last executing test programs: 3.151044633s ago: executing program 4 (id=1970): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000900)="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", 0x1db}, {&(0x7f0000000e00)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1dec077b5099cf9aecd1a9d94e235", 0xcf}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff1631baa83e3daf514c600450374f6d76b8fcf2bc3eca29ce7538f85aa34b2bdcc17ecd080f0850377f771a4e8693703da4e347e0165f00872a21845e17030de0ff47bc869de32ee24ca05e6f80", 0x93}], 0x3}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000740)="b1", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000300)="b5d3838236773268a73daecfa0fdc5beb5a7ac332a11523627b41db31da6be0055bf716aa2b23b97d43cc40c632f6b9850f364ba0831ed0d6f7157f204275aa850d992d81ba6ab984bd809254e847b644cf6459a8139c3ebba62168141343c853896523ffb04131b2786acc44a57f5b1bd33cdaef8dd3c0526b7454eefe5153c5778ce05c77e962fd6bf3a4b9eb05654e64f1867398e202b4920e9ebc08f6e6dc652a12e45445030e069f44b", 0xac}, {&(0x7f0000000500)="e47ecfc6ce6d4d9cc5a0fbf98f301803da3adfbec8a1d5324076b744b24bc7cf83120d4819726e827d90219c7100dc54801b32c3a9a69a238db1f4d16464062d870e812ee381b6b3c234824a4a4475f9ee81286836e549ff446b0004", 0x5c}, {&(0x7f0000000840)="fbdd17a812c727337dc6c74dcb077562b57a440dbf7711ba245a62b76d46b0f19e6ff608ef9e5fbb4a8cfb02e28403582ceb8031acc767f766772a93a2f00ddde52ce6f7a84db1c66feecdc4a028e7b9e5e27a0057957743cbf196c517bf3ad97859c31205e3a35f435ec338927f53a43fae1907b2c772d9b35b9b3aa61985ea", 0x80}, {&(0x7f0000001300)="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", 0x25f}], 0x4}}], 0x3, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)='\t', 0x1, 0x11, 0x0, 0x0) 2.205549394s ago: executing program 4 (id=1988): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70500000000000085000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000a50000000800000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6}]}, 0x38}}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f0000"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000000214010028bd7000fddbdf250900020073797a3100000000080001000000000008004400", @ANYRES32, @ANYBLOB="050054000100b2ac08000100000000000900020073"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 2.105495187s ago: executing program 4 (id=1992): r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x2}}, 0x10, 0x0}, 0x4045094) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1c) accept4$inet6(r0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) 1.941276347s ago: executing program 1 (id=1997): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xf}}, [@filter_kind_options=@f_matchall={{0xb}, {0x10, 0x2, [@TCA_MATCHALL_CLASSID={0x8}, @TCA_MATCHALL_ACT={0x4}]}}]}, 0x44}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.912774795s ago: executing program 1 (id=1998): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, 0x0, 0x0) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e23, @local}, 0x10) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000900)="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", 0x1db}, {&(0x7f0000000e00)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1dec077b5099cf9aecd1a9d94e235", 0xcf}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff1631baa83e3daf514c600450374f6d76b8fcf2bc3eca29ce7538f85aa34b2bdcc17ecd080f0850377f771a4e8693703da4e347e0165f00872a21845e17030de0ff47bc869de32ee24ca05e6f80", 0x93}], 0x3}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000740)="b1", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000300)="b5d3838236773268a73daecfa0fdc5beb5a7ac332a11523627b41db31da6be0055bf716aa2b23b97d43cc40c632f6b9850f364ba0831ed0d6f7157f204275aa850d992d81ba6ab984bd809254e847b644cf6459a8139c3ebba62168141343c853896523ffb04131b2786acc44a57f5b1bd33cdaef8dd3c0526b7454eefe5153c5778ce05c77e962fd6bf3a4b9eb05654e64f1867398e202b4920e9ebc08f6e6dc652a12e45445030e069f44b", 0xac}, {&(0x7f0000000500)="e47ecfc6ce6d4d9cc5a0fbf98f301803da3adfbec8a1d5324076b744b24bc7cf83120d4819726e827d90219c7100dc54801b32c3a9a69a238db1f4d16464062d870e812ee381b6b3c234824a4a4475f9ee81286836e549ff446b0004", 0x5c}, {&(0x7f0000000840)="fbdd17a812c727337dc6c74dcb077562b57a440dbf7711ba245a62b76d46b0f19e6ff608ef9e5fbb4a8cfb02e28403582ceb8031acc767f766772a93a2f00ddde52ce6f7a84db1c66feecdc4a028e7b9e5e27a0057957743cbf196c517bf3ad97859c31205e3a35f435ec338927f53a43fae1907b2c772d9b35b9b3aa61985ea", 0x80}, {&(0x7f0000001300)="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", 0x25f}], 0x4}}], 0x3, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)='\t', 0x1, 0x11, 0x0, 0x0) 1.464194588s ago: executing program 2 (id=2007): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xb, &(0x7f0000000180)=ANY=[@ANYBLOB="18000000000000000000000020000000180100002020702500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000000000000b703000000000000850000007000000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x100000, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f0000000340)='kfree\x00', r0}, 0x10) r1 = socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={0x2c, r2, 0x301, 0x0, 0x3, {0x1c}, [@ETHTOOL_A_LINKMODES_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_vlan\x00'}]}]}, 0x2c}}, 0x4000) 1.345622497s ago: executing program 2 (id=2009): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f00000002c0)={'bridge_slave_0\x00'}) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) getsockopt(r2, 0x1, 0xf, &(0x7f0000000180)=""/63, &(0x7f00000001c0)=0x3f) r3 = socket$unix(0x1, 0x2, 0x0) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) unshare(0x400) recvmmsg$unix(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000ac0)={{0x1}, &(0x7f0000000a40), &(0x7f0000000a80)='%pK \x00'}, 0x20) bpf$MAP_CREATE(0x0, &(0x7f0000000500)=ANY=[@ANYBLOB], 0x48) bpf$PROG_LOAD_XDP(0x5, 0x0, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000600)={0x0, 0xc, &(0x7f0000000000)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000f000000028000001294", 0x2e}], 0x1}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)={0x44, r4, 0x1, 0x70bd28, 0x25dfdbfd, {{}, {@void, @val={0x8, 0x3, r5}, @val={0xc, 0x99, {0x7ff, 0x70}}}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'syzkaller0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x7}]}, 0x44}, 0x1, 0x0, 0x0, 0x91}, 0x24044884) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r6) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000000200)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f00000005c0)={&(0x7f0000000440)={0x14, 0x0, 0x100, 0x70bd2c, 0x25dfdbfb}, 0x14}}, 0x40800) socket$inet_sctp(0x2, 0x5, 0x84) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) 1.209085649s ago: executing program 4 (id=2011): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r1) getsockname$packet(r1, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000240)=@newlink={0x38, 0x10, 0x439, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_LINK={0x8, 0x1, r2}]}}}]}, 0x38}}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(r1, 0x89f2, &(0x7f0000000040)={'sit0\x00', 0x0}) 1.200780402s ago: executing program 2 (id=2012): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="48000000100005070000", @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000640)=@newqdisc={0x38, 0x24, 0xf0b, 0x4000, 0x25dfdbfc, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0x1}}, [@qdisc_kind_options=@q_bfifo={{0xa}, {0x8, 0x2, 0x200}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@delchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xfff1}}}, 0x24}}, 0x0) 1.028860478s ago: executing program 4 (id=2015): r0 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x86, &(0x7f0000000100)={@broadcast, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @multicast1}, {0x0, 0x4e20, 0x64, 0x0, @wg=@response={0x2, 0x0, 0x0, "82d18160f7d8ddab6479a6f1514ce8523c1f80508977b3928ebd2dee05607d17", "0194bd7b1b0303c5ba7f602606a285b3", {"30da2d58da817f8a5f77a23de36a2164", "3b33cfa231a427159c7b9f0eceb155f0"}}}}}}}, 0x0) recvmmsg(r0, &(0x7f0000001040)=[{{0x0, 0x0, &(0x7f0000000680)=[{0x0}, {0x0}], 0x2}, 0xf}], 0x1, 0x10001, 0x0) 1.027423118s ago: executing program 3 (id=2016): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001300)=@newtfilter={0x50, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1c, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x20, 0x2, [@TCA_CGROUP_EMATCHES={0x1c, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x10, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0xc, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x7c}}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x50}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 1.00533123s ago: executing program 2 (id=2018): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000002140)={'wg2\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) 957.590658ms ago: executing program 1 (id=2019): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x1, 0x6, 0x8, 0xb, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000180)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='kmem_cache_free\x00', r1}, 0x10) socketpair$tipc(0x1e, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$tipc(r3, &(0x7f00000008c0)={0x0, 0x0, 0x0}, 0x0) close(r3) close(r2) 902.771345ms ago: executing program 3 (id=2020): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, 0x0}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xf}}, [@filter_kind_options=@f_matchall={{0xb}, {0x10, 0x2, [@TCA_MATCHALL_CLASSID={0x8}, @TCA_MATCHALL_ACT={0x4}]}}]}, 0x44}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 890.88939ms ago: executing program 2 (id=2021): r0 = socket(0x1e, 0x5, 0x0) setsockopt$packet_tx_ring(r0, 0x10f, 0x87, &(0x7f0000000040)=@req3={0x80000000}, 0xfeda) listen(r0, 0x0) r1 = socket(0x1e, 0x805, 0x0) sendmsg$tipc(r1, &(0x7f0000000080)={&(0x7f0000000100)=@id={0x1e, 0x3, 0x0, {0x4e20, 0x2}}, 0x10, 0x0}, 0x4045094) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f00000000c0)=@req3={0x80000000}, 0x1c) accept4$inet6(r0, 0x0, 0x0, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xc9d7, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r2, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000340)={{r2, 0xffffffffffffffff}, &(0x7f0000000580), &(0x7f00000005c0)}, 0x20) r4 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x11, 0xd, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000000000008500000003000000650000000800000095"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000140)='kmem_cache_free\x00', r4}, 0x10) 850.56844ms ago: executing program 1 (id=2023): pipe(0x0) r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000080)='cdg\x00', 0x4) bind$inet6(r0, &(0x7f0000000000)={0xa, 0x3, 0x0, @loopback}, 0x1c) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x3, 0x0, @loopback}, 0x1c) socket$inet6(0xa, 0x200000000003, 0x87) socket$inet6_icmp_raw(0xa, 0x3, 0x3a) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, 0x0}, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) sendmmsg$inet6(r0, &(0x7f0000002b00)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000003c0)="90", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000340)=[{&(0x7f0000000240)='\a', 0x1}], 0x1}}], 0x2, 0x0) unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) unshare(0x0) socket$nl_xfrm(0x10, 0x3, 0x6) setsockopt$inet6_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000140)='hybla\x00', 0x6) shutdown(r0, 0x2) 791.08158ms ago: executing program 3 (id=2024): r0 = socket(0x10, 0x803, 0x0) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000280)=@ethtool_channels={0x3d, 0x0, 0x0, 0x0, 0x0, 0x2, 0x1}}) ioctl$sock_SIOCETHTOOL(r0, 0x8946, &(0x7f00000002c0)={'veth0_to_team\x00', &(0x7f0000000000)=@ethtool_cmd={0x2c, 0x6, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0xff}}) ioctl$sock_inet_SIOCSIFFLAGS(r0, 0x8914, 0x0) 730.45379ms ago: executing program 3 (id=2026): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000007c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newqdisc={0x44, 0x24, 0x3fe3aa0262d8c583, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xffff, 0xffff}, {0x0, 0xb}}, [@qdisc_kind_options=@q_fq_pie={{0xb}, {0x14, 0x8002, [@TCA_FQ_PIE_TUPDATE={0x8, 0x4, 0xfffffffd}, @TCA_FQ_PIE_ALPHA={0x8, 0x5, 0x1d}]}}]}, 0x44}}, 0x0) r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r0, 0x6, 0x14, &(0x7f0000000280)=0x1, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000200)='cpuacct.stat\x00', 0x275a, 0x0) write$cgroup_subtree(r1, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) sendto$inet6(r0, &(0x7f0000002380)="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", 0xffe, 0x400c881, 0x0, 0x0) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r0, 0x6, 0x23, &(0x7f0000000140)={&(0x7f0000ffc000/0x1000)=nil, 0x1000, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, &(0x7f0000000000)=0x40) 655.568821ms ago: executing program 3 (id=2027): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000480)={r0}, 0x4) r1 = bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000000)='kfree\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$inet6_udp(0xa, 0x2, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000000)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}, @TCA_RATE={0x6}]}, 0x38}}, 0x0) r3 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="38000000031401002cbd7000fcdbdf250900020073797a32000000000800410073697700140033006c6f0000"], 0x38}, 0x1, 0x0, 0x0, 0x44}, 