last executing test programs: 2.872182426s ago: executing program 2 (id=2127): r0 = socket$inet6_udplite(0xa, 0x2, 0x88) sendmmsg$inet6(r0, &(0x7f0000000240)=[{{&(0x7f0000000000)={0xa, 0x4e21, 0x0, @remote, 0x9}, 0x1c, 0x0, 0x0, &(0x7f00000020c0)=ANY=[@ANYBLOB="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"], 0x590}}], 0x1, 0x8008801) sendmmsg$inet6(r0, &(0x7f0000000940)=[{{0x0, 0x0, &(0x7f0000000300)=[{&(0x7f00000005c0)="985fd17837e723d8d8749e", 0xb}, {&(0x7f0000000600)="a8d85145b25d534f833d23e2e2ae6d32b59576f919a3b85af6f26add09", 0x1d}, {&(0x7f0000000980)="b93f77bb6bccf6ebb13021861879cf2102834122aef2a3dbaa2c67b5ea90e2b69fea47dfb4f6dfec990bbc331b", 0x2d}], 0x3, 0x0, 0x0, 0x301}}], 0x1, 0x0) 2.772126119s ago: executing program 0 (id=2128): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0)=0xffffffffffffffff, 0x12) 2.651914723s ago: executing program 2 (id=2131): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) mmap(&(0x7f0000000000/0x95c000)=nil, 0x95c000, 0x2000009, 0x8c4b815a5465c2b1, 0xffffffffffffffff, 0x1d228000) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a030000000d0000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000000d08000640ffffff00080003400000000c2c0000000b0a01010000000000000000070000000900020073797a31000000000900010073797a30"], 0xc0}}, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000008c0)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_NEW_INTERFACE(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000980)={&(0x7f0000000040)={0x44, r1, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x1, 0x28}, @val={0x8, 0x3, r3}, @void}}, [@NL80211_ATTR_IFNAME={0x14, 0x4, 'nicvf0\x00'}, @NL80211_ATTR_IFTYPE={0x8, 0x5, 0x1}, @mon_options=[@NL80211_ATTR_MNTR_FLAGS={0x4}]]}, 0x44}}, 0x0) 2.651586323s ago: executing program 0 (id=2132): r0 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r0, &(0x7f0000000080), 0x10) sendmsg$can_bcm(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000400)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "f8ca44b8874fdf8a"}}, 0x48}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$can_bcm(r0, &(0x7f00000001c0)={&(0x7f0000000040)={0x1d, r1}, 0x10, &(0x7f0000000180)={&(0x7f0000000100)={0x5, 0x0, 0x0, {}, {}, {}, 0x1, @can={{}, 0x0, 0x0, 0x0, 0x0, "b68c52d2be3c0d90"}}, 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r3 = socket(0x1d, 0x2, 0x6) r4 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r4, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r3, &(0x7f0000000400)={0x1d, r5, 0x2}, 0x18) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r4, 0x84, 0x22, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000040)={'netpci0\x00'}) sendmsg$can_raw(0xffffffffffffffff, 0x0, 0x4c000) r6 = socket$inet6_sctp(0xa, 0x5, 0x84) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e23, 0x7, @loopback, 0x3}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0x34000, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) setsockopt$inet_sctp6_SCTP_EVENTS(r6, 0x84, 0xb, &(0x7f0000000000)={0xef, 0x7, 0x0, 0x0, 0x0, 0x0, 0x1, 0xa, 0x47, 0x0, 0xfe, 0x0, 0x4, 0x8}, 0xe) r7 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r7, &(0x7f0000000400), 0xe) connect$inet6(r6, 0x0, 0x0) close(r6) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0xa, 0x7f7, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r8 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000f00)=@newtfilter={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x74, r9}}, 0x24}, 0x1, 0xf0ffffffffffff}, 0x0) 2.428027219s ago: executing program 2 (id=2135): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) syz_emit_ethernet(0x0, 0x0, 0x0) r0 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r0, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e21, @empty}, 0x10) setsockopt$sock_int(r0, 0x1, 0x8, &(0x7f0000000100), 0x4) connect$inet(r0, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=@newtaction={0x48, 0x30, 0x1, 0x0, 0x0, {}, [{0x34, 0x1, [@m_simple={0x30, 0x1, 0x0, 0x0, {{0xb}, {0x4}, {0x4}, {0xc}, {0xc}}}]}]}, 0x48}}, 0x0) sendto(r0, 0x0, 0x0, 0x0, 0x0, 0x0) sendto$inet(r0, &(0x7f00000026c0)='?', 0x1, 0x0, 0x0, 0x0) getsockopt$inet_sctp6_SCTP_MAXSEG(0xffffffffffffffff, 0x84, 0xd, 0x0, 0x0) r2 = socket$kcm(0x10, 0x2, 0x10) sendmsg$kcm(r2, &(0x7f0000000000)={0x0, 0xffffff0a, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f030022003505d25a806f8c2394f90435fc600400110a0a740100053582c137153e370248018000f01700d1bd", 0x33fe0}], 0x1}, 0x0) 1.91589103s ago: executing program 4 (id=2143): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}]}]}], {0x14}}, 0xe4}}, 0x0) 1.866397506s ago: executing program 4 (id=2145): r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000001640)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f0000000540)='rcu_utilization\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2, 0x0, 0x0, 0x1, 0x0, 0x0, 0x0, 0x2000}, [@call={0x85, 0x0, 0x0, 0x87}, @printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) r2 = socket(0x10, 0x3, 0x0) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f00000003c0), 0x0, 0x0) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000140)=@newlink={0x38, 0x10, 0x403, 0x0, 0xffffffff, {0x0, 0x0, 0x0, 0x0, 0x1814, 0x927}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @ppp={{0x8}, {0xc, 0x2, 0x0, 0x1, {0x8, 0x1, r3}}}}]}, 0x38}}, 0x0) r4 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000280), 0xffffffffffffffff) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_NL_KEY_SET(r5, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000880)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01001497a5590000000000000000170000000c06008004000600"], 0x20}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f0000000400)={@void, @void, @x25={0x1, 0x3, 0xb, "cab9efdddeda19850707e79609ec598b74c4f77d0633ef24b47981ccd1564d7f7e0b7333326d98b3204cf870ccd46f20001ac7c49d5d2074ec6239cbf9744fc7295c58b7dd60a41de38e404c6ddb504a576246d0d6a690bb787aaf23fb32cae335a304c8e233867055ca34b0c1ef5e5be7633c249fa6845efb80f590043c89be"}}, 0x83) sendmmsg$inet6(r1, &(0x7f0000002a80)=[{{&(0x7f0000000000)={0xa, 0x0, 0x0, @private0}, 0x1c, &(0x7f0000000480)}}], 0x1, 0x0) sendto$inet6(r1, &(0x7f0000000040)="b9", 0x1, 0x0, &(0x7f0000000080)={0xa, 0x0, 0x0, @private0}, 0x1c) listen(r1, 0x100101) accept4(r1, 0x0, 0x0, 0x0) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) pread64(r6, &(0x7f0000000240)=""/56, 0x38, 0x100000000) r7 = socket$vsock_stream(0x28, 0x1, 0x0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000003c0)='freezer.parent_freezing\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x52, r8, 0x0) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x3c, &(0x7f0000000000)={0x0, 0x0}, 0x10) r9 = socket$packet(0x11, 0x2, 0x300) setsockopt$SO_ATTACH_FILTER(r9, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff00c}, {0x80000006}]}, 0x10) syz_emit_ethernet(0x14, 0x0, 0x0) r10 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r10, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r6, &(0x7f00000001c0)={@val={0xa}, @void, @eth={@broadcast, @remote, @val={@val={0x88a8, 0x3, 0x0, 0x1}, {0x8100, 0x3, 0x1, 0x2}}, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x2c, 0x0, 0x0, 0x0, 0x2f, 0x0, @local, @multicast1}, {0x0, 0x6558, 0x18, 0x0, @wg=@data={0x4, 0x0, 0xffffa888}}}}}}}, 0x46) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_ROUTER={0x5, 0x16, 0x3}, @IFLA_BR_AGEING_TIME={0x8}]}}}]}, 0x44}}, 0x0) 1.848569213s ago: executing program 1 (id=2146): r0 = syz_init_net_socket$netrom(0x6, 0x5, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, &(0x7f0000000580)=@raw={'raw\x00', 0x8, 0x3, 0x520, 0x340, 0x25, 0x148, 0x0, 0x60, 0x488, 0x2a8, 0x2a8, 0x488, 0x2a8, 0x3, 0x0, {[{{@uncond, 0x0, 0x2f8, 0x340, 0x0, {0x200003ae, 0x7f00}, [@common=@inet=@hashlimit1={{0x58}, {'geneve0\x00', {0x0, 0x0, 0x9, 0x0, 0x0, 0xffffffff, 0x7}}}, @common=@unspec=@bpf1={{0x230, 'bpf\x00', 0x0}, @pinned={0x1, 0x0, 0x6, './file0\x00'}}]}, @common=@unspec=@IDLETIMER={0x48, 'IDLETIMER\x00', 0x0, {0x6, 'syz0\x00'}}}, {{@ip={@empty, @empty, 0x0, 0x0, 'syzkaller0\x00', 'veth0_to_team\x00'}, 0x0, 0xe8, 0x148, 0x0, {}, [@common=@set={{0x40}, {{0x0, [0x11]}}}, @common=@unspec=@statistic={{0x38}}]}, @common=@SET={0x60}}], {{'\x00', 0xc8, 0x70, 0x98}, {0x28}}}}, 0x580) connect$netrom(r0, &(0x7f0000000280)={{0x6, @netrom={0xbb, 0xbb, 0x2, 0xbb, 0xbb, 0x0, 0x0}}, [@netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, @null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @bcast, @bcast]}, 0x48) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r3 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000000), 0x4) r4 = accept4$ax25(r1, &(0x7f0000000140)={{0x3, @netrom}, [@remote, @rose, @rose, @null, @default, @bcast, @netrom, @null]}, &(0x7f00000001c0)=0x48, 0x800) setsockopt$sock_void(r4, 0x1, 0x24, 0x0, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0xd, 0x9, &(0x7f0000000680)=ANY=[@ANYBLOB="180800000000000000000000360000008510000005000000850000008a000000a7000000000000001800000000000000000000000000000095000000000000009500000000000000"], &(0x7f00000003c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x13, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r2}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x5, 0x17, &(0x7f0000000140)=ANY=[], &(0x7f00000002c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x32, r3, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x800, @void, @value}, 0x94) 1.659837879s ago: executing program 1 (id=2147): r0 = epoll_create1(0x0) epoll_pwait(r0, &(0x7f0000000200)=[{}], 0x1, 0x6e, &(0x7f00000001c0)={[0x400000000000009]}, 0x8) syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000800)={'hsr0\x00', 0x0}) r5 = socket$packet(0x11, 0x3, 0x300) sendto$packet(r5, &(0x7f0000000dc0)="d0b4163e96457321d877d01ac22c", 0xe, 0x48001, &(0x7f00000001c0)={0x11, 0x9, r4, 0x1, 0x70, 0x6, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x42}}, 0x14) getsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x82, &(0x7f0000000300)={0x0, @in6={{0xa, 0x0, 0x0, @empty}}}, &(0x7f0000003c00)=0x90) setsockopt$inet_MCAST_JOIN_GROUP(0xffffffffffffffff, 0x0, 0x2a, &(0x7f00000005c0)={0x5, {{0x2, 0x4e20, @local}}}, 0x88) sendmsg$nl_route(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r4], 0x20}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x18) openat$tun(0xffffffffffffff9c, 0x0, 0x0, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r6 = socket(0x1d, 0x2, 0x6) ioctl$ifreq_SIOCGIFINDEX_vcan(r6, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) bind$can_j1939(r6, &(0x7f0000000380)={0x1d, r7, 0x1}, 0x18) sendmsg$can_j1939(r6, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000200)="8fd81109ab1c", 0x6}}, 0x0) sendmmsg(r6, &(0x7f0000005300)=[{{0x0, 0x0, &(0x7f0000001680)=[{&(0x7f0000000400)="bdb5", 0x2}], 0x1, &(0x7f0000001700)=ANY=[], 0x2d0}}], 0x1, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x0, 0x0, &(0x7f0000000300)='GPL\x00', 0x4, 0xff8, &(0x7f0000001e00)=""/4088, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) syz_emit_ethernet(0x4e, &(0x7f0000000340)={@broadcast, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x4}, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, '\x00\x00k', 0x18, 0x3a, 0xff, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @local, {[], @ndisc_na={0x88, 0x0, 0x0, 0x0, '\x00', @mcast2}}}}}}, 0x0) close(r0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_HEADER(r8, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000004c0)={0x1c, 0xc, 0x6, 0x201, 0x0, 0x0, {}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}}, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x503, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @bridge={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_BR_MCAST_QUERIER={0x5, 0x19, 0x8}, @IFLA_BR_MCAST_HASH_ELASTICITY={0x8}]}}}]}, 0x44}}, 0x0) 1.657145322s ago: executing program 0 (id=2148): r0 = socket(0x1d, 0x2, 0x0) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="000600000c0000000000000000000000000000000000000000000000000000000000000000000000ffffffff0000000000000000000000000000000001000000000240b182e9936299000000000000000000000000000000ffffffff010000000b00000020000000000062726964676530000000000000000000766c616e300000000000000000000000736974300000000000000000000000007465716c3000000000000000000000000002000000000000000000000180c20000000000000000000000b8080000b808000030090000616d6f6e670000000000000000000000000000002000000000000000000000002008000000000000140400000c000000000000000a00000000000000000000000000080000000000000000000000000000b085da05d603888318a0cce40000ad00000000000000000000000000000000000000000000002000000000000000000000000000000000000000000000000000000000000000000000fdffffffff00000000000000000000e4ff0000000000000000000000000000000000000000000000000000000000000000c06a330000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000005000000000000000000000000000000000000000000000000000000000000000000006fb7cd02b734bcce41ef6e95bd000000008000000000000000000000000000000000000000000000000000000000000000eeff3f000000008fc7660c490587b3ab213098a6767c000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000de1f8f00000000000000000000000000000000000000000000000020000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000440a050000000000000000000000000000000000000000000000000000000000002f470e43ba7aa62a00000000000000000000000000f18a0afe993500000000000000000000000000000000000000000000000000000000000000000000000000fcffffff0000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000073ccc32581f04871f6fadfa300000000000000000000000000000000000000000000000000000000000000f4f016fa70c12554000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000e61bf829de3481b50000000000000000000000000000000000008c7f8f1b44f01ebcaa8750b900000000feffffff000000000000000000100000000000000000000000000000000000000000000000e8b5520a0cd4af00000000000000000000000000000001000000000000000000000000000062f75a00627f34dd71012eed00000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000dc3b78335e5b48ad993240042440225a000000e0ffffff00000000000000000000000000000000000000000000001b00000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000f200000000000000000000000000000000000000000000000000000000000000fffffff900000000000000000000ffee00000000000000000000000000000000000000000000ff000000000000000000f2573bd04a330000000e00000000000000000000000000000000000000e9bfffff000000000000000000000000000000000000000000000000000000000000000000000000200000000000000000000000400000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000cb33322c9c564ae5f8eef74d5aa7cc9c000000000000000000000000000000000000000000000000000000000500000000000000000000000000000000000000003f7f1c000000000000f34700000000000000000000000000000000000000000000000000000000000000dbffd4d57f898f20b15a00000000000000000000000000000000000000000000110000000000000000000004000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000008000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000800000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000d3d2e851000000000000000000000000000000000000000000000000006f670000001100000000000000000000000000000000000000000000000000000000010000a600a9e85725d89818472e65aba21d9bbc1b20e8331c6fd24a5aceaeefe102e42a013ac2c00eeb782c34eab997013e0506220c21a44cc58ff5bc83d5e4066c770000000000000000000000004000"/2448]}, 0xa08) socket(0x1d, 0x2, 0x0) (async) setsockopt$EBT_SO_SET_ENTRIES(r0, 0xa00000000000000, 0x80, &(0x7f00000000c0)=@broute={'broute\x00', 0x20, 0x1, 0x990, [0x0, 0x0, 0x0, 0x0, 0x0, 0x20000e00], 0x0, 0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="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"/2448]}, 0xa08) (async) 1.464449964s ago: executing program 2 (id=2150): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0600000004000000080000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="000000000000000000000000000000e6ffffffffffffff0000000000"], 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000001080)={0x6, 0xc, &(0x7f0000000000)=ANY=[@ANYBLOB="1800000000000000000000000000000018150000", @ANYRES32=r0, @ANYBLOB="0000000000000000b70800000000ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085000000450000009500000000000000"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f00000000c0)={0x0, @empty, @loopback}, &(0x7f0000000100)=0xc) r2 = socket$inet6(0xa, 0x1, 0x0) r3 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r3, 0x29, 0x40, &(0x7f0000000840)=@raw={'raw\x00', 0x3c1, 0x3, 0x5d0, 0x0, 0x111, 0x4b4, 0x1c0, 0xd4feffff, 0x500, 0x20a, 0x278, 0x500, 0x278, 0x3, 0x0, {[{{@ipv6={@empty, @empty, [], [], 'ipvlan0\x00', 'team_slave_0\x00', {}, {}, 0x6}, 0x0, 0x198, 0x1c0, 0x0, {}, [@common=@inet=@tcp={{0x30}, {[], [], 0x0, 0x0, 0x2}}, @common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "6d93eb04697dfa39de04767f46614613a407abbf4ed2e83a63b484dbb3bf6b2a850e79009e2905d2f98ba19f91f3c9faee6d3686e9bee067f4e77d9ad66238750c4100d7ee97ec7646259d90edece6e9787a97bc956c01754c34c5c9518c46178ed5f9194454980e579c80eca35a58dc47d1d5e4ff6e216c724e88c702448587", 0x28}}]}, @common=@inet=@TCPMSS={0x28}}, {{@ipv6={@loopback, @private1, [], [], 'veth1_to_hsr\x00', 'pim6reg1\x00'}, 0x0, 0x2d8, 0x340, 0x0, {}, [@common=@unspec=@bpf1={{0x230}, @pinned}]}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x630) getsockopt$inet6_tcp_TCP_ZEROCOPY_RECEIVE(r2, 0x6, 0x2b, 0x0, &(0x7f00000064c0)) tee(r0, r2, 0x6, 0x2) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000140)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x20, 0x20, 0x9, [@func={0x4, 0x0, 0x0, 0xc, 0x3}, @enum={0x4, 0x1, 0x0, 0x6, 0x4, [{0x3, 0xbc}]}]}, {0x0, [0x61, 0x0, 0x5f, 0x30, 0x5f, 0x61, 0x2e]}}, &(0x7f00000001c0)=""/182, 0x41, 0xb6, 0x0, 0x2916c89, 0x10000, @value}, 0x28) socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x7e, &(0x7f0000002500)={@broadcast, @dev, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x70, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @dest_unreach={0x3, 0x5, 0x0, 0x0, 0x0, 0x0, {0x15, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x89, 0x0, @dev, @loopback, {[@timestamp_prespec={0x44, 0xc, 0x0, 0x3, 0x0, [{@loopback}]}, @ssrr={0x89, 0xf, 0x0, [@private, @broadcast, @broadcast]}, @timestamp_addr={0x44, 0x24, 0x0, 0x1, 0x0, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@private}, {@remote}, {@local}]}]}}}}}}}, 0x0) bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000002c0)={0x1b, 0x0, 0x0, 0x8001, 0x0, r0, 0x0, '\x00', r1, r4, 0x1, 0x1, 0x3, 0x0, @void, @value, @void, @value}, 0x50) 1.338732353s ago: executing program 0 (id=2151): r0 = socket$inet6(0xa, 0x2, 0x3a) ioctl$BTRFS_IOC_TREE_SEARCH_V2(r0, 0xc0709411, 0x0) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000440), 0x10) r2 = openat$cgroup_int(0xffffffffffffffff, &(0x7f0000000140)='cgroup.max.depth\x00', 0x2, 0x0) write$cgroup_int(r2, &(0x7f00000001c0)=0x5, 0x12) listen(r1, 0x0) accept(r1, &(0x7f0000000300)=@qipcrtr, &(0x7f0000000040)=0x80) syz_emit_ethernet(0xfdef, &(0x7f0000000180)={@local, @empty, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0xfde1, 0x0, 0x0, 0x0, 0x11, 0x0, @empty, @empty}, {0x0, 0x4e22, 0x18, 0x0, @wg=@data}}}}}, 0x0) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000280)=@newsa={0xf0, 0x12, 0x713, 0x0, 0x0, {{@in=@loopback, @in6=@private1}, {@in6=@local, 0x0, 0x32}, @in=@dev, {}, {}, {}, 0x0, 0x0, 0x2, 0x0, 0x0, 0x44}}, 0xf0}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000000)={0x1e, 0x4, &(0x7f00000000c0)=@framed={{}, [@call={0x85, 0x0, 0x0, 0xb2}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 1.219734362s ago: executing program 2 (id=2153): r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=@framed, &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000040)) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r0}, 0x10) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = socket$rxrpc(0x21, 0x2, 0xa) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='memory.events\x00', 0x275a, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0x40c000) r6 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r6, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)=@can_delroute={0x24, 0x19, 0x51, 0x0, 0x0, {}, [@CGW_SRC_IF={0x8}, @CGW_DST_IF={0x8}]}, 0x24}}, 0x0) epoll_ctl$EPOLL_CTL_ADD(0xffffffffffffffff, 0x1, 0xffffffffffffffff, 0x0) sendfile(r4, r3, 0x0, 0xf03a0005) socket$nl_crypto(0x10, 0x3, 0x15) r7 = epoll_create1(0x80000) sendfile(r5, r7, 0x0, 0x8001400000003) setsockopt$RXRPC_MIN_SECURITY_LEVEL(r2, 0x110, 0x4, &(0x7f0000006640)=0x1, 0x4) r8 = syz_genetlink_get_family_id$nbd(&(0x7f00000000c0), 0xffffffffffffffff) sendmsg$NBD_CMD_CONNECT(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000540)={&(0x7f00000002c0)={0x24, r8, 0x1, 0x70bd2c, 0x25dfdbfe, {}, [@NBD_ATTR_SIZE_BYTES={0xc, 0x2, 0x401}, @NBD_ATTR_SOCKETS={0x4}]}, 0x24}, 0x1, 0x0, 0x0, 0x44000}, 0x50) r9 = socket$nl_rdma(0x10, 0x3, 0x14) setsockopt$sock_int(r9, 0x1, 0x12, &(0x7f0000000100)=0x40000000, 0x4) 1.171868592s ago: executing program 1 (id=2154): r0 = openat$cgroup_root(0xffffffffffffff9c, 0x0, 0x200002, 0x0) r1 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) write$cgroup_pid(r1, &(0x7f00000000c0)=0xffffffffffffffff, 0x12) 1.028587605s ago: executing program 3 (id=2155): r0 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r0, &(0x7f0000000000)={0x28, 0x0, 0x2710, @my=0x1}, 0x10) ioctl$sock_TIOCOUTQ(r0, 0x5411, &(0x7f0000000040)) r1 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r1, &(0x7f0000000600)={0x0, 0x0, &(0x7f0000000040)=[{&(0x7f0000000080)="2e00000010008188e6b62aa73772cc9f1ba1f848480000005e140602000000000e000a000d000000028000001294", 0x2e}], 0x1}, 0x0) 967.934273ms ago: executing program 1 (id=2156): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x34, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_HOOK={0x14, 0x4, 0x0, 0x1, [@NFTA_HOOK_PRIORITY={0x8}, @NFTA_HOOK_HOOKNUM={0x8}]}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}]}]}], {0x14}}, 0xe4}}, 0x0) 884.960323ms ago: executing program 1 (id=2157): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000400)={0x0, 0x0, &(0x7f0000000640)={&(0x7f0000000240)=ANY=[@ANYBLOB="440000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="00000000000000000500110000000000140003006272696467655f736c6176655f30000008001680040001d527"], 0x44}}, 0x0) sendmsg$IPSET_CMD_LIST(r0, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000380)=ANY=[@ANYBLOB="340000000706010200001d2405000100070000000800054000000d770500010007"], 0x34}, 0x1, 0x0, 0x0, 0x20000000}, 0x80c0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x8000000010, 0x2, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r3, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000040)=0x14) r4 = socket$inet_sctp(0x2, 0x1, 0x84) bind$packet(r2, &(0x7f00000000c0)={0x11, 0x9, 0x0, 0x1, 0x1, 0x6, @link_local}, 0x14) setsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, &(0x7f00000006c0)=0x6, 0x4) getsockopt$inet_sctp_SCTP_AUTO_ASCONF(r4, 0x84, 0x1e, 0x0, &(0x7f0000000140)) syz_emit_ethernet(0x2a, &(0x7f0000000080)={@local, @local, @void, {@arp={0x806, @ether_ipv4={0x1, 0x800, 0x6, 0x4, 