0b000000000000010000000900020073797a30000000000900010073797a300000000014000380080002"], 0xc8}}, 0x0) r1 = socket(0xa, 0x40000000002, 0x0) connect$bt_sco(r1, &(0x7f0000000080)={0x1f, @none}, 0x8) 29.684598539s ago: executing program 2 (id=108): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@delneigh={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="200000002c0001000000000000000000040000800c00188004ac0f"], 0x20}], 0x1}, 0x0) 24.350235081s ago: executing program 4 (id=34): sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x700) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000005, 0x41071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000bd1000/0x3000)=nil, 0x3000, 0x5000000, 0x20000000ec071, 0xffffffffffffffff, 0x4000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xfffffff9}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x20, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc8, &(0x7f0000000480)=""/200, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x228, 0x12, 0x60d, 0x0, 0x202, 0x338, 0x2e8, 0x2e8, 0x338, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @remote, [], [], 'veth0_to_team\x00', 'macsec0\x00', {}, {}, 0x89}, 0x0, 0x100, 0x228, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x3, 0x4, 0x8, 0x1}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7, 'system_u:object_r:devicekit_var_run_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xd, 0x2, 0x6, 0x6, 'syz0\x00', 'syz1\x00', {0x1400000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 18.054335065s ago: executing program 2 (id=108): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@delneigh={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="200000002c0001000000000000000000040000800c00188004ac0f"], 0x20}], 0x1}, 0x0) 11.769945717s ago: executing program 4 (id=34): sendmsg$TIPC_CMD_SHOW_PORTS(0xffffffffffffffff, 0x0, 0x0) sendmmsg(0xffffffffffffffff, 0x0, 0x0, 0x700) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x1000005, 0x41071, 0xffffffffffffffff, 0x0) mmap(&(0x7f0000bd1000/0x3000)=nil, 0x3000, 0x5000000, 0x20000000ec071, 0xffffffffffffffff, 0x4000) r0 = socket$inet_tcp(0x2, 0x1, 0x0) getsockopt$inet_tcp_buf(r0, 0x6, 0x21, 0x0, &(0x7f0000000040)) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000080)={'xfrm0\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000400)=@newlink={0x30, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_NUM_RX_QUEUES={0x8, 0x20, 0xfffffff9}, @IFLA_LINK={0x8, 0x5, r4}]}, 0x30}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x20, 0x4, &(0x7f0000000480)=ANY=[], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc8, &(0x7f0000000480)=""/200, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x10, r1, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r5, 0x29, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x3c1, 0x3, 0x408, 0x228, 0x12, 0x60d, 0x0, 0x202, 0x338, 0x2e8, 0x2e8, 0x338, 0x2c0, 0x4, 0x0, {[{{@ipv6={@local, @remote, [], [], 'veth0_to_team\x00', 'macsec0\x00', {}, {}, 0x89}, 0x0, 0x100, 0x228, 0x0, {}, [@common=@unspec=@cluster={{0x30}, {0x3, 0x4, 0x8, 0x1}}, @inet=@rpfilter={{0x28}}]}, @common=@unspec=@SECMARK={0x128, 'SECMARK\x00', 0x0, {0x1, 0x7, 'system_u:object_r:devicekit_var_run_t:s0\x00'}}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0xd, 0x2, 0x6, 0x6, 'syz0\x00', 'syz1\x00', {0x1400000}}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x468) 6.836986258s ago: executing program 2 (id=108): r0 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000400)=@delneigh={0x1c, 0x1d, 0x1, 0x0, 0x0, {0x7, 0x0, 0x0, 0x0, 0x0, 0x2}}, 0x1c}}, 0x0) sendmsg$netlink(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="200000002c0001000000000000000000040000800c00188004ac0f"], 0x20}], 0x1}, 0x0) 5.95246739s ago: executing program 0 (id=237): sendmsg$key(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000004c0)=ANY=[@ANYBLOB="021380ee02"], 0x10}}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000200)={0xffffffffa0018000, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="020300090c00000000420b00000000000200130002000000000000000000001f0300060000000051020049e4f0000001c99a00000000000002000100002000100000000200000000030005"], 0x60}}, 0x0) r0 = socket$key(0xf, 0x3, 0x2) sendmmsg(r0, &(0x7f0000000180), 0x32bc45944b084a6, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) setsockopt$EBT_SO_SET_ENTRIES(0xffffffffffffffff, 0x0, 0x80, &(0x7f0000001080)=@nat={'nat\x00', 0x19, 0x1, 0x1b8, [0x20000080, 0x0, 0x0, 0x200000b0, 0x20000208], 0x6c, 0x0, &(0x7f0000000080)=ANY=[@ANYBLOB="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"]}, 0x1b2) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000140)=ANY=[@ANYBLOB="8c00000010001fff00"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000400012800b000100697036677265000030000280140007002001000000000000000000000000000014000600fc020000000000000000000000000000040012000800280070cf00000c0019800500060014000000080004"], 0x8c}}, 0x0) r2 = socket$inet6_dccp(0xa, 0x6, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r3, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)={0x14, 0x43, 0x107, 0x0, 0x0, {0x4, 0x7c}}, 0x14}}, 0x8844) ioctl$sock_SIOCETHTOOL(r2, 0x8946, &(0x7f0000000b80)={'veth0_to_team\x00', &(0x7f0000000680)=@ethtool_link_settings={0x4d, 0x3, 0x10, 0xa6, 0xe, 0x0, 0x5, 0x1, 0x4, 0x7, [0x1, 0x9ed, 0x0, 0x0, 0x4, 0x8, 0x0, 0x7], [0x2, 0x2, 0x6]}}) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000001000)=0x0, &(0x7f0000001040)=0x4) sendmmsg$inet(r2, &(0x7f0000003380)=[{{&(0x7f0000000d80)={0x2, 0x4e21, @loopback}, 0x10, &(0x7f0000000fc0)=[{&(0x7f0000000dc0)="b39b89f56c1b198c8d6bc822ef1894488591053a1d3a9fa09655d472677435e57fd52cf69316e1160c5773691ce800b3f58acf8458aad86b0d8503f13854e3d9e6fff69b5d5f813382900498387f0cf4d72fa2fc1a8022487f04a2b7a5e6483df53119065bf27be01ce6160152f1f98986cccae0a06cf13ecb11b60ed6d7fe26829a66731f33f05893f27822d9", 0x8d}, {&(0x7f0000000e80)="a1bdde3ac803bb48eabd40da9552f4db3f55029c2992c7d3fee2412e6568d3cdab55f83b7f504986fce2fe20864f7a65db7a25139e008bfac120567cf30029c8800118faa7b04bb8b070987faa64d0fa1557211d6bf99226be0e9f369a0866bb4f6017a766389d9035a526a6bbd5f3df3326e3d0b6f2c76934e0a03cbf32d03c0a03bdc7cba0eeb0af439ae12059131301", 0x91}, {&(0x7f0000002100)="ce5281e8b1979a75fa9159159f06c70205061b461371d4ddff532b39131d33bb9f51c5162283f4eae365c860523008e5cb4db3b02bc2092559946b216f63eeaf7ab5ec717ddcf8aa9ae959c68dce2c47adafb34ee123031977d751fc87b28a8fbb6e81371b7006011c247eb881cb9fc14c97cfba2db2d82c36e05b922a470a129268a81cf45d8cee6c506ea8ac50141cbec584cb1ac5dde39d4aabf6357063f9565a04b59262ac24ba1c2d2e8a05b750a6d7a1bafe5d585f3329e5dbdd7e9e608b0b6375063319dada732a9e4ea1b29ad49f25ded476ee2b52bbf2bd3053095006dcd2efe986a247ad7f6cfd16f1b65cc15485c3cb36aa73d5e37b9e228d8c723f5da1d2b9f6be94a1b9dea505c70f0997b263f98674f79533181c8a2f4aa7e85573c93a8d7b1585d49fcb1522c9ce6b350ba80a11f889e12b63f37bfbdc257400e4d9411bf4e5f93eedddf0b3759e0bea1a5683c7524f5f1fd0ced99bb9c4bf5e8fc6c0a6558d2002788b46865637e23993d98fbd1f613e5600fd64b87767fc20cdcb524b324a11ac42d533c1cd432592b5b12821961531d4b48d63dac657700f3aa5a0b231c72fd496d431c2005104654898d0c7487083fbb843afc9f178d783973035ac7680311a23bb8798bcb9666447544e33460dae2cce4f6af4513ddb2c9c7224c115a4549326889e13298e89a05062cfd1e8a7299628e448773b05555c4d4f46e322b29d73feacfb9f3a8733228a155143527568f972b3f3fc26e57a0229d8210725aa929d9ad46bea47f20e20f303fedfb421d05bc77efe3b0599845efd74dceab1344814fb9ffe7eb9a3f115ef958884b6d606525201de6992236d5e6c02071b61c849f178e56edf63bcc9c579d5d9317b338d732db29e64ba12d634ffa9fb12b20945a31e605095c05d3349d47df7145458a3a617644497af7dbeda7f262f041941af1a2e7a1b31060d051fc28986c4b64a3f0726925be44c8f0d72e780b440cd4a8da87a71c57b68b2c56f53515ee785a3b61276b5e6cea3ce4ccf0c6448abbf3579fe9b77fcba096dfca0b0678ce99ef8429e3e1cbe0f7723e5e4a505f4317e0c6145c3566f4e2f8bab2dfe074da43b81e5c759d9897a3d9b133f85001c845c2d4fdc23100295aec0b91a2808ac97f650fd4d905805bff498f9eaf3e3ed8582fbcf4fc8c494eff2625bd8e3c040129524092b8f99c28b0b2be24fb6c14f7f424b77bf30f707a6799bba1fc165897b13f6fc610d0214b8864b123d8fb363544701072c3f42d468322547e2dd0abbf39c9335a9969a5b2cbb355e17231599ebf94d9691840817b935bb67d83002ed815379607fe90716d5f6c66c94e6832fdc51d64cb7926d19b11b2fc9a04c763dd3a20ba08da5df293de365d3933aa59d90329750f9e7aa76b312c86101813485dec0f1092e8cff51c2127a7c3746511abdb1cecdd87270dfbe607b882e7d75cd3da202071989731f60c7070f435d33b4c4246c9c0983e0724633a4ff5a93d33462920b591e2c8d0553d28aed558c4cc9c13c4ae423d62e6b2e4e7e38494dc2b5d52cac92f734103cd0f447bfa82729a462c5329808d88b39fd133f4d6d650804a1f4ab44e97324f42d8bf49de4f7e36dae26a593963579ed5cab956c06408e931776175cceab3d7eda02b6834556b9f46c28e4a73148941914d0ad4a4dacac994fc1009fe9936372a9dca219d4da381e4e499c6bd96558e67991bf8be56abfb5ab0fde4a7a6a31d1d3c4f264c84a4889efdde7afbfeef674ea9a16afa71132baf1e8d63e675d2b412531d0a3e027b0399f1f700c38a9a73158d017993fc0cd15d008f0d5f36bce552c4e6dee70ae31b69b8830aa818b4eef88128c766394bb1b3a67da7e13be6aaf15147f730cbedb7ff3970c0af59528480ec1ce2b9ebd193668b97ee9233f953de3513362de4f42f333e18df1564ea45e6c5ba074bdaf75cddfe4abfaf2e262057699267ed26e818d61cf448867fa75b9a3ee450ec6eca37b63ff23f323ee3b38e1f4a4805fe92e13161345672593402d703d5d8e660597cc8991311037cb0b20243fb2fc010ffb2bdc9b39bfd0e19a09eb4497c2db3963b4314546fe78dc7a116dc4a4fc1b99cd14fcac160b89bd3e9a03f90bd441d3053c25821290455a49232f1ff82dd2bcaa1db43f7f68c27075e577e199a8d4e315318d1880f0f63fbf7c271e3cac7fc2f0a966a655a86860847f715b180e3be6eb0458a728be5060b48bd2eee51fb108324c4dd1b7d365bd341ec1de7581f44144ba40e5a13a97f4e7eb5a883e0571f0d7d6e73687575b941e549e5eda61df541c809635e9a77ac96e0425736be3d2f16439f14c81b47ed354a8391a998112a6a2e41f6d2862b4f500c98c2ddc9a9b12b664b7aee446c9525a69865f2dedcd219e033fc2a53d9c36cf1022b7fc06b690a9fa91bc2a3ae8c2040933648d206209139d2088df2333f5d5c895e0e27cb9bea712dad7d8dc34f2c9d6bc0330aa3da92de48a1409e5b7c73b199cb97c512bfbc771640a2a43d9da735ef3dc6a45da7f56fadfb4df68fb25e21fc21afb6d830d01647b298359554e26380ee7aa22163f779bb845f0d0129a31584464c0e158846fdae14056e8ac46d59e25e99d8d30e3c3233523101f3191ff5a4f918256a9a47ae3dab0f1dae43e253fbb72227dc63e05a8dfd70c7ac22aea4aa20c4d4a10100ab708c7e06b32c8b9f717b2e9ce788e0c9ea0cccb9472e8826abcb88ea53fee26967b2c781ef8dc3d0e8b5b597a58b4491f1e369708865e903dbbbac20b3d1015d1e5cdb4fc8b40953b6cc32cbab52b5d89df3db71c1c4bc77ba259e3608ee397756c6411471da8ae79b7daefa8695d3a0b12fecafccb6f2aabca618390936bbc43f8d07c2e78f7f4ac56f948e356c3c75103961a610fe5fa989ea6d96b54d6aa33951974b04a962fce645adcd6a7e7c133a9c128fc35cf5f94fcb2e4c5bbe3537448cf507a8d513435514f3801b45ec0955df4d19c42f66a05be1d167049db007763b48bd28fa676773be83a5639bed608fc5aa1e71aa3ba4d5ef81ea23fb6e86c4f347f75da47aa5ba6bb1a8831fb15625e318530cce7538be5fdd19ad7aada5a6f589f3152a7064348323983e784a8667b1d670f12dfc79897c961cb6a308b3056a58df39da4b32e9c961ca1605a90ac07cf742ec6f945bbafd7a6ffab19644fd660f236ef70f300963bdaf50631c8b6e295c7c63c1d723ba793758abb1fc1f1b9f744934f25d8b10bf74f51b1326ffc059e0d18644808176452ffff7300be590e2dd0032313ee2dfc2bc73b756873cbbc753ca7a51f5fc5af46d696954efa9c0b829e5ceeffa51c972d5c216ee9c8de8851b40741c96ad0efcea164fd7ccf259f8838ab76b5555de12863f1efa0d5e02b431d87f872c539913755be643b23523180b4f63540dbc934091b35e2b752a0b13f04920f0c9feebf679c730da1d6f7a3b5193177a1867974828a027d9ace0f7d8077d0c3510255d5ca88e228626782176df74b4d381f830aba46270970d86a0862204f1d87ef553be9e12cb16a119873e73aa7f77ff15c6d99a61f8db8b8051ba1f4641e71dab0b924e01ae32dc744e35bb3bfa37a2cfd96000ecd3e043ee02850ffcaf2df63946ccd038c61c60355c9ba9a9859f98375da900db52bd18a9d96c649ec4eeb8e9086e08b551f0cdee02fcdbc5950549916a09eef3ff3cf590d9ad57f69cb19aa707d1abdf08d2b2cc0ae047f2cff3676c0ca37b2f727c4ced3bcb9e94790714ef304bb94b8c79ad36bfa9ff3671e274129936e0dfca6256fcd135a7ceac595d5d87b18ced718352b9a6f01ba92e34342f13ef86950d1ce3633eb74515b28e1a644968bf2d4dd7e1132c40952077739c83e3e0f21c2a1ff6a64ddb85411ee08857e7c295d86def2dd279f88d7fb97c7e2961056721228c7cd70c9f818068e4b0ad6593f337dc96812275dbbd3470c25b523e2f3a8c79e8c9443614a6ac69f6b12c3c6f7cb79fec9359586b6439c6fa50eff2a896e63e6f2720b243de960929eb4334d8190b8cf902060fd88fc385d42ec24cb61d69287e7c3c175f694f877c38f40aa1528aa5fb5c11204de69cf8fa4cbb567cc6b6f22fd27325ebb1de474084dda13c93725f8e51edc008cbd0d5b7e9e4b1fcbf609213b658fe0364799877eecf0706904a34ba0c27a50b2b66bea6bb16c06d83a3dc0e114b3eb2409fb5c4e1431c0df5d66cca1f3d5bb241fc8117d3f886cfa7de274b35f3d75e2914a7a3c725a7593ce85fdc5519be491af8a52cad1ba87975e3f3d30928e67a31ae70736b5a2fdadc97fb3febe7126e32a8fa815c57f58e441b117987790a8d58c96980f7b8aee6bd6d029060eabb05995b8febfef1d7e0d1ed5ead6343df7a60660245efb4ae90bb620cef88be5f35ee5e0df83fb22ccf3a01d7087953c02f2ed1baa38f2a649ac7bbac04f2ba61c29b63773a3c02640b8e367af9d95e96304a95caef23938836b58cd362652f0ecf85477def87d276b207f62f78283b4a34a790cf8e90f252bab211516ff1c955d9d9097ed20958c8e5fa8f773a5ae5c4fd01b828494db2e87c4c8c869eda1c2b86b510831d20ede6972d7842b9a74b08fa56bb0396071444301b2447c471f59dc694ab072bb6606c8839074ab6d9265f6607c741f27a34cd2566e777568cb02902136fe2a4928f39b66fd9b4eea32a9e5773e52714e595c0b4bb81f3029ca3c9afadd03d0614db99a0f2d77cf936aec64056b84c0843d6b47db93fdc7c7fdd3c5cfa19d2807f50ca05c1edee79c6954de0b65742cea5a546100706a8582aff3f7d539fa41605bd499f1741a4654928df186ef55a38667871d0c32e131e4321ba0a6a11802bdf163c1f1cf3fbfa932772ed559e716932bcaa9fbd94ff217e3803da083d64ee50edb87013ea8fdd9c0918bf295075a7d603fa2b70a07ac34b8b33bb99faa26504a43faf333ebc5901f007ed650c6117eac22a8a097cf6a4977753c4cb2c62fd8ab910f3a0ad380e1d700902402d22f5facd66fcc26dc146de7e317accb66e0d194a9250d942f58891cb7279a1c924c3e7be8d3f8cdca3c41bfeecd054050d0b0d7c656882d2cd29066401f2c45584043bbc24d68952b3d202f4e7d138fbe4e913ec503a61ad12e5a556477e0b6a8d3dda9f3ba69dbd2dda50d8f38089a0d89f16ab238a3b18803fd1357c9836cd209bdea49406fc29e2155ff42e6863eee1492a4e5953ce11cb865212ac1a607c577fe07db6f77129d374a8f25d613b6386b11b5f8be491849d68854e5732bbc2d0e408b588702bcfef72880dcbb422a09ab1ba3a1f8861ebaa5421e1bb7e4154e9c5f88cdae53c06a1118810cf9d34e2ebf8ea6184327028f52edfe1bbfb658abb03ffdd73c305021d39c77359d20bbf0f2c4eb3a3618c49a82c3ca37b3332e50fbbbff1b6eedd5fd1cfa4cd52278a34e645b1de45aaa7df864b1f14e9439b679b041f41bc709cda974f2e943a969dcb813a6498446dedc4198cf8625affa88afe5f2de111b721d8f3af95de686aedee1f2fcd1445ab7052abc104ff207775b0b5be24d75fef1c2e2b1cd3aad52a6873c33567685596ee791328b416447520bff7352feebc12939a9e3b539e7fa62432fcc6d0ba7378e56f939a09f6d303b88e323c56517f82eb49ecc867b4cbbad25fd8d6a15254afc1d02528ab57163ab98cd8f12a3c1ad2b684f9ed85ebec259fc170b8ec349bf7e9280134390afe252ba64c2eb594f131c76f5", 0x1000}, {&(0x7f0000000f40)="3cbb428da790bf1a84d97bd94dfb932e02283327166d53048ef2411f71ce3a7605f052dd55a146fffa0ea1d89a8e3bfacaab733eb4cc117dc584f279e742dc262e9b4600e5525cd20455d2dd4d8b4cf27a67ac3b0c17bf7db8506cbaf1af80b29dd27b606880799b041eafa17619", 0x6e}], 0x4, &(0x7f0000003100)=[@ip_tos_u8={{0x11, 0x0, 0x1, 0x8}}, @ip_retopts={{0x60, 0x0, 0x7, {[@ssrr={0x89, 0x13, 0x2a, [@loopback, @local, @multicast1, @empty]}, @noop, @lsrr={0x83, 0xb, 0x15, [@dev={0xac, 0x14, 0x14, 0x20}, @broadcast]}, @end, @noop, @noop, @timestamp={0x44, 0x2c, 0xc0, 0x0, 0x7, [0x0, 0x0, 0x5, 0x7fff, 0x8000, 0x81, 0x31f14830, 0x10000, 0x4, 0x8]}]}}}, @ip_pktinfo={{0x1c, 0x0, 0x8, {r4, @empty, @private=0xa010100}}}, @ip_tos_int={{0x14, 0x0, 0x1, 0x10001}}, @ip_retopts={{0x4c, 0x0, 0x7, {[@cipso={0x86, 0x1d, 0x3, [{0x0, 0x5, ',fM'}, {0x2, 0x12, "9ce71c17a1879579d1757b70ea45523c"}]}, @timestamp={0x44, 0x1c, 0xfc, 0x0, 0xa, [0x3, 0x3ff, 0x80, 0x200, 0x3ff, 0x8]}]}}}], 0x100}}, {{&(0x7f0000003200)={0x2, 0x4e24, @multicast2}, 0x10, &(0x7f0000003300)=[{&(0x7f0000003240)="2ed003fab4d015073cb579b765d101cc5c24809409f1f3adbd70652bd3fc23f0a5853d51404eba20e6f25dcb9357aec1786db14e70adcad592875c5ab7c2b650126ec9735fa2cb3033f438888ab90087f54c6fc33373b06b34606020a05ea593fe13dfbbba7c163d1d44ef39384ed1d7a4f32303768f7c8c6785d58d30eb5663b38631fd0cc37d9eccca98b714ee03a00cff5e1fb96137382bd6eea7", 0x9c}], 0x1, &(0x7f0000003340)=[@ip_tos_int={{0x14, 0x0, 0x1, 0x6}}, @ip_ttl={{0x14, 0x0, 0x2, 0x8001}}], 0x30}}], 0x2, 0x4) r5 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r6 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x101042, 0x0) ioctl$PPPIOCNEWUNIT(r6, 0xc004743e, &(0x7f0000000100)) ioctl$PPPIOCSACTIVE(r6, 0x40107446, &(0x7f0000000240)={0x2, &(0x7f0000000180)=[{0x48, 0x0, 0x0, 0x2}, {0x6, 0x3, 0xfb}]}) write$ppp(r6, &(0x7f00000004c0)="1632", 0x2) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r7) sendmsg$NLBL_UNLABEL_C_STATICREMOVEDEF(r5, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000200)=ANY=[@ANYBLOB='x\x00\x00\x00', @ANYRES16=r8, @ANYBLOB="01400000000000000000067400062c00070073797352656d5f753a6f626a6563745f723a756465765f68656c7065725f657865635f743a7330000800020000"], 0x78}, 0x1, 0xffffffff00000003}, 0x0) syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000d40), r5) r9 = syz_genetlink_get_family_id$batadv(&(0x7f0000000c00), 0xffffffffffffffff) sendmsg$BATADV_CMD_SET_VLAN(r3, &(0x7f0000000d00)={&(0x7f0000000bc0)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000cc0)={&(0x7f0000000c40)={0x64, r9, 0x200, 0x70bd25, 0x25dfdbff, {}, [@BATADV_ATTR_BONDING_ENABLED={0x5, 0x2d, 0x1}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5}, @BATADV_ATTR_ELP_INTERVAL={0x8, 0x3a, 0x21052a15}, @BATADV_ATTR_GW_MODE={0x5, 0x33, 0x2}, @BATADV_ATTR_DISTRIBUTED_ARP_TABLE_ENABLED={0x5, 0x2f, 0x1}, @BATADV_ATTR_AGGREGATED_OGMS_ENABLED={0x5}, @BATADV_ATTR_AP_ISOLATION_ENABLED={0x5, 0x2a, 0x1}, @BATADV_ATTR_FRAGMENTATION_ENABLED={0x5, 0x30, 0x1}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}, @BATADV_ATTR_HOP_PENALTY={0x5, 0x35, 0x8}]}, 0x64}, 0x1, 0x0, 0x0, 0x8004040}, 0x40480d0) r10 = socket$rxrpc(0x21, 0x2, 0x2) setsockopt$RXRPC_SECURITY_KEYRING(r10, 