0x810) sendmsg$RDMA_NLDEV_CMD_SET(r3, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000003c0)=ANY=[@ANYBLOB="480000000214010028bd7000fddbdf250900020073797a3100000000080001000000000008004400", @ANYRES32, @ANYBLOB="050054000100b2ac08000100000000000900020073"], 0x48}, 0x1, 0x0, 0x0, 0x4000801}, 0x0) 551.052351ms ago: executing program 3 (id=2029): r0 = socket$inet(0x2, 0x4000000000000001, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x2, &(0x7f00000000c0)=0x7a, 0x4) bind$inet(r0, 0x0, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000140)={0x1, &(0x7f0000000280)=[{0x6, 0x0, 0x0, 0xe4}]}, 0x10) sendto$inet(r0, 0x0, 0x0, 0x200007fd, &(0x7f0000e68000)={0x2, 0x4e23, @local}, 0x10) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000100)='bbr\x00', 0x4) sendmmsg$inet(r0, &(0x7f0000000cc0)=[{{0x0, 0x0, &(0x7f0000000240)=[{&(0x7f0000000900)="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", 0x1db}, {&(0x7f0000000e00)="ec75d081fcb7e79634ec1a1abfdebb6a38b0c57cc77b83d2eea81aad8f73b36abc2019cb08fcaaec9647a07d0a0965f0f1e39afd84e7e2523aaded5e09aa1e36fcc90c269ad6d38d57619127cee4253655c33b71054226c3b00b9ee6ae29f0b07bc6fe7981126ca804c1f64e6c19ba36b2778c5f4a1c58625fe19516af43c9870c5b8191e23778abe7df2280d459b1651686a53ca52dce9570444c153f9c2903ae4c868074e89477bf6ed2ab648b0498ac8c0f90844ed9a26675199d5ff9b391c1dec077b5099cf9aecd1a9d94e235", 0xcf}, {&(0x7f0000000f00)="397d5f2edc82d0337ae5ab9ee47dc3e798cf69cfebf169e77257f308227094d569a4326954e50ea185bc6fff0507c5dfd26676de9ddac4fe6db927cd4d03965f42d9c7513eff1631baa83e3daf514c600450374f6d76b8fcf2bc3eca29ce7538f85aa34b2bdcc17ecd080f0850377f771a4e8693703da4e347e0165f00872a21845e17030de0ff47bc869de32ee24ca05e6f80", 0x93}], 0x3}}, {{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000740)="b1", 0x1}], 0x1}}, {{0x0, 0x0, &(0x7f0000000680)=[{&(0x7f0000000300)="b5d3838236773268a73daecfa0fdc5beb5a7ac332a11523627b41db31da6be0055bf716aa2b23b97d43cc40c632f6b9850f364ba0831ed0d6f7157f204275aa850d992d81ba6ab984bd809254e847b644cf6459a8139c3ebba62168141343c853896523ffb04131b2786acc44a57f5b1bd33cdaef8dd3c0526b7454eefe5153c5778ce05c77e962fd6bf3a4b9eb05654e64f1867398e202b4920e9ebc08f6e6dc652a12e45445030e069f44b", 0xac}, {&(0x7f0000000500)="e47ecfc6ce6d4d9cc5a0fbf98f301803da3adfbec8a1d5324076b744b24bc7cf83120d4819726e827d90219c7100dc54801b32c3a9a69a238db1f4d16464062d870e812ee381b6b3c234824a4a4475f9ee81286836e549ff446b0004", 0x5c}, {&(0x7f0000000840)="fbdd17a812c727337dc6c74dcb077562b57a440dbf7711ba245a62b76d46b0f19e6ff608ef9e5fbb4a8cfb02e28403582ceb8031acc767f766772a93a2f00ddde52ce6f7a84db1c66feecdc4a028e7b9e5e27a0057957743cbf196c517bf3ad97859c31205e3a35f435ec338927f53a43fae1907b2c772d9b35b9b3aa61985ea", 0x80}, {&(0x7f0000001300)="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", 0x25f}], 0x4}}], 0x3, 0xc0) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000600)=0xdfa, 0x4) sendto$inet(r0, &(0x7f00000012c0)='\t', 0x1, 0x11, 0x0, 0x0) 519.71471ms ago: executing program 0 (id=2030): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) getsockname$packet(r0, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x24, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, 0x0, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 450.753598ms ago: executing program 0 (id=2031): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(r0, 0x8933, &(0x7f0000002140)={'wg2\x00'}) sendmsg$nl_route(r0, 0x0, 0x0) 361.657366ms ago: executing program 0 (id=2032): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, 0x0, 0x82c}, 0x14}, 0x1, 0x0, 0x0, 0x20000800}, 0x40894) sendmsg$TIPC_NL_BEARER_SET(0xffffffffffffffff, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f00000006c0)=ANY=[@ANYBLOB="3c020000", @ANYRES16=0x0, @ANYBLOB="0000000000000000000005000000e00005800c00028008000100000000000c00028000000100000000004c000280080001000000000008000100000000000800030000000000080002000000000000000200000000000800040000000000000004000000000008000400"], 0x23c}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000000), r1) r2 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), r1) sendmsg$NBD_CMD_CONNECT(r0, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000700)=ANY=[@ANYBLOB="c0000000", @ANYRES16=r2, @ANYBLOB="010028bd7000fddbdf250400000020000a"], 0xc0}}, 0x0) 338.092211ms ago: executing program 0 (id=2033): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xb, 0x8, 0x8, 0x8, 0x5, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000280)=@framed={{}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r0}, {}, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x3}}]}, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000700)={{r0}, &(0x7f0000000680)=0x2, &(0x7f00000006c0)}, 0x20) unshare(0x62040200) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a300000000048000000030a01010000000000000000010000000900010073797a30000000000900030073797a3100000000080007006e617400140004800800014000000000080002"], 0xa4}}, 0x0) 175.352265ms ago: executing program 0 (id=2034): bpf$MAP_CREATE(0x1900000000000000, &(0x7f00000004c0)=@base={0x1b, 0x0, 0x0, 0x2000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x3, &(0x7f0000000440)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x41100, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) r1 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r1, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x0, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r1, 0x10f, 0x87, &(0x7f0000000000)={0x42, 0x1}, 0x10) close(r1) 132.096532ms ago: executing program 1 (id=2035): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0}}, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000540)=@newqdisc={0x2c, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_drr={0x8}]}, 0x2c}}, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000014c0)=@newtfilter={0x44, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {}, {0xf}}, [@filter_kind_options=@f_matchall={{0xb}, {0x10, 0x2, [@TCA_MATCHALL_CLASSID={0x8}, @TCA_MATCHALL_ACT={0x4}]}}]}, 0x44}}, 0x0) r2 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r2, &(0x7f00000002c0), 0x40000000000009f, 0x0) 31.28961ms ago: executing program 0 (id=2036): r0 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r0, &(0x7f00000000c0)={0x1d, r1}, 0x18) connect$can_j1939(r0, &(0x7f0000000140)={0x1d, r1}, 0x18) sendmmsg$inet(r0, &(0x7f0000002880)=[{{0x0, 0x0, &(0x7f00000027c0)=[{&(0x7f0000000180)="f1", 0x1}, {0x0}], 0x2}}], 0x1, 0x0) 30.989908ms ago: executing program 4 (id=2037): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a58000000160a03020000000000000000020000000900020073797a30000000000900010073797a30000000002c00038008000140000000000800024000000000180003"], 0x80}}, 0x0) syz_emit_ethernet(0x91, &(0x7f00000009c0)={@random="a579bbcb1e8e", @multicast, @void, {@ipv4={0x800, @gre={{0x6, 0x4, 0x1, 0x6, 0x83, 0x67, 0x0, 0x9, 0x2f, 0x0, @multicast2, @empty, {[@end]}}, {{0x0, 0x0, 0x1, 0x1, 0x0, 0x0, 0x0, 0x1, 0x880b, 0x0, 0x1}, {0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x800, [], "910f6a8c22d1554add93c1bd761d8194d9504a52b2786ec8490c3c0ce11250"}, {0x1, 0x0, 0x1, 0x1}, {0x8, 0x88be, 0x2, {{0x7, 0x1, 0x8, 0x0, 0x1, 0x3, 0x6, 0x46}, 0x1, {0x1}}}, {0x8, 0x22eb, 0x3, {{0x2, 0x2, 0xf9, 0x1, 0x1, 0x0, 0x3, 0x2}, 0x2, {0x4, 0x9, 0x3, 0x0, 0x0, 0x1, 0x0, 0x1}}}, {0x8, 0x6558, 0x4, "e681bec75e9fa297"}}}}}}, 0x0) 30.723159ms ago: executing program 1 (id=2038): r0 = bpf$MAP_CREATE(0x0, &(0x7f0000000080)=@base={0x2, 0x4, 0x6, 0x504, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_LOOKUP_BATCH(0x18, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000000), &(0x7f0000000200), 0xa7c, r0}, 0x38) sendmsg$key(0xffffffffffffffff, &(0x7f0000000000)={0x500, 0x0, &(0x7f0000000040)={0x0}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), r2) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_FRAME(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000400)={&(0x7f0000000100)=ANY=[@ANYBLOB="98030000", @ANYRES16=r3, @ANYBLOB="010028057000fcdbdf253b00000008000300", @ANYRES32=r4, @ANYBLOB="04008e00080057001b0a000004006c000500190107000000080026006c0900005603330080b0c000ffffffffffff"], 0x398}}, 0x884) 0s ago: executing program 2 (id=2039): bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x9, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x2, 0x1, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ENABLE_STREAM_RESET(r0, 0x84, 0x76, &(0x7f0000000100)={0x0, 0x7}, 0x8) setsockopt$inet_sctp6_SCTP_RECONFIG_SUPPORTED(r0, 0x84, 0x75, &(0x7f00000004c0)={0x0, 0x465f}, 0x8) bind$inet6(r0, &(0x7f00000002c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendmmsg$inet6(r0, &(0x7f0000000200)=[{{&(0x7f00000000c0)={0xa, 0x4e23, 0x0, @loopback}, 0x1c, &(0x7f0000000580)=[{&(0x7f0000000180)='\x00', 0x1}], 0x1}}], 0x1, 0x0) setsockopt$inet_sctp6_SCTP_RESET_STREAMS(r0, 0x84, 0x79, 0x0, 0x8) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.1.162' (ED25519) to the list of known hosts. [ 52.858253][ T5829] cgroup: Unknown subsys name 'net' [ 53.027865][ T5829] cgroup: Unknown subsys name 'cpuset' [ 53.035683][ T5829] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 54.290986][ T5829] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 56.211864][ T5846] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 56.220099][ T5843] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 56.228269][ T5846] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 56.229033][ T5843] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 56.242537][ T5846] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 56.243501][ T5843] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 56.254152][ T5846] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 56.258247][ T5843] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 56.271951][ T5843] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 56.279334][ T5843] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 56.289002][ T5846] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 56.291854][ T55] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 56.303386][ T5846] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 56.305161][ T55] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 56.318038][ T5850] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 56.319404][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 56.335168][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 56.335571][ T5846] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 56.342607][ T55] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 56.357160][ T5853] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 56.366076][ T55] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 56.397314][ T55] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 56.404919][ T5847] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 56.413293][ T5847] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 56.421751][ T5847] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 56.430702][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 56.438117][ T5847] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 56.445341][ T55] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 56.452674][ T5847] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 56.465521][ T55] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.727751][ T5839] chnl_net:caif_netlink_parms(): no params data found [ 56.836569][ T5840] chnl_net:caif_netlink_parms(): no params data found [ 56.871424][ T5849] chnl_net:caif_netlink_parms(): no params data found [ 56.937234][ T5845] chnl_net:caif_netlink_parms(): no params data found [ 56.962509][ T5839] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.971077][ T5839] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.979933][ T5839] bridge_slave_0: entered allmulticast mode [ 56.987665][ T5839] bridge_slave_0: entered promiscuous mode [ 57.040861][ T5839] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.048968][ T5839] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.056999][ T5839] bridge_slave_1: entered allmulticast mode [ 57.063644][ T5839] bridge_slave_1: entered promiscuous mode [ 57.092960][ T5840] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.100264][ T5840] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.107734][ T5840] bridge_slave_0: entered allmulticast mode [ 57.114803][ T5840] bridge_slave_0: entered promiscuous mode [ 57.122805][ T5840] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.130056][ T5840] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.137349][ T5840] bridge_slave_1: entered allmulticast mode [ 57.144856][ T5840] bridge_slave_1: entered promiscuous mode [ 57.171446][ T5854] chnl_net:caif_netlink_parms(): no params data found [ 57.209355][ T5839] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.220749][ T5839] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.235325][ T5840] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.247809][ T5840] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.257162][ T5849] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.264953][ T5849] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.272104][ T5849] bridge_slave_0: entered allmulticast mode [ 57.278900][ T5849] bridge_slave_0: entered promiscuous mode [ 57.287031][ T5849] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.294247][ T5849] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.301581][ T5849] bridge_slave_1: entered allmulticast mode [ 57.308247][ T5849] bridge_slave_1: entered promiscuous mode [ 57.391599][ T5839] team0: Port device team_slave_0 added [ 57.399677][ T5839] team0: Port device team_slave_1 added [ 57.407431][ T5840] team0: Port device team_slave_0 added [ 57.454226][ T5840] team0: Port device team_slave_1 added [ 57.460751][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.468040][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.494202][ T5839] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.509017][ T5849] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.521425][ T5849] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.530955][ T5845] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.538252][ T5845] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.545685][ T5845] bridge_slave_0: entered allmulticast mode [ 57.552404][ T5845] bridge_slave_0: entered promiscuous mode [ 57.560148][ T5845] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.567579][ T5845] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.575175][ T5845] bridge_slave_1: entered allmulticast mode [ 57.581790][ T5845] bridge_slave_1: entered promiscuous mode [ 57.600298][ T5839] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.607479][ T5839] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.633516][ T5839] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.677397][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.684447][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.710923][ T5840] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.738117][ T5849] team0: Port device team_slave_0 added [ 57.766441][ T5840] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.773415][ T5840] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.802539][ T5840] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.832820][ T5849] team0: Port device team_slave_1 added [ 57.848472][ T5845] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.867998][ T5854] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.877586][ T5854] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.885156][ T5854] bridge_slave_0: entered allmulticast mode [ 57.891649][ T5854] bridge_slave_0: entered promiscuous mode [ 57.903265][ T5839] hsr_slave_0: entered promiscuous mode [ 57.910140][ T5839] hsr_slave_1: entered promiscuous mode [ 57.928732][ T5845] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.949212][ T5854] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.956508][ T5854] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.964022][ T5854] bridge_slave_1: entered allmulticast mode [ 57.970559][ T5854] bridge_slave_1: entered promiscuous mode [ 57.978517][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.985575][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.011511][ T5849] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.057128][ T5849] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.064339][ T5849] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.090609][ T5849] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.104402][ T5840] hsr_slave_0: entered promiscuous mode [ 58.110579][ T5840] hsr_slave_1: entered promiscuous mode [ 58.116873][ T5840] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.127542][ T5840] Cannot create hsr debugfs directory [ 58.135136][ T5845] team0: Port device team_slave_0 added [ 58.162889][ T5845] team0: Port device team_slave_1 added [ 58.177362][ T5854] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 58.189364][ T5854] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 58.251305][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.259478][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.286036][ T5845] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.312404][ T5849] hsr_slave_0: entered promiscuous mode [ 58.318911][ T5849] hsr_slave_1: entered promiscuous mode [ 58.325117][ T5849] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.332804][ T5849] Cannot create hsr debugfs directory [ 58.339132][ T5845] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.346603][ T5845] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.372833][ T5845] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.389517][ T5853] Bluetooth: hci0: command tx timeout [ 58.401446][ T5854] team0: Port device team_slave_0 added [ 58.410691][ T5854] team0: Port device team_slave_1 added [ 58.463951][ T5853] Bluetooth: hci2: command tx timeout [ 58.464014][ T5847] Bluetooth: hci3: command tx timeout [ 58.469617][ T5853] Bluetooth: hci1: command tx timeout [ 58.488311][ T5845] hsr_slave_0: entered promiscuous mode [ 58.495407][ T5845] hsr_slave_1: entered promiscuous mode [ 58.501377][ T5845] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.509182][ T5845] Cannot create hsr debugfs directory [ 58.544051][ T5853] Bluetooth: hci4: command tx timeout [ 58.572399][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.581929][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.611340][ T5854] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.642295][ T5854] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.649612][ T5854] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.675648][ T5854] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.795833][ T5854] hsr_slave_0: entered promiscuous mode [ 58.802273][ T5854] hsr_slave_1: entered promiscuous mode [ 58.808754][ T5854] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.816706][ T5854] Cannot create hsr debugfs directory [ 58.931672][ T5840] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.946750][ T5840] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.968210][ T5840] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.982466][ T5840] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.023377][ T5839] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.045218][ T5839] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.074979][ T5839] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.098466][ T5839] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.152838][ T5840] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.178110][ T5845] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 59.207480][ T5840] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.214721][ T5845] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 59.224415][ T5849] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.234725][ T5845] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 59.246393][ T5845] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.260239][ T11] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.267567][ T11] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.280265][ T5849] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.311483][ T11] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.318643][ T11] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.329522][ T5849] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.343244][ T5849] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.407506][ T5854] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 59.417815][ T5854] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 59.465861][ T5854] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 59.508564][ T5854] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 59.628259][ T5839] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.651858][ T5839] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.696652][ T5849] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.708632][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.715795][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.725454][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.732543][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.744912][ T5845] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.783015][ T5849] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.796646][ T35] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.803779][ T35] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.829985][ T35] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.837131][ T35] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.856676][ T5854] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.873080][ T5840] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.896144][ T5845] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.942465][ T3568] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.949631][ T3568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.979492][ T3568] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.986595][ T3568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.999632][ T5854] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.052786][ T3568] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.059974][ T3568] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.086741][ T3568] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.093956][ T3568] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.199960][ T5840] veth0_vlan: entered promiscuous mode [ 60.260186][ T5840] veth1_vlan: entered promiscuous mode [ 60.290041][ T5849] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.316742][ T5839] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.397790][ T5840] veth0_macvtap: entered promiscuous mode [ 60.445743][ T5849] veth0_vlan: entered promiscuous mode [ 60.455581][ T5840] veth1_macvtap: entered promiscuous mode [ 60.469622][ T5853] Bluetooth: hci0: command tx timeout [ 60.471741][ T5849] veth1_vlan: entered promiscuous mode [ 60.544161][ T55] Bluetooth: hci2: command tx timeout [ 60.544271][ T5847] Bluetooth: hci1: command tx timeout [ 60.549646][ T5853] Bluetooth: hci3: command tx timeout [ 60.579974][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.611715][ T5849] veth0_macvtap: entered promiscuous mode [ 60.627422][ T5853] Bluetooth: hci4: command tx timeout [ 60.630502][ T5840] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.708612][ T5849] veth1_macvtap: entered promiscuous mode [ 60.722590][ T5845] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.737544][ T5840] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.747034][ T5840] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.758840][ T5840] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.768977][ T5840] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.808594][ T5854] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.868489][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.881046][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.893514][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.921842][ T5849] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.935292][ T5849] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.951657][ T5849] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.982491][ T5849] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.992004][ T1084] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.994516][ T5849] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.008982][ T5849] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.012499][ T1084] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.031434][ T5849] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.062025][ T5854] veth0_vlan: entered promiscuous mode [ 61.080701][ T5845] veth0_vlan: entered promiscuous mode [ 61.108033][ T5854] veth1_vlan: entered promiscuous mode [ 61.123352][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.124852][ T5839] veth0_vlan: entered promiscuous mode [ 61.146772][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.148636][ T5845] veth1_vlan: entered promiscuous mode [ 61.212975][ T5854] veth0_macvtap: entered promiscuous mode [ 61.228089][ T5840] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 61.248568][ T5839] veth1_vlan: entered promiscuous mode [ 61.271310][ T5854] veth1_macvtap: entered promiscuous mode [ 61.359838][ T5845] veth0_macvtap: entered promiscuous mode [ 61.370197][ T3568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.389222][ T5839] veth0_macvtap: entered promiscuous mode [ 61.394802][ T3568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.419474][ T5845] veth1_macvtap: entered promiscuous mode [ 61.449525][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.460555][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.470970][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.481602][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.492801][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.502875][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.513522][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.523759][ T5854] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.534534][ T5854] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.545513][ T5854] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.571486][ T5839] veth1_macvtap: entered promiscuous mode [ 61.594411][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.606597][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.618627][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.635132][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.649031][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.662210][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.676899][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.701696][ T5854] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.710774][ T53] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.719635][ T5854] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.728423][ T53] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.735806][ T5854] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.745828][ T5854] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.821383][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.843647][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.853536][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.880933][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.891382][ T5845] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.902392][ T5845] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.917092][ T5845] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.979429][ T5845] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.989076][ T5845] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.003740][ T5845] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.012587][ T5845] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.026801][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.037448][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.047600][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.058560][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.069331][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.081748][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.092023][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.102613][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.113837][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.172740][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.195674][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.206812][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.218010][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.229254][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.240177][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.251498][ T5839] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.262114][ T5839] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.285035][ T5931] syz.3.7 uses obsolete (PF_INET,SOCK_PACKET) [ 62.292630][ T5839] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.399386][ T5839] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.413909][ T5839] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.422650][ T5839] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.443867][ T5839] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.542233][ T3568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.555112][ T5853] Bluetooth: hci0: command tx timeout [ 62.560120][ T3568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.572786][ T5940] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10'. [ 62.582479][ T5940] netlink: 28 bytes leftover after parsing attributes in process `syz.0.10'. [ 62.599193][ T5940] syz_tun: entered promiscuous mode [ 62.624091][ T5853] Bluetooth: hci1: command tx timeout [ 62.629555][ T5847] Bluetooth: hci3: command tx timeout [ 62.629573][ T55] Bluetooth: hci2: command tx timeout [ 62.660947][ T5940] batadv_slave_1: entered promiscuous mode [ 62.703798][ T55] Bluetooth: hci4: command tx timeout [ 62.760660][ T5944] warning: `syz.0.12' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 62.831345][ T1144] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.845880][ T1144] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.963783][ T53] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.971668][ T53] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.006819][ T5950] bridge1: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 63.059085][ T3568] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.067314][ T3568] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.187518][ T3568] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.207971][ T3568] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.251648][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.269828][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.677019][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 63.730250][ T5978] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.831967][ T5980] netlink: 4 bytes leftover after parsing attributes in process `syz.4.5'. [ 63.909109][ T5984] Zero length message leads to an empty skb [ 63.998334][ T5989] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 64.068166][ T5983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 64.131260][ T5991] vlan2: entered promiscuous mode [ 64.146013][ T5991] bond0: (slave vlan2): Opening slave failed [ 64.160372][ T5983] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 64.199431][ T5983] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 64.624326][ T55] Bluetooth: hci0: command tx timeout [ 64.706590][ T55] Bluetooth: hci2: command tx timeout [ 64.719636][ T55] Bluetooth: hci1: command tx timeout [ 64.726587][ T55] Bluetooth: hci3: command tx timeout [ 64.730074][ T6017] delete_channel: no stack [ 64.783968][ T5853] Bluetooth: hci4: command tx timeout [ 64.823421][ C0] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 65.194775][ T6033] netlink: 'syz.3.49': attribute type 1 has an invalid length. [ 65.269395][ T6040] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 65.497946][ T6046] erspan0: entered allmulticast mode [ 66.009172][ T6064] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.135509][ T6064] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.281716][ T6080] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 66.390515][ T6064] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.449024][ T6082] syzkaller1: entered promiscuous mode [ 66.455696][ T6082] syzkaller1: entered allmulticast mode [ 66.560799][ T6064] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 66.619698][ T6090] netlink: 8 bytes leftover after parsing attributes in process `syz.2.74'. [ 66.983321][ T6088] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 67.000269][ T6088] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 67.011394][ T6088] bond0 (unregistering): Released all slaves [ 67.042001][ T6104] team_slave_0: entered promiscuous mode [ 67.048047][ T6104] team_slave_1: entered promiscuous mode [ 67.069621][ T6104] vlan2: entered promiscuous mode [ 67.115032][ T6104] team0: entered promiscuous mode [ 67.122011][ T6104] team0: Device vlan2 is already an upper device of the team interface [ 67.144610][ T6104] team0: left promiscuous mode [ 67.149919][ T6104] team_slave_0: left promiscuous mode [ 67.155419][ T6104] team_slave_1: left promiscuous mode [ 67.181302][ T6106] netlink: 4 bytes leftover after parsing attributes in process `syz.1.81'. [ 67.209713][ T6106] xt_hashlimit: max too large, truncated to 1048576 [ 67.212858][ T6064] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.227943][ T6106] netlink: 'syz.1.81': attribute type 1 has an invalid length. [ 67.245534][ T6106] netlink: 224 bytes leftover after parsing attributes in process `syz.1.81'. [ 67.280985][ T6064] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.468060][ T6064] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.498014][ T6064] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 67.833507][ T6133] Bluetooth: MGMT ver 1.23 [ 68.240268][ T6157] tipc: Started in network mode [ 68.246158][ T6157] tipc: Node identity 3, cluster identity 4711 [ 68.249250][ C0] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 68.252598][ T6157] tipc: Node number set to 3 [ 68.413003][ T6163] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 68.502826][ T6163] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 68.627836][ T6170] netlink: 4 bytes leftover after parsing attributes in process `syz.1.107'. [ 68.852493][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 69.082790][ T6187] Cannot find set identified by id 0 to match [ 69.224007][ T6193] netlink: 40 bytes leftover after parsing attributes in process `syz.1.116'. [ 69.469477][ T6198] netlink: 28 bytes leftover after parsing attributes in process `syz.0.119'. [ 69.523028][ T6198] netlink: 28 bytes leftover after parsing attributes in process `syz.0.119'. [ 69.533841][ T6198] netlink: 28 bytes leftover after parsing attributes in process `syz.0.119'. [ 69.586025][ T6203] netlink: 'syz.1.121': attribute type 10 has an invalid length. [ 69.670550][ T6203] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 69.875863][ T6216] netlink: 8 bytes leftover after parsing attributes in process `syz.3.127'. [ 69.964855][ T6218] bridge0: port 3(gretap0) entered blocking state [ 69.971814][ T6218] bridge0: port 3(gretap0) entered disabled state [ 69.979262][ T6218] gretap0: entered allmulticast mode [ 69.988408][ T6218] gretap0: entered promiscuous mode [ 69.994528][ T6218] bridge0: port 3(gretap0) entered blocking state [ 70.001313][ T6218] bridge0: port 3(gretap0) entered forwarding state [ 70.011124][ T6218] gretap0: left allmulticast mode [ 70.016336][ T6218] gretap0: left promiscuous mode [ 70.021522][ T6220] netlink: 4 bytes leftover after parsing attributes in process `syz.4.128'. [ 70.021586][ T6218] bridge0: port 3(gretap0) entered disabled state [ 70.046257][ T6222] netlink: 36 bytes leftover after parsing attributes in process `syz.2.130'. [ 70.360662][ T6237] netlink: 16 bytes leftover after parsing attributes in process `syz.4.135'. [ 70.381724][ T6237] bridge0: port 2(bridge_slave_1) entered disabled state [ 70.483103][ T6244] mac80211_hwsim hwsim11 wlan1: entered promiscuous mode [ 70.493900][ T6243] mac80211_hwsim hwsim11 wlan1: left promiscuous mode [ 70.702739][ T6216] Bluetooth: hci0: Opcode 0x0c03 failed: -4 [ 70.722997][ T6255] netlink: 'syz.2.143': attribute type 10 has an invalid length. [ 70.732480][ T6255] netlink: 132 bytes leftover after parsing attributes in process `syz.2.143'. [ 71.531680][ T6287] Cannot find set identified by id 0 to match [ 71.578422][ T6287] pim6reg: entered allmulticast mode [ 71.600957][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.804730][ T6287] pim6reg: left allmulticast mode [ 72.007972][ T6307] bridge0: port 3(gretap0) entered blocking state [ 72.036630][ T6307] bridge0: port 3(gretap0) entered disabled state [ 72.043259][ T6307] gretap0: entered allmulticast mode [ 72.093035][ T6307] gretap0: entered promiscuous mode [ 72.114640][ T6307] bridge0: port 3(gretap0) entered blocking state [ 72.121229][ T6307] bridge0: port 3(gretap0) entered forwarding state [ 72.141909][ T6312] gretap0: left allmulticast mode [ 72.151998][ T25] IPVS: starting estimator thread 0... [ 72.174382][ T6312] gretap0: left promiscuous mode [ 72.201784][ T6312] bridge0: port 3(gretap0) entered disabled state [ 72.273816][ T6317] IPVS: using max 21 ests per chain, 50400 per kthread [ 72.286359][ T6321] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 72.293824][ T6321] IPv6: NLM_F_CREATE should be set when creating new route [ 72.446318][ T6328] FAULT_INJECTION: forcing a failure. [ 72.446318][ T6328] name fail_usercopy, interval 1, probability 0, space 0, times 1 [ 72.511729][ T6328] CPU: 0 UID: 0 PID: 6328 Comm: syz.3.173 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 72.522378][ T6328] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 72.532492][ T6328] Call Trace: [ 72.535802][ T6328] [ 72.538751][ T6328] dump_stack_lvl+0x241/0x360 [ 72.543477][ T6328] ? __pfx_dump_stack_lvl+0x10/0x10 [ 72.548706][ T6328] ? __pfx__printk+0x10/0x10 [ 72.553326][ T6328] ? __pfx_lock_release+0x10/0x10 [ 72.558388][ T6328] should_fail_ex+0x3b0/0x4e0 [ 72.563113][ T6328] _copy_from_user+0x2f/0xc0 [ 72.567737][ T6328] copy_msghdr_from_user+0xae/0x680 [ 72.572969][ T6328] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 72.578834][ T6328] __sys_sendmsg+0x22d/0x380 [ 72.583458][ T6328] ? __pfx___sys_sendmsg+0x10/0x10 [ 72.588610][ T6328] ? __pfx_vfs_write+0x10/0x10 [ 72.593427][ T6328] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 72.599788][ T6328] ? do_syscall_64+0x100/0x230 [ 72.604584][ T6328] ? do_syscall_64+0xb6/0x230 [ 72.609285][ T6328] do_syscall_64+0xf3/0x230 [ 72.613795][ T6328] ? clear_bhb_loop+0x35/0x90 [ 72.616674][ T6333] netlink: 'syz.2.177': attribute type 10 has an invalid length. [ 72.618471][ T6328] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 72.618500][ T6328] RIP: 0033:0x7fee1637e759 [ 72.636543][ T6328] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 72.656182][ T6328] RSP: 002b:00007fee17158038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 72.664607][ T6328] RAX: ffffffffffffffda RBX: 00007fee16535f80 RCX: 00007fee1637e759 [ 72.672598][ T6328] RDX: 0000000000000000 RSI: 0000000020000000 RDI: 0000000000000003 [ 72.680588][ T6328] RBP: 00007fee17158090 R08: 0000000000000000 R09: 0000000000000000 [ 72.688578][ T6328] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 72.696573][ T6328] R13: 0000000000000000 R14: 00007fee16535f80 R15: 00007ffdce27df48 [ 72.704585][ T6328] [ 73.399315][ T6380] netlink: 'syz.2.194': attribute type 7 has an invalid length. [ 74.712687][ T6440] bridge0: port 3(gretap0) entered blocking state [ 74.759142][ T6440] bridge0: port 3(gretap0) entered disabled state [ 74.814891][ T6440] gretap0: entered allmulticast mode [ 74.850549][ T6440] gretap0: entered promiscuous mode [ 74.882978][ T6440] bridge0: port 3(gretap0) entered blocking state [ 74.889646][ T6440] bridge0: port 3(gretap0) entered forwarding state [ 74.925042][ T6445] gretap0: left allmulticast mode [ 74.945184][ T6445] gretap0: left promiscuous mode [ 74.951637][ T6445] bridge0: port 3(gretap0) entered disabled state [ 75.147709][ T6457] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 75.547271][ T6477] __nla_validate_parse: 7 callbacks suppressed [ 75.547288][ T6477] netlink: 8 bytes leftover after parsing attributes in process `syz.4.240'. [ 75.579347][ T6473] Illegal XDP return value 4294967274 