0x1, @local, @remote, @link_local, @broadcast}}}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) write(r2, &(0x7f00000002c0)="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", 0xfc) r5 = socket(0x840000000002, 0x3, 0x100) connect$inet(r5, &(0x7f0000000080)={0x2, 0x0, @loopback}, 0x10) sendmmsg$inet(r5, &(0x7f0000005240)=[{{0x0, 0x0, 0x0}, 0xfffffdef}], 0x4000095, 0x0) r6 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_inet_SIOCSARP(r6, 0x8955, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x20000010304, @dev}, 0x4, {0x2, 0x0, @multicast1=0xe000cc02}}) socketpair$unix(0x1, 0x5, 0x0, &(0x7f00000005c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$SO_ATTACH_FILTER(r7, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f0000000140)=[{0x9, 0x0, 0x0, 0xfffff010}]}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x16, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x95}]}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 838.043605ms ago: executing program 4 (id=2158): r0 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000040)=0x7, 0x4) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x3c, 0x10, 0x403, 0x70bd27, 0x0, {}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bond={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BOND_DOWNDELAY={0x8, 0x5, 0x6}]}}}]}, 0x3c}, 0x1, 0xba01}, 0x0) 820.578209ms ago: executing program 3 (id=2159): sendmsg$tipc(0xffffffffffffffff, &(0x7f0000004440)={0x0, 0x0, &(0x7f0000004340)=[{&(0x7f0000000f00)="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", 0x501}], 0x1}, 0x0) (async) r0 = socket$nl_generic(0x10, 0x3, 0x10) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = syz_genetlink_get_family_id$tipc2(&(0x7f00000005c0), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_SET(r1, &(0x7f0000000540)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000000)={0x38, r2, 0x601, 0x0, 0x0, {}, [@TIPC_NLA_LINK={0x24, 0x4, 0x0, 0x1, [@TIPC_NLA_LINK_NAME={0x13, 0x1, 'broadcast-link\x00'}, @TIPC_NLA_LINK_PROP={0xc, 0x7, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x5, 0x2}]}]}]}, 0x38}}, 0x0) (async) sendmsg$TIPC_NL_NET_SET(r0, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000000c0)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r2, @ANYBLOB="0100062fbc0325b200f1ff00000000000780080002000000000000000002e16501a574fcd43b2fa197"], 0x2c}}, 0x0) (async) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0xc0200, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)=0x3) (async) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$PPPIOCATTACH(r4, 0x4004743d, &(0x7f0000000040)=0x3) (async) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETOFFLOAD(r5, 0xc004743e, 0x20001400) r6 = epoll_create1(0x0) r7 = socket$inet6(0xa, 0x2, 0x3a) bind$inet6(r7, &(0x7f0000000080)={0xa, 0x4e60, 0x0, @empty}, 0x1c) (async) close(r7) (async) epoll_ctl$EPOLL_CTL_ADD(r6, 0x1, r4, &(0x7f00000004c0)) (async) close(r3) 731.59339ms ago: executing program 2 (id=2160): bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00'}, 0x10) r0 = socket$inet_icmp_raw(0x2, 0x3, 0x1) setsockopt$IPT_SO_SET_REPLACE(r0, 0x0, 0x40, &(0x7f00000001c0)=@security={'security\x00', 0x3a, 0x4, 0x338, 0xffffffff, 0x110, 0x0, 0x1a8, 0x110, 0xffffffff, 0x110, 0x2a0, 0x2a0, 0xffffffff, 0x4, 0x0, {[{{@uncond, 0x0, 0xb0, 0x110, 0x0, {}, [@common=@set={{0x40}}]}, @common=@SET={0x60}}, {{@uncond, 0x0, 0x70, 0x98}, @common=@unspec=@STANDARD={0x28, '\x00', 0x0, 0xfffffffffffffffe}}, {{@ip={@empty, @private, 0x0, 0x0, 'vlan0\x00', 'vlan0\x00'}, 0x0, 0x98, 0xf8, 0x0, {}, [@common=@ttl={{0x28}}]}, @common=@SET={0x60}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x398) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000007c0)=ANY=[@ANYBLOB="340000001000010400f924153cae64c75dfcff090000000000000000", @ANYBLOB="0000000000000000140012800c0001006d61637674"], 0x34}}, 0x0) write$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040)=ANY=[@ANYBLOB="2b4c707573657420806e65745f636c7320"], 0x11) socket$nl_route(0x10, 0x3, 0x0) r2 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f00000000c0)={'netdevsim0\x00'}) r3 = socket$inet6_mptcp(0xa, 0x1, 0x106) sendto$inet6(r3, 0x0, 0x0, 0x20048004, 0x0, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @local}}, 0x1c) r4 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r4, &(0x7f0000003580)={0x2, 0x0, @dev}, 0x10) bind$inet(r4, &(0x7f0000000580)={0x2, 0x4e21, @broadcast}, 0x10) connect$inet(r4, &(0x7f0000000140)={0x2, 0x4e21, @empty}, 0x10) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000800)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000000000000000000000000010000008005e9020001000000"], 0x20}}, 0x4000000) r7 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f00000000c0), r7) sendmsg$nl_generic(r7, &(0x7f00000029c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="200000001000010700000000000000000a0000000c0002006e6c3830323131"], 0x20}}, 0x0) recvmmsg(r7, &(0x7f0000001580)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) recvmmsg(r7, &(0x7f0000000600), 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000003c0)={0x3, 0x3, &(0x7f0000000840)=ANY=[], &(0x7f0000000500)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x27, '\x00', 0x0, @sched_cls, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, &(0x7f00000002c0)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x100, 0x100, 0x9, 0x1, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xc, 0x4, 0x4, 0x1, 0x0, r8, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x3, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x2f, &(0x7f0000000840)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7}, {{0x18, 0x1, 0x1, 0x0, r8}}, {}, [@snprintf={{}, {}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0xa6}, {}, {}, {}, {}, {}, {}, {0x18, 0x3, 0x2, 0x0, r0}}, @map_idx_val={0x18, 0x0, 0x6, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, @map_val={0x18, 0x8, 0x2, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x8}, @ldst={0x1, 0x1, 0x1, 0x6, 0x1, 0x2, 0x1}, @printk={@i}, @initr0={0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffff440}, @ringbuf_query], {{}, {}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f0000000700)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 635.091594ms ago: executing program 4 (id=2161): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000000040), r0) sendmsg$NLBL_CALIPSO_C_LIST(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x2c, r1, 0x100, 0x70bd26, 0x25dfdbff, {}, [@NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x3}, @NLBL_CALIPSO_A_MTYPE={0x8}, @NLBL_CALIPSO_A_DOI={0x8, 0x1, 0x1}]}, 0x2c}, 0x1, 0x0, 0x0, 0x40}, 0x4004) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r0) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000240)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000200)={&(0x7f00000001c0)={0x14, r2, 0x800, 0x70bd25, 0x1, {}, ["", "", "", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x20008000}, 0x4044) bpf$BPF_GET_BTF_INFO(0xf, &(0x7f00000004c0)={0xffffffffffffffff, 0x20, &(0x7f0000000480)={&(0x7f0000000380)=""/6, 0x6, 0x0, &(0x7f00000003c0)=""/148, 0x94}}, 0x10) r4 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000500)={0x1b, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x800, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r5 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000580)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x6, '\x00', 0x0, 0xffffffffffffffff, 0x5, 0x4, 0x1, 0x0, @void, @value, @void, @value}, 0x50) r6 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000600)={0x3, 0x4, 0x4, 0xa, 0x0, 0x1, 0x7, '\x00', 0x0, 0xffffffffffffffff, 0x4, 0x2, 0x3, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xf, 0x5, &(0x7f0000000280)=@framed={{0x18, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x4}, [@map_idx_val={0x18, 0x8, 0x6, 0x0, 0x10, 0x0, 0x0, 0x0, 0x8de3}]}, &(0x7f00000002c0)='GPL\x00', 0x8f1, 0x0, 0x0, 0x41100, 0x25, '\x00', 0x0, @cgroup_device, 0xffffffffffffffff, 0x8, &(0x7f0000000300)={0xa, 0x3}, 0x8, 0x10, &(0x7f0000000340)={0x3, 0x2, 0xee51, 0x2}, 0x10, r3, 0xffffffffffffffff, 0x4, &(0x7f0000000680)=[r4, r5, r6], &(0x7f00000006c0)=[{0x2, 0x5, 0xf, 0xb}, {0x3, 0x5, 0xc, 0xa}, {0x4, 0x1, 0xd, 0xa}, {0x4, 0x2, 0x6, 0x4}], 0x10, 0x401, @void, @value}, 0x94) sendmsg$IEEE802154_LLSEC_LIST_DEVKEY(r0, &(0x7f0000000880)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000840)={&(0x7f0000000800)={0x14, 0x0, 0x1, 0x70bd28, 0x25dfdbfe, {}, ["", "", "", "", "", "", ""]}, 0x14}, 0x1, 0x0, 0x0, 0x40001}, 0x800) r8 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000900), r5) ioctl$sock_SIOCGIFINDEX_80211(0xffffffffffffffff, 0x8933, &(0x7f0000000940)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_PMK(0xffffffffffffffff, &(0x7f0000000a00)={&(0x7f00000008c0)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f00000009c0)={&(0x7f0000000980)={0x3c, r8, 0x4, 0x70bd2d, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r9}, @void}}, [@NL80211_ATTR_PMK={0x14, 0xfe, "f1c59450eeee997c75be609c7cdccea8"}, @NL80211_ATTR_MAC={0xa, 0x6, @device_b}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4001}, 0x4000004) sendmsg$NL80211_CMD_SET_POWER_SAVE(0xffffffffffffffff, &(0x7f0000000b40)={&(0x7f0000000a40)={0x10, 0x0, 0x0, 0x8}, 0xc, &(0x7f0000000b00)={&(0x7f0000000a80)={0x48, r8, 0x2, 0x70bd29, 0x25dfdbfc, {{}, {@void, @val={0xc, 0x99, {0x996, 0x54}}}}, [@NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8}, @NL80211_ATTR_PS_STATE={0x8, 0x5d, 0x1}]}, 0x48}, 0x1, 0x0, 0x0, 0x40001}, 0x40000) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000c40)={'tunl0\x00', &(0x7f0000000bc0)={'tunl0\x00', 0x0, 0x40, 0x40, 0x4, 0x5, {{0x12, 0x4, 0x3, 0x37, 0x48, 0x68, 0x0, 0xba, 0x29, 0x0, @remote, @private=0xa010100, {[@ra={0x94, 0x4}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x2c, 0x27, 0x1, 0xe, [{@dev={0xac, 0x14, 0x14, 0x43}, 0x2}, {@dev={0xac, 0x14, 0x14, 0x1c}, 0x3}, {@local, 0x8ae4}, {@rand_addr=0x64010102, 0x7}, {@broadcast, 0x1}]}]}}}}}) ioctl$sock_ipv4_tunnel_SIOCGETTUNNEL(0xffffffffffffffff, 0x89f0, &(0x7f0000000d00)={'ip_vti0\x00', &(0x7f0000000c80)={'sit0\x00', 0x0, 0x7, 0x40, 0x7f, 0x1, {{0x17, 0x4, 0x2, 0x0, 0x5c, 0x68, 0x0, 0x6, 0x29, 0x0, @initdev={0xac, 0x1e, 0x1, 0x0}, @remote, {[@timestamp={0x44, 0x18, 0x4a, 0x0, 0xb, [0x2, 0x6, 0x6, 0xffffffff, 0x7ff]}, @lsrr={0x83, 0x27, 0x52, [@dev={0xac, 0x14, 0x14, 0x38}, @broadcast, @broadcast, @remote, @empty, @rand_addr=0x64010101, @multicast2, @private=0xa010101, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @lsrr={0x83, 0x7, 0xdf, [@private=0xa010102]}]}}}}}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000e00)={&(0x7f0000000b80)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000dc0)={&(0x7f0000000d40)=@ipv6_getroute={0x58, 0x1a, 0x1, 0x70bd29, 0x25dfdbfd, {0xa, 0x0, 0x10, 0x80, 0xfc, 0x0, 0xfe, 0xb, 0x3500}, [@RTA_MARK={0x8}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x6}, @RTA_ENCAP_TYPE={0x6, 0x15, 0x7}, @RTA_MULTIPATH={0xc, 0x9, {0xc547, 0x2, 0x5, r10}}, @RTA_EXPIRES={0x8, 0x17, 0xfffffffb}, @RTA_IIF={0x8, 0x3, r11}, @RTA_MARK={0x8, 0x10, 0x3}]}, 0x58}, 0x1, 0x0, 0x0, 0x20004000}, 0x20000010) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000e80)={'wpan1\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000ec0)={'wpan3\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000f00)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_DEL_DEV(r0, &(0x7f0000001000)={&(0x7f0000000e40)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000fc0)={&(0x7f0000000f40)={0x80, r2, 0x200, 0x70bd2a, 0x25dfdbfd, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan0\x00'}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan4\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_HW_ADDR={0xc}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r12}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r13}, @IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r14}, @IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0102}}, @IEEE802154_ATTR_HW_ADDR={0xc, 0x5, {0xaaaaaaaaaaaa0202}}]}, 0x80}, 0x1, 0x0, 0x0, 0x4040}, 0x4) r15 = syz_genetlink_get_family_id$netlbl_mgmt(&(0x7f0000001080), r0) sendmsg$NLBL_MGMT_C_VERSION(r0, &(0x7f0000001140)={&(0x7f0000001040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000001100)={&(0x7f00000010c0)={0x1c, r15, 0x4, 0x70bd2c, 0x25dfdbfe, {}, [@NLBL_MGMT_A_CLPDOI={0x8, 0xc, 0x1}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40891}, 0x80) pipe(&(0x7f0000001180)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$NL80211_CMD_SET_MULTICAST_TO_UNICAST(r17, &(0x7f0000001280)={&(0x7f00000011c0)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000001240)={&(0x7f0000001200)={0x38, r8, 0x2, 0x70bd2c, 0x25dfdbfb, {{}, {@val={0x8, 0x3, r9}, @val={0xc, 0x99, {0x9, 0x62}}}}, [@NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}, @NL80211_ATTR_MULTICAST_TO_UNICAST_ENABLED={0x4}]}, 0x38}, 0x1, 0x0, 0x0, 0x20008000}, 0x4081) getsockopt$inet_pktinfo(r17, 0x0, 0x8, &(0x7f00000012c0)={0x0, @empty, @remote}, &(0x7f0000001300)=0xc) r19 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000001340)={0x1b, 0x0, 0x0, 0x7, 0x0, r6, 0x8, '\x00', r18, r16, 0x2, 0x2, 0x1, 0x0, @void, @value, @void, @value}, 0x50) getsockopt$inet_IP_XFRM_POLICY(0xffffffffffffffff, 0x0, 0x11, &(0x7f0000001400)={{{@in6=@mcast1, @in=@initdev, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in6=@private2}, 0x0, @in=@dev}}, &(0x7f0000001500)=0xe8) sendmsg$netlink(r17, &(0x7f0000003ec0)={&(0x7f00000013c0)=@proc={0x10, 0x0, 0x25dfdbfd, 0x4}, 0xc, &(0x7f0000003840)=[{&(0x7f0000001540)={0x1128, 0x32, 0x800, 0x70bd27, 0x25dfdbfd, "", [@typed={0x8, 0x108, 0x0, 0x0, @uid=r20}, @generic="0cb619831e4551435667cf763191104a45a821b14653f12e1ce7d2c66d01aed3793e7f4b305b1d6157f6cfeb94a846285a14072a2054936ab87cfcb424230a8450b4ddad1c8f11d33c5ba31e76b46a04103dfc99241a0765ea889290ac8aa1f97bff2062568756468f8c8ad9818aa66b5d1d6d948d45beb30e8ce60a539e511bf749656c297a1f32e4b661d622518cc740b006ae17903237e7603a116e8f4c294502bf698a813d295d2ee2be4a93c8c2ddca0a4d7967473658fbc0b0195f322072044d0c625f8181c06016dc0ff0731d2bd284df3c8a5e3ac3fa382c632571c9d03c13c6e3e17d5b682bab23c420c76e10467feb0fc9de01832d334b26a057cd25e9346dc7eba3ec96d27f4159ee73deb0a22d7f97e9eea711ca2316bec629fdad064ab147fb5a9e67c5209becbd792a60a9768b41529a172d0ceb3a3bcff91d54f66f538b217a9f9bae78a98d74287da932f12aa06e4b8e0c7a959adf449c8041d2b7047c770d193d3ebde8a54b6cca46a11cdb88139904f4d6fc6ad4bb7f63290677d569d5ac0da19ee6ffc8484baa116d2336e722caf7a6e99fdb854525e9abe1cd3d8d4bf1be204b5ee8d8658ab0aa12fa943e1f83f3f74aa449518ab47a0c3106bf2960595399e35fcf67ff5302593fdcb8d456d941fd6f78de1888ff75b540446d346393ad8a03fabea20c90c862d45759c2e0de9c003351c9060de442d80eea00b9830df9f77f4e9b84cd04ab511449d6ead591ce3c137213e11dd65e23ca8c838f76ed90f1ac9d8b4937c59d151b2880f63f2519179a28fcb431b4be7a66a1f806e94352dd001a7265a636b6bfbbb5633e946cb99bff49b6e2dda63533c3b6106ff1b1a1f6dcf1c62cef8fe1286384fd576ea6290010052be9531fe609c5ed4d36a675f0fac3c290131be3da7830319829fc40658a9e530a22d2cd9b5eee1b40c5f9f607534a07168fef493627a87bf15794b1db46b2dc0a73795f06b0ca74511b9565137f822426d3f8f5129879c69304e71368e07feeb26db81a4b4bbfac0632f488bdf75f469a30a4504025bcef5cfe669b7a0ec514684def36d5cb223ee1daff093bcae3f19c5dcfd0c10de25c636700ba66f5b72f67fab6ed76af9f21ab356b57522e52f08203553a0231a8a9c80deeb0b08a2ad801b1ba0096da29e10c61739b8e44c3bded1d7b9fc504fa52b0c1e5eac680114c4113bd745c9ff3297c4ee281028c1a40a3a456bb56d761434dfa5e99c36b1af3af8d55ec3ce87315ccf9b20c0def21acf2e8637d80907f502f9fd0bda2fde5fdfd600c3937d1e784bdb9a49cdb140348e17e4b4f77ce5018bbae10870382e8e4e65a2b6f8b08dfacf76964adef1a049a8156df44a5a7cca6fd64b49959ea7cedf8e1535b1e19104e2f69b1f5b506c67eb6fbb9622bb96ff59428fdec2fa7973acbdf558efc22f3f97ca7ef24bbc56cadedced89fe0e7c5b67c005ef201866f2c43261149ddf314a185c4c1535349548697664db947b58c58f6020eac55c2a731080b02caf0437516dd2ba09b3bb485e87b0e4183636b3182a3ec400f9bc1968cc3fa01be78d3effa0b34cfdfe246ceacd00e1768c571e9c91352e0b0bd16ff2d22c07bb4df2164e4d2c3e8ee8b6f09a53ce653f2025711f30b0b1ecb24a7171d60239c22f8e631775718e3239ba3185862a497c3f8f3864ac252265e37da5db92abe2480833a846188ad60b27edf73af10d5e90c97ee8cdd04650f8eaeff202f84d475c64e6a9519dda3daa5941cac0d0013c42dd34f4aa8782ca9177f5459d0a188c955c119d4afbb8d1f04407aaeadcaba298bb6a49de4511059cb6b6da17720672dde4fab5c16d21166717284aa95003b1b24e156baa7a66dd72933d33707f4508199050761928aeb8bcca4b4084161ad5b43f0ad33d21443c61aaa00c9ee366a44174f85a9135da3f67cd97fb332ea93cbc3cc5a3053620cee36d49a7636a687fc8e18649295ff7fa932df0f06813177fa7ee688ca2cf1c0749878b5480a57f7e7e9cd2c381d557ea6ad10e865043bdcc36127f239e1393d03a9a3acf05a6c2018f463ec1c0399a5d329ea511b015d807a7b58e47dd15be646231e98d3223d65c225f50b0358d6b7721c7dcfac1218e852f656cdbbc4b9ad607da27a1aa96e0d4cfcffbbd408621dc8842b829c3b4fecd840231232905ecc152287285e9508f62ab4949551954db6be48e5700822cd00abd3861c52597b86abc05bee71a37753973a3df2a5ea1058628c30f952ed03aeb2ac5274fdf6bb88d7bb743cefd421b73c5765e3a7af79036882e016adb7bc0e0a25fe143c2514bc96f80248acf659fbdca8b6e0fcb517235f427f29210e9df4414443a5bc88970e2cfff586410e8c3441ebc15c9ea757925caf4dfe9ec418987b4a55feafdc0a958e426ea67529ff3c9b3b3516ed4416091de5f07258c0688389de654cb530557956913fea7f3dc1d9355a9cbcc94f9543d4d193273e10099058c47c06fe0f64f48397c495ed0c35b40a4add884513dc9cd1fc21bad27d4d05d045ef8606965a887b005f893cc6f9746c5b7aa873ba3dbe7e9302fad76f6bf102c2a3217256fb5d446d4805a08df743c6f93e1b362ffc562c3fdd08fc72b73c816b8a889a1e17ba6fe1e08acaf376cc0374c62724b883db8d183522e9ba8e4a43f2fc02c7f8c0d3ced4ef818ecd1eeaed5ad15b2b0e377a2d087caddeac32751fbeff7188a222ee4d9315b730155e1e8d464ba538477323dad1b4fec8a2bbe8773298f52eb2eb1eac06af17ecd42f5dafcad0fe110c80011168c222d95fbccbff689565694f50043ff17f66a8ff486511a242f7e2b5afffac36a0456bb0b4bc571be267e8bb100adc4d87dc329507f07a26f1b523548d0ba1937f299928e9f916313d166a7f51df4675a811143f9d66fa33310c899f3c2eb165517a8a9a4773efc440f77acea083e29c2bd51d15d52d17f8cda77a490d6d7ac23cf417b87549391dc7f9dff0dd5dd3ceb9f7b16a7f043981265e90fc3bdf3e9b647cc51adf4e0c2787f9b7828498fe144094b8f2b0b9ffd7884d9715af7f1cb344f8a45ccec9be737723b4a794e23b89f7ee505600cab05db0a45b99fa847b7e8d68a534c311cbe0bb489bf3d04bde4e0da3d2ea5af83fdc153fa5a8b553a08d1d5ccea9e33a82aedf0c2425c916f914b16e18335b9874b648921b8073b047bf1ba07445f389a95547ff807ac3dcfea1bde154f8e4f6a71978800e404d6db9294b25a04b2e833bcf24a0922de91c4d103af452996585344c472b5a80886ec436e701d17dc226445f80e73cdf1993bff14fd1b84c737dcd8c8109470f11745575c46ae626a52ef294feccb6de3d90043e572a014d6d809416a50c0dbb8caf59f4898c74ff6f4f4929072df5eb85b6df9e24a043bf8e4caa87cffab3f441032c000e180323e3b37ba3f9faa39373f3ec64b9e4859b9f94c3fc8fad53b0fec1221891f360079381353be54bc273536a665b08575b1b00c7859207df011fce5d631471f75e61349dea3bdfdd38657b8428900eab2aec93d19453090b1a5ca0f61e76c2901b4ba87b577327d1353e6fc0435d764bb6d36381cff5fb7f47f39d9dadb2a0858410e05c283f0ea632fa5ffa74694137fad0a8de4d0bce36ac122ffb840f3213530e6564edcab1b17aab85c75f449d8f001ae3d4c88757629cecdfc5c96036bb826d08cb99b0f369c5571aeec2dc51f6ffee171f54e34a212044e9df238367f053eb4683b1d22c0f8b5e9bd32402069ecb126569837a3590cc321a371c3119af3a8b327d11ea7e49c95478239f57d62c2dd851fbab484a7343b100edb52959d09cfbe4d9b28af66e9e300ed28fdb10435ddf0bcd035c9a7548fe529205cbd8ce713a6a0dee0c8bbf6186b8cd72a4a829e90e1a3475728976f2e7e597386c89b207f8b651440b77beb3af3fdb80166412e61b1559d80818836b30c3ea3ed0c51b7f7ae42f618b3e9773183e7cecba56726fde0820383e7fb34ee84e008791c50fe0de0a2a8d2c18f35c75282810357e4b47aea7d91b365ccd32ed5bcc877be412d5f3a38c2a1087d7dd5fc8de6786428bb46763afe4113002aa12c5d3170d02f2412d7152ef7883dc4f0a6037f05e78ba8ab8707bcff9fd879014cc5f0a0c03d71c8e39aac904617270e5c5d9286c03d1fbae09000a92f4c659dbc9cd9864c1bd53d307438fa91401528141052b0c545b1e097b79f05897032a2be067c619678442cd2f55f60a899061cdb432302a6c1c8d00871494be073fb4a289e4ce81bcac4dcdc195d86e6d2d0966dbd2fcf1500f4ea78d794ed3b9ca6fb17061f41109c41a7a9d4b94bd53dbf6be9a29464728203780426ac1696a3fb74275a2905eb2b5d4a47cf25b171bb719c96d7691963df0fc74af9f7e9637324ffd6c479ed2c59997f029fe4c4307910ba2ae9f2afdc69be538757381268fcecb7afd7691070bc69b94c38ceef3b863fc090d393c5945fdc3ea0bbe5ebeaf30ef7f05e4472371cbc8f01c5d4581ab773315dc2ca4a79b03f2ff6302312167fe5e50ab8e395f27853e0379a2b0fdfbb91e73c98baaea5ac1ab6af35b27d9cb35453c61658993fda746648d2d4b1d672362c5fe046accb83297a837b3d02b9b55c27b05d16449d9a6a8c07d98ff1307d1932cc5283ca4adea859ec86dde23e2b1de0a5391fc55c2ed0a33813f04444258fb7d83003c045567a42647a0a72f339cd949509ff41f159a5ba18d30774c29ccc56f0fe74638889bc3eed9f265e58e0e9fff61a5e21a4945e9b2c6f4aaf655eae28fd8ed5e03e5acb5ac49010764c772c1ce8cec70ef194615ca67d6febfbe02e60af7e931e87a7ba5a4b5fbcb6ea6064c4b0995cb026926dbcd1599ea76b10ba618a7151ac56fb87a70c93893a24fdd658fe263a789ba70f7958b8d12b8f8445d272e13157ceadceca2b35eb4e1ffa6cce346e199addd9cef1cbde2d4aab61b3fa57352c3014d885fb7e05d2748a5f8372e2508106da4d4c0d05200b8329e0b3b88552d3d671bd555b1c0882af3d961ac5dfa5e8cfe6100bd8ce15717f32434331f107e9d50b1e0f786ac71979b486d83dbe54a1aa3899834d47c3daa30bf94698e7c81c9613ba39ae2b522ef7e8cdd6f4e53dd6803e4d5688584b261d21298747ad15d97332997ed772b14c864c1c49b52f0cdff67c8002652f8debf5a3fbd315cf8d334991050c75734294069ff75445cac8748e39d4e2022961113e625c0d0b9c19a2b08f3659b8b6c933022a80108136046e7df5f06a9a46e167b9b345a7f132f0c606e249fa96c090db4a187c4bf5a9dc01b20428670af2fa2516c45fcafda1c833adfaaa087fbda1ba183dba69a448abb7635cd15787c1425dfd2bfd80d135bc9b0ac7197d324d283222030fc5ce7178e8d65ed59d9cf54718526adf7d475e8a548e7bf0d6bb1e70831e2286970948599119bf7f74585b4f78effbeaa3282e04f17d2d620406c874c694686820f6f5fe1cba307e463187bb435f7501f093577908216ed697330f263d54384f0a3c70bceb3592034ca6eb730580bbcbc411f532dd154cf6c276ef39f0df2f6190782fbedf24a336cf25588ab756935c4e55344f3c0d07f603df914fcf6a1f5c4bf325fa4b5754edc1761801789850d8b90e100be49cd8c14b3f2a6767b420ef5290c009ffc7ab53a6a114308cd72a46eceb644cfa8959ce82a26abfa10f8739147b96fe785a306866e9c94c592528f82be425aa480e5ee488542b4a8c72eb0", @generic="7702526a1d692d5fb1e43c1b648d248afb2c0b7841d9fc8c2d085385cc7ada1b5782522684ae292894bbb3e7fe680ee4e7489a5e2457ae25e2db4034f8f6d8578af1bdbca797f0936d407e0751c20a649d9c49e6795d9524a0a5a80e58fc7d0493048ee417abf555880a57f978b710b346a91f643a18ba77e04fcba078409826696dd15aec0441a3ac9dcfcd8660a78403c54e2eedce4fa777772a0146a4133931adf6a4a5e7e6c1ab75cf083a693f918ff6d7de0c3b534376487c4a49a9dd80aeff2612cdb366abd065d0bb00405121e034380dca7c919e3a8471cce8e8ca7b3e8cb345e4bc0ac137bfe136b8434b09", @typed={0x14, 0x88, 0x0, 0x0, @ipv6=@private1}, @typed={0xc, 0x85, 0x0, 0x0, @u64=0x10001}]}, 0x1128}, {&(0x7f0000002680)={0x18, 0x2a, 0x8, 0x70bd2c, 0x25dfdbfc, "", [@typed={0x8, 0x126, 0x0, 0x0, @ipv4=@rand_addr=0x64010102}]}, 0x18}, {&(0x7f00000026c0)={0x1154, 0x1d, 0x200, 0x70bd2c, 0x25dfdbfe, "", [@generic="7266a9dceb4df1825cdd5eb9ed8063e84c954c5844175c809d6e6e6e4f8a4baac279768040a77b2c70c8ef16", @typed={0x8, 0x6f, 0x0, 0x0, @u32=0xbc}, @typed={0x8, 0x4a, 0x0, 0x0, @ipv4=@dev={0xac, 0x14, 0x14, 0x1f}}, @nested={0x1105, 0xb5, 0x0, 0x1, [@typed={0x25, 0x11e, 0x0, 