last executing test programs: 57.906604394s ago: executing program 2 (id=365): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0xffffffffffffff34, &(0x7f0000000080)={0x0, 0xb8}}, 0x0) getsockname$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x3c) sendmsg$nl_route(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="34000000100081eee80000040000000010000000", @ANYRES32=r3, @ANYBLOB="ddfffffdff000000140012000c000100627269646765"], 0x34}}, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000140)=@ipv4_newaddr={0x20, 0x14, 0x1, 0x0, 0x0, {0x2, 0x0, 0x0, 0xff, r3}, [@IFA_LOCAL={0x8, 0x2, @local}]}, 0x20}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket$inet(0x2, 0x3, 0x4) setsockopt$inet_msfilter(r5, 0x0, 0x23, &(0x7f0000004b00)=ANY=[@ANYBLOB="e0000808ac1414aa"], 0x10) r6 = socket(0x10, 0x803, 0x4) sendmsg$nl_route(r6, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={0x0, 0x1c}, 0x1, 0x0, 0x0, 0x20088814}, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) sendmsg$nl_route_sched(r4, &(0x7f0000000280)={0x0, 0x7400, &(0x7f00000001c0)={&(0x7f0000000200)=@delchain={0x24, 0x11, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r7}}, 0x24}}, 0x0) 57.430924264s ago: executing program 2 (id=370): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$can_raw(0x1d, 0x3, 0x1) socket$nl_route(0x10, 0x3, 0x0) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nbd(0x0, 0xffffffffffffffff) socket$nl_route(0x10, 0x3, 0x0) socket$netlink(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) socket(0x10, 0x3, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$inet_tcp(0x2, 0x1, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = socket$inet6_udp(0xa, 0x2, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_RES_MR_GET(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000340)=ANY=[@ANYBLOB="200000001a140100000000000000000008000300000000000800", @ANYRES64=r0], 0x20}, 0x1, 0x0, 0x0, 0x4000015}, 0x0) 54.470282733s ago: executing program 2 (id=373): socket$igmp6(0xa, 0x3, 0x2) socket$nl_generic(0x10, 0x3, 0x10) socket$can_bcm(0x1d, 0x2, 0x2) socket$inet6(0xa, 0x3, 0x7) socket$netlink(0x10, 0x3, 0x4) socket$inet6(0xa, 0x3, 0x7) socket$inet_dccp(0x2, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.controllers\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRESHEX=r0], 0x20) 54.273685791s ago: executing program 2 (id=378): bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r0, r1, 0x2, 0x2, 0x0, @void, @value}, 0x10) r2 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)=ANY=[@ANYRES32=r2, @ANYRES32=r3], 0x10) r4 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="180000000000000000000000000000009500160000000000"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r4}, 0x10) r6 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r5}, 0x8) close(r6) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x70) r8 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000240)={@cgroup=r8, r7, 0x2, 0x6, 0x4000, @void, @value}, 0x10) 53.992115933s ago: executing program 2 (id=382): bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x6, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) socket(0x2a, 0x2, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) r1 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r0}, 0x10) r2 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r1}, 0x8) close(r2) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000000)) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000005100000000000000000a200000000900010073797a300000000014000000100001"], 0x48}}, 0x20050800) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x22, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r4 = syz_genetlink_get_family_id$nbd(&(0x7f0000000380), 