last executing test programs: 4.015848274s ago: executing program 3 (id=60): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001982f00fc000018c6ba35000000000000000700ff0200"/52], 0xfdef) 2.07374717s ago: executing program 3 (id=66): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000740)=@base={0x6, 0x4, 0x3, 0x7}, 0x50) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007baaf8ff00000000bfa200000000000007020000f8ffffffb703000000000000b70400000000000085000000c300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x16, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f00000005c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x41000, 0x8, '\x00', 0x0, @flow_dissector=0x11, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000000)={r1, 0x2000000, 0xe, 0x0, &(0x7f0000000200)="63eced8e46dc3f0adf33c9f7b986", 0x0, 0x8001, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.77125679s ago: executing program 3 (id=69): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) ioctl$BTRFS_IOC_SET_RECEIVED_SUBVOL(0xffffffffffffffff, 0xc0c89425, &(0x7f00000002c0)={"6b2f3b6a399bc2f1af59106a2a1667f8", 0x0, 0x0, {0x9, 0x9d5f}, {0xd, 0x41}, 0xffff, [0xde99, 0x8e9, 0xc, 0x1d, 0x43, 0xfffffffffffffffb, 0x28, 0x1, 0x34e0000, 0x7ffffffffffffffb, 0x9, 0x5, 0x6, 0x8, 0x7, 0x4]}) write$cgroup_subtree(r0, &(0x7f0000000280)=ANY=[], 0x10448) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r0, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) getsockopt$SO_J1939_PROMISC(r1, 0x6b, 0x2, 0x0, &(0x7f0000000040)) 1.77113471s ago: executing program 0 (id=70): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x20000010) 1.75851507s ago: executing program 2 (id=71): openat$tun(0xffffffffffffff9c, 0x0, 0x200000, 0x0) r0 = openat$nci(0xffffffffffffff9c, &(0x7f0000000080), 0x2, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nfc(&(0x7f0000000300), r1) ioctl$IOCTL_GET_NCIDEV_IDX(r0, 0x0, &(0x7f00000000c0)=0x0) sendmsg$NFC_CMD_DEV_UP(r1, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000d80)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010426bd7000f8dbdf250200000008000100", @ANYRES32=r3], 0x1c}}, 0x4008054) write$nci(r0, &(0x7f0000000500)=@NCI_OP_RF_DISCOVER_SELECT_RSP={0x1, 0x0, 0x2, 0x4, 0x1}, 0x4) bind$tipc(r0, 0x0, 0x0) write$bt_hci(0xffffffffffffffff, 0x0, 0x6) connect$rose(0xffffffffffffffff, 0x0, 0x0) socket$alg(0x26, 0x5, 0x0) 1.617335605s ago: executing program 3 (id=72): setsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, 0x0, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x2}) r2 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000000c0)={0x0, 0x0, 0x0}, 0x20040054) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000440)=@newqdisc={0x58, 0x24, 0x4ee4e6a52ff56541, 0x0, 0xffffffff, {0x0, 0x0, 0x0, r5, {0x0, 0xb}, {0xffff, 0xffff}, {0xb}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0x28, 0x1, {0xa, 0x7f61, 0xfffffffd, 0xc5, 0xe23, 0x1, 0x1, 0x7fff, 0x1}}}}]}, 0x58}, 0x1, 0x0, 0x0, 0x20008001}, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) r7 = socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) r8 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r8, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x1, 0x0, 0x0, 0x40088c1}, 0x40a4) sendmsg$nl_route_sched(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000300)=@newqdisc={0x78, 0x24, 0x4ee4e6a52ff56541, 0x70b926, 0x7fffe, {0x0, 0x0, 0x0, r9, {0x0, 0xffe0}, {0xb, 0xb}, {0x2, 0xb}}, [@qdisc_kind_options=@q_sfq={{0x8}, {0x4c, 0x2, {{0x6, 0x80b, 0x9, 0x1, 0xc}, 0xb, 0x1, 0x8000032, 0x5, 0x9, 0x7, 0x9, 0x7, 0xfd, 0x7, {0xffff1c72, 0x23, 0x3, 0x8, 0x9, 0x107583}}}}]}, 0x78}, 0x1, 0x0, 0x0, 0x44040}, 0x8000) ioctl$sock_SIOCGIFINDEX(r7, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00', 0x0}) sendto$packet(r0, &(0x7f00000002c0)="0503d6fcd3fc140000004788031c09102c28", 0xfce0, 0x4, &(0x7f0000000140)={0x11, 0x86dd, r10, 0x1, 0x0, 0x6, @multicast}, 0x14) 1.566530027s ago: executing program 0 (id=74): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001982f00fc000018c6ba35000000000000000700ff0200"/52], 0xfdef) 1.440251261s ago: executing program 2 (id=75): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES32], 0x68}}, 0x24040800) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003f0000000800"], 0x2c}}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r0, 0x8b2c, &(0x7f0000000040)) 1.295257046s ago: executing program 2 (id=77): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000001580)={&(0x7f0000001200)={0x10, 0x0, 0x0, 0x100000}, 0xc, &(0x7f0000001540)={&(0x7f0000001240)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x4}}], {0x14}}, 0x3c}, 0x1, 0x0, 0x0, 0x800}, 0x80) 1.242103488s ago: executing program 0 (id=78): mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x2000009, 0x200000006c832, 0xffffffffffffffff, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000000c0), 0x4) setsockopt$inet6_int(r0, 0x29, 0x3, 0x0, 0x0) 1.107199513s ago: executing program 2 (id=79): r0 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000000)="140000002a000b6c8cff00f90429fc60010f5ddf", 0x14}], 0x1}, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f00000004c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback=0x3e}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000001a00)={r1, 0x18000000000002a0, 0xe, 0x0, &(0x7f0000000440)="b9ff0307683a268cb8f8ffff888e", 0x0, 0x80000fe, 0x60000009, 0x0, 0x0, 0x0, 0x0}, 0x50) 1.106933163s ago: executing program 3 (id=80): socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000480)={0xffffffffffffffff}) r1 = socket$kcm(0x29, 0x2, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000001dc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000140)='GPL\x00'}, 0x48) r2 = socket$kcm(0x2, 0x1, 0x0) sendmsg$inet(r2, &(0x7f0000000fc0)={&(0x7f0000000000)={0x2, 0x4001, @remote}, 0x10, 