0x110, 0x2, &(0x7f0000000900)='\x00', 0x1) sendmmsg$inet6(r2, &(0x7f0000000a40)=[{{&(0x7f0000000000)={0xa, 0x4e23, 0x3116, @loopback, 0x6}, 0x1c, &(0x7f0000000600)=[{&(0x7f0000000040)="bb97bebc3f36efbc8d6b836c82adc61ce55fc5ecabd6b14bce442de0707c9d70", 0x20}, {&(0x7f00000001c0)="3f964f9697e11903d1d9fa6b91092115913ac273aafbcea38a5e95619ef7ddf812b3ee4fa9f0cdee6b7ef359729c6d38d34d67bf205110ea1c29c7b1fd54bfdc2023be3c529e377570f0e4ec97020c11cda5a7d03f493f2a7c17432f1d6f1101d2847252ae8c996ba23697d692fa5a468405abe3d4f02882dcf348e0ee2c1b9974eda16c69639b2541886b", 0x8b}, {&(0x7f0000000340)="2c2f4072f75d97fb344908b784aa80b8fba351bfe9b2936e3e27b8e987ad509ac9f80e43fd9aca72ac14fdc8fd682d30681ed326766d92cdeae7699a6b2381b2be82df7cbe2c9e03e8f61d83715c77088c39215750028f6421e2ec28840d83c439a53ca2fe0372ab639bf57b71ac2b28d125783bf5da958bfa49bd3c926f053419a945acb8c7d5d0a431d26277ef5454ec90eb17d8e2c22d38ad34fa9cbc303f67cd78b2999b73df14f9c13265fbe26d4a", 0xb1}, {&(0x7f0000000400)="a537a8efd63cda9a9cf1b995fd1c0e5489282653039a2c5995d58424342b68d81235d9614a22fde9752b1f7e4f2cb6c3b138add60e42b0d4cc0525383796b9b07441e29a5987b6ee73515755a832b03a69b491e018e795343480eba33265b2737c1458a29a9c530eed9a011f34308e2ce6d0b68c67726bb36c064232ce40ab841fb5b5b117b8448fcae87ad3e62a0010", 0x90}, {&(0x7f0000000280)="3f1f53a6fc56d76d7a6a97517db548b24999194db66e0d7dcc4fa445da15f8e7a6c00a91a17bd48185f35974bfd05a2a3e648103f9a2df2d1a66b998504c27ab991af62892e8945e171554e6edc16282ad94f924be99dfff441de2617a74cd6ad20d03cff275bc", 0x67}, {&(0x7f00000004c0)="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", 0xfe}, {&(0x7f00000005c0)="39b27c04318cb4fa2b53fff881b16d3ac70bb214018c7a58fced1b24aab367ab72b13bd77b0037daf43fc53e40d1b266e96c25c0f1af722a36eb15197bcb37", 0x3f}, {&(0x7f0000001100)="0c0ee96a5439cf1d4f7b538acaef147840863b3d7485ab26a010adeca4fa9b8a581984692f5f104c6e5906a234401edf969e0f566381e26d50a5efb7241dd81d901d1da8bac90029c25d885a3fd7cb67392c6a6b92a8de7608af3838343304ba984a8dfe65eae21edec70ebdc81d9681560ec8f3ebfa940f92b42cbbff5d1e855d33eedd83e6b0be6c630efba9fecd4aff4334ce993a2b612091fe3d8b2986bc260f4ce48f96f114e9dca4f6c03a496085261e14e92780e76a23e5b0b4eb7287eccda9ff83f168eba498dc3631c3194eaa64abf196469ba628817e750be1fa9765dd52650d7e529ecd493f106dfffbbed8e67096f65f6dddd3245656269953abcea86e86a897e8cfca155e99ae989f520c77e0f76d242c44d9c74351afd79fb5cd68659ebef0f4a4a88252e023605add7a5e07a121dcb54959276227dfe89f0a00a1df662ad7a8a6942f4b297d8a4725d9c1c4227c3b5c4b3de55affbc1e7cdec262a62fe4544d0cb6a942a943185475502b3d12741667828e83df41871d8b0d3ca9d61e7bc374b5db15ace1bb0ab76241bccbbbf4387deec876762f025eff4cdf5c932cd8423db560212f7791d080eeafccee80d83a2361cdfe721152d8dcc64960298374c4394971f4bc8f5bbe344dd32fb43da155c3c9d96b104cd795f2a6f7118a7a6a8a60ea7296ccfc78a852543132b4a5c6577fb46fdddf79494d0db99dcd7cf11b87f223471a41f04bf83e6e0b33121338252d03e0b1a1dcd8e74b1c563d0395f199782c3d5b79b08c76e352cacef5e0f6badd10c85235ba8b951295b5f65e3f7b161c7b879af8158dc954c4caf250519161c3bec010fa824e5bc95433c32b195b4c58abc7906f25efd096bc65fea01bb5907aee1c6395e6a3dea2ad8ed4946c718562d6dc94261382a6fc22ab4bff3aa05d30c45acbcdd1fe9428487f5f648584f5613f4c51d1b507cec5397849c725d5b6b94564985963ab958a19383dca546aba580128dcbc3a2fe85932d41253147d09d4ccfe9eb0bcec79449280c20d372352132f2de766b94aa5dff1e92bdf23b495eb807c71d45826fe6479647d16433bb76c699013d4a0b392ad93e0bbe165189b6e5d462ccbf6dbbd7f2b3bb5329605a010d29cbce8d29ff136f580012f9adc8d40a0adbbd18491870d492f1c34025e4959ab590862a2b98754eb7c258d559ee8f3f0a0ddf01faee174236c3978f9e87a318dd31ea9a81beeadd6cc14bb993d889032730be21ffc8f866425cb9c5e0baa3523706f43b947febc1d0b9676b64927cfbcfd3ebc06fb21b0fcc48bb22a114804c5f3a5f44a5c46b902094381e1c1e1419e24a7518dd384ac889c1f79ac7a23c26fefa7419c7cff0ada4475503f6ad13de785081e4457bbf696dbab30cfd7f1beafe2ab7f6bc6a4db864e4b7d0270a040dba6a31769184af2be4e7c58b766f24b4ca1abe86528a6ec144552feee7d5f193a68032526789058f6f3093f562a52e5df5203bc26b5100b535beff2d4ebc86aea3dac08c06891972d070b7b99253c77b2377ab8492ce4db3f7be3c1fb5adefdc9883981abf0c741f1b9f917a8dd910b3a0ae2ce3c17ec507f567f4cb11f167d113f75fb8190660a0413d0aaad32b6b4cd8eecbb6f95dfe150331bab9219e9bafe75a629cf4f5a9372146ad5f1cc66a35656f55349cf50e57bee15dc438bd407c4d6ee2843a5269bedc5355ddd2d198c092f94cc415d6a4011863d3a2f3df411dfd2858ee47b1fac99afd9e2c2c5cda7197cab1ba0ea53dea2e1dae5d12c08b5187aaf7c7e00efec5ae5b3d102f8d1e08d2d77581e37de846a0816a22d6e1f37afe4fb0f94fab3c0255210a668a9d6614117253d540ed2c22d09471ebc5fff1ee37e02bfa89ffaa38c1668271626fef897d1a366536548838159e62e302f11bdf3240bd2de48915d3fbd9226fdb3c7488edc5dd9343e9e5b21ad9b5e2f444cef5267d5d9a9f997178b35891551522fe819ce28489a73c75c8b06426a863a725662895f714df6a328106d671e0adb73951406d849e356a3451098a1c073dabf5644344715022b437352b4670ec5bdbd62dbe37f97443252fc670181ce9b65be4c001412b4c8d0e4ce66dc229c46d97218824f163ed5e2383cb72f268f2bea9489a45738b117c19a50a22d9304f71931cea9be6ff9d8c4b9f1f69e679492e4397005347e052ca2e366218a82c21c50318e275726988b93058e049aa350103ae6bee64a3569951005689ed83916f6ad1eae008efd6e864d7b80f2d8946b97b766da9f3be80d7f9d5707d1fdb29e94227a5d5e9f0d70fb8535a6a392bb80a45dcc01b091028352c496954e2aecf18982292c415523fb8fba05eb727b285d011abc1925c6d6e8b12c0bf4639681dc90c2b1258ddc41a99e31d2e3a4f32e6278e8d93c1d4d87833aab9795ff09af499d05e5fa612602842dee7bc3cad101182edb3bcfa250de0128ab3d570f37ac2e0151198cdaedcf814aa8b134018188b5b63094708d2879e58d3076aa502205175c928eebe09aab828067a7163fb709d690cc21f6a497e7b39fff60a7b72cfb44c2ac7043a09a00bf6296e3f5ed5ec5b10011621161ace50b13aa409f3edd7c6615dee2003a9165d554e9eea74a79be0a43fe633729b00b7b6e7539d666a5a997646997f407169306445d22c210e79fdf0db45a29425aaea16bae455af9b338232a7bbe0e19d6cf57922587c49e9648a95188a00daa4415cc9b895e9101dba23e84ff1254ebc92d2a4ef9b08c4e4ac5b20ba180a54999af1ff1308f11a0361a2c16403168197b26bcc1d806b8429a68df8ee9f437623600ac7dc40607f853e7536a5dc3559eca997975ef07c85d52a2326973a77b153a5e1d78edd0c1a1699f929129c5a87766725d3b30758742f2e279f11be8d22028afadaec3dbfacba7c6ce944e2efcd9242f2be5f2fbc7a938fb97a981f97157b24ec99047644ad20ffb0b8b7229e46077eabaee4ce6f7cf646da851a968875873427d97ef3990d4dd7eb52474cd0df598aae44028673074cd3a3c7b9eda9d28851bc0a928c4434d92aabb303e42828069f23934703d49f49d03495e1139a4584e406467978d259cd8ad3e566f37a19ca7b29b191709506995473af6ebdab290d4d6acc7a600828900e95ad585ffdf455609aba527d633a45cb7bf89e241e2f91bfe7980586d55e32f8cf261b715368d85328f6783b0798221b1e86e2777e91b75b24aa680e46b5fde2f32f51b99355856e3fc4f4ad075b5d0cc187b6b65e3f6fee9ac08d3c67591f13c7f7ed71649f923acdd9c2986a5cccdc0f4aacf1ed04cb82557d622490bff5567fce8c30dd35e27349971417b66cc5bc5b13b1fe3b70dd95d78ea65f6371ad47bc93adf95482104f6c3e53e057948ddb40e81466a72a4dc4c49e3a0cf1e5c7011fde9ece17b3728457e568c1eb1a21244aacc9250a32e657406e474107b277003192740117435be24944d563ed79f5be2f03dbaa66051a723211153ed70f6132daca48ddfe1c824db1b0ae968106a29e0f60e30af4239f3f7745aea81d0e6dc80e23a47f05ab8c973909e081d0ceb2bd8dd7a02c5bf7aa252ce18c514b255246035e8817c63b3499f0043560c32b525913ad375c0e3ce0876d52dde5c71abd0fce258acd37f5e1cbaab850f8b090ff9d1ca69730f7880f9cf2aa2a2307ff8b3202a526d24bc9be6319a46ddeba65ea187d070903e220ebd44ac8642031dd06cee57da00c85a1d803698a960ec3829fc4d6de522b2b571d1b1a487c038d1200fac485db0424496d408313bde6878575707bb7ee25d382e86f2d5c5bbd6f1c19d1dcf1df577b01b19206352cb6cdfdf951855c28fc76ae8783bbb8487e713b51d1107650bc79cf9fb8b64497883623d314fa84a7f2b0767e4e48443ce2db5a314e4103550b230ab2b2d2ce59734766dea26def374ec49a9f82ddb282b2dbae4986a2f4db1a361672d3e6ce522157d479d5f5620c2330c3789f566a644d896339e7f67bfd3540639d8b31bfc031200ce638f86c59a8ecc9b5c953b04f3646e389beb32827ea99dfeb38937ad521cb2a0aa9c8f52ca5740314d30d71b2a484b858dd37deb09c59779f2ba93f757b7b9ed9d8469c240e3be59072d3f6b6fd57d2a657bcc45fb6cabd81eaf4dcd0d65049ee00356187b818ffcbc2bde5484e967cebe53f07e8cb6bc5f621f63174121a24c864e59ef01ad858a78910bc8480286b35b5e533457d8e96ede3c21fa89002ff1692c924dd07d6c7945456e041997e0d34f2f39942bfa6230ac633a10627fcfc7e7bfb1a385f4e196203111a1f5125ce771034e1e05e92107ce8d7a316703cc15c789a8eaf412f5088b4e4fc0d3920c90744903e300a4fc3012a5ff500f5542bf13948d976e158df9314c0d067ed4f8dd4e45caceb6f547950eed334321ff509a11796634473e243f5081a2fcc10471d700e08510cf2d0a89d04e742e285dfe7016c7a7f3aced949ff0c7e77253c96289ea80dd1695bf41db14b3b24ef778e577fb30e53f5473eda5a84851f0fe8d5eb8bf0b56c43c371c752e5772bc402b4708568fc480bdaec479a40fa6a51a5ef20e3ade2859b75cca05c1113b6cb5812c8301c94475e60d4abb2082c3e1335a213f9db28943901414408177804d6d92ee37db0aad1bf16428e9228229f5e753406ce5b6dda61b3510fab68384dc0ed4f2f1ffc6c6dee66fd19a43891101187ab9ea26cfeeb3b1910bf094ef97c84335d03de01d93830e070be01596e9ce7ec5f857a424c9de4a9fc0b9265e31a43af442e3042c383fbaff9f40c3e9165f71dbe4e90541c718d7a8a5517ebd67c4123f4c0f3756014843dc65947f37f5b906bf909cef7d877a47b2266c520cc4eb845497c619704578a5625a9e704fb7a6b365b181632eb263e9f172a02fdff6a30db12e08554e5e201c7d686aa606729d058bb0d4dcd37bce465428b6343706fe5cd34c8f93a4a0683d75b5d132007daa4233ac92ffcd0e3fe292e5686a6e50d14638f90143f4ca05c51f11d06c5fcb0537d460ad8bcb8939d1aec48b0886996a1789a0c7ba3ea5de53a0c0888cc24cccdf95884d5053fb1eb6cfdeb0d664849b02486b2316b91dbe311e0a503603f4b15f24081f6d19b1bf7d7138b7444fa74b4d4d8ddf1755c84fd32b35e0eb38ff26b796dbb4e7524b3e28dc066dcd3d1b7d633ef1ab72ad2cbc2accb1319fcd7d3a571fd0c1583b3a01ec3f0d77397f87050e497fa3317d15f68fd5ac58b9601243c07d32e50be43efb6decf8688ca493d9a60400c3fac962faa20d31c322d1dcb8a87f892ee8da5e2e4e260738b91a349afa03fcc79c83c627bbdaf4197e1ca95ac8bf5d360f71ba35277f50ca85e54f742327aba8c2e40d63b3cf388eb0bb5f4f5ea4f0b80d99b9073ce2944027de1b0c307edcb63d4f4b47e89627689aaf2bb3c90998dba5e3985d3a1ea58199c72f024e0b18891794c8e22b008afe339a45b8f6238709d5a0fdadd3455f8cc7b75061434e5be42a1b35a324a65a5a396d448e9f8eb97396f4fce385e325ec646f140dfbaa88db7bad3031aefa764af7df3f33f71c28177b6161de4d36bd45203796c170275db0deecbe4909f720220e224d05cb06a123c7fb5b5f954f8fd3b7ea054d38026036124423f9fa0c2dbb52a20404b58aed0504c2e23aa2485eaf808996eff7f48ec085ea22a20ab3bb876fafd43a598a9feb4423fd0edae247472542072eaf5f8576a755e96098821dc1193c8b03dad4a80e", 0x1000}], 0x8, &(0x7f0000000b40)=ANY=[@ANYBLOB="140000000000000029000000085a136f7b00fc58000000000000"], 0x18}}, {{&(0x7f00000006c0)={0xa, 0x4e21, 0x50, @local, 0x3}, 0x1c, &(0x7f0000000800)=[{&(0x7f0000000700)="5ca0a1ad888715992c7f464cd6d2f0f0d78216717136fa9d175725d3ab751168f56c846b8cf0ef25cafda0a5c2cce515cbeb93bc8735a4fbe7afb3550651e93263e0d2d85c183f5674b23bd2", 0x4c}, {&(0x7f0000000780)="6bb1aeb03cf3a383f7d82e76cbe7018cab4dae7b7a427b63403ed0981f92fc5886f44814e8f5e57947caca8fac3cbb41ae6471b56d9b5358e6b879904a2e8aca307b0bb611", 0x45}], 0x2, &(0x7f0000000840)=[@dontfrag={{0x14, 0x29, 0x3e, 0x800}}, @hopopts={{0x38, 0x29, 0x36, {0x0, 0x3, '\x00', [@padn={0x1, 0x2, [0x0, 0x0]}, @hao={0xc9, 0x10, @mcast2}, @pad1]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x3}}], 0x68}}, {{&(0x7f00000008c0)={0xa, 0x4e24, 0x0, @local, 0x2}, 0x1c, &(0x7f0000000900), 0x0, &(0x7f0000000940)=[@tclass={{0x14, 0x29, 0x43, 0x1}}], 0x18}}, {{&(0x7f0000000980)={0xa, 0x4e24, 0x1, @mcast1, 0xc5ff}, 0x1c, &(0x7f0000000a00)=[{&(0x7f00000009c0)="6fea0487e992394b5f07eb8abb9620659a08fc8cde06557a34762494a8ef3c50dfd96d902aca7849fc7547e44ca89d3a7b745523ba75bcd1", 0x38}], 0x1}}], 0x4, 0x60000080) 5.472244735s ago: executing program 0 (id=242): socket$nl_netfilter(0x10, 0x3, 0xc) (async) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000240)={'veth0_virt_wifi\x00', 0x0}) r2 = socket(0x2, 0x6, 0x0) ioctl$SIOCX25SCUDMATCHLEN(r2, 0x89e7, &(0x7f0000000040)={0x5a}) connect$bt_sco(r2, &(0x7f0000000280), 0x8) (async) connect$bt_sco(r2, &(0x7f0000000280), 0x8) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000640)={'syztnl0\x00', r1, 0x7800, 0x8, 0x9, 0xfffffff9, {{0xa, 0x4, 0x1, 0x2, 0x28, 0x65, 0x0, 0xe, 0x4, 0x0, @multicast2, @local, {[@timestamp={0x44, 0x14, 0x14, 0x0, 0x3, [0x7, 0x6, 0x9, 0x5]}]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r2, 0x89f3, &(0x7f0000000480)={'gretap0\x00', &(0x7f0000000640)={'syztnl0\x00', r1, 0x7800, 0x8, 0x9, 0xfffffff9, {{0xa, 0x4, 0x1, 0x2, 0x28, 0x65, 0x0, 0xe, 0x4, 0x0, @multicast2, @local, {[@timestamp={0x44, 0x14, 0x14, 0x0, 0x3, [0x7, 0x6, 0x9, 0x5]}]}}}}}) sendmsg$nl_route_sched_retired(r3, &(0x7f0000000580)={&(0x7f0000000440)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000500)={&(0x7f00000006c0)=@delqdisc={0xa4, 0x25, 0x2, 0x70bd2d, 0x25dfdbfe, {0x0, 0x0, 0x0, r4, {0xc, 0x9}, {0x10, 0x8}, {0xffff, 0xfffe}}, [@q_dsmark={{0xb}, {0x28, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x9}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x10}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x2}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x8}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_INDICES={0x6, 0x1, 0x2e}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x1ff}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_DEFAULT_INDEX={0x6, 0x2, 0x8}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6, 0x1, 0x9}]}}]}, 0xa4}, 0x1, 0x0, 0x0, 0x10}, 0x4000000) sendmsg$RDMA_NLDEV_CMD_RES_CM_ID_GET(r2, &(0x7f0000000180)={&(0x7f0000000080)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f0000000100)={&(0x7f00000000c0)={0x10, 0x140b, 0x20, 0x70bd28, 0x25dfdbfb}, 0x10}, 0x1, 0x0, 0x0, 0xc0c0}, 0x20000000) r5 = socket$netlink(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r5, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000001200)={&(0x7f0000000000)={0x38, 0x1403, 0x1, 0x0, 0x0, "", [{{0x9, 0x2, 'syz1\x00'}, {0x8, 0x41, 'rxe\x00'}, {0x14, 0x33, 'team_slave_0\x00'}}]}, 0x38}}, 0x0) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000300), r5) sendmsg$NL80211_CMD_GET_POWER_SAVE(r2, &(0x7f0000000400)={&(0x7f0000000200)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000340)={0x14, r6, 0x800, 0x70bd28, 0x25dfdbfe, {{}, {@void, @void}}, ["", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40008000}, 0x40) socket$nl_route(0x10, 0x3, 0x0) (async) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) (async) sendmsg$nl_route(r7, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000bc0)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r1}}, 0x20}}, 0x0) 2.803487395s ago: executing program 0 (id=259): r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0xc, 0xb, &(0x7f00000000c0)=ANY=[@ANYBLOB="18040000000000000000000000000000180100002020640d00000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000b100000095"], &(0x7f00000005c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x25, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x4c9d, @void, @value}, 0x94) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='blkio.bfq.io_wait_time_recursive\x00', 0x26e1, 0x0) close(r1) socket$nl_generic(0x10, 0x3, 0x10) (async) ioctl$SIOCSIFHWADDR(r1, 0x8b04, &(0x7f0000000000)={'wlan1\x00', @random="ff2509000400"}) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001040)={r0, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000100)="b9ff03316844268cb89e14f00800", 0x0, 0x0, 0x60000000, 0x0, 0x0, 0x0, 0x0}, 0x4c) 2.763169602s ago: executing program 3 (id=261): r0 = socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$ax25(0x3, 0x5, 0x0) close(0x4) r1 = accept(r0, &(0x7f0000000100)=@llc={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @link_local}, &(0x7f0000000000)=0x80) ioctl$SIOCX25GSUBSCRIP(r1, 0x89e0, &(0x7f0000000180)={'bridge0\x00', 0x0, 0xe5eb}) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r1, 0x89f3, &(0x7f0000000300)={'ip6_vti0\x00', &(0x7f0000000280)={'ip6_vti0\x00', 0x0, 0x2f, 0xd4, 0xfe, 0xfff, 0x6b, @private0, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x20, 0x7800, 0x4, 0x4}}) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=@bridge_delneigh={0x34, 0x1d, 0x800, 0x70bd26, 0x25dfd3fd, {0xa, 0x0, 0x0, r2, 0x0, 0x7964a1487f4602e4, 0x6}, [@NDA_PROTOCOL={0x5, 0xc, 0x2}, @NDA_PROBES={0x8}, @NDA_PROTOCOL={0x5, 0xc, 0x9}]}, 0x34}}, 0x0) 2.660090742s ago: executing program 3 (id=262): r0 = socket(0x2a, 0x2, 0xffffffff) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@getchain={0x24, 0x66, 0x200, 0xb8000000, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7, 0xffe0}, {0xffff, 0x3}, {0xc, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004000) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3f, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1, 0x7, 0x2}, {{0x1, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x58}}, 0x40808c4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.716903179s ago: executing program 0 (id=264): r0 = socket(0x2a, 0x5, 0xffffffff) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@getchain={0x24, 0x66, 0x200, 0xb8000000, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7, 0xffe0}, {0xffff, 0x3}, {0xc, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004000) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x14, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000006007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000080), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_REMAIN_ON_CHANNEL(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=ANY=[@ANYBLOB="88000000", @ANYRES16=r2, @ANYBLOB="010000000000000000000200000008000300", @ANYRES32=r4, @ANYBLOB="0c00990046000000030000000500180130000000050019010c00000008002600b409000008009f"], 0x88}}, 0x0) r5 = bpf$ITER_CREATE(0x21, &(0x7f0000000040), 0x8) ioctl$TUNGETFEATURES(r5, 0x800454cf, &(0x7f0000000380)) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3f, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1, 0x7, 0x2}, {{0x1, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x58}}, 0x40808c4) r6 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r6, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.695941258s