0xffffffffffffffff) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000000200)={0xffffffffffffffff}) sendmsg$NBD_CMD_CONNECT(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000000c0)=ANY=[@ANYBLOB="90000000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000c000597ff000000000000000c0002000000000000000000040007800c000800000000000000000008000a00000000004400078008000100", @ANYRES32, @ANYBLOB="32000100", @ANYRES32=r5, @ANYBLOB="64800400", @ANYRES32, @ANYBLOB='\b'], 0x90}}, 0x0) 53.796741295s ago: executing program 2 (id=384): r0 = bpf$MAP_CREATE(0x0, &(0x7f00000006c0)=ANY=[@ANYBLOB="16000000000000000400000001"], 0x48) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000a40)={0x3, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r0, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000000000000b704000000000000850000005700000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xc, &(0x7f0000000440)=ANY=[], &(0x7f0000000580)='GPL\x00', 0x0, 0x0, 0x0, 0x40f00, 0x8, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000100)='kmem_cache_free\x00', r1}, 0x10) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) close(r3) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @link_local}) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r5, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) writev(r2, &(0x7f0000000040)=[{&(0x7f0000000100)="89e7ee2c78dad9b4b473fec988cafb", 0x240}], 0x1) 3.464108116s ago: executing program 0 (id=663): bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xc, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) pipe(&(0x7f0000000100)) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$packet(0x11, 0x3, 0x300) socket(0xa, 0x3, 0x3a) close(0xffffffffffffffff) setsockopt$packet_int(r0, 0x107, 0x14, &(0x7f0000000080)=0xfff, 0x4) socketpair(0x1, 0x100000005, 0x0, &(0x7f0000000000)={0xffffffffffffffff}) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000000)={0x26, 'aead\x00', 0x0, 0x0, 'aegis128-generic\x00'}, 0x58) r3 = accept4(r2, 0x0, 0x0, 0x0) recvmmsg(r3, 0x0, 0x0, 0x2061, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=ANY=[@ANYBLOB="3000000010000100"/20, @ANYRES32=0x0, @ANYBLOB='\x00\x00\x00\x00\x00\x00\x00\x00\b\x00\n\x00', @ANYRES32=0x0, @ANYBLOB="08001b"], 0x30}}, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) r5 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r5, &(0x7f0000000040)={0x18, 0x0, {0x4, @random="bb7fb37b9489", 'bond0\x00'}}, 0x1e) sendmmsg(r5, &(0x7f0000002340)=[{{0x0, 0x0, 0x0}}], 0x3e8, 0x0) getpeername$packet(r1, &(0x7f0000000000)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @dev}, &(0x7f0000000040)=0x14) 3.223573509s ago: executing program 0 (id=664): socket$packet(0x11, 0x2, 0x300) r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f0000000040)={'wlan1\x00', 0x0}) unshare(0x22020400) bpf$PROG_LOAD(0x5, &(0x7f0000000040)={0x1, 0x4, &(0x7f0000000500)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000a000000095"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x28, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x1, @void, @value}, 0x94) unshare(0x8000c00) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) r3 = socket$nl_generic(0x10, 0x3, 0x10) r4 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r4, &(0x7f0000001e00)={0x0, 0x0, &(0x7f0000001d80)=[{&(0x7f0000000840)={0x34, 0x2e, 0x503, 0x40000, 0x0, "", [@nested={0x20, 0x0, 0x0, 0x1, [@typed={0x8, 0x0, 0x0, 0x0, @u32}, @typed={0x8, 0x0, 0x0, 0x0, @fd}, @typed={0xc, 0xf, 0x0, 0x0, @u64}]}, @generic="a8bb49"]}, 0x34}], 0x1}, 0x0) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000200), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)={{0x14, 0x10, 0x1, 0x0, 0x0, {0xa}}, [@NFT_MSG_NEWRULE={0x64, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x38, 0x4, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @xfrm={{0x9}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_XFRM_KEY={0x8, 