0x0}, 0x20000811) ioctl$sock_kcm_SIOCKCMUNATTACH(r1, 0x89e1, &(0x7f0000000180)={r0}) 1.067412604s ago: executing program 1 (id=81): r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x770, 0x0, 0xbabd}, 0x1c) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_int(r1, 0x107, 0xf, &(0x7f0000000300)=0x9, 0x4) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000080)={'bridge0\x00', 0x0}) sendto$packet(r1, 0x0, 0x0, 0x400c010, &(0x7f0000000080)={0x11, 0x3, r2, 0x1, 0xe5, 0x6, @random="76caa646ae4c"}, 0x14) 961.306888ms ago: executing program 0 (id=82): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r1, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r0, 0x0) r2 = socket$inet6(0xa, 0x2, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x20004000, &(0x7f0000000140)={0xa, 0x4e20, 0x1, @remote, 0x2c0}, 0x1c) 903.969369ms ago: executing program 2 (id=83): unshare(0x6a040000) socket$packet(0x11, 0x2, 0x300) socket(0x25, 0x0, 0x1) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$packet(r0, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000080)=0x14) socket$packet(0x11, 0x3, 0x300) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) r1 = socket$inet_udp(0x2, 0x2, 0x0) ioctl$sock_inet_SIOCADDRT(r1, 0x890b, &(0x7f0000000080)={0x0, {0x2, 0x4e20, @local}, {0x2, 0x4e24, @remote}, {0x2, 0x4e24, @multicast2}, 0xe9590b60356dd71f, 0x0, 0x0, 0x0, 0x4, 0x0, 0x80000001, 0x3, 0x40}) 903.294259ms ago: executing program 3 (id=84): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) listen(r0, 0x100) accept4(r0, 0x0, 0x0, 0x0) shutdown(r0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) ioctl$BTRFS_IOC_INO_LOOKUP_USER(0xffffffffffffffff, 0xd000943e, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x0) syz_open_procfs$namespace(0x0, 0x0) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000180)={0x1f, 0xffff, 0x3}, 0x6) write(r1, &(0x7f0000000000)="38000000010001", 0x7) bpf$MAP_CREATE(0x0, 0x0, 0x50) r2 = socket$rds(0x15, 0x5, 0x0) getsockname$packet(r2, 0x0, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, 0x0, &(0x7f0000000400)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x0, '\x00', 0x0, @fallback=0xd, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r3 = socket$pppl2tp(0x18, 0x1, 0x1) r4 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r3, &(0x7f0000000000)=@pppol2tp={0x18, 0x1, {0x0, r4, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x3}}, 0x26) r5 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r5, &(0x7f0000000040)=@pppol2tpv3={0x18, 0x1, {0x3, r3, {0x2, 0x4e21, @broadcast}, 0x2, 0x9800, 0xfffffffd}}, 0x2e) r6 = socket$pppl2tp(0x18, 0x1, 0x1) connect$pppl2tp(r6, &(0x7f00000000c0)=@pppol2tp={0x18, 0x1, {0x0, 0xffffffffffffffff, {0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2, 0x3}}, 0x26) r7 = openat$ppp(0xffffffffffffff9c, &(0x7f00000000c0), 0x1, 0x0) ioctl$PPPIOCATTCHAN(r7, 0x40047438, &(0x7f0000000500)=0x2) ioctl$PPPIOCBRIDGECHAN(r7, 0x40047435, &(0x7f0000000080)=0x2) 779.189054ms ago: executing program 1 (id=85): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000040)=ANY=[@ANYRES32], 0x68}}, 0x24040800) sendmsg$NL80211_CMD_SET_CQM(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000040)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16, @ANYBLOB="010000000000000000003f0000000800"], 0x2c}}, 0x800) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000040)={'wlan1\x00'}) r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) ioctl(r0, 0x8b2c, &(0x7f0000000040)) 686.682917ms ago: executing program 0 (id=86): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000000)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000040)={'syzkaller1\x00', @multicast}) write$tun(r0, &(0x7f00000004c0)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001982f00fc000018c6ba35000000000000000700ff0200"/52], 0xfdef) 671.789948ms ago: executing program 1 (id=87): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) setsockopt$inet_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x4) connect$inet(r0, &(0x7f0000000100)={0x2, 0x4e21, @dev={0xac, 0x14, 0x14, 0xe}}, 0x57) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) getsockopt$IP_VS_SO_GET_VERSION(r1, 0x0, 0x480, &(0x7f0000005680), &(0x7f0000009980)=0x40) recvmmsg(r0, &(0x7f00000031c0)=[{{0x0, 0x0, &(0x7f0000000a40)=[{&(0x7f00000008c0)=""/135, 0x87}], 0x1}}, {{0x0, 0x0, &(0x7f0000000d00)=[{&(0x7f0000000980)=""/146, 0x92}, {&(0x7f0000000080)=""/43, 0x2b}, {&(0x7f0000000a80)=""/242, 0xf2}, {0x0}], 0x4}, 0x2}], 0x2, 0x22, 0x0) write(r0, 0x0, 0x0) 419.229286ms ago: executing program 1 (id=88): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x6, &(0x7f0000000040)=0xfffffffd, 0x4) 338.070959ms ago: executing program 1 (id=89): socket$pppl2tp(0x18, 0x1, 0x1) r0 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r0, 0x107, 0x12, &(0x7f0000000140)={0x1, 0x6}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) setsockopt$packet_fanout_data(r0, 0x107, 0x16, &(0x7f0000000100)={0x3, &(0x7f0000000180)=[{0x28, 0x0, 0xd, 0xfffff034}, {0x50, 0x0, 0x5, 0xfffffffd}, {0x6, 0x0, 0x2, 0xffffffff}]}, 0x10) socket$packet(0x11, 0x3, 0x300) r1 = socket$inet6(0xa, 0x2, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$batadv(&(0x7f0000000200), r2) getsockname$packet(r2, &(0x7f0000000440)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000000c0)=0x14) sendmmsg$inet(r1, &(0x7f00000018c0)=[{{&(0x7f0000000040)={0x2, 0x4e1c, @multicast1}, 0x10, 0x0, 0x0, &(0x7f0000000080)=[@ip_pktinfo={{0x1c, 0x0, 0x8, {r3, @empty, @multicast1}}}], 0x20}}], 0x1, 0x4880) 236.581332ms ago: executing program 0 (id=90): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x1, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket$unix(0x1, 0x1, 0x0) r2 = socket$kcm(0x11, 0x3, 0x0) r3 = socket(0x400000000010, 0x3, 0x0) r4 