on prog (id 35) dev N/A, expect packet loss! [ 75.592789][ T6477] netlink: 32 bytes leftover after parsing attributes in process `syz.4.240'. [ 75.619252][ T6477] gtp0: entered promiscuous mode [ 75.627395][ T6477] gtp0: entered allmulticast mode [ 75.649759][ T6473] netlink: 8 bytes leftover after parsing attributes in process `syz.1.239'. [ 76.252201][ T6508] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.251'. [ 76.285976][ T6506] netlink: 16402 bytes leftover after parsing attributes in process `syz.4.251'. [ 76.328186][ T6508] netlink: 28 bytes leftover after parsing attributes in process `syz.4.251'. [ 76.341332][ T6508] netlink: 28 bytes leftover after parsing attributes in process `syz.4.251'. [ 76.382779][ T6508] netlink: 28 bytes leftover after parsing attributes in process `syz.4.251'. [ 76.647897][ T6528] bridge0: port 2(bridge_slave_1) entered disabled state [ 76.667616][ T6528] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 76.684132][ T6530] netlink: 8 bytes leftover after parsing attributes in process `syz.1.261'. [ 76.721750][ T47] cfg80211: failed to load regulatory.db [ 77.697335][ T6563] vlan2: entered promiscuous mode [ 77.707795][ T6563] bridge0: entered promiscuous mode [ 77.722555][ T6563] team0: Port device vlan2 added [ 77.857920][ T6570] netlink: 'syz.1.279': attribute type 12 has an invalid length. [ 78.021054][ T6580] netlink: 'syz.1.285': attribute type 1 has an invalid length. [ 78.386534][ T6601] netdevsim netdevsim2: Direct firmware load for ./file0 failed with error -2 [ 78.411087][ T6601] netdevsim netdevsim2: Falling back to sysfs fallback for: ./file0 [ 78.430228][ T6604] netlink: 4 bytes leftover after parsing attributes in process `syz.3.293'. [ 78.770109][ T6626] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 78.777455][ T6626] IPv6: NLM_F_CREATE should be set when creating new route [ 78.784779][ T6626] IPv6: NLM_F_CREATE should be set when creating new route [ 79.166301][ T6600] DRBG: could not allocate digest TFM handle: hmac(sha512) [ 79.881701][ T6700] vlan2: entered promiscuous mode [ 79.888346][ T6700] dummy0: entered promiscuous mode [ 79.896751][ T6700] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 80.290844][ T6722] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 80.948795][ T6762] __nla_validate_parse: 3 callbacks suppressed [ 80.948813][ T6762] netlink: 36 bytes leftover after parsing attributes in process `syz.0.351'. [ 81.162830][ T6776] netlink: 4 bytes leftover after parsing attributes in process `syz.3.361'. [ 81.178991][ T6779] netlink: 36 bytes leftover after parsing attributes in process `syz.1.359'. [ 81.200966][ T6779] netlink: 16 bytes leftover after parsing attributes in process `syz.1.359'. [ 81.211681][ T6779] netlink: 36 bytes leftover after parsing attributes in process `syz.1.359'. [ 81.220814][ T6779] netlink: 36 bytes leftover after parsing attributes in process `syz.1.359'. [ 81.411466][ T6791] vlan2: entered promiscuous mode [ 81.427566][ T6791] team_slave_0: entered promiscuous mode [ 81.433301][ T6791] team_slave_1: entered promiscuous mode [ 81.442074][ T6791] team0: entered promiscuous mode [ 81.451236][ T6791] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 81.482830][ T6795] netlink: 12 bytes leftover after parsing attributes in process `syz.3.369'. [ 82.306781][ T6836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.386'. [ 82.338610][ T6836] netlink: 4 bytes leftover after parsing attributes in process `syz.2.386'. [ 82.527510][ T6850] raw_sendmsg: syz.1.389 forgot to set AF_INET. Fix it! [ 82.560595][ T6852] netlink: 8 bytes leftover after parsing attributes in process `syz.2.393'. [ 83.481631][ T6894] netlink: 'syz.2.412': attribute type 10 has an invalid length. [ 83.540582][ T6894] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 84.216435][ T6928] netlink: 'syz.0.427': attribute type 10 has an invalid length. [ 84.279017][ T6928] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 84.346703][ T6936] team0: Port device veth0_to_batadv added [ 84.512051][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 84.735499][ T6950] netlink: 'syz.3.435': attribute type 10 has an invalid length. [ 85.453120][ T6992] netlink: 'syz.2.454': attribute type 10 has an invalid length. [ 86.347134][ T7047] xt_hashlimit: max too large, truncated to 1048576 [ 86.366619][ T7047] Cannot find add_set index 0 as target [ 86.438488][ T7051] __nla_validate_parse: 10 callbacks suppressed [ 86.438510][ T7051] netlink: 8 bytes leftover after parsing attributes in process `syz.3.479'. [ 86.776697][ T7075] syz.2.491[7075] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.776791][ T7075] syz.2.491[7075] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.791048][ T7075] syz.2.491[7075] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 86.808565][ T7075] netlink: 8 bytes leftover after parsing attributes in process `syz.2.491'. [ 87.462692][ T7117] x_tables: eb_tables: snat.0 target: invalid size 16 (kernel) != (user) 0 [ 87.621597][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 88.604948][ T7180] netlink: 332 bytes leftover after parsing attributes in process `syz.4.537'. [ 88.721385][ T7187] netlink: 'syz.3.539': attribute type 10 has an invalid length. [ 88.803756][ T7187] netlink: 132 bytes leftover after parsing attributes in process `syz.3.539'. [ 89.077393][ T5889] IPVS: starting estimator thread 0... [ 89.131680][ T7205] tipc: Started in network mode [ 89.143918][ T7205] tipc: Node identity ac1414aa, cluster identity 4711 [ 89.158887][ T7205] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 89.178433][ T7206] IPVS: using max 18 ests per chain, 43200 per kthread [ 89.194024][ T7205] tipc: Enabled bearer , priority 10 [ 89.264792][ T7209] netlink: 28 bytes leftover after parsing attributes in process `syz.0.551'. [ 89.274133][ T7209] netlink: 28 bytes leftover after parsing attributes in process `syz.0.551'. [ 89.295119][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 89.361472][ T7214] netlink: 28 bytes leftover after parsing attributes in process `syz.0.551'. [ 89.380464][ T7214] netlink: 28 bytes leftover after parsing attributes in process `syz.0.551'. [ 89.433698][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 89.527113][ T7225] netlink: 'syz.3.557': attribute type 10 has an invalid length. [ 89.569100][ T7225] netlink: 132 bytes leftover after parsing attributes in process `syz.3.557'. [ 89.578203][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 89.713646][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 89.853646][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 89.987553][ T7253] netlink: 'syz.0.571': attribute type 10 has an invalid length. [ 89.993780][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 90.029241][ T7253] netlink: 132 bytes leftover after parsing attributes in process `syz.0.571'. [ 90.133659][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 90.275035][ T5888] tipc: Node number set to 2886997162 [ 90.413649][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 90.451819][ T7285] macsec1: entered promiscuous mode [ 91.059782][ T7327] lo speed is unknown, defaulting to 1000 [ 91.072878][ T7327] lo speed is unknown, defaulting to 1000 [ 91.091187][ T7327] lo speed is unknown, defaulting to 1000 [ 91.112206][ T7327] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 91.142146][ T7327] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 91.176780][ T7327] lo speed is unknown, defaulting to 1000 [ 91.189238][ T7327] lo speed is unknown, defaulting to 1000 [ 91.208720][ T7327] lo speed is unknown, defaulting to 1000 [ 91.229238][ T7327] lo speed is unknown, defaulting to 1000 [ 91.249232][ T7327] lo speed is unknown, defaulting to 1000 [ 91.285219][ T7334] x_tables: ip_tables: bpf.1 match: invalid size 528 (kernel) != (user) 536 [ 91.515436][ T7345] __nla_validate_parse: 5 callbacks suppressed [ 91.515454][ T7345] netlink: 4 bytes leftover after parsing attributes in process `syz.0.608'. [ 91.655177][ T7352] netlink: 8 bytes leftover after parsing attributes in process `syz.2.611'. [ 91.687130][ T7352] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 91.703739][ T7352] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 91.890875][ T7367] netlink: 8 bytes leftover after parsing attributes in process `syz.0.619'. [ 91.917337][ T7367] netlink: 24 bytes leftover after parsing attributes in process `syz.0.619'. [ 92.098440][ T7378] netlink: 4 bytes leftover after parsing attributes in process `syz.1.624'. [ 92.367864][ T7385] netlink: 24 bytes leftover after parsing attributes in process `syz.0.627'. [ 92.426537][ T7387] IPv6: Can't replace route, no match found [ 92.757871][ T7400] netlink: 8 bytes leftover after parsing attributes in process `syz.1.633'. [ 92.767863][ T7400] netlink: 24 bytes leftover after parsing attributes in process `syz.1.633'. [ 92.833026][ T7403] netlink: 4 bytes leftover after parsing attributes in process `syz.1.635'. [ 93.051129][ T7414] netlink: 24 bytes leftover after parsing attributes in process `syz.2.639'. [ 93.263640][ C0] net_ratelimit: 6 callbacks suppressed [ 93.263661][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 94.226842][ T7494] netlink: 'syz.1.678': attribute type 21 has an invalid length. [ 94.303656][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 94.614916][ T7522] Cannot find add_set index 0 as target [ 94.688748][ T7530] syz.0.693[7530] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.688839][ T7530] syz.0.693[7530] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 94.730634][ T7530] syz.0.693[7530] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.151528][ T7562] syz.2.709[7562] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.190298][ T7562] syz.2.709[7562] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.205263][ T7562] syz.2.709[7562] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 95.231827][ T7562] netdevsim netdevsim2: loading /lib/firmware/. failed with error -22 [ 95.265733][ T7562] netdevsim netdevsim2: Direct firmware load for . failed with error -22 [ 95.274476][ T7562] netdevsim netdevsim2: Falling back to sysfs fallback for: . [ 95.343708][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 96.034926][ T7625] pim6reg1: entered promiscuous mode [ 96.049514][ T7625] pim6reg1: entered allmulticast mode [ 96.383722][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 96.406936][ T7648] netlink: 'syz.4.749': attribute type 10 has an invalid length. [ 96.433505][ T7648] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 96.553664][ T7658] __nla_validate_parse: 20 callbacks suppressed [ 96.553683][ T7658] netlink: 4 bytes leftover after parsing attributes in process `syz.0.754'. [ 96.892865][ T7674] netlink: 'syz.1.762': attribute type 10 has an invalid length. [ 97.010349][ T7683] netlink: 4 bytes leftover after parsing attributes in process `syz.1.767'. [ 97.423643][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 97.478889][ T7716] netlink: 'syz.2.777': attribute type 10 has an invalid length. [ 98.272415][ T7770] netlink: 100 bytes leftover after parsing attributes in process `syz.1.795'. [ 98.371502][ T7775] vlan3: entered promiscuous mode [ 98.463948][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 98.610176][ T7789] lo speed is unknown, defaulting to 1000 [ 98.624113][ T7789] lo speed is unknown, defaulting to 1000 [ 98.640957][ T7789] lo speed is unknown, defaulting to 1000 [ 98.662043][ T7789] infiniband syz2: RDMA CMA: cma_listen_on_dev, error -98 [ 98.699920][ T7789] lo speed is unknown, defaulting to 1000 [ 98.729654][ T7789] lo speed is unknown, defaulting to 1000 [ 98.741858][ T7789] lo speed is unknown, defaulting to 1000 [ 98.759308][ T7789] lo speed is unknown, defaulting to 1000 [ 98.768438][ T7789] lo speed is unknown, defaulting to 1000 [ 98.846116][ T7807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.810'. [ 98.871519][ T7807] netlink: 8 bytes leftover after parsing attributes in process `syz.0.810'. [ 98.965569][ T7815] netlink: 4 bytes leftover after parsing attributes in process `syz.0.814'. [ 98.970976][ T7814] netlink: 20 bytes leftover after parsing attributes in process `syz.4.813'. [ 98.991146][ T7814] openvswitch: netlink: Flow key attr not present in new flow. [ 99.188190][ C0] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 99.252894][ T7833] netlink: 20 bytes leftover after parsing attributes in process `syz.1.822'. [ 99.265762][ T7833] openvswitch: netlink: Flow key attr not present in new flow. [ 99.329417][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.824'. [ 99.347907][ T7837] netlink: 8 bytes leftover after parsing attributes in process `syz.1.824'. [ 99.503639][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 100.037540][ T7882] syz.0.846[7882] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.037634][ T7882] syz.0.846[7882] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.050618][ T7882] syz.0.846[7882] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.543643][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 100.939367][ T7932] syz.2.868[7932] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.939461][ T7932] syz.2.868[7932] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 100.961378][ T7932] syz.2.868[7932] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 101.300730][ T7945] vlan3: entered promiscuous mode [ 101.583659][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 101.593901][ T7957] netlink: 'syz.0.878': attribute type 10 has an invalid