last executing test programs: 1m2.895397851s ago: executing program 2 (id=360): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000080)=ANY=[@ANYRESOCT, @ANYRES32=0x0, @ANYRES64=r0, @ANYRES8=r0, @ANYBLOB="05eb00f1c5fa57e6348ee98163e8b7ae57e6e23ebed223a3981d560e79998aed7c8133cae926ecc83f19f6060000000000ff7f000000000000ffe395"], 0x4c}}, 0x0) 1m2.336022182s ago: executing program 2 (id=366): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x300, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000300)={r1, r2}, 0x10) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r3}, 0x57) 52.641382259s ago: executing program 2 (id=366): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x300, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000300)={r1, r2}, 0x10) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r3}, 0x57) 43.258011087s ago: executing program 2 (id=366): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x300, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000300)={r1, r2}, 0x10) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r3}, 0x57) 34.677390253s ago: executing program 2 (id=366): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x300, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000300)={r1, r2}, 0x10) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r3}, 0x57) 24.783790802s ago: executing program 2 (id=366): bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000240)={0xffffffffffffffff, 0xfca804a0, 0x0, 0x300, 0x0, 0x0, 0x5ee, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) (async) r0 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x5, 0x0, 0xffffffffffffffff, 0xffffffff, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f00000002c0)=0xffffffffffffffff, 0x4) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x0, 0x12, r2, 0x0) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000300)={r1, r2}, 0x10) (async) r3 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b703000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r0}, &(0x7f0000000000), &(0x7f0000000040)=r0}, 0x20) (async) bpf$PROG_BIND_MAP(0xa, &(0x7f0000000240)={r3}, 0x57) 19.646676408s ago: executing program 0 (id=812): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000280)=ANY=[@ANYBLOB="300000001a0001f40000ef000000000081040000000000000000000014000100"], 0x30}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r2 = socket$inet6(0xa, 0x3, 0xff) connect$inet6(r2, &(0x7f0000000200)={0xa, 0x0, 0x0, @empty}, 0x1c) setsockopt$sock_int(r2, 0x1, 0x10, 0x0, 0x0) r3 = socket$packet(0x11, 0x3, 0x300) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r3, 0x8933, &(0x7f0000000480)={'batadv0\x00', 0x0}) sendto$packet(r3, &(0x7f0000000080)="f5fffffeffffba000040000086dd", 0xe, 0x0, &(0x7f0000000040)={0x11, 0x0, r4}, 0x14) setsockopt$SO_TIMESTAMPING(r2, 0x1, 0x25, &(0x7f0000000000)=0x24d2, 0x4) write(r2, &(0x7f0000000180)="b1f6a4e6086771339298ff93c614cda94476d7b36598b8cb08591ffc2467faa14eba6144e8129396", 0x28) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r5, &(0x7f0000000200), 0xf000) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r1, 0x0) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) getsockopt$inet6_buf(r6, 0x29, 0x7, 0x0, &(0x7f0000000180)) r7 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPIOCGCHAN(r7, 0x80047437, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x0, 0x4, &(0x7f0000000000)=ANY=[@ANYRES8=r1], &(0x7f00000003c0)='GPL\x00', 0x8, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x8, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0xd, @void, @value}, 0x94) 18.67067825s ago: executing program 0 (id=813): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r1 = syz_init_net_socket$ax25(0x3, 0x2, 0xda6118dfbc15f4d) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) (async) r2 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="180000000300000000000000000000f195"], &(0x7f0000000140)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) close(r2) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x3, &(0x7f0000000200)=@framed, &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x21, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) (async) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r2, 0x3, 0x25, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) (async) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xb, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@printk={@p, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x17}}]}, &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) ioctl$PPPIOCGL2TPSTATS(r1, 0x80487436, &(0x7f0000000700)="adb0c4a80d4a599c65e2e675d5c82c71f6ed4d97a9ca43b38899") r3 = socket$key(0xf, 0x3, 0x2) r4 = socket$kcm(0xa, 0x922000000003, 0x11) setsockopt$sock_attach_bpf(r4, 0x29, 0x24, &(0x7f00000000c0), 0x4) sendmsg$kcm(r4, &(0x7f0000000000)={&(0x7f00000002c0)=@l2tp6={0xa, 0x0, 0x0, @mcast1}, 0x80, &(0x7f0000000040)=[{&(0x7f0000000100)="f400000000002f00020000000000000000000000000000000200"/40, 0x28}, {&(0x7f0000000180)="2510cd9b000000000000ad440da9c9959bb65801ff685b928de9ba193e466e00018f408ce9194b60bbe193449392a9f359f395469645db0dcc31d97a9662517501a096eccb89af277b74c124cac493c17cb265c226109702585c1bb6da6ab642e71ff172cb154f60ee437d3550fa7433f917d6009c9f77b50ab75cac9591b2f9c8e181514f287813b806ed4b2d879b6c8dc836114355d06b99070000007e7cf91eea8f53393a0ccb4b2f41932f42d52f4abaece79946ab60c33e64ceac10153f4c109073e9412c86fe9e23636610f0249bee3a1d3ef5", 0x4}], 0xe}, 0x0) sendmsg$key(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000040)={0x0}}, 0x0) sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) (async) sendmsg$key(r3, &(0x7f00000001c0)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="02030609100000000000004c9e0000000200130002000000da16c167d803f1f805000600200000000a00060000000000ff0000000000000000001ffeff0001000003f1dc7f7c6e7c0200010000000000004000020000000005000500000000000a"], 0x80}}, 0x0) sendmmsg(r3, &(0x7f0000000180), 0x400008a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r0, 0x0) r5 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000440), r0) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r0, &(0x7f00000006c0)={&(0x7f0000000400)={0x10, 0x0, 0x0, 0xa400822}, 0xc, &(0x7f0000000680)={&(0x7f0000000480)={0x1e0, r5, 0x200, 0x70bd2d, 0x25dfdbfb, {}, [@ETHTOOL_A_PRIVFLAGS_FLAGS={0x1cc, 0x2, 0x0, 0x1, [@ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_BITS={0x84, 0x3, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x40}]}, {0x50, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x12, 0x2, 'memory.events\x00'}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x80000000}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_NAME={0x10, 0x2, '%\'\'}}\\^*\\.}\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x5}, @ETHTOOL_A_BITSET_BIT_NAME={0x8, 0x2, 'GPL\x00'}]}, {0x4}]}, @ETHTOOL_A_BITSET_NOMASK={0x4}, @ETHTOOL_A_BITSET_VALUE={0xb7, 0x4, "5f9a95b769ed8da1e2324020df40a4c4cc9557ec1b519d50b3b2e99cdc922068e489f0084f45d57a6983500ff5a70e07b2cee99a8827ff791505be1b3e6611c4014e113b594b0e9bdf4957cdc5ddcad044f68c573a554ba1def87da6de9ac301fd3c2175d0d6b4e1abbbaf1a0d62937d055cbcf3e5c0692bb7bbbd2ebfaf9e11e4b132a7e3bafab9af36d0963dbba414f87d4a50685d6b1c1bdad01d424ad642b79f7a517399f14b4228bc5c8eb9e4b9cdc753"}, @ETHTOOL_A_BITSET_BITS={0x40, 0x3, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}]}, {0x30, 0x1, 0x0, 0x1, [@ETHTOOL_A_BITSET_BIT_NAME={0x5, 0x2, '\x00'}, @ETHTOOL_A_BITSET_BIT_VALUE={0x4}, @ETHTOOL_A_BITSET_BIT_INDEX={0x8, 0x1, 0x7fffffff}, @ETHTOOL_A_BITSET_BIT_NAME={0x17, 0x2, '$$\xc5({!)@^&@u(*%.{#\x00'}]}]}, @ETHTOOL_A_BITSET_VALUE={0x42, 0x4, "c351efd58f13703ac814022331c1f83caaa0421467235ba253f9382256098d49eb5d3ac0b74b6d7fb054bf7412c1072c63eeb7a8a5cff7e47cdc115be306"}]}]}, 0x1e0}, 0x1, 0x0, 0x0, 0x84}, 0x4000860) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "05e2e505", "12000700"}, 0x38) (async) setsockopt$inet6_tcp_TLS_TX(0xffffffffffffffff, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5171bb672965593497418688ac68cb126474cd3660dab9e2086e246728d7a040", "05e2e505", "12000700"}, 0x38) socket$inet_tcp(0x2, 0x1, 0x0) (async) r6 = socket$inet_tcp(0x2, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001bffffe10000000000010000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) (async) r7 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001bffffe10000000000010000850000006d00000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) bpf$OBJ_PIN_PROG(0x6, &(0x7f0000000300)=@generic={&(0x7f00000001c0)='./file0\x00', r7}, 0x18) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @multicast1}}, 0x0, 0x0, 0x6, 0x0, "954f3b91f54aa78eb1ffb374125cd8327f0e152670040f301c1428c4a8511a8be8955942b32b934c23581ae7ac9b12d3215964a4d640754c467c41f36b02a24b627d26ed282dbd5b496e33585ea60e5e"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) (async) setsockopt$inet_tcp_TCP_MD5SIG(r6, 0x6, 0xe, &(0x7f0000000200)={@in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x22, 0x0, "43cad7b04bde5bbd8035d89034a56bad61a87c614899a37c5d0d7da4d7fc948375f3593dbd21eb7618ffb4ff4984e01eedc37998dd16526edb40eaadabe6cd2bd9f9dfeade7787ea64309c01ae05fb70"}, 0xd8) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) (async) setsockopt$inet_tcp_int(r6, 0x6, 0x20, &(0x7f0000000040)=0x2, 0xf6) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000340)={0x12, 0x4, &(0x7f0000000080)=@framed={{}, [@ldst={0x2, 0x0, 0x3, 0x1, 0x0, 0x18}]}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xf, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 18.540648897s ago: executing program 0 (id=814): mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) (async) r0 = socket$xdp(0x2c, 0x3, 0x0) setsockopt$XDP_UMEM_REG(r0, 0x11b, 0x4, &(0x7f00000000c0)={&(0x7f0000000000)=""/96, 0x2329000, 0x800}, 0x20) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r1, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="5c00000002060100003d00000000bcda0000000005000400000000000900020073797a30000000000c00078008001240090001000500010006000000050005000a00000016000300686173683a6e65742c706f72742c6e6574"], 0x5c}}, 0x0) (async) sendto$inet(0xffffffffffffffff, &(0x7f0000000080)="589a1aad113069795cdc3a68eb41464e574abe91bffe0abc6eb828bcdbac72beb56f03cd96ba6284bab15d78faf2d6b803638cd60d2db0ffc12a2f3e786543dbdf0e0821300d8b9fd5b1fd3da6a40abcd7b7564169226620a8d2d0e51fc9d01fee42d4e4a7bb9b7427c3ad", 0x6b, 0x10044844, &(0x7f0000000140)={0x2, 0x4e24, @remote}, 0x10) clock_gettime(0x0, &(0x7f0000005940)={0x0, 0x0}) recvmmsg(r1, &(0x7f0000005780)=[{{&(0x7f0000000180)=@nl, 0x80, &(0x7f0000000440)=[{&(0x7f0000000200)=""/65, 0x41}, {&(0x7f0000000280)=""/114, 0x72}, {&(0x7f0000000300)=""/67, 0x43}, {&(0x7f0000000380)=""/163, 0xa3}, {&(0x7f00000010c0)=""/4096, 0x1000}], 0x5, &(0x7f00000020c0)=""/4096, 0x1000}}, {{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f00000030c0)=""/4096, 0x1000}, {&(0x7f00000004c0)=""/241, 0xf1}, {&(0x7f00000005c0)=""/214, 0xd6}], 0x3, &(0x7f0000000700)=""/229, 0xe5}, 0x80000000}, {{&(0x7f0000000800)=@can, 0x80, &(0x7f0000000940)=[{&(0x7f0000000880)=""/179, 0xb3}], 0x1, &(0x7f0000000980)=""/7, 0x7}, 0x6}, {{&(0x7f00000009c0)=@ax25={{0x3, @bcast}, [@default, @bcast, @bcast, @default, @rose]}, 0x80, &(0x7f0000000d40)=[{&(0x7f0000000a40)=""/27, 0x1b}, {&(0x7f0000000a80)=""/41, 0x29}, {&(0x7f0000000ac0)=""/190, 0xbe}, {&(0x7f0000000b80)=""/53, 0x35}, {&(0x7f0000000bc0)=""/3, 0x3}, {&(0x7f0000000c00)=""/78, 0x4e}, {&(0x7f0000000c80)=""/145, 0x91}], 0x7, &(0x7f0000000dc0)=""/188, 0xbc}, 0x61cc}, {{0x0, 0x0, &(0x7f0000005180)=[{&(0x7f0000000e80)=""/183, 0xb7}, {&(0x7f0000000f40)=""/234, 0xea}, {&(0x7f00000040c0)=""/178, 0xb2}, {&(0x7f0000004180)=""/4096, 0x1000}, {&(0x7f0000001040)=""/56, 0x38}], 0x5, &(0x7f0000005200)=""/164, 0xa4}, 0x8}, {{0x0, 0x0, &(0x7f00000054c0)=[{&(0x7f00000052c0)=""/25, 0x19}, {&(0x7f0000005300)=""/231, 0xe7}, {&(0x7f0000005400)=""/53, 0x35}, {&(0x7f0000005440)=""/90, 0x5a}], 0x4}, 0x5}, {{&(0x7f0000005500)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, {0xa, 0x0, 0x0, @remote}}}, 0x80, &(0x7f0000005700)=[{&(0x7f0000005580)=""/47, 0x2f}, {&(0x7f00000055c0)=""/231, 0xe7}, {&(0x7f00000056c0)=""/26, 0x1a}], 0x3, &(0x7f0000005740)=""/27, 0x1b}, 0x3bf}], 0x7, 0x2000, &(0x7f0000005980)={r2, r3+10000000}) 17.5736565s ago: executing program 0 (id=819): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) getsockopt$inet_sctp6_SCTP_GET_ASSOC_ID_LIST(r0, 0x84, 0x1d, &(0x7f00000001c0)={0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, &(0x7f0000000200)=0x1c) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r1, r2, 0x2, 0x2, 0x0, @void, @value}, 0x10) shutdown(r0, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x1c, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @private2}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={r3}, &(0x7f0000000140)=0x8) 17.426814432s ago: executing program 0 (id=820): bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x10, 0xcb, 0x4, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) syz_emit_ethernet(0x8a, &(0x7f0000000500)={@broadcast, @local, @val, {@ipv6={0x86dd, @gre_packet={0x0, 0x6, "008080", 0x4c, 0x2f, 0x0, @private0, @mcast2, {[@fragment={0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0x67}], {{0x0, 0x0, 0x1, 0x0, 0x2, 0x0, 0x0, 0x1, 0x8100}, {0x0, 0x0, 0x0, 0x0, 0x100}, {}, {0x8, 0x88be, 0x0, {{0x0, 0x1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}}}}}}}}}, 0x0) syz_emit_ethernet(0x82, &(0x7f0000000300)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x74, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x5, 0x0, 0x0, 0xe0, 0x0, 0xe000, {0x16, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x11, 0x0, @empty=0x1000000, @local, {[@rr={0x7, 0x3}, @rr={0x7, 0x3}, @timestamp_prespec={0x44, 0x3c, 0x0, 0x3, 0x0, [{@private=0xa01012f}, {@multicast1}, {@empty}, {@local}, {}, {@dev}, {@private}]}]}}}}}}}, 0x0) 15.204825975s ago: executing program 0 (id=832): r0 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x10, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="b4000000000000007910480000000000610400000000000095000000"], &(0x7f0000003ff6)='GPL\x00', 0x2, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_msg, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) close(r0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$inet6_IPV6_ADDRFORM(r1, 0x29, 0x1, &(0x7f0000000180), 0x4) socket$inet6(0xa, 0x800000000000002, 0x0) r2 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=ANY=[@ANYBLOB="0f00000004000000040000001200000000004000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000000c0)={{r2, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000080)=r0}, 0x20) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f00000001c0)={{r2}, &(0x7f0000000100), &(0x7f0000000180)=r0}, 0x20) close(r0) socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000300)={{r3}, &(0x7f0000000140), &(0x7f0000000280)=r0}, 0x20) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0xa, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="180000000000000000000000000000006301a2000000000095"], &(0x7f0000000300)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) 7.330582483s ago: executing program 3 (id=848): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) sendto$inet6(r0, &(0x7f00000000c0)="6d6efd0840", 0x5, 0x4040040, &(0x7f0000000000)={0xa, 0x4e21, 0xc67, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x9502}, 0x1c) r1 = syz_init_net_socket$ax25(0x3, 0x3, 0x0) ioctl$SIOCAX25GETINFOOLD(r1, 0x89e9, &(0x7f0000006d00)) sendto$inet6(r0, &(0x7f0000000240)="8a", 0x1, 0x51, &(0x7f0000000080)={0xa, 0x3, 0x1, @local, 0x9}, 0x1c) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(r0, 0x84, 0x66, &(0x7f0000000100)={0x0, 0x2}, &(0x7f0000000180)=0x8) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r0, 0x84, 0x6f, &(0x7f0000000280)={r2, 0x48, &(0x7f00000001c0)=[@in={0x2, 0x4e24, @private=0xa010101}, @in6={0xa, 0x4e24, 0x7, @private1, 0x8}, @in6={0xa, 0x4e23, 0x6, @dev={0xfe, 0x80, '\x00', 0x44}, 0xe6}]}, &(0x7f00000002c0)=0x10) listen(r0, 0x100101) accept4(r0, 0x0, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, 0x0) syz_80211_join_ibss(&(0x7f0000000140)='wlan1\x00', &(0x7f0000000040)=@default_ibss_ssid, 0xb, 0x0) 6.527060718s ago: executing program 3 (id=852): r0 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000000000)={0x1, &(0x7f00000000c0)=[{0x6}]}, 0x10) bind$inet(r0, &(0x7f0000000040)={0x2, 0x4e20, @empty}, 0x10) syz_emit_ethernet(0x6a, &(0x7f0000000100)=ANY=[@ANYBLOB="bbbbbbbbbbbbaaaaaaaaaa0008004500005c00000000001190780000000000000000fffd4e200048907803000000f7ffffff8e64afc76960a1c67db99961090487dd900009d1cc0759812ae7cc69d5305a4736d49093b9b0a9d6a110d16f5b6b5493ff89da1d157baec6"], 0x0) 6.303037428s ago: executing program 3 (id=854): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=@ipv4_newrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_DPORT_RANGE={0x8, 0x18, {0x4e23, 0x4e23}}]}, 0x24}}, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) getpid() (async) syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) (async) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r1, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)={0x44, 0x1, 0x1, 0x201, 0x0, 0x0, {0x2}, [@CTA_TUPLE_REPLY={0x24, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x3a}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8}, {0x8, 0x2, @private}}}]}, @CTA_FILTER={0xc, 0x19, 0x0, 0x1, [@CTA_FILTER_REPLY_FLAGS={0x8, 0x2, 0x899}]}]}, 0x44}}, 0x0) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000380)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x4c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @counter={{0xc}, @void}}]}, @NFT_MSG_NEWSETELEM={0x68, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x3c, 0x3, 0x0, 0x1, [{0x38, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_EXPRESSIONS={0x2c, 0xb, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @quota={{0xa}, @val={0x18, 0x2, 0x0, 0x1, [@NFTA_QUOTA_BYTES={0xc, 0x1, 0x1, 0x0, 0x8}, @NFTA_QUOTA_FLAGS={0x8}]}}}]}]}]}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xfc}}, 0x0) 6.152247099s ago: executing program 3 (id=857): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = epoll_create1(0x0) socketpair$unix(0x1, 0x3, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r3 = epoll_create1(0x0) epoll_ctl$EPOLL_CTL_ADD(r1, 0x1, r2, &(0x7f0000000100)={0x20000004}) epoll_ctl$EPOLL_CTL_ADD(r3, 0x1, r1, &(0x7f0000000000)={0xa0000001}) epoll_pwait(r3, &(0x7f0000000200)=[{}], 0x1, 0x3, 0x0, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f00000000c0), 0xffffffffffffffff) r6 = socket$inet(0x2, 0x2, 0x1) bind$inet(r6, &(0x7f0000002680)={0x2, 0x0, @local}, 0x10) sendmsg$inet(r6, &(0x7f0000000080)={&(0x7f0000000000)={0x2, 0x0, @multicast1}, 0x10, &(0x7f0000000140)=[{&(0x7f0000000040)="08001efbb07d586e", 0x8}], 0x1}, 0x884) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f00000002c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x1}, 0xc, &(0x7f0000000180)={&(0x7f0000000140)={0x30, r5, 0x200, 0x70bd2b, 0x25dfdbfd, {{}, {}, {0x14, 0x19, {0x7, 0x6, 0xa8, 0x10000}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x30}, 0x1, 0x0, 0x0, 0x240040d0}, 0x10) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000300)=ANY=[@ANYBLOB="2c000000200001000000000000080018004e234e20080017004e200e22000000009c1d6e2beaf14209c5ba939300110000000000"], 0x2c}}, 0x0) 6.003610526s ago: executing program 4 (id=858): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = syz_genetlink_get_family_id$devlink(&(0x7f0000000200), 0xffffffffffffffff) (async) connect$inet6(0xffffffffffffffff, &(0x7f0000000300)={0xa, 0x0, 0x0, @private1}, 0x1c) (async) socket$inet6_sctp(0xa, 0x5, 0x84) (async) sendto$inet6(0xffffffffffffffff, &(0x7f00000000c0)="8d", 0x1, 0x0, &(0x7f0000000180)={0xa, 0x4e23, 0x0, @private1}, 0x1c) (async) r2 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r2, &(0x7f00000035c0)={0x0, 0x0, &(0x7f0000003580)={&(0x7f0000004980)=@newsa={0x140, 0x10, 0x0, 0x0, 0x0, {{@in=@initdev={0xac, 0x1e, 0x1, 0x0}, @in6=@local, 0x0, 0x0, 0x2000, 0x0, 0x0, 0x0, 0x0, 0x2e, 0x0, 0xffffffffffffffff}, {@in6=@remote, 0x0, 0x6c}, @in6=@rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', {0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1000000000000000}, {0x0, 0x4}, {0x0, 0x2}, 0x0, 0x0, 0x2, 0x1, 0x6}, [@algo_comp={0x48, 0x3, {{'deflate\x00'}}}, @tfcpad={0x8}]}, 0x140}}, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000000c0)={'wlan1\x00', 0x0}) (async) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_CONNECT(r3, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)={0x30, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r4}, @void}}, [@NL80211_ATTR_SSID={0xa, 0x34, @default_ap_ssid}, @crypto_settings=[@NL80211_ATTR_CONTROL_PORT_OVER_NL80211={0x4}, @NL80211_ATTR_SOCKET_OWNER={0x4}]]}, 0x30}, 0x1, 0x0, 0x0, 0x20004010}, 0x0) (async) setsockopt$inet_sctp6_SCTP_AUTH_DELETE_KEY(0xffffffffffffffff, 0x84, 0x23, &(0x7f0000000080), 0x8) r6 = accept$phonet_pipe(0xffffffffffffffff, &(0x7f0000000040), &(0x7f0000000100)=0x10) getsockopt$PNPIPE_HANDLE(r6, 0x113, 0x3, &(0x7f00000001c0), &(0x7f00000002c0)=0x4) sendmsg$DEVLINK_CMD_RATE_NEW(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000009c0)={0x248, r1, 0x1, 0xfffffffc, 0x0, {}, [@handle=@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, @DEVLINK_ATTR_RATE_PARENT_NODE_NAME={0x214, 0xa9, @random="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"}]}, 0x248}}, 0x0) (async) r7 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = openat$cgroup_ro(r7, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r8) (async) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000000)=ANY=[], 0x48}, 0x1, 0x0, 0x0, 0x8055}, 0x48000) 6.0019381s ago: executing program 1 (id=859): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000000), r0) ioctl$ifreq_SIOCGIFINDEX_team(r0, 0x8933, &(0x7f0000000040)) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000080)={r0, 0x6, 0xfffffffffffff801, 0x80}) getsockname$packet(r2, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f0000000100)=0x14) recvfrom$packet(r2, &(0x7f0000000140)=""/50, 0x32, 0x3, &(0x7f0000000180)={0x11, 0x16, r3, 0x1, 0xfa, 0x6, @random="c72847a80f92"}, 0x14) getsockopt$inet_sctp_SCTP_STATUS(r2, 0x84, 0xe, &(0x7f00000001c0)={0x0, 0x0, 0x4f, 0x6, 0x1, 0x1, 0x0, 0xffff, {0x0, @in6={{0xa, 0x4e23, 0x4, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, 0x6}}, 0x0, 0x7ff, 0x7, 0x7ff, 0x5}}, &(0x7f0000000280)=0xb0) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r2, 0x84, 0x1f, &(0x7f00000002c0)={r4, @in6={{0xa, 0x4e22, 0x6, @remote, 0x100}}, 0x5, 0x4}, 0x90) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000480)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000440)={&(0x7f00000003c0)={0x4c, r1, 0x1, 0x70bd25, 0x25dfdbfe, {}, [@TIPC_NLA_MEDIA={0x38, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x2c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x7}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x40}]}]}]}, 0x4c}, 0x1, 0x0, 0x0, 0x40014}, 0x20042015) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f0000000540)={r2, &(0x7f00000004c0)="39ed80af707ef935d538737a0b39c4db1874b704d1bc770c254e56639e59ca", &(0x7f0000000500)=@udp6=r2, 0x2}, 0x20) sendmsg$NFT_BATCH(r2, &(0x7f0000002840)={&(0x7f0000000580)={0x10, 0x0, 0x0, 0x800}, 0xc, &(0x7f0000002800)={&(0x7f00000005c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x1}}, [@NFT_MSG_DELSETELEM={0x20f8, 0xe, 0xa, 0x201, 0x0, 0x0, {0x1, 0x0, 0x4}, [@NFTA_SET_ELEM_LIST_ELEMENTS={0x18d0, 0x3, 0x0, 0x1, [{0xc8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xc4, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0xa0, 0x1, "0636e7e8367ab46613b4ebb1b9df52f44abc91752c69e657e526f4db3ef023d89bc3d2b19396027162f36d2457913be71e8934f0b2eb4789d26e3a5d046883c336b027e03ae61846f11c6f800d2c4918378df85026bef0e7938cd9b1ec7a5bdda5f7f81e079c41eb4bb2b513ad0c6e4ce0e87b4aa3c1d36f9b6c6727eb0c8ee65cb2ecffaf3338d094c72017334d41dc1b96eb4cf9bf6ecb2ed53522"}, @NFTA_DATA_VALUE={0x1d, 0x1, "9e82ac56e5fc96b7b38e91982947730ceb824fe1ed012f1853"}]}]}, {0x100, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_DATA={0xf0, 0x2, 0x0, 0x1, [@NFTA_DATA_VALUE={0x19, 0x1, "7eab47685dfea2cb8f72c2bf571391902d8224c026"}, @NFTA_DATA_VALUE={0x5b, 0x1, "ccedc7a126a5c95eb36917ac071aa333ce2058d08eaf53426f92fe008055442469b722c0c259ae8f2e681740cef926825dcdd6f0ce6e2ed7bbb2bb210830a1b16ef7d210efdf32aea00b297130030b8c127b6b24365877"}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}]}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}]}, @NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x7ff}]}, {0xec, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz2\x00'}, @NFTA_SET_ELEM_EXPR={0x48, 0x7, 0x0, 0x1, @fwd={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x12}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_DEV={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0xe}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_FWD_SREG_ADDR={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_FWD_NFPROTO={0x8, 0x3, 0x1, 0x0, 0xa}]}}}, @NFTA_SET_ELEM_EXPRESSIONS={0x88, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x2c, 0x1, 0x0, 0x1, @redir={{0xa}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_REDIR_REG_PROTO_MIN={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_REDIR_FLAGS={0x8, 0x3, 0x1, 0x0, 0x60}, @NFTA_REDIR_REG_PROTO_MAX={0x8, 0x2, 0x1, 0x0, 0x15}]}}}, {0xc, 0x1, 0x0, 0x1, @fwd={{0x8}, @void}}, {0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x30, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x3}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x15}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x63261d1b8895638b}]}}}]}]}, {0x1314, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x59, 0x6, 0x1, 0x0, "a051ccc61bc1b234b1db426fb57c65394e7ae42548ee33a3e087faf1a6b1a5ba50429b9d01fdf7fd91c75e29f6e7c904523cc915966b828db139c19c028636313702e5b6b1ece6844e8746adcfeaee87c97ef678f7"}, @NFTA_SET_ELEM_FLAGS={0x8}, @NFTA_SET_ELEM_EXPRESSIONS={0x8c, 