0x0, @binary="594bde58c7d408c24d0fd27e6c79bcd11a4ab0eda690cd3c0f6efe5d32a621b61e"}, @generic="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", @generic="53cb39a91ce4bebce618c0c1397ef19ce4e7cd1c03e3beb6504536bd0379573b2cb16754c57a41cd18f8322804792891fb5281644b44e208d76e2c7ebf93e3e03c771fc1a1da8df22374b65a1a0b0b76c24894915622000c11509452a715935301da7aad0094b55f2f0902d7228f165cbd5152c5b4c378b4ed9ca4bc44b7611ebf1e3d95db57aa78d3620a69411bb876df78028103eb8ad99ebf576e2346663a64ecf3ce2c2f8392f1391e8409157e1ee7eb716cc21853ce57b47c6ccf219f8796eeab8f5823f19f8fc92d9cb46254026e", @typed={0x8, 0x40, 0x0, 0x0, @fd=r19}]}]}, 0x1154}], 0x3, &(0x7f0000003dc0)=[@cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @cred={{0x1c}}, @rights={{0x2c, 0x1, 0x1, [0xffffffffffffffff, r5, r4, r16, r19, 0xffffffffffffffff, r17]}}, @rights={{0x30, 0x1, 0x1, [r19, r5, r7, r19, r4, r17, 0xffffffffffffffff, r5]}}], 0x100, 0x20000091}, 0x20004000) 592.416202ms ago: executing program 3 (id=2162): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000300)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0xc}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x8}]}, @NFT_MSG_NEWSETELEM={0x54, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x28, 0x3, 0x0, 0x1, [{0x24, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_DATA={0x18, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8}]}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xe8}}, 0x0) r1 = socket$netlink(0x10, 0x3, 0x15) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2c00000010000000fcffffffffdb000400c6dd00", @ANYRES32=0x0, @ANYBLOB="0000000000000000090001"], 0x2c}, 0x1, 0x0, 0x0, 0x4000080}, 0x0) sendmsg$DEVLINK_CMD_SB_PORT_POOL_SET(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000000)=ANY=[@ANYBLOB="04010000100053"], 0x104}, 0x1, 0x0, 0x0, 0x20040890}, 0x200080c0) syz_emit_ethernet(0x7a, &(0x7f0000000080)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaaaa86dd60000b28000c2f00fe800000000000000000000000100002fe8000000000000000000000000000aa242088be39028f836f"], 0x0) 408.154383ms ago: executing program 3 (id=2163): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000180)=@gcm_256={{0x304}, "df8821b3bba7c1cf", "7c3c3ce9249e0cb0699fedceb32442a9880a937987d6041c4da5c9e9fbc10df6", "50d900", "8068b0bd1a4a3211"}, 0x38) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x2, &(0x7f0000000100)=@gcm_256={{}, '\x00', "d830005894bf527ae179a7173985202bbfb61b36f3678de8ea2d0d6616076243", "5615d9f5", "7c5cb121291a43fe"}, 0x38) r1 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000000)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x31) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x1f, 0x18, &(0x7f00000001c0)=ANY=[@ANYBLOB="18000000000000000000000000000000b7080000000000007b8af8ff00000000b7080000000000007b8af0ff00000000bfa100000000000007010000f8ffffffbfa400000000000007040000f0ffffffb70200000000000018230000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7050000080000a8c5000000a5000000180100002020640500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000000085000000c500000095"], &(0x7f0000000600)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x18, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) 356.461332ms ago: executing program 0 (id=2164): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) openat$cgroup_netprio_ifpriomap(r0, &(0x7f0000000080), 0x2, 0x0) sendfile(r0, r0, 0x0, 0x1fe) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000900010073797a300000000044000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a3000000000080005400000001f08000340000000074c0000000c0a01020000000000000000010000000900020073797a3200000000200003801c0000800800034000000001040001800c00054000000000000000000900010073797a3000000000140000001000010000000000000000000000000a000000000000000000"], 0xd8}}, 0x0) socket$nl_xfrm(0x10, 0x3, 0x6) 285.043588ms ago: executing program 1 (id=2165): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1801000011000000000000000000000018120000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b7040000f6000000850000004300000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000040)=ANY=[@ANYBLOB="1800"/12], &(0x7f0000000000)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x48, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r2, &(0x7f0000000040)={0x1f, 0xffff, 0x3}, 0x6) pipe(&(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r3, &(0x7f00000000c0)=[{&(0x7f0000000180)="77690addcfbe1fbb66ec", 0xff3b}], 0x1, 0x1) write$cgroup_subtree(r3, &(0x7f0000000000)={[{0x2d, 'pids'}]}, 0x6) bpf$PROG_LOAD(0x5, 0x0, 0x0) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000001800ff0f00000000001b0000850000006d000000850000002300000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000080)='sched_switch\x00', r4}, 0x10) socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f00000003c0)={'bridge0\x00', 0x0}) r7 = socket(0x10, 0x80002, 0x0) sendmsg$nl_route(r7, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="440000001300290a000000000000000007000000", @ANYRES32=r6, @ANYBLOB="00000000000000001c001a800800028008000200080000003e120000080002001040e5"], 0x44}}, 0x0) write(r2, &(0x7f0000000100)="52000300010007", 0x7) bpf$PROG_LOAD(0x5, &(0x7f0000000300)={0x0, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="18000000000000000000000000000000850000006d"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = bpf$PROG_LOAD(0x5, &(0x7f0000000240)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000300)='sys_enter\x00', r8}, 0x10) socket$rxrpc(0x21, 0x2, 0x0) r9 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r10 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='sched_process_wait\x00', r9}, 0x10) r11 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r10}, 0x8) r12 = socket$kcm(0x15, 0x5, 0x0) sendmsg$inet(r12, &(0x7f0000000580)={&(0x7f0000000040)={0xa, 0x0, @multicast1}, 0x10, 0x0}, 0x0) close(r11) bpf$PROG_LOAD(0x5, &(0x7f0000000500)={0x1, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b40500000000000061107f000000000007000000000000009500000000000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$alg(0x26, 0x5, 0x0) 183.900002ms ago: executing program 3 (id=2166): gettid() (async) r0 = gettid() socketpair$tipc(0x1e, 0x0, 0x0, &(0x7f0000000000)) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r1, 0x107, 0x12, &(0x7f0000000000), 0x8) r2 = socket$packet(0x11, 0x2, 0x300) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) (async) setsockopt$packet_fanout(r2, 0x107, 0x12, &(0x7f0000000000), 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0xe, &(0x7f0000000bc0)=ANY=[@ANYBLOB="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"], &(0x7f0000000b80)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffedf, 0x10, &(0x7f0000000040), 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) pselect6(0x40, &(0x7f0000000000)={0x8, 0x2, 0x5, 0x7, 0x5, 0x3, 0x8, 0x3}, &(0x7f0000000100)={0xffff, 0xe0d7, 0x0, 0x28, 0xa, 0x81, 0x400, 0x8}, &(0x7f0000000140)={0x6, 0x4, 0x9, 0x7f, 0x80000001, 0xc, 0x100000000, 0xff}, &(0x7f0000000180), &(0x7f0000000200)={&(0x7f00000001c0)={[0x81]}, 0x8}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000001c0)={0x0, 0x0, 0x0}, 0x0) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$inet_sctp6_SCTP_EVENTS(r4, 0x84, 0xb, &(0x7f0000000080)={0x0, 0x5b, 0x0, 0xfa, 0x0, 0x7, 0x0, 0xfe, 0x0, 0x40}, 0xe) shutdown(r4, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r4, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000002c0)=[@in={0x2, 0x0, @local}]}, &(0x7f0000000440)=0x10) setsockopt$inet_sctp6_SCTP_MAXSEG(r4, 0x84, 0xd, &(0x7f0000000300)=@assoc_value={r5, 0x6}, 0x8) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000040)={r0, 0xffffffffffffffff, 0x0, 0x0, 0x0}, 0x30) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x11, 0x3, &(0x7f0000000140)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000004c0)='contention_begin\x00', r6}, 0x10) socket$xdp(0x2c, 0x3, 0x0) (async) r7 = socket$xdp(0x2c, 0x3, 0x0) getsockopt$XDP_STATISTICS(r7, 0x11b, 0x7, &(0x7f0000000140), &(0x7f0000000b40)=0x18) (async) getsockopt$XDP_STATISTICS(r7, 0x11b, 0x7, &(0x7f0000000140), &(0x7f0000000b40)=0x18) r8 = socket$kcm(0x10, 0x3, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x3, 0x6, &(0x7f0000000000)=@framed={{0x5, 0x0, 0x0, 0x0, 0x0, 0x7b, 0x11, 0x98}, [@func={0x85, 0x0, 0x1, 0x0, 0x2}, @call={0x85, 0x0, 0x0, 0x5}, @exit={0x95, 0x0, 0x33}], {0x95, 0x0, 0x5a5}}, &(0x7f0000000080)='GPL\x00', 0x5, 0x29e, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x6, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0xb8000000, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600093582c137153e37080c188005ac0f000300", 0x2e}], 0x1}, 0x0) (async) sendmsg$kcm(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f00000000c0)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600093582c137153e37080c188005ac0f000300", 0x2e}], 0x1}, 0x0) 183.047087ms ago: executing program 4 (id=2167): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x301, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWCHAIN={0x2c, 0x3, 0xa, 0x5, 0x0, 0x0, {0x1}, [@NFTA_CHAIN_NAME={0x9, 0x3, 'syz2\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWRULE={0x68, 0x6, 0xa, 0x401, 0x0, 0x0, {0x1}, [@NFTA_RULE_CHAIN_ID={0x8}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_EXPRESSIONS={0x40, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @limit={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_LIMIT_UNIT={0xc, 0x2, 0x1, 0x0, 0x80000001}, @NFTA_LIMIT_RATE={0xc, 0x1, 0x1, 0x0, 0x8}]}}}, {0x10, 0x1, 0x0, 0x1, @log={{0x8}, @val={0x4}}}]}]}], {0x14}}, 0xdc}}, 0x0) 179.766469ms ago: executing program 0 (id=2168): mmap(&(0x7f0000001000/0xc00000)=nil, 0xc00000, 0x4, 0x3032, 0xffffffffffffffff, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000480)=ANY=[@ANYBLOB="140000001000040000000000000000000000000a20000000000a05000000000000000000070000000900010073797a30000000003c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000039780000000c0a01030000000000000000070000000900020073797a31000000000900010073797a30000000004c00038048000080440001803d0001"], 0x5f8}}, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000200)={&(0x7f0000000080)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x1c, 0x1c, 0x5, [@var={0xa, 0x0, 0x0, 0xe, 0x5}, @typedef={0xc, 0x0, 0x0, 0x8, 0x2}]}, {0x0, [0x30, 0x5f, 0x61]}}, &(0x7f0000000540)=""/4096, 0x39, 0x1000, 0x0, 0x7, 0x0, @void, @value}, 0x28) 91.216376ms ago: executing program 4 (id=2169): r0 = socket$kcm(0x10, 0x2, 0x0) r1 = accept4$rose(0xffffffffffffffff, &(0x7f0000000000)=@full={0xb, @remote, @remote, 0x0, [@null, @rose, @bcast, @bcast, @netrom, @netrom]}, &(0x7f0000000040)=0x40, 0x80800) recvfrom$rose(r1, &(0x7f0000000140)=""/204, 0xcc, 0x2000, &(0x7f0000000080)=@short={0xb, @dev={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}, 0x1, @bcast}, 0x1c) syz_80211_inject_frame(0x0, 0x0, 0x262) r2 = socket(0x1d, 0x2, 0x6) setsockopt$ALG_SET_AEAD_AUTHSIZE(r2, 0x6a, 0x3, 0x20000000, 0x4) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000002c0)=ANY=[@ANYBLOB="400000001000030500"/20, @ANYRES32=0x0, @ANYBLOB="0000000000000000200012800900010069706970000000001000028004001300054d24b2a3461200090000000000"], 0x40}}, 0x0) sendmsg$kcm(r0, &(0x7f0000000100), 0x4090) 0s ago: executing program 3 (id=2170): syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @empty}, {0x0, 0x0, 0x8, 0x0, @gue={{0x2}}}}}}}, 0x0) (async) syz_emit_ethernet(0x32, &(0x7f0000000040)={@local, @dev, @void, {@ipv4={0x800, @udp={{0x5, 0x4, 0x0, 0x0, 0x24, 0x0, 0x0, 0x0, 0x88, 0x0, @empty}, {0x0, 0x0, 0x8, 0x0, @gue={{0x2}}}}}}}, 0x0) socket$netlink(0x10, 0x3, 0x0) syz_emit_ethernet(0x2a, &(0x7f0000000140)=ANY=[@ANYBLOB="0180c2000000aaaaaaaaaabb08004500001cfffe0000a02f90787f000001e0012001880b00089078a95b86f59a1be48ad4a9ae0af13028cc9c9f748df8d7008772fb600b60b36d6798b5036a9e844d961c731af308a15e78d945b69f642db8dc1439a1924af5068ec2f0837ef5c642ee7873eadddb313971bcd9e0d3356d7d7a2b21e0d741d83a8c3a2265317ab4749e76b3a31cafbec7d7544f6d1334d23906f87ad1c8588d27f6b81c1f27a7c4b0f922d321ac31d9e5949553201657d9f6470796f9c7689243af4d8943ce2bf22ecdf3d88bc2311224296a97173a9f0ff6ac1e9bdb3fb90f1300"], 0x0) socket(0x26, 0x5, 0x110) kernel console output (not intermixed with test programs): [ 493.641051][ T8879] bridge_slave_0: entered promiscuous mode [ 493.724171][ T8885] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.731695][ T8885] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.741716][ T8885] bridge_slave_1: entered allmulticast mode [ 493.750463][ T8885] bridge_slave_1: entered promiscuous mode [ 493.777250][ T8879] bridge0: port 2(bridge_slave_1) entered blocking state [ 493.795019][ T8879] bridge0: port 2(bridge_slave_1) entered disabled state [ 493.802551][ T8879] bridge_slave_1: entered allmulticast mode [ 493.810717][ T8879] bridge_slave_1: entered promiscuous mode [ 493.897063][ T8879] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.909639][ T8877] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 493.923772][ T8877] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 493.939995][ T8882] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 493.949244][ T8882] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 493.975758][ T8882] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 493.991992][ T8885] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 494.004845][ T8879] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 494.034712][ T7544] hsr_slave_0: left promiscuous mode [ 494.043994][ T7544] hsr_slave_1: left promiscuous mode [ 494.052147][ T7544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 494.059818][ T7544] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 494.068795][ T7544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 494.077593][ T7544] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 494.086222][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 494.093351][ T5273] Bluetooth: hci2: command tx timeout [ 494.114556][ T7544] veth1_macvtap: left promiscuous mode [ 494.120184][ T7544] veth0_macvtap: left promiscuous mode [ 494.125783][ T7544] veth1_vlan: left promiscuous mode [ 494.132149][ T7544] veth0_vlan: left promiscuous mode [ 494.166693][ T5273] Bluetooth: hci1: command tx timeout [ 494.491970][ T5273] Bluetooth: hci7: command tx timeout [ 494.854102][ T7544] team0 (unregistering): Port device team_slave_1 removed [ 494.914013][ T7544] team0 (unregistering): Port device team_slave_0 removed [ 495.126121][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 495.526653][ T5273] Bluetooth: hci6: command tx timeout [ 495.536172][ T8882] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 495.543225][ T8882] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 495.576461][ T8882] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 495.600719][ T8885] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 495.754139][ T8879] team0: Port device team_slave_0 added [ 495.775053][ T8877] team0: Port device team_slave_0 added [ 495.828164][ T8885] team0: Port device team_slave_0 added [ 495.850017][ T8885] team0: Port device team_slave_1 added [ 495.867784][ T8879] team0: Port device team_slave_1 added [ 495.875874][ T8877] team0: Port device team_slave_1 added [ 495.887943][ T8882] hsr_slave_0: entered promiscuous mode [ 495.896400][ T8882] hsr_slave_1: entered promiscuous mode [ 496.056380][ T8877] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.063470][ T8877] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.092953][ T8877] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.113169][ T8885] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.120689][ T8885] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.148579][ T8885] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.166118][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 496.168481][ T8879] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 496.180211][ T5273] Bluetooth: hci2: command tx timeout [ 496.187523][ T8879] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.214533][ T8879] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 496.246154][ T5273] Bluetooth: hci1: command tx timeout [ 496.272299][ T8877] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.280442][ T8877] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.308400][ T8877] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.337432][ T8885] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.344459][ T8885] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.380561][ T8885] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.404081][ T8879] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 496.414006][ T8879] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 496.446142][ T8879] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 496.566415][ T5273] Bluetooth: hci7: command tx timeout [ 496.612396][ T7544] IPVS: stop unused estimator thread 0... [ 496.644358][ T8879] hsr_slave_0: entered promiscuous mode [ 496.656988][ T8879] hsr_slave_1: entered promiscuous mode [ 496.664255][ T8879] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 496.672683][ T8879] Cannot create hsr debugfs directory [ 496.689795][ T8885] hsr_slave_0: entered promiscuous mode [ 496.716698][ T8885] hsr_slave_1: entered promiscuous mode [ 496.726257][ T8885] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 496.733890][ T8885] Cannot create hsr debugfs directory [ 496.772492][ T8877] hsr_slave_0: entered promiscuous mode [ 496.790170][ T8877] hsr_slave_1: entered promiscuous mode [ 496.798195][ T8877] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 496.809847][ T8877] Cannot create hsr debugfs directory [ 497.067072][ T7544] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.093750][ T8936] batadv_slave_1: entered promiscuous mode [ 497.101739][ T8935] batadv_slave_1: left promiscuous mode [ 497.199636][ T7544] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.206217][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 497.369104][ T8882] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.426867][ T7544] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.441435][ T8941] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1036'. [ 497.518785][ T8882] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.600969][ T7544] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.612623][ T5273] Bluetooth: hci6: command tx timeout [ 497.727596][ T8882] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.828997][ T8882] bond0: (slave netdevsim0): Releasing backup interface [ 497.849985][ T8882] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 497.890150][ T8946] tipc: Started in network mode [ 497.895079][ T8946] tipc: Node identity 92fd4e300df, cluster identity 4711 [ 497.902646][ T8946] tipc: Enabled bearer , priority 0 [ 497.956055][ T8945] ªªªªªª: renamed from syzkaller0 [ 497.963067][ T8945] tipc: Disabling bearer [ 498.019575][ T8879] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.254237][ C1] IPVS: fo: UDP 224.0.0.2:0 - no destination available [ 498.658426][ T5273] Bluetooth: hci7: command tx timeout [ 498.766753][ T7544] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 498.779861][ T7544] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 498.795368][ T7544] bond0 (unregistering): Released all slaves [ 498.814451][ T7544] bond1 (unregistering): Released all slaves [ 498.837734][ T8879] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.928950][ T8879] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 498.953968][ T7544] tipc: Disabling bearer [ 498.963875][ T7544] tipc: Left network mode [ 499.006803][ T8879] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 499.024513][ T8958] ip6_tunnel: non-ECT from 0000:0000:0000:0000:0000:ffff:0000:0000 with DS=0xb [ 499.179703][ T7544] hsr_slave_0: left promiscuous mode [ 499.185824][ T7544] hsr_slave_1: left promiscuous mode [ 499.200842][ T7544] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 499.209226][ T7544] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 499.217797][ T7544] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 499.225291][ T7544] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 499.250489][ T7544] veth1_macvtap: left promiscuous mode [ 499.256299][ T7544] veth0_macvtap: left promiscuous mode [ 499.262128][ T7544] veth1_vlan: left promiscuous mode [ 499.267567][ T7544] veth0_vlan: left promiscuous mode [ 499.435189][ T7544] pimreg (unregistering): left allmulticast mode [ 500.044869][ T7544] team0 (unregistering): Port device team_slave_1 removed [ 500.115659][ T7544] team0 (unregistering): Port device team_slave_0 removed [ 500.484836][ T7544] team0 (unregistering): Port device batadv0 removed [ 501.173741][ T7544] IPVS: stop unused estimator thread 0... [ 501.295011][ T8882] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 501.306079][ T8882] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 501.321082][ T8882] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 501.332748][ T8882] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 501.396789][ T8879] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 501.408430][ T8879] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 501.421159][ T8879] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 501.435533][ T8879] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 501.566554][ T8885] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 501.580244][ T8885] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 501.591281][ T8885] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 501.648466][ T8885] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 501.731723][ T8877] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 501.748166][ T8877] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 501.765200][ T8877] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 501.821760][ T8877] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 501.879182][ T8882] 8021q: adding VLAN 0 to HW filter on device bond0 [ 501.965258][ T8882] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.009125][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.016603][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.051940][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.062520][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.114510][ T8879] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.133961][ T8885] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.210840][ T8885] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.248938][ T8879] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.279892][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.287453][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.302622][ T1102] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.309956][ T1102] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.342495][ T7545] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.350130][ T7545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.398404][ T7545] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.405667][ T7545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.663043][ T8877] 8021q: adding VLAN 0 to HW filter on device bond0 [ 502.723418][ T8877] 8021q: adding VLAN 0 to HW filter on device team0 [ 502.790437][ T7545] bridge0: port 1(bridge_slave_0) entered blocking state [ 502.797949][ T7545] bridge0: port 1(bridge_slave_0) entered forwarding state [ 502.830651][ T7545] bridge0: port 2(bridge_slave_1) entered blocking state [ 502.838031][ T7545] bridge0: port 2(bridge_slave_1) entered forwarding state [ 502.982425][ T8882] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.216165][ T8882] veth0_vlan: entered promiscuous mode [ 503.229014][ T8879] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.244705][ T8885] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.279330][ T8882] veth1_vlan: entered promiscuous mode [ 503.457427][ T8882] veth0_macvtap: entered promiscuous mode [ 503.483466][ T8885] veth0_vlan: entered promiscuous mode [ 503.520562][ T8882] veth1_macvtap: entered promiscuous mode [ 503.540818][ T8885] veth1_vlan: entered promiscuous mode [ 503.609230][ T8877] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 503.630379][ T8882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.641803][ T8882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.655479][ T8882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.667494][ T8882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.682142][ T8882] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 503.728763][ T8885] veth0_macvtap: entered promiscuous mode [ 503.770617][ T8882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.783543][ T8882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.794187][ T8882] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 503.805352][ T8882] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.820034][ T8882] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 503.830576][ T8885] veth1_macvtap: entered promiscuous mode [ 503.884874][ T8882] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.896304][ T8882] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.905070][ T8882] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.913941][ T8882] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 503.962933][ T8885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 503.974640][ T8885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 503.989152][ T8885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.000072][ T8885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.010379][ T8885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.021474][ T8885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.033306][ T8885] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 504.047819][ T8885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.059670][ T8885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.069951][ T8885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.080653][ T8885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.102203][ T8885] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 504.113862][ T8885] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.128601][ T8885] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 504.167197][ T8877] veth0_vlan: entered promiscuous mode [ 504.175570][ T8885] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.186436][ T8885] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.196685][ T8885] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.205446][ T8885] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 504.303959][ T8877] veth1_vlan: entered promiscuous mode [ 504.394919][ T7545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.412739][ T7545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.450971][ T8879] veth0_vlan: entered promiscuous mode [ 504.494245][ T5286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.523770][ T5286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.535347][ T7543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.546324][ T7543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.568365][ T8879] veth1_vlan: entered promiscuous mode [ 504.626795][ T7543] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 504.634769][ T7543] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 504.642506][ T8877] veth0_macvtap: entered promiscuous mode [ 504.706868][ T8877] veth1_macvtap: entered promiscuous mode [ 504.767262][ T8986] netlink: 'syz.0.1026': attribute type 9 has an invalid length. [ 504.787630][ T8986] netlink: 134672 bytes leftover after parsing attributes in process `syz.0.1026'. [ 504.820993][ T8879] veth0_macvtap: entered promiscuous mode [ 504.839886][ T8986] openvswitch: netlink: Key 2 has unexpected len 20 expected 4 [ 504.841989][ T8877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.870403][ T8877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.885052][ T8877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.911842][ T8877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.934481][ T8877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.945235][ T8877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 504.964819][ T8877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 504.994333][ T8877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.019057][ T8877] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.040251][ T8879] veth1_macvtap: entered promiscuous mode [ 505.066786][ T8877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.100574][ T8877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.146005][ T8877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.166030][ T8877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.185346][ T8877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.207258][ T8877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.229152][ T8877] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.241476][ T8877] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.265781][ T8877] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 505.303591][ T8877] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.336380][ T8877] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.345161][ T8877] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.371209][ T8877] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 505.478265][ T8879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.503385][ T8879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.519130][ T8879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.548089][ T8879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.567134][ T8879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.587107][ T8879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.605567][ T8879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.633048][ T8879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.653746][ T8879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 505.676334][ T8879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.691874][ T8879] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 505.795490][ T8879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.818854][ T8879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.846461][ T8879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.867910][ T8879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.890187][ T8879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.905683][ T8879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.927045][ T8879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.956035][ T8879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 505.974695][ T8879] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 505.985353][ T8879] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 506.002414][ T8879] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 506.089415][ T8879] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.099933][ T8879] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.111440][ T8879] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.120846][ T8879] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 506.249976][ T7545] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.260734][ T7545] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.316187][ T9024] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1054'. [ 506.463984][ T7545] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.476563][ T7545] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.563038][ T5312] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.593910][ T5312] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.676834][ T9029] syz.3.1057[9029] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 506.677000][ T9029] syz.3.1057[9029] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 506.749352][ T5312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 506.780252][ T9031] sch_fq: defrate 0 ignored. [ 506.782897][ T5312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 506.890142][ T9038] syz.3.1057[9038] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 506.890319][ T9038] syz.3.1057[9038] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 506.986628][ T9039] syzkaller1: entered promiscuous mode [ 507.019134][ T9039] syzkaller1: entered allmulticast mode [ 507.638896][ T9066] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1066'. [ 508.095717][ T9102] xt_CT: You must specify a L4 protocol and not use inversions on it [ 508.112026][ T9101] openvswitch: netlink: Either Ethernet header or EtherType is required. [ 508.180176][ T9094] xt_CT: No such helper "snmp" [ 508.587292][ T9127] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1080'. [ 509.230153][ T9150] xt_CT: You must specify a L4 protocol and not use inversions on it [ 509.249391][ T9148] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1086'. [ 509.302927][ T9147] xt_CT: No such helper "snmp" [ 509.732467][ T9165] xt_hashlimit: max too large, truncated to 1048576 [ 509.760614][ T9165] xt_CONNSECMARK: only valid in 'mangle' or 'security' table, not 'raw' [ 509.832770][ T9166] pim6reg1: entered promiscuous mode [ 509.862328][ T9166] pim6reg1: entered allmulticast mode [ 509.990350][ T9173] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0001 with DS=0x9 [ 510.170014][ T9168] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 510.537365][ T9188] netlink: 'syz.3.1102': attribute type 12 has an invalid length. [ 510.556378][ T9188] netlink: 132 bytes leftover after parsing attributes in process `syz.3.1102'. [ 510.619213][ T9188] Bluetooth: MGMT ver 1.23 [ 510.808108][ T9197] FAULT_INJECTION: forcing a failure. [ 510.808108][ T9197] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 510.854758][ T9197] CPU: 0 UID: 0 PID: 9197 Comm: syz.0.1105 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 510.865177][ T9197] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 510.875289][ T9197] Call Trace: [ 510.878618][ T9197] [ 510.881600][ T9197] dump_stack_lvl+0x241/0x360 [ 510.886359][ T9197] ? __pfx_dump_stack_lvl+0x10/0x10 [ 510.891627][ T9197] ? __pfx__printk+0x10/0x10 [ 510.896279][ T9197] ? __pfx_lock_release+0x10/0x10 [ 510.901369][ T9197] should_fail_ex+0x3b0/0x4e0 [ 510.906184][ T9197] _copy_from_user+0x2f/0xe0 [ 510.910837][ T9197] copy_msghdr_from_user+0xae/0x680 [ 510.916092][ T9197] ? _parse_integer_limit+0x1b5/0x200 [ 510.921532][ T9197] ? __pfx_copy_msghdr_from_user+0x10/0x10 [ 510.927418][ T9197] __sys_sendmmsg+0x374/0x740 [ 510.932243][ T9197] ? __pfx___sys_sendmmsg+0x10/0x10 [ 510.937538][ T9197] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 510.943627][ T9197] ? ksys_write+0x23e/0x2c0 [ 510.948195][ T9197] ? __pfx_lock_release+0x10/0x10 [ 510.953298][ T9197] ? vfs_write+0x7c4/0xc90 [ 510.957785][ T9197] ? __mutex_unlock_slowpath+0x21d/0x750 [ 510.963475][ T9197] ? __pfx_vfs_write+0x10/0x10 [ 510.968412][ T9197] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 510.974469][ T9197] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 510.980879][ T9197] ? do_syscall_64+0x100/0x230 [ 510.985718][ T9197] __x64_sys_sendmmsg+0xa0/0xb0 [ 510.990630][ T9197] do_syscall_64+0xf3/0x230 [ 510.995246][ T9197] ? clear_bhb_loop+0x35/0x90 [ 511.000000][ T9197] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 511.005956][ T9197] RIP: 0033:0x7f9e6e17def9 [ 511.010437][ T9197] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 511.030105][ T9197] RSP: 002b:00007f9e6ef2e038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 511.038581][ T9197] RAX: ffffffffffffffda RBX: 00007f9e6e335f80 RCX: 00007f9e6e17def9 [ 511.046606][ T9197] RDX: 0000000000000001 RSI: 0000000020000940 RDI: 0000000000000003 [ 511.054632][ T9197] RBP: 00007f9e6ef2e090 R08: 0000000000000000 R09: 0000000000000000 [ 511.062654][ T9197] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 511.070768][ T9197] R13: 0000000000000000 R14: 00007f9e6e335f80 R15: 00007ffebd60d018 [ 511.078814][ T9197] [ 511.633433][ T9223] netlink: 'syz.2.1117': attribute type 1 has an invalid length. [ 511.723590][ T9233] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1120'. [ 511.768472][ T9233] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1120'. [ 511.835527][ T9237] (unnamed net_device) (uninitialized): option use_carrier: invalid value (5) [ 511.857277][ T9237] openvswitch: netlink: Missing key (keys=20040, expected=100) [ 511.893929][ T9242] netlink: 3084 bytes leftover after parsing attributes in process `syz.2.1122'. [ 511.916229][ T9242] netlink: 199836 bytes leftover after parsing attributes in process `syz.2.1122'. [ 511.997005][ T9244] xt_CT: You must specify a L4 protocol and not use inversions on it [ 512.574036][ T9271] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1127'. [ 512.708402][ T9280] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 513.266141][ T9289] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1136'. [ 513.275095][ T9289] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1136'. [ 513.355671][ T9289] tc_dump_action: action bad kind [ 513.478093][ T9291] netlink: 'syz.0.1138': attribute type 10 has an invalid length. [ 513.510202][ T9291] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 513.541462][ T9291] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 513.585460][ T9293] netlink: 32 bytes leftover after parsing attributes in process `syz.4.1139'. [ 513.746795][ T9304] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1143'. [ 513.822142][ T9308] xt_ecn: cannot match TCP bits for non-tcp packets [ 513.991254][ T9323] FAULT_INJECTION: forcing a failure. [ 513.991254][ T9323] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 514.012887][ T9323] CPU: 0 UID: 0 PID: 9323 Comm: syz.1.1148 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 514.023308][ T9323] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 514.033424][ T9323] Call Trace: [ 514.036758][ T9323] [ 514.039804][ T9323] dump_stack_lvl+0x241/0x360 [ 514.044564][ T9323] ? __pfx_dump_stack_lvl+0x10/0x10 [ 514.049849][ T9323] ? __pfx__printk+0x10/0x10 [ 514.054624][ T9323] ? __pfx_lock_release+0x10/0x10 [ 514.059829][ T9323] should_fail_ex+0x3b0/0x4e0 [ 514.064744][ T9323] _copy_from_iter+0x43a/0x1960 [ 514.069662][ T9323] ? __virt_addr_valid+0x183/0x530 [ 514.074839][ T9323] ? __pfx__copy_from_iter+0x10/0x10 [ 514.080213][ T9323] ? __virt_addr_valid+0x183/0x530 [ 514.085494][ T9323] ? __virt_addr_valid+0x183/0x530 [ 514.090680][ T9323] ? __virt_addr_valid+0x45f/0x530 [ 514.095867][ T9323] ? __check_object_size+0x49c/0x900 [ 514.101324][ T9323] udplite_getfrag+0x4a/0xa0 [ 514.105978][ T9323] __ip6_append_data+0x1f04/0x40a0 [ 514.111334][ T9323] ? mark_lock+0x9a/0x350 [ 514.115851][ T9323] ? __pfx_udplite_getfrag+0x10/0x10 [ 514.121222][ T9323] ? __pfx___ip6_append_data+0x10/0x10 [ 514.126777][ T9323] ? lockdep_hardirqs_on+0x99/0x150 [ 514.132058][ T9323] ip6_append_data+0x264/0x3a0 [ 514.136905][ T9323] ? __pfx_udplite_getfrag+0x10/0x10 [ 514.142361][ T9323] ? __pfx_udplite_getfrag+0x10/0x10 [ 514.147711][ T9323] udpv6_sendmsg+0xc15/0x3270 [ 514.152465][ T9323] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 514.157670][ T9323] ? inet_send_prepare+0x21/0x260 [ 514.162764][ T9323] ? inet_send_prepare+0x5a/0x260 [ 514.163648][ T9328] bond0: option resend_igmp: invalid value (7540) [ 514.167840][ T9323] __sock_sendmsg+0xef/0x270 [ 514.167955][ T9323] ____sys_sendmsg+0x525/0x7d0 [ 514.167993][ T9323] ? __pfx_____sys_sendmsg+0x10/0x10 [ 514.168036][ T9323] __sys_sendmmsg+0x3b2/0x740 [ 514.168071][ T9323] ? __pfx___sys_sendmmsg+0x10/0x10 [ 514.168138][ T9323] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 514.183726][ T9328] bond0: option resend_igmp: allowed values 0 - 255 [ 514.184037][ T9323] ? ksys_write+0x23e/0x2c0 [ 514.184073][ T9323] ? __pfx_lock_release+0x10/0x10 [ 514.222865][ T9323] ? vfs_write+0x7c4/0xc90 [ 514.227334][ T9323] ? __mutex_unlock_slowpath+0x21d/0x750 [ 514.232991][ T9323] ? __pfx_vfs_write+0x10/0x10 [ 514.237825][ T9323] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 514.243866][ T9323] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 514.250235][ T9323] ? do_syscall_64+0x100/0x230 [ 514.255056][ T9323] __x64_sys_sendmmsg+0xa0/0xb0 [ 514.259965][ T9323] do_syscall_64+0xf3/0x230 [ 514.264539][ T9323] ? clear_bhb_loop+0x35/0x90 [ 514.269254][ T9323] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 514.275170][ T9323] RIP: 0033:0x7f06b677def9 [ 514.279659][ T9323] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 514.299464][ T9323] RSP: 002b:00007f06b75c4038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 514.307907][ T9323] RAX: ffffffffffffffda RBX: 00007f06b6935f80 RCX: 00007f06b677def9 [ 514.315914][ T9323] RDX: 0000000000000001 RSI: 0000000020000940 RDI: 0000000000000003 [ 514.324336][ T9323] RBP: 00007f06b75c4090 R08: 0000000000000000 R09: 0000000000000000 [ 514.332353][ T9323] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 514.340358][ T9323] R13: 0000000000000000 R14: 00007f06b6935f80 R15: 00007ffcf6606408 [ 514.348369][ T9323] [ 515.005724][ T9363] FAULT_INJECTION: forcing a failure. [ 515.005724][ T9363] name failslab, interval 1, probability 0, space 0, times 1 [ 515.018610][ T9363] CPU: 1 UID: 0 PID: 9363 Comm: syz.4.1162 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 515.029074][ T9363] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 515.039227][ T9363] Call Trace: [ 515.042544][ T9363] [ 515.045533][ T9363] dump_stack_lvl+0x241/0x360 [ 515.050320][ T9363] ? __pfx_dump_stack_lvl+0x10/0x10 [ 515.055568][ T9363] ? __pfx__printk+0x10/0x10 [ 515.060228][ T9363] ? kmem_cache_alloc_node_noprof+0x49/0x320 [ 515.066243][ T9363] ? __pfx___might_resched+0x10/0x10 [ 515.071645][ T9363] ? __might_fault+0xaa/0x120 [ 515.076354][ T9363] should_fail_ex+0x3b0/0x4e0 [ 515.081322][ T9363] should_failslab+0xac/0x100 [ 515.086029][ T9363] ? __alloc_skb+0x1c3/0x440 [ 515.090652][ T9363] kmem_cache_alloc_node_noprof+0x71/0x320 [ 515.096489][ T9363] __alloc_skb+0x1c3/0x440 [ 515.100944][ T9363] ? __pfx___alloc_skb+0x10/0x10 [ 515.105924][ T9363] ? __check_object_size+0x420/0x900 [ 515.111340][ T9363] __ip6_append_data+0x2bd1/0x40a0 [ 515.116487][ T9363] ? mark_lock+0x9a/0x350 [ 515.120864][ T9363] ? __pfx_udplite_getfrag+0x10/0x10 [ 515.126202][ T9363] ? __pfx___ip6_append_data+0x10/0x10 [ 515.131694][ T9363] ? lockdep_hardirqs_on+0x99/0x150 [ 515.136963][ T9363] ip6_append_data+0x264/0x3a0 [ 515.141786][ T9363] ? __pfx_udplite_getfrag+0x10/0x10 [ 515.147117][ T9363] ? __pfx_udplite_getfrag+0x10/0x10 [ 515.152430][ T9363] udpv6_sendmsg+0xc15/0x3270 [ 515.157241][ T9363] ? __pfx_udpv6_sendmsg+0x10/0x10 [ 515.162413][ T9363] ? inet_send_prepare+0x21/0x260 [ 515.167470][ T9363] ? inet_send_prepare+0x5a/0x260 [ 515.172529][ T9363] __sock_sendmsg+0xef/0x270 [ 515.177151][ T9363] ____sys_sendmsg+0x525/0x7d0 [ 515.181943][ T9363] ? __pfx_____sys_sendmsg+0x10/0x10 [ 515.187311][ T9363] __sys_sendmmsg+0x3b2/0x740 [ 515.192022][ T9363] ? __pfx___sys_sendmmsg+0x10/0x10 [ 515.197365][ T9363] ? __pfx_rcu_read_lock_any_held+0x10/0x10 [ 515.203312][ T9363] ? ksys_write+0x23e/0x2c0 [ 515.207925][ T9363] ? __pfx_lock_release+0x10/0x10 [ 515.213070][ T9363] ? vfs_write+0x7c4/0xc90 [ 515.217512][ T9363] ? __mutex_unlock_slowpath+0x21d/0x750 [ 515.223168][ T9363] ? __pfx_vfs_write+0x10/0x10 [ 515.228006][ T9363] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 515.234046][ T9363] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 515.240513][ T9363] ? do_syscall_64+0x100/0x230 [ 515.245316][ T9363] __x64_sys_sendmmsg+0xa0/0xb0 [ 515.250198][ T9363] do_syscall_64+0xf3/0x230 [ 515.254798][ T9363] ? clear_bhb_loop+0x35/0x90 [ 515.259513][ T9363] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 515.265440][ T9363] RIP: 0033:0x7fa3dd57def9 [ 515.269884][ T9363] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 515.289517][ T9363] RSP: 002b:00007fa3de379038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 515.298303][ T9363] RAX: ffffffffffffffda RBX: 00007fa3dd735f80 RCX: 00007fa3dd57def9 [ 515.306293][ T9363] RDX: 0000000000000001 RSI: 0000000020000940 RDI: 0000000000000003 [ 515.314285][ T9363] RBP: 00007fa3de379090 R08: 0000000000000000 R09: 0000000000000000 [ 515.322279][ T9363] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 515.330269][ T9363] R13: 0000000000000000 R14: 00007fa3dd735f80 R15: 00007ffe6ca99d98 [ 515.338306][ T9363] [ 515.600015][ T9380] netlink: 'syz.0.1164': attribute type 12 has an invalid length. [ 515.652571][ T9380] __nla_validate_parse: 6 callbacks suppressed [ 515.652597][ T9380] netlink: 132 bytes leftover after parsing attributes in process `syz.0.1164'. [ 515.708334][ T9381] vlan2: entered promiscuous mode [ 515.751126][ T9382] netlink: 'syz.4.1166': attribute type 3 has an invalid length. [ 516.068781][ T9405] tipc: Started in network mode [ 516.077216][ T9405] tipc: Node identity ., cluster identity 4711 [ 516.314478][ T9420] netlink: 48 bytes leftover after parsing attributes in process `syz.4.1180'. [ 516.339136][ T9414] (unnamed net_device) (uninitialized): option arp_interval: mode dependency failed, not supported in mode 802.3ad(4) [ 516.602409][ T9431] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1183'. [ 516.876331][ T9440] netlink: 'syz.3.1186': attribute type 1 has an invalid length. [ 516.932478][ T9440] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1186'. [ 516.960212][ T9440] netlink: 'syz.3.1186': attribute type 1 has an invalid length. [ 516.975818][ T9440] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1186'. [ 516.977109][ T9441] syz.3.1186: vmalloc error: size 8589938688, exceeds total pages, mode:0xdc0(GFP_KERNEL|__GFP_ZERO), nodemask=(null),cpuset=syz3,mems_allowed=0-1 [ 517.078228][ T9441] CPU: 0 UID: 0 PID: 9441 Comm: syz.3.1186 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 517.088658][ T9441] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 517.098750][ T9441] Call Trace: [ 517.102055][ T9441] [ 517.105004][ T9441] dump_stack_lvl+0x241/0x360 [ 517.109741][ T9441] ? __pfx_dump_stack_lvl+0x10/0x10 [ 517.115091][ T9441] ? __pfx__printk+0x10/0x10 [ 517.119806][ T9441] ? cpuset_print_current_mems_allowed+0x1f/0x350 [ 517.126342][ T9441] ? cpuset_print_current_mems_allowed+0x31e/0x350 [ 517.132894][ T9441] warn_alloc+0x278/0x410 [ 517.137403][ T9441] ? stack_depot_save_flags+0x6e4/0x830 [ 517.142977][ T9441] ? __vmalloc_node_range_noprof+0x106/0x1400 [ 517.149293][ T9441] ? __pfx_warn_alloc+0x10/0x10 [ 517.154182][ T9441] ? kasan_save_track+0x3f/0x80 [ 517.159059][ T9441] ? __kasan_kmalloc+0x98/0xb0 [ 517.163852][ T9441] ? xsk_setsockopt+0x4ea/0x950 [ 517.168848][ T9441] ? do_sock_setsockopt+0x3af/0x720 [ 517.174068][ T9441] ? __sys_setsockopt+0x1ae/0x250 [ 517.179217][ T9441] ? __x64_sys_setsockopt+0xb5/0xd0 [ 517.184443][ T9441] ? do_syscall_64+0xf3/0x230 [ 517.189158][ T9441] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.195629][ T9441] __vmalloc_node_range_noprof+0x126/0x1400 [ 517.201582][ T9441] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 517.207945][ T9441] ? __kasan_kmalloc+0x98/0xb0 [ 517.213172][ T9441] ? xskq_create+0x54/0x170 [ 517.217835][ T9441] vmalloc_user_noprof+0x74/0x80 [ 517.222803][ T9441] ? xskq_create+0xb6/0x170 [ 517.227341][ T9441] xskq_create+0xb6/0x170 [ 517.231705][ T9441] xsk_init_queue+0xa1/0x100 [ 517.236365][ T9441] xsk_setsockopt+0x4ea/0x950 [ 517.241107][ T9441] ? __pfx_xsk_setsockopt+0x10/0x10 [ 517.246343][ T9441] ? __pfx_lock_acquire+0x10/0x10 [ 517.251397][ T9441] ? aa_sock_opt_perm+0x79/0x120 [ 517.256405][ T9441] ? bpf_lsm_socket_setsockopt+0x9/0x10 [ 517.261997][ T9441] ? security_socket_setsockopt+0x87/0xb0 [ 517.267753][ T9441] ? __pfx_xsk_setsockopt+0x10/0x10 [ 517.272985][ T9441] do_sock_setsockopt+0x3af/0x720 [ 517.278044][ T9441] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 517.283629][ T9441] ? __fget_files+0x29/0x470 [ 517.288255][ T9441] ? __fget_files+0x3f6/0x470 [ 517.292979][ T9441] __sys_setsockopt+0x1ae/0x250 [ 517.297869][ T9441] __x64_sys_setsockopt+0xb5/0xd0 [ 517.302924][ T9441] do_syscall_64+0xf3/0x230 [ 517.307461][ T9441] ? clear_bhb_loop+0x35/0x90 [ 517.312169][ T9441] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 517.318185][ T9441] RIP: 0033:0x7f517f77def9 [ 517.322640][ T9441] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 517.342750][ T9441] RSP: 002b:00007f51804a2038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 517.351196][ T9441] RAX: ffffffffffffffda RBX: 00007f517f936058 RCX: 00007f517f77def9 [ 517.359199][ T9441] RDX: 0000000000000006 RSI: 000000000000011b RDI: 0000000000000047 [ 517.367321][ T9441] RBP: 00007f517f7f0b76 R08: 0000000000000004 R09: 0000000000000000 [ 517.375533][ T9441] R10: 0000000020000000 R11: 0000000000000246 R12: 0000000000000000 [ 517.383529][ T9441] R13: 0000000000000000 R14: 00007f517f936058 R15: 00007ffc57fe4288 [ 517.391545][ T9441] [ 517.416193][ T9441] Mem-Info: [ 517.419539][ T9441] active_anon:3576 inactive_anon:0 isolated_anon:0 [ 517.419539][ T9441] active_file:1616 inactive_file:38275 isolated_file:0 [ 517.419539][ T9441] unevictable:768 dirty:186 writeback:0 [ 517.419539][ T9441] slab_reclaimable:9702 slab_unreclaimable:103368 [ 517.419539][ T9441] mapped:28092 shmem:1209 pagetables:736 [ 517.419539][ T9441] sec_pagetables:0 bounce:0 [ 517.419539][ T9441] kernel_misc_reclaimable:0 [ 517.419539][ T9441] free:1343967 free_pcp:461 free_cma:0 [ 517.469098][ T9441] Node 0 active_anon:14304kB inactive_anon:0kB active_file:6464kB inactive_file:153012kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:112368kB dirty:740kB writeback:0kB shmem:3300kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:10864kB pagetables:2944kB sec_pagetables:0kB all_unreclaimable? no [ 517.565859][ T9441] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:88kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:4kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:16kB pagetables:0kB sec_pagetables:0kB all_unreclaimable? no [ 517.609222][ T9457] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 517.715465][ T9461] IPVS: wrr: SCTP 127.0.0.1:0 - no destination available [ 517.739597][ T9441] Node 0 DMA free:15360kB boost:0kB min:208kB low:260kB high:312kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 517.740600][ T5357] IPVS: starting estimator thread 0... [ 517.898869][ T9441] lowmem_reserve[]: 0 2467 2468 0 0 [ 517.904471][ T9441] Node 0 DMA32 free:1411400kB boost:0kB min:34228kB low:42784kB high:51340kB reserved_highatomic:0KB active_anon:14332kB inactive_anon:0kB active_file:6464kB inactive_file:152204kB unevictable:1536kB writepending:740kB present:3129332kB managed:2554992kB mlocked:0kB bounce:0kB free_pcp:2052kB local_pcp:608kB free_cma:0kB [ 517.972160][ T9441] lowmem_reserve[]: 0 0 0 0 0 [ 517.977715][ T9463] IPVS: using max 16 ests per chain, 38400 per kthread [ 518.005077][ T9441] Node 0 Normal free:8kB boost:0kB min:8kB low:8kB high:8kB reserved_highatomic:0KB active_anon:40kB inactive_anon:0kB active_file:0kB inactive_file:808kB unevictable:0kB writepending:0kB present:1048576kB managed:872kB mlocked:0kB bounce:0kB free_pcp:16kB local_pcp:8kB free_cma:0kB [ 518.062794][ T9441] lowmem_reserve[]: 0 0 0 0 0 [ 518.125108][ T9441] Node 1 Normal free:3949384kB boost:0kB min:55660kB low:69572kB high:83484kB reserved_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:88kB unevictable:1536kB writepending:4kB present:4194304kB managed:4109120kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 518.203965][ T9441] lowmem_reserve[]: 0 0 0 0 0 [ 518.226228][ T9441] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 518.241449][ T9487] netlink: 596 bytes leftover after parsing attributes in process `syz.0.1198'. [ 518.246050][ T9441] Node 0 DMA32: 201*4kB (UM) 905*8kB (UME) 473*16kB [ 518.253755][ T9490] vlan2: entered promiscuous mode [ 518.253763][ T9441] (UME) 126*32kB (UME) 115*64kB (UME) 102*128kB (UME) 67*256kB (UME) 28*512kB (UM) 11*1024kB (UME) 2*2048kB (UM) 323*4096kB (UM) = 1409916kB [ 518.291974][ T9441] Node 0 Normal: 0*4kB 1*8kB (M) 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 8kB [ 518.304346][ T9441] Node 1 Normal: 2*4kB (UM) 4*8kB (UM) 8*16kB (UM) 9*32kB (UM) 4*64kB (U) 3*128kB (U) 3*256kB (UM) 4*512kB (UM) 1*1024kB (U) 2*2048kB (U) 962*4096kB (UM) = 3949384kB [ 518.324648][ T9441] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 518.334832][ T9441] Node 0 hugepages_total=2 hugepages_free=1 hugepages_surp=0 hugepages_size=2048kB [ 518.345345][ T9441] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 518.355068][ T9441] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 518.371519][ T9441] 41115 total pagecache pages [ 518.385315][ T9441] 0 pages in swap cache [ 518.395495][ T9441] Free swap = 124996kB [ 518.426642][ T9441] Total swap = 124996kB [ 518.432277][ T9441] 2097051 pages RAM [ 518.444672][ T9441] 0 pages HighMem/MovableOnly [ 518.450181][ T9441] 426965 pages reserved [ 518.455473][ T9441] 0 pages cma reserved [ 519.061345][ T9517] sch_tbf: burst 32769 is lower than device lo mtu (65550) ! [ 519.101582][ T9519] netlink: 'syz.1.1208': attribute type 2 has an invalid length. [ 519.109605][ T9519] netlink: 209852 bytes leftover after parsing attributes in process `syz.1.1208'. [ 519.483198][ T9533] x_tables: duplicate underflow at hook 2 [ 519.493233][ T9533] netlink: 'syz.0.1213': attribute type 9 has an invalid length. [ 520.040112][ T9555] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1220'. [ 520.053719][ T9553] netlink: 'syz.4.1219': attribute type 12 has an invalid length. [ 520.098201][ T9559] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1221'. [ 520.496764][ T9570] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1224'. [ 520.988124][ T9587] netlink: 'syz.4.1229': attribute type 11 has an invalid length. [ 520.999317][ T9589] netlink: 'syz.0.1230': attribute type 10 has an invalid length. [ 521.725546][ T9622] netlink: 'syz.2.1240': attribute type 12 has an invalid length. [ 521.872540][ T9618] netlink: 9412 bytes leftover after parsing attributes in process `syz.0.1237'. [ 522.263500][ T9635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.313651][ T9635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.359901][ T9635] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 522.774444][ T9650] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1248'. [ 523.234010][ T9669] netlink: 'syz.3.1253': attribute type 1 has an invalid length. [ 523.243887][ T9669] netlink: 161700 bytes leftover after parsing attributes in process `syz.3.1253'. [ 523.269444][ T9671] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1255'. [ 523.417333][ T9675] netlink: 'syz.2.1257': attribute type 1 has an invalid length. [ 523.428998][ T9675] netlink: 'syz.2.1257': attribute type 1 has an invalid length. [ 523.443290][ T9675] netlink: 9328 bytes leftover after parsing attributes in process `syz.2.1257'. [ 523.452956][ T9675] netlink: 'syz.2.1257': attribute type 1 has an invalid length. [ 523.885382][ T9687] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 523.892638][ T9687] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 523.914244][ T9687] hsr_slave_0: left promiscuous mode [ 523.921859][ T9687] hsr_slave_1: left promiscuous mode [ 524.030363][ T9689] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.039652][ T9689] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.048544][ T9689] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.059110][ T9689] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 524.071720][ T9689] vxlan0: entered promiscuous mode [ 524.081776][ T9689] vxlan0: entered allmulticast mode [ 524.094095][ T9689] netdevsim netdevsim3 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.103225][ T9689] netdevsim netdevsim3 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.112316][ T9689] netdevsim netdevsim3 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.121451][ T9689] netdevsim netdevsim3 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 524.484012][ T9705] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1267'. [ 525.026489][ T9729] bridge0: port 2(bridge_slave_1) entered disabled state [ 525.034127][ T9729] bridge0: port 1(bridge_slave_0) entered disabled state [ 525.145993][ T9729] bridge0: port 2(bridge_slave_1) entered blocking state [ 525.153258][ T9729] bridge0: port 2(bridge_slave_1) entered forwarding state [ 525.161919][ T9729] bridge0: port 1(bridge_slave_0) entered blocking state [ 525.169251][ T9729] bridge0: port 1(bridge_slave_0) entered forwarding state [ 525.186539][ T9729] bridge0: entered promiscuous mode [ 525.192166][ T9729] bridge0: entered allmulticast mode [ 525.287805][ T9746] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1278'. [ 525.415598][ T9751] netlink: 'syz.3.1280': attribute type 5 has an invalid length. [ 525.431666][ T9751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1280'. [ 525.441077][ T9751] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1280'. [ 525.549231][ T9752] netlink: 'syz.0.1279': attribute type 7 has an invalid length. [ 525.588146][ T9752] netlink: 'syz.0.1279': attribute type 39 has an invalid length. [ 526.274316][ T9786] netlink: 'syz.1.1294': attribute type 1 has an invalid length. [ 526.294553][ T9786] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1294'. [ 526.705034][ T9806] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 527.206432][ T5276] Bluetooth: hci7: command 0x0405 tx timeout [ 527.411683][ T9832] netlink: 'syz.2.1312': attribute type 10 has an invalid length. [ 527.446104][ T9832] __nla_validate_parse: 2 callbacks suppressed [ 527.446125][ T9832] netlink: 212848 bytes leftover after parsing attributes in process `syz.2.1312'. [ 527.650749][ T9838] tipc: Trying to set illegal importance in message [ 527.857604][ T9845] netlink: 60 bytes leftover after parsing attributes in process `syz.0.1315'. [ 527.881151][ T9845] vcan0: entered promiscuous mode [ 528.269526][ T9868] macvlan2: entered promiscuous mode [ 528.275737][ T9868] macvlan2: entered allmulticast mode [ 528.329271][ T9868] mac80211_hwsim hwsim19 wlan1: entered allmulticast mode [ 528.402861][ T5312] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 528.415561][ T5312] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 529.395596][ T9917] netlink: 9286 bytes leftover after parsing attributes in process `syz.0.1339'. [ 529.438572][ T9917] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1339'. [ 529.504117][ T9917] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1339'. [ 529.525257][ T9917] netlink: 36 bytes leftover after parsing attributes in process `syz.0.1339'. [ 529.733135][ T9923] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.071159][ T9923] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.115055][ T9938] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1347'. [ 530.125155][ T9938] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 530.142814][ T9942] : renamed from batadv0 (while UP) [ 530.241035][ T9923] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.398453][ T9923] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 530.422502][ T9946] netlink: 207496 bytes leftover after parsing attributes in process `syz.2.1351'. [ 530.550396][ T9923] netdevsim netdevsim4 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.626551][ T9923] netdevsim netdevsim4 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.677781][ T9923] netdevsim netdevsim4 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 530.737656][ T9923] netdevsim netdevsim4 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 531.037571][ T9985] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1358'. [ 531.309113][ T9994] pim6reg1: entered promiscuous mode [ 531.314502][ T9994] pim6reg1: entered allmulticast mode [ 531.543472][ T9999] tap0: tun_chr_ioctl cmd 1074025677 [ 531.552393][ T9999] tap0: linktype set to 825 [ 531.565627][ T9999] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1364'. [ 532.523408][T10042] hsr0: entered promiscuous mode [ 532.801899][T10057] xt_CT: You must specify a L4 protocol and not use inversions on it [ 532.841600][T10053] netlink: 32 bytes leftover after parsing attributes in process `syz.0.1379'. [ 532.842869][T10050] xt_CT: No such helper "snmp" [ 533.154058][T10071] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1384'. [ 533.171686][T10074] netlink: 'syz.0.1385': attribute type 1 has an invalid length. [ 533.467761][T10084] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1388'. [ 533.504791][T10085] dccp_invalid_packet: P.Data Offset(204) too large [ 533.507054][T10090] netlink: 'syz.0.1390': attribute type 10 has an invalid length. [ 533.539139][T10090] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1390'. [ 533.554875][T10090] openvswitch: netlink: ufid size 3064 bytes exceeds the range (1, 16) [ 533.575377][T10090] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 533.787262][T10099] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1396'. [ 534.024042][T10118] netlink: 'syz.2.1400': attribute type 1 has an invalid length. [ 534.054533][T10119] netlink: 'syz.2.1400': attribute type 1 has an invalid length. [ 534.216182][T10126] tc_dump_action: action bad kind [ 534.328044][T10128] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1403'. [ 534.353349][T10132] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1404'. [ 534.475799][T10136] netlink: 47 bytes leftover after parsing attributes in process `syz.0.1406'. [ 534.528541][T10141] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1407'. [ 534.600891][T10097] delete_channel: no stack [ 534.622294][T10141] syzkaller0: entered promiscuous mode [ 534.629010][T10141] syzkaller0: entered allmulticast mode [ 535.088508][T10154] netlink: 20 bytes leftover after parsing attributes in process `syz.0.1410'. [ 537.414525][T10167] xt_CT: No such helper "netbios-ns" [ 537.827757][T10172] openvswitch: netlink: Missing key (keys=400040, expected=200000) [ 538.008368][T10182] ax25_connect(): syz.2.1417 uses autobind, please contact jreuter@yaina.de [ 538.158599][T10186] tipc: Started in network mode [ 538.166337][T10186] tipc: Node identity ae5534d3355a, cluster identity 4711 [ 538.187130][T10186] tipc: Enabled bearer , priority 0 [ 538.203966][T10186] ªªªªªª: renamed from syzkaller0 [ 538.215476][T10186] tipc: Disabling bearer [ 538.234632][T10191] xt_hashlimit: max too large, truncated to 1048576 [ 538.546557][T10202] __nla_validate_parse: 4 callbacks suppressed [ 538.546584][T10202] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1427'. [ 539.174861][T10230] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 539.813360][T10241] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1437'. [ 540.011634][T10251] netlink: 16 bytes leftover after parsing attributes in process `syz.0.1439'. [ 540.034113][T10251] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1439'. [ 540.069130][T10251] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1439'. [ 540.110222][T10251] vlan0: entered allmulticast mode [ 540.132837][T10251] veth0_vlan: entered allmulticast mode [ 540.267740][T10264] netlink: 68 bytes leftover after parsing attributes in process `syz.2.1443'. [ 540.551768][T10276] netlink: 'syz.1.1449': attribute type 21 has an invalid length. [ 540.563700][T10276] netlink: 132 bytes leftover after parsing attributes in process `syz.1.1449'. [ 540.595786][T10273] (unnamed net_device) (uninitialized): option updelay: invalid value (18446744071562067969) [ 540.616572][T10273] (unnamed net_device) (uninitialized): option updelay: allowed values 0 - 2147483647 [ 541.155096][T10306] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1455'. [ 541.181210][T10307] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1455'. [ 542.023162][T10341] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1464'. [ 542.275013][T10344] netlink: 'syz.3.1465': attribute type 58 has an invalid length. [ 543.259412][T10374] x_tables: duplicate underflow at hook 2 [ 543.351453][T10379] x_tables: duplicate underflow at hook 3 [ 543.510642][T10387] netlink: 'syz.2.1478': attribute type 33 has an invalid length. [ 543.958974][T10415] __nla_validate_parse: 3 callbacks suppressed [ 543.958999][T10415] netlink: 21 bytes leftover after parsing attributes in process `syz.2.1487'. [ 544.051464][T10420] netlink: 232 bytes leftover after parsing attributes in process `syz.4.1489'. [ 544.061231][T10420] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1489'. [ 544.137717][T10425] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1491'. [ 544.692842][T10450] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1501'. [ 544.884559][T10461] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1504'. [ 544.986331][T10467] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1507'. [ 545.770954][T10489] syzkaller1: entered promiscuous mode [ 545.793808][T10489] syzkaller1: entered allmulticast mode [ 545.924403][T10512] netlink: 'syz.2.1521': attribute type 1 has an invalid length. [ 545.939259][T10512] netlink: 9352 bytes leftover after parsing attributes in process `syz.2.1521'. [ 545.986231][T10512] netlink: 'syz.2.1521': attribute type 1 has an invalid length. [ 545.994162][T10512] netlink: 'syz.2.1521': attribute type 2 has an invalid length. [ 546.333034][T10529] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 546.357943][T10530] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1528'. [ 546.837708][T10558] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1532'. [ 549.487668][T10566] netlink: 152 bytes leftover after parsing attributes in process `syz.3.1535'. [ 551.187950][T10566] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1535'. [ 551.223012][T10567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1535'. [ 551.342668][T10579] netlink: 'syz.1.1539': attribute type 1 has an invalid length. [ 551.415270][T10586] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 551.463385][T10579] macsec1: entered promiscuous mode [ 551.484616][T10579] bond1: entered promiscuous mode [ 551.495322][T10579] macsec1: entered allmulticast mode [ 551.502916][T10579] bond1: entered allmulticast mode [ 552.363066][T10628] netlink: 209844 bytes leftover after parsing attributes in process `syz.4.1554'. [ 552.473562][T10631] team0: Device gtp0 is of different type [ 552.566339][T10638] team0: Device gtp0 is of different type [ 552.772326][T10648] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1560'. [ 552.803508][T10654] xt_ecn: cannot match TCP bits for non-tcp packets [ 552.856172][T10654] xt_ecn: cannot match TCP bits for non-tcp packets [ 552.863033][T10654] xt_ecn: cannot match TCP bits for non-tcp packets [ 552.876115][T10654] xt_ecn: cannot match TCP bits for non-tcp packets [ 552.883083][T10654] xt_ecn: cannot match TCP bits for non-tcp packets [ 552.891566][T10654] xt_ecn: cannot match TCP bits for non-tcp packets [ 552.899985][T10654] xt_ecn: cannot match TCP bits for non-tcp packets [ 552.907544][T10657] netlink: 'syz.0.1562': attribute type 1 has an invalid length. [ 552.920147][T10656] netlink: 40 bytes leftover after parsing attributes in process `syz.0.1562'. [ 552.940242][T10654] xt_ecn: cannot match TCP bits for non-tcp packets [ 552.946457][T10662] tls_set_device_offload: netdev not found [ 552.949217][T10654] xt_ecn: cannot match TCP bits for non-tcp packets [ 552.976809][T10654] xt_ecn: cannot match TCP bits for non-tcp packets [ 553.673895][T10702] Cannot find set identified by id 0 to match [ 554.070927][T10722] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1586'. [ 554.263688][T10728] vlan0: entered promiscuous mode [ 554.781484][T10746] IPv6: sit1: Disabled Multicast RS [ 557.337108][T10756] netlink: 'syz.3.1598': attribute type 10 has an invalid length. [ 557.481175][T10763] netlink: 'syz.3.1598': attribute type 5 has an invalid length. [ 557.696051][T10774] netlink: 'syz.3.1604': attribute type 21 has an invalid length. [ 557.725789][T10774] netlink: 156 bytes leftover after parsing attributes in process `syz.3.1604'. [ 557.799959][T10778] vlan2: entered promiscuous mode [ 557.809859][T10778] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 557.834864][T10778] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 558.623644][T10808] FAULT_INJECTION: forcing a failure. [ 558.623644][T10808] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 558.664835][T10808] CPU: 0 UID: 0 PID: 10808 Comm: syz.4.1613 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 558.675431][T10808] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 558.685571][T10808] Call Trace: [ 558.688901][T10808] [ 558.691880][T10808] dump_stack_lvl+0x241/0x360 [ 558.696635][T10808] ? __pfx_dump_stack_lvl+0x10/0x10 [ 558.701894][T10808] ? __pfx__printk+0x10/0x10 [ 558.706550][T10808] ? __pfx_lock_release+0x10/0x10 [ 558.711622][T10808] ? rcu_is_watching+0x15/0xb0 [ 558.716427][T10808] should_fail_ex+0x3b0/0x4e0 [ 558.721213][T10808] _copy_from_iter+0x1f6/0x1960 [ 558.726117][T10808] ? alloc_pages_mpol_noprof+0x417/0x680 [ 558.731931][T10808] ? __pfx__copy_from_iter+0x10/0x10 [ 558.737295][T10808] ? __pfx_alloc_pages_mpol_noprof+0x10/0x10 [ 558.743317][T10808] ? alloc_pages_noprof+0xef/0x170 [ 558.748548][T10808] ? page_copy_sane+0x46/0x260 [ 558.753340][T10808] copy_page_from_iter+0x7a/0x100 [ 558.758387][T10808] tun_get_user+0x2046/0x47e0 [ 558.763085][T10808] ? tun_get_user+0x871/0x47e0 [ 