length. [ 101.662164][ T7957] batman_adv: batadv0: Adding interface: team0 [ 101.688869][ T7957] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 101.720206][ T7957] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 101.735075][ T7960] netlink: 'syz.0.878': attribute type 10 has an invalid length. [ 101.763746][ T7960] __nla_validate_parse: 4 callbacks suppressed [ 101.763765][ T7960] netlink: 2 bytes leftover after parsing attributes in process `syz.0.878'. [ 101.786065][ T7960] team0: entered promiscuous mode [ 101.791657][ T7960] team_slave_0: entered promiscuous mode [ 101.797663][ T7960] team_slave_1: entered promiscuous mode [ 101.805281][ T7960] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.812857][ T7960] batman_adv: batadv0: Interface activated: team0 [ 101.820152][ T7960] batman_adv: batadv0: Interface deactivated: team0 [ 101.829871][ T7960] batman_adv: batadv0: Removing interface: team0 [ 101.844741][ T7960] bridge0: port 3(team0) entered blocking state [ 101.851299][ T7960] bridge0: port 3(team0) entered disabled state [ 101.864855][ T7960] team0: entered allmulticast mode [ 101.870144][ T7960] team_slave_0: entered allmulticast mode [ 101.880410][ T7960] team_slave_1: entered allmulticast mode [ 101.897920][ T7960] bridge0: port 3(team0) entered blocking state [ 101.904360][ T7960] bridge0: port 3(team0) entered forwarding state [ 102.027863][ C0] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 102.140187][ T7983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.890'. [ 102.160455][ T7983] netlink: 8 bytes leftover after parsing attributes in process `syz.1.890'. [ 102.515990][ T7998] netlink: 28 bytes leftover after parsing attributes in process `syz.3.897'. [ 102.530739][ T7999] netlink: 40 bytes leftover after parsing attributes in process `syz.2.898'. [ 102.623687][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 102.958237][ T8028] netlink: 20 bytes leftover after parsing attributes in process `syz.4.911'. [ 102.968450][ T8028] openvswitch: netlink: Flow key attr not present in new flow. [ 103.202366][ T8040] vlan3: entered promiscuous mode [ 103.383317][ T8049] netlink: 28 bytes leftover after parsing attributes in process `syz.0.920'. [ 103.663760][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 103.772457][ T8069] pimreg: entered allmulticast mode [ 103.794809][ T8072] veth1_to_bridge: entered promiscuous mode [ 103.801169][ T8072] macsec2: entered promiscuous mode [ 103.809021][ T8072] veth1_to_bridge: left promiscuous mode [ 103.873002][ T8069] pimreg: left allmulticast mode [ 103.983128][ T8074] lo: entered allmulticast mode [ 103.995884][ T8074] tunl0: entered allmulticast mode [ 104.008397][ T8074] gre0: entered allmulticast mode [ 104.027803][ T8074] gretap0: entered allmulticast mode [ 104.046344][ T8074] erspan0: entered allmulticast mode [ 104.069649][ T8074] ip_vti0: entered allmulticast mode [ 104.091724][ T8074] ip6_vti0: entered allmulticast mode [ 104.101042][ T8084] netlink: 12 bytes leftover after parsing attributes in process `syz.2.936'. [ 104.125903][ T8074] sit0: entered allmulticast mode [ 104.145345][ T8074] ip6tnl0: entered allmulticast mode [ 104.157643][ T8074] ip6gre0: entered allmulticast mode [ 104.171553][ T8074] ip6gretap0: entered allmulticast mode [ 104.182022][ T8074] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.189651][ T8074] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.209497][ T8074] bridge0: entered allmulticast mode [ 104.247502][ T8074] vcan0: entered allmulticast mode [ 104.279033][ T8074] team0: entered allmulticast mode [ 104.284786][ T8074] team_slave_0: entered allmulticast mode [ 104.290626][ T8074] team_slave_1: entered allmulticast mode [ 104.296515][ T8074] veth0_to_batadv: entered allmulticast mode [ 104.311811][ T8074] dummy0: entered allmulticast mode [ 104.333879][ T8074] nlmon0: entered allmulticast mode [ 104.343909][ T8074] caif0: entered allmulticast mode [ 104.353424][ T8074] batadv0: entered allmulticast mode [ 104.361920][ T8074] vxcan0: entered allmulticast mode [ 104.370192][ T8074] vxcan1: entered allmulticast mode [ 104.377556][ T8074] veth0: entered allmulticast mode [ 104.387680][ T8074] veth1: entered allmulticast mode [ 104.399708][ T8074] wg0: entered allmulticast mode [ 104.408092][ T8074] wg1: entered allmulticast mode [ 104.415770][ T8074] wg2: entered allmulticast mode [ 104.422702][ T8074] veth0_to_bridge: entered allmulticast mode [ 104.435234][ T8074] veth1_to_bridge: entered allmulticast mode [ 104.448735][ T8074] veth0_to_bond: entered allmulticast mode [ 104.457324][ T8074] bond_slave_0: entered allmulticast mode [ 104.463455][ T8074] veth1_to_bond: entered allmulticast mode [ 104.474714][ T8074] bond_slave_1: entered allmulticast mode [ 104.481181][ T8074] veth0_to_team: entered allmulticast mode [ 104.492645][ T8074] veth1_to_team: entered allmulticast mode [ 104.507121][ T8074] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 104.514840][ T8074] batadv_slave_0: entered allmulticast mode [ 104.527287][ T8074] veth1_to_batadv: entered allmulticast mode [ 104.536375][ T8074] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 104.544728][ T8074] batadv_slave_1: entered allmulticast mode [ 104.553106][ T8074] xfrm0: entered allmulticast mode [ 104.560968][ T8074] veth0_to_hsr: entered allmulticast mode [ 104.571401][ T8074] hsr_slave_0: entered allmulticast mode [ 104.579306][ T8074] veth1_to_hsr: entered allmulticast mode [ 104.588704][ T8074] hsr_slave_1: entered allmulticast mode [ 104.597384][ T8074] hsr0: entered allmulticast mode [ 104.607750][ T8074] veth1_virt_wifi: entered allmulticast mode [ 104.616953][ T8074] veth0_virt_wifi: entered allmulticast mode [ 104.625105][ T8074] net veth1_virt_wifi virt_wifi0: entered allmulticast mode [ 104.633313][ T8074] veth1_vlan: entered allmulticast mode [ 104.651222][ T8074] veth0_vlan: entered allmulticast mode [ 104.664703][ T8074] vlan0: entered allmulticast mode [ 104.669934][ T8074] vlan1: entered allmulticast mode [ 104.677351][ T8074] macvlan0: entered allmulticast mode [ 104.686706][ T8074] macvlan1: entered allmulticast mode [ 104.694965][ T8074] ipvlan0: entered allmulticast mode [ 104.700478][ T8074] ipvlan1: entered allmulticast mode [ 104.705975][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 104.721969][ T8074] veth1_macvtap: entered allmulticast mode [ 104.732075][ T8074] veth0_macvtap: entered allmulticast mode [ 104.740637][ T8074] macvtap0: entered allmulticast mode [ 104.749969][ T8074] macsec0: entered allmulticast mode [ 104.758247][ T8074] geneve0: entered allmulticast mode [ 104.767961][ T8074] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.777494][ T8074] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.786553][ T8074] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.795970][ T8074] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.805178][ T8074] geneve1: entered allmulticast mode [ 104.812378][ T8074] netdevsim netdevsim3 netdevsim0: entered allmulticast mode [ 104.820842][ T8074] netdevsim netdevsim3 netdevsim1: entered allmulticast mode [ 104.830932][ T8074] netdevsim netdevsim3 netdevsim2: entered allmulticast mode [ 104.840526][ T8074] netdevsim netdevsim3 netdevsim3: entered allmulticast mode [ 104.854664][ T8074] mac80211_hwsim hwsim4 wlan0: entered allmulticast mode [ 104.868938][ T8074] mac80211_hwsim hwsim5 wlan1: entered allmulticast mode [ 104.877791][ T8074] bridge1: entered allmulticast mode [ 104.883163][ T8074] macsec1: entered allmulticast mode [ 104.888722][ T8074] batadv0.11: entered allmulticast mode [ 104.896110][ T8074] vxlan0: entered allmulticast mode [ 104.901471][ T8074] erspan1: entered allmulticast mode [ 104.907015][ T8074] veth2: entered allmulticast mode [ 104.912251][ T8074] veth3: entered allmulticast mode [ 104.917616][ T8079] netlink: 28 bytes leftover after parsing attributes in process `syz.4.934'. [ 104.935114][ T25] lo speed is unknown, defaulting to 1000 [ 104.941574][ T8093] netlink: 8 bytes leftover after parsing attributes in process `syz.0.940'. [ 105.228525][ T8118] tipc: Can't bind to reserved service type 0 [ 105.410872][ T8130] siw: device registration error -23 [ 105.743741][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 105.813714][ T8159] siw: device registration error -23 [ 106.783678][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 107.170390][ T8252] __nla_validate_parse: 5 callbacks suppressed [ 107.170410][ T8252] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1011'. [ 107.313462][ T8255] syz_tun (unregistering): left promiscuous mode [ 107.421247][ T8264] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1016'. [ 107.823644][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 108.306520][ T8314] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1035'. [ 108.387523][ T8317] vlan3: entered promiscuous mode [ 108.834733][ T5888] lo speed is unknown, defaulting to 1000 [ 108.863684][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 108.941930][ T8353] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 109.244779][ T8379] siw: device registration error -23 [ 109.421666][ T8391] openvswitch: netlink: Flow key attr not present in new flow. [ 109.543884][ T8402] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1081'. [ 109.689271][ T8412] vlan2: entered promiscuous mode [ 109.736731][ T8410] siw: device registration error -23 [ 109.887983][ T8425] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 109.903658][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 109.931826][ T8425] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 110.004050][ T8434] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1097'. [ 110.105464][ T8441] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1101'. [ 110.434409][ T8460] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1110'. [ 110.944602][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 111.182157][ T8498] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1127'. [ 111.410376][ T8511] No such timeout policy "syz0" [ 111.572271][ T8524] netlink: 'syz.2.1140': attribute type 10 has an invalid length. [ 111.582775][ T8524] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1140'. [ 111.601347][ T8524] bridge0: port 3(dummy0) entered blocking state [ 111.613867][ T8524] bridge0: port 3(dummy0) entered disabled state [ 111.630786][ T8524] dummy0: entered allmulticast mode [ 111.637691][ T8524] dummy0: entered promiscuous mode [ 111.650280][ T8524] bridge0: port 3(dummy0) entered blocking state [ 111.656823][ T8524] bridge0: port 3(dummy0) entered forwarding state [ 111.904928][ T8527] netlink: 256 bytes leftover after parsing attributes in process `syz.4.1141'. [ 111.983636][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 112.599443][ T8584] syz.2.1165[8584] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.599541][ T8584] syz.2.1165[8584] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.649632][ T8584] syz.2.1165[8584] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 112.713515][ T8584] ip6erspan0: entered promiscuous mode [ 112.761383][ T8584] ip6erspan0: entered allmulticast mode [ 112.811769][ T8592] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1167'. [ 113.023664][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 113.057044][ T29] audit: type=1107 audit(1732042453.898:2): pid=8615 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 113.266605][ T8635] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1181'. [ 113.644163][ T8652] smc: net device bond0 applied user defined pnetid SYZ0 [ 113.662197][ T8652] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1190'. [ 113.671823][ T8652] smc: net device bond0 erased user defined pnetid SYZ0 [ 113.995758][ T8675] vlan2: entered promiscuous mode [ 114.063720][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 114.125344][ T8683] netlink: 28 bytes leftover after parsing attributes in process `syz.0.1202'. [ 114.239193][ T8689] hsr0: entered allmulticast mode [ 114.266170][ T8689] hsr_slave_0: entered allmulticast mode [ 114.273492][ T8689] hsr_slave_1: entered allmulticast mode [ 114.706365][ T8713] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1213'. [ 114.863238][ T8720] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1216'. [ 114.972074][ T8724] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1218'. [ 115.104141][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 115.547559][ T8745] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1227'. [ 115.654827][ T8754] netlink: 36 bytes leftover after parsing attributes in process `syz.2.1228'. [ 115.665175][ T8754] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1228'. [ 115.919009][ T8772] Cannot find add_set index 0 as target [ 115.953468][ T8774] syzkaller1: entered promiscuous mode [ 116.143700][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 116.473014][ T8804] vlan3: entered promiscuous mode [ 116.955792][ T8834] syzkaller0 speed is unknown, defaulting to 1000 [ 116.974028][ T8834] syzkaller0 speed is unknown, defaulting to 1000 [ 117.004186][ T8834] syzkaller0 speed is unknown, defaulting to 1000 [ 117.028328][ T8834] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 117.065291][ T8834] syzkaller0 speed is unknown, defaulting to 1000 [ 117.072506][ T8834] syzkaller0 speed is unknown, defaulting to 1000 [ 117.085080][ T8834] syzkaller0 speed is unknown, defaulting to 1000 [ 117.092548][ T8834] syzkaller0 speed is unknown, defaulting to 1000 [ 117.101434][ T8834] syzkaller0 speed is