ago: executing program 3 (id=265): r0 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r0, &(0x7f0000000000), 0xe) (async) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) r3 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001500", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) (async) bind$bt_l2cap(r1, &(0x7f0000000400), 0xe) (async) r4 = socket(0x11, 0x800, 0x750) (async) getsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x1f, &(0x7f00000000c0)={0x0, @in6={{0xa, 0x4e23, 0x2, @dev={0xfe, 0x80, '\x00', 0x40}, 0x1000}}, 0x1, 0x9}, &(0x7f0000000040)=0x90) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000180)={r5, 0x4}, 0x8) (async) r6 = socket(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f0000000080)={0xffffffffffffffff, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@ipv6_newnexthop={0x12, 0x68, 0x1, 0x0, 0x0, {0x2}, [@NHA_ENCAP_TYPE={0x6, 0x7, 0x2}, @NHA_ENCAP={0xc, 0x8, 0x0, 0x1, @LWT_BPF_XMIT_HEADROOM={0x8, 0x12}}, @NHA_ID={0x8, 0x6, 0xf2}, @NHA_OIF={0x8}]}, 0x3c}}, 0x0) (async, rerun: 32) listen(r1, 0x0) (rerun: 32) shutdown(r1, 0x1) listen(r0, 0x0) (async, rerun: 32) r7 = socket(0x200000000000011, 0x2, 0x1) (rerun: 32) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f0000000300)={'syz_tun\x00', 0x0}) bind$packet(r7, &(0x7f0000000080)={0x11, 0x800, r8, 0x1, 0x0, 0x6, @multicast}, 0x14) (async, rerun: 64) syz_emit_ethernet(0x227, &(0x7f0000000340)={@broadcast, @link_local={0x1, 0x80, 0xc2, 0x25}, @void, {@ipv4={0x800, @gre={{0x1f, 0x4, 0x0, 0x1, 0x219, 0x65, 0x0, 0x8, 0x2f, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @multicast2, {[@rr={0x7, 0x2b, 0x10, [@local, @dev={0xac, 0x14, 0x14, 0x30}, @empty, @rand_addr=0x64010101, @dev={0xac, 0x14, 0x14, 0x18}, @loopback, @initdev={0xac, 0x1e, 0x0, 0x0}, @dev={0xac, 0x14, 0x14, 0x41}, @rand_addr=0x64010101, @empty]}, @timestamp_addr={0x44, 0x3c, 0xdf, 0x1, 0x7, [{@initdev={0xac, 0x1e, 0x1, 0x0}, 0x1}, {@rand_addr=0x64010100, 0xffffffff}, {@broadcast}, {@multicast1, 0x2}, {@dev={0xac, 0x14, 0x14, 0x25}}, {@empty, 0x3}, {@local, 0xc}]}]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x25, 0x3, [0x8, 0x9], "7732cb43792278880a0f36e83d52f5d0d8afa214e3453e2b9ebfba74acfb75c6d4b77816df"}, {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, [0xe], "273bdec3a108307d8bbee032a004d4b21cfdeb7036407f00f02a02dcb1a820d5626c2a4e61bdce2e29aff50c3f902561af7d1984ba6d0e0c074c000d5c3de33e5c5e251a4df5cf84bd3e93ccb30094d52e295da992636e9bb7b5da4e0194e5d30a24086e35f3f6d4681831373f327196bafb045da5"}, {0x1, 0x0, 0x0, 0x1, 0x0, 0x0, 0x86dd, [0x4], "3d7644efc10cdd75ebf25dd4"}, {0x8, 0x88be, 0x1, {{0xc, 0x1, 0x2, 0x3, 0x1, 0x3, 0x7, 0xd}, 0x1, {0x7}}}, {0x8, 0x22eb, 0x0, {{0xb, 0x2, 0x0, 0x3, 0x1, 0x0, 0x2}, 0x2, {0xe6d, 0xf, 0x1, 0x1, 0x0, 0x1, 0x2}}}, {0x8, 0x6558, 0x2, "26ecb5394094d77132544e6a495331dd7c7e8c214144d2f44a40b7020bec0da8845c7bbe2fa30d420155c266487561dcc88113ba2147855fb37eedb5c164d08a7d7563def8d8f2d7cf16737524a51fec840a846c21365d20a73c34e7ea8fd9579fc7cf8386036aaf333623c55713e4afbdccf1ad6062ffea0666a5c8b71ebb9e02a6153c2d194af13da1f055b1102456ff514a4f34bc2b781ba7425d815c37d97035d217d52c4e84fa7797"}}}}}}, 0x0) (async, rerun: 64) socket$nl_netfilter(0x10, 0x3, 0xc) 1.63229978s ago: executing program 1 (id=266): syz_emit_ethernet(0x76, &(0x7f0000000040)=ANY=[@ANYBLOB="aaaaaaaaaaaa618e38850ee186dd6010104000400600fe8000000000000000000000000000bbfe8000000000000000000000000000aa4e234e22", @ANYRES32=0x41424344, @ANYRES32=0x41424344, @ANYBLOB="04020000907800001e0c17fb000800000f00000005060000551304020402080a000000000000000022059800af1e044040000000"], 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000f80), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000280)={'wlan0\x00', 0x0}) r3 = socket$alg(0x26, 0x5, 0x0) bind$alg(r3, &(0x7f0000000000)={0x26, 'hash\x00', 0x0, 0x0, 'sha384-avx\x00'}, 0x58) accept4(r3, 0x0, 0x0, 0x0) (async) r4 = accept4(r3, 0x0, 0x0, 0x0) sendmsg$nl_route_sched_retired(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000e00)=@delqdisc={0x84, 0x25, 0xa5f2510356dec214, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {0x0, 0xfffd}}, [@q_dsmark={{0xb}, {0x8, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}]}}, @q_dsmark={{0xb}, {0x18, 0x2, [@TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6}]}}, @q_dsmark={{0xb}, {0x1c, 0x2, [@TCA_DSMARK_INDICES={0x6}, @TCA_DSMARK_DEFAULT_INDEX={0x6}, @TCA_DSMARK_SET_TC_INDEX={0x4}, @TCA_DSMARK_SET_TC_INDEX={0x4}]}}]}, 0x84}}, 0x44001) getsockopt$TIPC_CONN_TIMEOUT(r4, 0x10f, 0x82, &(0x7f00000000c0), &(0x7f00000001c0)=0x4) r5 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000080)={'pimreg0\x00', 0x7c2}) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000100)=[{0x35, 0x0, 0x3, 0x4}, {}, {}, {}, {0x6}]}) (async) ioctl$TUNATTACHFILTER(r5, 0x401054d5, &(0x7f0000000040)={0x5, &(0x7f0000000100)=[{0x35, 0x0, 0x3, 0x4}, {}, {}, {}, {0x6}]}) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010008", @ANYRES32=r2, @ANYBLOB="06001200000800000600b500850100000a0006000802110000000000040013000600be00fa690000"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0xc084) (async) sendmsg$NL80211_CMD_NEW_STATION(r0, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000001040)={&(0x7f0000000180)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="010008", @ANYRES32=r2, @ANYBLOB="06001200000800000600b500850100000a0006000802110000000000040013000600be00fa690000"], 0x44}, 0x1, 0x0, 0x0, 0x4}, 0xc084) 1.498127324s ago: executing program 0 (id=267): r0 = socket$key(0xf, 0x3, 0x2) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_WIPHY(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)={0x24, r2, 0x0, 0x70bd2b, 0x25dfdbfb, {}, [@NL80211_ATTR_WIPHY_FREQ={0x8, 0x26, @random=0x148c}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8}]}, 0x24}, 0x1, 0x0, 0x0, 0x2400c041}, 0x10) sendmsg$NL80211_CMD_SET_COALESCE(r1, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r2, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r4}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) sendmsg$key(r0, &(0x7f0000000100)={0xa, 0x0, &(0x7f0000000340)={&(0x7f0000000200)={0x2, 0x3, 0xff, 0x0, 0xa, 0x0, 0x0, 0x0, [@sadb_address={0x3, 0x6}, @sadb_sa={0x2, 0x1, 0x0, 0x0, 0x2, 0x53, 0x7}, @sadb_address={0x3, 0x5, 0x0, 0x0, 0x0, @in={0x2, 0x0, @remote}}]}, 0x50}, 0x1, 0x7}, 0x0) 1.455779947s ago: executing program 3 (id=268): syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r0, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r0, &(0x7f0000847fff)='X', 0x1, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0xe, @loopback}, 0x1c) close(0x3) bpf$MAP_CREATE(0x0, 0x0, 0x50) bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x15, 0x4, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f00000002c0)='syzkaller\x00', 0x5, 0xfd90, &(0x7f0000000300)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x1f3, 0x10, &(0x7f0000000080), 0xfffffffffffffc79, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 1.33644023s ago: executing program 1 (id=269): socket$packet(0x11, 0x3, 0x300) socket$unix(0x1, 0x5, 0x0) r0 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="18000000020000000000000000ee000095"], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r0, 0x5, 0xb68, 0x560b0007, &(0x7f0000000000)="259a53f271a76d2688f54c6588a8", 0x0, 0xd01, 0x2a0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) 1.317539197s ago: executing program 3 (id=270): r0 = socket(0x2a, 0x2, 0xffffffff) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@getchain={0x24, 0x66, 0x200, 0xb8000000, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7, 0xffe0}, {0xffff, 0x3}, {0xc, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004000) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3f, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1, 0x7, 0x2}, {{0x1, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x58}}, 0x40808c4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) (fail_nth: 2) 1.278581507s ago: executing program 0 (id=271): unshare(0x6a040000) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, 0x0) getsockname$packet(0xffffffffffffffff, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000400), 0xffffffffffffffff) setsockopt$XDP_UMEM_REG(0xffffffffffffffff, 0x11b, 0x4, 0x0, 0x0) writev(0xffffffffffffffff, &(0x7f0000000a40), 0x0) sendmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x10}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a60000000060a0b0400000000000000000200000034000480300001800700010063740000240002800800014000000014080002400000000d0500030001ff7f0000000000000000080900010073797a30000000000900020073797a3200"], 0x88}}, 0x0) sendmsg$DEVLINK_CMD_TRAP_GET(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000000)=ANY=[@ANYBLOB='P\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3fab00000000000000002e0000000e0001006e657464657673696d0000000f0002"], 0x50}}, 0x0) 736.164635ms ago: executing program 3 (id=272): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000800)={'caif0\x00', 0x0}) sendmsg$nl_route(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=@dellink={0x20, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2}}, 0x20}}, 0x0) r3 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000100)={&(0x7f00000000c0)='sys_enter\x00', r3}, 0x10) r4 = socket$inet6_sctp(0xa, 0x1, 0x84) r5 = socket(0x11, 0x800000003, 0x0) r6 = socket(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r5, 0x8933, &(0x7f0000000600)={'team0\x00', 0x0}) sendmsg$nl_route_sched(r6, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)=@newqdisc={0x88, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r7, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_mqprio={{0xb}, {0x58, 0x2, {{0x2, [0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x4], 0x0, [0x4, 0x2, 0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffff, 0x0, 0x2], [0x0, 0x4, 0x0, 0x0, 0x0, 0xfffe]}}}}]}, 0x88}}, 0x0) listen(r4, 0x4) accept(r4, 0x0, 0x0) r8 = socket$inet_mptcp(0x2, 0x1, 0x106) bind$inet(r8, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) r9 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r9, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bind$inet(r9, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) r10 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r11, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r10, 0x0) connect$inet(r9, &(0x7f0000000080)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) listen(r4, 0x0) 664.438036ms ago: executing program 1 (id=273): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, 0x0, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x20000090}, 0x0) socketpair$unix(0x1, 0x1, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x0, 0x0) connect$bt_l2cap(r1, &(0x7f0000000080)={0x1f, 0x0, @fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}, 0x7ff}, 0xe) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000140)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r2 = socket$kcm(0x11, 0x200000000000002, 0x300) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000240)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xf, &(0x7f00000002c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x5, 0x0, 0x0, 0x0, 0x4}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x26, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) setsockopt$sock_attach_bpf(r2, 0x1, 0x32, &(0x7f0000000d00)=r4, 0x4) r5 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r5, 0x5, 0x0, 0x0, 0x0, 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) r6 = syz_init_net_socket$bt_hidp(0x1f, 0x3, 0x6) ioctl$sock_bt_hidp_HIDPCONNADD(r6, 0x400448c8, &(0x7f0000000340)={r1, r1, 0x8, 0x0, 0x0, 0x2, 0xad, 0x15c2, 0x5886, 0x801, 0x0, 0x8, 'syz0\x00'}) ioctl$sock_bt_hidp_HIDPCONNDEL(r6, 0x400448c9, &(0x7f0000000000)={@fixed={'\xaa\xaa\xaa\xaa\xaa', 0x10}}) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="140000001000010002000000000000000000000a20000000000a05000000000000000000010000000900010073797a300000000050000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a300000000008000540000000040c00098008000140f5"], 0x98}}, 0x0) 385.827245ms ago: executing program 1 (id=274): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x400}) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) (async) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller0\x00', 0x400}) (async) ioctl$TUNSETLINK(r0, 0x400454cd, 0x20) (async) 104.283659ms ago: executing program 1 (id=275): r0 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r0, &(0x7f00005f5000)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000140)={0x2, 0x400000000000003, 0x0, 0x0, 0x12, 0x0, 0x0, 0x0, [@sadb_lifetime={0x4, 0x3}, @sadb_address={0x5, 0x6, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @private1}}, @sadb_sa={0x2}, @sadb_address={0x5, 0x5, 0x0, 0x0, 0x0, @in6={0xa, 0x0, 0x0, @mcast1}}]}, 0x90}}, 0x0) (async, rerun: 32) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x5a}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async, rerun: 32) r1 = socket$inet6(0xa, 0x5, 0x800) (async) getsockopt$PNPIPE_IFINDEX(0xffffffffffffffff, 0x113, 0x2, &(0x7f0000000040)=0x0, &(0x7f0000000080)=0x4) ioctl$sock_inet6_SIOCADDRT(r1, 0x890b, &(0x7f00000002c0)={@initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, @mcast2, @mcast2, 0x3, 0x9, 0xd, 0x400, 0x8, 0x100, r2}) 0s ago: executing program 1 (id=276): r0 = socket(0x2a, 0x2, 0xffffffff) sendmsg$nl_route_sched(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000240)=@getchain={0x24, 0x66, 0x200, 0xb8000000, 0x25dfdbff, {0x0, 0x0, 0x0, 0x0, {0x7, 0xffe0}, {0xffff, 0x3}, {0xc, 0x6}}}, 0x24}, 0x1, 0x0, 0x0, 0x40}, 0x24004000) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000001c0)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}, {0x0, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x70bd29, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0xd}}, [@filter_kind_options=@f_basic={{0xa}, {0x3f, 0x2, [@TCA_BASIC_EMATCHES={0x24, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_CANID={0x14, 0x1, 0x0, 0x0, {{0x1, 0x7, 0x2}, {{0x1, 0x1, 0x1}, {0x0, 0x0, 0x1, 0x1}}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x8a}}]}]}}]}, 0x58}}, 0x40808c4) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.60' (ED25519) to the list of known hosts. [ 54.944366][ T5819] cgroup: Unknown subsys name 'net' [ 55.116288][ T5819] cgroup: Unknown subsys name 'cpuset' [ 55.124021][ T5819] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 56.394407][ T5819] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 58.571823][ T5845] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 58.580769][ T5845] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 58.592160][ T5845] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 58.599793][ T5848] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 58.599894][ T5845] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 58.615878][ T5848] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 58.615960][ T5845] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 58.631265][ T5848] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 58.631640][ T5845] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 58.644381][ T5849] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 58.654442][ T5849] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 58.663499][ T5848] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 58.671170][ T5848] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 58.677403][ T5850] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 58.678222][ T5849] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 58.693302][ T5845] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 58.694608][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 58.700536][ T5848] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 58.709952][ T5849] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 58.717778][ T5848] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 58.722325][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 58.730906][ T5848] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 58.736626][ T5849] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 58.743182][ T5848] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 58.750431][ T5849] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 58.756756][ T5850] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 58.764053][ T5849] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 58.772077][ T5850] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 58.788106][ T5849] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 58.798398][ T5850] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 59.223081][ T5830] chnl_net:caif_netlink_parms(): no params data found [ 59.269750][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 59.310888][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 59.334908][ T5829] chnl_net:caif_netlink_parms(): no params data found [ 59.434438][ T5831] chnl_net:caif_netlink_parms(): no params data found [ 59.508283][ T5830] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.518355][ T5830] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.526551][ T5830] bridge_slave_0: entered allmulticast mode [ 59.533929][ T5830] bridge_slave_0: entered promiscuous mode [ 59.541804][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.549122][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.556950][ T5834] bridge_slave_0: entered allmulticast mode [ 59.564134][ T5834] bridge_slave_0: entered promiscuous mode [ 59.579314][ T5829] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.586643][ T5829] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.594013][ T5829] bridge_slave_0: entered allmulticast mode [ 59.600581][ T5829] bridge_slave_0: entered promiscuous mode [ 59.628139][ T5830] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.637637][ T5830] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.645093][ T5830] bridge_slave_1: entered allmulticast mode [ 59.651639][ T5830] bridge_slave_1: entered promiscuous mode [ 59.658973][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.666179][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.673549][ T5834] bridge_slave_1: entered allmulticast mode [ 59.680093][ T5834] bridge_slave_1: entered promiscuous mode [ 59.689589][ T5829] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.696756][ T5829] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.704027][ T5829] bridge_slave_1: entered allmulticast mode [ 59.710598][ T5829] bridge_slave_1: entered promiscuous mode [ 59.725421][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.732573][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.739908][ T5833] bridge_slave_0: entered allmulticast mode [ 59.747177][ T5833] bridge_slave_0: entered promiscuous mode [ 59.788122][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.796231][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.803773][ T5833] bridge_slave_1: entered allmulticast mode [ 59.810384][ T5833] bridge_slave_1: entered promiscuous mode [ 59.837562][ T5829] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.857444][ T5830] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.871255][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 59.896436][ T5829] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.923493][ T5830] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.936314][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 59.945921][ T5831] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.953393][ T5831] bridge0: port 1(bridge_slave_0) entered disabled state [ 59.960552][ T5831] bridge_slave_0: entered allmulticast mode [ 59.967728][ T5831] bridge_slave_0: entered promiscuous mode [ 59.976232][ T5831] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.983446][ T5831] bridge0: port 2(bridge_slave_1) entered disabled state [ 59.990621][ T5831] bridge_slave_1: entered allmulticast mode [ 59.997607][ T5831] bridge_slave_1: entered promiscuous mode [ 60.011964][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.054274][ T5829] team0: Port device team_slave_0 added [ 60.061962][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.095222][ T5831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 60.108021][ T5831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 60.118738][ T5829] team0: Port device team_slave_1 added [ 60.135496][ T5830] team0: Port device team_slave_0 added [ 60.143604][ T5833] team0: Port device team_slave_0 added [ 60.151135][ T5834] team0: Port device team_slave_0 added [ 60.180577][ T5830] team0: Port device team_slave_1 added [ 60.195982][ T5833] team0: Port device team_slave_1 added [ 60.203436][ T5834] team0: Port device team_slave_1 added [ 60.224477][ T5831] team0: Port device team_slave_0 added [ 60.260395][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.268043][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.294993][ T5830] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.307854][ T5831] team0: Port device team_slave_1 added [ 60.317313][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.324536][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.350542][ T5829] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.363567][ T5829] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.370538][ T5829] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.396559][ T5829] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.416801][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.424104][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.450098][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.461711][ T5830] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.469104][ T5830] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.495293][ T5830] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.520293][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.527403][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.553430][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.566098][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.573189][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.599118][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.610758][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.617760][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.643835][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.676842][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 60.686698][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.712843][ T5831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 60.761067][ T5831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 60.768204][ T5831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 60.795024][ T5831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 60.823589][ T5830] hsr_slave_0: entered promiscuous mode [ 60.829808][ T5830] hsr_slave_1: entered promiscuous mode [ 60.834786][ T5850] Bluetooth: hci2: command tx timeout [ 60.835856][ T5849] Bluetooth: hci1: command tx timeout [ 60.841472][ T5840] Bluetooth: hci0: command tx timeout [ 60.856681][ T5833] hsr_slave_0: entered promiscuous mode [ 60.862819][ T5833] hsr_slave_1: entered promiscuous mode [ 60.869387][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.877423][ T5833] Cannot create hsr debugfs directory [ 60.913183][ T5840] Bluetooth: hci4: command tx timeout [ 60.913192][ T5849] Bluetooth: hci3: command tx timeout [ 60.930690][ T5834] hsr_slave_0: entered promiscuous mode [ 60.938712][ T5834] hsr_slave_1: entered promiscuous mode [ 60.944970][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.952580][ T5834] Cannot create hsr debugfs directory [ 60.975253][ T5829] hsr_slave_0: entered promiscuous mode [ 60.983350][ T5829] hsr_slave_1: entered promiscuous mode [ 60.989426][ T5829] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 60.997201][ T5829] Cannot create hsr debugfs directory [ 61.046974][ T5831] hsr_slave_0: entered promiscuous mode [ 61.053384][ T5831] hsr_slave_1: entered promiscuous mode [ 61.059712][ T5831] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 61.067426][ T5831] Cannot create hsr debugfs directory [ 61.366398][ T5833] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 61.386704][ T5833] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 61.408160][ T5833] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 61.430835][ T5833] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 61.443830][ T5834] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 61.457616][ T5834] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 61.476856][ T5834] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 61.492005][ T5834] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 61.531843][ T5830] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 61.549577][ T5830] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 61.568563][ T5830] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 61.586889][ T5830] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 61.647704][ T5831] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 61.658327][ T5831] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 61.670424][ T5831] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 61.679806][ T5831] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 61.688994][ T5829] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 61.706146][ T5829] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 61.717729][ T5829] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 61.743762][ T5829] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 61.865350][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.899790][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 61.964864][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.976467][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 61.987468][ T5831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.014586][ T5829] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.025634][ T5830] 8021q: adding VLAN 0 to HW filter on device bond0 [ 62.041961][ T52] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.049499][ T52] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.059970][ T52] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.067100][ T52] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.085296][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.092710][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.109555][ T5829] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.138792][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.145958][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.161600][ T5830] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.188606][ T3033] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.195764][ T3033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.209954][ T3033] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.217105][ T3033] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.226274][ T3033] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.233407][ T3033] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.249412][ T5831] 8021q: adding VLAN 0 to HW filter on device team0 [ 62.273611][ T2950] bridge0: port 1(bridge_slave_0) entered blocking state [ 62.280754][ T2950] bridge0: port 1(bridge_slave_0) entered forwarding state [ 62.292199][ T2950] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.299494][ T2950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.318642][ T3012] bridge0: port 2(bridge_slave_1) entered blocking state [ 62.325795][ T3012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 62.378981][ T5829] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.552816][ T5830] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 62.770548][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.839174][ T5829] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.868352][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.914318][ T5840] Bluetooth: hci0: command tx timeout [ 62.918434][ T5849] Bluetooth: hci2: command tx timeout [ 62.925924][ T5840] Bluetooth: hci1: command tx timeout [ 62.951974][ T5831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.980499][ T5834] veth0_vlan: entered promiscuous mode [ 62.991200][ T5830] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 62.998972][ T5840] Bluetooth: hci4: command tx timeout [ 63.004666][ T5840] Bluetooth: hci3: command tx timeout [ 63.022860][ T5829] veth0_vlan: entered promiscuous mode [ 63.036203][ T5834] veth1_vlan: entered promiscuous mode [ 63.068942][ T5831] veth0_vlan: entered promiscuous mode [ 63.088603][ T5831] veth1_vlan: entered promiscuous mode [ 63.104540][ T5829] veth1_vlan: entered promiscuous mode [ 63.111888][ T5834] veth0_macvtap: entered promiscuous mode [ 63.136409][ T5834] veth1_macvtap: entered promiscuous mode [ 63.170091][ T5833] veth0_vlan: entered promiscuous mode [ 63.179444][ T5829] veth0_macvtap: entered promiscuous mode [ 63.217667][ T5829] veth1_macvtap: entered promiscuous mode [ 63.230063][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.240248][ T5833] veth1_vlan: entered promiscuous mode [ 63.262442][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.291341][ T5831] veth0_macvtap: entered promiscuous mode [ 63.311186][ T5834] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.324526][ T5834] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.334910][ T5834] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.344141][ T5834] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.357505][ T5831] veth1_macvtap: entered promiscuous mode [ 63.373724][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.385094][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.397006][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.427931][ T5833] veth0_macvtap: entered promiscuous mode [ 63.437064][ T5829] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.448199][ T5829] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.460125][ T5829] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.469242][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.481369][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.491641][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.502546][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.514657][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.529650][ T5833] veth1_macvtap: entered promiscuous mode [ 63.545574][ T5829] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.555626][ T5829] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.566663][ T5829] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.575724][ T5829] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.612767][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.626718][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.636818][ T5831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.648629][ T5831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.659727][ T5831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.672587][ T5831] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.686193][ T5831] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.695224][ T5831] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.704058][ T5831] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.755264][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.766106][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.777387][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.787969][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.798792][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 63.809362][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.820480][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 63.869434][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.870284][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.893298][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.900279][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.910855][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.921686][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.931606][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 63.942171][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 63.953571][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 63.983569][ T5833] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.992314][ T5833] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.007044][ T5833] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.015932][ T5833] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.027598][ T5830] veth0_vlan: entered promiscuous mode [ 64.054051][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.061875][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.096698][ T2982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.099657][ T5830] veth1_vlan: entered promiscuous mode [ 64.112541][ T2982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.190029][ T2950] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.207833][ T5834] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 64.211526][ T2950] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.231951][ T2982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.240159][ T2982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.284050][ T5830] veth0_macvtap: entered promiscuous mode [ 64.315815][ T5830] veth1_macvtap: entered promiscuous mode [ 64.362585][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.372564][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.427097][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.454731][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.468074][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.480489][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.490670][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.501330][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.511505][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 64.539188][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.549996][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 64.566781][ T81] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.579484][ T81] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.602113][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.619812][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.630757][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.652382][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.662373][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.682722][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.699648][ T5830] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 64.711199][ T5830] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 64.748558][ T5930] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 64.756651][ T5830] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 64.808421][ T5830] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.835624][ T5830] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.845958][ T5830] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.854926][ T5830] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 64.867838][ T52] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 64.871407][ T5930] tipc: Started in network mode [ 64.881629][ T52] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 64.889203][ T5930] tipc: Node identity aaaaaaaaaa41, cluster identity 4711 [ 64.906345][ T5930] tipc: Enabled bearer , priority 10 [ 64.996515][ T5840] Bluetooth: hci2: command tx timeout [ 64.997772][ T5849] Bluetooth: hci1: command tx timeout [ 65.001951][ T5840] Bluetooth: hci0: command tx timeout [ 65.015083][ T5935] netlink: 16 bytes leftover after parsing attributes in process `syz.1.8'. [ 65.074237][ T5849] Bluetooth: hci4: command tx timeout [ 65.079713][ T5849] Bluetooth: hci3: command tx timeout [ 65.096070][ T5935] Zero length message leads to an empty skb [ 65.206773][ T35] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.263333][ T35] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.360352][ T5945] netlink: 20 bytes leftover after parsing attributes in process `syz.1.10'. [ 65.387665][ T2982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 65.396710][ T2982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 65.462435][ T5951] syz.0.11 uses obsolete (PF_INET,SOCK_PACKET) [ 65.588848][ T5954] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 65.723499][ T5954] lo: entered allmulticast mode [ 65.817616][ T5954] pimreg: entered allmulticast mode [ 66.109132][ T5883] tipc: Node number set to 15444650 [ 67.009343][ T5957] pimreg: left allmulticast mode [ 67.161653][ T5957] lo: left allmulticast mode [ 67.198124][ T5849] Bluetooth: hci0: command tx timeout [ 67.229037][ T5849] Bluetooth: hci2: command tx timeout [ 67.242626][ T5849] Bluetooth: hci1: command tx timeout [ 67.255864][ T5849] Bluetooth: hci4: command tx timeout [ 67.261307][ T5849] Bluetooth: hci3: command tx timeout [ 68.243933][ T5954] sit0: entered promiscuous mode [ 68.262109][ T5964] netlink: 32 bytes leftover after parsing attributes in process `syz.1.15'. [ 68.286914][ T5954] netlink: 'syz.3.13': attribute type 1 has an invalid length. [ 68.333884][ T5954] netlink: 1 bytes leftover after parsing attributes in process `syz.3.13'. [ 68.517997][ T5987] warning: `syz.1.19' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 68.678902][ T5991] netlink: 12 bytes leftover after parsing attributes in process `syz.4.21'. [ 68.709988][ T5996] Bluetooth: MGMT ver 1.23 [ 68.741980][ T5994] netlink: 'syz.3.20': attribute type 21 has an invalid length. [ 68.789058][ T5994] netlink: 132 bytes leftover after parsing attributes in process `syz.3.20'. [ 68.809228][ T6001] netlink: 40 bytes leftover after parsing attributes in process `syz.0.23'. [ 68.825156][ T6001] ip_vti0: entered promiscuous mode [ 68.830514][ T6001] ip_vti0: entered allmulticast mode [ 69.078019][ T6020] netlink: 'syz.4.28': attribute type 11 has an invalid length. [ 69.601167][ T6039] netlink: 'syz.2.33': attribute type 4 has an invalid length. [ 69.799330][ T2982] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 69.994185][ T6022] veth0_to_team: entered promiscuous mode [ 70.006733][ T6022] veth0_to_team: entered allmulticast mode [ 70.073074][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 70.083220][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 70.091050][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 70.099601][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 70.107761][ T5849] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 70.116686][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 70.196504][ T2982] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.454447][ T2982] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.667421][ T6063] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 70.762100][ T2982] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 70.766225][ T5849] Bluetooth: hci0: command tx timeout [ 70.840534][ T6071] €Â: renamed from syzkaller0 [ 70.961841][ T6069] bridge0: port 1(bridge_slave_0) entered disabled state [ 70.984922][ T6069] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.113695][ T6083] netlink: 'syz.0.45': attribute type 2 has an invalid length. [ 71.207534][ T6088] netlink: 40 bytes leftover after parsing attributes in process `syz.2.46'. [ 71.232428][ T6089] netlink: 20 bytes leftover after parsing attributes in process `syz.0.45'. [ 71.280609][ T6083] fþ: entered promiscuous mode [ 71.474971][ T2982] bridge_slave_1: left allmulticast mode [ 71.480894][ T2982] bridge_slave_1: left promiscuous mode [ 71.545846][ T2982] bridge0: port 2(bridge_slave_1) entered disabled state [ 71.567294][ T1296] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.573980][ T1296] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.595690][ T2982] bridge_slave_0: left allmulticast mode [ 71.607306][ T2982] bridge_slave_0: left promiscuous mode [ 71.614424][ T2982] bridge0: port 1(bridge_slave_0) entered disabled state [ 72.015926][ T2982] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 72.028360][ T2982] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 72.039906][ T2982] bond0 (unregistering): Released all slaves [ 72.057770][ T6046] chnl_net:caif_netlink_parms(): no params data found [ 72.201581][ T5849] Bluetooth: hci1: command tx timeout [ 72.365495][ T6132] netlink: 604 bytes leftover after parsing attributes in process `syz.0.54'. [ 72.485143][ T6128] netlink: 28 bytes leftover after parsing attributes in process `syz.3.55'. [ 72.504729][ T6128] netlink: 28 bytes leftover after parsing attributes in process `syz.3.55'. [ 72.517623][ T6131] netlink: 28 bytes leftover after parsing attributes in process `syz.3.55'. [ 72.530169][ T6131] netlink: 28 bytes leftover after parsing attributes in process `syz.3.55'. [ 72.739708][ T6155] netlink: 'syz.2.57': attribute type 10 has an invalid length. [ 72.762217][ T6151] netlink: 'syz.3.60': attribute type 4 has an invalid length. [ 72.916578][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 73.005813][ T6155] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 73.043394][ T6046] bridge0: port 1(bridge_slave_0) entered blocking state [ 73.055199][ T6046] bridge0: port 1(bridge_slave_0) entered disabled state [ 73.074852][ T6046] bridge_slave_0: entered allmulticast mode [ 73.100199][ T6046] bridge_slave_0: entered promiscuous mode [ 73.139900][ T6046] bridge0: port 2(bridge_slave_1) entered blocking state [ 73.184488][ T6046] bridge0: port 2(bridge_slave_1) entered disabled state [ 73.221453][ T6046] bridge_slave_1: entered allmulticast mode [ 73.255493][ T6046] bridge_slave_1: entered promiscuous mode [ 73.288276][ T6156] netlink: 'syz.1.58': attribute type 12 has an invalid length. [ 73.307085][ T6156] netlink: 132 bytes leftover after parsing attributes in process `syz.1.58'. [ 73.445127][ T2982] hsr_slave_0: left promiscuous mode [ 73.480616][ T2982] hsr_slave_1: left promiscuous mode [ 73.639541][ T2982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 73.688283][ T2982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 73.784651][ T6177] netlink: 64 bytes leftover after parsing attributes in process `syz.2.66'. [ 73.804621][ T2982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 73.812103][ T2982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 73.820617][ T6179] netlink: 'syz.1.67': attribute type 13 has an invalid length. [ 73.885300][ T6187] netlink: 8 bytes leftover after parsing attributes in process `syz.3.68'. [ 73.932721][ T2982] veth1_macvtap: left promiscuous mode [ 73.958211][ T2982] veth0_macvtap: left promiscuous mode [ 73.967373][ T2982] veth1_vlan: left promiscuous mode [ 73.983278][ T2982] veth0_vlan: left promiscuous mode [ 74.277457][ T5849] Bluetooth: hci1: command tx timeout [ 74.559856][ T2982] team0 (unregistering): Port device team_slave_1 removed [ 74.600609][ T2982] team0 (unregistering): Port device team_slave_0 removed [ 74.907621][ T6179] macvtap0: entered promiscuous mode [ 74.914426][ T6179] macvtap0: refused to change device tx_queue_len [ 75.076661][ T6046] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.136237][ T6046] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 75.275164][ T6222] netlink: 'syz.0.71': attribute type 10 has an invalid length. [ 75.345971][ T6046] team0: Port device team_slave_0 added [ 75.477079][ T6222] team0: Port device wlan1 added [ 75.484131][ T6046] team0: Port device team_slave_1 added [ 75.531229][ T6046] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 75.573111][ T6046] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.654911][ T6046] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 75.737837][ T6046] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 75.751624][ T6046] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 75.827682][ T6046] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.045565][ T6046] hsr_slave_0: entered promiscuous mode [ 76.153817][ T6046] hsr_slave_1: entered promiscuous mode [ 76.257279][ T6270] openvswitch: netlink: Key 22 has unexpected len 2 expected 4 [ 76.354034][ T5849] Bluetooth: hci1: command tx timeout [ 76.465707][ T6276] netlink: 'syz.3.86': attribute type 1 has an invalid length. [ 76.550612][ T6278] netlink: 'syz.1.88': attribute type 5 has an invalid length. [ 76.737877][ T6292] IPVS: set_ctl: invalid protocol: 0 127.0.0.1:20000 [ 76.983130][ T6297] __nla_validate_parse: 5 callbacks suppressed [ 76.983150][ T6297] netlink: 24 bytes leftover after parsing attributes in process `syz.2.93'. [ 77.014066][ T6303] netlink: 372 bytes leftover after parsing attributes in process `syz.3.94'. [ 77.476290][ T6316] batman_adv: batadv0: Adding interface: dummy0 [ 77.492988][ T6316] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.598255][ T6316] batman_adv: batadv0: Interface activated: dummy0 [ 77.804828][ T6324] Driver unsupported XDP return value 0 on prog (id 37) dev N/A, expect packet loss! [ 78.358187][ T6346] bond0: entered allmulticast mode [ 78.367379][ T6346] bond_slave_0: entered allmulticast mode [ 78.374061][ T6346] bond_slave_1: entered allmulticast mode [ 78.433424][ T5849] Bluetooth: hci1: command tx timeout [ 78.590774][ T6355] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input6 [ 78.668992][ T6046] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 78.719103][ T6046] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 78.769267][ T6046] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 78.858181][ T6046] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 79.090467][ T6369] vcan0: tx drop: invalid da for name 0x0000000000000005 [ 79.100174][ T6046] 8021q: adding VLAN 0 to HW filter on device bond0 [ 79.151461][ T6046] 8021q: adding VLAN 0 to HW filter on device team0 [ 79.251918][ T3012] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.259119][ T3012] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.309096][ T6374] netlink: 'syz.1.110': attribute type 21 has an invalid length. [ 79.538821][ T6383] netlink: 4 bytes leftover after parsing attributes in process `syz.1.111'. [ 79.563915][ T3012] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.571130][ T3012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.634193][ T6383] bridge_slave_1: left allmulticast mode [ 79.639884][ T6383] bridge_slave_1: left promiscuous mode [ 79.695269][ T6383] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.710906][ T6391] netlink: 'syz.3.113': attribute type 10 has an invalid length. [ 79.719999][ T6383] bridge_slave_0: left allmulticast mode [ 79.732205][ T6383] bridge_slave_0: left promiscuous mode [ 79.743400][ T6383] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.746157][ T5840] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.759932][ T5840] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.767914][ T5840] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.787121][ T5840] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.810256][ T5840] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.818688][ T5840] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.923308][ T6391] bridge0: port 2(bridge_slave_1) entered disabled state [ 79.931364][ T6391] bridge0: port 1(bridge_slave_0) entered disabled state [ 79.948797][ T6391] bridge0: port 2(bridge_slave_1) entered blocking state [ 79.955998][ T6391] bridge0: port 2(bridge_slave_1) entered forwarding state [ 79.963467][ T6391] bridge0: port 1(bridge_slave_0) entered blocking state [ 79.970611][ T6391] bridge0: port 1(bridge_slave_0) entered forwarding state [ 79.982727][ T6391] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 80.190077][ T6406] netlink: 'syz.0.114': attribute type 11 has an invalid length. [ 80.267267][ T6406] netlink: 8 bytes leftover after parsing attributes in process `syz.0.114'. [ 80.620092][ T6046] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 80.655615][ T6393] chnl_net:caif_netlink_parms(): no params data found [ 80.994582][ T6393] bridge0: port 1(bridge_slave_0) entered blocking state [ 81.012231][ T6393] bridge0: port 1(bridge_slave_0) entered disabled state [ 81.035060][ T6393] bridge_slave_0: entered allmulticast mode [ 81.042107][ T6393] bridge_slave_0: entered promiscuous mode [ 81.052554][ T6393] bridge0: port 2(bridge_slave_1) entered blocking state [ 81.059767][ T6393] bridge0: port 2(bridge_slave_1) entered disabled state [ 81.067810][ T6393] bridge_slave_1: entered allmulticast mode [ 81.075112][ T6393] bridge_slave_1: entered promiscuous mode [ 81.198350][ T6393] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.235582][ T6393] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.317806][ T6393] team0: Port device team_slave_0 added [ 81.387582][ T6393] team0: Port device team_slave_1 added [ 81.431786][ T6046] veth0_vlan: entered promiscuous mode [ 81.483155][ T6393] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.490161][ T6393] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.520194][ T6393] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.541188][ T6393] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.549520][ T6480] IPVS: set_ctl: invalid protocol: 135 224.0.0.2:20000 [ 81.569371][ T6393] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.596934][ T6393] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.665649][ T6046] veth1_vlan: entered promiscuous mode [ 81.666421][ T6485] netlink: 'syz.0.127': attribute type 10 has an invalid length. [ 81.825958][ T976] cfg80211: failed to load regulatory.db [ 81.873367][ T5849] Bluetooth: hci2: command tx timeout [ 81.912577][ T6393] hsr_slave_0: entered promiscuous mode [ 81.957302][ T6393] hsr_slave_1: entered promiscuous mode [ 81.978748][ T6393] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.983764][ T6501] netlink: 'syz.3.128': attribute type 3 has an invalid length. [ 81.994632][ T6393] Cannot create hsr debugfs directory [ 82.003830][ T6501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.128'. [ 82.035572][ T6046] veth0_macvtap: entered promiscuous mode [ 82.083646][ T6501] netlink: 'syz.3.128': attribute type 3 has an invalid length. [ 82.110049][ T6501] netlink: 8 bytes leftover after parsing attributes in process `syz.3.128'. [ 82.154059][ T6046] veth1_macvtap: entered promiscuous mode [ 82.208914][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.227532][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.241148][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.280099][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.323120][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.356170][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.402985][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 82.433212][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.469027][ T6046] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 82.509745][ T46] IPVS: starting estimator thread 0... [ 82.522251][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.549719][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.590968][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.625417][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.635522][ T6526] IPVS: using max 20 ests per chain, 48000 per kthread [ 82.671330][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.701074][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.721502][ T6046] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 82.755224][ T6046] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 82.784170][ T6046] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 82.811387][ T6046] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.831182][ T6046] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.836720][ T5849] Bluetooth: hci0: command 0x0c1a tx timeout [ 82.840519][ T6046] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 82.846356][ T5840] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 82.855288][ T6046] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 83.196427][ T6393] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.259702][ T6546] netlink: 32 bytes leftover after parsing attributes in process `syz.0.137'. [ 83.268895][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.287186][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.370968][ T6393] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.406310][ T2950] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 83.422211][ T2950] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 83.524661][ T6393] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.582185][ T6554] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744071562067969) [ 