0xb, 0x0, 0x1, [{0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x48, 0x1, 0x0, 0x1, @inner={{0xa}, @val={0x38, 0x2, 0x0, 0x1, [@NFTA_INNER_NUM={0x8}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_NUM={0x8}, @NFTA_INNER_FLAGS={0x8, 0x3, 0x1, 0x0, 0xc}, @NFTA_INNER_EXPR={0x14, 0x5, 0x0, 0x1, @immediate={{0xe}, @void}}]}}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}, {0x24, 0x1, 0x0, 0x1, @last={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0xff}, @NFTA_LAST_SET={0x8, 0x1, 0x1, 0x0, 0x2}]}}}]}, @NFTA_SET_ELEM_KEY={0x1180, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0xea, 0x1, "7397f6c953243cb1b957d03c6e2b661e860951079ae56d98b3175855c59d5c00952927fb01af2dfda9a40649d58eb1ff88ccbf000dce949398acb5e7c8b9f478138786b3892af66146af3bb8fb43a2a38760e3f2f64bb3ab23e2ba5d3cddc04af26becae2a53410487498bd502b1a1a941d9ac6d31ec3e6975c82df57d9e13ef5882dfbeab867532bcc7e5aac583e332f75e296abd463f0255d613b155710362e0b94250ceef0a7b3e65166a950f731da6f3551ffe90140fc9ffc7ada78fa66664b07a70010c16d5e5378434b0b659aa9a897bef9fd6fd631ab2f631935db33829db46af3fc6"}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0x5c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0x30, 0x1, "07a7ddc78e999d75e9050e856f0de469097ea5dd7490ef35b7826f9e678b8f46572c29557f21dfb0a15cd250"}]}, @NFTA_SET_ELEM_USERDATA={0x6d, 0x6, 0x1, 0x0, "478e0be473fba1b286439c60bef4773d25601460b36bb22580951d49b61555135ae52accf962cf5a1a8b2b701a17b03c48284a1c49b30a9e8155d54961be44c786f2bbdc3f9243e3cb41df4775fcea46d1ec07c71c6413939018e622f4e9a0bce1c474bce1237c8661"}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xfff}, @NFTA_SET_ELEM_EXPR={0x24, 0x7, 0x0, 0x1, @masq={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x3c}, @NFTA_MASQ_FLAGS={0x8, 0x1, 0x1, 0x0, 0x9}]}}}]}, {0x304, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_USERDATA={0x12, 0x6, 0x1, 0x0, "5004312285202af6e55266321603"}, @NFTA_SET_ELEM_USERDATA={0xdf, 0x6, 0x1, 0x0, "63f422fb63fcf66737bf1a94b1896b79db68b31ef5edf1e5c9158db0155a0dce14ce3c85987faece98ed59be45673dc23ce2ce45ae621bd6498fbfe7023977005fa59359fed60fa85594731d0170a567c4a3c22f34135c4866f655031e5af0745958dc67e5277c7c0b6e1c2a547189007d5af51cf460fa06b8531d333129e12d6c3d155970ccaf888ace3d3529e7f58320e8b2822caa353c646e4455ea5c67c6a30d8ae091e412016c2ec03399382b255f1b91deb77298a4c803b5ea8ab594d1ecd6712a9e4c654bf3388d2ad69cbe7cc9c34cfb4baeb773838bdd"}, @NFTA_SET_ELEM_DATA={0x1f4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x38, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}]}, @NFTA_DATA_VALUE={0xd1, 0x1, "5f71f08280f297a02e72d3ff9fe81820e771cdc2949dd49c65bd47e3112322104ccb6de02cb36a1afbff6da07e5f67624d2d6fd4bf9baa29b899245ee881fa86450dd8a9824a0918822e533d60a51d186acdd5043a6c27d99651cee9cb9d9ca9ec1a72f9ab71ab9eb356fd7cd4cd96bccd5601321871126b7aea7cc75ce87bb023832b81c379c647b4779826d7e3410ae8a81794c4ea08a51ddcf821e4c6bcb00c633b88dabfc5a8463d0f58d906028ee157d2a237405ffff690319df81c5a29a5dd361b586bb6e43379b40a1e"}, @NFTA_DATA_VALUE={0x9b, 0x1, "1e6d517d4b9425d4a37ed00a3436fcb09964e5ce4171fda0049ef5a74fc6620c9c2956586f48dc8b2648b1c03c5d99cecf17f2495255cc2379bd2b5d850ea6f2a6421b32c5b900ddef3bdd677b6307fee4e1a34e2e9c78bceaa6b4718e99dbbbbee45dd5ef3b25f652f3e4927e6604d04ba8681df88cacbb20c1e57762bd04286d5b0cb582f4eae272324d9703e1805a8619947af6ed65"}, @NFTA_DATA_VERDICT={0x14, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_SET_ELEM_TIMEOUT={0xc, 0x4, 0x1, 0x0, 0xc9}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}]}]}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x7c8, 0x3, 0x0, 0x1, [{0x74, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPRESSIONS={0x24, 0xb, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @queue={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @quota={{0xa}, @void}}]}, @NFTA_SET_ELEM_USERDATA={0x4c, 0x6, 0x1, 0x0, "d00999832a3d6cba6ff8a09de985b33240b0760b250ec3043ff31807f08b0a410b4ca1111ce65f45354abf4594cd45ab47237e5a6668770ad0e67ebfb50cedb2d7d4ae86a95ff2ac"}]}, {0x1f0, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY={0x8c, 0x1, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VERDICT={0x18, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VALUE={0x32, 0x1, "532e742bd887e9fc1d231d06fae3f6cf5f48688d77e7cc9b77e8fb01728975ee67def4dee50c8715b19d42021a78"}]}, @NFTA_SET_ELEM_USERDATA={0x91, 0x6, 0x1, 0x0, "20e7c3947bf113ee6fdced96a4f9455831afe46885be9f6fa3ea6d4f3786dfe1ba8dbc46d11fbebbe966b17e645c98e33ecf23370718e2b6a9a0b7f17bbab84f95cd431cb990e8693c610f700add04753d941ca5e6335a076e583e3b723ecf8e11d5e68e458e8109e1f14d7258b1ca609d09f77ce16972c17dc654c9c492b766e3d3b7265fc2c7d28673932392"}, @NFTA_SET_ELEM_EXPRESSIONS={0xb8, 0xb, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0xc, 0x1, 0x0, 0x1, @dup={{0x8}, @void}}, {0x28, 0x1, 0x0, 0x1, @dup={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xb}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0xf}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x9}]}}}, {0x10, 0x1, 0x0, 0x1, @socket={{0xb}, @void}}, {0x48, 0x1, 0x0, 0x1, @fib={{0x8}, @val={0x3c, 0x2, 0x0, 0x1, [@NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0xd}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x10}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_FIB_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_FIB_RESULT={0x8}, @NFTA_FIB_RESULT={0x8, 0x2, 0x1, 0x0, 0x2}]}}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_FLAGS={0x8, 0x3, 0x1, 0x0, 0x2}]}, {0x4f8, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_KEY_END={0x84, 0xa, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x3c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0x3}]}]}, @NFTA_SET_ELEM_OBJREF={0x9, 0x9, 'syz1\x00'}, @NFTA_SET_ELEM_KEY={0x464, 0x1, 0x0, 0x1, [@NFTA_DATA_VALUE={0x8a, 0x1, "0c1e1d2dfea7f824c702abae322d040877c12d145684f1936ea1f1eafee2861a1efb97852be143a8c366455c6c31610cc8e608dad819e9745d4cb67e5a02a687395b1882eca6de5807d8bc035ea597f40385d316f105588dc86e9666f9245a3bac5c446c55ec7cfddd1b1a51cceadd8e176ad6149856262e0da668287cf48b330f618a53808b"}, @NFTA_DATA_VERDICT={0x10, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x1c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x9c, 0x1, "9754e3225e3ed586ebfa3e23b869a65ccbe218831750864e4fbfecb6b49cee2fd5cb7ae31c12f26c4deece977d4b9d75cec1fb3fd85801a37feb0defa4020447dd549d62d8d5c28093ced102b80fa43cf6f03d5e24cc0829dc1ca910c87e89ff87a0bf25be7991c73e669911d7c09d20efdb280b642792346306cb3af7390d507fb820563517626400f5d601c4a6f16e3eead8545436378b"}, @NFTA_DATA_VALUE={0x9b, 0x1, "79a7e8a663e737a4c35e06129f32d7c7cb6dd892d6310a5bc43b9939dffbb65b8d2c8e794ef4435d915aa245907c20f45fa8b96496829c60ab85c92213af80f3d195f400fb32c8789cf5bd3ed949329fdf5a7bd51a0e16be5ca9165e9757f7d67d79bb9361f3fba88472d8fcbe6f653018d5205e3a883b4e8085dffe455382d033b1f9ce544788ea474414e55dec20bbf7ef547d8874a9"}, @NFTA_DATA_VALUE={0x99, 0x1, "bfdcffc31c116a4ac8381e9b0fc0508f0fbab7dbb9bb5dc86ee9273adddefcf97e6143bbc89890a1dc650ebf2f32530123c6f13b72c3c11c1927af0cc7464017a09394fe76b2f253719dfdc979cb1616b19959e407e57438b7dc436c61a7f0d8ff17bb0f61a2bb1e57ea256089d5cc16ea5d2db4a6a5909e88af3a5072913416a8a998f4e0c35d8369a0ac4daf397cc0f91ab2f212"}, @NFTA_DATA_VALUE={0xae, 0x1, "a3eec6d3a79c4406fd3a80d34e0adfe91729e0cbc99ae9dc0b53829bde5339a0359f5463d5ce4db772f54b802da8d68455c3a23bb9d203541be9cfa7105fd117c3d53ec2da4d86d0072d6d76856995e2b7a802d3897862e45b86328538a56c6ba24b8aef2c982e8ddccac47e5d3845510da4d6ab6b2473b6fd2daf9b76b083c809d8623553e4f6ed50720e9e7f26adbeae25d81d1fb2e708a087aab014b92cec5c0fef1f09b6c0b52110"}, @NFTA_DATA_VALUE={0x1d, 0x1, "1b59b514d894eb3009cc38ad322cc99ea04864d905bab49da0"}, @NFTA_DATA_VERDICT={0x48, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}, @NFTA_DATA_VALUE={0xba, 0x1, "b733270272cb77c6f20d1a0ea3e39cd56b4336743b245927a24017757081431bd8326383f3fae68216f8fdff3bb2f395ac9619244b8822b138039bc0eefd8136702e9080a9631d9c54bd6371651bce3efb41e678c09104f821ca416880cb16830a6b337a4f872db7001d0860608964395e370ee8579fdf8d73f6a2fa24036e0262fbf130b8c1108e7258083ae1d520a4b9150ec370d14827bb752e448d231d70a2831bb99a55fef89da3743070f44d0b2a71b7a4758d"}]}]}, {0x68, 0x0, 0x0, 0x1, [@NFTA_SET_ELEM_EXPIRATION={0xc, 0x5, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_USERDATA={0x57, 0x6, 0x1, 0x0, "6199f4e8bf728f565c1f24f1c039c77ca2fb2af754d4ca839096f3bb7f51e3238290a7a2a3d0a458effd637ddd0c0e0847cfefcbd98267bd6bd70f5d06e559acabc7ccb64f11172fe7e6032fa3357a7cb594bb"}]}]}]}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0xa}, @NFT_OBJECT_SECMARK=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x101, 0x0, 0x0, {0x7, 0x0, 0x6}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_TABLE={0x9, 0x1, 'syz1\x00'}}, @NFT_MSG_NEWOBJ={0xbc, 0x12, 0xa, 0xc00, 0x0, 0x0, {0xa, 0x0, 0x3}, @NFT_OBJECT_TUNNEL=@NFTA_OBJ_DATA={0xa8, 0x4, 0x0, 0x1, [@NFTA_TUNNEL_KEY_OPTS={0x18, 0x9, 0x0, 0x1, @NFTA_TUNNEL_KEY_OPTS_ERSPAN={0x14, 0x2, 0x0, 0x1, [@NFTA_TUNNEL_KEY_ERSPAN_V2_HWID={0x5, 0x3, 0x59}, @NFTA_TUNNEL_KEY_ERSPAN_VERSION={0x8, 0x1, 0x1, 0x0, 0x1}]}}, @NFTA_TUNNEL_KEY_ID={0x8, 0x1, 0x1, 0x0, 0x5}, @NFTA_TUNNEL_KEY_ID={0x8, 0x1, 0x1, 0x0, 0x8}, @NFTA_TUNNEL_KEY_IP6={0x6c, 0x3, 0x0, 0x1, [@NFTA_TUNNEL_KEY_IP6_FLOWLABEL={0x8, 0x3, 0x1, 0x0, 0x8}, @NFTA_TUNNEL_KEY_IP6_SRC={0x14, 0x1, @empty}, @NFTA_TUNNEL_KEY_IP6_FLOWLABEL={0x8, 0x3, 0x1, 0x0, 0x1000}, @NFTA_TUNNEL_KEY_IP6_SRC={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x22}}, @NFTA_TUNNEL_KEY_IP6_SRC={0x14, 0x1, @dev={0xfe, 0x80, '\x00', 0x44}}, @NFTA_TUNNEL_KEY_IP6_DST={0x14, 0x2, @local}, @NFTA_TUNNEL_KEY_IP6_FLOWLABEL={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_TUNNEL_KEY_FLAGS={0x8, 0x4, 0x1, 0x0, 0x6}, @NFTA_TUNNEL_KEY_TOS={0x5, 0x5, 0x7}]}}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x221c}, 0x1, 0x0, 0x0, 0x40008}, 0x20000845) sendmsg$nl_route(r2, &(0x7f0000002940)={&(0x7f0000002880)={0x10, 0x0, 0x0, 0x10000}, 0xc, &(0x7f0000002900)={&(0x7f00000028c0)=@bridge_newvlan={0x18, 0x70, 0x10, 0x70bd29, 0x25dfdbfe}, 0x18}, 0x1, 0x0, 0x0, 0xc0}, 0x80) getsockname$packet(r2, &(0x7f0000002980)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @remote}, &(0x7f00000029c0)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000002ac0)={&(0x7f0000002a00)={0x10, 0x0, 0x0, 0x1000}, 0xc, &(0x7f0000002a80)={&(0x7f0000002a40)=@newtfilter={0x34, 0x2c, 0x100, 0x70bd2a, 0x25dfdbfb, {0x0, 0x0, 0x0, r6, {0x4, 0x5}, {0x4, 0xfff1}, {0x8, 0xffff}}, [@TCA_CHAIN={0x8, 0xb, 0xf63c}, @TCA_RATE={0x6, 0x5, {0x6, 0x2}}]}, 0x34}, 0x1, 0x0, 0x0, 0x4800}, 0x0) ioctl$ifreq_SIOCGIFINDEX_wireguard(0xffffffffffffffff, 0x8933, &(0x7f0000002b00)={'wg1\x00', 0x0}) getsockopt$inet_sctp6_SCTP_DEFAULT_SEND_PARAM(r2, 0x84, 0xa, &(0x7f0000002b40)={0xbb, 0x8, 0x1, 0x4, 0xffffffb8, 0xb, 0x401, 0x6, r5}, &(0x7f0000002b80)=0x20) r8 = socket$igmp6(0xa, 0x3, 0x2) r9 = accept$ax25(r2, 0x0, &(0x7f0000002bc0)) r10 = socket(0x1e, 0x2, 0x3) sendmsg$nl_generic(r10, &(0x7f0000002d80)={&(0x7f0000002c00)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f0000002d40)={&(0x7f0000002c40)={0xe8, 0x25, 0x1, 0x70bd27, 0x25dfdbfd, {0x11}, [@generic, @typed={0x4, 0xd2}, @typed={0xa, 0x13f, 0x0, 0x0, @str='quota\x00'}, @typed={0x8, 0x11b, 0x0, 0x0, @fd=r8}, @generic="bbb366adef32fb70ad43b7835d694ef8380f519e788ffd198e9ac92e15151e69a8512095c84ed37defcfe4573f003873624c702a81149ba9707ca6aaa8e0e7d8c49e672e0b29a219295fdff9eca50bd6bd0803443e9d022f34d09e51961c567e0845e77b1e9c655a2e59d7936d4a5b4c1e7a78c8ab43535f18ac89a8dacc637e27df4b3abcfca90a98fafbfd356f125b91b3053896c858ef9a8899fa84a93b3b094cce1439f04e4fc250b30e2ae738f64fbd3d99c6a138824f005a"]}, 0xe8}, 0x1, 0x0, 0x0, 0x4000000}, 0x4000880) socket$inet_sctp(0x2, 0x5, 0x84) sendmsg$TIPC_NL_LINK_SET(r0, &(0x7f0000003140)={&(0x7f0000002dc0)={0x10, 0x0, 0x0, 0x4000200}, 0xc, &(0x7f0000003100)={&(0x7f0000002e00)={0x2fc, r1, 0x20, 0x70bd2d, 0x25dfdbfd, {}, [@TIPC_NLA_SOCK={0x3c, 0x2, 0x0, 0x1, [@TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x7fff}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x4f}, @TIPC_NLA_SOCK_ADDR={0x8, 0x1, 0x1cea}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0xffff7fff}, @TIPC_NLA_SOCK_HAS_PUBL={0x4}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x1}, @TIPC_NLA_SOCK_REF={0x8, 0x2, 0x2}]}, @TIPC_NLA_BEARER={0x1c, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x1}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x9}, @TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x4}]}, @TIPC_NLA_PUBL={0x1c, 0x3, 0x0, 0x1, [@TIPC_NLA_PUBL_LOWER={0x8, 0x2, 0x80000000}, @TIPC_NLA_PUBL_TYPE={0x8, 0x1, 0xff}, @TIPC_NLA_PUBL_UPPER={0x8, 0x3, 0xa83}]}, @TIPC_NLA_BEARER={0x68, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_PROP={0xc, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3f60}]}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz1\x00'}, @TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}}, {0x20, 0x2, @in6={0xa, 0x4e21, 0x7, @remote, 0x1272}}}}]}, @TIPC_NLA_BEARER={0xd4, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_NAME={0xd, 0x1, @udp='udp:syz2\x00'}, @TIPC_NLA_BEARER_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x3}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x8001}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}]}, @TIPC_NLA_BEARER_PROP={0x54, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1e}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x10000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x13}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x6}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x1000}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x10}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x2}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x1}]}, @TIPC_NLA_BEARER_NAME={0x18, 0x1, @l2={'eth', 0x3a, 'veth0_to_batadv\x00'}}, @TIPC_NLA_BEARER_UDP_OPTS={0x38, 0x4, {{0x14, 0x1, @in={0x2, 0x4e23, @loopback}}, {0x20, 0x2, @in6={0xa, 0x4e22, 0x1, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01', 0x2}}}}]}, @TIPC_NLA_MEDIA={0xe0, 0x5, 0x0, 0x1, [@TIPC_NLA_MEDIA_PROP={0x4c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x73}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x1}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0xd}, @TIPC_NLA_PROP_TOL={0x8}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x11}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x768}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x6}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x12}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0xfffffff7}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}, @TIPC_NLA_MEDIA_PROP={0x1c, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_MTU={0x8, 0x4, 0x7}, @TIPC_NLA_PROP_WIN={0x8, 0x3, 0x81}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x4}]}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_WIN={0x8, 0x3, 0x401}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x6}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'udp\x00'}, @TIPC_NLA_MEDIA_PROP={0x14, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x7}, @TIPC_NLA_PROP_PRIO={0x8, 0x1, 0x7}]}, @TIPC_NLA_MEDIA_PROP={0x24, 0x2, 0x0, 0x1, [@TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}, @TIPC_NLA_PROP_MTU={0x8, 0x4, 0x9}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x80000001}, @TIPC_NLA_PROP_TOL={0x8, 0x2, 0x4}]}, @TIPC_NLA_MEDIA_NAME={0x8, 0x1, 'eth\x00'}]}, @TIPC_NLA_NET={0x14, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_ADDR={0x8, 0x2, 0x101}, @TIPC_NLA_NET_ADDR={0x8}]}, @TIPC_NLA_NET={0x2c, 0x7, 0x0, 0x1, [@TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0xc}, @TIPC_NLA_NET_ID={0x8, 0x1, 0x5}, @TIPC_NLA_NET_ID={0x8, 0x1, 0xfffffbff}, @TIPC_NLA_NET_NODEID_W1={0xc, 0x4, 0x8}]}, @TIPC_NLA_BEARER={0xc, 0x1, 0x0, 0x1, [@TIPC_NLA_BEARER_DOMAIN={0x8, 0x3, 0x5a}]}, @TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0x300}]}]}, 0x2fc}, 0x1, 0x0, 0x0, 0x8000}, 0x40) getsockopt$IP_SET_OP_VERSION(r10, 0x1, 0x53, &(0x7f0000003180), &(0x7f00000031c0)=0x8) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(r9, 0x89f3, &(0x7f0000003380)={'syztnl0\x00', &(0x7f0000003300)={'ip6tnl0\x00', r7, 0x29, 0x8, 0x5, 0x7, 0x3b, @local, @private1={0xfc, 0x1, '\x00', 0x1}, 0x10, 0x20, 0x101, 0xf3}}) sendto$packet(r10, &(0x7f0000003200)="8879d589df92b2fd43d92e32cd07c56c6ef0b7cbdb90d4644e1a75778ab508e43a4c34c6aeb3a2639f8110d50b3ab911e0627dd3b1b99ae11f394b58d20908af14e5315ee1f1046173b9a9b4f38321cb8151308ef62978bf31422829b838d7533537a2a2c0f023aec3c74f4fde4acb2429850ed6b9265db2f0bfba7192c4cea439a6bd3463f1d90fc432bf46581bfe3fb1bfc9303bd237ae47c619351a47bb25ac5690f4c8528828703f6f7d543ef2a098d4dde9dfb2e84538630a17d7161d80be4176948259393ca244", 0xca, 0x40, &(0x7f00000033c0)={0x11, 0x10, r11, 0x1, 0xed, 0x6, @broadcast}, 0x14) socket$inet6(0xa, 0x6, 0xffffff00) connect$inet6(r10, &(0x7f0000003400)={0xa, 0x4e20, 0x5, @mcast2, 0x401}, 0x1c) ioctl$EXT4_IOC_GETSTATE(r2, 0x40046629, &(0x7f0000003440)) r12 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_CRIT_PROTOCOL_STOP(r12, &(0x7f0000003580)={&(0x7f0000003480)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000003540)={&(0x7f0000003500)={0x1c, 0x0, 0x800, 0x70bd2c, 0x25dfdbff, {{}, {@val={0x8}, @void}}, [""]}, 0x1c}, 0x1, 0x0, 0x0, 0x2004000}, 0x5) 5.875576897s ago: executing program 3 (id=860): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000400), 0xffffffffffffffff) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r3, 0x1, 0x4c, &(0x7f0000000000), 0x4) sendmsg$inet(r2, &(0x7f0000000140)={0x0, 0x0, 0x0}, 0x0) recvmsg$unix(r3, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000040)=[@rights={{0x38, 0x1, 0x1, [0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff]}}], 0x38}, 0x20002) socket$nl_xfrm(0x10, 0x3, 0x6) r4 = socket$packet(0x11, 0x3, 0x300) setsockopt$SO_ATTACH_FILTER(r4, 0x1, 0x1a, &(0x7f0000000140)={0x2, &(0x7f0000000080)=[{0x28, 0x0, 0x0, 0xfffff01c}, {0x16}]}, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$HCIINQUIRY(r5, 0x400448ca, 0x0) r6 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_PEER_ADDR_PARAMS(r6, 0x84, 0x9, &(0x7f0000000140)={0x0, @in={{0x2, 0x0, @empty}}, 0x0, 0x0, 0x3f8, 0x0, 0x51}, 0x9c) bind$inet6(r6, &(0x7f00004b8fe4)={0xa, 0x4e26, 0x0, @loopback}, 0x1c) sendto$inet6(r6, &(0x7f0000847fff)='X', 0xcf88, 0x0, &(0x7f000005ffe4)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) sendto$inet6(r6, 0x0, 0x0, 0x0, 0x0, 0x0) ioctl$SIOCSIFHWADDR(0xffffffffffffffff, 0xff03, 0x0) sendmsg$TIPC_NL_KEY_SET(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000480)={0x20, r1, 0x1, 0x70bd2c, 0x25dfdbfc, {}, [@TIPC_NLA_NODE={0xc, 0x6, 0x0, 0x1, [@TIPC_NLA_NODE_REKEYING={0x8, 0x6, 0xa30}]}]}, 0x20}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 5.863725636s ago: executing program 4 (id=861): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, 0x0, 0x0) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_DEL_STATION(r1, &(0x7f0000000200)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x40000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000080)={0x114, 0x0, 0x400, 0x70bd2d, 0x25dfdbfc, {{}, {@void, @void}}, [@NL80211_ATTR_STA_LISTEN_INTERVAL={0x6}, @NL80211_ATTR_STA_CAPABILITY={0x6, 0xab, 0x4}, @NL80211_ATTR_STA_SUPPORTED_OPER_CLASSES={0xc9, 0xbe, "0ce33430f06aff9b762b7b6a38726207371b864a7141d084555459267aa6bf2f99c114e95fc66af0a1d96f71ab514a3ab870135a2e1bc252afe7224a72db16a7eeda2e62e86a406542fc22cdb943d9623e01a82415098b44f3105f196e7c0ab5fd48cedef687974279fcfa1d8e2a4e1b625f3c8bb7d3ff026b1a043d2d89c28ae28cb8af58c6166567bb6dd36b7b1b502b0dc9eb0d7e66af45a3c446cbb8bfe2fc31a64f9c0717cf6ef073e1f0e811fb91b23d6f583ed1436999c3974f06287e28de2179e9"}, @NL80211_ATTR_REASON_CODE={0x6, 0x36, 0x8}, @NL80211_ATTR_STA_FLAGS2={0xc, 0x43, {0xfffffffe, 0x2}}, @NL80211_ATTR_REASON_CODE={0x6}, @NL80211_ATTR_STA_VLAN={0x8}]}, 0x114}, 0x1, 0x0, 0x0, 0x40081}, 0x10) r2 = socket(0x23, 0x3, 0xbffffffc) r3 = socket$inet6(0xa, 0x2, 0x3a) connect$inet6(r3, &(0x7f0000000640)={0xa, 0x0, 0x0, @local, 0x46}, 0x1c) sendto$inet6(r3, &(0x7f0000000000)="800037bbfa9ba1ce", 0x8, 0x0, &(0x7f0000000180)={0xa, 0x0, 0x0, @mcast2, 0x7}, 0x1c) write(r2, &(0x7f0000000000)="2400000011005f0414f9f40700090400810000003c0000000000000008000f0001000000", 0x24) 5.714193073s ago: executing program 1 (id=862): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) (async) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000180), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f00000001c0)={'wpan0\x00'}) sendmsg$NL802154_CMD_NEW_SEC_KEY(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000000)=ANY=[@ANYBLOB='|\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="3f9d00000000000000001700000008000300", @ANYRES32=r1, @ANYBLOB="60003080050002000000000014000400403a050c5bae9c544ef2b6d713459a7a1c000180050002000000000008000400050000000800010002000000240003000000000000cd"], 0x7c}}, 0x40000) 5.541030823s ago: executing program 4 (id=863): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x1e, &(0x7f0000000200)=0x1, 0x4) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000600), r1) sendmsg$IEEE802154_LLSEC_GETPARAMS(r1, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={&(0x7f0000000740)={0x20, r2, 0x1, 0x70bd25, 0x25dfdbff, {}, [@IEEE802154_ATTR_DEV_NAME={0xa, 0x1, 'wpan1\x00'}]}, 0x20}, 0x1, 0x0, 0x0, 0x24040800}, 0x40014) sendto$inet6(r0, 0x0, 0x0, 0x20000841, &(0x7f0000b63fe4)={0xa, 0x0, 0x0, @empty}, 0x1c) 5.529570284s ago: executing program 1 (id=864): r0 = socket$kcm(0x10, 0x2, 0x0) setsockopt$netlink_NETLINK_TX_RING(0xffffffffffffffff, 0x10e, 0xc, 0x0, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="9feb0100180000000000000038000000380000000300000001000000000000010000000000000000000000000000000105000000100000000000000000000003000000000100000002"], 0x0, 0x53, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = socket$kcm(0xa, 0x5, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r1, 0x890b, &(0x7f0000000000)={r1}) sendmsg$inet(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f00000006c0)="5c00000013006bcd9e3fe3dc6e48aa31086b8703110000001f00000000000000040014000d000a000d0000009ee517d34460bc24eab556a705251e6182949a3651f60a84c9f5d1938037e786a6d0bdd7fcf50e4509c5bb5a00f69853", 0x5c}], 0x1, 0x0, 0x0, 0x1f000801}, 0x4004080) setsockopt$XDP_UMEM_COMPLETION_RING(r0, 0x11b, 0x6, &(0x7f0000000080)=0x801, 0x4) 5.517353925s ago: executing program 3 (id=865): r0 = socket$igmp6(0xa, 0x3, 0x2) setsockopt$IP6T_SO_SET_REPLACE(r0, 0x29, 0x40, &(0x7f0000000b00)=@raw={'raw\x00', 0x8, 0x3, 0x428, 0xd0, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x358, 0xffffffff, 0xffffffff, 0x358, 0xffffffff, 0x3, 0x0, {[{{@ipv6={@private0, @mcast2, [], [], 'veth0_macvtap\x00', 'dvmrp1\x00'}, 0x0, 0xa8, 0xd0}, @common=@unspec=@NFQUEUE0={0x28}}, {{@ipv6={@remote, @ipv4={'\x00', '\xff\xff', @dev}, [], [], 'wg1\x00', 'gre0\x00'}, 0x0, 0x258, 0x288, 0x0, {}, [@common=@inet=@hashlimit1={{0x58}, {'pim6reg\x00', {0x0, 0x0, 0x5, 0x0, 0x0, 0x7, 0x3ff}}}, @common=@inet=@hashlimit3={{0x158}, {'wg1\x00', {0x3, 0x0, 0x41, 0x0, 0x0, 0x1000, 0x6, 0x3}}}]}, @common=@unspec=@CONNMARK={0x30}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28, '\x00', 0x7}}}}, 0x488) unshare(0x62040200) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.net/syz0\x00', 0x1ff) r1 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r2 = openat$cgroup_ro(r1, &(0x7f0000000040)='blkio.bfq.io_queued_recursive\x00', 0x0, 0x0) preadv(r2, &(0x7f00000000c0)=[{&(0x7f0000000340)=""/134, 0x86}], 0x1, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, 0x0, 0x0) bind$inet6(0xffffffffffffffff, 0x0, 0x0) setsockopt$sock_int(0xffffffffffffffff, 0x1, 0xf, &(0x7f0000000180)=0x80000004, 0x4) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000180), 0xffffffffffffffff) r5 = socket$inet6(0xa, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f0000000000)={'wlan0\x00', 0x0}) sendmsg$NL80211_CMD_SET_TID_CONFIG(r3, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)={0x30, r4, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x14, 0x11d, 0x0, 0x1, [{0x10, 0x0, 0x0, 0x1, [@NL80211_TID_CONFIG_ATTR_OVERRIDE={0x4}, @NL80211_TID_CONFIG_ATTR_TIDS={0x6, 0x5, 0x95}]}]}]}, 0x30}}, 0x0) sendmsg$NL80211_CMD_NEW_KEY(0xffffffffffffffff, &(0x7f0000000380)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x10}, 0xc, &(0x7f0000000340)={&(0x7f0000000140)={0x2c, r4, 0x0, 0x70bd2d, 0x25dfdbfe, {{}, {@void, @val={0xc, 0x99, {0x0, 0x7}}}}, [@NL80211_ATTR_KEY_DATA_WEP40={0x9, 0x7, "1a1d464dd7"}]}, 0x2c}, 0x1, 0x0, 0x0, 0x4000}, 0xdaa39a779f7dbb06) r7 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r7, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000580)=ANY=[@ANYBLOB="1c0000001800ffff00000000000000000a00000000000009"], 0x1c}}, 0x0) unshare(0x8000800) r8 = socket$nl_route(0x10, 0x3, 0x0) r9 = socket$netlink(0x10, 0x3, 0x0) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r9, &(0x7f0000000300)={&(0x7f0000000500)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f00000001c0)={0x0, 0x5c}, 0x1, 0x0, 0x0, 0x20008cd9}, 0x4005) ioctl$sock_SIOCGIFINDEX(r9, 0x8933, &(0x7f0000000200)={'geneve1\x00', 0x0}) sendmsg$nl_route(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000004c0)=ANY=[@ANYBLOB="4800000010000100"/20, @ANYRES32=r10, @ANYBLOB="0000000000000000280012800b00010067656e657665000018000280140007"], 0x48}, 0x1, 0x2}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x16, 0x16, &(0x7f0000000440)=ANY=[@ANYBLOB="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"], &(0x7f00000000c0)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @flow_dissector, 0xffffffffffffffff, 0x8, &(0x7f0000000040), 0x1f1, 0x10, &(0x7f0000000000), 0xffffffffffffffa6, 0x0, 0xffffffffffffffff, 0x60, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) r11 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r11, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000340)=@newlink={0x44, 0x10, 0xffffff1f, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x1000}, [@IFLA_LINKINFO={0x24, 