0x2, 0x1, 0x0, 0x4}, @NFTA_XFRM_DREG={0x8, 0x1, 0x1, 0x0, 0x14}, @NFTA_XFRM_DIR={0x5}, @NFTA_XFRM_SPNUM={0x8, 0x4, 0x1, 0x0, 0x6}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x8c}, 0x1, 0x0, 0x0, 0x20000805}, 0x0) r8 = socket$can_raw(0x1d, 0x3, 0x1) setsockopt$CAN_RAW_ERR_FILTER(r8, 0x65, 0x2, &(0x7f00000001c0)=0x7f, 0x4) sendmsg$NL80211_CMD_TRIGGER_SCAN(r3, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000080)={0x24, r5, 0x5, 0x0, 0x0, {{}, {@val={0x8, 0x3, r6}, @void}}, [@NL80211_ATTR_SCHED_SCAN_INTERVAL={0x8, 0x77, 0x7}]}, 0x24}}, 0x0) sendmsg$NL80211_CMD_TRIGGER_SCAN(r0, &(0x7f0000000200)={0x0, 0x20, &(0x7f00000000c0)={&(0x7f0000001440)={0x1c, r2, 0x1, 0x0, 0x0, {{0x8}, {@val={0x8, 0x3, r1}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4000}, 0x0) 2.881232094s ago: executing program 0 (id=666): r0 = socket(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000000c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000b40)={{0x14}, [@NFT_MSG_NEWSET={0x3c, 0x12, 0xa, 0x9, 0x0, 0x0, {0x2}, [@NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_KEY_TYPE={0x8}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x1}]}], {0x14}}, 0x64}}, 0x0) sendmsg$NFT_MSG_GETOBJ(r2, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000280)={0x14, 0x15, 0xa, 0x201}, 0x14}, 0x1, 0x0, 0x0, 0x800}, 0x24040808) close(r2) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000000)={0x0}}, 0x0) r3 = socket$netlink(0x10, 0x3, 0x0) getsockopt$IP_SET_OP_GET_BYNAME(r1, 0x1, 0x53, &(0x7f0000000140)={0x6, 0x7, 'syz0\x00'}, &(0x7f0000000180)=0x28) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000080)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_icmp(0x2, 0x2, 0x1) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'hsr0\x00', 0x0}) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000004c0)=ANY=[@ANYBLOB="b400000010000904000000000000000000002200", @ANYRES32=0x0, @ANYBLOB="fffffffed9526cfd8400128009000100766c616e000000007400028006000100000600000c000200367da1650e000000280003800c00010001800000002000000c000100a1000000c84200000c0001000800000008000000340004800c00010006000000ff0300000c00010004000000080000000c00010004000000020000000c000100050000000300000008000500", @ANYRES32=r6, @ANYBLOB='\b\x00\n\x00', @ANYRESOCT], 0xb4}}, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) shutdown(r5, 0x1) r7 = socket$kcm(0x10, 0x2, 0x0) sendmsg$xdp(r0, 0x0, 0xa080) sendmsg$kcm(r7, &(0x7f0000000940)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000040)="d80000001c0081044e81f782db44b904021d0802010000001c7e12a118000c000600142603600e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c13223e3f52a98516277ce06bbace8017cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a", 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x700) 2.512722164s ago: executing program 1 (id=671): setsockopt$packet_int(0xffffffffffffffff, 0x107, 0xf, 0x0, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) socket$kcm(0x2, 0xa, 0x2) socket$nl_route(0x10, 0x3, 0x0) pipe(0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, 0x0, 0x0) sendmmsg$alg(0xffffffffffffffff, 0x0, 0x0, 0x40800) write$tun(r3, &(0x7f0000000140)=ANY=[@ANYRES8=r2], 0xfdef) bind$can_j1939(r1, &(0x7f0000000100)={0x1d, r2, 0x0, {0x0, 0x0, 0x4}, 0x1}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000400)="81b641f1f3843704b6", 0x9}], 0x1}, 0x48005) r5 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000300)=[{0x3, 0xfffffffffffffffc, {0x0, 0xf1, 0x3}, {0x2, 0xff, 0x2}}, {0x3, 0x2, {0x2, 0x1, 0x2}, {0x4}, 0x2}, {0x0, 0x0, {0x2, 0x0, 0x4}, {0x0, 0xf0, 0x1}, 0x0, 0xff}], 0x60) ioctl$ifreq_SIOCGIFINDEX_vcan(r5, 0x8933, &(0x7f0000000000)={'vcan0\x00', 0x0}) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000780)=@newtfilter={0x24, 0x11, 0x1, 0x70bd2b, 0x0, {0x0, 0x0, 0x74, r6, {0xfff8, 0x4}, {0x0, 