558.767966][T10808] ? __lock_acquire+0x137a/0x2040 [ 558.773021][T10808] ? __pfx_tun_get_user+0x10/0x10 [ 558.778076][T10808] ? __pfx_ref_tracker_alloc+0x10/0x10 [ 558.783554][T10808] ? tun_get+0x1e/0x2f0 [ 558.787732][T10808] ? __pfx_lock_release+0x10/0x10 [ 558.792878][T10808] ? tun_get+0x1e/0x2f0 [ 558.797135][T10808] ? tun_get+0x27d/0x2f0 [ 558.801396][T10808] tun_chr_write_iter+0x113/0x1f0 [ 558.806442][T10808] vfs_write+0xa72/0xc90 [ 558.810707][T10808] ? __pfx_tun_chr_write_iter+0x10/0x10 [ 558.816274][T10808] ? __pfx_vfs_write+0x10/0x10 [ 558.821069][T10808] ksys_write+0x1a0/0x2c0 [ 558.825420][T10808] ? __pfx_ksys_write+0x10/0x10 [ 558.830286][T10808] ? do_syscall_64+0x100/0x230 [ 558.835168][T10808] ? do_syscall_64+0xb6/0x230 [ 558.840048][T10808] do_syscall_64+0xf3/0x230 [ 558.844586][T10808] ? clear_bhb_loop+0x35/0x90 [ 558.849286][T10808] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 558.855196][T10808] RIP: 0033:0x7fa3dd57c9df [ 558.859625][T10808] Code: 89 54 24 18 48 89 74 24 10 89 7c 24 08 e8 c9 8d 02 00 48 8b 54 24 18 48 8b 74 24 10 41 89 c0 8b 7c 24 08 b8 01 00 00 00 0f 05 <48> 3d 00 f0 ff ff 77 31 44 89 c7 48 89 44 24 08 e8 1c 8e 02 00 48 [ 558.879339][T10808] RSP: 002b:00007fa3de358000 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 558.887795][T10808] RAX: ffffffffffffffda RBX: 00007fa3dd736058 RCX: 00007fa3dd57c9df [ 558.895783][T10808] RDX: 0000000000000042 RSI: 0000000020000240 RDI: 00000000000000c8 [ 558.903767][T10808] RBP: 00007fa3de358090 R08: 0000000000000000 R09: 0000000000000000 [ 558.911839][T10808] R10: 0000000000000042 R11: 0000000000000293 R12: 0000000000000001 [ 558.919821][T10808] R13: 0000000000000000 R14: 00007fa3dd736058 R15: 00007ffe6ca99d98 [ 558.927824][T10808] [ 559.091134][T10821] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1618'. [ 559.191562][T10830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1620'. [ 559.204017][T10830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1620'. [ 559.224665][T10830] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1620'. [ 559.265370][T10830] netlink: 16 bytes leftover after parsing attributes in process `syz.3.1620'. [ 559.510476][T10842] bridge0: port 3(batadv0) entered blocking state [ 559.525100][T10842] bridge0: port 3(batadv0) entered disabled state [ 559.533010][T10842] batadv0: entered allmulticast mode [ 559.540714][T10842] batadv0: entered promiscuous mode [ 559.549476][T10842] bridge0: port 3(batadv0) entered blocking state [ 559.556132][T10842] bridge0: port 3(batadv0) entered forwarding state [ 559.655473][T10550] batman_adv: batadv0: No IGMP Querier present - multicast optimizations disabled [ 559.665812][T10550] batman_adv: batadv0: No MLD Querier present - multicast optimizations disabled [ 560.129086][T10859] bond0: entered promiscuous mode [ 560.146090][T10859] bond_slave_0: entered promiscuous mode [ 560.172208][T10859] bond_slave_1: entered promiscuous mode [ 560.175996][ T5265] Bluetooth: hci3: command 0x0406 tx timeout [ 560.178202][ T5272] Bluetooth: hci5: command 0x0406 tx timeout [ 560.184013][ T5265] Bluetooth: hci4: command 0x0405 tx timeout [ 560.200763][T10859] batadv0: entered promiscuous mode [ 560.272272][T10870] batadv_slave_1: entered promiscuous mode [ 560.281131][T10866] batadv_slave_1: left promiscuous mode [ 560.800515][T10905] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1641'. [ 560.814405][T10905] 0·: renamed from hsr_slave_1 (while UP) [ 560.834865][T10905] 0·: entered allmulticast mode [ 560.843798][T10905] A link change request failed with some changes committed already. Interface c0· may have been left with an inconsistent configuration, please check. [ 560.950402][T10912] netlink: 'syz.0.1643': attribute type 4 has an invalid length. [ 561.130927][ T5273] Bluetooth: hci7: command 0x0405 tx timeout [ 561.191397][T10923] netlink: 'syz.4.1647': attribute type 8 has an invalid length. [ 561.500785][T10939] netlink: 24 bytes leftover after parsing attributes in process `syz.4.1651'. [ 561.644161][T10948] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1655'. [ 562.110502][T10972] netlink: 'syz.0.1662': attribute type 6 has an invalid length. [ 562.147234][T10972] delete_channel: no stack [ 562.523426][T10991] ipt_ECN: cannot use operation on non-tcp rule [ 562.759595][T11000] veth1_to_hsr: entered allmulticast mode [ 562.887607][T11010] syz_tun: entered promiscuous mode [ 562.939721][T11010] syz_tun: left promiscuous mode [ 563.154945][T11022] dccp_invalid_packet: invalid packet type [ 563.387100][T11030] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1678'. [ 563.687774][T11043] debugfs: Directory 'netdev:nicvf0' with parent 'phy19' already present! [ 563.947445][T11053] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1686'. [ 564.585487][T11094] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1699'. [ 564.676283][T11097] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1699'. [ 564.786284][T11101] xt_TCPMSS: Only works on TCP SYN packets [ 564.961500][T11110] netlink: 4096 bytes leftover after parsing attributes in process `syz.4.1703'. [ 564.994264][T11110] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 565.306766][T11124] bond_slave_0: entered promiscuous mode [ 565.314106][T11124] bond_slave_1: entered promiscuous mode [ 565.351654][T11124] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 565.406263][T11124] bond_slave_0: left promiscuous mode [ 565.411858][T11124] bond_slave_1: left promiscuous mode [ 565.564544][T11141] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1711'. [ 565.690099][T11144] netlink: 'syz.4.1712': attribute type 10 has an invalid length. [ 565.743405][T11144] 8021q: adding VLAN 0 to HW filter on device team0 [ 565.773396][T11144] bond0: (slave team0): Enslaving as an active interface with an up link [ 565.816168][T11157] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1712'. [ 566.076879][T11173] netlink: 165 bytes leftover after parsing attributes in process `syz.3.1719'. [ 566.289026][T11180] netlink: 'syz.0.1722': attribute type 30 has an invalid length. [ 566.332263][T11184] sctp: [Deprecated]: syz.4.1724 (pid 11184) Use of struct sctp_assoc_value in delayed_ack socket option. [ 566.332263][T11184] Use struct sctp_sack_info instead [ 566.673267][T11198] vlan2: entered promiscuous mode [ 566.692666][T11198] veth0: entered promiscuous mode [ 566.713403][T11198] vlan2: entered allmulticast mode [ 566.728732][T11198] veth0: entered allmulticast mode [ 566.765615][T11198] veth0: left allmulticast mode [ 566.777246][T11198] veth0: left promiscuous mode [ 566.896307][T11217] netlink: 20 bytes leftover after parsing attributes in process `syz.4.1731'. [ 567.123102][T11227] netlink: 209852 bytes leftover after parsing attributes in process `syz.0.1735'. [ 567.416240][T11244] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 567.482836][T11237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 567.505855][T11238] openvswitch: netlink: nsh attribute has 1 unknown bytes. [ 567.580431][T11237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 567.602295][T11237] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 567.661895][T11247] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 567.838611][T11258] xt_CT: You must specify a L4 protocol and not use inversions on it [ 567.868398][T11260] netdevsim netdevsim3 netdevsim0: Unsupported IPsec algorithm [ 568.064606][T11267] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 568.172868][T11268] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 568.391245][T11278] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 568.405625][T11280] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 568.464620][T11284] netlink: 'syz.4.1755': attribute type 10 has an invalid length. [ 568.485724][T11284] bridge0: port 3(batadv0) entered disabled state [ 568.507041][T11284] batadv0: left allmulticast mode [ 568.512164][T11284] batadv0: left promiscuous mode [ 568.524835][T11284] bridge0: port 3(batadv0) entered disabled state [ 568.563942][T11284] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 568.575519][T11284] team0: Port device batadv0 added [ 568.830978][T11296] __nla_validate_parse: 2 callbacks suppressed [ 568.831002][T11296] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1760'. [ 569.270307][T11313] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1763'. [ 569.316124][T11313] netlink: 'syz.3.1763': attribute type 9 has an invalid length. [ 569.362304][T11317] IPVS: set_ctl: invalid protocol: 0 100.1.1.2:20000 [ 569.448299][T11319] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1768'. [ 570.336962][T11357] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1778'. [ 570.780650][T11373] tipc: Enabling of bearer rejected, failed to enable media [ 571.863241][T11388] pimreg: entered allmulticast mode [ 572.139168][T11412] netlink: 'syz.3.1796': attribute type 2 has an invalid length. [ 572.181005][T11412] netlink: 'syz.3.1796': attribute type 1 has an invalid length. [ 572.200317][T11412] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1796'. [ 572.298876][T11417] netlink: 36 bytes leftover after parsing attributes in process `syz.4.1798'. [ 572.363490][T11417] bridge0: port 3(vlan0) entered blocking state [ 572.378844][T11417] bridge0: port 3(vlan0) entered disabled state [ 572.395594][T11417] vlan0: entered allmulticast mode [ 572.404892][T11417] vlan0: left allmulticast mode [ 572.644647][T11431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1803'. [ 572.656380][T11431] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1803'. [ 572.779690][T11436] netlink: 4096 bytes leftover after parsing attributes in process `syz.3.1804'. [ 572.801857][T11436] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 573.033182][T11452] IPVS: sync thread started: state = BACKUP, mcast_ifn = batadv0, syncid = 0, id = 0 [ 573.070554][T11451] bridge_slave_0: left allmulticast mode [ 573.087005][T11451] bridge_slave_0: left promiscuous mode [ 573.094632][T11451] bridge0: port 1(bridge_slave_0) entered disabled state [ 573.121446][T11451] bridge_slave_1: left allmulticast mode [ 573.138931][T11451] bridge_slave_1: left promiscuous mode [ 573.154858][T11451] bridge0: port 2(bridge_slave_1) entered disabled state [ 573.183893][T11451] bond0: (slave bond_slave_0): Releasing backup interface [ 573.232587][T11451] bond0: (slave bond_slave_1): Releasing backup interface [ 573.286907][T11451] team0: Port device team_slave_0 removed [ 573.315203][T11451] team0: Port device team_slave_1 removed [ 573.331312][T11451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 573.351324][T11451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 573.362516][T11451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 573.370790][T11451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 573.427778][T11453] 8021q: adding VLAN 0 to HW filter on device bond0 [ 573.455815][T11453] team0: Port device bond0 added [ 573.521842][T11455] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1811'. [ 574.074604][T11469] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1817'. [ 574.100489][ T5352] IPVS: starting estimator thread 0... [ 574.107999][T11471] IPVS: wrr: SCTP 172.20.20.187:0 - no destination available [ 574.176004][T11467] netlink: 'syz.0.1815': attribute type 11 has an invalid length. [ 574.216024][T11472] IPVS: using max 16 ests per chain, 38400 per kthread [ 574.525033][T11482] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 575.131683][T11504] xt_TCPMSS: Only works on TCP SYN packets [ 575.480662][T11516] netlink: 'syz.2.1829': attribute type 15 has an invalid length. [ 575.787666][T11528] netlink: 'syz.0.1834': attribute type 10 has an invalid length. [ 575.868678][T11528] batman_adv: batadv0: Adding interface: team0 [ 575.948241][T11528] batman_adv: batadv0: The MTU of interface team0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 576.062117][T11528] batman_adv: batadv0: Not using interface team0 (retrying later): interface not active [ 576.107297][T11531] netlink: 'syz.0.1834': attribute type 10 has an invalid length. [ 576.115196][T11531] netlink: 2 bytes leftover after parsing attributes in process `syz.0.1834'. [ 576.127639][T11531] team0: entered promiscuous mode [ 576.134672][T11531] team_slave_0: entered promiscuous mode [ 576.146282][T11531] team_slave_1: entered promiscuous mode [ 576.154652][T11531] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.175362][T11531] batman_adv: batadv0: Interface activated: team0 [ 576.185162][T11531] batman_adv: batadv0: Interface deactivated: team0 [ 576.192389][T11531] batman_adv: batadv0: Removing interface: team0 [ 576.200655][T11552] netlink: 12 bytes leftover after parsing attributes in process `syz.4.1836'. [ 576.242250][T11531] bridge0: port 3(team0) entered blocking state [ 576.266316][T11531] bridge0: port 3(team0) entered disabled state [ 576.273155][T11531] team0: entered allmulticast mode [ 576.294749][T11531] team_slave_0: entered allmulticast mode [ 576.313436][T11531] team_slave_1: entered allmulticast mode [ 576.330030][T11531] bridge0: port 3(team0) entered blocking state [ 576.336555][T11531] bridge0: port 3(team0) entered forwarding state [ 576.428498][T11556] netlink: 'syz.2.1840': attribute type 10 has an invalid length. [ 576.461237][T11556] 8021q: adding VLAN 0 to HW filter on device team0 [ 576.510130][T11556] bond0: (slave team0): Enslaving as an active interface with an up link [ 576.533030][T11558] netlink: 'syz.2.1840': attribute type 10 has an invalid length. [ 576.554295][T11558] bond0: (slave team0): Releasing backup interface [ 576.636707][T11558] bridge0: port 1(team0) entered blocking state [ 576.647480][T11558] bridge0: port 1(team0) entered disabled state [ 576.654005][T11558] team0: entered allmulticast mode [ 576.699984][T11558] team0: entered promiscuous mode [ 576.709208][T11556] tipc: MTU too low for tipc bearer [ 576.714949][T11566] netlink: 'syz.1.1842': attribute type 9 has an invalid length. [ 576.790649][T11556] netlink: 340 bytes leftover after parsing attributes in process `syz.2.1840'. [ 577.263801][T11596] can: request_module (can-proto-0) failed. [ 577.894211][T11626] netlink: 8 bytes leftover after parsing attributes in process `syz.4.1861'. [ 577.984426][T11634] netdevsim netdevsim0 netdevsim0: Unsupported IPsec algorithm [ 578.057473][T11634] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1863'. [ 578.096094][T11634] netlink: 24 bytes leftover after parsing attributes in process `syz.0.1863'. [ 578.293742][T11647] sit0: entered promiscuous mode [ 578.360822][T11647] netlink: 'syz.3.1866': attribute type 1 has an invalid length. [ 578.399571][T11647] netlink: 1 bytes leftover after parsing attributes in process `syz.3.1866'. [ 578.553457][T11657] netlink: 'syz.2.1869': attribute type 10 has an invalid length. [ 578.622250][T11657] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 578.942629][T11667] netlink: 56 bytes leftover after parsing attributes in process `syz.2.1871'. [ 579.554139][T11690] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1877'. [ 579.712994][T11698] netlink: 260 bytes leftover after parsing attributes in process `syz.3.1878'. [ 579.830277][T11700] dummy0: entered promiscuous mode [ 579.868874][T11700] dummy0: left promiscuous mode [ 579.952687][T11704] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 580.023990][T11707] nbd: must specify a device to reconfigure [ 580.183609][T11715] netlink: 'syz.3.1882': attribute type 30 has an invalid length. [ 580.838164][T11740] netlink: 'syz.4.1890': attribute type 10 has an invalid length. [ 580.865202][T11740] netlink: 55 bytes leftover after parsing attributes in process `syz.4.1890'. [ 581.187687][T11755] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1897'. [ 581.229793][T11764] netlink: 5300 bytes leftover after parsing attributes in process `syz.2.1897'. [ 581.252357][T11755] netlink: 5300 bytes leftover after parsing attributes in process `syz.2.1897'. [ 581.276084][T11755] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 581.292894][T11764] openvswitch: netlink: Tunnel attr 0 has unexpected len 0 expected 8 [ 581.587021][T11780] netlink: 'syz.4.1905': attribute type 10 has an invalid length. [ 581.601639][T11780] bridge0: port 2(bridge_slave_1) entered disabled state [ 581.609549][T11780] bridge0: port 1(bridge_slave_0) entered disabled state [ 581.624433][T11780] bridge0: port 2(bridge_slave_1) entered blocking state [ 581.631725][T11780] bridge0: port 2(bridge_slave_1) entered forwarding state [ 581.639372][T11780] bridge0: port 1(bridge_slave_0) entered blocking state [ 581.646640][T11780] bridge0: port 1(bridge_slave_0) entered forwarding state [ 581.671765][T11780] bond0: (slave bridge0): Enslaving as an active interface with an up link [ 581.809905][T11788] netlink: 44 bytes leftover after parsing attributes in process `syz.0.1907'. [ 582.135639][T11808] netlink: 'syz.3.1914': attribute type 1 has an invalid length. [ 582.143765][T11800] netlink: 96 bytes leftover after parsing attributes in process `syz.0.1911'. [ 582.151136][T11808] netlink: 112860 bytes leftover after parsing attributes in process `syz.3.1914'. [ 582.165736][T11810] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1913'. [ 582.171720][T11808] netlink: 'syz.3.1914': attribute type 1 has an invalid length. [ 582.184482][T11807] netlink: 'syz.3.1914': attribute type 1 has an invalid length. [ 582.226722][T11807] netlink: 'syz.3.1914': attribute type 1 has an invalid length. [ 583.338996][T11867] netlink: 'syz.4.1935': attribute type 63 has an invalid length. [ 583.368265][T11867] netlink: 'syz.4.1935': attribute type 63 has an invalid length. [ 583.563966][T11870] netlink: 'syz.4.1938': attribute type 8 has an invalid length. [ 583.888298][T11884] netdevsim netdevsim0 netdevsim0: entered promiscuous mode [ 583.941964][T11884] ip6gretap0: entered promiscuous mode [ 584.347413][T11908] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 584.359824][T11908] rdma_op ffff8880353d11f0 conn xmit_rdma 0000000000000000 [ 584.370030][T11920] netlink: 'syz.4.1947': attribute type 6 has an invalid length. [ 584.703789][T11929] netlink: 'syz.4.1951': attribute type 4 has an invalid length. [ 584.726844][T11929] __nla_validate_parse: 17 callbacks suppressed [ 584.726867][T11929] netlink: 152 bytes leftover after parsing attributes in process `syz.4.1951'. [ 584.774113][T11929] A link change request failed with some changes committed already. Interface veth1_vlan may have been left with an inconsistent configuration, please check. [ 584.799321][T11932] netlink: 'syz.2.1952': attribute type 14 has an invalid length. [ 584.962767][T11935] sch_tbf: burst 0 is lower than device veth1_to_bridge mtu (1514) ! [ 585.059424][T11945] x_tables: duplicate underflow at hook 2 [ 585.699989][T11984] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1965'. [ 586.592510][T11996] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1968'. [ 588.901582][ T5271] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 588.914464][ T5271] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 588.924167][ T5271] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 588.984944][ T5271] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 588.998390][ T5271] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 589.006157][ T5271] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 589.056313][T12013] netlink: 76 bytes leftover after parsing attributes in process `syz.2.1971'. [ 589.109271][T12014] netlink: 4 bytes leftover after parsing attributes in process `syz.4.1973'. [ 589.170013][T12014] netlink: 72 bytes leftover after parsing attributes in process `syz.4.1973'. [ 589.203802][T12014] A link change request failed with some changes committed already. Interface veth1_macvtap may have been left with an inconsistent configuration, please check. [ 589.246253][T12024] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1975'. [ 589.258700][T12024] netlink: 28 bytes leftover after parsing attributes in process `syz.3.1975'. [ 589.441896][T12029] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1976'. [ 589.603433][T12032] Unsupported ieee802154 address type: 0 [ 589.612995][T12032] netlink: 'syz.2.1978': attribute type 8 has an invalid length. [ 589.622748][T12032] A link change request failed with some changes committed already. Interface bridge0 may have been left with an inconsistent configuration, please check. [ 589.727967][T12036] netlink: 'syz.3.1980': attribute type 1 has an invalid length. [ 589.745851][T12036] netlink: 112 bytes leftover after parsing attributes in process `syz.3.1980'. [ 589.804550][T12043] netlink: 'syz.4.1982': attribute type 10 has an invalid length. [ 589.871846][T12006] chnl_net:caif_netlink_parms(): no params data found [ 590.167095][T12006] bridge0: port 1(bridge_slave_0) entered blocking state [ 590.174796][T12006] bridge0: port 1(bridge_slave_0) entered disabled state [ 590.184780][T12006] bridge_slave_0: entered allmulticast mode [ 590.193288][T12006] bridge_slave_0: entered promiscuous mode [ 590.205189][T12006] bridge0: port 2(bridge_slave_1) entered blocking state [ 590.212776][T12006] bridge0: port 2(bridge_slave_1) entered disabled state [ 590.220204][T12006] bridge_slave_1: entered allmulticast mode [ 590.228145][T12006] bridge_slave_1: entered promiscuous mode [ 590.305148][T12006] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 590.330370][T12006] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 590.432052][T12006] team0: Port device team_slave_0 added [ 590.446919][T12006] team0: Port device team_slave_1 added [ 590.524304][T12006] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 590.546038][T12006] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 590.600529][T12006] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 590.621888][T12006] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 590.633088][T12006] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 590.669094][T12006] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 590.736898][T12078] lo: entered promiscuous mode [ 590.743399][T12077] lo: left promiscuous mode [ 590.759453][T12006] hsr_slave_0: entered promiscuous mode [ 590.773005][T12006] hsr_slave_1: entered promiscuous mode [ 590.781243][T12006] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 590.791840][T12006] Cannot create hsr debugfs directory [ 591.046311][ T5271] Bluetooth: hci0: command tx timeout [ 591.158702][T12088] bridge0: port 2(bridge_slave_1) entered disabled state [ 591.166452][T12088] bridge0: port 1(bridge_slave_0) entered disabled state [ 591.214028][T12086] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1992'. [ 591.554968][T12105] netlink: 'syz.2.2000': attribute type 1 has an invalid length. [ 591.560444][T12106] netlink: 16 bytes leftover after parsing attributes in process `syz.4.1998'. [ 591.581891][T12105] netlink: 9372 bytes leftover after parsing attributes in process `syz.2.2000'. [ 591.592860][T12105] netlink: 11 bytes leftover after parsing attributes in process `syz.2.2000'. [ 