0x12, 0x0, 0x1, @ipip6={{0xb}, {0x14, 0x2, 0x0, 0x1, [@IFLA_IPTUN_PROTO={0x5, 0x9, 0x29}, @IFLA_IPTUN_FLAGS={0x8, 0x8, 0x1e}]}}}]}, 0x44}}, 0x20004000) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000200)={0xd, 0x5, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000fb00185a00000b000000000000000000000495"], &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1, '\x00', 0x0, 0xb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) syz_emit_ethernet(0x7a, &(0x7f0000000080)=ANY=[@ANYBLOB="aaaaaaaaaaaaffffffffffff86dd6578ae0b00442ffffc010000000000000000000000000001ff0200000000000000000000000000010421f0"], 0x0) 5.022938599s ago: executing program 4 (id=866): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_tx_ring(r1, 0x107, 0x5, &(0x7f00000000c0)=@req3={0x8000, 0x6, 0x8000, 0x6}, 0x1c) mmap(&(0x7f0000000000/0x2000)=nil, 0x30000, 0x2, 0x11, r1, 0x0) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.1GB.usage_in_bytes\x00', 0x275a, 0x0) mmap(&(0x7f0000017000/0x4000)=nil, 0x4000, 0x0, 0x28011, r2, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000dc0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0xa}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @match={{0xa}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_MATCH_NAME={0x8, 0x1, 'udp\x00'}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x4) 4.766544506s ago: executing program 4 (id=867): r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$ieee802154(&(0x7f00000001c0), r0) sendmsg$IEEE802154_ADD_IFACE(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000300)={0x28, r1, 0x1, 0x0, 0x0, {}, [@IEEE802154_ATTR_PHY_NAME={0x9, 0x1f, 'phy0\x00'}, @IEEE802154_ATTR_DEV_TYPE={0x5, 0x20, 0x1}]}, 0x28}}, 0x0) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), r0) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000080)={'wpan0\x00', 0x0}) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000180), r4) ioctl$sock_SIOCGIFINDEX_802154(r4, 0x8933, &(0x7f0000000700)={'wpan0\x00', 0x0}) sendmsg$IEEE802154_LLSEC_ADD_KEY(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)={0x1c, r5, 0x607, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r6}]}, 0x1c}}, 0x24044884) sendmsg$NL802154_CMD_GET_SEC_DEVKEY(r0, &(0x7f0000000240)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x200000}, 0xc, &(0x7f0000000200)={&(0x7f0000000140)={0x6c, r2, 0x0, 0x70bd28, 0x25dfdbfc, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0xbdb6987e4c00dfa7}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x200000002}]}, 0x6c}, 0x1, 0x0, 0x0, 0x4004800}, 0x4841) 4.707459535s ago: executing program 1 (id=868): r0 = socket$inet6(0xa, 0x800000000000002, 0x0) connect$inet6(r0, &(0x7f0000000040)={0xa, 0x0, 0x0, @mcast2, 0x2}, 0x1c) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000580)=ANY=[@ANYBLOB="580000001000010400"/20, @ANYRES32=0x0, @ANYBLOB="2b03000000000000300012800b00010067656e6576650000200002800800010001000000140007000000000000000005000000000000000108000a0071"], 0x58}}, 0x0) pipe(&(0x7f0000000280)={0xffffffffffffffff}) r3 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_JOIN_GROUP(r3, 0x29, 0x2a, &(0x7f0000000140)={0x0, {{0xa, 0x0, 0x0, @mcast2}}}, 0x88) setsockopt$inet6_MCAST_MSFILTER(r3, 0x29, 0x30, &(0x7f0000000b00)={0xb, {{0xa, 0x0, 0x0, @mcast2}}, 0x0, 0x2, [{{0xa, 0x0, 0x0, @remote}}, {{0xa, 0x0, 0x0, @remote}}]}, 0x190) syz_emit_ethernet(0x4e, &(0x7f0000000480)=ANY=[@ANYBLOB="ffffffffffff0002aaaaaa0086dd6000000000183a00fe8000000000000000000000000000bbff020000000000000000000000000001"], 0x0) syz_genetlink_get_family_id$l2tp(&(0x7f00000000c0), r2) connect$inet6(r0, &(0x7f0000000000)={0xa, 0x4e21, 0x0, @ipv4={'\x00', '\xff\xff', @remote}}, 0x1c) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x4, 0x16, &(0x7f0000000180)=ANY=[@ANYBLOB="611230000000000061134c0000000000bf2000000000000015000200071b1700bd030100000000009500000000000000bc26080000000000bf67000000000000070300000fff0700670200000300000016060a000ee600f0bf050000000000000f650000000000006507f4ff02000000070700004c0040001f75000000000000bf54000000000000070500000300f9ffad430100000000009500000000000000050000000000000095000000000000004d9bd591d568253e9988431ec068e3a82983d58719d72183f2cb7f43dd55788be820b236dcb695dbfd737cbf719506d2d6b05fe7030586"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000000cc0)=[{&(0x7f0000000380)="61a3d0980cbbe98ae0ce7328117de9295d99b41c7ca0c23488772d71d21b5af32a5d0df5d1153aa8fa324025b6041abc73", 0x31}, {&(0x7f00000004c0)="1a603bc1f20cf4a3a7f98ebe355440281c4a5af60914d190b1fdf63dc628e28bb0b4852cc90bb1a766adec485492b849174908af323660e49c208d873bc8403bbacb27feaa512c430862cbc37daf4625a910502ca5f81001e24b22a74ed3df72a3cee97f9bfe7ae64d5b1da162a43b5b9d39eda178010d13bec35222d8ded13e43c4ec3d88c6a61715dd9840c4aa8668cc29e7bb2d6e440aac701bbac3fccd1c869c6a1a75e5bb1934ac0138b0e593b1355ed47c0c675fa9f1b12ed6eb553644147ff939dab241d9", 0xc8}, {&(0x7f00000005c0)="41d7586702d506f5ea8b19e9282aa7832d1d712664fa5feac2d49d57839e0b7fd14501e90288121d1b49c10fc15b22510391b0f0fa7398466e183aa7d7dde0ebcf15f9e723d4069976ec44d6a99439bd4995fb1c5fe65314f1c4e81edf46b84cc5d780e458c6c517ce4c9e68d375ae5fe979c021b17c68b6a4e2fd2d6045776af31bd19ea699ea892509401c0d7a7ab350b5bdb32fb378f5ee875f079c5b2091e789400c440f9600c40f9991144b1f3873e2050647611533ac26fc2eff046e5d0660ecc3abffdd53b9e6bf221d99e6f7a1fce44c250c786566acc3ce97b8f263d9d4bf03", 0xe4}, {0x0}, {&(0x7f0000000740)="82132727bd06f32085eda6e6038c4bd49ff765a97c904814401b43358e37ab53b60f602ada968e0cb9cc1bf291a1d566e6c0b675ff1ebe38dcd46ee865d90573b5aab6c1c9837fd0147b4c9ce8f5d102a7c5899cb6c4e59426833e99bb09a44af74b29764c74dff8cfdb7f066a1fec6593291acfddf4c03710305d30e1a95e8b9d60f888f99f457a103beed0a28a4687b6f2c6b610b0d72223e4656033dd50299ab806d4ac7c31fee3c3060839e9a5f6e6cf7a0d6efe0358efb99a515d580f6cccbdf895c3cad0c041f8c137688d059a4f1d906a", 0xd4}, {&(0x7f0000001880)="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", 0x2fc}, {0x0}], 0x7, 0x0, 0x0, 0x20000000}, 0xa}], 0x1, 0x4000300) 4.479997638s ago: executing program 4 (id=869): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'sit0\x00', 0x0}) r2 = socket$inet_icmp(0x2, 0x2, 0x1) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) ioctl$sock_bt_hci(r3, 0x400448de, &(0x7f0000000100)) unshare(0x68040200) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000000)=ANY=[@ANYBLOB="4800000010001fff"], 0x3}}, 0x0) r4 = epoll_create1(0x0) socket$inet_udp(0x2, 0x2, 0x0) ioctl$FS_IOC_SETFLAGS(r4, 0x40088a01, &(0x7f0000000000)) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) socket$isdn(0x22, 0x3, 0x11) r5 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f00000010c0)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) pipe(&(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000b40)=ANY=[@ANYBLOB="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"], &(0x7f0000000f40)=""/4089, 0x30, 0xff9, 0x8, 0x0, 0x0, @void, @value}, 0x20) socket(0x29, 0x5, 0x3) r8 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r8, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000002000)=ANY=[@ANYBLOB="94010000100013070000000000000000fe80ac141400000000000000000000000000000000000000000000000000000000000000000000000000000000000000a8dccaa12228021126e816ae2e99bd3af9eb246fbbbf55162aaf5c45691f70fa3893646828f07cdf6a0168ebee759599a9980a31a74e8504494eafadae0436d456c5f600"/145, @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="ac1414bb00000000000000000000000000000000320000007f000001000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000002000000000000000000000048000200656362286369706865725f6e756c6c29000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000004c001400736861310000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000007000000"], 0x184}}, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(r6, &(0x7f00000003c0)={&(0x7f0000000140)={0x10, 0x0, 0x0, 0x4000}, 0xc, &(0x7f0000000340)={&(0x7f0000000d00)={0x198, 0x0, 0x2, 0x201, 0x0, 0x0, {0x5, 0x0, 0x3}, [@CTA_EXPECT_FLAGS={0x8}, @CTA_EXPECT_FLAGS={0x8, 0x8, 0x1, 0x0, 0x1}, @CTA_EXPECT_FN={0x13, 0xb, 'callforwarding\x00'}, @CTA_EXPECT_MASK={0x74, 0x3, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private1}, {0x14, 0x4, @rand_addr=' \x01\x00'}}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x1}}, @CTA_TUPLE_IP={0x2c, 0x1, 0x0, 0x1, @ipv6={{0x14, 0x3, @private0}, {0x14, 0x4, @private2}}}]}, @CTA_EXPECT_NAT={0xec, 0xa, 0x0, 0x1, [@CTA_EXPECT_NAT_TUPLE={0xc, 0x2, 0x0, 0x1, [@CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x90, 0x2, 0x0, 0x1, [@CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5e}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x1}}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x6}}, @CTA_TUPLE_IP={0x0, 0x1, 0x0, 0x1, @ipv4={{0x0, 0x1, @initdev={0xac, 0x1e, 0x1, 0x0}}, {0x0, 0x2, @broadcast}}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @empty}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_PROTO={0x0, 0x2, 0x0, 0x1, {0x0, 0x1, 0x84}}, @CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @broadcast}, {0x8, 0x2, @empty}}}]}, @CTA_EXPECT_NAT_DIR={0x8, 0x1, 0x1, 0x0, 0x1}, @CTA_EXPECT_NAT_TUPLE={0x3c, 0x2, 0x0, 0x1, [@CTA_TUPLE_IP={0x14, 0x1, 0x0, 0x1, @ipv4={{0x8, 0x1, @remote}, {0x8, 0x2, @empty}}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x2}, @CTA_TUPLE_PROTO={0xc, 0x2, 0x0, 0x1, {0x5, 0x1, 0x84}}, @CTA_TUPLE_ZONE={0x6, 0x3, 0x1, 0x0, 0x3}, @CTA_TUPLE_ZONE={0x6}]}]}]}, 0x198}, 0x1, 0x0, 0x0, 0x44000}, 0x810) r9 = socket$packet(0x11, 0x3, 0x300) getsockname$packet(r9, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @random}, &(0x7f00000000c0)=0x14) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), r7) sendmsg$NL80211_CMD_FRAME(r6, &(0x7f00000002c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x8000000}, 0xc, &(0x7f0000000280)={&(0x7f0000000cc0)=ANY=[@ANYBLOB=' \x00\x00\x00', @ANYRES16=r10, @ANYBLOB="00082abd7000fcdbdfb217f732d55fe66dc4d39ffe187a09253b0004000400cd0004008e0004008700"], 0x20}, 0x1, 0x0, 0x0, 0x4000809}, 0x24000090) vmsplice(r6, &(0x7f00000009c0)=[{&(0x7f0000000400)="0894a56efa18eb75361451524c6ff8c7546a73670c35d441680576311fab246a707c38a68fcde998910b048db195b88a", 0x30}, {&(0x7f0000000440)="aa29c25865850498ae5e030703401fb5a1d60c7c0af893a192c7471cffb3637b3f10cb0d95b6bfb7f5d5600cf620ed1a71ff88c0e452044c8ebd425f0c29cfd3bd36df4d291ba938211b3f2551bbad70719523c89efec51291495b67187864cb0b12013736576a3b0d3267a2e422f832d019eed3008caa", 0x77}, {&(0x7f00000005c0)="8ea6c47090bd6477285ec097ab757fb6212eae0a63b6e5a9e0c523c8c3f754499293f5ee60d1df143d32e8d4eabfbdda6f4cf58dd57ff79d5ae9ac5a1b80847ee75b8cd194ef6aecd1565298115a6fecf60bcbb0126eacd80aa1f685240262cedaf29544f0e6a0c45d6918bf10aca9b197e33fd200a5f7859133fdccad57cd56cf7ac3e4264be2f32398ce232ea7cc8f2112c71317dffcc73e3c641eb1525045c401138a08fcf7cfcfae30aa2837b92705b8c43e77448e91983807c53213e3e3389c5e992c0a5c25eb70fa484806b4e005c54e17c42bf2b4bbe72671", 0xdc}, {&(0x7f00000006c0)="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", 0xfd}, {&(0x7f00000004c0)="4a998f53498f6e55b50d216c2b0a02fb01d3ed55f4500ae04c64d2201d6442ac19074c809c7ffcc443e56ddcf10fc8fc31cab00f5befce36856de3b4af50080cabfc7f37a8f1db5f45ff0457d0ed51b21cd4f8494b4351384ead41d2b7cfae76cfe53342ec2c35556af594e9a032a29cca21b8777470e97f8be6ab457c812b65d267e1fd9b1bf1fa19a18d676ad4a583c6ddd3ce94a323726a09bca5cba083af84a8c0667d96835e66bb6d3ad1cf07820ad50b77063c4f6e", 0xb8}, {&(0x7f0000000a40)="e9f3a6e9c2670e0b3fafd51b7144db940d3e8fb455ebe47e11db72e0b2d39a96dd352dd0add9041139f98ed03b5379d304f5f1a52c1b0b609f0cd3a864e2f863a64e6409b90209ca873225b4c5bdc1dda730ad1908eb439456ac4441310e8961c72aff0aeec91929056759cb82e8e4dafb4fb12e4347765568e3e3ac0ad8a0b2addc00d0eda5381305e4ea7ee1bd12c1f1b583bc2cdfffcb7b05c9d88efb3f4e7dab0e721667b990dadd6b7b96cf8e39b79e6d60a21e152df432b2562096044e7c4258314bf273635bc230f5554ccb44aed385010000009d402da1a0ed8dd6954c01d8b6f8c51f6cca38ca7fab5571d6ee", 0xf1}, {&(0x7f0000000840)="6b288c3693f1713f1e7d5b47c002e6775ef048d9b0fa947d49541d6ab1d1cb8bf7e00e8d5c7cec320e05f2ab34cd29493b654bf321f6672bfdb605e811704a96fbd3e3901b2d2676ab6deb1c9b30aa93b155833a00763604839ca09ac39c1d3700a0a40d2d9027ebbcc7036156b98f8dd4ab6d967ded91afbfcbea7dace8f393b4a9a5438fffdc56f07ef2b4687edebcb8b57a6ce832af891c0b19fea7b96285f9ee", 0xa2}, {&(0x7f0000000900)="7f42b10a6d0d7ff9356790e66d1a5268c06868527ceaabdff41968cb32c55e3e149bf4330b34627aaf166b4ea4fc244bb0a23f0d9b1fe5785121d6dc43b759c0ba60e24f9d8c2e42053b1cf7ddb5190d71cf890b92e4bc386f24b037b798390833ee11ec98a2f2173b2565d645f285d6ec029caefd7c6dc4b50b8ea7d4e75894f5ded979c3d8468b7eddf93cd631d3f3361dfa6e723880b2d7d9031b0dff7401a5f86d77d26e4f82a0c494266a29989d3c9a5181ad69ecef88869ee4bc35cf9e", 0xc0}], 0x8, 0xf) r11 = syz_genetlink_get_family_id$ethtool(&(0x7f00000007c0), r7) sendmsg$ETHTOOL_MSG_EEE_SET(r2, &(0x7f0000000c80)={&(0x7f0000000300)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000800)={&(0x7f0000001f40)={0x8c, r11, 0x800, 0x70bd2a, 0x25dfdbfb, {}, [@ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_ENABLED={0x5}, @ETHTOOL_A_EEE_TX_LPI_ENABLED={0x5}, @ETHTOOL_A_EEE_HEADER={0x60, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'ip6_vti0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r1}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg2\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'vcan0\x00'}]}]}, 0x8c}, 0x1, 0x0, 0x0, 0x48018}, 0x40) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0x19, 0x4, 0x4, 0xa, 0x0, 0x1, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000180)={r12, &(0x7f0000000100), &(0x7f0000000000)=""/8, 0x2}, 0x20) sendmsg$nl_route_sched(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000580)={&(0x7f0000000080)=@newqdisc={0x24, 0x25, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}}, 0x24}}, 0x0) 121.546149ms ago: executing program 1 (id=870): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000340)=ANY=[@ANYBLOB="68000000020605000000000000100000000000000e0003006269746d61703a697000000005000400000000000900020073797a3000000000200007800c00018004000140000000000800084000000000080006400000000005000500020000000500010006"], 0x68}}, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.swap.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x13, r1, 0x0) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x19, 0x200000000000012a, &(0x7f00000002c0)=ANY=[@ANYBLOB="180000000000000000000000000000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000020850000002d0000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000400000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x44, '\x00', 0x0, @fallback, r1, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) r3 = syz_genetlink_get_family_id$tipc(&(0x7f00000003c0), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$TIPC_CMD_SHOW_NAME_TABLE(r4, &(0x7f0000000480)={0x0, 0xf00, &(0x7f0000000440)={&(0x7f0000000140)={0x30, r3, 0x1, 0x0, 0x0, {{}, {0x0, 0x4101}, {0x14}}}, 0x30}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000040)='tlb_flush\x00', r2}, 0x10) ioctl$sock_kcm_SIOCKCMATTACH(r1, 0x89e0, &(0x7f0000000180)={r0, r2}) r5 = openat$cgroup_int(r0, &(0x7f00000001c0)='cpu.idle\x00', 0x2, 0x0) write$cgroup_int(r5, &(0x7f0000000280)=0x6, 0x12) r6 = syz_init_net_socket$802154_raw(0x24, 0x3, 0x0) sendmsg$802154_raw(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000240)="083b000000000022add7aead", 0xc}}, 0x0) sendto(r0, &(0x7f0000000580)="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", 0x1000, 0x10, 0x0, 0x0) 0s ago: executing program 1 (id=871): r0 = socket$inet6(0xa, 0x3, 0x7) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) syz_emit_ethernet(0x86, &(0x7f0000000100)={@multicast, @empty, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x78, 0x0, 0x0, 0x0, 0x1, 0x0, @rand_addr=0x64010101, @local}, @time_exceeded={0x3, 0x3, 0x0, 0x3, 0x0, 0x0, {0x17, 0x4, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x2f, 0x0, @dev={0xac, 0x14, 0x14, 0x37}, @remote, {[@noop, @timestamp_prespec={0x44, 0x0, 0xf4, 0x3, 0x7, [{@multicast2, 0xb61d}, {@local, 0x400}, {@multicast1, 0x6}, {@remote, 0x9}, {@broadcast, 0xfffffc01}, {@multicast1}, {@empty, 0x9}]}]}}}}}}}, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000280)=@newqdisc={0x4c, 0x24, 0xf0b, 0x0, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xffff, 0xffff}, {0x0, 0xfff7}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x1c, 0x2, [@TCA_CAKE_NAT={0x8}, @TCA_CAKE_RAW={0x8, 0xc, 0x1}, @TCA_CAKE_DIFFSERV_MODE={0x8, 0x3, 0x2}]}}]}, 0x4c}}, 0x0) setsockopt$inet6_int(r1, 0x29, 0x21, &(0x7f0000000040)=0x5, 0x4) sendmmsg$alg(r0, &(0x7f0000001840)=[{0x20000000, 0xff00, 0x0}], 0x1, 0x0) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.0.249' (ED25519) to the list of known hosts. [ 50.417598][ T5217] cgroup: Unknown subsys name 'net' [ 50.525270][ T5217] cgroup: Unknown subsys name 'cpuset' [ 50.532973][ T5217] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 51.820215][ T5217] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 55.420109][ T5234] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 55.430494][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 55.441443][ T5236] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 55.442876][ T5240] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 55.460691][ T5240] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 55.467888][ T5243] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 55.475748][ T5243] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 55.480249][ T5240] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 55.491369][ T5249] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 55.491725][ T5240] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 55.498985][ T5249] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 55.507566][ T5240] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 55.521204][ T5249] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 55.521820][ T5240] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 55.535870][ T5240] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 55.543972][ T5249] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 55.545772][ T5240] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 55.555640][ T5246] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 55.558733][ T5240] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 55.572125][ T5249] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 55.579457][ T5249] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 55.588190][ T5249] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 55.595818][ T5240] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 55.603700][ T5249] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 55.611227][ T5249] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 55.611709][ T4623] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 55.626025][ T5240] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 55.633793][ T5240] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 55.641279][ T4623] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 55.649122][ T4623] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 56.019470][ T5238] chnl_net:caif_netlink_parms(): no params data found [ 56.042672][ T5227] chnl_net:caif_netlink_parms(): no params data found [ 56.133728][ T5229] chnl_net:caif_netlink_parms(): no params data found [ 56.182334][ T5235] chnl_net:caif_netlink_parms(): no params data found [ 56.238486][ T5227] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.247047][ T5227] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.256178][ T5227] bridge_slave_0: entered allmulticast mode [ 56.263674][ T5227] bridge_slave_0: entered promiscuous mode [ 56.297268][ T5228] chnl_net:caif_netlink_parms(): no params data found [ 56.306676][ T5227] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.314119][ T5227] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.321346][ T5227] bridge_slave_1: entered allmulticast mode [ 56.328095][ T5227] bridge_slave_1: entered promiscuous mode [ 56.334812][ T5238] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.341887][ T5238] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.349233][ T5238] bridge_slave_0: entered allmulticast mode [ 56.355876][ T5238] bridge_slave_0: entered promiscuous mode [ 56.391665][ T5238] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.398972][ T5238] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.406523][ T5238] bridge_slave_1: entered allmulticast mode [ 56.413461][ T5238] bridge_slave_1: entered promiscuous mode [ 56.433294][ T5227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.468840][ T5227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.487771][ T5238] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.508560][ T5229] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.515849][ T5229] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.526356][ T5229] bridge_slave_0: entered allmulticast mode [ 56.533347][ T5229] bridge_slave_0: entered promiscuous mode [ 56.549624][ T5238] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.574621][ T5229] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.581702][ T5229] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.589058][ T5229] bridge_slave_1: entered allmulticast mode [ 56.595937][ T5229] bridge_slave_1: entered promiscuous mode [ 56.617613][ T5238] team0: Port device team_slave_0 added [ 56.623711][ T5235] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.630751][ T5235] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.638533][ T5235] bridge_slave_0: entered allmulticast mode [ 56.646112][ T5235] bridge_slave_0: entered promiscuous mode [ 56.685906][ T5227] team0: Port device team_slave_0 added [ 56.693554][ T5238] team0: Port device team_slave_1 added [ 56.701125][ T5229] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.710390][ T5235] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.717714][ T5235] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.727041][ T5235] bridge_slave_1: entered allmulticast mode [ 56.733849][ T5235] bridge_slave_1: entered promiscuous mode [ 56.755519][ T5227] team0: Port device team_slave_1 added [ 56.761411][ T5228] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.769100][ T5228] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.779197][ T5228] bridge_slave_0: entered allmulticast mode [ 56.786174][ T5228] bridge_slave_0: entered promiscuous mode [ 56.801444][ T5229] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.832214][ T5228] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.842801][ T5228] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.849889][ T5228] bridge_slave_1: entered allmulticast mode [ 56.859158][ T5228] bridge_slave_1: entered promiscuous mode [ 56.883791][ T5238] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 56.890722][ T5238] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 56.917198][ T5238] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 56.930473][ T5235] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.954143][ T5229] team0: Port device team_slave_0 added [ 56.963105][ T5228] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.980805][ T5238] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 56.987899][ T5238] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.014140][ T5238] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.026834][ T5235] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.039537][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.046532][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.072749][ T5227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.086137][ T5228] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.096877][ T5229] team0: Port device team_slave_1 added [ 57.121870][ T5227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.128839][ T5227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.155801][ T5227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.187150][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.196492][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.222943][ T5229] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.255165][ T5228] team0: Port device team_slave_0 added [ 57.261194][ T5229] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.268317][ T5229] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.294276][ T5229] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.310251][ T5235] team0: Port device team_slave_0 added [ 57.318175][ T5235] team0: Port device team_slave_1 added [ 57.339369][ T5228] team0: Port device team_slave_1 added [ 57.391968][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.398955][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.425629][ T5228] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.444280][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.451237][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.477217][ T5235] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.493457][ T5227] hsr_slave_0: entered promiscuous mode [ 57.499560][ T5227] hsr_slave_1: entered promiscuous mode [ 57.509041][ T5238] hsr_slave_0: entered promiscuous mode [ 57.515529][ T5238] hsr_slave_1: entered promiscuous mode [ 57.521495][ T5238] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.529343][ T5238] Cannot create hsr debugfs directory [ 57.550323][ T5228] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.557461][ T5228] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.583488][ T5228] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.599646][ T5235] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.606964][ T5235] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.633319][ T5235] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.644299][ T5240] Bluetooth: hci2: command tx timeout [ 57.650376][ T5236] Bluetooth: hci1: command tx timeout [ 57.656415][ T4623] Bluetooth: hci0: command tx timeout [ 57.676887][ T5229] hsr_slave_0: entered promiscuous mode [ 57.685291][ T5229] hsr_slave_1: entered promiscuous