0xe}, {0xfff2, 0xffff}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x40}, 0x840) 2.204795604s ago: executing program 3 (id=672): r0 = syz_init_net_socket$llc(0x1a, 0x801, 0x0) connect$llc(r0, &(0x7f0000000340)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @random="48bd00"}, 0x10) r1 = socket(0x2, 0x80805, 0x0) socket$rxrpc(0x21, 0x2, 0xa) close(0x4) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000100)={0x26, 'skcipher\x00', 0x0, 0x0, 'cts(cbc(serpent))\x00'}, 0x58) bind$alg(r2, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'ecb-blowfish-asm\x00'}, 0x58) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) setsockopt$inet_tcp_int(r3, 0x6, 0x19, &(0x7f00000001c0)=0x1, 0x4) bind$inet(r3, 0x0, 0x0) close(0x4) r4 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r4, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp_SCTP_DEFAULT_SNDINFO(r1, 0x84, 0x22, &(0x7f0000000180)={0x101, 0x4, 0x1f4bf1ba, 0x0, r5}, 0x10) getsockopt$inet6_tcp_buf(r1, 0x6, 0x1c, &(0x7f0000000040)=""/79, &(0x7f00000000c0)=0x4f) r6 = syz_init_net_socket$llc(0x1a, 0x802, 0x0) bind$llc(r6, &(0x7f0000000000)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x42}, 0x10) socket$kcm(0x10, 0x2, 0x0) 2.154298405s ago: executing program 0 (id=673): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r0, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r1, &(0x7f0000000100), 0x1c) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f00000012c0)={@in6={{0xa, 0x0, 0x1, @initdev={0xfe, 0x88, '\x00', 0x0, 0x0}}}, 0x0, 0x0, 0x4a, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x8, @empty}}, 0x0, 0x0, 0xc, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542da0bc21470e441225642855b5f2f4bb561dc9363aed4a18d67efd5f2fdf98328de9441031348589b763d46d14810acc5f700"}, 0xd8) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r3, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x0, 0x0, @mcast1}}, 0x0, 0x0, 0x3a, 0x0, "a1c1dd75a68473ba07d945c3b03e10950cd4b347113e55eb499419be4f9142da0bc21470e441225642855b5f2b4b67efbff2fdf98328de9434031348589b763d46d14810acc5f7000000e3ffffff00"}, 0xd8) r4 = socket$inet6_mptcp(0xa, 0x1, 0x106) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r6, 0x0) listen(r4, 0x71e4) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000140)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a067f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0fffeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 2.00078135s ago: executing program 0 (id=674): unshare(0x62040200) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3, 0x8031, 0xffffffffffffffff, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) connect$vsock_stream(0xffffffffffffffff, 0x0, 0x0) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r1 = socket$kcm(0x2, 0xa, 0x2) r2 = socket$alg(0x26, 0x5, 0x0) bind$alg(r2, &(0x7f0000000480)={0x26, 'hash\x00', 0x0, 0x0, 'nhpoly1305-generic\x00'}, 0x58) setsockopt$ALG_SET_KEY(r2, 0x117, 0x1, &(0x7f0000000000)="8a", 0x440) r3 = accept4(r2, 0x0, 0x0, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000000200)={0x0, 0x7bff, &(0x7f0000000180)={&(0x7f0000000140)=@delqdisc={0xfffffffffffffc9b}, 0x49d32d254ae22f79}}, 0x0) getsockopt$sock_buf(r3, 0x1, 0x1a, 0x0, &(0x7f0000000340)) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r0, &(0x7f0000000100)={@val, @void, @eth={@multicast, @remote, @void, {@ipv4={0x800, @generic={{0x5, 0x4, 0x1, 0x6, 0x15, 0xe4, 0x0, 0x1, 0x11, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @rand_addr=0x64010100}, '~'}}}}}, 0x27) 1.929363417s ago: executing program 4 (id=675): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) unshare(0x2c060000) unshare(0x24020400) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00006b7000/0x14000)=nil, 0x14000, 0x4, 0x12, r5, 0x0) 1.793311192s ago: executing program 3 (id=676): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r0, 0x7d4165c9) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r1, 0x0) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r2, 0x0) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) bind$inet6(r3, &(0x7f0000000140)={0xa, 0x0, 0x3, @ipv4={'\x00', '\xff\xff', @multicast1}}, 0x1c) r4 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r4, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000400)={@in6={{0xa, 0x4e24, 0x91, @remote, 0x1}}, 0x0, 0x0, 0x32, 0x0, "0c9e089c1b4a04000bde79f04103c458187eb46c2d996aff287154e786455261c425a7519cc275d04e6205abd307a0c4fa3838bf399ad5bd35f21907c7988d1300"}, 0xd8) setsockopt$inet6_tcp_TCP_MD5SIG(r1, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x0, @private1={0xfc, 0x1, '\x00', 0xfe}, 0x2}}, 0x0, 0x0, 0x4, 0x0, "a1c1dd75a6843e10951cd4b347113e55eb499519becf7542c90bc21470e441225642855b5f2faed4a18d67efd5f2fdf98328de94410300"}, 0xd8) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) listen(r5, 0x0) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TCP_MD5SIG(r4, 0x6, 0xe, &(0x7f0000000300)={@in6={{0xa, 0x4e21, 0x1, @mcast2, 0x4}}, 0x0, 0x0, 0x11, 0x0, "2b20a9a47cddc63b223be606d7fa19f22a369ae751de81ca4d11e10450d766feb63b382d54ba4bb57a219cad5ddfc1e4fe760a1ce2ca64196953e92a07b3937730a33b6deca160d8c2fbff48eb964283"}, 0xd8) listen(r6, 0x0) r7 = socket$netlink(0x10, 0x3, 0x8000000004) writev(r7, &(0x7f0000000540)=[{&(0x7f0000000080)="580000001400192340834b80040d8c560a066f0200ff000000000000000058000b4824ca945f64009400ff0325010ebc000000000000008000f0effeffe809005300fff5dd00000010000100080c10000000000000000000", 0x58}], 0x1) 1.7208235s ago: executing program 4 (id=677): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="18000000e67ddb00b3640bc400000062cc2f91ffffffe8"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r0 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt(r0, 0x84, 0x80, &(0x7f0000000000)='\x00\x00\x00\x00\t\x00\x00\x00', 0x8) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp_SCTP_GET_ASSOC_ID_LIST(r1, 0x84, 0x1d, &(0x7f0000000000)={0x1, [0x0]}, &(0x7f0000000040)=0x8) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r0, 0x84, 0x5, &(0x7f00000001c0)={r2, @in={{0x2, 0x4e21, @multicast2}}}, 0x84) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000b40)) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) connect$inet6(r3, &(0x7f0000000000)={0xa, 0x4001, 0x0, @loopback, 0xf}, 0x1c) pipe(&(0x7f0000000880)={0xffffffffffffffff, 0xffffffffffffffff}) splice(r3, 0x0, r4, 0x0, 0x800000008ec0, 0xa) epoll_pwait(r4, &(0x7f0000000100)=[{}, {}, {}, {}], 0x4, 0xb, &(0x7f0000000140)={[0x9]}, 0x8) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="600000000206050000000000000000000704000014000780080008400000009805001400200000000500010006000100050005000a00000005000400000000000900020071797a310000000011000300686173683a6e65742c6e6574"], 0x60}}, 0x20000000) socket$netlink(0x10, 0x3, 0x0) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000021c0)=ANY=[@ANYBLOB="12000000040000000400000012"], 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000180)=ANY=[@ANYRES32=r6, @ANYRES32, @ANYRES16=r6], 0x10) 1.591473629s ago: executing program 3 (id=678): socket$can_bcm(0x1d, 0x2, 0x2) socket$inet_dccp(0x2, 0x6, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000a00)='cgroup.controllers\x00', 0x275a, 0x0) syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) socket$nl_generic(0x10, 0x3, 0x10) socket$nl_generic(0x10, 0x3, 0x10) socket$inet6_udplite(0xa, 0x2, 0x88) socket$nl_generic(0x10, 0x3, 0x10) socket$alg(0x26, 0x5, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_netfilter(0x10, 0x3, 0xc) epoll_create(0x20000000) syz_init_net_socket$nfc_llcp(0x27, 0x3, 0x1) socket$netlink(0x10, 0x3, 0x2) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0xe, 