unknown, defaulting to 1000 [ 117.183696][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 118.223680][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 118.792037][ T8941] netlink: 'syz.1.1321': attribute type 10 has an invalid length. [ 118.800212][ T8941] __nla_validate_parse: 10 callbacks suppressed [ 118.800229][ T8941] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1321'. [ 119.263652][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 119.326066][ T8962] netlink: 'syz.1.1332': attribute type 10 has an invalid length. [ 119.334262][ T8962] netlink: 140 bytes leftover after parsing attributes in process `syz.1.1332'. [ 119.474799][ T8970] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1334'. [ 119.527621][ T8966] lo speed is unknown, defaulting to 1000 [ 119.534953][ T8966] lo speed is unknown, defaulting to 1000 [ 119.542230][ T8966] syzkaller0 speed is unknown, defaulting to 1000 [ 119.646302][ T8977] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1338'. [ 119.736952][ T8985] netlink: 'syz.2.1343': attribute type 10 has an invalid length. [ 119.749538][ T8985] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1343'. [ 119.846618][ T8983] netlink: 'syz.3.1340': attribute type 10 has an invalid length. [ 119.854730][ T8983] mac80211_hwsim hwsim5 wlan1: left allmulticast mode [ 119.906122][ T8991] vlan3: entered promiscuous mode [ 120.303778][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 120.341705][ T9022] netlink: 'syz.4.1360': attribute type 10 has an invalid length. [ 120.582862][ T9041] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1367'. [ 120.614110][ T9041] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1367'. [ 120.664671][ T9045] batadv1: entered promiscuous mode [ 120.671302][ T9045] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 120.868586][ T9058] netlink: 'syz.4.1376': attribute type 10 has an invalid length. [ 120.949863][ T9062] Cannot find add_set index 4 as target [ 120.959282][ T9064] netlink: 'syz.1.1379': attribute type 10 has an invalid length. [ 120.973049][ T9064] team0: Port device netdevsim0 added [ 120.980840][ T9064] netlink: 'syz.1.1379': attribute type 10 has an invalid length. [ 120.999896][ T9064] team0: Port device netdevsim0 removed [ 121.009344][ T9064] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 121.018886][ T9066] netlink: 28 bytes leftover after parsing attributes in process `syz.4.1380'. [ 121.229089][ T9078] xt_hashlimit: max too large, truncated to 1048576 [ 121.343683][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 121.828043][ T9116] pim6reg: entered allmulticast mode [ 121.830080][ T9118] netlink: 312 bytes leftover after parsing attributes in process `syz.0.1406'. [ 121.847340][ T9116] pim6reg: left allmulticast mode [ 122.356482][ T9146] netlink: 'syz.0.1419': attribute type 3 has an invalid length. [ 122.383637][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 123.137991][ T9197] vlan2: entered promiscuous mode [ 123.424244][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 123.482145][ T9224] veth0_to_team: entered promiscuous mode [ 123.534751][ T9224] veth0_to_team: entered allmulticast mode [ 123.619967][ T9236] vlan3: entered promiscuous mode [ 123.790621][ T9248] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1464'. [ 124.170941][ T9274] vlan3: entered promiscuous mode [ 124.464772][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 125.354646][ T9350] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1513'. [ 125.476336][ T9358] netlink: 11 bytes leftover after parsing attributes in process `syz.3.1518'. [ 125.503624][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 125.558762][ T9366] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1520'. [ 125.774031][ T9380] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1527'. [ 125.843888][ T9387] syz.3.1530[9387] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.843983][ T9387] syz.3.1530[9387] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 125.863852][ T9387] syz.3.1530[9387] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 126.252905][ T9405] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1539'. [ 126.274820][ T9407] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1540'. [ 126.495743][ T9422] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1547'. [ 126.543693][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 126.586455][ T9424] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1549'. [ 126.603701][ T9424] netlink: 'syz.3.1549': attribute type 7 has an invalid length. [ 126.621988][ T9424] netlink: 'syz.3.1549': attribute type 8 has an invalid length. [ 126.633679][ T9424] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1549'. [ 126.776328][ T9437] lo speed is unknown, defaulting to 1000 [ 126.817783][ T9437] lo speed is unknown, defaulting to 1000 [ 126.892268][ T9437] syzkaller0 speed is unknown, defaulting to 1000 [ 127.095380][ T9462] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1561'. [ 127.392436][ T9472] bond2: entered promiscuous mode [ 127.397812][ T9472] bond2: entered allmulticast mode [ 127.404172][ T9472] 8021q: adding VLAN 0 to HW filter on device bond2 [ 127.528684][ T9472] bond2 (unregistering): Released all slaves [ 127.586313][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 127.687731][ T9482] gretap0: entered promiscuous mode [ 127.693459][ T9482] macsec1: entered promiscuous mode [ 128.112249][ T9510] veth0_to_team: entered promiscuous mode [ 128.132942][ T9514] lo speed is unknown, defaulting to 1000 [ 128.140661][ T9514] lo speed is unknown, defaulting to 1000 [ 128.153248][ T9514] syzkaller0 speed is unknown, defaulting to 1000 [ 128.623642][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 129.386498][ T9576] netlink: 'syz.2.1608': attribute type 3 has an invalid length. [ 129.412217][ T9577] lo speed is unknown, defaulting to 1000 [ 129.439411][ T9577] lo speed is unknown, defaulting to 1000 [ 129.477061][ T9577] syzkaller0 speed is unknown, defaulting to 1000 [ 129.487492][ T9582] unsupported nla_type 65024 [ 129.664294][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 130.131671][ T9616] veth0_to_team: entered promiscuous mode [ 130.140843][ T9616] veth0_to_team: entered allmulticast mode [ 130.308147][ T9625] gretap0: entered promiscuous mode [ 130.331317][ T9625] macsec1: entered promiscuous mode [ 130.698208][ T9653] lo speed is unknown, defaulting to 1000 [ 130.703690][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 130.714377][ T9654] tipc: Enabling of bearer rejected, failed to enable media [ 130.747960][ T9653] lo speed is unknown, defaulting to 1000 [ 130.785612][ T9653] syzkaller0 speed is unknown, defaulting to 1000 [ 130.834947][ T9659] __nla_validate_parse: 7 callbacks suppressed [ 130.834965][ T9659] netlink: 80 bytes leftover after parsing attributes in process `syz.4.1640'. [ 131.616135][ T9703] netlink: 'syz.3.1659': attribute type 3 has an invalid length. [ 131.726775][ T9707] netlink: 80 bytes leftover after parsing attributes in process `syz.3.1662'. [ 131.743842][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 132.106293][ T9730] lo speed is unknown, defaulting to 1000 [ 132.121170][ T9730] lo speed is unknown, defaulting to 1000 [ 132.131243][ T9730] syzkaller0 speed is unknown, defaulting to 1000 [ 132.413398][ T9749] syz.2.1679[9749] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.413502][ T9749] syz.2.1679[9749] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.456991][ T9749] syz.2.1679[9749] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 132.783636][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 132.955219][ T9770] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1689'. [ 133.028467][ T1304] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.159655][ T9788] lo speed is unknown, defaulting to 1000 [ 133.171765][ T9788] lo speed is unknown, defaulting to 1000 [ 133.178817][ T9788] syzkaller0 speed is unknown, defaulting to 1000 [ 133.428288][ T9802] smc: net device bond0 applied user defined pnetid SYZ0 [ 133.436048][ T9802] netlink: 116 bytes leftover after parsing attributes in process `syz.1.1702'. [ 133.445507][ T9802] smc: net device bond0 erased user defined pnetid SYZ0 [ 133.609028][ T9808] netlink: 204 bytes leftover after parsing attributes in process `syz.0.1705'. [ 133.823627][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 134.066101][ T9828] netlink: 3 bytes leftover after parsing attributes in process `syz.4.1713'. [ 134.095982][ T9828] 0ªX¹¦À: renamed from caif0 [ 134.128559][ T9828] 0ªX¹¦À: entered allmulticast mode [ 134.142272][ T9828] A link change request failed with some changes committed already. Interface 60ªX¹¦À may have been left with an inconsistent configuration, please check. [ 134.172156][ T9835] netlink: 204 bytes leftover after parsing attributes in process `syz.2.1716'. [ 134.258673][ T9839] xt_hashlimit: size too large, truncated to 1048576 [ 134.308835][ T9842] lo speed is unknown, defaulting to 1000 [ 134.326156][ T9842] lo speed is unknown, defaulting to 1000 [ 134.374012][ T9842] syzkaller0 speed is unknown, defaulting to 1000 [ 134.863702][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 134.958417][ T9870] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1730'. [ 135.548689][ T9895] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1742'. [ 135.676735][ T9900] lo speed is unknown, defaulting to 1000 [ 135.683574][ T9900] lo speed is unknown, defaulting to 1000 [ 135.690243][ T9900] syzkaller0 speed is unknown, defaulting to 1000 [ 135.903610][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 135.987193][ T9896] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1741'. [ 136.726747][ T9921] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1751'. [ 136.848240][ T9925] tipc: Started in network mode [ 136.856959][ T9925] tipc: Node identity ac14140f, cluster identity 4711 [ 136.866815][ T9925] tipc: New replicast peer: 255.255.255.255 [ 136.877815][ T9925] tipc: Enabled bearer , priority 10 [ 136.943629][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 137.160498][ T9938] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1761'. [ 137.260881][ T9943] lo speed is unknown, defaulting to 1000 [ 137.286924][ T9943] lo speed is unknown, defaulting to 1000 [ 137.304700][ T9943] syzkaller0 speed is unknown, defaulting to 1000 [ 137.799848][ T9957] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1767'. [ 137.983602][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 137.993693][ T5889] tipc: Node number set to 2886997007 [ 138.533170][ T9969] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1771'. [ 138.612807][ T9972] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1772'. [ 139.023631][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 139.051491][ T9998] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1786'. [ 139.091745][T10001] lo speed is unknown, defaulting to 1000 [ 139.108128][T10001] lo speed is unknown, defaulting to 1000 [ 139.124836][T10001] syzkaller0 speed is unknown, defaulting to 1000 [ 139.199674][T10005] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1789'. [ 139.236646][T10011] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1791'. [ 139.878037][T10043] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1805'. [ 140.063708][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 140.382280][T10067] veth0_to_team: entered promiscuous mode [ 140.388248][T10067] veth0_to_team: entered allmulticast mode [ 140.503378][T10083] lo speed is unknown, defaulting to 1000 [ 140.513274][T10083] lo speed is unknown, defaulting to 1000 [ 140.533663][T10083] syzkaller0 speed is unknown, defaulting to 1000 [ 141.039164][T10111] __nla_validate_parse: 1 callbacks suppressed [ 141.039186][T10111] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1835'. [ 141.103646][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 141.575037][T10142] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1850'. [ 141.666505][T10144] lo speed is unknown, defaulting to 1000 [ 141.673272][T10144] lo speed is unknown, defaulting to 1000 [ 141.704719][T10144] syzkaller0 speed is unknown, defaulting to 1000 [ 142.143613][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 142.213753][T10174] netlink: 100 bytes leftover after parsing attributes in process `syz.1.1863'. [ 142.332899][T10180] netlink: 'syz.0.1866': attribute type 10 has an invalid length. [ 142.356801][T10180] netlink: 140 bytes leftover after parsing attributes in process `syz.0.1866'. [ 142.532576][T10194] netlink: 'syz.2.1872': attribute type 10 has an invalid length. [ 142.729385][T10206] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1878'. [ 142.742803][T10204] lo speed is unknown, defaulting to 1000 [ 142.751567][T10204] lo speed is unknown, defaulting to 1000 [ 142.758652][T10204] syzkaller0 speed is unknown, defaulting to 1000 [ 142.993914][T10214] netlink: 'syz.4.1881': attribute type 10 has an invalid length. [ 143.001800][T10214] netlink: 140 bytes leftover after parsing attributes in process `syz.4.1881'. [ 143.183629][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 143.342476][T10220] netlink: 'syz.2.1885': attribute type 10 has an invalid length. [ 143.389746][T10223] siw: device registration error -23 [ 143.475553][T10229] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1889'. [ 143.572092][T10232] netlink: 100 bytes leftover after parsing attributes in process `syz.4.1890'. [ 143.652419][T10241] netlink: 'syz.2.1893': attribute