mode [ 57.691405][ T5229] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.699306][ T5229] Cannot create hsr debugfs directory [ 57.723005][ T5236] Bluetooth: hci3: command tx timeout [ 57.723013][ T4623] Bluetooth: hci4: command tx timeout [ 57.755593][ T5235] hsr_slave_0: entered promiscuous mode [ 57.762493][ T5235] hsr_slave_1: entered promiscuous mode [ 57.768496][ T5235] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.776212][ T5235] Cannot create hsr debugfs directory [ 57.800631][ T5228] hsr_slave_0: entered promiscuous mode [ 57.806884][ T5228] hsr_slave_1: entered promiscuous mode [ 57.816468][ T5228] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.824792][ T5228] Cannot create hsr debugfs directory [ 58.111936][ T5238] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 58.122145][ T5238] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 58.134887][ T5238] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 58.151314][ T5238] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 58.183572][ T5227] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 58.210218][ T5227] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 58.221881][ T5227] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 58.250706][ T5227] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 58.270499][ T5235] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.279252][ T5235] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.295426][ T5235] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.305870][ T5235] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.366544][ T5229] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.387349][ T5229] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.399478][ T5229] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.408629][ T5229] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 58.492215][ T5238] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.539234][ T5228] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 58.555716][ T5228] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 58.583008][ T5228] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 58.596010][ T5238] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.610127][ T5228] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 58.629046][ T5227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.638470][ T2530] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.645721][ T2530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.674121][ T1047] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.681197][ T1047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.692023][ T5227] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.720716][ T2530] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.727849][ T2530] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.744344][ T5235] 8021q: adding VLAN 0 to HW filter on device bond0 [ 58.757496][ T1047] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.764625][ T1047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.812008][ T5235] 8021q: adding VLAN 0 to HW filter on device team0 [ 58.851641][ T1047] bridge0: port 1(bridge_slave_0) entered blocking state [ 58.858816][ T1047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 58.913575][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 58.920691][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 58.939501][ T5229] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.018690][ T5229] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.037239][ T5235] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 59.051692][ T5235] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.067251][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.074418][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.111868][ T5228] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.148001][ T5238] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.187952][ T5228] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.204561][ T2530] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.211659][ T2530] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.242078][ T1045] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.249314][ T1045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.289387][ T5227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.318528][ T1045] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.325680][ T1045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.362042][ T5235] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.390887][ T5229] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.448573][ T5238] veth0_vlan: entered promiscuous mode [ 59.491165][ T5238] veth1_vlan: entered promiscuous mode [ 59.527020][ T5228] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 59.553211][ T5235] veth0_vlan: entered promiscuous mode [ 59.614998][ T5235] veth1_vlan: entered promiscuous mode [ 59.633739][ T5238] veth0_macvtap: entered promiscuous mode [ 59.680133][ T5229] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.695776][ T5238] veth1_macvtap: entered promiscuous mode [ 59.717780][ T5227] veth0_vlan: entered promiscuous mode [ 59.725092][ T5236] Bluetooth: hci0: command tx timeout [ 59.725140][ T5240] Bluetooth: hci1: command tx timeout [ 59.736676][ T4623] Bluetooth: hci2: command tx timeout [ 59.759456][ T5235] veth0_macvtap: entered promiscuous mode [ 59.783040][ T5235] veth1_macvtap: entered promiscuous mode [ 59.790693][ T5227] veth1_vlan: entered promiscuous mode [ 59.804851][ T5240] Bluetooth: hci4: command tx timeout [ 59.810053][ T5228] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 59.810391][ T5240] Bluetooth: hci3: command tx timeout [ 59.844926][ T5238] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.880177][ T5229] veth0_vlan: entered promiscuous mode [ 59.896670][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 59.908231][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.919498][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 59.933748][ T5238] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.944341][ T5229] veth1_vlan: entered promiscuous mode [ 59.958123][ T5235] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 59.970191][ T5235] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 59.982296][ T5235] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 59.995875][ T5238] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.006109][ T5238] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.015168][ T5238] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.024568][ T5238] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.050794][ T5235] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.061219][ T5235] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.071664][ T5235] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.080429][ T5235] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.167010][ T5227] veth0_macvtap: entered promiscuous mode [ 60.201426][ T5229] veth0_macvtap: entered promiscuous mode [ 60.219657][ T5227] veth1_macvtap: entered promiscuous mode [ 60.255440][ T5229] veth1_macvtap: entered promiscuous mode [ 60.267706][ T2507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.289331][ T2507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.303898][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.319446][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.329562][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.340291][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.351327][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.391150][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.402020][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.412167][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.426098][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.435968][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.446799][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.458145][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.468225][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.478868][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.489582][ T5227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.500849][ T5227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.511780][ T5227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.530685][ T2530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.538839][ T2530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.540096][ T5228] veth0_vlan: entered promiscuous mode [ 60.558858][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.570368][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.580603][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.591193][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.601104][ T5229] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 60.613464][ T5229] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 60.624171][ T5229] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.640263][ T5227] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.651433][ T5227] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.660767][ T5227] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.669553][ T5227] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.684391][ T5228] veth1_vlan: entered promiscuous mode [ 60.697710][ T5229] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.706776][ T5229] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.715566][ T5229] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.725770][ T5229] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 60.742012][ T2530] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.762930][ T2530] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.767490][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 60.778693][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 60.864419][ T5228] veth0_macvtap: entered promiscuous mode [ 60.880108][ T5235] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 60.910822][ T5228] veth1_macvtap: entered promiscuous mode [ 60.959610][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 60.991157][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.014312][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.025194][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.037893][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.049458][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.060622][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.071493][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.087959][ T5316] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 61.097444][ T5317] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2'. [ 61.097862][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.116816][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.128620][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.139642][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.150584][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.165706][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.177171][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.193310][ T5228] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.206301][ T5228] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.227281][ T5228] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.292698][ T2507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.308387][ T5228] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.308930][ T2507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.318327][ T5228] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.335112][ T5325] syz.1.7 uses obsolete (PF_INET,SOCK_PACKET) [ 61.361043][ T5228] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.392638][ T5228] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.538861][ T5325] Zero length message leads to an empty skb [ 61.571485][ T1047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.589676][ T1047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.607330][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.622092][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.675730][ T5338] Bluetooth: MGMT ver 1.23 [ 61.774526][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.782624][ T2530] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.782643][ T2530] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.801944][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.803378][ T5240] Bluetooth: hci1: command tx timeout [ 61.810219][ T4623] Bluetooth: hci2: command tx timeout [ 61.814764][ T5240] Bluetooth: hci0: command tx timeout [ 61.880865][ T1045] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.882912][ T5240] Bluetooth: hci3: command tx timeout [ 61.893315][ T4623] Bluetooth: hci4: command tx timeout [ 61.908560][ T1045] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.131527][ T5350] netlink: 84 bytes leftover after parsing attributes in process `syz.0.12'. [ 62.194160][ T5350] netlink: 8 bytes leftover after parsing attributes in process `syz.0.12'. [ 62.329525][ T5359] netlink: 16 bytes leftover after parsing attributes in process `syz.4.5'. [ 62.403366][ T5359] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 62.530858][ T5372] netlink: 56 bytes leftover after parsing attributes in process `syz.1.18'. [ 62.550675][ T5372] netlink: 'syz.1.18': attribute type 2 has an invalid length. [ 62.711612][ T5376] bridge0: port 1(bridge_slave_0) entered disabled state [ 62.738242][ T5378] netlink: 76 bytes leftover after parsing attributes in process `syz.0.21'. [ 62.762556][ T5378] netlink: 12 bytes leftover after parsing attributes in process `syz.0.21'. [ 62.793388][ T5378] xt_CT: You must specify a L4 protocol and not use inversions on it [ 63.058440][ T5397] netlink: 'syz.1.27': attribute type 3 has an invalid length. [ 63.080370][ T5397] netlink: 766 bytes leftover after parsing attributes in process `syz.1.27'. [ 63.218165][ T5401] netlink: 84 bytes leftover after parsing attributes in process `syz.0.29'. [ 63.463910][ T5411] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 63.802312][ T5424] sctp: [Deprecated]: syz.4.37 (pid 5424) Use of int in maxseg socket option. [ 63.802312][ T5424] Use struct sctp_assoc_value instead [ 63.846156][ T5430] netlink: 'syz.1.34': attribute type 1 has an invalid length. [ 63.883457][ T5240] Bluetooth: hci2: command tx timeout [ 63.885367][ T5236] Bluetooth: hci1: command tx timeout [ 63.888864][ T5240] Bluetooth: hci0: command tx timeout [ 63.972531][ T5240] Bluetooth: hci3: command tx timeout [ 63.972583][ T5236] Bluetooth: hci4: command tx timeout [ 64.726659][ T5447] raw_sendmsg: syz.1.43 forgot to set AF_INET. Fix it! [ 64.989670][ T5465] : entered promiscuous mode [ 65.749722][ T5499] Cannot find del_set index 2 as target [ 65.773051][ T5518] netlink: 'syz.3.62': attribute type 28 has an invalid length. [ 65.782198][ T5518] netlink: 'syz.3.62': attribute type 3 has an invalid length. [ 65.806594][ T5519] @ÿ: renamed from veth0_vlan (while UP) [ 66.164105][ T5539] netlink: 'syz.3.70': attribute type 9 has an invalid length. [ 66.198639][ T5541] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 66.354817][ T5545] netlink: 'syz.0.74': attribute type 10 has an invalid length. [ 66.465039][ T5557] xt_hashlimit: size too large, truncated to 1048576 [ 66.536129][ T5561] xt_hashlimit: size too large, truncated to 1048576 [ 66.561389][ T5564] netlink: 'syz.1.75': attribute type 21 has an invalid length. [ 66.690169][ T5566] syz.2.78[5566] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.690261][ T5566] syz.2.78[5566] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.704970][ T5566] syz.2.78[5566] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 66.966594][ T5573] __nla_validate_parse: 15 callbacks suppressed [ 66.966615][ T5573] netlink: 4 bytes leftover after parsing attributes in process `syz.0.81'. [ 67.039868][ T5573] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 67.104367][ T5573] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 67.126743][ T5587] warning: `syz.1.84' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 67.141851][ T5596] (unnamed net_device) (uninitialized): option packets_per_slave: mode dependency failed, not supported in mode active-backup(1) [ 67.255149][ T5600] netlink: 'syz.4.88': attribute type 1 has an invalid length. [ 67.269506][ T5600] netlink: 9348 bytes leftover after parsing attributes in process `syz.4.88'. [ 67.281619][ T5600] netlink: 'syz.4.88': attribute type 1 has an invalid length. [ 67.467889][ T5611] bridge: RTM_NEWNEIGH with invalid ether address [ 67.498339][ T5611] netlink: 9364 bytes leftover after parsing attributes in process `syz.4.91'. [ 67.585196][ T5619] validate_nla: 2 callbacks suppressed [ 67.585214][ T5619] netlink: 'syz.1.95': attribute type 10 has an invalid length. [ 67.635871][ T5623] netlink: zone id is out of range [ 67.646235][ T5623] netlink: zone id is out of range [ 67.657533][ T5623] netlink: zone id is out of range [ 67.668810][ T5623] netlink: zone id is out of range [ 67.682679][ T5626] netlink: zone id is out of range [ 67.687870][ T5626] netlink: zone id is out of range [ 67.718414][ T5623] netlink: set zone limit has 4 unknown bytes [ 67.732111][ T5626] netlink: zone id is out of range [ 67.772854][ T5626] netlink: del zone limit has 4 unknown bytes [ 67.802029][ T5631] netlink: 32 bytes leftover after parsing attributes in process `syz.4.98'. [ 67.884113][ T5615] netlink: 'syz.2.93': attribute type 12 has an invalid length. [ 68.427674][ T5672] netlink: 40 bytes leftover after parsing attributes in process `syz.3.110'. [ 68.661045][ T5685] bridge: RTM_NEWNEIGH bridge0 with NTF_USE is not supported [ 68.865707][ T5698] netlink: 28 bytes leftover after parsing attributes in process `syz.3.118'. [ 68.867375][ T5696] netlink: 'syz.2.116': attribute type 6 has an invalid length. [ 68.892031][ T5700] netlink: 'syz.4.119': attribute type 2 has an invalid length. [ 68.917937][ T5696] netlink: 40 bytes leftover after parsing attributes in process `syz.2.116'. [ 69.064676][ T5707] netlink: 16126 bytes leftover after parsing attributes in process `syz.0.121'. [ 69.091411][ T5707] netlink: 105116 bytes leftover after parsing attributes in process `syz.0.121'. [ 69.211123][ T5718] netlink: 'syz.1.124': attribute type 12 has an invalid length. [ 69.236316][ T5722] ip6tnl0 speed is unknown, defaulting to 1000 [ 69.261907][ T5718] netlink: 197276 bytes leftover after parsing attributes in process `syz.1.124'. [ 69.275147][ T5722] ip6tnl0 speed is unknown, defaulting to 1000 [ 69.284468][ T5722] ip6tnl0 speed is unknown, defaulting to 1000 [ 69.293131][ T5728] netlink: 'syz.3.125': attribute type 3 has an invalid length. [ 69.835680][ T5722] infiniband syz0: set active [ 69.841819][ T5281] ip6tnl0 speed is unknown, defaulting to 1000 [ 69.850615][ T5722] infiniband syz0: added ip6tnl0 [ 69.958147][ T5722] RDS/IB: syz0: added [ 69.976101][ T5722] smc: adding ib device syz0 with port count 1 [ 70.000227][ T5722] smc: ib device syz0 port 1 has pnetid [ 70.050935][ T5286] ip6tnl0 speed is unknown, defaulting to 1000 [ 70.067443][ T5722] ip6tnl0 speed is unknown, defaulting to 1000 [ 70.156651][ T5784] netlink: 'syz.2.142': attribute type 1 has an invalid length. [ 70.195696][ T5786] veth0_to_bond: entered promiscuous mode [ 70.206810][ T5785] veth0_to_bond: left promiscuous mode [ 70.466232][ T5807] openvswitch: netlink: IP tunnel attribute has 3048 unknown bytes. [ 70.598400][ T5722] ip6tnl0 speed is unknown, defaulting to 1000 [ 70.822072][ T5823] netlink: 'syz.0.154': attribute type 2 has an invalid length. [ 70.903961][ T5722] ip6tnl0 speed is unknown, defaulting to 1000 [ 71.186696][ T5722] ip6tnl0 speed is unknown, defaulting to 1000 [ 71.415368][ T5722] ip6tnl0 speed is unknown, defaulting to 1000 [ 71.488588][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.502715][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 71.567348][ T5854] syzkaller0: entered promiscuous mode [ 71.573049][ T5854] syzkaller0: entered allmulticast mode [ 73.144568][ T5860] __nla_validate_parse: 8 callbacks suppressed [ 73.144585][ T5860] netlink: 116 bytes leftover after parsing attributes in process `syz.4.169'. [ 73.703104][ T5921] netlink: 40 bytes leftover after parsing attributes in process `syz.1.179'. [ 73.785655][ T5924] netlink: 8 bytes leftover after parsing attributes in process `syz.3.181'. [ 73.909016][ T5934] netlink: 4 bytes leftover after parsing attributes in process `syz.2.184'. [ 74.026416][ T5948] netlink: 68 bytes leftover after parsing attributes in process `syz.3.187'. [ 74.164047][ T5951] bridge0: port 1(bridge_slave_0) entered disabled state [ 74.204798][ T5952] netlink: 20 bytes leftover after parsing attributes in process `syz.0.189'. [ 74.224639][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.189'. [ 74.239489][ T5952] netlink: 8 bytes leftover after parsing attributes in process `syz.0.189'. [ 74.263938][ T5954] netlink: 'syz.3.190': attribute type 1 has an invalid length. [ 74.492526][ T5960] netlink: 8 bytes leftover after parsing attributes in process `syz.4.193'. [ 74.504935][ T5960] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 74.515470][ T5960] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 74.523709][ T5960] gretap1: entered promiscuous mode [ 74.528980][ T5960] gretap1: entered allmulticast mode [ 74.544150][ T5968] team0: Device ipvlan1 failed to register rx_handler [ 74.632342][ T5973] netlink: 209812 bytes leftover after parsing attributes in process `syz.3.198'. [ 74.642139][ T5973] netlink: get zone limit has 8 unknown bytes [ 74.748991][ T5979] netlink: 'syz.3.200': attribute type 11 has an invalid length. [ 74.860640][ T5981] ip6tnl0 speed is unknown, defaulting to 1000 [ 75.704342][ T6032] x_tables: duplicate underflow at hook 2 [ 75.729698][ T6034] netlink: 'syz.4.218': attribute type 2 has an invalid length. [ 75.754000][ T6032] pimreg: entered allmulticast mode [ 75.984204][ T6044] netlink: 'syz.0.221': attribute type 1 has an invalid length. [ 75.992243][ T6044] netlink: 'syz.0.221': attribute type 1 has an invalid length. [ 76.324878][ T6064] pimreg: left allmulticast mode [ 76.489029][ T6069] openvswitch: netlink: Actions may not be safe on all matching packets [ 76.611731][ T8] cfg80211: failed to load regulatory.db [ 77.132845][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 77.202713][ T6096] netlink: 'syz.3.235': attribute type 1 has an invalid length. [ 77.415586][ T6127] netlink: 'syz.3.243': attribute type 1 has an invalid length. [ 77.439478][ T6112] ebtables: ebtables: counters copy to user failed while replacing table [ 77.598363][ T6136] No such timeout policy "syz0" [ 77.638765][ T6139] dccp_invalid_packet: invalid packet type [ 77.699359][ T6142] netlink: 'syz.2.248': attribute type 5 has an invalid length. [ 77.936306][ T6156] mac80211_hwsim hwsim11 wlan1: entered allmulticast mode [ 78.008154][ T1047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 78.031106][ T1047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 78.102785][ T6162] dvmrp0: entered allmulticast mode [ 78.669899][ T6210] __nla_validate_parse: 16 callbacks suppressed [ 78.669916][ T6210] netlink: 16 bytes leftover after parsing attributes in process `syz.3.268'. [ 78.790455][ T6217] gtp0: entered promiscuous mode [ 78.813062][ T6217] gtp0: entered allmulticast mode [ 78.833479][ T6220] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 79.031419][ T6234] netlink: 'syz.1.275': attribute type 1 has an invalid length. [ 79.044514][ T6234] sctp: [Deprecated]: syz.1.275 (pid 6234) Use of int in maxseg socket option. [ 79.044514][ T6234] Use struct sctp_assoc_value instead [ 79.412664][ T6253] netlink: 'syz.2.280': attribute type 142 has an invalid length. [ 79.945210][ T6282] netlink: 4 bytes leftover after parsing attributes in process `syz.2.291'. [ 79.992348][ T6286] netlink: 68 bytes leftover after parsing attributes in process `syz.4.289'. [ 80.259901][ T6302] netlink: 48 bytes leftover after parsing attributes in process `syz.4.295'. [ 80.314480][ T6303] A link change request failed with some changes committed already. Interface sit0 may have been left with an inconsistent configuration, please check. [ 80.380019][ T6308] netlink: 8 bytes leftover after parsing attributes in process `syz.0.297'. [ 80.397859][ T6303] netlink: 209676 bytes leftover after parsing attributes in process `syz.1.294'. [ 80.619973][ T6319] netlink: 4 bytes leftover after parsing attributes in process `syz.2.299'. [ 80.655184][ T6321] netlink: 12 bytes leftover after parsing attributes in process `syz.4.300'. [ 80.698352][ T6319] netlink: 76 bytes leftover after parsing attributes in process `syz.2.299'. [ 80.717350][ T6328] netlink: 8 bytes leftover after parsing attributes in process `syz.3.303'. [ 80.727484][ T6328] vxcan1: Master is either lo or non-ether device [ 81.231282][ T6350] netlink: 'syz.2.308': attribute type 1 has an invalid length. [ 81.371033][ C0] TCP: request_sock_subflow_v6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 81.598405][ T6377] openvswitch: netlink: Actions may not be safe on all matching packets [ 81.599918][ T6374] netlink: 'syz.4.318': attribute type 33 has an invalid length. [ 81.926519][ T6394] macvtap0: entered promiscuous mode [ 81.959155][ T6394] macvtap0: left promiscuous mode [ 82.000260][ T6399] netlink: 'syz.3.328': attribute type 8 has an invalid length. [ 82.195758][ T6418] vlan2: entered promiscuous mode [ 82.463108][ T6431] trusted_key: syz.3.337 sent an empty control message without MSG_MORE. [ 82.717537][ T6440] bridge_slave_1: left allmulticast mode [ 82.723616][ T6440] bridge_slave_1: left promiscuous mode [ 82.730069][ T6440] bridge0: port 2(bridge_slave_1) entered disabled state [ 83.360983][ T6462] netlink: 'syz.2.347': attribute type 1 has an invalid length. [ 83.415987][ T6462] netlink: 'syz.2.347': attribute type 2 has an invalid length. [ 83.863169][ T6488] netlink: 'syz.1.355': attribute type 7 has an invalid length. [ 83.882213][ T6488] __nla_validate_parse: 9 callbacks suppressed [ 83.882226][ T6488] netlink: 244 bytes leftover after parsing attributes in process `syz.1.355'. [ 83.913884][ T6490] IPVS: set_ctl: invalid protocol: 115 172.30.0.5:20001 [ 84.119483][ T29] audit: type=1107 audit(1728229020.269:2): pid=6494 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='¥³Åk÷ [ 84.119483][ T29] Ÿ¢øuO0 .