0x16, &(0x7f0000000b00)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) socket(0x1d, 0x2, 0x6) socket$nl_netfilter(0x10, 0x3, 0xc) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x0, 0x0) bpf$BPF_PROG_DETACH(0x9, &(0x7f0000000240)=ANY=[@ANYRES32, @ANYRES32, @ANYRES64=r0, @ANYRES64=0x0, @ANYRESHEX=r0], 0x20) 1.586132054s ago: executing program 4 (id=679): r0 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x3, 0x0) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r2) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="0900000004000000080000000b"], 0x50) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000280)=ANY=[@ANYBLOB="180000000000000000000000000020001801000020646c2100000000002020007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000018110000", @ANYRES32=r3, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b70400000000000085"], &(0x7f0000000240)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000080)='kfree\x00', r4}, 0x10) r5 = syz_genetlink_get_family_id$nl80211(&(0x7f00000004c0), 0xffffffffffffffff) sendmsg$NL80211_CMD_VENDOR(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000001b40)={&(0x7f0000000480)={0x30, r5, 0x62c21a4ade68aba1, 0x0, 0x0, {{0x32}, {@val={0x8, 0x117, 0x56}, @val={0x8}, @val={0xc, 0x99, {0x2, 0x77}}}}}, 0x30}, 0x1, 0x0, 0x0, 0x40}, 0x0) sendmsg$kcm(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000340)="d80000001c0081044e81f782db44b904021d0802010000000500f0a1180002ac0000000000000e1208000f0100810401a8001600200001400300000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c11503c6bbace8017cb0900000400b791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd4", 0xc4}], 0x1, 0x0, 0x0, 0x7400}, 0x0) r6 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$TEAM_CMD_OPTIONS_SET(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000300)={0x5c, 0x0, 0x1, 0xfffffffd, 0x0, {0x1, 0x6c00000000000000}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}]}, 0x5c}, 0x1, 0xf000, 0x0, 0x20000000}, 0x20040) sendmsg$netlink(r6, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f0000000300)=ANY=[@ANYBLOB="180100002d000100000000000000000007"], 0x118}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0x15, 0x1c, &(0x7f00000009c0)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r1}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x4, 0x1, 0xb, 0x9, 0xa}}, {{0x5, 0x0, 0x3}}, [@snprintf={{0x5, 0x0, 0x7, 0x9, 0x0, 0x2, 0x2}, {0x3, 0x3, 0x3, 0xa, 0x9, 0xfe30}, {0x5, 0x0, 0xb, 0x9}, {0x3, 0x0, 0x6, 0xa, 0x9, 0xfe04, 0xf1}, {0x7, 0x1, 0xb, 0x7, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {}, {0x18, 0x9, 0x2, 0x0, r0}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x7}}}, &(0x7f0000000980)='GPL\x00', 0x0, 0x0, 0x0, 0x41000, 0x2c, '\x00', 0x0, @sk_reuseport, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) 1.436887443s ago: executing program 1 (id=680): bpf$PROG_LOAD(0x5, 0x0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r1}, 0x10) write$cgroup_int(r0, &(0x7f0000000200), 0x806000) 1.313098071s ago: executing program 3 (id=681): bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x18, 0xb, &(0x7f0000000380)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000000600000095"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) write$cgroup_int(r1, &(0x7f0000000200), 0x806000) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000440)=ANY=[@ANYBLOB="6c000000020601000600000600000000000000000e0003006269746d61703a697000000005000400010000000900020073797a3000000000240007800c00028008000140000003000c000180080001400000000a080006401c02000005000500020000000500"], 0x6c}}, 0x40000) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_LIST(r4, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="1c000000070601080000000000000000010000040600010007"], 0x1c}, 0x1, 0x0, 0x0, 0x40801}, 0x4000) mmap(&(0x7f0000ffe000/0x1000)=nil, 