591.599295][T12006] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.602451][T12105] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2000'. [ 591.784130][T12006] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 591.963646][T12006] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.173060][T12006] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 592.273521][T12142] netlink: 'syz.0.2008': attribute type 6 has an invalid length. [ 592.305256][T12144] netlink: 'syz.2.2006': attribute type 10 has an invalid length. [ 592.516822][T12006] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 592.570995][T12006] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 592.599731][T12006] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 592.664361][T12006] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 593.011779][T12172] netlink: 60 bytes leftover after parsing attributes in process `syz.3.2015'. [ 593.126411][ T5271] Bluetooth: hci0: command tx timeout [ 593.273588][T12006] 8021q: adding VLAN 0 to HW filter on device bond0 [ 593.304319][T12176] @ÿ: renamed from veth0_vlan (while UP) [ 593.337682][T12180] netlink: 28 bytes leftover after parsing attributes in process `syz.3.2019'. [ 593.465216][T12006] 8021q: adding VLAN 0 to HW filter on device team0 [ 593.503609][ T5286] bridge0: port 1(bridge_slave_0) entered blocking state [ 593.510973][ T5286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 593.611232][ T5286] bridge0: port 2(bridge_slave_1) entered blocking state [ 593.618557][ T5286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 594.390750][T12006] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 594.487845][T12220] syz.2.2026[12220] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 594.488014][T12220] syz.2.2026[12220] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 594.590722][T12006] veth0_vlan: entered promiscuous mode [ 594.623232][T12006] veth1_vlan: entered promiscuous mode [ 594.773780][T12006] veth0_macvtap: entered promiscuous mode [ 594.831669][T12006] veth1_macvtap: entered promiscuous mode [ 594.917885][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 594.966633][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 594.996194][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.016148][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.035748][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.056409][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.076265][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.097568][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.107753][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 595.121479][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.144917][T12006] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 595.191343][T12234] smc: net device ip6tnl0 applied user defined pnetid SYZ0 [ 595.206451][ T5271] Bluetooth: hci0: command tx timeout [ 595.208811][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.284819][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.312464][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.332603][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.361518][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.385993][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.412031][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.455316][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.475949][T12006] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 595.495979][T12006] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 595.529531][T12006] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 595.583209][T12244] sch_fq: defrate 0 ignored. [ 595.744926][T12006] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.779076][T12006] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.804033][T12006] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.827496][T12006] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 595.878637][T10550] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 595.889148][T10550] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 595.898300][T12269] netlink: 24 bytes leftover after parsing attributes in process `syz.4.2039'. [ 596.122601][T12276] bond0: (slave bridge0): Releasing backup interface [ 596.187867][T12276] team0: left allmulticast mode [ 596.192904][T12276] team0: left promiscuous mode [ 596.226301][T12276] bridge0: port 1(team0) entered disabled state [ 596.323412][ T5377] Dead loop on virtual device ipvlan0, fix it urgently! [ 596.338275][T12275] netlink: 'syz.2.2040': attribute type 10 has an invalid length. [ 596.367490][T12275] netlink: 2 bytes leftover after parsing attributes in process `syz.2.2040'. [ 596.395254][T12275] team0: entered promiscuous mode [ 596.410087][T12275] 8021q: adding VLAN 0 to HW filter on device team0 [ 596.431090][T12275] bridge0: port 1(team0) entered blocking state [ 596.446274][T12275] bridge0: port 1(team0) entered disabled state [ 596.453697][T12275] team0: entered allmulticast mode [ 596.470974][T12287] netlink: 'syz.0.2043': attribute type 5 has an invalid length. [ 596.502341][T12290] vcan1: entered promiscuous mode [ 596.624467][ T5286] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.647194][ T5286] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 596.752005][T10553] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 596.773780][T10553] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 597.104175][T12324] netlink: 44 bytes leftover after parsing attributes in process `syz.0.2051'. [ 597.135392][ T5352] Dead loop on virtual device ipvlan0, fix it urgently! [ 597.286526][ T5271] Bluetooth: hci0: command tx timeout [ 597.466380][T12341] netdevsim netdevsim3 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 597.476178][T12341] netdevsim netdevsim3 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 597.485010][T12341] netdevsim netdevsim3 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 597.494824][T12341] netdevsim netdevsim3 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 597.667407][T12353] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2059'. [ 598.199529][T12371] dummy0: entered promiscuous mode [ 598.252899][T12371] : entered promiscuous mode [ 598.291265][T12371] : left promiscuous mode [ 598.305038][T12371] dummy0: left promiscuous mode [ 598.604263][T12382] netlink: 36 bytes leftover after parsing attributes in process `syz.1.2070'. [ 598.878439][T12416] netlink: 'syz.4.2079': attribute type 4 has an invalid length. [ 598.928432][T12421] A link change request failed with some changes committed already. Interface geneve0 may have been left with an inconsistent configuration, please check. [ 599.297103][T12444] netlink: 'syz.1.2089': attribute type 3 has an invalid length. [ 599.381533][T12448] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2086'. [ 599.475367][T12453] netlink: 76 bytes leftover after parsing attributes in process `syz.2.2091'. [ 599.493058][T12453] ÊüðÿG: entered promiscuous mode [ 599.729344][T12463] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2094'. [ 599.895635][T12473] netlink: 4 bytes leftover after parsing attributes in process `syz.2.2097'. [ 599.958455][T12474] netlink: 16 bytes leftover after parsing attributes in process `syz.3.2096'. [ 600.393092][T12484] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 602.372786][T12519] __nla_validate_parse: 1 callbacks suppressed [ 602.372808][T12519] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2111'. [ 603.449948][T12506] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2108'. [ 603.583960][T12525] netlink: 8 bytes leftover after parsing attributes in process `syz.4.2112'. [ 603.605699][T12525] bond0: option resend_igmp: invalid value (7540) [ 603.629112][T12525] bond0: option resend_igmp: allowed values 0 - 255 [ 603.787731][T12536] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 603.809688][T12538] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2116'. [ 604.033654][T12557] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2121'. [ 604.057818][T12557] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: invalid value (0) [ 604.083760][T12557] (unnamed net_device) (uninitialized): option ad_actor_sys_prio: allowed values 1 - 65535 [ 604.278188][T12570] netlink: 20 bytes leftover after parsing attributes in process `syz.4.2125'. [ 604.368071][T12570] ip6t_rpfilter: unknown options [ 604.564590][T12579] netlink: 96 bytes leftover after parsing attributes in process `syz.4.2129'. [ 604.748891][T12585] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2132'. [ 604.977981][T12607] gtp0: entered promiscuous mode [ 604.983330][T12607] gtp0: entered allmulticast mode [ 605.072676][T12613] netlink: 16126 bytes leftover after parsing attributes in process `syz.2.2135'. [ 605.092728][T12613] netlink: 183228 bytes leftover after parsing attributes in process `syz.2.2135'. [ 605.391818][T12627] Cannot find set identified by id 0 to match [ 605.642385][T12633] can: request_module (can-proto-0) failed. [ 605.655294][T12636] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 605.662154][T12636] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 605.730062][T12631] hsr_slave_0: left promiscuous mode [ 605.759741][T12631] hsr_slave_1: left promiscuous mode [ 605.766723][T12635] can: request_module (can-proto-0) failed. [ 605.901240][T12636] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 605.944777][T12646] netlink: 'syz.3.2152': attribute type 4 has an invalid length. [ 606.261742][T12661] netlink: 'syz.3.2155': attribute type 10 has an invalid length. [ 606.435429][T12663] netlink: 'syz.1.2157': attribute type 12 has an invalid length. [ 606.457584][T12666] (unnamed net_device) (uninitialized): Unable to set down delay as MII monitoring is disabled [ 606.676240][T12678] netlink: 'syz.3.2162': attribute type 1 has an invalid length. [ 611.391471][ T5265] Bluetooth: hci2: command 0x0406 tx timeout [ 611.391490][ T5276] Bluetooth: hci1: command 0x0406 tx timeout [ 616.486068][ T5271] Bluetooth: hci6: command 0x0406 tx timeout [ 620.471778][ T5271] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 620.506141][ T5271] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 620.521020][ T5271] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 620.548721][ T5265] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 620.556968][ T5276] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 620.565138][ T5265] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 620.574512][ T5265] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 620.626242][ T5265] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 620.643069][ T5265] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 620.662475][ T5272] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 620.674401][ T5272] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 620.677136][ T5276] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 620.682180][ T5272] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 620.691893][ T5276] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 620.723740][ T5271] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 620.733384][ T5271] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 620.741561][ T5271] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 620.752142][ T5271] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 620.778226][ T5271] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 620.846107][ T5271] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 620.873968][ T5271] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 620.899361][ T5271] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 620.925051][ T5271] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 620.938480][ T5265] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 620.954354][ T5265] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 620.986786][ T5272] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 620.996137][ T5272] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 621.005732][ T5272] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 621.015943][ T5272] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 621.025419][ T5272] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 621.077780][ T1102] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.220024][ T1102] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.322693][ T1102] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 621.479142][ T1102] netdevsim netdevsim0 netdevsim0 (unregistering): left promiscuous mode [ 621.490834][ T1102] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 622.005086][T12714] chnl_net:caif_netlink_parms(): no params data found [ 622.132019][T12713] chnl_net:caif_netlink_parms(): no params data found [ 622.157500][ T1102] team0: left allmulticast mode [ 622.162476][ T1102] team_slave_0: left allmulticast mode [ 622.168741][ T1102] team_slave_1: left allmulticast mode [ 622.174646][ T1102] bridge0: port 3(team0) entered disabled state [ 622.184897][ T1102] bridge_slave_1: left allmulticast mode [ 622.193073][ T1102] bridge_slave_1: left promiscuous mode [ 622.199831][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 622.210953][ T1102] bridge_slave_0: left allmulticast mode [ 622.217016][ T1102] bridge_slave_0: left promiscuous mode [ 622.222807][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 622.356831][ T1102] ip6gretap0 (unregistering): left promiscuous mode [ 622.729020][ T5271] Bluetooth: hci6: command tx timeout [ 622.736727][ T5272] Bluetooth: hci4: command tx timeout [ 622.807297][ T5272] Bluetooth: hci8: command tx timeout [ 622.940219][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 622.954329][ T1102] bond_slave_0: left promiscuous mode [ 622.963378][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 622.984347][ T1102] bond_slave_1: left promiscuous mode [ 622.994463][ T1102] bond0 (unregistering): (slave batadv0): Releasing backup interface [ 623.005266][ T1102] batadv0: left promiscuous mode [ 623.024432][ T1102] bond0 (unregistering): Released all slaves [ 623.039474][ T1102] bond1 (unregistering): Released all slaves [ 623.046363][ T5271] Bluetooth: hci0: command tx timeout [ 623.052880][ T5272] Bluetooth: hci2: command tx timeout [ 623.168690][T12717] chnl_net:caif_netlink_parms(): no params data found [ 623.218080][ T1102] tipc: Left network mode [ 623.251916][ T1102] IPVS: stopping backup sync thread 11452 ... [ 623.348932][T12711] chnl_net:caif_netlink_parms(): no params data found [ 623.439452][T12709] chnl_net:caif_netlink_parms(): no params data found [ 623.498429][T12714] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.506154][T12714] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.513429][T12714] bridge_slave_0: entered allmulticast mode [ 623.521043][T12714] bridge_slave_0: entered promiscuous mode [ 623.601407][T12713] bridge0: port 1(bridge_slave_0) entered blocking state [ 623.609105][T12713] bridge0: port 1(bridge_slave_0) entered disabled state [ 623.616760][T12713] bridge_slave_0: entered allmulticast mode [ 623.624379][T12713] bridge_slave_0: entered promiscuous mode [ 623.634322][T12714] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.642168][T12714] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.649968][T12714] bridge_slave_1: entered allmulticast mode [ 623.657777][T12714] bridge_slave_1: entered promiscuous mode [ 623.718605][T12713] bridge0: port 2(bridge_slave_1) entered blocking state [ 623.726249][T12713] bridge0: port 2(bridge_slave_1) entered disabled state [ 623.733693][T12713] bridge_slave_1: entered allmulticast mode [ 623.741775][T12713] bridge_slave_1: entered promiscuous mode [ 623.859542][T12714] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.950663][T12713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 623.969148][ T1102] hsr_slave_0: left promiscuous mode [ 623.982324][ T1102] hsr_slave_1: left promiscuous mode [ 623.995296][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 624.004286][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 624.024952][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 624.032573][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 624.056516][ T1102] veth1_macvtap: left promiscuous mode [ 624.062135][ T1102] veth0_macvtap: left promiscuous mode [ 624.067989][ T1102] veth1_vlan: left promiscuous mode [ 624.073300][ T1102] veth0_vlan: left allmulticast mode [ 624.078807][ T1102] veth0_vlan: left promiscuous mode [ 624.810645][ T5272] Bluetooth: hci4: command tx timeout [ 624.820001][ T5271] Bluetooth: hci6: command tx timeout [ 624.895101][ T1102] team_slave_1 (unregistering): left promiscuous mode [ 624.903246][ T5271] Bluetooth: hci8: command tx timeout [ 624.918862][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 624.980122][ T1102] team_slave_0 (unregistering): left promiscuous mode [ 624.988703][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 625.127171][ T5271] Bluetooth: hci2: command tx timeout [ 625.132940][ T5271] Bluetooth: hci0: command tx timeout [ 625.680372][T12714] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.725535][T12711] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.735286][T12711] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.743429][T12711] bridge_slave_0: entered allmulticast mode [ 625.769138][T12711] bridge_slave_0: entered promiscuous mode [ 625.779780][T12711] bridge0: port 2(bridge_slave_1) entered blocking state [ 625.787301][T12711] bridge0: port 2(bridge_slave_1) entered disabled state [ 625.794612][T12711] bridge_slave_1: entered allmulticast mode [ 625.802452][T12711] bridge_slave_1: entered promiscuous mode [ 625.812168][T12713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 625.870939][T12717] bridge0: port 1(bridge_slave_0) entered blocking state [ 625.878340][T12717] bridge0: port 1(bridge_slave_0) entered disabled state [ 625.885621][T12717] bridge_slave_0: entered allmulticast mode [ 625.893995][T12717] bridge_slave_0: entered promiscuous mode [ 626.003307][T12713] team0: Port device team_slave_0 added [ 626.017687][T12714] team0: Port device team_slave_0 added [ 626.024468][T12717] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.032493][T12717] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.041567][T12717] bridge_slave_1: entered allmulticast mode [ 626.049298][T12717] bridge_slave_1: entered promiscuous mode [ 626.070373][T12709] bridge0: port 1(bridge_slave_0) entered blocking state [ 626.090668][T12709] bridge0: port 1(bridge_slave_0) entered disabled state [ 626.098593][T12709] bridge_slave_0: entered allmulticast mode [ 626.109839][T12709] bridge_slave_0: entered promiscuous mode [ 626.121658][T12711] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 626.146564][T12713] team0: Port device team_slave_1 added [ 626.163990][T12714] team0: Port device team_slave_1 added [ 626.195002][T12717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 626.204497][T12709] bridge0: port 2(bridge_slave_1) entered blocking state [ 626.223854][T12709] bridge0: port 2(bridge_slave_1) entered disabled state [ 626.231754][T12709] bridge_slave_1: entered allmulticast mode [ 626.239924][T12709] bridge_slave_1: entered promiscuous mode [ 626.253074][T12711] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 626.304153][T12717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 626.434296][T12709] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 626.448693][T12709] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 626.464949][T12711] team0: Port device team_slave_0 added [ 626.475250][T12711] team0: Port device team_slave_1 added [ 626.482226][T12713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.489484][T12713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.515643][T12713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.530577][T12714] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.542557][T12714] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.571559][T12714] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.585650][T12714] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.592825][T12714] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.619163][T12714] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.691685][T12713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.699087][T12713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.725543][T12713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 626.777142][T12717] team0: Port device team_slave_0 added [ 626.789558][T12709] team0: Port device team_slave_0 added [ 626.811850][T12711] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 626.819629][T12711] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.846154][T12711] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 626.886135][ T5272] Bluetooth: hci4: command tx timeout [ 626.886464][ T5271] Bluetooth: hci6: command tx timeout [ 626.904607][T12717] team0: Port device team_slave_1 added [ 626.930238][T12709] team0: Port device team_slave_1 added [ 626.954048][T12711] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 626.963270][T12711] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 626.990180][ T5271] Bluetooth: hci8: command tx timeout [ 626.995695][T12711] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.034560][T12714] hsr_slave_0: entered promiscuous mode [ 627.042088][T12714] hsr_slave_1: entered promiscuous mode [ 627.086206][T12713] hsr_slave_0: entered promiscuous mode [ 627.092913][T12713] hsr_slave_1: entered promiscuous mode [ 627.099934][T12713] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 627.107831][T12713] Cannot create hsr debugfs directory [ 627.141191][T12717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.148497][T12717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 627.176159][T12717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.203427][T12709] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 627.211643][ T5271] Bluetooth: hci0: command tx timeout [ 627.211655][ T5272] Bluetooth: hci2: command tx timeout [ 627.225550][T12709] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 627.252021][T12709] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 627.287778][T12717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.294832][T12717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 627.321271][T12717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.361681][T12709] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 627.370015][T12709] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 627.397547][T12709] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 627.504117][T12711] hsr_slave_0: entered promiscuous mode [ 627.511707][T12711] hsr_slave_1: entered promiscuous mode [ 627.518566][T12711] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 627.526619][T12711] Cannot create hsr debugfs directory [ 627.572881][T12717] hsr_slave_0: entered promiscuous mode [ 627.580843][T12717] hsr_slave_1: entered promiscuous mode [ 627.587666][T12717] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 627.595277][T12717] Cannot