Þ7ú‹üíÛ*î‹OÒbFztHà{ty•²eêÿ€Þᳯóð÷‹âRèû›ø24·Ä;' [ 84.201307][ T6495] netlink: 'syz.1.357': attribute type 1 has an invalid length. [ 84.265198][ T6495] netlink: 9352 bytes leftover after parsing attributes in process `syz.1.357'. [ 84.329591][ T6495] netlink: 'syz.1.357': attribute type 1 has an invalid length. [ 84.390705][ T6495] netlink: 'syz.1.357': attribute type 2 has an invalid length. [ 84.760148][ T6507] netlink: 8 bytes leftover after parsing attributes in process `syz.1.362'. [ 84.772061][ T6507] netlink: 24 bytes leftover after parsing attributes in process `syz.1.362'. [ 85.046490][ T6493] syz.4.356 (6493) used greatest stack depth: 17408 bytes left [ 85.126008][ T1047] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.138385][ T6516] netlink: 40 bytes leftover after parsing attributes in process `syz.3.363'. [ 85.217253][ T5236] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 85.225727][ T5236] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 85.236566][ T6525] nft_compat: unsupported protocol 0 [ 85.242123][ T5236] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 85.276291][ T6526] netlink: 24 bytes leftover after parsing attributes in process `syz.0.365'. [ 85.286792][ T5236] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 85.297063][ T5236] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 85.314765][ T2507] bridge0: port 2(bridge_slave_1) entered disabled state [ 85.323557][ T5236] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 85.445043][ T1047] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.520349][ T6520] ip6tnl0 speed is unknown, defaulting to 1000 [ 85.624967][ T1047] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.753653][ T1047] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 85.914690][ T6546] netlink: 209852 bytes leftover after parsing attributes in process `syz.4.374'. [ 85.962671][ T6546] openvswitch: netlink: VXLAN extension 1 has unexpected len 6 expected 4 [ 86.204121][ T1047] bridge_slave_1: left allmulticast mode [ 86.219276][ T1047] bridge_slave_1: left promiscuous mode [ 86.227836][ T1047] bridge0: port 2(bridge_slave_1) entered disabled state [ 86.284206][ T1047] bridge_slave_0: left allmulticast mode [ 86.293913][ T1047] bridge_slave_0: left promiscuous mode [ 86.300141][ T1047] bridge0: port 1(bridge_slave_0) entered disabled state [ 86.661543][ T6592] netlink: 12 bytes leftover after parsing attributes in process `syz.1.383'. [ 86.947632][ T1047] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 86.960391][ T1047] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 86.971226][ T1047] bond0 (unregistering): Released all slaves [ 86.983974][ T1047] bond1 (unregistering): Released all slaves [ 87.007887][ T6520] chnl_net:caif_netlink_parms(): no params data found [ 87.331549][ T6628] netlink: 76 bytes leftover after parsing attributes in process `syz.1.390'. [ 87.355311][ T6628] netlink: 12 bytes leftover after parsing attributes in process `syz.1.390'. [ 87.386364][ T6607] netlink: 'syz.4.387': attribute type 10 has an invalid length. [ 87.402874][ T5236] Bluetooth: hci0: command tx timeout [ 87.453940][ T6639] x_tables: duplicate underflow at hook 1 [ 87.462338][ T6607] 8021q: adding VLAN 0 to HW filter on device team0 [ 87.514621][ T6607] bond0: (slave team0): Enslaving as an active interface with an up link [ 87.707429][ T6652] netlink: 'syz.1.394': attribute type 2 has an invalid length. [ 87.859105][ T6666] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 87.865777][ T6666] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 87.949224][ T6520] bridge0: port 1(bridge_slave_0) entered blocking state [ 87.961963][ T6520] bridge0: port 1(bridge_slave_0) entered disabled state [ 87.971211][ T6520] bridge_slave_0: entered allmulticast mode [ 87.989942][ T6520] bridge_slave_0: entered promiscuous mode [ 88.001449][ T6520] bridge0: port 2(bridge_slave_1) entered blocking state [ 88.009353][ T6520] bridge0: port 2(bridge_slave_1) entered disabled state [ 88.016974][ T6520] bridge_slave_1: entered allmulticast mode [ 88.030360][ T6520] bridge_slave_1: entered promiscuous mode [ 88.071719][ T6671] x_tables: unsorted entry at hook 3 [ 88.126002][ T6674] pim6reg: entered allmulticast mode [ 88.241685][ T6520] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 88.254767][ T6520] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 88.404776][ T6520] team0: Port device team_slave_0 added [ 88.436644][ T6520] team0: Port device team_slave_1 added [ 88.531470][ T1047] hsr_slave_0: left promiscuous mode [ 88.549265][ T1047] hsr_slave_1: left promiscuous mode [ 88.562007][ T1047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 88.580280][ T1047] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 88.614383][ T1047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 88.622340][ T1047] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 88.692119][ T1047] veth1_macvtap: left promiscuous mode [ 88.710339][ T1047] veth0_macvtap: left promiscuous mode [ 88.717808][ T1047] veth1_vlan: left promiscuous mode [ 88.725045][ T1047] veth0_vlan: left promiscuous mode [ 89.044346][ T6718] __nla_validate_parse: 3 callbacks suppressed [ 89.044366][ T6718] netlink: 8 bytes leftover after parsing attributes in process `syz.3.409'. [ 89.071671][ T6718] xt_addrtype: both incoming and outgoing interface limitation cannot be selected [ 89.365918][ T1047] team0 (unregistering): Port device team_slave_1 removed [ 89.401929][ T1047] team0 (unregistering): Port device team_slave_0 removed [ 89.483209][ T5236] Bluetooth: hci0: command tx timeout [ 89.705323][ T6520] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 89.728104][ T6520] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.765904][ T6520] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 89.785531][ T6709] netlink: 'syz.0.407': attribute type 27 has an invalid length. [ 89.811259][ T6709] bond0: (slave bond_slave_0): Releasing backup interface [ 89.878625][ T6520] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 89.896537][ T6520] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 89.931004][ T6520] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 89.944326][ T6726] netlink: 4 bytes leftover after parsing attributes in process `syz.4.410'. [ 90.079520][ T6520] hsr_slave_0: entered promiscuous mode [ 90.092029][ T6520] hsr_slave_1: entered promiscuous mode [ 90.106858][ T6520] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 90.132893][ T6520] Cannot create hsr debugfs directory [ 90.837884][ T6773] netlink: 8 bytes leftover after parsing attributes in process `syz.3.421'. [ 91.063412][ T6786] netlink: 8 bytes leftover after parsing attributes in process `syz.3.424'. [ 91.252155][ T6796] dvmrp0: entered allmulticast mode [ 91.294910][ T6520] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 91.309855][ T6520] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 91.348511][ T6520] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 91.378805][ T6520] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 91.412188][ T6807] netlink: 'syz.1.429': attribute type 1 has an invalid length. [ 91.531539][ T6520] 8021q: adding VLAN 0 to HW filter on device bond0 [ 91.563543][ T5236] Bluetooth: hci0: command tx timeout [ 91.600587][ T6520] 8021q: adding VLAN 0 to HW filter on device team0 [ 91.646258][ T1047] bridge0: port 1(bridge_slave_0) entered blocking state [ 91.653433][ T1047] bridge0: port 1(bridge_slave_0) entered forwarding state [ 91.693884][ T1047] bridge0: port 2(bridge_slave_1) entered blocking state [ 91.701038][ T1047] bridge0: port 2(bridge_slave_1) entered forwarding state [ 92.028710][ T6841] netlink: 300 bytes leftover after parsing attributes in process `syz.3.437'. [ 92.046405][ T6842] x_tables: ip_tables: TCPMSS target: only valid for protocol 6 [ 92.103989][ T6829] bond0: (slave team0): Releasing backup interface [ 92.144341][ T6829] team0 (unregistering): Port device team_slave_0 removed [ 92.164778][ T6829] team0 (unregistering): Port device team_slave_1 removed [ 92.169905][ T6848] Bluetooth: MGMT ver 1.23 [ 92.263104][ T6850] netlink: 8 bytes leftover after parsing attributes in process `syz.3.438'. [ 92.293913][ T6850] netlink: 48 bytes leftover after parsing attributes in process `syz.3.438'. [ 92.370372][ T6858] mapping of prio or/and queue is allowed only from OUTPUT/FORWARD/POSTROUTING chains [ 92.446755][ T6860] netlink: 28 bytes leftover after parsing attributes in process `syz.0.440'. [ 92.485633][ T6520] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 92.531561][ T6876] netlink: 4 bytes leftover after parsing attributes in process `syz.0.446'. [ 92.757659][ T6520] veth0_vlan: entered promiscuous mode [ 92.823613][ T6520] veth1_vlan: entered promiscuous mode [ 92.917841][ T6520] veth0_macvtap: entered promiscuous mode [ 92.928982][ T6520] veth1_macvtap: entered promiscuous mode [ 92.944303][ T6520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.954834][ T6520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.964749][ T6520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.975269][ T6520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 92.985373][ T6520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 92.996133][ T6520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.009385][ T6520] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 93.019571][ T6520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.030141][ T6520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.040237][ T6520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.051102][ T6520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.061299][ T6520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.071976][ T6520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.081871][ T6520] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 93.092551][ T6520] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 93.104538][ T6520] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 93.114857][ T6520] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.124090][ T6520] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.136987][ T6520] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.145755][ T6520] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 93.236755][ T6911] netlink: 'syz.4.451': attribute type 3 has an invalid length. [ 93.260513][ T6911] netlink: 130984 bytes leftover after parsing attributes in process `syz.4.451'. [ 93.293108][ T2507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.303982][ T2507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 93.323232][ T2893] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 93.355470][ T2893] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 94.077839][ T6969] netlink: 'syz.1.461': attribute type 2 has an invalid length. [ 94.104035][ T6970] hsr0: VLAN not yet supported [ 94.291881][ T6983] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 94.410101][ T6983] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 94.586515][ T7007] __nla_validate_parse: 2 callbacks suppressed [ 94.586532][ T7007] netlink: 8 bytes leftover after parsing attributes in process `syz.1.470'. [ 94.720049][ T7016] netlink: 76 bytes leftover after parsing attributes in process `syz.1.473'. [ 94.794395][ T1045] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 94.846221][ T7016] Êü: entered promiscuous mode [ 95.006862][ T7030] netlink: 203516 bytes leftover after parsing attributes in process `syz.1.474'. [ 95.041752][ T7030] netlink: zone id is out of range [ 95.054848][ T7033] netlink: 56 bytes leftover after parsing attributes in process `syz.1.474'. [ 95.070066][ T7030] netlink: del zone limit has 8 unknown bytes [ 95.257722][ T1045] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.286252][ T7043] xt_CT: No such helper "snmp" [ 95.317273][ T7038] netlink: 8 bytes leftover after parsing attributes in process `syz.3.476'. [ 95.380855][ T7043] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 95.401620][ T4623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 95.412236][ T4623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 95.420562][ T4623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 95.428738][ T4623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 95.436677][ T4623] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 95.444188][ T4623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 95.558789][ T7060] netlink: 5 bytes leftover after parsing attributes in process `syz.3.479'. [ 95.634783][ T7062] openvswitch: netlink: Message has 8 unknown bytes. [ 95.692128][ T1045] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 95.807689][ T7053] ip6tnl0 speed is unknown, defaulting to 1000 [ 95.967540][ T1045] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 96.031074][ T7094] netlink: 12 bytes leftover after parsing attributes in process `syz.0.485'. [ 96.090919][ T7088] netlink: 40 bytes leftover after parsing attributes in process `syz.0.485'. [ 96.207033][ T7088] iwpm_register_pid: Unable to send a nlmsg (client = 2) [ 96.306044][ T7088] infiniband syz1: RDMA CMA: cma_listen_on_dev, error -98 [ 96.316211][ T7105] ɶƣ0GC¦: entered promiscuous mode [ 96.330121][ T1045] bridge_slave_1: left allmulticast mode [ 96.343020][ T1045] bridge_slave_1: left promiscuous mode [ 96.357837][ T1045] bridge0: port 2(bridge_slave_1) entered disabled state [ 96.377943][ T1045] bridge_slave_0: left allmulticast mode [ 96.385837][ T1045] bridge_slave_0: left promiscuous mode [ 96.391721][ T1045] bridge0: port 1(bridge_slave_0) entered disabled state [ 96.712093][ T1045] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 96.726272][ T1045] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 96.740319][ T1045] bond0 (unregistering): Released all slaves [ 96.774048][ T7109] tipc: Started in network mode [ 96.779048][ T7109] tipc: Node identity aaaaaaaaaa32, cluster identity 4711 [ 96.794971][ T7109] tipc: Enabled bearer , priority 10 [ 96.886985][ T7120] netlink: 28 bytes leftover after parsing attributes in process `syz.1.494'. [ 97.055156][ T7132] syz.1.496 (7132) used obsolete PPPIOCDETACH ioctl [ 97.363403][ T7145] netlink: 176 bytes leftover after parsing attributes in process `syz.4.500'. [ 97.377365][ T7145] ip6gretap0: entered promiscuous mode [ 97.443237][ T7147] xt_nfacct: accounting object `syz0' does not exists [ 97.483463][ T5236] Bluetooth: hci0: command tx timeout [ 97.541482][ T7053] chnl_net:caif_netlink_parms(): no params data found [ 97.751289][ T1045] hsr_slave_0: left promiscuous mode [ 97.761992][ T1045] hsr_slave_1: left promiscuous mode [ 97.773794][ T1045] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 97.783387][ T1045] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 97.799355][ T1045] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 97.826210][ T1045] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 97.887321][ T1045] veth1_macvtap: left promiscuous mode [ 97.893759][ T1045] veth0_macvtap: left promiscuous mode [ 97.899428][ T1045] veth1_vlan: left promiscuous mode [ 97.905300][ T1045] veth0_vlan: left promiscuous mode [ 97.923735][ T5231] tipc: Node number set to 10005162 [ 98.324507][ T7194] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 98.355420][ T1045] team0 (unregistering): Port device team_slave_1 removed [ 98.389444][ T1045] team0 (unregistering): Port device team_slave_0 removed [ 98.711751][ T7177] netlink: 'syz.0.507': attribute type 9 has an invalid length. [ 98.836690][ T7192] netlink: 'syz.4.510': attribute type 10 has an invalid length. [ 98.877357][ T7192] mac80211_hwsim hwsim11 wlan1: left allmulticast mode [ 99.017880][ T7053] bridge0: port 1(bridge_slave_0) entered blocking state [ 99.045440][ T7053] bridge0: port 1(bridge_slave_0) entered disabled state [ 99.072788][ T7053] bridge_slave_0: entered allmulticast mode [ 99.080043][ T7053] bridge_slave_0: entered promiscuous mode [ 99.089831][ T7053] bridge0: port 2(bridge_slave_1) entered blocking state [ 99.097589][ T7053] bridge0: port 2(bridge_slave_1) entered disabled state [ 99.105105][ T7053] bridge_slave_1: entered allmulticast mode [ 99.112096][ T7053] bridge_slave_1: entered promiscuous mode [ 99.216531][ T7214] Illegal XDP return value 8 on prog (id 173) dev N/A, expect packet loss! [ 99.373928][ T7053] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 99.396758][ T7053] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 99.457631][ T7053] team0: Port device team_slave_0 added [ 99.474043][ T7053] team0: Port device team_slave_1 added [ 99.521887][ T7224] hsr0: entered allmulticast mode [ 99.534195][ T7224] hsr_slave_0: entered allmulticast mode [ 99.544641][ T7224] hsr_slave_1: entered allmulticast mode [ 99.557654][ T7053] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 99.567774][ T5236] Bluetooth: hci0: command tx timeout [ 99.583928][ T7053] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.623516][ T7053] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 99.640734][ T7230] hsr_slave_0: left promiscuous mode [ 99.651899][ T7230] hsr_slave_1: left promiscuous mode [ 99.701833][ T7230] hsr0 (unregistering): left allmulticast mode [ 99.715553][ T7053] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 99.730521][ T7053] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 99.765780][ T7053] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 99.831654][ T7231] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x2 [ 99.894180][ T7053] hsr_slave_0: entered promiscuous mode [ 99.915675][ T7053] hsr_slave_1: entered promiscuous mode [ 100.076199][ T7254] bond0: entered promiscuous mode [ 100.090890][ T7255] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 100.095468][ T7254] bond_slave_0: entered promiscuous mode [ 100.111743][ T7254] bond_slave_1: entered promiscuous mode [ 100.159098][ T7255] __nla_validate_parse: 3 callbacks suppressed [ 100.159114][ T7255] netlink: 16 bytes leftover after parsing attributes in process `syz.3.524'. [ 100.233933][ T7249] netlink: 'syz.0.522': attribute type 1 has an invalid length. [ 100.244440][ T7260] ªªªªªª: renamed from vlan0 (while UP) [ 100.275841][ T7249] netlink: 244 bytes leftover after parsing attributes in process `syz.0.522'. [ 100.398437][ T7277] bridge0: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 100.443673][ T7277] bridge0: port 1(bridge_slave_0) entered disabled state [ 100.463722][ T7277] bridge0: entered allmulticast mode [ 100.487095][ T7267] syzkaller0: entered promiscuous mode [ 100.549549][ T7267] syzkaller0 (unregistering): left promiscuous mode [ 100.960122][ T7304] openvswitch: netlink: Actions may not be safe on all matching packets [ 101.194466][ T7053] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 101.215906][ T7053] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 101.260221][ T7053] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 101.287014][ T7053] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 101.551408][ T7053] 8021q: adding VLAN 0 to HW filter on device bond0 [ 101.645191][ T5236] Bluetooth: hci0: command tx timeout [ 101.654803][ T7053] 8021q: adding VLAN 0 to HW filter on device team0 [ 101.694556][ T1045] bridge0: port 1(bridge_slave_0) entered blocking state [ 101.702264][ T1045] bridge0: port 1(bridge_slave_0) entered forwarding state [ 101.793704][ T1045] bridge0: port 2(bridge_slave_1) entered blocking state [ 101.800823][ T1045] bridge0: port 2(bridge_slave_1) entered forwarding state [ 101.826164][ T7350] netlink: 76 bytes leftover after parsing attributes in process `syz.1.541'. [ 101.848679][ T7356] netlink: 76 bytes leftover after parsing attributes in process `syz.1.541'. [ 102.142121][ T7371] syzkaller0: mtu less than device minimum [ 102.209604][ T7383] netlink: 'syz.1.548': attribute type 4 has an invalid length. [ 102.334341][ T7053] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 102.361721][ T7389] netlink: 20 bytes leftover after parsing attributes in process `syz.1.550'. [ 102.397549][ T7393] netlink: 'syz.4.549': attribute type 27 has an invalid length. [ 102.412534][ T7393] netlink: 152 bytes leftover after parsing attributes in process `syz.4.549'. [ 102.432061][ T7393] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 102.513150][ T7053] veth0_vlan: entered promiscuous mode [ 102.546912][ T7053] veth1_vlan: entered promiscuous mode [ 102.580718][ T7053] veth0_macvtap: entered promiscuous mode [ 102.599689][ T7053] veth1_macvtap: entered promiscuous mode [ 102.640137][ T7053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.662775][ T7053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.684115][ T7053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.702448][ T7053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.716130][ T7053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 102.740583][ T7053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.763848][ T7053] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 102.782906][ T7053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.801406][ T7053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.823213][ T7053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.854574][ T7053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.874654][ T7053] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 102.891180][ T7053] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 102.903196][ T7053] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 102.927574][ T7053] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.941692][ T7053] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.952328][ T7053] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 102.965572][ T7053] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 103.072524][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.112087][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.195046][ T7425] netlink: 68 bytes leftover after parsing attributes in process `syz.3.556'. [ 103.199899][ T2507] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 103.220451][ T2507] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 103.558546][ T7439] No such timeout policy "syz0" [ 103.800895][ T7454] netlink: 200836 bytes leftover after parsing attributes in process `syz.1.564'. [ 103.836221][ T7458] tipc: Failed to obtain node identity [ 103.841905][ T7458] tipc: Enabling of bearer rejected, failed to enable media [ 103.854715][ T7454] openvswitch: netlink: Duplicate key (type 0). [ 103.933043][ T7463] netlink: 48 bytes leftover after parsing attributes in process `syz.0.567'. [ 103.944932][ T7465] netlink: 'syz.1.568': attribute type 1 has an invalid length. [ 103.959431][ T7467] netlink: 'syz.3.566': attribute type 21 has an invalid length. [ 103.987878][ T7467] netlink: 128 bytes leftover after parsing attributes in process `syz.3.566'. [ 104.122267][ T2507] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.363573][ T4623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 104.372362][ T4623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 104.386167][ T4623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 104.399237][ T4623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 104.408151][ T4623] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 104.415566][ T4623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 104.455244][ T7476] ip6tnl0 speed is unknown, defaulting to 1000 [ 104.685646][ T7484] netlink: 'syz.4.572': attribute type 2 has an invalid length. [ 104.706571][ T7476] chnl_net:caif_netlink_parms(): no params data found [ 104.869519][ T7476] bridge0: port 1(bridge_slave_0) entered blocking state [ 104.928824][ T7476] bridge0: port 1(bridge_slave_0) entered disabled state [ 104.937114][ T7476] bridge_slave_0: entered allmulticast mode [ 104.947784][ T7476] bridge_slave_0: entered promiscuous mode [ 104.955712][ T7476] bridge0: port 2(bridge_slave_1) entered blocking state [ 104.962834][ T7476] bridge0: port 2(bridge_slave_1) entered disabled state [ 104.969995][ T7476] bridge_slave_1: entered allmulticast mode [ 104.976984][ T7476] bridge_slave_1: entered promiscuous mode [ 105.034232][ T2507] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.091917][ T7476] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 105.124421][ T7476] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 105.200666][ T7476] team0: Port device team_slave_0 added [ 105.218299][ T7476] team0: Port device team_slave_1 added [ 105.259545][ T2507] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.281127][ T7517] netlink: 'syz.1.583': attribute type 6 has an invalid length. [ 105.296428][ T7517] netlink: 'syz.1.583': attribute type 6 has an invalid length. [ 105.343109][ T2507] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.365637][ T7476] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 105.382536][ T7476] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.420343][ T7476] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 105.442675][ T7476] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 105.450699][ T7476] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 105.496496][ T7476] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 105.557797][ T7476] hsr_slave_0: entered promiscuous mode [ 105.576307][ T7476] hsr_slave_1: entered promiscuous mode [ 105.592502][ T7476] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 105.622503][ T7476] Cannot create