0x1000, 0x100000c, 0x11, r0, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) 1.128879103s ago: executing program 4 (id=682): r0 = socket$packet(0x11, 0xa, 0x300) setsockopt$SO_ATTACH_FILTER(r0, 0x1, 0x1a, &(0x7f0000fbe000)={0x2, &(0x7f0000000100)=[{0x28, 0x0, 0x0, 0xfffff034}, {0x80000006, 0x0, 0x0, 0xfffffffa}]}, 0x10) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000013c0)={0x18, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r1}, 0x10) r2 = syz_init_net_socket$bt_l2cap(0x1f, 0x3, 0x3) ioctl$FS_IOC_GETFSLABEL(r2, 0x400452c9, &(0x7f0000000100)) 957.414436ms ago: executing program 4 (id=683): bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=ANY=[@ANYBLOB="1b00000000000000000000000080"], 0x48) unshare(0x6a040000) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000140)={&(0x7f0000000700)=ANY=[@ANYBLOB="9feb010018000000000000006800000068000000050000000a000000000000110100000003000075ec320f220a6a1e4270000300000000000002050000001000000003000085ffffffff0800000002000000e30000000400000001000000080000000a000000030000000500000010000000000000010000000037004d0503000000000000"], 0x0, 0x85, 0x0, 0x0, 0x10001, 0x10000, @value}, 0x28) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x11, 0x3, 0x0, &(0x7f00000003c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) sendmsg$netlink(0xffffffffffffffff, &(0x7f0000000100)={0x0, 0x0, 0x0}, 0x800) r1 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r1, &(0x7f0000000040), 0x6) socket$can_bcm(0x1d, 0x2, 0x2) accept(0xffffffffffffffff, &(0x7f0000000200)=@isdn, &(0x7f0000000180)=0x80) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) write$cgroup_subtree(r2, &(0x7f0000000100)=ANY=[], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r2, 0x0) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_MAXSEG(r3, 0x84, 0xd, 0x0, 0x0) ioctl$sock_bt_hci(r1, 0x400448e6, &(0x7f0000000080)="fc") ioctl$sock_bt_hci(r1, 0x400448e7, &(0x7f0000000180)) 683.08951ms ago: executing program 1 (id=684): r0 = socket$tipc(0x1e, 0x5, 0x0) bind$tipc(r0, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42}}, 0x10) setsockopt$TIPC_GROUP_JOIN(r0, 0x10f, 0x87, 0x0, 0x0) bind$tipc(0xffffffffffffffff, &(0x7f0000000180)=@nameseq={0x1e, 0x1, 0x3, {0x42, 0x4, 0x5}}, 0x10) setsockopt$TIPC_GROUP_JOIN(0xffffffffffffffff, 0x10f, 0x87, &(0x7f0000000040)={0x42, 0x1}, 0x10) setsockopt$inet_mreqn(0xffffffffffffffff, 0x0, 0x27, &(0x7f0000000000)={@multicast2, @local}, 0xc) r1 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_MCAST_JOIN_GROUP(r1, 0x0, 0x2a, &(0x7f00000003c0)={0x6, {{0x2, 0x4e22, @multicast1}}}, 0x88) setsockopt$inet_group_source_req(r1, 0x0, 0x2e, &(0x7f0000000140)={0x24, {{0x2, 0x0, @multicast2}}, {{0x2, 0x0, @local}}}, 0x108) getsockopt$inet_buf(r1, 0x0, 0x29, &(0x7f0000000000)=""/145, &(0x7f0000695ffc)=0x192) bind$tipc(r0, 0x0, 0x0) r2 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r2, &(0x7f0000000400)={0x18, 0x0, {0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0xa}, 'lo\x00'}}, 0x1e) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) mmap(&(0x7f0000000000/0xff5000)=nil, 0xff5000, 0x3, 0x20000000ec071, 0xffffffffffffffff, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[], 0x238}}, 0x0) ioctl$PPPIOCGCHAN(r2, 0x80047437, &(0x7f0000001f00)) sendmmsg(r2, &(0x7f0000001640)=[{{0x0, 0x0, 0x0}}], 0x34000, 0x0) 533.494251ms ago: executing program 0 (id=685): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) syz_emit_ethernet(0x5e, &(0x7f00000010c0)={@local, @empty, @void, {@ipv6={0x86dd, @tcp={0x0, 0x6, '\x00', 0x28, 0x6, 0x0, @private0, @mcast2, {[], {{0x4e24, 0x4001, 0x41424344, 0x41424344, 0x0, 0x0, 0xa, 0x2, 0x0, 0x0, 0x0, {[@eol, @exp_smc={0xfe, 0x6}, @timestamp={0x8, 0xa, 0x3, 0xffffffff}]}}}}}}}}, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000500)={0x6, 