83.620091][ T6554] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 83.705011][ T6393] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 83.969919][ T5840] Bluetooth: hci2: command tx timeout [ 83.998223][ T6557] infiniband syz!: set down [ 84.004932][ T6557] infiniband syz!: added team_slave_0 [ 84.012884][ T6557] syz!: rxe_create_cq: returned err = -12 [ 84.019648][ T6557] infiniband syz!: Couldn't create ib_mad CQ [ 84.026244][ T6557] infiniband syz!: Couldn't open port 1 [ 84.049244][ T6557] RDS/IB: syz!: added [ 84.054076][ T6557] smc: adding ib device syz! with port count 1 [ 84.065565][ T6557] smc: ib device syz! port 1 has pnetid [ 84.146005][ T2982] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.203001][ T6393] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 84.274933][ T6393] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 84.316703][ T6393] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 84.347848][ T6393] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 84.431541][ T2982] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.512468][ T6571] xt_l2tp: v2 sid > 0xffff: 262144 [ 84.789760][ T5849] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 84.799108][ T5849] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 84.809027][ T5849] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 84.818901][ T2982] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.854366][ T5849] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 84.866312][ T5849] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 84.876463][ T5849] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 84.904479][ T2982] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 84.966687][ T6393] 8021q: adding VLAN 0 to HW filter on device bond0 [ 85.091988][ T6393] 8021q: adding VLAN 0 to HW filter on device team0 [ 85.154697][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 85.161892][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 85.212537][ T2950] bridge0: port 2(bridge_slave_1) entered blocking state [ 85.219712][ T2950] bridge0: port 2(bridge_slave_1) entered forwarding state [ 85.321457][ T2982] bridge_slave_1: left allmulticast mode [ 85.338551][ T2982] bridge_slave_1: left promiscuous mode [ 85.350779][ T2982] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.361250][ T2982] bridge_slave_0: left allmulticast mode [ 85.383136][ T2982] bridge_slave_0: left promiscuous mode [ 85.389029][ T2982] bridge0: port 1(bridge_slave_0) entered disabled state [ 85.795504][ T2982] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 85.807482][ T2982] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 85.817959][ T2982] bond0 (unregistering): Released all slaves [ 86.033419][ T5840] Bluetooth: hci2: command tx timeout [ 86.157157][ T6603] x_tables: duplicate underflow at hook 2 [ 86.226719][ T6607] netlink: 'syz.0.151': attribute type 1 has an invalid length. [ 86.265542][ T6393] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 86.379534][ T6393] veth0_vlan: entered promiscuous mode [ 86.422608][ T6393] veth1_vlan: entered promiscuous mode [ 86.503877][ T6393] veth0_macvtap: entered promiscuous mode [ 86.551925][ T6393] veth1_macvtap: entered promiscuous mode [ 86.761325][ T6393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.823117][ T6393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.861034][ T6393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.907158][ T6393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.943826][ T6393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 86.984872][ T6393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.993588][ T5840] Bluetooth: hci1: command tx timeout [ 86.995797][ T6557] syz.1.141 (6557) used greatest stack depth: 18768 bytes left [ 87.007939][ T6393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.041184][ T6393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.060148][ T6393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 87.080861][ T6393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 87.094681][ T6393] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 87.114170][ T2982] hsr_slave_0: left promiscuous mode [ 87.125228][ T2982] hsr_slave_1: left promiscuous mode [ 87.164798][ T2982] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 87.179525][ T2982] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 87.190841][ T2982] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 87.198506][ T2982] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 87.229642][ T2982] veth1_macvtap: left promiscuous mode [ 87.235388][ T2982] veth0_macvtap: left promiscuous mode [ 87.242020][ T2982] veth1_vlan: left promiscuous mode [ 87.254246][ T2982] veth0_vlan: left promiscuous mode [ 87.870209][ T2982] team0 (unregistering): Port device team_slave_1 removed [ 87.921078][ T2982] team0 (unregistering): Port device team_slave_0 removed [ 88.113443][ T5840] Bluetooth: hci2: command tx timeout [ 88.518050][ T6575] chnl_net:caif_netlink_parms(): no params data found [ 88.556094][ T6393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.581247][ T6393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.601612][ T6393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.620443][ T6393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.631691][ T6393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.642253][ T6393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.652184][ T6393] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 88.663008][ T6393] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 88.673899][ T6393] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 88.685118][ T6393] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.694147][ T6393] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.703288][ T6393] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 88.711996][ T6393] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 89.082036][ T5840] Bluetooth: hci1: command tx timeout [ 89.144587][ T6575] bridge0: port 1(bridge_slave_0) entered blocking state [ 89.189093][ T6575] bridge0: port 1(bridge_slave_0) entered disabled state [ 89.203397][ T6575] bridge_slave_0: entered allmulticast mode [ 89.210832][ T6575] bridge_slave_0: entered promiscuous mode [ 89.259531][ T6575] bridge0: port 2(bridge_slave_1) entered blocking state [ 89.266921][ T6575] bridge0: port 2(bridge_slave_1) entered disabled state [ 89.283539][ T6575] bridge_slave_1: entered allmulticast mode [ 89.290961][ T6575] bridge_slave_1: entered promiscuous mode [ 89.315844][ T52] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.330711][ T2972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 89.338987][ T2972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.347644][ T52] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 89.394437][ T6575] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 89.420279][ T6575] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 89.630942][ T6575] team0: Port device team_slave_0 added [ 89.651052][ T6575] team0: Port device team_slave_1 added [ 89.741966][ T6575] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.749834][ T6575] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.803996][ T6575] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.834772][ T6575] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.862157][ T6575] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.909980][ T6575] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.980382][ T6575] hsr_slave_0: entered promiscuous mode [ 89.993271][ T6575] hsr_slave_1: entered promiscuous mode [ 90.327720][ T52] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.456766][ T52] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.626683][ T52] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.875053][ T52] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.942790][ T6575] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 90.986325][ T6575] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 91.023516][ T6575] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 91.063736][ T6575] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 91.153111][ T5840] Bluetooth: hci1: command tx timeout [ 91.285907][ T52] bridge_slave_1: left allmulticast mode [ 91.301805][ T52] bridge_slave_1: left promiscuous mode [ 91.312849][ T52] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.411024][ T5849] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 91.411976][ T52] bridge_slave_0: left allmulticast mode [ 91.434753][ T5849] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 91.439709][ T52] bridge_slave_0: left promiscuous mode [ 91.453207][ T52] bridge0: port 1(bridge_slave_0) entered disabled state [ 91.459840][ T5849] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 91.470144][ T5849] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 91.478334][ T5849] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 91.485864][ T5849] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 91.947717][ T52] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 91.971144][ T52] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 92.004547][ T52] bond0 (unregistering): Released all slaves [ 92.216416][ T6575] 8021q: adding VLAN 0 to HW filter on device bond0 [ 92.359892][ T6575] 8021q: adding VLAN 0 to HW filter on device team0 [ 92.375017][ T6711] netlink: 72 bytes leftover after parsing attributes in process `syz.0.172'. [ 92.402491][ T2972] bridge0: port 1(bridge_slave_0) entered blocking state [ 92.409663][ T2972] bridge0: port 1(bridge_slave_0) entered forwarding state [ 92.485935][ T3012] bridge0: port 2(bridge_slave_1) entered blocking state [ 92.493139][ T3012] bridge0: port 2(bridge_slave_1) entered forwarding state [ 93.114367][ T52] hsr_slave_0: left promiscuous mode [ 93.145564][ T52] hsr_slave_1: left promiscuous mode [ 93.174528][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 93.188781][ T52] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 93.218902][ T52] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 93.229468][ T2950] tipc: Subscription rejected, illegal request [ 93.234071][ T5849] Bluetooth: hci1: command tx timeout [ 93.244545][ T52] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 93.262450][ T6726] netlink: 4 bytes leftover after parsing attributes in process `syz.3.177'. [ 93.286683][ T52] veth1_macvtap: left promiscuous mode [ 93.292240][ T52] veth0_macvtap: left promiscuous mode [ 93.298001][ T52] veth1_vlan: left promiscuous mode [ 93.303400][ T52] veth0_vlan: left promiscuous mode [ 93.553988][ T5849] Bluetooth: hci2: command tx timeout [ 93.993143][ T52] team0 (unregistering): Port device team_slave_1 removed [ 94.028635][ T52] team0 (unregistering): Port device team_slave_0 removed [ 94.343832][ T6694] chnl_net:caif_netlink_parms(): no params data found [ 94.358980][ T6744] netlink: 8 bytes leftover after parsing attributes in process `syz.1.182'. [ 94.598644][ T6758] netlink: 16 bytes leftover after parsing attributes in process `syz.1.184'. [ 94.690074][ T6767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 94.693725][ T6575] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 94.748390][ T6694] bridge0: port 1(bridge_slave_0) entered blocking state [ 94.756895][ T6694] bridge0: port 1(bridge_slave_0) entered disabled state [ 94.764229][ T6694] bridge_slave_0: entered allmulticast mode [ 94.785960][ T6694] bridge_slave_0: entered promiscuous mode [ 94.799929][ T6694] bridge0: port 2(bridge_slave_1) entered blocking state [ 94.808839][ T6694] bridge0: port 2(bridge_slave_1) entered disabled state [ 94.826570][ T6694] bridge_slave_1: entered allmulticast mode [ 94.836761][ T6694] bridge_slave_1: entered promiscuous mode [ 94.866224][ T6773] netlink: 28 bytes leftover after parsing attributes in process `syz.1.189'. [ 94.868075][ T6694] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 94.897769][ T6694] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 95.009299][ T6694] team0: Port device team_slave_0 added [ 95.035621][ T6694] team0: Port device team_slave_1 added [ 95.098293][ T6694] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 95.107198][ T6694] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.133688][ T6694] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 95.147639][ T6694] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 95.155491][ T6694] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 95.181887][ T6694] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 95.247592][ T6694] hsr_slave_0: entered promiscuous mode [ 95.255822][ T6694] hsr_slave_1: entered promiscuous mode [ 95.262487][ T6694] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 95.270656][ T6694] Cannot create hsr debugfs directory [ 95.300072][ T6575] veth0_vlan: entered promiscuous mode [ 95.373445][ T6575] veth1_vlan: entered promiscuous mode [ 95.478143][ T6575] veth0_macvtap: entered promiscuous mode [ 95.508569][ T6575] veth1_macvtap: entered promiscuous mode [ 95.525317][ T6575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.536039][ T6575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.546076][ T6575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.560024][ T6575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.571163][ T6575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.583858][ T6575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.593830][ T6575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 95.607884][ T6575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.620757][ T6575] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 95.633801][ T5849] Bluetooth: hci2: command tx timeout [ 95.668119][ T6575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.679661][ T6575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.690003][ T6575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.700785][ T6575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.710721][ T6575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.722447][ T6575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.732371][ T6575] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 95.747038][ T6575] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 95.753248][ T6791] netlink: 76 bytes leftover after parsing attributes in process `syz.0.193'. [ 95.762201][ T6575] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 95.777939][ T6794] netlink: 32 bytes leftover after parsing attributes in process `syz.1.194'. [ 95.791033][ T6575] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.800229][ T6575] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.809496][ T6575] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.818251][ T6575] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 95.994994][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.008231][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.062899][ T2972] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 96.072302][ T2972] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 96.081007][ T6694] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 96.098531][ T6694] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 96.123990][ T6694] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 96.139482][ T6694] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 96.259641][ T6805] netlink: 36 bytes leftover after parsing attributes in process `syz.1.197'. [ 96.326981][ T6694] 8021q: adding VLAN 0 to HW filter on device bond0 [ 96.351519][ T6694] 8021q: adding VLAN 0 to HW filter on device team0 [ 96.381691][ T2982] bridge0: port 1(bridge_slave_0) entered blocking state [ 96.388889][ T2982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 96.422071][ T2982] bridge0: port 2(bridge_slave_1) entered blocking state [ 96.429251][ T2982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 96.609638][ T6813] netlink: 'syz.0.200': attribute type 10 has an invalid length. [ 96.622545][ T3012] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.628178][ T6813] netlink: 40 bytes leftover after parsing attributes in process `syz.0.200'. [ 96.683313][ T6813] bridge0: port 3(batadv0) entered blocking state [ 96.691286][ T6813] bridge0: port 3(batadv0) entered disabled state [ 96.704943][ T6813] batadv0: entered allmulticast mode [ 96.716199][ T6813] batadv0: entered promiscuous mode [ 96.724194][ T3033] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 96.733946][ T3033] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 96.763627][ T6813] bridge0: port 3(batadv0) entered blocking state [ 96.770497][ T6813] bridge0: port 3(batadv0) entered forwarding state [ 96.835090][ T3012] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.899758][ T6694] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 96.985978][ T3012] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.121007][ T3012] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 97.187818][ T6828] netlink: 'syz.0.203': attribute type 4 has an invalid length. [ 97.209855][ T6694] veth0_vlan: entered promiscuous mode [ 97.222636][ T5840] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 97.232294][ T5840] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 97.239359][ T6834] netlink: 'syz.0.203': attribute type 4 has an invalid length. [ 97.253046][ T5840] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 97.262563][ T5840] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 97.279622][ T5840] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 97.287621][ T5840] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 97.308818][ T6694] veth1_vlan: entered promiscuous mode [ 97.615602][ T3012] bridge_slave_1: left allmulticast mode [ 97.626644][ T3012] bridge_slave_1: left promiscuous mode [ 97.632523][ T3012] bridge0: port 2(bridge_slave_1) entered disabled state [ 97.645957][ T3012] bridge_slave_0: left allmulticast mode [ 97.651623][ T3012] bridge_slave_0: left promiscuous mode [ 97.660793][ T3012] bridge0: port 1(bridge_slave_0) entered disabled state [ 97.713194][ T5840] Bluetooth: hci2: command tx timeout [ 97.844682][ T6859] netlink: 'syz.1.208': attribute type 10 has an invalid length. [ 98.097717][ T3012] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 98.108631][ T3012] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 98.120194][ T3012] bond0 (unregistering): Released all slaves [ 98.171049][ T6859] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 98.189826][ T6859] team0: Port device batadv0 added [ 98.216430][ T6694] veth0_macvtap: entered promiscuous mode [ 98.341811][ T6694] veth1_macvtap: entered promiscuous mode [ 98.406471][ T6872] netlink: 1 bytes leftover after parsing attributes in process `syz.3.211'. [ 98.432624][ T6869] netlink: 'syz.1.210': attribute type 5 has an invalid length. [ 98.470513][ T6868] netlink: 'syz.1.210': attribute type 5 has an invalid length. [ 98.526694][ T6694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.535009][ T6881] netlink: 32 bytes leftover after parsing attributes in process `syz.0.212'. [ 98.539103][ T6694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.556279][ T6694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.566939][ T6694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.578197][ T6694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.588745][ T6694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.598860][ T6694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.609327][ T6694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.619321][ T6694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 98.629906][ T6694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.641689][ T6694] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 98.678062][ T6881] netlink: 32 bytes leftover after parsing attributes in process `syz.0.212'. [ 98.696582][ T6874] IPv6: sit1: Disabled Multicast RS [ 98.711477][ T6868] ip6erspan0: entered promiscuous mode [ 98.764349][ T6882] tipc: Enabling of bearer rejected, failed to enable media [ 98.780423][ T6885] netlink: 'syz.3.213': attribute type 3 has an invalid length. [ 98.790329][ T6694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.811583][ T6694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.831633][ T6694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.862560][ T6694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.887415][ T6694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.901771][ T6889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.216'. [ 98.920236][ T6694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.934402][ T6694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.945990][ T6694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 98.962397][ T6694] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 98.974842][ T6694] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 99.004053][ T6694] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 99.044322][ T6889] netlink: 'syz.0.216': attribute type 1 has an invalid length. [ 99.068243][ T6889] netlink: 4 bytes leftover after parsing attributes in process `syz.0.216'. [ 99.134688][ T6694] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.144272][ T6694] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.153642][ T6694] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.162401][ T6694] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 99.196310][ T6908] netlink: 'syz.1.218': attribute type 10 has an invalid length. [ 99.210954][ T6831] chnl_net:caif_netlink_parms(): no params data found [ 99.238289][ T6889] tun0: tun_chr_ioctl cmd 1074812117 [ 99.302703][ T6908] mac80211_hwsim hwsim4 wlan1: entered allmulticast mode [ 99.311401][ T6908] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 99.363642][ T3012] hsr_slave_0: left promiscuous mode [ 99.381966][ T3012] hsr_slave_1: left promiscuous mode [ 99.398799][ T5840] Bluetooth: hci1: command tx timeout [ 99.423086][ T3012] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 99.430561][ T3012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 99.496622][ T6915] netlink: 372 bytes leftover after parsing attributes in process `syz.1.219'. [ 99.506637][ T3012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.514208][ T3012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 99.538930][ T3012] veth1_macvtap: left promiscuous mode [ 99.544742][ T3012] veth0_macvtap: left promiscuous mode [ 99.550370][ T3012] veth1_vlan: left promiscuous mode [ 99.560616][ T3012] veth0_vlan: left promiscuous mode [ 99.793250][ T5840] Bluetooth: hci2: command tx timeout [ 100.059586][ T3012] team0 (unregistering): Port device team_slave_1 removed [ 100.101166][ T3012] team0 (unregistering): Port device team_slave_0 removed [ 100.581261][ T11] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.585755][ T6925] netlink: 'syz.1.222': attribute type 9 has an invalid length. [ 100.599282][ T11] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.644534][ T6925] netlink: 8 bytes leftover after parsing attributes in process `syz.1.222'. [ 100.709399][ T6932] netlink: 12 bytes leftover after parsing attributes in process `syz.3.224'. [ 100.743395][ T2982] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 100.751628][ T6933] netlink: 32 bytes leftover after parsing attributes in process `syz.1.222'. [ 100.761698][ T2982] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 100.771922][ T6933] netem: unknown loss type 13 [ 100.780473][ T6933] netem: change failed [ 100.829290][ T6939] xt_l2tp: unknown flags: 10 [ 100.855554][ T6831] bridge0: port 1(bridge_slave_0) entered blocking state [ 100.864653][ T6831] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.871923][ T6831] bridge_slave_0: entered allmulticast mode [ 100.885556][ T6831] bridge_slave_0: entered promiscuous mode [ 100.894746][ T6831] bridge0: port 2(bridge_slave_1) entered blocking state [ 100.902038][ T6831] bridge0: port 2(bridge_slave_1) entered disabled state [ 100.934704][ T6831] bridge_slave_1: entered allmulticast mode [ 100.960028][ T6831] bridge_slave_1: entered promiscuous mode [ 101.098247][ T6831] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 101.123831][ T6946] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bridge, syncid = 0, id = 0 [ 101.136352][ T6831] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 101.147418][ T6947] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 101.235233][ T6831] team0: Port device team_slave_0 added [ 101.243531][ T6831] team0: Port device team_slave_1 added [ 101.299270][ T6831] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 101.309612][ T6831] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.341441][ T6831] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 101.363888][ T6952] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 101.377147][ T6952] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 101.386535][ T6831] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 101.394891][ T6831] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.421708][ T6831] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 101.462293][ T6953] bond0: entered promiscuous mode [ 101.473894][ T5849] Bluetooth: hci1: command tx timeout [ 101.475584][ T6953] bond_slave_0: entered promiscuous mode [ 101.495453][ T6953] bond_slave_1: entered promiscuous mode [ 101.522178][ T6953] bridge0: entered promiscuous mode [ 101.543297][ T6953] batadv0: entered promiscuous mode [ 101.592882][ T6955] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 101.644183][ T6955] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 101.687859][ T35] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.760728][ T6831] hsr_slave_0: entered promiscuous mode [ 101.780998][ T6831] hsr_slave_1: entered promiscuous mode [ 101.822010][ T35] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.967438][ T35] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 101.989083][ T6965] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input8 [ 102.019278][ T6968] validate_nla: 1 callbacks suppressed [ 102.019295][ T6968] netlink: 'syz.1.232': attribute type 1 has an invalid length. [ 102.053182][ T6968] netlink: 224 bytes leftover after parsing attributes in process `syz.1.232'. [ 102.076717][ T6965] pimreg: entered allmulticast mode [ 102.139221][ T35] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 102.150481][ T5850] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 102.159924][ T5850] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 102.168247][ T6965] pimreg: left allmulticast mode [ 102.190058][ T5850] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 102.200173][ T5850] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 102.208699][ T5850] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 102.217870][ T5850] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 102.262548][ T6971] sit0: entered promiscuous mode [ 102.283795][ T6971] netlink: 'syz.0.233': attribute type 1 has an invalid length. [ 102.625410][ T35] bridge_slave_1: left allmulticast mode [ 102.631135][ T35] bridge_slave_1: left promiscuous mode [ 102.643407][ T35] bridge0: port 2(bridge_slave_1) entered disabled state [ 102.662294][ T35] bridge_slave_0: left allmulticast mode [ 102.668305][ T35] bridge_slave_0: left promiscuous mode [ 102.678577][ T35] bridge0: port 1(bridge_slave_0) entered disabled state [ 103.098795][ T35] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 103.109169][ T35] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 103.119258][ T35] bond0 (unregistering): Released all slaves [ 103.376693][ T7003] infiniband syz1: set active [ 103.387136][ T7003] infiniband syz1: added team_slave_0 [ 103.393270][ T7003] syz1: rxe_create_cq: returned err = -12 [ 103.403638][ T7003] infiniband syz1: Couldn't create ib_mad CQ [ 103.409736][ T7003] infiniband syz1: Couldn't open port 1 [ 103.432174][ T7003] RDS/IB: syz1: added [ 103.437403][ T7003] smc: adding ib device syz1 with port count 1 [ 103.443951][ T7003] smc: ib device syz1 port 1 has pnetid [ 103.521440][ T6831] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 103.553785][ T5850] Bluetooth: hci1: command 0x040f tx timeout [ 103.580692][ T6831] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 103.640336][ T6831] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 103.699047][ T6831] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 103.785231][ T6831] 8021q: adding VLAN 0 to HW filter on device bond0 [ 103.798895][ T6831] 8021q: adding VLAN 0 to HW filter on device team0 [ 103.810493][ T2982] bridge0: port 1(bridge_slave_0) entered blocking state [ 103.817655][ T2982] bridge0: port 1(bridge_slave_0) entered forwarding state [ 103.830853][ T7023] __nla_validate_parse: 3 callbacks suppressed [ 103.830870][ T7023] netlink: 4 bytes leftover after parsing attributes in process `syz.3.248'. [ 103.895710][ T2982] bridge0: port 2(bridge_slave_1) entered blocking state [ 103.903946][ T2982] bridge0: port 2(bridge_slave_1) entered forwarding state [ 103.968250][ T7023] pim6reg1: entered allmulticast mode [ 103.987907][ T6972] chnl_net:caif_netlink_parms(): no params data found [ 104.058389][ T7028] netlink: 'syz.1.250': attribute type 1 has an invalid length. [ 104.083805][ T7028] netlink: 'syz.1.250': attribute type 4 has an invalid length. [ 104.094046][ T7028] netlink: 188 bytes leftover after parsing attributes in process `syz.1.250'. [ 104.273257][ T5840] Bluetooth: hci2: command tx timeout [ 104.348523][ T7041] netlink: 16 bytes leftover after parsing attributes in process `syz.1.252'. [ 104.359317][ T6972] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.393471][ T6972] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.410946][ T6972] bridge_slave_0: entered allmulticast mode [ 104.428141][ T6972] bridge_slave_0: entered promiscuous mode [ 104.439699][ T6972] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.451866][ T6972] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.469087][ T6972] bridge_slave_1: entered allmulticast mode [ 104.479034][ T6972] bridge_slave_1: entered promiscuous mode [ 104.557246][ T6972] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 104.603336][ T7046] netlink: 8 bytes leftover after parsing attributes in process `syz.1.253'. [ 104.613132][ T7046] netlink: 48 bytes leftover after parsing attributes in process `syz.1.253'. [ 104.637567][ T6972] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 104.737759][ T6972] team0: Port device team_slave_0 added [ 104.764474][ T6972] team0: Port device team_slave_1 added [ 104.847221][ T6972] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 104.863455][ T6972] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.896420][ T6972] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 104.909858][ T6972] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 104.917414][ T6972] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 104.944132][ T6972] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 104.967507][ T6831] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 105.094304][ T6972] hsr_slave_0: entered promiscuous mode [ 105.111276][ T6972] hsr_slave_1: entered promiscuous mode [ 105.125557][ T6972] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.132957][ T7064] FAULT_INJECTION: forcing a failure. [ 105.132957][ T7064] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 105.143106][ T6972] Cannot create hsr debugfs directory [ 105.146407][ T7064] CPU: 1 UID: 0 PID: 7064 Comm: syz.1.258 Not tainted 6.13.0-rc1-syzkaller-00332-ge58b4771af2b #0 [ 105.162087][ T7064] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 105.172170][ T7064] Call Trace: [ 105.175483][ T7064] [ 105.178442][ T7064] dump_stack_lvl+0x241/0x360 [ 105.183160][ T7064] ? __pfx_dump_stack_lvl+0x10/0x10 [ 105.188390][ T7064] ? __pfx__printk+0x10/0x10 [ 105.193005][ T7064] ? __pfx_lock_release+0x10/0x10 [ 105.198057][ T7064] should_fail_ex+0x3b0/0x4e0 [ 105.202756][ T7064] _copy_from_user+0x2f/0xc0 [ 105.207373][ T7064] copy_msghdr_from_user+0xae/0x680 [ 105.212600][ T7064] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 105.218428][ T7064] ? __fget_files+0x2a/0x410 [ 105.223036][ T7064] ? __fget_files+0x2a/0x410 [ 105.227639][ T7064] __sys_sendmmsg+0x32b/0x720 [ 105.232326][ T7064] ? __pfx___sys_sendmmsg+0x10/0x10 [ 105.237534][ T7064] ? __pfx_lock_release+0x10/0x10 [ 105.242553][ T7064] ? kstrtouint_from_user+0x128/0x190 [ 105.247937][ T7064] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 105.253833][ T7064] ? ksys_write+0x22a/0x2b0 [ 105.258334][ T7064] ? __pfx_lock_release+0x10/0x10 [ 105.263371][ T7064] ? vfs_write+0x730/0xd30 [ 105.267789][ T7064] ? __mutex_unlock_slowpath+0x21e/0x790 [ 105.273442][ T7064] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 105.279420][ T7064] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 105.285746][ T7064] ? do_syscall_64+0x100/0x230 [ 105.290513][ T7064] __x64_sys_sendmmsg+0xa0/0xb0 [ 105.295367][ T7064] do_syscall_64+0xf3/0x230 [ 105.299865][ T7064] ? clear_bhb_loop+0x35/0x90 [ 105.304539][ T7064] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 105.310429][ T7064] RIP: 0033:0x7f20bd77ff19 [ 105.314851][ T7064] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 105.334462][ T7064] RSP: 002b:00007f20be64a058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 105.342879][ T7064] RAX: ffffffffffffffda RBX: 00007f20bd945fa0 RCX: 00007f20bd77ff19 [ 105.350851][ T7064] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 105.358905][ T7064] RBP: 00007f20be64a0a0 R08: 0000000000000000 R09: 0000000000000000 [ 105.366875][ T7064] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 105.374840][ T7064] R13: 0000000000000000 R14: 00007f20bd945fa0 R15: 00007ffc29e7ef48 [ 105.382817][ T7064] [ 105.656135][ T5840] Bluetooth: hci1: command 0x040f tx timeout [ 105.716369][ T35] hsr_slave_0: left promiscuous mode [ 105.722321][ T35] hsr_slave_1: left promiscuous mode [ 105.728809][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 105.736480][ T35] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 105.744355][ T35] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 105.751878][ T35] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 105.773035][ T35] veth1_macvtap: left promiscuous mode [ 105.778652][ T35] veth0_macvtap: left promiscuous mode [ 105.784602][ T35] veth1_vlan: left promiscuous mode [ 105.789916][ T35] veth0_vlan: left promiscuous mode [ 106.139071][ T35] team0 (unregistering): Port device team_slave_1 removed [ 106.181635][ T35] team0 (unregistering): Port device team_slave_0 removed [ 106.357832][ T5840] Bluetooth: hci2: command tx timeout [ 106.509005][ T7077] netlink: 40 bytes leftover after parsing attributes in process `syz.3.262'. [ 106.666559][ T7083] netlink: 64 bytes leftover after parsing attributes in process `syz.0.264'. [ 106.721329][ T6831] veth0_vlan: entered promiscuous mode [ 106.762180][ T6831] veth1_vlan: entered promiscuous mode [ 106.770480][ T7087] netlink: 'syz.3.265': attribute type 4 has an invalid length. [ 106.906634][ T7093] netlink: 4 bytes leftover