hsr debugfs directory [ 105.755881][ T2507] bridge_slave_1: left allmulticast mode [ 105.765357][ T2507] bridge_slave_1: left promiscuous mode [ 105.777980][ T2507] bridge0: port 2(bridge_slave_1) entered disabled state [ 105.798780][ T2507] bridge_slave_0: left allmulticast mode [ 105.812120][ T2507] bridge_slave_0: left promiscuous mode [ 105.819061][ T2507] bridge0: port 1(bridge_slave_0) entered disabled state [ 106.059200][ T7551] __nla_validate_parse: 3 callbacks suppressed [ 106.059218][ T7551] netlink: 108 bytes leftover after parsing attributes in process `syz.3.590'. [ 106.116282][ T7551] netlink: 8 bytes leftover after parsing attributes in process `syz.3.590'. [ 106.289468][ T7560] Cannot find add_set index 0 as target [ 106.445308][ T5236] Bluetooth: hci0: command tx timeout [ 106.580235][ T2507] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 106.608820][ T2507] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 106.623447][ T2507] bond0 (unregistering): Released all slaves [ 106.645188][ T7542] netlink: 8 bytes leftover after parsing attributes in process `syz.0.588'. [ 106.654243][ T7542] bMtadv_lave_0: renamed from lo (while UP) [ 106.670551][ T7542] bMtadv_lave_0: entered allmulticast mode [ 106.738441][ T7579] tunl0: entered promiscuous mode [ 106.763624][ T7579] netlink: 'syz.4.595': attribute type 3 has an invalid length. [ 106.793902][ T7579] netlink: 9 bytes leftover after parsing attributes in process `syz.4.595'. [ 107.009253][ T7586] netlink: 13 bytes leftover after parsing attributes in process `syz.0.598'. [ 107.070192][ T7591] netlink: 'syz.1.600': attribute type 48 has an invalid length. [ 107.113932][ T7591] dccp_invalid_packet: P.type (RESPONSE) not Data || [Data]Ack, while P.X == 0 [ 107.297427][ T7605] do_dccp_setsockopt: sockopt(PACKET_SIZE) is deprecated: fix your app [ 107.444183][ T7614] x_tables: duplicate underflow at hook 3 [ 107.492865][ T7618] xt_AUDIT: Audit type out of range (valid range: 0..2) [ 107.642766][ T2507] hsr_slave_0: left promiscuous mode [ 107.715435][ T2507] hsr_slave_1: left promiscuous mode [ 107.730424][ T2507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 107.741657][ T2507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 107.781993][ T2507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 107.823537][ T2507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 107.857838][ T7636] netlink: 'syz.1.611': attribute type 11 has an invalid length. [ 107.902762][ T7636] netlink: 211132 bytes leftover after parsing attributes in process `syz.1.611'. [ 107.916051][ T2507] veth1_macvtap: left promiscuous mode [ 107.921803][ T7642] x_tables: unsorted entry at hook 3 [ 107.931703][ T2507] veth0_macvtap: left promiscuous mode [ 107.939702][ T2507] veth1_vlan: left promiscuous mode [ 107.950181][ T2507] veth0_vlan: left promiscuous mode [ 107.982710][ T7644] x_tables: ip_tables: rpfilter match: used from hooks FORWARD, but only valid from PREROUTING [ 108.029307][ T7648] TCP: request_sock_subflow_v6: Possible SYN flooding on port [fe80::aa]:20002. Sending cookies. [ 108.374740][ T2507] team0 (unregistering): Port device team_slave_1 removed [ 108.412798][ T2507] team0 (unregistering): Port device team_slave_0 removed [ 108.526074][ T5236] Bluetooth: hci0: command tx timeout [ 108.781652][ T7639] netlink: 28 bytes leftover after parsing attributes in process `syz.3.612'. [ 108.797105][ T7639] netlink: 4 bytes leftover after parsing attributes in process `syz.3.612'. [ 108.808640][ T7639] netlink: 8 bytes leftover after parsing attributes in process `syz.3.612'. [ 108.822850][ T7640] netlink: 36 bytes leftover after parsing attributes in process `syz.4.613'. [ 108.838787][ T7648] geneve2: entered promiscuous mode [ 108.859395][ T7648] geneve2: entered allmulticast mode [ 109.160183][ T7476] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 109.201754][ T7476] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 109.224619][ T7476] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 109.288347][ T7476] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 109.403429][ T7683] netlink: 'syz.4.626': attribute type 1 has an invalid length. [ 109.614464][ T7694] netlink: 'syz.0.629': attribute type 1 has an invalid length. [ 109.616047][ T7476] 8021q: adding VLAN 0 to HW filter on device bond0 [ 109.679781][ T7476] 8021q: adding VLAN 0 to HW filter on device team0 [ 109.704746][ T7694] netlink: 'syz.0.629': attribute type 1 has an invalid length. [ 109.747749][ T2507] bridge0: port 1(bridge_slave_0) entered blocking state [ 109.754921][ T2507] bridge0: port 1(bridge_slave_0) entered forwarding state [ 109.820177][ T2507] bridge0: port 2(bridge_slave_1) entered blocking state [ 109.827384][ T2507] bridge0: port 2(bridge_slave_1) entered forwarding state [ 110.494003][ T7476] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 110.515736][ T7753] netlink: 'syz.4.641': attribute type 4 has an invalid length. [ 110.605841][ T5236] Bluetooth: hci0: command tx timeout [ 110.727337][ T7768] openvswitch: netlink: Message has 8 unknown bytes. [ 110.740296][ T7476] veth0_vlan: entered promiscuous mode [ 110.774716][ T7476] veth1_vlan: entered promiscuous mode [ 110.869010][ T7476] veth0_macvtap: entered promiscuous mode [ 110.894925][ T7476] veth1_macvtap: entered promiscuous mode [ 110.929843][ T7476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.952504][ T7476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.962365][ T7476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 110.980910][ T7476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 110.990827][ T7476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 111.001458][ T7476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.013982][ T7476] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 111.051780][ T7476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.063079][ T7476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.097022][ T7476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.112889][ T7794] Bluetooth: MGMT ver 1.23 [ 111.123776][ T7476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.139309][ T7789] __nla_validate_parse: 9 callbacks suppressed [ 111.139324][ T7789] netlink: 12 bytes leftover after parsing attributes in process `syz.3.647'. [ 111.146307][ T7476] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 111.247768][ T7476] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 111.280609][ T7476] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 111.326674][ T7476] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.353722][ T7476] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.372476][ T7476] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.387541][ T7476] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.429336][ T7809] netlink: 'syz.0.650': attribute type 10 has an invalid length. [ 111.509155][ T7809] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 111.639743][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.642660][ T7819] netlink: 12 bytes leftover after parsing attributes in process `syz.1.654'. [ 111.671657][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.702227][ T7819] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.729482][ T7823] 8021q: adding VLAN 0 to HW filter on device bond1 [ 111.737395][ T7823] bond1: (slave vxcan3): The slave device specified does not support setting the MAC address [ 111.749838][ T7823] bond1: (slave vxcan3): Error -95 calling set_mac_address [ 111.787541][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 111.796607][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 111.949593][ T7828] netlink: 'syz.1.657': attribute type 1 has an invalid length. [ 111.959475][ T7828] netlink: 9116 bytes leftover after parsing attributes in process `syz.1.657'. [ 111.970677][ T7828] netlink: 'syz.1.657': attribute type 2 has an invalid length. [ 111.978690][ T7828] netlink: 177 bytes leftover after parsing attributes in process `syz.1.657'. [ 112.167154][ T5281] IPVS: starting estimator thread 0... [ 112.272894][ T7842] IPVS: using max 20 ests per chain, 48000 per kthread [ 112.340065][ T7859] openvswitch: netlink: Actions may not be safe on all matching packets [ 112.749624][ T12] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.049117][ T12] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.265951][ T12] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.344972][ T12] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.435701][ T7893] SET target dimension over the limit! [ 113.457850][ T7901] A link change request failed with some changes committed already. Interface netdevsim0 may have been left with an inconsistent configuration, please check. [ 113.459206][ T7893] SET target dimension over the limit! [ 113.725068][ T7915] netlink: 8 bytes leftover after parsing attributes in process `syz.0.679'. [ 113.772897][ T7915] batman_adv: Cannot find parent device. Skipping batadv-on-batadv check for gretap1 [ 113.812734][ T7915] gretap1: default qdisc (pfifo_fast) fail, fallback to noqueue [ 113.829958][ T7915] gretap1: entered promiscuous mode [ 113.840608][ T7915] gretap1: entered allmulticast mode [ 113.883672][ T4623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 113.893927][ T4623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 113.902027][ T4623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 113.917507][ T4623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 113.925358][ T4623] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 113.932999][ T4623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 114.001118][ T12] bridge_slave_1: left allmulticast mode [ 114.010700][ T7932] netlink: 104 bytes leftover after parsing attributes in process `syz.0.683'. [ 114.038158][ T12] bridge_slave_1: left promiscuous mode [ 114.066108][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 114.102643][ T12] bridge_slave_0: left allmulticast mode [ 114.111683][ T12] bridge_slave_0: left promiscuous mode [ 114.125272][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 114.179598][ T7946] netlink: 96 bytes leftover after parsing attributes in process `syz.4.688'. [ 114.460161][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 114.472722][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 114.484267][ T12] bond0 (unregistering): Released all slaves [ 114.528835][ T7941] bond2: entered promiscuous mode [ 114.539344][ T7954] x_tables: ip_tables: rpfilter match: used from hooks OUTPUT, but only valid from PREROUTING [ 114.541809][ T7941] bond2: entered allmulticast mode [ 114.575736][ T7941] 8021q: adding VLAN 0 to HW filter on device bond2 [ 114.728228][ T7960] netlink: 12 bytes leftover after parsing attributes in process `syz.4.693'. [ 114.757874][ T7924] ip6tnl0 speed is unknown, defaulting to 1000 [ 114.819478][ T7957] netlink: 24 bytes leftover after parsing attributes in process `syz.1.691'. [ 115.006794][ T7980] netlink: 4 bytes leftover after parsing attributes in process `syz.3.695'. [ 115.248634][ T12] hsr_slave_0: left promiscuous mode [ 115.260392][ T12] hsr_slave_1: left promiscuous mode [ 115.291499][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 115.299017][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 115.314556][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 115.321974][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 115.369090][ T12] veth1_macvtap: left promiscuous mode [ 115.384036][ T12] veth0_macvtap: left promiscuous mode [ 115.393317][ T12] veth1_vlan: left promiscuous mode [ 115.398614][ T12] veth0_vlan: left promiscuous mode [ 115.785852][ T12] team0 (unregistering): Port device team_slave_1 removed [ 115.821684][ T12] team0 (unregistering): Port device team_slave_0 removed [ 115.967738][ T7988] Bluetooth: hci1: Opcode 0x0401 failed: -4 [ 116.042846][ T5236] Bluetooth: hci0: command tx timeout [ 116.137240][ T8009] xt_CT: You must specify a L4 protocol and not use inversions on it [ 116.192146][ T8007] netlink: 24 bytes leftover after parsing attributes in process `syz.1.702'. [ 116.428603][ T7924] chnl_net:caif_netlink_parms(): no params data found [ 116.568249][ T8031] netlink: 'syz.4.705': attribute type 12 has an invalid length. [ 116.583437][ T8027] netlink: 24 bytes leftover after parsing attributes in process `syz.1.708'. [ 116.601705][ T8031] netlink: 197276 bytes leftover after parsing attributes in process `syz.4.705'. [ 116.602270][ T8035] xt_HMARK: proto mask must be zero with L3 mode [ 116.639597][ T8035] netlink: 'syz.3.709': attribute type 75 has an invalid length. [ 116.658965][ T7924] bridge0: port 1(bridge_slave_0) entered blocking state [ 116.667635][ T7924] bridge0: port 1(bridge_slave_0) entered disabled state [ 116.676514][ T7924] bridge_slave_0: entered allmulticast mode [ 116.683734][ T7924] bridge_slave_0: entered promiscuous mode [ 116.691226][ T8037] netlink: 116 bytes leftover after parsing attributes in process `syz.0.710'. [ 116.749519][ T8037] team0 (unregistering): Port device team_slave_0 removed [ 116.762927][ T8037] team0 (unregistering): Port device team_slave_1 removed [ 116.786800][ T7924] bridge0: port 2(bridge_slave_1) entered blocking state [ 116.793994][ T7924] bridge0: port 2(bridge_slave_1) entered disabled state [ 116.801150][ T7924] bridge_slave_1: entered allmulticast mode [ 116.807761][ T7924] bridge_slave_1: entered promiscuous mode [ 116.851705][ T7924] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 116.870443][ T7924] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 116.960604][ T7924] team0: Port device team_slave_0 added [ 116.972455][ T7924] team0: Port device team_slave_1 added [ 117.019056][ T7924] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 117.028971][ T7924] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.057798][ T7924] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 117.070556][ T7924] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 117.082575][ T8047] x_tables: unsorted underflow at hook 2 [ 117.099318][ T7924] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 117.149304][ T8051] xt_TCPMSS: Only works on TCP SYN packets [ 117.150466][ T7924] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 117.167103][ T5236] Bluetooth: hci1: command 0x0401 tx timeout [ 117.325514][ T7924] hsr_slave_0: entered promiscuous mode [ 117.339626][ T7924] hsr_slave_1: entered promiscuous mode [ 117.449873][ T8065] netlink: 156 bytes leftover after parsing attributes in process `syz.1.721'. [ 117.722097][ T8084] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 117.737509][ T8085] netlink: 12 bytes leftover after parsing attributes in process `syz.1.727'. [ 117.961552][ T7924] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 118.009094][ T8095] netlink: 8 bytes leftover after parsing attributes in process `syz.3.733'. [ 118.027291][ T8095] netlink: 'syz.3.733': attribute type 3 has an invalid length. [ 118.037565][ T7924] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 118.047605][ T8101] netlink: 8 bytes leftover after parsing attributes in process `syz.0.735'. [ 118.065033][ T8102] netlink: 88 bytes leftover after parsing attributes in process `syz.1.734'. [ 118.082643][ T7924] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 118.108724][ T7924] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 118.122515][ T5236] Bluetooth: hci0: command tx timeout [ 118.170163][ T8111] netlink: 40 bytes leftover after parsing attributes in process `syz.0.737'. [ 118.367404][ T8123] ip6tnl0 speed is unknown, defaulting to 1000 [ 118.380348][ T7924] 8021q: adding VLAN 0 to HW filter on device bond0 [ 118.449154][ T7924] 8021q: adding VLAN 0 to HW filter on device team0 [ 118.500592][ T63] bridge0: port 1(bridge_slave_0) entered blocking state [ 118.507756][ T63] bridge0: port 1(bridge_slave_0) entered forwarding state [ 118.548084][ T63] bridge0: port 2(bridge_slave_1) entered blocking state [ 118.555273][ T63] bridge0: port 2(bridge_slave_1) entered forwarding state [ 118.620341][ T8135] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.637179][ T8130] bridge0: port 2(bridge_slave_1) entered disabled state [ 118.669170][ T7924] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 118.685272][ T7924] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 118.835494][ T8138] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 118.920650][ T7924] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 119.035630][ T7924] veth0_vlan: entered promiscuous mode [ 119.057346][ T7924] veth1_vlan: entered promiscuous mode [ 119.180967][ T7924] veth0_macvtap: entered promiscuous mode [ 119.198785][ T7924] veth1_macvtap: entered promiscuous mode [ 119.243293][ T7924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.274615][ T7924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.295927][ T7924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.323904][ T7924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.342642][ T7924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 119.379064][ T7924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.403871][ T7924] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 119.459743][ T7924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.514932][ T7924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.534962][ T7924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.536201][ T8165] openvswitch: netlink: Unknown VXLAN extension attribute 0 [ 119.556572][ T7924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.576184][ T7924] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 119.587773][ T7924] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 119.597818][ T8171] openvswitch: netlink: Actions may not be safe on all matching packets [ 119.599058][ T7924] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 119.638992][ T7924] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.672186][ T7924] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.681804][ T7924] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.701476][ T7924] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.797491][ T2507] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.805850][ T2507] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 119.834307][ T1047] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 119.845577][ T1047] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 120.202547][ T4623] Bluetooth: hci0: command tx timeout [ 120.246903][ T8188] netlink: 'syz.1.762': attribute type 1 has an invalid length. [ 121.226406][ T8217] netlink: 'syz.1.770': attribute type 9 has an invalid length. [ 121.292495][ T8229] __nla_validate_parse: 7 callbacks suppressed [ 121.292512][ T8229] netlink: 52 bytes leftover after parsing attributes in process `syz.3.773'. [ 121.336262][ T8229] netlink: 52 bytes leftover after parsing attributes in process `syz.3.773'. [ 121.358421][ T8229] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 121.380529][ T8235] netlink: 'syz.0.774': attribute type 1 has an invalid length. [ 121.397409][ T8217] netlink: 76 bytes leftover after parsing attributes in process `syz.1.770'. [ 121.442931][ T8235] netlink: 44 bytes leftover after parsing attributes in process `syz.0.774'. [ 121.621002][ T8248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.776'. [ 121.647830][ T8248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.776'. [ 121.660724][ T8248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.776'. [ 121.670043][ T8248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.776'. [ 121.685280][ T8248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.776'. [ 121.712533][ T8248] netlink: 4 bytes leftover after parsing attributes in process `syz.0.776'. [ 121.806860][ T8261] xt_hashlimit: overflow, try lower: 1125899906842624/8 [ 121.864644][ T8264] netlink: 'syz.0.779': attribute type 21 has an invalid length. [ 122.132978][ T8285] netlink: 'syz.0.783': attribute type 10 has an invalid length. [ 122.282782][ T4623] Bluetooth: hci0: command 0x0419 tx timeout [ 122.320636][ T8288] openvswitch: netlink: Actions may not be safe on all matching packets [ 122.815924][ T2507] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 123.889241][ T8320] ip6tnl0 speed is unknown, defaulting to 1000 [ 124.325845][ T2507] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.420695][ T4623] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 124.479218][ T4623] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 124.490228][ T4623] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 124.538785][ T4623] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 124.561018][ T4623] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 124.568519][ T4623] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 124.674875][ T8335] ip6tnl0 speed is unknown, defaulting to 1000 [ 125.631850][ T8335] chnl_net:caif_netlink_parms(): no params data found [ 126.682747][ T4623] Bluetooth: hci0: command tx timeout [ 126.781522][ T2507] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 126.856438][ T8335] bridge0: port 1(bridge_slave_0) entered blocking state [ 126.873535][ T8335] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.881929][ T8335] bridge_slave_0: entered allmulticast mode [ 126.898752][ T8335] bridge_slave_0: entered promiscuous mode [ 126.930738][ T8335] bridge0: port 2(bridge_slave_1) entered blocking state [ 126.968593][ T8335] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.991307][ T8335] bridge_slave_1: entered allmulticast mode [ 127.020686][ T8335] bridge_slave_1: entered promiscuous mode [ 127.501977][ T8335] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 127.556956][ T8335] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 128.702323][ T8335] team0: Port device team_slave_0 added [ 128.730466][ T8335] team0: Port device team_slave_1 added [ 128.762681][ T4623] Bluetooth: hci0: command tx timeout [ 128.881773][ T8335] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 128.899871][ T8335] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 128.937720][ T8335] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 129.049407][ T2507] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.096915][ T8335] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 129.121873][ T8335] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 129.181423][ T8335] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 129.416125][ T8335] hsr_slave_0: entered promiscuous mode [ 129.451947][ T8335] hsr_slave_1: entered promiscuous mode [ 129.513528][ T8335] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 129.549211][ T8335] Cannot create hsr debugfs directory [ 129.632408][ C1] sched: DL replenish lagged too much [ 129.741610][ T8431] __nla_validate_parse: 133 callbacks suppressed [ 129.741629][ T8431] netlink: 4072 bytes leftover after parsing attributes in process `syz.3.818'. [ 129.792027][ T8431] openvswitch: netlink: Actions may not be safe on all matching packets [ 130.059970][ T8435] netlink: 24 bytes leftover after parsing attributes in process `syz.3.821'. [ 130.842715][ T4623] Bluetooth: hci0: command tx timeout [ 130.960635][ T8454] syzkaller1: entered promiscuous mode [ 130.994522][ T8454] syzkaller1: entered allmulticast mode [ 131.019392][ T8457] netlink: 4 bytes leftover after parsing attributes in process `syz.3.827'. [ 131.030696][ T8458] netlink: 'syz.4.826': attribute type 10 has an invalid length. [ 131.570795][ T8464] tipc: Started in network mode [ 131.580970][ T8464] tipc: Node identity 00000000000000000000000000000001, cluster identity 4711 [ 131.597368][ T8464] tipc: New replicast peer: fe80:0000:0000:0000:0000:0000:0000:00bb [ 131.612231][ T8464] tipc: Enabled bearer , priority 10 [ 131.773493][ T8466] netlink: 'syz.3.829': attribute type 1 has an invalid length. [ 131.836835][ T8466] 8021q: adding VLAN 0 to HW filter on device bond3 [ 131.949884][ T8468] 8021q: adding VLAN 0 to HW filter on device bond3 [ 131.950788][ T8466] netlink: 'syz.3.829': attribute type 9 has an invalid length. [ 131.992077][ T8468] bond3: (slave ip6tnl1): The slave device specified does not support setting the MAC address [ 132.024782][ T8468] bond3: (slave ip6tnl1): Error -95 calling set_mac_address [ 132.058436][ T8471] netlink: 256 bytes leftover after parsing attributes in process `syz.3.829'. [ 132.102624][ T8466] netlink: 134688 bytes leftover after parsing attributes in process `syz.3.829'. [ 132.722574][ T8] tipc: Node number set to 1 [ 132.867464][ T5236] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 132.882686][ T5236] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 132.890527][ T5236] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 132.898593][ T5236] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 132.908188][ T5236] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 132.915625][ T5236] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 132.933072][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 132.939378][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 132.945922][ T5240] Bluetooth: hci0: command tx timeout [ 133.474661][ T2507] bridge_slave_1: left allmulticast mode [ 133.492571][ T2507] bridge_slave_1: left promiscuous mode [ 133.498293][ T2507] bridge0: port 2(bridge_slave_1) entered disabled state [ 133.552261][ T2507] bridge_slave_0: left allmulticast mode [ 133.571807][ T2507] bridge_slave_0: left promiscuous mode [ 133.591569][ T2507] bridge0: port 1(bridge_slave_0) entered disabled state [ 135.005466][ T4623] Bluetooth: hci4: command tx timeout [ 135.517862][ T8495] openvswitch: netlink: Duplicate or invalid key (type 0). [ 135.542585][ T8495] openvswitch: netlink: Actions may not be safe on all matching packets [ 136.801014][ T2507] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 136.839153][ T2507] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 136.867321][ T2507] bond0 (unregistering): Released all slaves [ 137.082727][ T4623] Bluetooth: hci4: command tx timeout [ 137.307811][ T8491] netlink: 32 bytes leftover after parsing attributes in process `syz.1.835'. [ 137.455377][ T8479] ip6tnl0 speed is unknown, defaulting to 1000 [ 138.375884][ T8479] chnl_net:caif_netlink_parms(): no params data found [ 138.586290][ T8529] netlink: 12 bytes leftover after parsing attributes in process `syz.4.843'. [ 139.040107][ T8479] bridge0: port 1(bridge_slave_0) entered blocking state [ 139.062648][ T8479] bridge0: port 1(bridge_slave_0) entered disabled state [ 139.082864][ T8479] bridge_slave_0: entered allmulticast mode [ 139.089830][ T8479] bridge_slave_0: entered promiscuous mode [ 139.133347][ T8479] bridge0: port 2(bridge_slave_1) entered blocking state [ 139.156639][ T8479] bridge0: port 2(bridge_slave_1) entered disabled state [ 139.164317][ T4623] Bluetooth: hci4: command tx timeout [ 139.178680][ T8479] bridge_slave_1: entered allmulticast mode [ 139.188128][ T8479] bridge_slave_1: entered promiscuous mode [ 139.205416][ T8536] ebt_limit: overflow, try lower: 0/0 [ 139.291819][ T8479] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 139.338575][ T8479] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 139.451588][ T8479] team0: Port device team_slave_0 added [ 139.478923][ T8479] team0: Port device team_slave_1 added [ 139.552344][ T8479] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 139.570287][ T8479] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.608438][ T8479] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 139.630419][ T8479] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 139.639988][ T8479] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 139.678570][ T8479] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 139.819053][ T8479] hsr_slave_0: entered promiscuous mode [ 139.859926][ T8479] hsr_slave_1: entered promiscuous mode [ 139.897856][ T8479] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 139.909359][ T8479] Cannot create hsr debugfs directory [ 140.114397][ T8546] syz.3.848 uses old SIOCAX25GETINFO [ 140.631174][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.657461][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.924479][ T8553] netlink: 24 bytes leftover after parsing attributes in process `syz.4.851'. [ 141.243640][ T4623] Bluetooth: hci4: command tx timeout [ 142.406262][ T8584] netlink: 'syz.1.864': attribute type 10 has an invalid length. [ 142.428419][ T8584] netlink: 40 bytes leftover after parsing attributes in process `syz.1.864'. [ 142.461812][ T8584] bridge0: port 3(dummy0) entered blocking state [ 142.478258][ T8584] bridge0: port 3(dummy0) entered disabled state [ 142.488413][ T8584] dummy0: entered allmulticast mode [ 142.501545][ T8584] dummy0: entered promiscuous mode [ 142.511253][ T8584] bridge0: port 3(dummy0) entered blocking state [ 142.517746][ T8584] bridge0: port 3(dummy0) entered forwarding state [ 142.603469][ T8588] ip6tnl0 speed is unknown, defaulting to 1000 [ 142.774629][ T8596] geneve2: entered promiscuous mode [ 142.802360][ T8596] geneve2: entered allmulticast mode [ 142.923945][ T8599] Bluetooth: hci0: Opcode 0x0c20 failed: -22 [ 143.302585][ T8599] ip6tnl0 speed is unknown, defaulting to 1000 [ 143.543895][ T2507] hsr_slave_0: left promiscuous mode [ 143.626184][ T2507] hsr_slave_1: left promiscuous mode [ 143.689968][ T2507] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.707070][ T2507] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 143.763239][ T2507] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 143.782532][ T2507] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 143.878801][ T2507] veth1_macvtap: left promiscuous mode [ 143.894888][ T2507] veth0_macvtap: left promiscuous mode [ 143.915230][ T2507] veth1_vlan: left promiscuous mode [ 143.920546][ T2507] veth0_vlan: left promiscuous mode [ 145.002827][ T4623] Bluetooth: hci0: command tx timeout [ 145.629710][ T2507] team0 (unregistering): Port device team_slave_1 removed [ 145.799782][ T2507] team0 (unregistering): Port device team_slave_0 removed [ 147.290530][ T8606] netlink: 'syz.1.870': attribute type 1 has an invalid length. [ 153.059614][ T5236] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 153.075936][ T5236] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 153.084190][ T5236] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 153.093181][ T5236] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 153.102210][ T5236] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 153.109612][ T5236] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 154.050048][ T5236] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 154.069230][ T5236] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 154.078755][ T5236] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 154.087416][ T5236] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 154.095118][ T5236] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 154.104187][ T5236] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 155.163508][ T5236] Bluetooth: hci5: command tx timeout [ 156.122605][ T5236] Bluetooth: hci6: command tx timeout [ 157.243119][ T4623] Bluetooth: hci5: command tx timeout [ 158.212697][ T5236] Bluetooth: hci6: command tx timeout [ 158.321798][ T4623] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 158.340103][ T4623] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 158.349382][ T4623] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 158.363343][ T4623] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 158.375317][ T4623] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 158.382775][ T4623] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 159.322756][ T5236] Bluetooth: hci5: command tx timeout [ 160.282594][ T5236] Bluetooth: hci6: command tx timeout [ 160.442807][ T5236] Bluetooth: hci7: command tx timeout [ 161.402807][ T5236] Bluetooth: hci5: command tx timeout [ 162.362658][ T5236] Bluetooth: hci6: command tx timeout [ 162.522609][ T5236] Bluetooth: hci7: command tx timeout [ 164.602617][ T5236] Bluetooth: hci7: command tx timeout [ 166.682741][ T5236] Bluetooth: hci7: command tx timeout [ 181.092644][ T5236] Bluetooth: hci3: command 0x0406 tx timeout [ 181.098705][ T5236] Bluetooth: hci1: command 0x0401 tx timeout [ 181.106735][ T5236] Bluetooth: hci2: command 0x0406 tx timeout [ 186.668724][ T5240] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 186.691011][ T5240] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 186.698914][ T5240] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 186.707250][ T5240] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 186.715133][ T5240] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 186.722477][ T5240] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 188.763027][ T5240] Bluetooth: hci8: command tx timeout [ 190.842861][ T5240] Bluetooth: hci8: command tx timeout [ 192.922891][ T5240] Bluetooth: hci8: command tx timeout [ 193.656881][ T4623] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 193.676936][ T4623] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 193.684913][ T4623] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 193.693963][ T4623] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 193.701546][ T4623] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 193.709131][ T4623] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 194.371640][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.378058][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 195.003810][ T4623] Bluetooth: hci8: command tx timeout [ 195.802632][ T4623] Bluetooth: hci9: command tx timeout [ 197.882631][ T4623] Bluetooth: hci9: command tx timeout [ 199.962891][ T4623] Bluetooth: hci9: command tx timeout [ 202.042701][ T4623] Bluetooth: hci9: command tx timeout [ 214.760386][ T4623] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 214.772681][ T4623] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 214.783029][ T4623] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 214.802523][ T4623] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 214.810194][ T4623] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 214.817798][ T4623] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 215.071834][ T5240] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 215.083054][ T5240] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 215.091025][ T5240] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 215.100388][ T5240] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 215.108123][ T5240] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 215.115581][ T5240] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 216.843047][ T5240] Bluetooth: hci10: command tx timeout [ 217.162617][ T5240] Bluetooth: hci11: command tx timeout [ 218.922935][ T5240] Bluetooth: hci10: command tx timeout [ 219.204321][ T4623] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 219.214917][ T4623] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 219.231209][ T4623] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 219.240474][ T4623] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 219.247744][ T5234] Bluetooth: hci11: command tx timeout [ 219.254077][ T4623] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 219.261517][ T4623] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 221.002971][ T4623] Bluetooth: hci10: command tx timeout [ 221.322577][ T5240] Bluetooth: hci11: command tx timeout [ 221.329406][ T4623] Bluetooth: hci12: command tx timeout [ 223.082965][ T4623] Bluetooth: hci10: command tx timeout [ 223.402622][ T5240] Bluetooth: hci11: command tx timeout [ 223.408179][ T4623] Bluetooth: hci12: command tx timeout [ 225.482720][ T4623] Bluetooth: hci12: command tx timeout [ 227.562675][ T4623] Bluetooth: hci12: command tx timeout [ 247.764381][ T5240] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 247.773536][ T5240] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 247.784301][ T5240] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 247.802116][ T5240] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 247.810127][ T5240] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 247.822822][ T5240] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 249.882624][ T5240] Bluetooth: hci13: command tx timeout [ 251.962736][ T5240] Bluetooth: hci13: command tx timeout [ 254.042711][ T5240] Bluetooth: hci13: command tx timeout [ 254.551384][ T4623] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 254.570039][ T4623] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 254.580143][ T4623] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 254.588212][ T4623] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 254.595982][ T4623] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 254.603814][ T4623] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 255.813366][ T1268] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.819693][ T1268] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.123983][ T4623] Bluetooth: hci13: command tx timeout [ 256.682615][ T4623] Bluetooth: hci14: command tx timeout [ 257.892501][ T4623] Bluetooth: hci4: command 0x0406 tx timeout [ 258.762604][ T5240] Bluetooth: hci14: command tx timeout [ 260.843725][ T5240] Bluetooth: hci14: command tx timeout [ 262.922660][ T5240] Bluetooth: hci14: command tx timeout [ 275.768507][ T4623] Bluetooth: hci15: unexpected cc 0x0c03 length: 249 > 1 [ 275.777948][ T4623] Bluetooth: hci15: unexpected cc 0x1003 length: 249 > 9 [ 275.786041][ T4623] Bluetooth: hci15: unexpected cc 0x1001 length: 249 > 9 [ 275.794118][ T4623] Bluetooth: hci15: unexpected cc 0x0c23 length: 249 > 4 [ 275.802234][ T4623] Bluetooth: hci15: unexpected cc 0x0c25 length: 249 > 3 [ 275.809935][ T4623] Bluetooth: hci15: unexpected cc 0x0c38 length: 249 > 2 [ 276.064674][ T5240] Bluetooth: hci16: unexpected cc 0x0c03 length: 249 > 1 [ 276.074008][ T5240] Bluetooth: hci16: unexpected cc 0x1003 length: 249 > 9 [ 276.092175][ T5240] Bluetooth: hci16: unexpected cc 0x1001 length: 249 > 9 [ 276.103253][ T5240] Bluetooth: hci16: unexpected cc 0x0c23 length: 249 > 4 [ 276.111118][ T5240] Bluetooth: hci16: unexpected cc 0x0c25 length: 249 > 3 [ 276.118575][ T5240] Bluetooth: hci16: unexpected cc 0x0c38 length: 249 > 2 [ 277.882819][ T5240] Bluetooth: hci15: command tx timeout [ 278.203103][ T5240] Bluetooth: hci16: command tx timeout [ 278.372654][ T5249] Bluetooth: hci6: command 0x0406 tx timeout [ 278.378720][ T5249] Bluetooth: hci5: command 0x0406 tx timeout [ 279.963003][ T4623] Bluetooth: hci15: command tx timeout [ 280.111149][ T5234] Bluetooth: hci17: unexpected cc 0x0c03 length: 249 > 1 [ 280.120251][ T5234] Bluetooth: hci17: unexpected cc 0x1003 length: 249 > 9 [ 280.129098][ T5234] Bluetooth: hci17: unexpected cc 0x1001 length: 249 > 9 [ 280.137111][ T5234] Bluetooth: hci17: unexpected cc 0x0c23 length: 249 > 4 [ 280.146872][ T5234] Bluetooth: hci17: unexpected cc 0x0c25 length: 249 > 3 [ 280.154429][ T5234] Bluetooth: hci17: unexpected cc 0x0c38 length: 249 > 2 [ 280.282964][ T4623] Bluetooth: hci16: command tx timeout [ 282.042847][ T5249] Bluetooth: hci15: command tx timeout [ 282.202551][ T5234] Bluetooth: hci17: command tx timeout [ 282.362878][ T5234] Bluetooth: hci16: command tx timeout [ 283.488144][ T5234] Bluetooth: hci7: command 0x0406 tx timeout [ 284.122726][ T4623] Bluetooth: hci15: command tx timeout [ 284.285332][ T4623] Bluetooth: hci17: command tx timeout [ 284.442886][ T4623] Bluetooth: hci16: command tx timeout [ 286.364350][ T4623] Bluetooth: hci17: command tx timeout [ 288.442675][ T5234] Bluetooth: hci17: command tx timeout [ 296.122756][ T30] INFO: task kworker/u8:7:2507 blocked for more than 143 seconds. [ 296.130617][ T30] Not tainted 6.12.0-rc1-syzkaller-00147-g9234a2549cb6 #0 [ 296.149638][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 296.159514][ T30] task:kworker/u8:7 state:D stack:20920 pid:2507 tgid:2507 ppid:2 flags:0x00004000 SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 296.174760][ T30] Workqueue: netns cleanup_net [ 296.179600][ T30] Call Trace: [ 296.208958][ T30] [ 296.211934][ T30] __schedule+0x1895/0x4b30 [ 296.222562][ T30] ? __pfx___schedule+0x10/0x10 [ 296.227452][ T30] ? __pfx_lock_release+0x10/0x10 [ 296.302457][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 296.307968][ T30] ? kthread_data+0x52/0xd0 [ 296.364778][ T30] ? schedule+0x90/0x320 [ 296.369065][ T30] ? wq_worker_sleeping+0x66/0x240 [ 296.400670][ T30] ? schedule+0x90/0x320 [ 296.422519][ T30] schedule+0x14b/0x320 [ 296.426719][ T30] schedule_preempt_disabled+0x13/0x30 [ 296.432204][ T30] __mutex_lock+0x6a7/0xd70 [ 296.482416][ T30] ? __mutex_lock+0x52a/0xd70 [ 296.487131][ T30] ? wg_destruct+0x25/0x2e0 [ 296.491664][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 296.572509][ T30] ? __pfx_free_percpu+0x10/0x10 [ 296.577490][ T30] ? kobject_put+0x272/0x480 [ 296.582101][ T30] ? __pfx_wg_destruct+0x10/0x10 [ 296.621451][ T30] wg_destruct+0x25/0x2e0 [ 296.626402][ T30] ? __pfx_wg_destruct+0x10/0x10 [ 296.631377][ T30] netdev_run_todo+0xe1a/0x1000 [ 296.662488][ T30] ? __pfx_netdev_run_todo+0x10/0x10 [ 296.667808][ T30] ? unregister_netdevice_queue+0x26b/0x370 [ 296.696675][ T30] ? batadv_softif_destroy_netlink+0x1e3/0x270 [ 296.721044][ T30] default_device_exit_batch+0xa24/0xaa0 [ 296.726766][ T30] ? __pfx___might_resched+0x10/0x10 [ 296.732081][ T30] ? __pfx_default_device_exit_batch+0x10/0x10 [ 296.765604][ T30] ? __pfx_rdma_dev_exit_net+0x10/0x10 [ 296.771106][ T30] ? cfg802154_pernet_exit+0xc3/0xe0 [ 296.808859][ T30] ? __pfx_default_device_exit_batch+0x10/0x10 [ 296.817329][ T30] cleanup_net+0x89d/0xcc0 [ 296.821790][ T30] ? __pfx_cleanup_net+0x10/0x10 [ 296.832541][ T30] ? process_scheduled_works+0x976/0x1850 [ 296.838305][ T30] process_scheduled_works+0xa63/0x1850 [ 296.858784][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 296.870445][ T30] ? assign_work+0x364/0x3d0 [ 296.879441][ T30] worker_thread+0x870/0xd30 [ 296.888450][ T30] ? __kthread_parkme+0x169/0x1d0 [ 296.898301][ T30] ? __pfx_worker_thread+0x10/0x10 [ 296.907856][ T30] kthread+0x2f0/0x390 [ 296.911962][ T30] ? __pfx_worker_thread+0x10/0x10 [ 296.921760][ T30] ? __pfx_kthread+0x10/0x10 [ 296.931067][ T30] ret_from_fork+0x4b/0x80 [ 296.939977][ T30] ? __pfx_kthread+0x10/0x10 [ 296.948981][ T30] ret_from_fork_asm+0x1a/0x30 [ 296.958531][ T30] [ 296.961683][ T30] INFO: task syz-executor:8335 blocked for more than 144 seconds. [ 296.979684][ T30] Not tainted 6.12.0-rc1-syzkaller-00147-g9234a2549cb6 #0 [ 296.989542][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 297.002671][ T30] task:syz-executor state:D stack:21728 pid:8335 tgid:8335 ppid:1 flags:0x00004006 [ 297.022493][ T30] Call Trace: [ 297.025797][ T30] [ 297.028745][ T30] __schedule+0x1895/0x4b30 [ 297.041126][ T30] ? __pfx___schedule+0x10/0x10 [ 297.049151][ T30] ? __pfx_lock_release+0x10/0x10 [ 297.062810][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 297.068323][ T30] ? schedule+0x90/0x320 [ 297.081110][ T30] schedule+0x14b/0x320 [ 297.087035][ T30] schedule_preempt_disabled+0x13/0x30 [ 297.096458][ T30] __mutex_lock+0x6a7/0xd70 [ 297.100996][ T30] ? __mutex_lock+0x52a/0xd70 [ 297.110819][ T30] ? unregister_netdevice_notifier_net+0x89/0x3a0 [ 297.120800][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 297.131370][ T30] unregister_netdevice_notifier_net+0x89/0x3a0 [ 297.141107][ T30] ? _raw_spin_unlock+0x28/0x50 [ 297.151375][ T30] ? mntput_no_expire+0x2da/0x850 [ 297.156579][ T30] ? __pfx_unregister_netdevice_notifier_net+0x10/0x10 [ 297.172893][ T30] ? __pfx_mntput_no_expire+0x10/0x10 [ 297.178311][ T30] ? _raw_spin_unlock+0x28/0x50 [ 297.191650][ T30] ? simple_release_fs+0x9c/0xd0 [ 297.197955][ T30] nsim_dev_hwstats_exit+0x81/0x290 [ 297.212080][ T30] ? devl_port_unregister+0x19d/0x290 [ 297.217654][ T30] ? nsim_dev_reload_destroy+0x28a/0x490 [ 297.231989][ T30] nsim_dev_reload_destroy+0x2ad/0x490 [ 297.237677][ T30] ? __pfx_nsim_bus_remove+0x10/0x10 [ 297.251651][ T30] nsim_drv_remove+0x58/0x160 [ 297.256480][ T30] device_release_driver_internal+0x4a9/0x7c0 [ 297.262745][ T30] bus_remove_device+0x34f/0x420 [ 297.267719][ T30] device_del+0x57a/0x9b0 [ 297.272079][ T30] ? __pfx_device_del+0x10/0x10 [ 297.286123][ T30] device_unregister+0x20/0xc0 [ 297.290919][ T30] del_device_store+0x363/0x480 [ 297.301603][ T30] ? __pfx_del_device_store+0x10/0x10 [ 297.311592][ T30] ? sysfs_kf_write+0x182/0x2a0 [ 297.321866][ T30] ? bus_attr_store+0x4f/0xb0 [ 297.326825][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 297.332052][ T30] kernfs_fop_write_iter+0x3a0/0x500 [ 297.347437][ T30] vfs_write+0xa6d/0xc90 [ 297.351719][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 297.360817][ T30] ? __pfx_vfs_write+0x10/0x10 [ 297.371014][ T30] ? do_sys_openat2+0x17a/0x1d0 [ 297.376105][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 297.381344][ T30] ? fdget_pos+0x265/0x320 [ 297.394862][ T30] ksys_write+0x183/0x2b0 [ 297.399225][ T30] ? __pfx_ksys_write+0x10/0x10 [ 297.411681][ T30] ? do_syscall_64+0x100/0x230 [ 297.419917][ T30] ? do_syscall_64+0xb6/0x230 [ 297.425616][ T30] do_syscall_64+0xf3/0x230 [ 297.430154][ T30] ? clear_bhb_loop+0x35/0x90 [ 297.442761][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.448703][ T30] RIP: 0033:0x7fe8c817cadf [ 297.460772][ T30] RSP: 002b:00007ffcd18ae3c0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 297.470818][ T30] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007fe8c817cadf [ 297.490201][ T30] RDX: 0000000000000001 RSI: 00007ffcd18ae410 RDI: 0000000000000005 [ 297.504582][ T30] RBP: 00007fe8c81f13ae R08: 0000000000000000 R09: 00007ffcd18ae217 [ 297.519140][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 297.530708][ T30] R13: 00007ffcd18ae410 R14: 00007fe8c8e64620 R15: 0000000000000003 [ 297.542512][ T30] [ 297.545621][ T30] INFO: task syz-executor:8479 blocked for more than 144 seconds. [ 297.561868][ T30] Not tainted 6.12.0-rc1-syzkaller-00147-g9234a2549cb6 #0 [ 297.569743][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 297.582559][ T30] task:syz-executor state:D stack:21168 pid:8479 tgid:8479 ppid:1 flags:0x00000004 [ 297.601047][ T30] Call Trace: [ 297.604453][ T30] [ 297.607408][ T30] __schedule+0x1895/0x4b30 [ 297.612342][ T30] ? __pfx___schedule+0x10/0x10 [ 297.626597][ T30] ? __pfx_lock_release+0x10/0x10 [ 297.631655][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 297.648155][ T30] ? schedule+0x90/0x320 [ 297.655736][ T30] schedule+0x14b/0x320 [ 297.659931][ T30] schedule_preempt_disabled+0x13/0x30 [ 297.670922][ T30] __mutex_lock+0x6a7/0xd70 [ 297.675584][ T30] ? __mutex_lock+0x52a/0xd70 [ 297.680285][ T30] ? del_device_store+0xfc/0x480 [ 297.693923][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 297.698994][ T30] del_device_store+0xfc/0x480 [ 297.710246][ T30] ? __pfx_del_device_store+0x10/0x10 [ 297.718303][ T30] ? sysfs_kf_write+0x182/0x2a0 [ 297.730292][ T30] ? bus_attr_store+0x4f/0xb0 [ 297.737545][ T30] ? __pfx_sysfs_kf_write+0x10/0x10 [ 297.749405][ T30] kernfs_fop_write_iter+0x3a0/0x500 [ 297.758075][ T30] vfs_write+0xa6d/0xc90 [ 297.762355][ T30] ? __pfx_kernfs_fop_write_iter+0x10/0x10 [ 297.777099][ T30] ? __pfx_vfs_write+0x10/0x10 [ 297.781888][ T30] ? do_sys_openat2+0x17a/0x1d0 [ 297.792139][ T30] ? __pfx_do_sys_openat2+0x10/0x10 [ 297.800723][ T30] ? blkcg_maybe_throttle_current+0x1ab/0xb80 [ 297.807142][ T30] ? fdget_pos+0x265/0x320 [ 297.811588][ T30] ksys_write+0x183/0x2b0 [ 297.824989][ T30] ? __pfx_ksys_write+0x10/0x10 [ 297.830002][ T30] ? do_syscall_64+0x100/0x230 [ 297.840932][ T30] ? do_syscall_64+0xb6/0x230 [ 297.848924][ T30] do_syscall_64+0xf3/0x230 [ 297.860115][ T30] ? clear_bhb_loop+0x35/0x90 [ 297.864922][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 297.870845][ T30] RIP: 0033:0x7f1d9077cadf [ 297.892619][ T30] RSP: 002b:00007ffcc96899c0 EFLAGS: 00000293 ORIG_RAX: 0000000000000001 [ 297.901071][ T30] RAX: ffffffffffffffda RBX: 0000000000000005 RCX: 00007f1d9077cadf [ 297.919002][ T30] RDX: 0000000000000001 RSI: 00007ffcc9689a10 RDI: 0000000000000005 [ 297.929195][ T30] RBP: 00007f1d907f13ae R08: 0000000000000000 R09: 00007ffcc9689817 [ 297.938354][ T30] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000001 [ 297.954752][ T30] R13: 00007ffcc9689a10 R14: 00007f1d91464620 R15: 0000000000000003 [ 297.970983][ T30] [ 297.976496][ T30] INFO: task syz.3.865:8588 blocked for more than 145 seconds. [ 297.990593][ T30] Not tainted 6.12.0-rc1-syzkaller-00147-g9234a2549cb6 #0 [ 298.000529][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 298.012542][ T30] task:syz.3.865 state:D stack:22712 pid:8588 tgid:8583 ppid:5227 flags:0x00004006 [ 298.030808][ T30] Call Trace: [ 298.034211][ T30] [ 298.037340][ T30] __schedule+0x1895/0x4b30 [ 298.041898][ T30] ? __pfx___schedule+0x10/0x10 [ 298.058588][ T30] ? __pfx_lock_release+0x10/0x10 [ 298.064000][ T30] ? schedule+0x90/0x320 [ 298.070590][ T30] schedule+0x14b/0x320 [ 298.082450][ T30] schedule_timeout+0xb0/0x310 [ 298.087255][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 298.100523][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 298.107088][ T30] ? wait_for_completion+0x2fe/0x620 [ 298.118463][ T30] ? wait_for_completion+0x2fe/0x620 [ 298.124384][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 298.129624][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 298.145490][ T30] ? wait_for_completion+0x2fe/0x620 [ 298.150957][ T30] wait_for_completion+0x355/0x620 [ 298.161794][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 298.170870][ T30] ? __flush_work+0xe7/0xc50 [ 298.181433][ T30] __flush_work+0xa37/0xc50 [ 298.187273][ T30] ? __flush_work+0xe7/0xc50 [ 298.191899][ T30] ? __pfx___flush_work+0x10/0x10 [ 298.206968][ T30] ? __pfx_wq_barrier_func+0x10/0x10 [ 298.212305][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 298.222482][ T30] ? _raw_spin_lock_irq+0xdf/0x120 [ 298.228061][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 298.241487][ T30] unregister_netdevice_many_notify+0x87b/0x1da0 [ 298.248143][ T30] ? net_generic+0x1f/0x240 [ 298.261536][ T30] ? __pfx_unregister_netdevice_many_notify+0x10/0x10 [ 298.268392][ T30] ? vxlan_exit_batch_rtnl+0x36f/0x400 [ 298.282515][ T30] ? nexthop_net_exit_batch_rtnl+0x100/0x150 [ 298.288540][ T30] setup_net+0x6c1/0x9e0 [ 298.302246][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 298.307902][ T30] ? __pfx_setup_net+0x10/0x10 [ 298.321446][ T30] copy_net_ns+0x33f/0x570 [ 298.326261][ T30] create_new_namespaces+0x425/0x7b0 [ 298.331593][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 298.346302][ T30] ksys_unshare+0x619/0xc10 [ 298.350859][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 298.360249][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 298.371653][ T30] ? exc_page_fault+0x590/0x8c0 [ 298.376772][ T30] __x64_sys_unshare+0x38/0x40 [ 298.381563][ T30] do_syscall_64+0xf3/0x230 [ 298.394920][ T30] ? clear_bhb_loop+0x35/0x90 [ 298.399632][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.412551][ T30] RIP: 0033:0x7fb7b597dff9 [ 298.416997][ T30] RSP: 002b:00007fb7b6711038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 298.433704][ T30] RAX: ffffffffffffffda RBX: 00007fb7b5b36058 RCX: 00007fb7b597dff9 [ 298.441706][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000062040200 [ 298.462570][ T30] RBP: 00007fb7b59f0296 R08: 0000000000000000 R09: 0000000000000000 [ 298.470570][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.486417][ T30] R13: 0000000000000001 R14: 00007fb7b5b36058 R15: 00007ffcdc70fa58 [ 298.498901][ T30] [ 298.502011][ T30] INFO: task syz.4.869:8599 blocked for more than 145 seconds. [ 298.520445][ T30] Not tainted 6.12.0-rc1-syzkaller-00147-g9234a2549cb6 #0 [ 298.544883][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 298.562866][ T30] task:syz.4.869 state:D stack:24248 pid:8599 tgid:8598 ppid:5228 flags:0x00004006 [ 