type 10 has an invalid length. [ 143.681441][T10241] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1893'. [ 143.689568][T10242] lo speed is unknown, defaulting to 1000 [ 143.698467][T10242] lo speed is unknown, defaulting to 1000 [ 143.726366][T10242] syzkaller0 speed is unknown, defaulting to 1000 [ 143.812553][T10253] netlink: 'syz.2.1899': attribute type 10 has an invalid length. [ 143.992457][T10261] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1903'. [ 144.223626][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 144.289663][T10274] netlink: 'syz.2.1909': attribute type 10 has an invalid length. [ 144.451321][T10280] siw: device registration error -23 [ 144.459437][T10272] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 144.471476][T10272] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 144.482639][T10272] bond0 (unregistering): (slave vlan2): Releasing backup interface [ 144.491686][T10272] dummy0: left promiscuous mode [ 144.499624][T10272] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 144.555231][T10272] bond0 (unregistering): Released all slaves [ 144.597964][T10284] netlink: 'syz.4.1912': attribute type 10 has an invalid length. [ 144.882360][T10302] lo speed is unknown, defaulting to 1000 [ 144.889560][T10302] lo speed is unknown, defaulting to 1000 [ 144.896575][T10302] syzkaller0 speed is unknown, defaulting to 1000 [ 144.941566][T10298] netlink: 'syz.2.1921': attribute type 10 has an invalid length. [ 144.985126][T10308] siw: device registration error -23 [ 145.129736][T10314] netlink: 'syz.2.1927': attribute type 10 has an invalid length. [ 145.263621][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 145.526180][T10332] siw: device registration error -23 [ 146.058036][T10362] __nla_validate_parse: 8 callbacks suppressed [ 146.058050][T10362] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1950'. [ 146.095539][T10358] lo speed is unknown, defaulting to 1000 [ 146.102267][T10358] lo speed is unknown, defaulting to 1000 [ 146.135219][T10358] syzkaller0 speed is unknown, defaulting to 1000 [ 146.303614][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 146.489291][T10380] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1959'. [ 146.751116][T10393] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1965'. [ 146.849404][T10399] veth0_to_team: entered promiscuous mode [ 146.858722][T10399] veth0_to_team: entered allmulticast mode [ 146.988635][T10407] batadv0: entered promiscuous mode [ 146.994664][T10407] macvtap1: entered promiscuous mode [ 147.001603][T10407] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 147.010634][T10407] batadv0: left promiscuous mode [ 147.130280][T10412] netlink: 100 bytes leftover after parsing attributes in process `syz.0.1973'. [ 147.195789][T10416] siw: device registration error -23 [ 147.275680][T10418] lo speed is unknown, defaulting to 1000 [ 147.282621][T10418] lo speed is unknown, defaulting to 1000 [ 147.291412][T10418] syzkaller0 speed is unknown, defaulting to 1000 [ 147.309751][T10422] netlink: 140 bytes leftover after parsing attributes in process `syz.2.1978'. [ 147.343617][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 147.442735][T10428] gretap0: entered promiscuous mode [ 147.452950][T10428] macsec2: entered promiscuous mode [ 147.571796][T10430] validate_nla: 7 callbacks suppressed [ 147.571816][T10430] netlink: 'syz.3.1981': attribute type 10 has an invalid length. [ 147.892062][T10446] siw: device registration error -23 [ 147.977065][T10450] netlink: 'syz.3.1990': attribute type 10 has an invalid length. [ 148.008376][T10450] netlink: 140 bytes leftover after parsing attributes in process `syz.3.1990'. [ 148.263913][T10472] lo speed is unknown, defaulting to 1000 [ 148.271527][T10472] lo speed is unknown, defaulting to 1000 [ 148.278502][T10472] syzkaller0 speed is unknown, defaulting to 1000 [ 148.383626][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 148.546422][T10484] netlink: 'syz.2.2005': attribute type 10 has an invalid length. [ 148.554612][T10484] netlink: 140 bytes leftover after parsing attributes in process `syz.2.2005'. [ 148.955350][T10496] netlink: 40 bytes leftover after parsing attributes in process `syz.2.2012'. [ 149.129266][T10508] netlink: 'syz.0.2017': attribute type 10 has an invalid length. [ 149.150662][T10508] netlink: 140 bytes leftover after parsing attributes in process `syz.0.2017'. [ 149.407971][T10531] lo speed is unknown, defaulting to 1000 [ 149.421148][T10531] lo speed is unknown, defaulting to 1000 [ 149.423634][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 149.430124][T10531] syzkaller0 speed is unknown, defaulting to 1000 [ 149.486832][T10536] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2028'. [ 149.702639][T10545] netlink: 'syz.0.2032': attribute type 10 has an invalid length. [ 149.781877][T10547] lo speed is unknown, defaulting to 1000 [ 149.790551][T10547] lo speed is unknown, defaulting to 1000 [ 149.797561][T10547] syzkaller0 speed is unknown, defaulting to 1000 [ 150.088728][T10558] ------------[ cut here ]------------ [ 150.094894][T10558] refcount_t: underflow; use-after-free. [ 150.112418][T10558] WARNING: CPU: 0 PID: 10558 at lib/refcount.c:28 refcount_warn_saturate+0x15a/0x1d0 [ 150.122211][T10558] Modules linked in: [ 150.126244][T10558] CPU: 0 UID: 0 PID: 10558 Comm: syz.0.2036 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 150.137369][T10558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 150.147728][T10558] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 150.154051][T10558] Code: e0 c7 60 8c e8 37 19 98 fc 90 0f 0b 90 90 eb 99 e8 bb 22 d7 fc c6 05 8d 0c 49 0b 01 90 48 c7 c7 40 c8 60 8c e8 17 19 98 fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 98 22 d7 fc c6 05 67 0c 49 0b 01 90 [ 150.173813][T10558] RSP: 0018:ffffc90017c7f688 EFLAGS: 00010246 [ 150.179911][T10558] RAX: 49a5c32e0e556400 RBX: ffff888030955364 RCX: 0000000000040000 [ 150.188020][T10558] RDX: ffffc90004c32000 RSI: 0000000000003db6 RDI: 0000000000003db7 [ 150.196116][T10558] RBP: 0000000000000003 R08: ffffffff8155e312 R09: fffffbfff1cf9fd0 [ 150.204190][T10558] R10: dffffc0000000000 R11: fffffbfff1cf9fd0 R12: ffff88814473c868 [ 150.212191][T10558] R13: ffff888030955364 R14: 1ffff110288e7918 R15: ffff88814473c800 [ 150.220297][T10558] FS: 00007efd953896c0(0000) GS:ffff8880b8600000(0000) knlGS:0000000000000000 [ 150.229344][T10558] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 150.236026][T10558] CR2: 00007f90628656c0 CR3: 000000005eb0e000 CR4: 00000000003526f0 [ 150.244327][T10558] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 150.252317][T10558] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 150.260388][T10558] Call Trace: [ 150.263749][T10558] [ 150.266702][T10558] ? __warn+0x168/0x4e0 [ 150.270871][T10558] ? refcount_warn_saturate+0x15a/0x1d0 [ 150.276525][T10558] ? report_bug+0x2b3/0x500 [ 150.281044][T10558] ? refcount_warn_saturate+0x15a/0x1d0 [ 150.286696][T10558] ? handle_bug+0x60/0x90 [ 150.291063][T10558] ? exc_invalid_op+0x1a/0x50 [ 150.295844][T10558] ? asm_exc_invalid_op+0x1a/0x20 [ 150.300905][T10558] ? __warn_printk+0x292/0x360 [ 150.305852][T10558] ? refcount_warn_saturate+0x15a/0x1d0 [ 150.311436][T10558] ? refcount_warn_saturate+0x159/0x1d0 [ 150.317084][T10558] j1939_session_put+0x1ed/0x440 [ 150.322026][T10558] j1939_sk_sendmsg+0x121b/0x14c0 [ 150.327191][T10558] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 150.332562][T10558] ? __import_iovec+0x3a8/0x870 [ 150.337532][T10558] ? aa_sock_msg_perm+0x91/0x160 [ 150.342648][T10558] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 150.348095][T10558] __sock_sendmsg+0x221/0x270 [ 150.352793][T10558] ____sys_sendmsg+0x52a/0x7e0 [ 150.357625][T10558] ? __pfx_____sys_sendmsg+0x10/0x10 [ 150.362949][T10558] __sys_sendmmsg+0x3ab/0x730 [ 150.367698][T10558] ? __pfx___sys_sendmmsg+0x10/0x10 [ 150.372927][T10558] ? futex_hash+0x1e/0x1f0 [ 150.377424][T10558] ? futex_wait+0x285/0x360 [ 150.381925][T10558] ? __pfx_futex_wait+0x10/0x10 [ 150.387727][T10558] ? j1939_sk_connect+0x442/0x5c0 [ 150.392759][T10558] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 150.398579][T10558] ? do_raw_spin_unlock+0x13c/0x8b0 [ 150.403899][T10558] ? do_futex+0x33b/0x560 [ 150.408263][T10558] ? __sys_connect+0x165/0x300 [ 150.413063][T10558] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 150.419149][T10558] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 150.425591][T10558] ? do_syscall_64+0x100/0x230 [ 150.430402][T10558] __x64_sys_sendmmsg+0xa0/0xb0 [ 150.435361][T10558] do_syscall_64+0xf3/0x230 [ 150.439902][T10558] ? clear_bhb_loop+0x35/0x90 [ 150.444817][T10558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.450730][T10558] RIP: 0033:0x7efd9457e759 [ 150.455211][T10558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.474875][ C0] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 150.481918][T10558] RSP: 002b:00007efd95389038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 150.490464][T10558] RAX: ffffffffffffffda RBX: 00007efd94735f80 RCX: 00007efd9457e759 [ 150.498530][T10558] RDX: 0000000000000001 RSI: 0000000020002880 RDI: 0000000000000003 [ 150.506592][T10558] RBP: 00007efd945f175e R08: 0000000000000000 R09: 0000000000000000 [ 150.514676][T10558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.522656][T10558] R13: 0000000000000000 R14: 00007efd94735f80 R15: 00007fffecd33e28 [ 150.530694][T10558] [ 150.533796][T10558] Kernel panic - not syncing: kernel: panic_on_warn set ... [ 150.541077][T10558] CPU: 0 UID: 0 PID: 10558 Comm: syz.0.2036 Not tainted 6.12.0-rc7-syzkaller-00144-g66418447d27b #0 [ 150.551820][T10558] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 10/30/2024 [ 150.561871][T10558] Call Trace: [ 150.565151][T10558] [ 150.568082][T10558] dump_stack_lvl+0x241/0x360 [ 150.572755][T10558] ? __pfx_dump_stack_lvl+0x10/0x10 [ 150.577944][T10558] ? __pfx__printk+0x10/0x10 [ 150.582530][T10558] ? vscnprintf+0x5d/0x90 [ 150.586859][T10558] panic+0x349/0x880 [ 150.590765][T10558] ? __warn+0x177/0x4e0 [ 150.594921][T10558] ? __pfx_panic+0x10/0x10 [ 150.599352][T10558] __warn+0x34b/0x4e0 [ 150.603329][T10558] ? refcount_warn_saturate+0x15a/0x1d0 [ 150.608876][T10558] report_bug+0x2b3/0x500 [ 150.613197][T10558] ? refcount_warn_saturate+0x15a/0x1d0 [ 150.618746][T10558] handle_bug+0x60/0x90 [ 150.622900][T10558] exc_invalid_op+0x1a/0x50 [ 150.627398][T10558] asm_exc_invalid_op+0x1a/0x20 [ 150.632246][T10558] RIP: 0010:refcount_warn_saturate+0x15a/0x1d0 [ 150.638398][T10558] Code: e0 c7 60 8c e8 37 19 98 fc 90 0f 0b 90 90 eb 99 e8 bb 22 d7 fc c6 05 8d 0c 49 0b 01 90 48 c7 c7 40 c8 60 8c e8 17 19 98 fc 90 <0f> 0b 90 90 e9 76 ff ff ff e8 98 22 d7 fc c6 05 67 0c 49 0b 01 90 [ 150.658003][T10558] RSP: 0018:ffffc90017c7f688 EFLAGS: 00010246 [ 150.664071][T10558] RAX: 49a5c32e0e556400 RBX: ffff888030955364 RCX: 0000000000040000 [ 150.672034][T10558] RDX: ffffc90004c32000 RSI: 0000000000003db6 RDI: 0000000000003db7 [ 150.679999][T10558] RBP: 0000000000000003 R08: ffffffff8155e312 R09: fffffbfff1cf9fd0 [ 150.687964][T10558] R10: dffffc0000000000 R11: fffffbfff1cf9fd0 R12: ffff88814473c868 [ 150.695929][T10558] R13: ffff888030955364 R14: 1ffff110288e7918 R15: ffff88814473c800 [ 150.703901][T10558] ? __warn_printk+0x292/0x360 [ 150.708667][T10558] ? refcount_warn_saturate+0x159/0x1d0 [ 150.714209][T10558] j1939_session_put+0x1ed/0x440 [ 150.719146][T10558] j1939_sk_sendmsg+0x121b/0x14c0 [ 150.724178][T10558] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 150.729546][T10558] ? __import_iovec+0x3a8/0x870 [ 150.734386][T10558] ? aa_sock_msg_perm+0x91/0x160 [ 150.739319][T10558] ? __pfx_j1939_sk_sendmsg+0x10/0x10 [ 150.744686][T10558] __sock_sendmsg+0x221/0x270 [ 150.749363][T10558] ____sys_sendmsg+0x52a/0x7e0 [ 150.754132][T10558] ? __pfx_____sys_sendmsg+0x10/0x10 [ 150.759425][T10558] __sys_sendmmsg+0x3ab/0x730 [ 150.764106][T10558] ? __pfx___sys_sendmmsg+0x10/0x10 [ 150.769319][T10558] ? futex_hash+0x1e/0x1f0 [ 150.773732][T10558] ? futex_wait+0x285/0x360 [ 150.778231][T10558] ? __pfx_futex_wait+0x10/0x10 [ 150.783082][T10558] ? j1939_sk_connect+0x442/0x5c0 [ 150.788100][T10558] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 150.793817][T10558] ? do_raw_spin_unlock+0x13c/0x8b0 [ 150.799017][T10558] ? do_futex+0x33b/0x560 [ 150.803342][T10558] ? __sys_connect+0x165/0x300 [ 150.808106][T10558] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 150.814085][T10558] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 150.820415][T10558] ? do_syscall_64+0x100/0x230 [ 150.825175][T10558] __x64_sys_sendmmsg+0xa0/0xb0 [ 150.830022][T10558] do_syscall_64+0xf3/0x230 [ 150.834523][T10558] ? clear_bhb_loop+0x35/0x90 [ 150.839196][T10558] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 150.845085][T10558] RIP: 0033:0x7efd9457e759 [ 150.849494][T10558] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 150.869092][T10558] RSP: 002b:00007efd95389038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 150.877504][T10558] RAX: ffffffffffffffda RBX: 00007efd94735f80 RCX: 00007efd9457e759 [ 150.885470][T10558] RDX: 0000000000000001 RSI: 0000000020002880 RDI: 0000000000000003 [ 150.893450][T10558] RBP: 00007efd945f175e R08: 0000000000000000 R09: 0000000000000000 [ 150.901433][T10558] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 150.909415][T10558] R13: 0000000000000000 R14: 00007efd94735f80 R15: 00007fffecd33e28 [ 150.917400][T10558] [ 150.920676][T10558] Kernel Offset: disabled [ 150.925056][T10558] Rebooting in 86400 seconds..