after parsing attributes in process `syz.0.267'. [ 106.969263][ T6831] veth0_macvtap: entered promiscuous mode [ 106.992357][ T6831] veth1_macvtap: entered promiscuous mode [ 107.055124][ T7100] FAULT_INJECTION: forcing a failure. [ 107.055124][ T7100] name failslab, interval 1, probability 0, space 0, times 1 [ 107.079135][ T7100] CPU: 0 UID: 0 PID: 7100 Comm: syz.3.270 Not tainted 6.13.0-rc1-syzkaller-00332-ge58b4771af2b #0 [ 107.089781][ T7100] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 107.099872][ T7100] Call Trace: [ 107.103192][ T7100] [ 107.106133][ T7100] dump_stack_lvl+0x241/0x360 [ 107.110820][ T7100] ? __pfx_dump_stack_lvl+0x10/0x10 [ 107.116020][ T7100] ? __pfx__printk+0x10/0x10 [ 107.120610][ T7100] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 107.126593][ T7100] ? __pfx___might_resched+0x10/0x10 [ 107.131879][ T7100] should_fail_ex+0x3b0/0x4e0 [ 107.136566][ T7100] should_failslab+0xac/0x100 [ 107.141269][ T7100] kmem_cache_alloc_node_noprof+0x77/0x380 [ 107.147084][ T7100] ? __alloc_skb+0x1c3/0x440 [ 107.151672][ T7100] __alloc_skb+0x1c3/0x440 [ 107.156088][ T7100] ? __pfx___alloc_skb+0x10/0x10 [ 107.161021][ T7100] ? netlink_autobind+0xd6/0x2f0 [ 107.165955][ T7100] ? netlink_autobind+0x2b0/0x2f0 [ 107.170983][ T7100] netlink_sendmsg+0x638/0xcb0 [ 107.175749][ T7100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.181029][ T7100] ? aa_sock_msg_perm+0x91/0x160 [ 107.185963][ T7100] ? __pfx_netlink_sendmsg+0x10/0x10 [ 107.191239][ T7100] __sock_sendmsg+0x221/0x270 [ 107.195916][ T7100] ____sys_sendmsg+0x52a/0x7e0 [ 107.200682][ T7100] ? __pfx_____sys_sendmsg+0x10/0x10 [ 107.205961][ T7100] ? __fget_files+0x2a/0x410 [ 107.210546][ T7100] ? __fget_files+0x2a/0x410 [ 107.215132][ T7100] __sys_sendmmsg+0x36a/0x720 [ 107.219815][ T7100] ? __pfx___sys_sendmmsg+0x10/0x10 [ 107.225015][ T7100] ? __pfx_lock_release+0x10/0x10 [ 107.230039][ T7100] ? kstrtouint_from_user+0x128/0x190 [ 107.235429][ T7100] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 107.241321][ T7100] ? ksys_write+0x22a/0x2b0 [ 107.245821][ T7100] ? __pfx_lock_release+0x10/0x10 [ 107.250845][ T7100] ? vfs_write+0x730/0xd30 [ 107.255262][ T7100] ? __mutex_unlock_slowpath+0x21e/0x790 [ 107.260909][ T7100] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 107.266885][ T7100] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 107.273207][ T7100] ? do_syscall_64+0x100/0x230 [ 107.277965][ T7100] __x64_sys_sendmmsg+0xa0/0xb0 [ 107.282813][ T7100] do_syscall_64+0xf3/0x230 [ 107.287312][ T7100] ? clear_bhb_loop+0x35/0x90 [ 107.291986][ T7100] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 107.297871][ T7100] RIP: 0033:0x7f1ab237ff19 [ 107.302285][ T7100] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 107.321885][ T7100] RSP: 002b:00007f1ab30f4058 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 107.330295][ T7100] RAX: ffffffffffffffda RBX: 00007f1ab2545fa0 RCX: 00007f1ab237ff19 [ 107.338262][ T7100] RDX: 040000000000009f RSI: 00000000200002c0 RDI: 0000000000000004 [ 107.346234][ T7100] RBP: 00007f1ab30f40a0 R08: 0000000000000000 R09: 0000000000000000 [ 107.354196][ T7100] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 107.362160][ T7100] R13: 0000000000000000 R14: 00007f1ab2545fa0 R15: 00007ffe1d1e65d8 [ 107.370137][ T7100] [ 107.388836][ T6831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.406972][ T6831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.417076][ T6831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.427675][ T6831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.438220][ T6831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.448745][ T6831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.458807][ T6831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 107.469635][ T6831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.494848][ T6831] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 107.575731][ T6831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.595239][ T6831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.605256][ T6831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.616316][ T6831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.626373][ T6831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.637048][ T6831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.647597][ T6831] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 107.658251][ T6831] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 107.669733][ T6831] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 107.722999][ T5840] Bluetooth: hci1: command 0x040f tx timeout [ 107.754789][ T6831] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.766004][ T7109] netlink: 8 bytes leftover after parsing attributes in process `syz.1.273'. [ 107.768129][ T6831] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.828280][ T6831] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 107.850385][ T6831] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 108.073757][ T3012] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.083352][ T3012] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.100017][ T7103] netlink: 8 bytes leftover after parsing attributes in process `syz.0.271'. [ 108.159622][ T6972] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 108.176647][ T3033] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 108.184956][ T3033] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 108.199350][ T6972] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 108.211050][ T6972] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 108.226688][ T6972] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 108.299971][ T6831] ================================================================== [ 108.308071][ T6831] BUG: KASAN: slab-use-after-free in sco_conn_put+0xad/0x210 [ 108.315456][ T6831] Write of size 8 at addr ffff8880282415a0 by task syz-executor/6831 [ 108.323531][ T6831] [ 108.325861][ T6831] CPU: 1 UID: 0 PID: 6831 Comm: syz-executor Not tainted 6.13.0-rc1-syzkaller-00332-ge58b4771af2b #0 [ 108.336709][ T6831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 108.346758][ T6831] Call Trace: [ 108.350025][ T6831] [ 108.352950][ T6831] dump_stack_lvl+0x241/0x360 [ 108.359641][ T6831] ? __pfx_dump_stack_lvl+0x10/0x10 [ 108.364844][ T6831] ? __pfx__printk+0x10/0x10 [ 108.369428][ T6831] ? _printk+0xd5/0x120 [ 108.373575][ T6831] ? __virt_addr_valid+0x183/0x530 [ 108.378681][ T6831] ? __virt_addr_valid+0x183/0x530 [ 108.383786][ T6831] print_report+0x169/0x550 [ 108.388302][ T6831] ? __virt_addr_valid+0x183/0x530 [ 108.393412][ T6831] ? __virt_addr_valid+0x183/0x530 [ 108.398521][ T6831] ? __virt_addr_valid+0x45f/0x530 [ 108.403627][ T6831] ? __phys_addr+0xba/0x170 [ 108.408131][ T6831] ? sco_conn_put+0xad/0x210 [ 108.412713][ T6831] kasan_report+0x143/0x180 [ 108.417214][ T6831] ? sco_conn_put+0xad/0x210 [ 108.421791][ T6831] ? __pfx_sco_disconn_cfm+0x10/0x10 [ 108.427065][ T6831] sco_conn_put+0xad/0x210 [ 108.431469][ T6831] ? __pfx_sco_disconn_cfm+0x10/0x10 [ 108.436742][ T6831] hci_conn_hash_flush+0xff/0x240 [ 108.441762][ T6831] hci_dev_close_sync+0xa42/0x11c0 [ 108.446862][ T6831] hci_unregister_dev+0x20b/0x510 [ 108.451876][ T6831] vhci_release+0x80/0xd0 [ 108.456199][ T6831] ? __pfx_vhci_release+0x10/0x10 [ 108.461219][ T6831] __fput+0x23c/0xa50 [ 108.465199][ T6831] task_work_run+0x24f/0x310 [ 108.469781][ T6831] ? __pfx_task_work_run+0x10/0x10 [ 108.474882][ T6831] ? do_exit+0xa2a/0x28e0 [ 108.479202][ T6831] ? do_exit+0xa2a/0x28e0 [ 108.483524][ T6831] do_exit+0xa2f/0x28e0 [ 108.487668][ T6831] ? __pfx_do_exit+0x10/0x10 [ 108.492243][ T6831] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 108.498212][ T6831] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 108.504530][ T6831] ? _raw_spin_unlock_irq+0x23/0x50 [ 108.509716][ T6831] ? lockdep_hardirqs_on+0x99/0x150 [ 108.514907][ T6831] do_group_exit+0x207/0x2c0 [ 108.519488][ T6831] __x64_sys_exit_group+0x3f/0x40 [ 108.524498][ T6831] x64_sys_call+0x26a8/0x26b0 [ 108.529157][ T6831] do_syscall_64+0xf3/0x230 [ 108.533647][ T6831] ? clear_bhb_loop+0x35/0x90 [ 108.538312][ T6831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.544197][ T6831] RIP: 0033:0x7f8e53b7ff19 [ 108.548600][ T6831] Code: Unable to access opcode bytes at 0x7f8e53b7feef. [ 108.555599][ T6831] RSP: 002b:00007ffc41a612c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 108.564003][ T6831] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8e53b7ff19 [ 108.571959][ T6831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 108.579918][ T6831] RBP: 00007f8e53be0840 R08: 00007ffc41a5f067 R09: 0000000000000003 [ 108.587876][ T6831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 108.595840][ T6831] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffc41a61470 [ 108.603805][ T6831] [ 108.606809][ T6831] [ 108.609113][ T6831] Allocated by task 6930: [ 108.613433][ T6831] kasan_save_track+0x3f/0x80 [ 108.618100][ T6831] __kasan_kmalloc+0x98/0xb0 [ 108.622673][ T6831] __kmalloc_noprof+0x285/0x4c0 [ 108.627513][ T6831] sk_prot_alloc+0xe0/0x210 [ 108.632003][ T6831] sk_alloc+0x38/0x370 [ 108.636059][ T6831] bt_sock_alloc+0x3c/0x340 [ 108.640547][ T6831] sco_sock_create+0xbb/0x390 [ 108.645212][ T6831] bt_sock_create+0x161/0x230 [ 108.649873][ T6831] __sock_create+0x4c0/0xa30 [ 108.654456][ T6831] __sys_socket+0x150/0x3c0 [ 108.658946][ T6831] __x64_sys_socket+0x7a/0x90 [ 108.663604][ T6831] do_syscall_64+0xf3/0x230 [ 108.668095][ T6831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.673974][ T6831] [ 108.676281][ T6831] Freed by task 6930: [ 108.680242][ T6831] kasan_save_track+0x3f/0x80 [ 108.684906][ T6831] kasan_save_free_info+0x40/0x50 [ 108.689914][ T6831] __kasan_slab_free+0x59/0x70 [ 108.694666][ T6831] kfree+0x196/0x430 [ 108.698550][ T6831] __sk_destruct+0x479/0x5f0 [ 108.703126][ T6831] sco_sock_release+0x25e/0x320 [ 108.707969][ T6831] sock_close+0xbc/0x240 [ 108.712200][ T6831] __fput+0x23c/0xa50 [ 108.716165][ T6831] task_work_run+0x24f/0x310 [ 108.720748][ T6831] get_signal+0x15f7/0x1750 [ 108.725238][ T6831] arch_do_signal_or_restart+0x96/0x860 [ 108.730775][ T6831] syscall_exit_to_user_mode+0xce/0x340 [ 108.736313][ T6831] do_syscall_64+0x100/0x230 [ 108.740884][ T6831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 108.746763][ T6831] [ 108.749070][ T6831] The buggy address belongs to the object at ffff888028241000 [ 108.749070][ T6831] which belongs to the cache kmalloc-2k of size 2048 [ 108.763110][ T6831] The buggy address is located 1440 bytes inside of [ 108.763110][ T6831] freed 2048-byte region [ffff888028241000, ffff888028241800) [ 108.777068][ T6831] [ 108.779376][ T6831] The buggy address belongs to the physical page: [ 108.785777][ T6831] page: refcount:1 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x28240 [ 108.794532][ T6831] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 108.803025][ T6831] anon flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 108.810995][ T6831] page_type: f5(slab) [ 108.814963][ T6831] raw: 00fff00000000040 ffff88801ac42000 0000000000000000 dead000000000001 [ 108.823545][ T6831] raw: 0000000000000000 0000000000080008 00000001f5000000 0000000000000000 [ 108.832126][ T6831] head: 00fff00000000040 ffff88801ac42000 0000000000000000 dead000000000001 [ 108.840789][ T6831] head: 0000000000000000 0000000000080008 00000001f5000000 0000000000000000 [ 108.849451][ T6831] head: 00fff00000000003 ffffea0000a09001 ffffffffffffffff 0000000000000000 [ 108.858112][ T6831] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 108.866765][ T6831] page dumped because: kasan: bad access detected [ 108.873179][ T6831] page_owner tracks the page as allocated [ 108.878880][ T6831] page last allocated via order 3, migratetype Unmovable, gfp_mask 0xd28c0(GFP_NOWAIT|__GFP_IO|__GFP_FS|__GFP_NORETRY|__GFP_COMP|__GFP_NOMEMALLOC), pid 5834, tgid 5834 (syz-executor), ts 64138627275, free_ts 64083642879 [ 108.900049][ T6831] post_alloc_hook+0x1f3/0x230 [ 108.904806][ T6831] get_page_from_freelist+0x365c/0x37a0 [ 108.910340][ T6831] __alloc_pages_noprof+0x292/0x710 [ 108.915525][ T6831] alloc_pages_mpol_noprof+0x3e8/0x680 [ 108.920974][ T6831] alloc_slab_page+0x6a/0x140 [ 108.925636][ T6831] allocate_slab+0x5a/0x2f0 [ 108.930124][ T6831] ___slab_alloc+0xcd1/0x14b0 [ 108.934784][ T6831] __slab_alloc+0x58/0xa0 [ 108.939096][ T6831] __kmalloc_node_track_caller_noprof+0x2e9/0x4c0 [ 108.945502][ T6831] kmalloc_reserve+0x111/0x2a0 [ 108.950268][ T6831] pskb_expand_head+0x1f0/0x1380 [ 108.955211][ T6831] netlink_trim+0x183/0x220 [ 108.959711][ T6831] netlink_unicast+0xab/0x990 [ 108.964380][ T6831] rtnl_getlink+0x75e/0xc50 [ 108.968876][ T6831] rtnetlink_rcv_msg+0x73f/0xcf0 [ 108.973802][ T6831] netlink_rcv_skb+0x1e3/0x430 [ 108.978557][ T6831] page last free pid 974 tgid 974 stack trace: [ 108.984692][ T6831] free_unref_page+0xdef/0x1130 [ 108.989530][ T6831] __put_partials+0xeb/0x130 [ 108.994106][ T6831] put_cpu_partial+0x17c/0x250 [ 108.998856][ T6831] __slab_free+0x2ea/0x3d0 [ 109.003255][ T6831] qlist_free_all+0x9a/0x140 [ 109.007829][ T6831] kasan_quarantine_reduce+0x14f/0x170 [ 109.013275][ T6831] __kasan_slab_alloc+0x23/0x80 [ 109.018111][ T6831] kmem_cache_alloc_node_noprof+0x1d9/0x380 [ 109.023996][ T6831] __alloc_skb+0x1c3/0x440 [ 109.028399][ T6831] alloc_skb_with_frags+0xc3/0x820 [ 109.033498][ T6831] sock_alloc_send_pskb+0x91a/0xa60 [ 109.038683][ T6831] mld_newpack+0x1c3/0xaf0 [ 109.043086][ T6831] add_grec+0x1492/0x19a0 [ 109.047403][ T6831] mld_ifc_work+0x691/0xd90 [ 109.051890][ T6831] process_scheduled_works+0xa66/0x1840 [ 109.057419][ T6831] worker_thread+0x870/0xd30 [ 109.061994][ T6831] [ 109.064303][ T6831] Memory state around the buggy address: [ 109.069912][ T6831] ffff888028241480: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 109.077960][ T6831] ffff888028241500: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 109.086021][ T6831] >ffff888028241580: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 109.094073][ T6831] ^ [ 109.099173][ T6831] ffff888028241600: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 109.107223][ T6831] ffff888028241680: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 109.115268][ T6831] ================================================================== [ 109.128152][ T5840] Bluetooth: hci2: command tx timeout [ 109.143551][ T6831] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 109.150756][ T6831] CPU: 0 UID: 0 PID: 6831 Comm: syz-executor Not tainted 6.13.0-rc1-syzkaller-00332-ge58b4771af2b #0 [ 109.161579][ T6831] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 109.171616][ T6831] Call Trace: [ 109.174877][ T6831] [ 109.177804][ T6831] dump_stack_lvl+0x241/0x360 [ 109.182490][ T6831] ? __pfx_dump_stack_lvl+0x10/0x10 [ 109.187679][ T6831] ? __pfx__printk+0x10/0x10 [ 109.192248][ T6831] ? preempt_schedule+0xe1/0xf0 [ 109.197085][ T6831] ? vscnprintf+0x5d/0x90 [ 109.201404][ T6831] panic+0x349/0x880 [ 109.205290][ T6831] ? check_panic_on_warn+0x21/0xb0 [ 109.210387][ T6831] ? __pfx_panic+0x10/0x10 [ 109.214789][ T6831] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 109.220752][ T6831] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 109.227060][ T6831] ? print_report+0x502/0x550 [ 109.231738][ T6831] check_panic_on_warn+0x86/0xb0 [ 109.236696][ T6831] ? sco_conn_put+0xad/0x210 [ 109.241300][ T6831] end_report+0x77/0x160 [ 109.245565][ T6831] kasan_report+0x154/0x180 [ 109.250086][ T6831] ? sco_conn_put+0xad/0x210 [ 109.254692][ T6831] ? __pfx_sco_disconn_cfm+0x10/0x10 [ 109.259992][ T6831] sco_conn_put+0xad/0x210 [ 109.264421][ T6831] ? __pfx_sco_disconn_cfm+0x10/0x10 [ 109.269725][ T6831] hci_conn_hash_flush+0xff/0x240 [ 109.274772][ T6831] hci_dev_close_sync+0xa42/0x11c0 [ 109.279899][ T6831] hci_unregister_dev+0x20b/0x510 [ 109.284942][ T6831] vhci_release+0x80/0xd0 [ 109.289287][ T6831] ? __pfx_vhci_release+0x10/0x10 [ 109.294334][ T6831] __fput+0x23c/0xa50 [ 109.298336][ T6831] task_work_run+0x24f/0x310 [ 109.302945][ T6831] ? __pfx_task_work_run+0x10/0x10 [ 109.308087][ T6831] ? do_exit+0xa2a/0x28e0 [ 109.312439][ T6831] ? do_exit+0xa2a/0x28e0 [ 109.316782][ T6831] do_exit+0xa2f/0x28e0 [ 109.320955][ T6831] ? __pfx_do_exit+0x10/0x10 [ 109.325559][ T6831] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 109.331559][ T6831] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 109.337905][ T6831] ? _raw_spin_unlock_irq+0x23/0x50 [ 109.343123][ T6831] ? lockdep_hardirqs_on+0x99/0x150 [ 109.348352][ T6831] do_group_exit+0x207/0x2c0 [ 109.352963][ T6831] __x64_sys_exit_group+0x3f/0x40 [ 109.358007][ T6831] x64_sys_call+0x26a8/0x26b0 [ 109.362692][ T6831] do_syscall_64+0xf3/0x230 [ 109.367201][ T6831] ? clear_bhb_loop+0x35/0x90 [ 109.371890][ T6831] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 109.377799][ T6831] RIP: 0033:0x7f8e53b7ff19 [ 109.382223][ T6831] Code: Unable to access opcode bytes at 0x7f8e53b7feef. [ 109.389246][ T6831] RSP: 002b:00007ffc41a612c8 EFLAGS: 00000246 ORIG_RAX: 00000000000000e7 [ 109.397682][ T6831] RAX: ffffffffffffffda RBX: 0000000000000000 RCX: 00007f8e53b7ff19 [ 109.405668][ T6831] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000000000043 [ 109.413652][ T6831] RBP: 00007f8e53be0840 R08: 00007ffc41a5f067 R09: 0000000000000003 [ 109.421639][ T6831] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 109.429622][ T6831] R13: 0000000000000003 R14: 00000000ffffffff R15: 00007ffc41a61470 [ 109.437618][ T6831] [ 109.440904][ T6831] Kernel Offset: disabled [ 109.445221][ T6831] Rebooting in 86400 seconds..