298.581674][ T30] Call Trace: [ 298.585082][ T30] [ 298.588034][ T30] __schedule+0x1895/0x4b30 [ 298.592782][ T30] ? __pfx___schedule+0x10/0x10 [ 298.597669][ T30] ? __pfx_lock_release+0x10/0x10 [ 298.611469][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 298.617572][ T30] ? schedule+0x90/0x320 [ 298.621855][ T30] schedule+0x14b/0x320 [ 298.636769][ T30] schedule_preempt_disabled+0x13/0x30 [ 298.642285][ T30] __mutex_lock+0x6a7/0xd70 [ 298.651041][ T30] ? __mutex_lock+0x52a/0xd70 [ 298.660468][ T30] ? ip_tunnel_init_net+0x20e/0x720 [ 298.669132][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 298.679596][ T30] ? read_word_at_a_time+0xe/0x20 [ 298.691537][ T30] ? sized_strscpy+0x8d/0x220 [ 298.705872][ T30] ip_tunnel_init_net+0x20e/0x720 [ 298.710945][ T30] ? __pfx_ip_tunnel_init_net+0x10/0x10 [ 298.721932][ T30] ? ops_init+0x75/0x590 [ 298.729521][ T30] ops_init+0x31e/0x590 [ 298.741072][ T30] ? lockdep_init_map_type+0xa1/0x910 [ 298.749805][ T30] setup_net+0x287/0x9e0 [ 298.759555][ T30] ? __pfx_down_read_killable+0x10/0x10 [ 298.768693][ T30] ? __pfx_setup_net+0x10/0x10 [ 298.778957][ T30] copy_net_ns+0x33f/0x570 [ 298.786730][ T30] create_new_namespaces+0x425/0x7b0 [ 298.792072][ T30] unshare_nsproxy_namespaces+0x124/0x180 [ 298.802517][ T30] ksys_unshare+0x619/0xc10 [ 298.807061][ T30] ? __pfx_ksys_unshare+0x10/0x10 [ 298.812105][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 298.826782][ T30] ? do_syscall_64+0x100/0x230 [ 298.831673][ T30] __x64_sys_unshare+0x38/0x40 [ 298.840260][ T30] do_syscall_64+0xf3/0x230 [ 298.851848][ T30] ? clear_bhb_loop+0x35/0x90 [ 298.860102][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 298.871461][ T30] RIP: 0033:0x7ff28dd7dff9 [ 298.879158][ T30] RSP: 002b:00007ff28eb58038 EFLAGS: 00000246 ORIG_RAX: 0000000000000110 [ 298.892533][ T30] RAX: ffffffffffffffda RBX: 00007ff28df35f80 RCX: 00007ff28dd7dff9 [ 298.900535][ T30] RDX: 0000000000000000 RSI: 0000000000000000 RDI: 0000000068040200 [ 298.916933][ T30] RBP: 00007ff28ddf0296 R08: 0000000000000000 R09: 0000000000000000 [ 298.932534][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 298.949247][ T30] R13: 0000000000000000 R14: 00007ff28df35f80 R15: 00007ffc86f2b838 [ 298.960275][ T30] [ 298.971093][ T30] INFO: task syz.4.869:8602 blocked for more than 146 seconds. [ 298.979853][ T30] Not tainted 6.12.0-rc1-syzkaller-00147-g9234a2549cb6 #0 [ 298.996189][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 299.009740][ T30] task:syz.4.869 state:D stack:21040 pid:8602 tgid:8598 ppid:5228 flags:0x00000004 [ 299.022506][ T30] Call Trace: [ 299.025814][ T30] [ 299.028766][ T30] __schedule+0x1895/0x4b30 [ 299.042209][ T30] ? __pfx___schedule+0x10/0x10 [ 299.047196][ T30] ? __pfx_lock_release+0x10/0x10 [ 299.052260][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 299.064174][ T30] ? schedule+0x90/0x320 [ 299.068611][ T30] schedule+0x14b/0x320 [ 299.081273][ T30] schedule_preempt_disabled+0x13/0x30 [ 299.086933][ T30] __mutex_lock+0x6a7/0xd70 [ 299.091464][ T30] ? __mutex_lock+0x52a/0xd70 [ 299.100803][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 299.110055][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 299.119509][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 299.129265][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 299.139006][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 299.149206][ T30] ? ref_tracker_free+0x643/0x7e0 [ 299.158660][ T30] netlink_rcv_skb+0x1e3/0x430 [ 299.168249][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 299.179887][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 299.189635][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 299.199272][ T30] netlink_unicast+0x7f6/0x990 [ 299.208445][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 299.218147][ T30] ? __virt_addr_valid+0x183/0x530 [ 299.227650][ T30] ? __check_object_size+0x48e/0x900 [ 299.237349][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 299.242157][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.252421][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 299.257400][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.270621][ T30] __sock_sendmsg+0x221/0x270 [ 299.275436][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 299.280337][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 299.292524][ T30] __sys_sendmsg+0x292/0x380 [ 299.297164][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 299.302339][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 299.316869][ T30] ? do_syscall_64+0x100/0x230 [ 299.321670][ T30] ? do_syscall_64+0xb6/0x230 [ 299.331009][ T30] do_syscall_64+0xf3/0x230 [ 299.341038][ T30] ? clear_bhb_loop+0x35/0x90 [ 299.345915][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.352079][ T30] RIP: 0033:0x7ff28dd7dff9 [ 299.365551][ T30] RSP: 002b:00007ff28eb37038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.379585][ T30] RAX: ffffffffffffffda RBX: 00007ff28df36058 RCX: 00007ff28dd7dff9 [ 299.391008][ T30] RDX: 0000000000000000 RSI: 0000000020000380 RDI: 0000000000000003 [ 299.410616][ T30] RBP: 00007ff28ddf0296 R08: 0000000000000000 R09: 0000000000000000 [ 299.419838][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.432430][ T30] R13: 0000000000000000 R14: 00007ff28df36058 R15: 00007ffc86f2b838 [ 299.440451][ T30] [ 299.451802][ T30] INFO: task syz.1.871:8608 blocked for more than 146 seconds. [ 299.460150][ T30] Not tainted 6.12.0-rc1-syzkaller-00147-g9234a2549cb6 #0 [ 299.476766][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 299.489908][ T30] task:syz.1.871 state:D stack:24960 pid:8608 tgid:8607 ppid:5235 flags:0x00004004 [ 299.504274][ T30] Call Trace: [ 299.512458][ T30] [ 299.515422][ T30] __schedule+0x1895/0x4b30 [ 299.519975][ T30] ? __pfx___schedule+0x10/0x10 [ 299.533138][ T30] ? __pfx_lock_release+0x10/0x10 [ 299.538206][ T30] ? __mutex_trylock_common+0x92/0x2e0 [ 299.551219][ T30] ? schedule+0x90/0x320 [ 299.555839][ T30] schedule+0x14b/0x320 [ 299.560032][ T30] schedule_preempt_disabled+0x13/0x30 [ 299.574572][ T30] __mutex_lock+0x6a7/0xd70 [ 299.579281][ T30] ? __mutex_lock+0x52a/0xd70 [ 299.590583][ T30] ? rtnetlink_rcv_msg+0x6e6/0xcf0 [ 299.595891][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 299.600955][ T30] rtnetlink_rcv_msg+0x6e6/0xcf0 [ 299.616380][ T30] ? rtnetlink_rcv_msg+0x1a7/0xcf0 [ 299.621536][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 299.632585][ T30] ? ref_tracker_free+0x643/0x7e0 [ 299.637647][ T30] netlink_rcv_skb+0x1e3/0x430 [ 299.656352][ T30] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 299.661848][ T30] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 299.678325][ T30] ? netlink_deliver_tap+0x2e/0x1b0 [ 299.685889][ T30] netlink_unicast+0x7f6/0x990 [ 299.690701][ T30] ? __pfx_netlink_unicast+0x10/0x10 [ 299.702465][ T30] ? __virt_addr_valid+0x183/0x530 [ 299.707612][ T30] ? __check_object_size+0x48e/0x900 [ 299.720711][ T30] netlink_sendmsg+0x8e4/0xcb0 [ 299.728174][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.742213][ T30] ? aa_sock_msg_perm+0x91/0x160 [ 299.747265][ T30] ? __pfx_netlink_sendmsg+0x10/0x10 [ 299.758916][ T30] __sock_sendmsg+0x221/0x270 [ 299.763699][ T30] ____sys_sendmsg+0x52a/0x7e0 [ 299.768495][ T30] ? __pfx_____sys_sendmsg+0x10/0x10 [ 299.781985][ T30] __sys_sendmsg+0x292/0x380 [ 299.786806][ T30] ? __pfx___sys_sendmsg+0x10/0x10 [ 299.791989][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 299.809787][ T30] ? do_syscall_64+0x100/0x230 [ 299.814772][ T30] ? do_syscall_64+0xb6/0x230 [ 299.819476][ T30] do_syscall_64+0xf3/0x230 [ 299.834200][ T30] ? clear_bhb_loop+0x35/0x90 [ 299.838913][ T30] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 299.852708][ T30] RIP: 0033:0x7f190637dff9 [ 299.857150][ T30] RSP: 002b:00007f19070a7038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 299.872495][ T30] RAX: ffffffffffffffda RBX: 00007f1906535f80 RCX: 00007f190637dff9 [ 299.888285][ T30] RDX: 0000000000000000 RSI: 0000000020000640 RDI: 0000000000000004 [ 299.898542][ T30] RBP: 00007f19063f0296 R08: 0000000000000000 R09: 0000000000000000 [ 299.912492][ T30] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 299.920493][ T30] R13: 0000000000000000 R14: 00007f1906535f80 R15: 00007ffe65433508 [ 299.936871][ T30] [ 299.939991][ T30] [ 299.939991][ T30] Showing all locks held in the system: [ 299.952557][ T30] 1 lock held by khungtaskd/30: [ 299.957433][ T30] #0: ffffffff8e937de0 (rcu_read_lock){....}-{1:2}, at: debug_show_all_locks+0x55/0x2a0 [ 299.983658][ T30] 3 locks held by kworker/u8:2/35: [ 299.988794][ T30] #0: ffff88802db64148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 300.008301][ T30] #1: ffffc90000ab7d00 ((work_completion)(&(&net->ipv6.addr_chk_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 300.030777][ T30] #2: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: addrconf_verify_work+0x19/0x30 [ 300.040413][ T30] 3 locks held by kworker/0:2/937: [ 300.056521][ T30] #0: ffff88801ac81948 ((wq_completion)events_power_efficient){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 300.077914][ T30] #1: ffffc90003bffd00 ((reg_check_chans).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 300.091453][ T30] #2: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: reg_check_chans_work+0x99/0xfd0 [ 300.109923][ T30] 4 locks held by kworker/u8:7/2507: [ 300.115314][ T30] #0: ffff88801baed948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1850 [ 300.135191][ T30] #1: ffffc9000908fd00 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1850 [ 300.151201][ T30] #2: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: cleanup_net+0x16a/0xcc0 [ 300.164248][ T30] #3: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: wg_destruct+0x25/0x2e0 [ 300.181861][ T30] 2 locks held by getty/4981: [ 300.186658][ T30] #0: ffff8880339490a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 300.205536][ T30] #1: ffffc90002f062f0 (&ldata->atomic_read_lock){+.+.}-{3:3}, at: n_tty_read+0x6a6/0x1e00 [ 300.221163][ T30] 6 locks held by kworker/1:5/5433: [ 300.229774][ T30] 7 locks held by syz-executor/8335: [ 300.240454][ T30] #0: ffff88802f642420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 300.252527][ T30] #1: ffff88805fce2888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 300.262332][ T30] #2: ffff888025f8d2d8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 300.292614][ T30] #3: ffffffff8f56f848 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 300.310584][ T30] #4: ffff8880310950e8 (&dev->mutex){....}-{3:3}, at: device_release_driver_internal+0xce/0x7c0 [ 300.321278][ T30] #5: ffff888031093250 (&devlink->lock_key#8){+.+.}-{3:3}, at: nsim_drv_remove+0x50/0x160 [ 300.340285][ T30] #6: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: unregister_netdevice_notifier_net+0x89/0x3a0 [ 300.351120][ T30] 4 locks held by syz-executor/8479: [ 300.362460][ T30] #0: ffff88802f642420 (sb_writers#8){.+.+}-{0:0}, at: vfs_write+0x224/0xc90 [ 300.371402][ T30] #1: ffff888031e9a888 (&of->mutex){+.+.}-{3:3}, at: kernfs_fop_write_iter+0x1ea/0x500 [ 300.391192][ T30] #2: ffff888025f8d2d8 (kn->active#49){.+.+}-{0:0}, at: kernfs_fop_write_iter+0x20e/0x500 [ 300.410754][ T30] #3: ffffffff8f56f848 (nsim_bus_dev_list_lock){+.+.}-{3:3}, at: del_device_store+0xfc/0x480 [ 300.421206][ T30] 3 locks held by syz.3.865/8588: [ 300.435011][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 300.450978][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: setup_net+0x602/0x9e0 [ 300.468519][ T30] #2: ffffffff8e7d1dd0 (cpu_hotplug_lock){++++}-{0:0}, at: unregister_netdevice_many_notify+0x5ea/0x1da0 [ 300.482530][ T30] 2 locks held by syz.4.869/8599: [ 300.487578][ T30] #0: ffffffff8fcc4c50 (pernet_ops_rwsem){++++}-{3:3}, at: copy_net_ns+0x328/0x570 [ 300.506616][ T30] #1: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: ip_tunnel_init_net+0x20e/0x720 [ 300.520964][ T30] 1 lock held by syz.4.869/8602: [ 300.530370][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 300.542496][ T30] 1 lock held by syz.1.871/8608: [ 300.547454][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 300.565522][ T30] 1 lock held by syz-executor/8611: [ 300.570743][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 300.589319][ T30] 1 lock held by syz-executor/8614: [ 300.595802][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 300.620160][ T30] 1 lock held by syz-executor/8617: [ 300.625847][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 300.642430][ T30] 1 lock held by syz-executor/8620: [ 300.647651][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 300.665303][ T30] 1 lock held by syz-executor/8623: [ 300.670521][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 300.690225][ T30] 1 lock held by syz-executor/8627: [ 300.700002][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 300.719259][ T30] 1 lock held by syz-executor/8629: [ 300.727820][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 300.742495][ T30] 1 lock held by syz-executor/8632: [ 300.747713][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 300.766544][ T30] 1 lock held by syz-executor/8635: [ 300.771768][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 300.782880][ T30] 1 lock held by syz-executor/8638: [ 300.788100][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 300.805262][ T30] 1 lock held by syz-executor/8642: [ 300.810628][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 300.825607][ T30] 1 lock held by syz-executor/8644: [ 300.830823][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 300.842987][ T30] 1 lock held by syz-executor/8647: [ 300.848204][ T30] #0: ffffffff8fcd1748 (rtnl_mutex){+.+.}-{3:3}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 300.865756][ T30] [ 300.868106][ T30] ============================================= [ 300.868106][ T30] [ 300.880884][ T30] NMI backtrace for cpu 0 [ 300.885239][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00147-g9234a2549cb6 #0 [ 300.895760][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 300.905823][ T30] Call Trace: [ 300.909115][ T30] [ 300.912060][ T30] dump_stack_lvl+0x241/0x360 [ 300.916759][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 300.921973][ T30] ? __pfx__printk+0x10/0x10 [ 300.926601][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 300.931566][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 300.937049][ T30] ? _printk+0xd5/0x120 [ 300.941226][ T30] ? __pfx__printk+0x10/0x10 [ 300.945835][ T30] ? __wake_up_klogd+0xcc/0x110 [ 300.950708][ T30] ? __pfx__printk+0x10/0x10 [ 300.955319][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 300.960364][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 300.966364][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 300.972363][ T30] watchdog+0xff4/0x1040 [ 300.976628][ T30] ? watchdog+0x1ea/0x1040 [ 300.981069][ T30] ? __pfx_watchdog+0x10/0x10 [ 300.985765][ T30] kthread+0x2f0/0x390 [ 300.989847][ T30] ? __pfx_watchdog+0x10/0x10 [ 300.994542][ T30] ? __pfx_kthread+0x10/0x10 [ 300.999151][ T30] ret_from_fork+0x4b/0x80 [ 301.003593][ T30] ? __pfx_kthread+0x10/0x10 [ 301.008196][ T30] ret_from_fork_asm+0x1a/0x30 [ 301.012992][ T30] [ 301.016789][ T30] Sending NMI from CPU 0 to CPUs 1: [ 301.022025][ C1] NMI backtrace for cpu 1 [ 301.022037][ C1] CPU: 1 UID: 0 PID: 5433 Comm: kworker/1:5 Not tainted 6.12.0-rc1-syzkaller-00147-g9234a2549cb6 #0 [ 301.022056][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 301.022066][ C1] Workqueue: events nsim_dev_trap_report_work [ 301.022088][ C1] RIP: 0010:unwind_next_frame+0x1cb/0x22d0 [ 301.022105][ C1] Code: 77 f0 0c 00 0f 45 d1 8d 42 ff 44 39 f0 0f 86 55 18 00 00 44 89 f0 48 8d 1c 85 20 68 4b 91 48 89 d8 48 c1 e8 03 42 0f b6 04 20 <84> c0 4c 89 e5 0f 85 97 1a 00 00 44 8b 23 44 89 f0 ff c0 48 8d 1c [ 301.022122][ C1] RSP: 0018:ffffc90000a176d0 EFLAGS: 00000a03 [ 301.022136][ C1] RAX: 0000000000000000 RBX: ffffffff914ce294 RCX: 00000000000b0001 [ 301.022147][ C1] RDX: 00000000000b0001 RSI: ffffffff815e9d73 RDI: 0000000000000001 [ 301.022158][ C1] RBP: ffffc90000a177d5 R08: 0000000000000019 R09: ffffc90000a17890 [ 301.022169][ C1] R10: ffffc90000a177f0 R11: ffffffff81808f50 R12: dffffc0000000000 [ 301.022181][ C1] R13: ffffc90000a177a0 R14: 0000000000005e9d R15: ffffffff815e9d72 [ 301.022193][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 301.022207][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 301.022219][ C1] CR2: 000000110c2cc34a CR3: 000000000e734000 CR4: 00000000003526f0 [ 301.022233][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 301.022242][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 301.022252][ C1] Call Trace: [ 301.022258][ C1] [ 301.022264][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 301.022283][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 301.022306][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 301.022323][ C1] ? nmi_handle+0x2a/0x5a0 [ 301.022347][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 301.022366][ C1] ? nmi_handle+0x14f/0x5a0 [ 301.022384][ C1] ? nmi_handle+0x2a/0x5a0 [ 301.022401][ C1] ? unwind_next_frame+0x1cb/0x22d0 [ 301.022416][ C1] ? default_do_nmi+0x63/0x160 [ 301.022435][ C1] ? exc_nmi+0x123/0x1f0 [ 301.022452][ C1] ? end_repeat_nmi+0xf/0x53 [ 301.022467][ C1] ? process_scheduled_works+0xa62/0x1850 [ 301.022489][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 301.022510][ C1] ? process_scheduled_works+0xa63/0x1850 [ 301.022530][ C1] ? unwind_next_frame+0x1cb/0x22d0 [ 301.022545][ C1] ? unwind_next_frame+0x1cb/0x22d0 [ 301.022561][ C1] ? unwind_next_frame+0x1cb/0x22d0 [ 301.022576][ C1] [ 301.022581][ C1] [ 301.022592][ C1] ? process_scheduled_works+0xa63/0x1850 [ 301.022613][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 301.022632][ C1] arch_stack_walk+0x11c/0x150 [ 301.022651][ C1] ? process_scheduled_works+0xa63/0x1850 [ 301.022674][ C1] stack_trace_save+0x118/0x1d0 [ 301.022691][ C1] ? __pfx_validate_chain+0x10/0x10 [ 301.022708][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 301.022731][ C1] kasan_save_track+0x3f/0x80 [ 301.022746][ C1] ? kasan_save_track+0x3f/0x80 [ 301.022760][ C1] ? __kasan_slab_alloc+0x66/0x80 [ 301.022776][ C1] ? kmem_cache_alloc_noprof+0x135/0x2a0 [ 301.022795][ C1] ? dst_alloc+0x12b/0x190 [ 301.022808][ C1] ? ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 301.022836][ C1] ? ip_route_output_key_hash+0x193/0x2b0 [ 301.022855][ C1] ? ip_route_output_flow+0x29/0x140 [ 301.022873][ C1] ? ip_route_me_harder+0x80d/0x1300 [ 301.022890][ C1] ? synproxy_send_tcp+0x356/0x6c0 [ 301.022909][ C1] ? synproxy_send_client_synack+0x8b8/0xf30 [ 301.022928][ C1] ? nft_synproxy_eval_v4+0x3ca/0x610 [ 301.022948][ C1] ? nft_synproxy_do_eval+0x362/0xa60 [ 301.022967][ C1] ? nft_do_chain+0x4ad/0x1da0 [ 301.022987][ C1] ? nft_do_chain_inet+0x418/0x6b0 [ 301.023007][ C1] ? nf_hook_slow+0xc3/0x220 [ 301.023025][ C1] ? NF_HOOK+0x29e/0x450 [ 301.023039][ C1] ? NF_HOOK+0x3a4/0x450 [ 301.023054][ C1] ? __netif_receive_skb+0x2bf/0x650 [ 301.023071][ C1] ? process_backlog+0x662/0x15b0 [ 301.023088][ C1] ? __napi_poll+0xcb/0x490 [ 301.023104][ C1] ? net_rx_action+0x89b/0x1240 [ 301.023121][ C1] ? handle_softirqs+0x2c5/0x980 [ 301.023140][ C1] ? do_softirq+0x11b/0x1e0 [ 301.023157][ C1] ? __local_bh_enable_ip+0x1bb/0x200 [ 301.023175][ C1] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 301.023193][ C1] ? process_scheduled_works+0xa63/0x1850 [ 301.023230][ C1] __kasan_slab_alloc+0x66/0x80 [ 301.023246][ C1] ? dst_alloc+0x12b/0x190 [ 301.023259][ C1] kmem_cache_alloc_noprof+0x135/0x2a0 [ 301.023281][ C1] dst_alloc+0x12b/0x190 [ 301.023297][ C1] ip_route_output_key_hash_rcu+0x13cc/0x2390 [ 301.023325][ C1] ip_route_output_key_hash+0x193/0x2b0 [ 301.023345][ C1] ? ip_route_output_key_hash+0xdf/0x2b0 [ 301.023366][ C1] ? __pfx_ip_route_output_key_hash+0x10/0x10 [ 301.023389][ C1] ? __pfx_lock_release+0x10/0x10 [ 301.023408][ C1] ? kthread+0x2f0/0x390 [ 301.023429][ C1] ip_route_output_flow+0x29/0x140 [ 301.023450][ C1] ip_route_me_harder+0x80d/0x1300 [ 301.023474][ C1] ? __pfx_ip_route_me_harder+0x10/0x10 [ 301.023495][ C1] ? trace_kmalloc+0x1f/0xd0 [ 301.023512][ C1] ? __kmalloc_node_track_caller_noprof+0x242/0x440 [ 301.023544][ C1] synproxy_send_tcp+0x356/0x6c0 [ 301.023568][ C1] synproxy_send_client_synack+0x8b8/0xf30 [ 301.023595][ C1] ? __pfx_synproxy_send_client_synack+0x10/0x10 [ 301.023617][ C1] ? synproxy_pernet+0x45/0x270 [ 301.023639][ C1] nft_synproxy_eval_v4+0x3ca/0x610 [ 301.023663][ C1] ? __pfx_nft_synproxy_eval_v4+0x10/0x10 [ 301.023685][ C1] ? nf_ip_checksum+0x13a/0x500 [ 301.023709][ C1] nft_synproxy_do_eval+0x362/0xa60 [ 301.023732][ C1] ? __pfx_nft_synproxy_do_eval+0x10/0x10 [ 301.023756][ C1] ? __pfx_validate_chain+0x10/0x10 [ 301.023778][ C1] nft_do_chain+0x4ad/0x1da0 [ 301.023798][ C1] ? __lock_acquire+0x1384/0x2050 [ 301.023830][ C1] ? __pfx_nft_do_chain+0x10/0x10 [ 301.023850][ C1] ? __local_bh_enable_ip+0x168/0x200 [ 301.023883][ C1] ? __pfx_nf_nat_inet_fn+0x10/0x10 [ 301.023902][ C1] nft_do_chain_inet+0x418/0x6b0 [ 301.023924][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 301.023943][ C1] ? ipt_do_table+0x312/0x1860 [ 301.023972][ C1] ? __pfx_nft_do_chain_inet+0x10/0x10 [ 301.023991][ C1] nf_hook_slow+0xc3/0x220 [ 301.024010][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 301.024027][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 301.024044][ C1] NF_HOOK+0x29e/0x450 [ 301.024061][ C1] ? NF_HOOK+0x9a/0x450 [ 301.024077][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 301.024094][ C1] ? __pfx_ip_local_deliver_finish+0x10/0x10 [ 301.024115][ C1] ? ip_rcv_finish+0x406/0x560 [ 301.024133][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 301.024149][ C1] NF_HOOK+0x3a4/0x450 [ 301.024164][ C1] ? __lock_acquire+0x1384/0x2050 [ 301.024186][ C1] ? NF_HOOK+0x9a/0x450 [ 301.024202][ C1] ? __pfx_NF_HOOK+0x10/0x10 [ 301.024217][ C1] ? ip_rcv_core+0x801/0xd10 [ 301.024235][ C1] ? __pfx_ip_rcv_finish+0x10/0x10 [ 301.024256][ C1] ? __pfx_ip_rcv+0x10/0x10 [ 301.024272][ C1] __netif_receive_skb+0x2bf/0x650 [ 301.024292][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 301.024313][ C1] ? __pfx___netif_receive_skb+0x10/0x10 [ 301.024330][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 301.024351][ C1] ? __pfx_lock_release+0x10/0x10 [ 301.024372][ C1] ? _raw_spin_lock_irq+0xdf/0x120 [ 301.024399][ C1] process_backlog+0x662/0x15b0 [ 301.024420][ C1] ? process_backlog+0x33b/0x15b0 [ 301.024443][ C1] ? __pfx_process_backlog+0x10/0x10 [ 301.024461][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 301.024484][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 301.024508][ C1] __napi_poll+0xcb/0x490 [ 301.024528][ C1] net_rx_action+0x89b/0x1240 [ 301.024569][ C1] ? __pfx_net_rx_action+0x10/0x10 [ 301.024589][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 301.024615][ C1] ? __pfx_net_tx_action+0x10/0x10 [ 301.024641][ C1] handle_softirqs+0x2c5/0x980 [ 301.024664][ C1] ? do_softirq+0x11b/0x1e0 [ 301.024684][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 301.024708][ C1] do_softirq+0x11b/0x1e0 [ 301.024726][ C1] [ 301.024732][ C1] [ 301.024738][ C1] ? __pfx_do_softirq+0x10/0x10 [ 301.024756][ C1] ? __pfx_lockdep_softirqs_on+0x10/0x10 [ 301.024779][ C1] ? rcu_is_watching+0x15/0xb0 [ 301.024798][ C1] __local_bh_enable_ip+0x1bb/0x200 [ 301.024821][ C1] ? nsim_dev_trap_report_work+0x75d/0xaa0 [ 301.024839][ C1] ? __pfx___local_bh_enable_ip+0x10/0x10 [ 301.024858][ C1] ? do_raw_spin_unlock+0x13c/0x8b0 [ 301.024878][ C1] ? nsim_dev_trap_report_work+0x6a7/0xaa0 [ 301.024898][ C1] nsim_dev_trap_report_work+0x75d/0xaa0 [ 301.024923][ C1] ? process_scheduled_works+0x976/0x1850 [ 301.024943][ C1] process_scheduled_works+0xa63/0x1850 [ 301.024977][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 301.025002][ C1] ? assign_work+0x364/0x3d0 [ 301.025024][ C1] worker_thread+0x870/0xd30 [ 301.025048][ C1] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 301.025070][ C1] ? __kthread_parkme+0x169/0x1d0 [ 301.025093][ C1] ? __pfx_worker_thread+0x10/0x10 [ 301.025113][ C1] kthread+0x2f0/0x390 [ 301.025127][ C1] ? __pfx_worker_thread+0x10/0x10 [ 301.025147][ C1] ? __pfx_kthread+0x10/0x10 [ 301.025162][ C1] ret_from_fork+0x4b/0x80 [ 301.025183][ C1] ? __pfx_kthread+0x10/0x10 [ 301.025198][ C1] ret_from_fork_asm+0x1a/0x30 [ 301.025226][ C1] [ 301.965561][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 301.972439][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.12.0-rc1-syzkaller-00147-g9234a2549cb6 #0 [ 301.982947][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 09/13/2024 [ 301.993011][ T30] Call Trace: [ 301.996299][ T30] [ 301.999239][ T30] dump_stack_lvl+0x241/0x360 [ 302.003939][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 302.009151][ T30] ? __pfx__printk+0x10/0x10 [ 302.013757][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 302.019766][ T30] ? vscnprintf+0x5d/0x90 [ 302.024112][ T30] panic+0x349/0x880 [ 302.028026][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 302.034196][ T30] ? __pfx_panic+0x10/0x10 [ 302.038629][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 302.044019][ T30] ? __irq_work_queue_local+0x137/0x410 [ 302.049586][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 302.054972][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 302.061142][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 302.067315][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 302.073495][ T30] watchdog+0x1033/0x1040 [ 302.077845][ T30] ? watchdog+0x1ea/0x1040 [ 302.082282][ T30] ? __pfx_watchdog+0x10/0x10 [ 302.086976][ T30] kthread+0x2f0/0x390 [ 302.091062][ T30] ? __pfx_watchdog+0x10/0x10 [ 302.095756][ T30] ? __pfx_kthread+0x10/0x10 [ 302.100531][ T30] ret_from_fork+0x4b/0x80 [ 302.104965][ T30] ? __pfx_kthread+0x10/0x10 [ 302.109567][ T30] ret_from_fork_asm+0x1a/0x30 [ 302.114361][ T30] [ 302.117617][ T30] Kernel Offset: disabled [ 302.121957][ T30] Rebooting in 86400 seconds..