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r3, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xfffffffd, {0x0, 0x0, 0x0, r5, {0x0, 0x1}, {0xffff, 0xffff}, {0xfff9, 0x9}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=@newtfilter={0x54, 0x2c, 0xf3f, 0x30bd2d, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0xb, 0xf}, {}, {0x7, 0x8}}, [@filter_kind_options=@f_basic={{0xa}, {0x24, 0x2, [@TCA_BASIC_EMATCHES={0x20, 0x2, 0x0, 0x1, [@TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x1}}, @TCA_EMATCH_TREE_LIST={0x14, 0x2, 0x0, 0x1, [@TCF_EM_NBYTE={0x10, 0x1, 0x0, 0x0, {{0x45aa, 0x2, 0x6}, {0x1, 0x0, 0x2}}}]}]}]}}]}, 0x54}, 0x1, 0x0, 0x0, 0x20041090}, 0x810) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) socket$nl_generic(0x10, 0x3, 0x10) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r2, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r7, 0x4}, 0x80, &(0x7f0000000480)=[{&(0x7f0000000600)="1e", 0x1}], 0x1}, 0x4c00c) 123.829676ms ago: executing program 1 (id=91): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x1, 0x5, &(0x7f0000000e00)=ANY=[@ANYBLOB="bf16000000000000b7070000010000004070000000000000500000000000e1ff95000000000000002ba76bb33123751c4e345c652fbc1626cca2a2ad75806150ae0209e62751ee04000000670d25010000020000040000009fc404000000c788b277beee11bf9b0a4def23d410f6accd3641110bec4e90a6341965dac03d04683712a0b09edc9e9ef8f6e396ad200e011ea665c45a3449abe802f5ab3e89cf40b8580218ce740068720000074e3e8eea3fd8cf49827ca311f5b87e1ca8433a8acd715f5888b2007f0000000000000000010000000000fb00010000000000414027efc84293af6a22000000005335001db43a5c000000000000000024000000000000000000e75a89faff01210cce39bf405f1e846c1242000000000000cad326ad7add65873d9f87463ad6f7c2e8ee1a39244960b318778f2a047f6d5bc24fef5d7d617da7fb5e2a431ab9142f3a06d55740a43088696daaed74b9c5c29647d2f950a959cf9938d6df8600a62e96b7cb8e52cbdc2ba9d580609e31c30891f7e5ff7fd6fce424c2200af6c3784a1975fa657de38a3a32a4fd67ce446ac5431d07db79240acaf091231b986e77d05d988d6edc71df48dca02113a38300c2bf2b5543ffc1669557b3819d8c396d2c2361629d1022f722ec23812770d72cd0010000007889b8c7044f563a1f68d4eff895fdbc463f747c08f40105869035000000000000000000000000000000000000000000000000080000003ddf4aa4b1c8baa0ae6feb6737c275dc2740f742b5425f1d581961471cdb0500000000000000d4123f955267fe4a75c114f874e086287547d4099aeec9f1538ee25a365ccf4a9b604e88e12ff25184d4e3c6f7f623559435b26b50fb7113000000f0bc440550ee91302f5a000000000000000000000000006d0000e67ccc00148ac4c43021cce9f24f4b2f9492c32e7af05c648978d9980ba49789906d923e4916f390ab7edcd3f5b9fe14446dd446a52131c464f2c08efb46d934615c8631b7c42efd0294bea179b0433f5c899119ec2c3f4523110c0acef5383b5a2720caeb68f1e9c05b05d89467ded84da093dea262e51811e2d7fa515722516bd5ef6c8c4966e5937562a5648a696ad3a042a7097ddefe0671f977fb145890f5bf41ba92b8c4c8b14f0d4a880ef4518bb32881dfd15dc84e79d326337e21e0"], &(0x7f0000000140)='GPL\x00'}, 0x94) setsockopt$sock_attach_bpf(r0, 0x1, 0x32, &(0x7f00000002c0)=r1, 0x4) sendmsg$kcm(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000005c0)=[{&(0x7f00000003c0)="d800000018007b18e00212ba0d8105040a0a1100fe0f040b067c55a1bc0009001e0006990300000015000500fe80000a000000000300014002000c0901ac04000bd67f6f94007100a007a290457f0189b316277ce06bbace8017cbec4c2ee5a7cef4090000001fb791643a5ee4b01602b2a10c11ce1b14d6d930dfe1d9d322fe04fb95cae8c9010000730d7a5025ccca262f3d40fad95667e04adcdf634c1f215ce3bb9ad8ffd5e1cace81ed0b7fece0b42a9ecbee5de6ccd40dd601edef3d93452a92307f00000e97031e9f05e9f16e9cb5", 0xd2}, {&(0x7f00000004c0)="f80ec2e2badd", 0x6}], 0x2, 0x0, 0x0, 0x2663}, 0x0) 0s ago: executing program 2 (id=92): sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000001c0)={'syzkaller0\x00'}) r2 = socket$unix(0x1, 0x1, 0x0) r3 = socket$kcm(0x11, 0x3, 0x0) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x307000, 0x0) close(r4) socket$inet6(0xa, 0x400000000001, 0x0) ioctl$SIOCSIFHWADDR(r4, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$kcm(r3, &(0x7f00000000c0)={&(0x7f0000000380)=@xdp={0x2c, 0x7, r5, 0x3e}, 0x80, &(0x7f0000000080)=[{&(0x7f0000000180)='\'', 0x1}], 0x1}, 0x4) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.49' (ED25519) to the list of known hosts. [ 71.581182][ T5757] cgroup: Unknown subsys name 'net' [ 71.717860][ T5757] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 73.406321][ T5757] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 74.894652][ T5770] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 74.910254][ T5770] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 74.917953][ T5770] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 74.950361][ T51] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 74.962400][ T5774] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 74.969600][ T5774] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 74.981124][ T5774] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 74.989280][ T5774] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 74.997472][ T5774] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 75.005885][ T5774] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 75.045561][ T5774] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 75.053946][ T5774] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 75.057265][ T5778] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 75.069100][ T5774] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 75.077046][ T5774] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 75.077080][ T5778] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 75.085749][ T5774] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 75.092479][ T5778] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 75.098807][ T5774] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 75.114418][ T5778] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 75.122432][ T5778] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 75.131778][ T5778] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 