create hsr debugfs directory [ 627.703576][ T1102] netdevsim netdevsim3 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 627.714360][ T1102] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 627.751908][T12709] hsr_slave_0: entered promiscuous mode [ 627.759523][T12709] hsr_slave_1: entered promiscuous mode [ 627.774198][T12709] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 627.790869][T12709] Cannot create hsr debugfs directory [ 627.900062][ T1102] netdevsim netdevsim3 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 627.910508][ T1102] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.064663][ T1102] netdevsim netdevsim3 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 628.075380][ T1102] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.285097][ T1102] netdevsim netdevsim3 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 628.297229][ T1102] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.590134][ T1102] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.674987][ T1102] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.747544][ T1102] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.832641][ T1102] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 628.966582][ T5272] Bluetooth: hci6: command tx timeout [ 628.966768][ T5271] Bluetooth: hci4: command tx timeout [ 629.014066][ T1102] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.056615][ T5271] Bluetooth: hci8: command tx timeout [ 629.109112][ T1102] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.192321][ T1102] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.277250][ T1102] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 629.288315][ T5271] Bluetooth: hci2: command tx timeout [ 629.288342][ T5272] Bluetooth: hci0: command tx timeout [ 629.404031][ T1102] bridge_slave_1: left allmulticast mode [ 629.410329][ T1102] bridge_slave_1: left promiscuous mode [ 629.416844][ T1102] bridge0: port 2(bridge_slave_1) entered disabled state [ 629.428721][ T1102] bridge_slave_0: left allmulticast mode [ 629.434417][ T1102] bridge_slave_0: left promiscuous mode [ 629.442852][ T1102] bridge0: port 1(bridge_slave_0) entered disabled state [ 629.473206][ T1102] team0: left allmulticast mode [ 629.478579][ T1102] bridge0: port 1(team0) entered disabled state [ 631.208398][ T1102] team0: Port device bond0 removed [ 631.217094][ T1102] bond0 (unregistering): Released all slaves [ 631.415640][ T1102] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 631.430715][ T1102] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 631.443665][ T1102] bond0 (unregistering): Released all slaves [ 631.639345][ T1102] bond0 (unregistering): Released all slaves [ 631.655683][ T1102] bond1 (unregistering): Released all slaves [ 631.684841][T12717] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.804372][ T1102] ÊüðÿG: left promiscuous mode [ 631.824664][T12717] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.918784][T12717] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 631.963371][ T1102] tipc: Left network mode [ 632.024152][T12717] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 632.266007][T12717] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 632.353417][T12717] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 632.374727][T12717] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 632.403386][T12717] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 632.645597][ T1102] hsr_slave_0: left promiscuous mode [ 632.663338][ T1102] hsr_slave_1: left promiscuous mode [ 632.673245][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 632.680883][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 632.703916][ T1102] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 632.711854][ T1102] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 632.725047][ T1102] hsr_slave_0: left promiscuous mode [ 632.732622][ T1102] 0·: left promiscuous mode [ 632.787307][ T1102] veth1_macvtap: left promiscuous mode [ 632.792922][ T1102] veth0_macvtap: left promiscuous mode [ 632.799459][ T1102] veth1_vlan: left promiscuous mode [ 632.804791][ T1102] veth0_vlan: left promiscuous mode [ 632.811216][ T1102] veth1_macvtap: left promiscuous mode [ 632.817913][ T1102] veth0_macvtap: left promiscuous mode [ 632.823637][ T1102] veth1_vlan: left promiscuous mode [ 632.829086][ T1102] veth0_vlan: left promiscuous mode [ 632.835704][ T1102] veth1_macvtap: left promiscuous mode [ 632.841499][ T1102] veth0_macvtap: left promiscuous mode [ 632.847598][ T1102] veth1_vlan: left promiscuous mode [ 632.852955][ T1102] @ÿ: left promiscuous mode [ 635.457407][ T1102] team0 (unregistering): Port device team_slave_1 removed [ 635.526057][ T1102] team0 (unregistering): Port device team_slave_0 removed [ 636.154653][ T1102] pimreg (unregistering): left allmulticast mode [ 637.557046][T12717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 637.638072][T12717] 8021q: adding VLAN 0 to HW filter on device team0 [ 637.695464][ T5286] bridge0: port 1(bridge_slave_0) entered blocking state [ 637.702663][ T5286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 637.719700][ T5286] bridge0: port 2(bridge_slave_1) entered blocking state [ 637.726967][ T5286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 638.195533][T12711] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 638.207294][T12711] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 638.219343][T12711] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 638.243431][T12711] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 638.295474][T12717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 638.598791][T12711] 8021q: adding VLAN 0 to HW filter on device bond0 [ 638.663438][T12711] 8021q: adding VLAN 0 to HW filter on device team0 [ 638.741147][ T5286] bridge0: port 1(bridge_slave_0) entered blocking state [ 638.748379][ T5286] bridge0: port 1(bridge_slave_0) entered forwarding state [ 638.790339][ T5286] bridge0: port 2(bridge_slave_1) entered blocking state [ 638.797669][ T5286] bridge0: port 2(bridge_slave_1) entered forwarding state [ 638.873241][T12714] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 638.888857][ T1102] IPVS: stop unused estimator thread 0... [ 638.907418][T12714] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 638.932709][T12714] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 638.946476][T12714] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 639.051255][T12713] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 639.064643][T12713] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 639.109857][T12713] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 639.183733][T12713] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 639.272279][T12709] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 639.285827][T12709] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 639.298821][T12717] veth0_vlan: entered promiscuous mode [ 639.332255][T12709] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 639.344044][T12709] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 639.447990][T12717] veth1_vlan: entered promiscuous mode [ 639.684707][T12717] veth0_macvtap: entered promiscuous mode [ 639.732012][T12717] veth1_macvtap: entered promiscuous mode [ 639.764012][T12711] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 639.781408][T12714] 8021q: adding VLAN 0 to HW filter on device bond0 [ 639.851540][T12714] 8021q: adding VLAN 0 to HW filter on device team0 [ 639.869070][T12713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 639.888511][T12709] 8021q: adding VLAN 0 to HW filter on device bond0 [ 639.915950][ T1102] bridge0: port 1(bridge_slave_0) entered blocking state [ 639.923140][ T1102] bridge0: port 1(bridge_slave_0) entered forwarding state [ 639.979535][ T7544] bridge0: port 2(bridge_slave_1) entered blocking state [ 639.986788][ T7544] bridge0: port 2(bridge_slave_1) entered forwarding state [ 640.011440][ T30] INFO: task syz.0.1015:8845 blocked for more than 143 seconds. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 640.027923][T12713] 8021q: adding VLAN 0 to HW filter on device team0 [ 640.033474][ T30] Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 640.042534][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 640.053631][T12717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.095983][ T30] task:syz.0.1015 state:D stack:23984 pid:8845 tgid:8841 ppid:7977 flags:0x00000004 [ 640.122599][T12717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.136146][ T30] Call Trace: [ 640.139608][ T30] [ 640.142744][T12717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.142768][T12717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.142795][T12717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.142811][T12717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.142824][T12717] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 640.142840][T12717] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 640.145086][T12717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 640.178997][ T30] __schedule+0x1800/0x4a60 [ 640.267087][ T30] ? __pfx___schedule+0x10/0x10 [ 640.281847][ T30] ? __pfx_lock_release+0x10/0x10 [ 640.307172][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 640.312840][ T30] ? schedule+0x90/0x320 [ 640.332162][ T30] schedule+0x14b/0x320 [ 640.341294][ T30] schedule_preempt_disabled+0x13/0x30 [ 640.348935][ T30] __mutex_lock+0x6a4/0xd70 [ 640.353590][ T30] ? __mutex_lock+0x527/0xd70 [ 640.363503][ T30] ? nfsd_nl_threads_get_doit+0x1c5/0x7c0 [ 640.369801][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 640.374901][ T30] ? genlmsg_put+0x145/0x2e0 [ 640.381563][ T30] nfsd_nl_threads_get_doit+0x1c5/0x7c0 [ 640.387407][ T30] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 640.393515][ T30] ? __asan_memcpy+0x40/0x70 [ 640.398849][ T30] ? genl_get_cmd+0x65d/0xbe0 [ 640.403572][ T30] ? dev_hard_start_xmit+0x773/0x7e0 [ 640.410417][ T30] genl_rcv_msg+0xb14/0xec0 [ 640.415022][ T30] ? mark_lock+0x9a/0x350 [ 640.419545][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 640.424654][ T30] ? __pfx_lock_acquire+0x10/0x10 [ 640.430046][ T30] ? __pfx_nfsd_nl_threads_get_doit+0x10/0x10 [ 640.437699][ T30] ? __pfx___might_resched+0x10/0x10 [ 640.443062][ T30] netlink_rcv_skb+0x1e3/0x430 [ 640.449355][ T30] ? __pfx_genl_rcv_msg+0x10/0x10 [ 640.454453][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 640.460365][ T30] ? __netlink_deliver_tap+0x77e/0x7c0 [ 640.466838][ T30] genl_rcv+0x28/0x40 [ 640.470884][ T30] netlink_unicast+0x7f6/0x990 [ 640.475698][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 640.482020][ T30] ? __virt_addr_valid+0x183/0x530 [ 640.487484][ T30] ? __check_object_size+0x49c/0x900 [ 640.492840][ T30] ? bpf_lsm_netlink_send+0x9/0x10 [ 640.498307][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 640.503151][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 640.509207][ T30] ? __import_iovec+0x536/0x820 [ 640.514118][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 640.521462][ T30] ? bpf_lsm_socket_sendmsg+0x9/0x10 [ 640.527031][ T30] ? security_socket_sendmsg+0x87/0xb0 [ 640.532996][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 640.538711][ T30] __sock_sendmsg+0x221/0x270 [ 640.543446][ T30] ____sys_sendmsg+0x525/0x7d0 [ 640.550326][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 640.555707][ T30] __sys_sendmsg+0x2b0/0x3a0 [ 640.560640][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 640.565901][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 640.572302][ T30] ? do_syscall_64+0x100/0x230 [ 640.578180][ T30] ? do_syscall_64+0xb6/0x230 [ 640.583936][ T30] do_syscall_64+0xf3/0x230 [ 640.589216][ T30] ? clear_bhb_loop+0x35/0x90 [ 640.594302][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 640.600449][ T30] RIP: 0033:0x7febc8b7def9 [ 640.604906][ T30] RSP: 002b:00007febc998c038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 640.613583][ T30] RAX: ffffffffffffffda RBX: 00007febc8d36058 RCX: 00007febc8b7def9 [ 640.621724][ T30] RDX: 0000000000000000 RSI: 0000000020000100 RDI: 0000000000000006 [ 640.630380][ T30] RBP: 00007febc8bf0b76 R08: 0000000000000000 R09: 0000000000000000 [ 640.638913][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 640.648948][ T30] R13: 0000000000000000 R14: 00007febc8d36058 R15: 00007ffd22da4f38 [ 640.668857][ T30] [ 640.672640][ T30] [ 640.672640][ T30] Showing all locks held in the system: [ 640.728625][ T30] 3 locks held by kworker/0:0/8: [ 640.766236][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 640.825955][ T30] #1: ffffc900000d7d00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 640.865983][ T30] #2: ffff888069a26240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2d1/0x4130 [ 640.905914][ T30] 1 lock held by khungtaskd/30: [ 640.910929][ T30] #0: ffffffff8e938320 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 640.985971][ T30] 3 locks held by kworker/0:2/58: [ 640.991797][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 641.067225][ T30] #1: ffffc9000133fd00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 641.116373][ T30] #2: ffff888060c2f240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2d1/0x4130 [ 641.166317][ T30] 3 locks held by kworker/1:2/1854: [ 641.171590][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 641.227885][ T30] #1: ffffc9000471fd00 (free_ipc_work){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 641.266883][ T30] #2: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x381/0x830 [ 641.307018][ T30] 2 locks held by getty/4989: [ 641.311771][ T30] #0: ffff888030dec0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 641.375507][ T30] #1: ffffc900031332f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6ac/0x1e00 [ 641.386833][ T30] 3 locks held by kworker/1:0/5244: [ 641.392079][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 641.404033][ T30] #1: ffffc90003da7d00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 641.418265][ T30] #2: ffff888060c2f240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2d1/0x4130 [ 641.428540][ T30] 3 locks held by kworker/1:3/5352: [ 641.433755][ T30] #0: ffff88801ac80948 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x90a/0x1830 [ 641.444836][ T30] #1: ffffc90004307d00 ((work_completion)(&data->fib_event_work)){+.+.}-{0:0}, at: process_scheduled_works+0x945/0x1830 [ 641.458674][ T30] #2: ffff888061e8d240 (&data->fib_lock){+.+.}-{3:3}, at: nsim_fib_event_work+0x2d1/0x4130 [ 641.468952][ T30] 2 locks held by syz.4.965/8689: [ 641.474007][ T30] #0: ffffffff8fcee2b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 641.482398][ T30] #1: ffffffff8ec0b768 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_listener_set_doit+0x12d/0x1a90 [ 641.493265][ T30] 2 locks held by syz.0.1015/8845: [ 641.498471][ T30] #0: ffffffff8fcee2b0 (cb_lock){++++}-{3:3}, at: genl_rcv+0x19/0x40 [ 641.511155][ T30] #1: ffffffff8ec0b768 (nfsd_mutex){+.+.}-{3:3}, at: nfsd_nl_threads_get_doit+0x1c5/0x7c0 [ 641.521617][ T30] 2 locks held by kworker/u8:20/9081: [ 641.528869][ T30] 4 locks held by syz-executor/12709: [ 641.536162][ T30] #0: ffff88801bf54d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 641.549618][ T30] #1: ffff88801bf54078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 641.559486][ T30] #2: ffffffff8fdf4d28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 641.569912][ T30] #3: ffffffff8e93d6f8 (rcu_state.exp_mutex){+.+.}-{3:3}, at: synchronize_rcu_expedited+0x451/0x830 [ 641.581051][ T30] 3 locks held by syz-executor/12711: [ 641.587004][ T30] #0: ffff888062378d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 641.597423][ T30] #1: ffff888062378078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 641.609995][ T30] #2: ffffffff8fdf4d28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 641.622953][ T30] 3 locks held by syz-executor/12714: [ 641.630138][ T30] #0: ffff888053e44d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 641.640323][ T30] #1: ffff888053e44078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 641.651385][ T30] #2: ffffffff8fdf4d28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 641.661886][ T30] 3 locks held by syz-executor/12713: [ 641.668275][ T30] #0: ffff88806173cd80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 641.678417][ T30] #1: ffff88806173c078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 641.698037][ T30] #2: ffffffff8fdf4d28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 641.708858][ T30] 3 locks held by syz-executor/12717: [ 641.714272][ T30] #0: ffff888053e54d80 (&hdev->req_lock){+.+.}-{3:3}, at: hci_unregister_dev+0x203/0x510 [ 641.724598][ T30] #1: ffff888053e54078 (&hdev->lock){+.+.}-{3:3}, at: hci_dev_close_sync+0x572/0x11a0 [ 641.734547][ T30] #2: ffffffff8fdf4d28 (hci_cb_list_lock){+.+.}-{3:3}, at: hci_conn_hash_flush+0xa6/0x240 [ 641.746824][ T30] [ 641.749293][ T30] ============================================= [ 641.749293][ T30] [ 641.763690][ T30] NMI backtrace for cpu 1 [ 641.768105][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 641.778300][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 641.788616][ T30] Call Trace: [ 641.791921][ T30] [ 641.794949][ T30] dump_stack_lvl+0x241/0x360 [ 641.799670][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 641.804885][ T30] ? __pfx__printk+0x10/0x10 [ 641.809503][ T30] ? vprintk_emit+0x667/0x7c0 [ 641.814282][ T30] ? __pfx_vprintk_emit+0x10/0x10 [ 641.819368][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 641.824328][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 641.829791][ T30] ? _printk+0xd5/0x120 [ 641.833954][ T30] ? __pfx__printk+0x10/0x10 [ 641.838554][ T30] ? __wake_up_klogd+0xcc/0x110 [ 641.843410][ T30] ? __pfx__printk+0x10/0x10 [ 641.848021][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 641.853051][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 641.859053][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 641.865055][ T30] watchdog+0xff4/0x1040 [ 641.869313][ T30] ? watchdog+0x1ea/0x1040 [ 641.873801][ T30] ? __pfx_watchdog+0x10/0x10 [ 641.878502][ T30] kthread+0x2f0/0x390 [ 641.882587][ T30] ? __pfx_watchdog+0x10/0x10 [ 641.887289][ T30] ? __pfx_kthread+0x10/0x10 [ 641.891891][ T30] ret_from_fork+0x4b/0x80 [ 641.896315][ T30] ? __pfx_kthread+0x10/0x10 [ 641.900914][ T30] ret_from_fork_asm+0x1a/0x30 [ 641.905700][ T30] [ 641.910319][ T30] Sending NMI from CPU 1 to CPUs 0: [ 641.916255][ C0] NMI backtrace for cpu 0 [ 641.916271][ C0] CPU: 0 UID: 0 PID: 5286 Comm: kworker/u8:0 Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 641.916293][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 641.916305][ C0] Workqueue: bat_events batadv_nc_worker [ 641.916335][ C0] RIP: 0010:__rcu_read_lock+0x5d/0xb0 [ 641.916360][ C0] Code: 35 41 8b 2f ff c5 42 0f b6 04 33 84 c0 75 3e 41 89 2f 42 0f b6 04 33 84 c0 75 49 41 8b 07 3d 00 00 00 40 7d 0b 5b 41 5e 41 5f <5d> c3 cc cc cc cc 90 0f 0b 90 eb ef 44 89 f9 80 e1 07 80 c1 03 38 [ 641.916375][ C0] RSP: 0018:ffffc90003fa7b48 EFLAGS: 00000283 [ 641.916390][ C0] RAX: 0000000000000001 RBX: ffff888027fd6d00 RCX: ffff888061d2da00 [ 641.916404][ C0] RDX: 0000000000000000 RSI: ffffffff8c0ae6e0 RDI: ffffffff8c608fc0 [ 641.916417][ C0] RBP: 0000000000000001 R08: ffffffff901830ef R09: 1ffffffff203061d [ 641.916435][ C0] R10: dffffc0000000000 R11: fffffbfff203061e R12: ffff888059f2ccc0 [ 641.916449][ C0] R13: 0000000000000099 R14: ffff888027fd6d00 R15: dffffc0000000000 [ 641.916463][ C0] FS: 0000000000000000(0000) GS:ffff8880b8800000(0000) knlGS:0000000000000000 [ 641.916478][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 641.916491][ C0] CR2: 00007ffda06c9ff8 CR3: 000000000e734000 CR4: 00000000003506f0 [ 641.916507][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 641.916518][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 641.916529][ C0] Call Trace: [ 641.916536][ C0] [ 641.916545][ C0] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 641.916567][ C0] ? __pfx_lock_acquire+0x10/0x10 [ 641.916593][ C0] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 641.916614][ C0] ? nmi_handle+0x2a/0x5a0 [ 641.916642][ C0] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 641.916665][ C0] ? nmi_handle+0x14f/0x5a0 [ 641.916682][ C0] ? nmi_handle+0x2a/0x5a0 [ 641.916701][ C0] ? __rcu_read_lock+0x5d/0xb0 [ 641.916721][ C0] ? default_do_nmi+0x63/0x160 [ 641.916742][ C0] ? exc_nmi+0x123/0x1f0 [ 641.916763][ C0] ? end_repeat_nmi+0xf/0x53 [ 641.916792][ C0] ? __rcu_read_lock+0x5d/0xb0 [ 641.916812][ C0] ? __rcu_read_lock+0x5d/0xb0 [ 641.916834][ C0] ? __rcu_read_lock+0x5d/0xb0 [ 641.916854][ C0] [ 641.916860][ C0] [ 641.916866][ C0] batadv_nc_worker+0xc4/0x610 [ 641.916890][ C0] ? batadv_nc_worker+0xcb/0x610 [ 641.916915][ C0] ? process_scheduled_works+0x945/0x1830 [ 641.916939][ C0] process_scheduled_works+0xa2c/0x1830 [ 641.916980][ C0] ? __pfx_process_scheduled_works+0x10/0x10 [ 641.917009][ C0] ? assign_work+0x364/0x3d0 [ 641.917035][ C0] worker_thread+0x870/0xd30 [ 641.917064][ C0] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 641.917093][ C0] ? __kthread_parkme+0x169/0x1d0 [ 641.917120][ C0] ? __pfx_worker_thread+0x10/0x10 [ 641.917144][ C0] kthread+0x2f0/0x390 [ 641.917171][ C0] ? __pfx_worker_thread+0x10/0x10 [ 641.917196][ C0] ? __pfx_kthread+0x10/0x10 [ 641.917223][ C0] ret_from_fork+0x4b/0x80 [ 641.917247][ C0] ? __pfx_kthread+0x10/0x10 [ 641.917274][ C0] ret_from_fork_asm+0x1a/0x30 [ 641.917309][ C0] [ 641.922556][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 642.232702][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.11.0-syzkaller-01458-g9410645520e9 #0 [ 642.242871][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 08/06/2024 [ 642.252946][ T30] Call Trace: [ 642.256256][ T30] [ 642.259200][ T30] dump_stack_lvl+0x241/0x360 [ 642.263996][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 642.269217][ T30] ? __pfx__printk+0x10/0x10 [ 642.274020][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 642.280037][ T30] ? vscnprintf+0x5d/0x90 [ 642.284383][ T30] panic+0x349/0x860 [ 642.288314][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 642.294487][ T30] ? __pfx_panic+0x10/0x10 [ 642.298921][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 642.304315][ T30] ? __irq_work_queue_local+0x137/0x410 [ 642.309883][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 642.315274][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 642.321444][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 642.327650][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 642.333828][ T30] watchdog+0x1033/0x1040 [ 642.338186][ T30] ? watchdog+0x1ea/0x1040 [ 642.342629][ T30] ? __pfx_watchdog+0x10/0x10 [ 642.347324][ T30] kthread+0x2f0/0x390 [ 642.351417][ T30] ? __pfx_watchdog+0x10/0x10 [ 642.356113][ T30] ? __pfx_kthread+0x10/0x10 [ 642.360761][ T30] ret_from_fork+0x4b/0x80 [ 642.365197][ T30] ? __pfx_kthread+0x10/0x10 [ 642.369897][ T30] ret_from_fork_asm+0x1a/0x30 [ 642.374692][ T30] [ 642.377845][ T30] Kernel Offset: disabled [ 642.382351][ T30] Rebooting in 86400 seconds..