75.150921][ T5085] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 75.159947][ T5778] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 75.576368][ T5777] chnl_net:caif_netlink_parms(): no params data found [ 75.635951][ T5772] chnl_net:caif_netlink_parms(): no params data found [ 75.693947][ T5769] chnl_net:caif_netlink_parms(): no params data found [ 75.744023][ T5775] chnl_net:caif_netlink_parms(): no params data found [ 75.822752][ T5777] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.831012][ T5777] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.838396][ T5777] bridge_slave_0: entered allmulticast mode [ 75.845871][ T5777] bridge_slave_0: entered promiscuous mode [ 75.882353][ T5777] bridge0: port 2(bridge_slave_1) entered blocking state [ 75.889677][ T5777] bridge0: port 2(bridge_slave_1) entered disabled state [ 75.900113][ T5777] bridge_slave_1: entered allmulticast mode [ 75.906906][ T5777] bridge_slave_1: entered promiscuous mode [ 75.927655][ T5772] bridge0: port 1(bridge_slave_0) entered blocking state [ 75.934837][ T5772] bridge0: port 1(bridge_slave_0) entered disabled state [ 75.942382][ T5772] bridge_slave_0: entered allmulticast mode [ 75.949126][ T5772] bridge_slave_0: entered promiscuous mode [ 75.975519][ T5777] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 75.996068][ T5772] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.003593][ T5772] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.011193][ T5772] bridge_slave_1: entered allmulticast mode [ 76.018018][ T5772] bridge_slave_1: entered promiscuous mode [ 76.031266][ T5777] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.092930][ T5769] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.100587][ T5769] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.107744][ T5769] bridge_slave_0: entered allmulticast mode [ 76.114941][ T5769] bridge_slave_0: entered promiscuous mode [ 76.136321][ T5772] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.148300][ T5777] team0: Port device team_slave_0 added [ 76.157950][ T5777] team0: Port device team_slave_1 added [ 76.175332][ T5769] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.182562][ T5769] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.189710][ T5769] bridge_slave_1: entered allmulticast mode [ 76.199284][ T5769] bridge_slave_1: entered promiscuous mode [ 76.207506][ T5772] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.224757][ T5775] bridge0: port 1(bridge_slave_0) entered blocking state [ 76.232104][ T5775] bridge0: port 1(bridge_slave_0) entered disabled state [ 76.239237][ T5775] bridge_slave_0: entered allmulticast mode [ 76.246430][ T5775] bridge_slave_0: entered promiscuous mode [ 76.295437][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.302508][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.329233][ T5777] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.343878][ T5775] bridge0: port 2(bridge_slave_1) entered blocking state [ 76.351196][ T5775] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.358680][ T5775] bridge_slave_1: entered allmulticast mode [ 76.365730][ T5775] bridge_slave_1: entered promiscuous mode [ 76.384427][ T5772] team0: Port device team_slave_0 added [ 76.393453][ T5777] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.400509][ T5777] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.426552][ T5777] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.467056][ T5769] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.482105][ T5772] team0: Port device team_slave_1 added [ 76.513415][ T5769] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.538957][ T5777] hsr_slave_0: entered promiscuous mode [ 76.545372][ T5777] hsr_slave_1: entered promiscuous mode [ 76.554715][ T5775] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 76.597577][ T5775] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 76.607329][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.614384][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.640595][ T5772] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.653618][ T5772] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.660641][ T5772] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.687410][ T5772] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 76.703697][ T5769] team0: Port device team_slave_0 added [ 76.741699][ T5769] team0: Port device team_slave_1 added [ 76.768307][ T5775] team0: Port device team_slave_0 added [ 76.811401][ T5775] team0: Port device team_slave_1 added [ 76.860334][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.867307][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.894216][ T5775] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.906028][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 76.915735][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.942491][ T5769] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 76.959669][ T5769] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 76.966976][ T5769] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 76.992995][ T5769] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.013442][ T5775] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 77.021109][ T5775] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 77.047430][ T5775] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 77.054984][ T5778] Bluetooth: hci1: command tx timeout [ 77.077310][ T5772] hsr_slave_0: entered promiscuous mode [ 77.084444][ T5772] hsr_slave_1: entered promiscuous mode [ 77.090970][ T5772] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.098891][ T5772] Cannot create hsr debugfs directory [ 77.190178][ T51] Bluetooth: hci3: command tx timeout [ 77.190553][ T5085] Bluetooth: hci0: command tx timeout [ 77.202021][ T5778] Bluetooth: hci2: command tx timeout [ 77.241486][ T5775] hsr_slave_0: entered promiscuous mode [ 77.247764][ T5775] hsr_slave_1: entered promiscuous mode [ 77.254677][ T5775] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.262999][ T5775] Cannot create hsr debugfs directory [ 77.301386][ T5769] hsr_slave_0: entered promiscuous mode [ 77.307833][ T5769] hsr_slave_1: entered promiscuous mode [ 77.314187][ T5769] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 77.321891][ T5769] Cannot create hsr debugfs directory [ 77.490510][ T5777] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 77.524943][ T5777] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 77.534731][ T5777] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 77.580244][ T5777] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 77.704803][ T5772] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 77.717408][ T5772] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 77.736210][ T5772] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 77.746420][ T5772] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 77.824189][ T5769] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 77.849962][ T5769] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 77.872771][ T5769] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 77.921992][ T5769] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 77.933628][ T5775] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 77.948541][ T5775] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 77.959748][ T5775] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 77.981294][ T5775] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 78.058337][ T5777] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.109003][ T5777] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.154346][ T4474] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.161658][ T4474] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.196428][ T5772] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.211648][ T4474] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.218965][ T4474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.259332][ T5772] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.302927][ T4483] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.310104][ T4483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.331043][ T4474] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.338191][ T4474] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.370270][ T5775] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.414353][ T5769] 8021q: adding VLAN 0 to HW filter on device bond0 [ 78.450707][ T5769] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.491469][ T5775] 8021q: adding VLAN 0 to HW filter on device team0 [ 78.504324][ T4483] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.511497][ T4483] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.546455][ T42] bridge0: port 1(bridge_slave_0) entered blocking state [ 78.553617][ T42] bridge0: port 1(bridge_slave_0) entered forwarding state [ 78.582102][ T42] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.589308][ T42] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.637742][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 78.645067][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 78.774464][ T5769] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 78.853260][ T5777] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.012827][ T5777] veth0_vlan: entered promiscuous mode [ 79.027071][ T5777] veth1_vlan: entered promiscuous mode [ 79.071657][ T5772] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.114699][ T5085] Bluetooth: hci1: command tx timeout [ 79.153084][ T5777] veth0_macvtap: entered promiscuous mode [ 79.197895][ T5777] veth1_macvtap: entered promiscuous mode [ 79.270507][ T5085] Bluetooth: hci0: command tx timeout [ 79.276095][ T5085] Bluetooth: hci3: command tx timeout [ 79.280260][ T5778] Bluetooth: hci2: command tx timeout [ 79.294243][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.335957][ T5772] veth0_vlan: entered promiscuous mode [ 79.345000][ T5769] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.358045][ T5777] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.389053][ T5772] veth1_vlan: entered promiscuous mode [ 79.402291][ T5777] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.413088][ T5777] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.422377][ T5777] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.431425][ T5777] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.473789][ T5775] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 79.579198][ T5772] veth0_macvtap: entered promiscuous mode [ 79.600990][ T5772] veth1_macvtap: entered promiscuous mode [ 79.647865][ T5769] veth0_vlan: entered promiscuous mode [ 79.665722][ T42] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.676470][ T42] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.684222][ T5775] veth0_vlan: entered promiscuous mode [ 79.712337][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 79.723588][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.734864][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 79.743128][ T5769] veth1_vlan: entered promiscuous mode [ 79.768404][ T5775] veth1_vlan: entered promiscuous mode [ 79.787705][ T5772] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 79.799507][ T5772] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 79.812887][ T5772] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 79.836070][ T4483] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 79.848385][ T5772] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.865656][ T4483] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 79.874043][ T5772] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.884560][ T5772] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.894242][ T5772] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 79.943127][ T5769] veth0_macvtap: entered promiscuous mode [ 80.004471][ T5769] veth1_macvtap: entered promiscuous mode [ 80.026126][ T5775] veth0_macvtap: entered promiscuous mode [ 80.079052][ T5775] veth1_macvtap: entered promiscuous mode [ 80.134235][ T4089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.138602][ T5827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 80.155953][ T4089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.165142][ T5827] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.174783][ T5827] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.183662][ T5827] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.192492][ T5827] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 80.216713][ T5827] netlink: 4 bytes leftover after parsing attributes in process `syz.1.2'. [ 80.226662][ T5827] Zero length message leads to an empty skb [ 80.231907][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.244525][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.255211][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.292434][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.308495][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.319746][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.331509][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.341724][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.352459][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.362874][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 80.373793][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.386447][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 80.416130][ T1075] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 80.420572][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.440809][ T1075] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 80.443301][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.489633][ T5769] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.505438][ T5769] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.517397][ T5769] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.537134][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.570101][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.580197][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.590768][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.601142][ T5775] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 80.611974][ T5775] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 80.623837][ T5775] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 80.642838][ T5775] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.651770][ T5775] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.674043][ T5775] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.699918][ T5775] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.713188][ T5769] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.734855][ T5769] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.745936][ T5769] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.759503][ T5769] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 80.971147][ T5838] syzkaller0: entered promiscuous mode [ 80.988334][ T5838] syzkaller0: entered allmulticast mode [ 81.075651][ T5844] netlink: 4 bytes leftover after parsing attributes in process `syz.2.10'. [ 81.125985][ T5844] netlink: 12 bytes leftover after parsing attributes in process `syz.2.10'. [ 81.127264][ T4089] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.167600][ T4089] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.190533][ T5778] Bluetooth: hci1: command tx timeout [ 81.303726][ T4474] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.318291][ T4474] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.349871][ T5778] Bluetooth: hci2: command tx timeout [ 81.351080][ T51] Bluetooth: hci3: command tx timeout [ 81.355317][ T5778] Bluetooth: hci0: command tx timeout [ 81.479923][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.488203][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.572025][ T4474] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 81.597785][ T4474] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 81.961516][ T5863] syz.0.1 uses obsolete (PF_INET,SOCK_PACKET) [ 82.087352][ T5867] syzkaller0: entered promiscuous mode [ 82.120011][ T5867] syzkaller0: entered allmulticast mode [ 82.127164][ T5870] syzkaller0: entered promiscuous mode [ 82.134514][ T5870] syzkaller0: entered allmulticast mode [ 83.271658][ T5778] Bluetooth: hci1: command tx timeout [ 83.327971][ T5900] netlink: 165 bytes leftover after parsing attributes in process `syz.3.28'. [ 83.431577][ T5778] Bluetooth: hci0: command tx timeout [ 83.431605][ T51] Bluetooth: hci3: command tx timeout [ 83.431640][ T51] Bluetooth: hci2: command tx timeout [ 83.450787][ T5905] syzkaller1: entered promiscuous mode [ 83.456327][ T5905] syzkaller1: entered allmulticast mode [ 83.819074][ T5918] netlink: 48 bytes leftover after parsing attributes in process `syz.2.36'. [ 83.911807][ T5919] syzkaller0: entered promiscuous mode [ 83.917432][ T5919] syzkaller0: entered allmulticast mode [ 84.253199][ T5933] syzkaller0: entered promiscuous mode [ 84.266133][ T5933] syzkaller0: entered allmulticast mode [ 84.583309][ T5944] syzkaller1: entered promiscuous mode [ 84.588877][ T5944] syzkaller1: entered allmulticast mode [ 84.681692][ T5950] netlink: 48 bytes leftover after parsing attributes in process `syz.2.47'. [ 84.706408][ T5951] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 85.162145][ T5964] netlink: 4 bytes leftover after parsing attributes in process `syz.0.54'. [ 85.427984][ T5975] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 86.113662][ T5964] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.122113][ T5964] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.618568][ T5964] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 86.652451][ T5964] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 86.957238][ T9] cfg80211: failed to load regulatory.db [ 87.038124][ T5964] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.047483][ T5964] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.056918][ T5964] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.066015][ T5964] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 87.188897][ T5964] syz.0.54 (5964) used greatest stack depth: 20296 bytes left [ 87.247573][ T5987] syzkaller1: entered promiscuous mode [ 87.253449][ T5987] syzkaller1: entered allmulticast mode [ 87.561650][ T6035] warning: `syz.1.65' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 87.674675][ T6041] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.067411][ T6058] syzkaller1: entered promiscuous mode [ 88.078301][ T6058] syzkaller1: entered allmulticast mode [ 88.220040][ T6060] syzkaller0: entered promiscuous mode [ 88.225578][ T6060] syzkaller0: entered allmulticast mode [ 88.523272][ T6071] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 88.923734][ T6090] Bluetooth: MGMT ver 1.22 [ 89.028535][ T6092] syzkaller1: entered promiscuous mode [ 89.046981][ T6092] syzkaller1: entered allmulticast mode [ 89.482747][ T6105] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 89.490341][ T6105] IPv6: NLM_F_CREATE should be set when creating new route [ 89.497678][ T6105] IPv6: NLM_F_CREATE should be set when creating new route [ 89.505008][ T6105] IPv6: NLM_F_CREATE should be set when creating new route [ 89.523474][ T6103] syzkaller0: entered promiscuous mode [ 89.529137][ T6103] syzkaller0: entered allmulticast mode [ 89.546667][ T6103] ------------[ cut here ]------------ [ 89.552582][ T6103] WARNING: CPU: 1 PID: 6103 at include/linux/skbuff.h:2903 em_nbyte_match+0x2d0/0x3e0 [ 89.562268][ T6103] Modules linked in: [ 89.566209][ T6103] CPU: 1 PID: 6103 Comm: syz.0.90 Not tainted syzkaller #0 [ 89.573513][ T6103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 89.583754][ T6103] RIP: 0010:em_nbyte_match+0x2d0/0x3e0 [ 89.589266][ T6103] Code: c0 eb 07 e8 62 73 d4 f8 31 c0 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 4c 73 d4 f8 0f 0b e9 e5 fe ff ff e8 40 73 d4 f8 <0f> 0b e9 00 fe ff ff 89 d1 80 e1 07 fe c1 38 c1 0f 8c 7a fd ff ff [ 89.609274][ T6103] RSP: 0018:ffffc900055df118 EFLAGS: 00010283 [ 89.615439][ T6103] RAX: ffffffff88b2ace0 RBX: ffff888024bfc280 RCX: 0000000000080000 [ 89.623531][ T6103] RDX: ffffc9000b9d9000 RSI: 0000000000000507 RDI: 0000000000000508 [ 89.631612][ T6103] RBP: 000000000000ffff R08: ffff888025d41e00 R09: 0000000000000003 [ 89.639641][ T6103] R10: 0000000000000002 R11: 0000000000000002 R12: dffffc0000000000 [ 89.647869][ T6103] R13: 1ffff1100497f866 R14: ffff88814270c8e8 R15: 1ffff110284e191d [ 89.655933][ T6103] FS: 00007f12ec4fb6c0(0000) GS:ffff8880b8f00000(0000) knlGS:0000000000000000 [ 89.664954][ T6103] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 89.671725][ T6103] CR2: 000000110c411010 CR3: 0000000030076000 CR4: 00000000003506e0 [ 89.679820][ T6103] Call Trace: [ 89.683142][ T6103] [ 89.686112][ T6103] __tcf_em_tree_match+0x1cf/0x7a0 [ 89.691359][ T6103] ? tcf_em_tree_dump+0x900/0x900 [ 89.696549][ T6103] ? __lock_acquire+0x1273/0x7d40 [ 89.701911][ T6103] basic_classify+0x115/0x2d0 [ 89.706742][ T6103] tcf_classify+0x4c4/0xeb0 [ 89.711381][ T6103] multiq_enqueue+0x103/0x4c0 [ 89.716126][ T6103] ? sch_tree_unlock+0x1b0/0x1b0 [ 89.721180][ T6103] ? do_raw_spin_lock+0x11f/0x2c0 [ 89.726260][ T6103] ? __rwlock_init+0x150/0x150 [ 89.731148][ T6103] dev_qdisc_enqueue+0x48/0x220 [ 89.736051][ T6103] ? __dev_queue_xmit+0xd30/0x3660 [ 89.741385][ T6103] __dev_queue_xmit+0xe96/0x3660 [ 89.746536][ T6103] ? __dev_queue_xmit+0x265/0x3660 [ 89.752007][ T6103] ? sock_alloc_send_pskb+0x8a1/0x9a0 [ 89.757463][ T6103] ? netdev_core_pick_tx+0x340/0x340 [ 89.762889][ T6103] ? packet_parse_headers+0x85e/0xac0 [ 89.768334][ T6103] ? __virt_addr_valid+0x18c/0x540 [ 89.773595][ T6103] ? __check_object_size+0x506/0xa20 [ 89.778944][ T6103] ? skb_setup_tx_timestamp+0x1f0/0x1f0 [ 89.784776][ T6103] ? skb_copy_datagram_from_iter+0x5f6/0x6e0 [ 89.790871][ T6103] ? packet_xmit+0x66/0x330 [ 89.795422][ T6103] ? packet_sendmsg+0x3a37/0x4d70 [ 89.800583][ T6103] packet_sendmsg+0x3b7a/0x4d70 [ 89.805550][ T6103] ? sugov_update_single_freq+0x1e7/0x6a0 [ 89.811401][ T6103] ? verify_lock_unused+0x140/0x140 [ 89.816656][ T6103] ? lockdep_hardirqs_on+0x98/0x150 [ 89.822060][ T6103] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 89.828264][ T6103] ? aa_sk_perm+0x83c/0x970 [ 89.832905][ T6103] ? packet_getsockopt+0xad0/0xad0 [ 89.838084][ T6103] ? aa_sock_msg_perm+0x94/0x150 [ 89.843166][ T6103] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 89.848500][ T6103] ? security_socket_sendmsg+0x80/0xa0 [ 89.854154][ T6103] ? packet_getsockopt+0xad0/0xad0 [ 89.859355][ T6103] ____sys_sendmsg+0x5ba/0x960 [ 89.864443][ T6103] ? __lock_acquire+0x7d40/0x7d40 [ 89.869521][ T6103] ? __asan_memset+0x22/0x40 [ 89.874213][ T6103] ? __sys_sendmsg_sock+0x30/0x30 [ 89.879279][ T6103] ? __import_iovec+0x5f2/0x850 [ 89.884230][ T6103] ? import_iovec+0x73/0xa0 [ 89.888783][ T6103] ___sys_sendmsg+0x2a6/0x360 [ 89.893562][ T6103] ? __sys_sendmsg+0x2a0/0x2a0 [ 89.898436][ T6103] __se_sys_sendmsg+0x1c2/0x2b0 [ 89.903478][ T6103] ? __x64_sys_sendmsg+0x80/0x80 [ 89.908497][ T6103] ? lockdep_hardirqs_on+0x98/0x150 [ 89.913801][ T6103] do_syscall_64+0x55/0xa0 [ 89.918280][ T6103] ? clear_bhb_loop+0x40/0x90 [ 89.923060][ T6103] ? clear_bhb_loop+0x40/0x90 [ 89.927797][ T6103] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 89.933794][ T6103] RIP: 0033:0x7f12eb59c819 [ 89.938258][ T6103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 89.958031][ T6103] RSP: 002b:00007f12ec4fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 89.966522][ T6103] RAX: ffffffffffffffda RBX: 00007f12eb815fa0 RCX: 00007f12eb59c819 [ 89.974579][ T6103] RDX: 000000000004c00c RSI: 00002000000000c0 RDI: 0000000000000005 [ 89.982610][ T6103] RBP: 00007f12eb632c91 R08: 0000000000000000 R09: 0000000000000000 [ 89.990696][ T6103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 89.998689][ T6103] R13: 00007f12eb816038 R14: 00007f12eb815fa0 R15: 00007ffd3ca1bf98 [ 90.006762][ T6103] [ 90.009846][ T6103] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 90.017134][ T6103] CPU: 1 PID: 6103 Comm: syz.0.90 Not tainted syzkaller #0 [ 90.024356][ T6103] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2026 [ 90.034521][ T6103] Call Trace: [ 90.037817][ T6103] [ 90.040770][ T6103] dump_stack_lvl+0x18c/0x250 [ 90.045454][ T6103] ? show_regs_print_info+0x20/0x20 [ 90.050664][ T6103] ? load_image+0x400/0x400 [ 90.055196][ T6103] panic+0x2dc/0x730 [ 90.059115][ T6103] ? bpf_jit_dump+0xd0/0xd0 [ 90.063667][ T6103] __warn+0x2e0/0x470 [ 90.067670][ T6103] ? em_nbyte_match+0x2d0/0x3e0 [ 90.072520][ T6103] ? em_nbyte_match+0x2d0/0x3e0 [ 90.077380][ T6103] report_bug+0x2be/0x4f0 [ 90.081707][ T6103] ? em_nbyte_match+0x2d0/0x3e0 [ 90.086554][ T6103] ? em_nbyte_match+0x2d0/0x3e0 [ 90.091403][ T6103] ? em_nbyte_match+0x2d2/0x3e0 [ 90.096249][ T6103] handle_bug+0xcf/0x120 [ 90.100492][ T6103] exc_invalid_op+0x1a/0x50 [ 90.104990][ T6103] asm_exc_invalid_op+0x1a/0x20 [ 90.109838][ T6103] RIP: 0010:em_nbyte_match+0x2d0/0x3e0 [ 90.115314][ T6103] Code: c0 eb 07 e8 62 73 d4 f8 31 c0 48 83 c4 10 5b 41 5c 41 5d 41 5e 41 5f 5d c3 e8 4c 73 d4 f8 0f 0b e9 e5 fe ff ff e8 40 73 d4 f8 <0f> 0b e9 00 fe ff ff 89 d1 80 e1 07 fe c1 38 c1 0f 8c 7a fd ff ff [ 90.135026][ T6103] RSP: 0018:ffffc900055df118 EFLAGS: 00010283 [ 90.141106][ T6103] RAX: ffffffff88b2ace0 RBX: ffff888024bfc280 RCX: 0000000000080000 [ 90.149265][ T6103] RDX: ffffc9000b9d9000 RSI: 0000000000000507 RDI: 0000000000000508 [ 90.157237][ T6103] RBP: 000000000000ffff R08: ffff888025d41e00 R09: 0000000000000003 [ 90.165294][ T6103] R10: 0000000000000002 R11: 0000000000000002 R12: dffffc0000000000 [ 90.173283][ T6103] R13: 1ffff1100497f866 R14: ffff88814270c8e8 R15: 1ffff110284e191d [ 90.181278][ T6103] ? em_nbyte_match+0x2d0/0x3e0 [ 90.186137][ T6103] ? em_nbyte_match+0x2d0/0x3e0 [ 90.190989][ T6103] __tcf_em_tree_match+0x1cf/0x7a0 [ 90.196117][ T6103] ? tcf_em_tree_dump+0x900/0x900 [ 90.201148][ T6103] ? __lock_acquire+0x1273/0x7d40 [ 90.206177][ T6103] basic_classify+0x115/0x2d0 [ 90.210875][ T6103] tcf_classify+0x4c4/0xeb0 [ 90.215427][ T6103] multiq_enqueue+0x103/0x4c0 [ 90.220136][ T6103] ? sch_tree_unlock+0x1b0/0x1b0 [ 90.225088][ T6103] ? do_raw_spin_lock+0x11f/0x2c0 [ 90.230126][ T6103] ? __rwlock_init+0x150/0x150 [ 90.234996][ T6103] dev_qdisc_enqueue+0x48/0x220 [ 90.239865][ T6103] ? __dev_queue_xmit+0xd30/0x3660 [ 90.245005][ T6103] __dev_queue_xmit+0xe96/0x3660 [ 90.249961][ T6103] ? __dev_queue_xmit+0x265/0x3660 [ 90.255071][ T6103] ? sock_alloc_send_pskb+0x8a1/0x9a0 [ 90.260466][ T6103] ? netdev_core_pick_tx+0x340/0x340 [ 90.265765][ T6103] ? packet_parse_headers+0x85e/0xac0 [ 90.271154][ T6103] ? __virt_addr_valid+0x18c/0x540 [ 90.276310][ T6103] ? __check_object_size+0x506/0xa20 [ 90.281626][ T6103] ? skb_setup_tx_timestamp+0x1f0/0x1f0 [ 90.287186][ T6103] ? skb_copy_datagram_from_iter+0x5f6/0x6e0 [ 90.293172][ T6103] ? packet_xmit+0x66/0x330 [ 90.297676][ T6103] ? packet_sendmsg+0x3a37/0x4d70 [ 90.302759][ T6103] packet_sendmsg+0x3b7a/0x4d70 [ 90.307777][ T6103] ? sugov_update_single_freq+0x1e7/0x6a0 [ 90.313553][ T6103] ? verify_lock_unused+0x140/0x140 [ 90.318779][ T6103] ? lockdep_hardirqs_on+0x98/0x150 [ 90.324069][ T6103] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 90.330238][ T6103] ? aa_sk_perm+0x83c/0x970 [ 90.334783][ T6103] ? packet_getsockopt+0xad0/0xad0 [ 90.339903][ T6103] ? aa_sock_msg_perm+0x94/0x150 [ 90.344932][ T6103] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 90.350392][ T6103] ? security_socket_sendmsg+0x80/0xa0 [ 90.355868][ T6103] ? packet_getsockopt+0xad0/0xad0 [ 90.361009][ T6103] ____sys_sendmsg+0x5ba/0x960 [ 90.365864][ T6103] ? __lock_acquire+0x7d40/0x7d40 [ 90.370908][ T6103] ? __asan_memset+0x22/0x40 [ 90.375535][ T6103] ? __sys_sendmsg_sock+0x30/0x30 [ 90.380575][ T6103] ? __import_iovec+0x5f2/0x850 [ 90.385646][ T6103] ? import_iovec+0x73/0xa0 [ 90.390209][ T6103] ___sys_sendmsg+0x2a6/0x360 [ 90.394940][ T6103] ? __sys_sendmsg+0x2a0/0x2a0 [ 90.399735][ T6103] __se_sys_sendmsg+0x1c2/0x2b0 [ 90.404719][ T6103] ? __x64_sys_sendmsg+0x80/0x80 [ 90.409703][ T6103] ? lockdep_hardirqs_on+0x98/0x150 [ 90.415004][ T6103] do_syscall_64+0x55/0xa0 [ 90.419443][ T6103] ? clear_bhb_loop+0x40/0x90 [ 90.424155][ T6103] ? clear_bhb_loop+0x40/0x90 [ 90.428851][ T6103] entry_SYSCALL_64_after_hwframe+0x68/0xd2 [ 90.434762][ T6103] RIP: 0033:0x7f12eb59c819 [ 90.439199][ T6103] Code: ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 44 00 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 e8 ff ff ff f7 d8 64 89 01 48 [ 90.458913][ T6103] RSP: 002b:00007f12ec4fb028 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 90.467356][ T6103] RAX: ffffffffffffffda RBX: 00007f12eb815fa0 RCX: 00007f12eb59c819 [ 90.475468][ T6103] RDX: 000000000004c00c RSI: 00002000000000c0 RDI: 0000000000000005 [ 90.483457][ T6103] RBP: 00007f12eb632c91 R08: 0000000000000000 R09: 0000000000000000 [ 90.491437][ T6103] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 90.499440][ T6103] R13: 00007f12eb816038 R14: 00007f12eb815fa0 R15: 00007ffd3ca1bf98 [ 90.507506][ T6103] [ 90.511536][ T6103] Kernel Offset: disabled [ 90.516001][ T6103] Rebooting in 86400 seconds..