0x26, &(0x7f0000000880)=ANY=[@ANYBLOB="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", @ANYRES32=0x1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf090000000000005509010000000000950000000000000085000000b900000018650000030000000000000003000000183600000100000000000000000000001869000007000000000000000300000018120000", @ANYBLOB="0000000000000000b703000000000000850000000c000000b7000000000000008d240400", @ANYBLOB], &(0x7f0000000000)='syzkaller\x00', 0x0, 0xd2, &(0x7f0000000340)=""/210, 0x40f00, 0x1, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000440)={0x5, 0x6, 0xffffffff, 0x8fe6}, 0x10, 0x0, 0x0, 0x0, &(0x7f0000000480)=[r1, 0xffffffffffffffff, 0x1, 0x1], 0x0, 0x10, 0x6, @void, @value}, 0x94) r2 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_int(r2, 0x29, 0x10, 0x0, 0x0) sendto$inet6(r2, 0x0, 0x0, 0x4004840, 0x0, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) r3 = socket$inet6(0xa, 0x2, 0x0) connect$inet6(r3, &(0x7f0000000040)={0xa, 0x0, 0x0, @ipv4}, 0x1c) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='veno\x00', 0x5) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @empty}, 0x10) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @loopback}, 0x10) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, 0x0, 0x20000000) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000100)=[@mss, @sack_perm, @window={0x3, 0x7}, @sack_perm, @window={0x3, 0x6, 0x403}, @window={0x3, 0x4}, @timestamp, @timestamp], 0x8) socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) write$cgroup_int(0xffffffffffffffff, 0x0, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) 476.180955ms ago: executing program 3 (id=686): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) sendmsg$IPVS_CMD_SET_INFO(r2, &(0x7f0000000b00)={0x0, 0x0, &(0x7f0000000ac0)={&(0x7f0000000a80)={0x14}, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x14) sendmsg$nl_route(r1, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000380)=ANY=[@ANYBLOB="3c0000001000850600"/20, @ANYRES32=r3, @ANYBLOB="01000000000000001c0012000c000100626f6e64000000000c0002000800010005"], 0x3c}}, 0x0) socket$kcm(0x2, 0xfa97b32f7c5fa303, 0x84) write$cgroup_pressure(0xffffffffffffffff, &(0x7f0000000040)={'full', 0x20, 0x6, 0x20, 0x40}, 0x2f) ioctl$sock_inet_SIOCSARP(0xffffffffffffffff, 0x8953, &(0x7f0000000180)={{0x2, 0x0, @remote}, {0x0, @dev}, 0x0, {0x2, 0x0, @multicast1=0xe000cc02}}) r4 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000000), 0x40082, 0x0) pwritev(r4, &(0x7f0000000040), 0x0, 0x0, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x4e, &(0x7f0000000040)=0x9, 0x4) sendmsg$nl_route(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000240)=@newlink={0x54, 0x10, 0xffffff1f, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x2c, 0x12, 0x0, 0x1, @ip6gretap={{0xe}, {0x18, 0x2, 0x0, 0x1, [@IFLA_GRE_LOCAL={0x14, 0x6, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02'}]}}}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x54}}, 0x0) r5 = socket$nl_route(0x10, 0x3, 0x0) r6 = socket(0x1, 0x803, 0x0) getsockname$packet(r6, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000002c0)=0x14) sendmsg$nl_route(r5, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000001ac0)=@newlink={0x44, 0x10, 0x609, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x88a8ffa7}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @vlan={{0x9}, {0xc, 0x2, 0x0, 0x1, [@IFLA_VLAN_ID={0x6}]}}}, @IFLA_LINK={0x8, 0x5, r7}]}, 0x44}}, 0x0) 416.604217ms ago: executing program 1 (id=687): r0 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r0, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000180)={0x0, 0x40}}, 0x0) r1 = socket(0x10, 0x803, 0x0) sendmsg$BATADV_CMD_GET_MESH(r1, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={0x0, 0x92}}, 0x0) getsockname$packet(r1, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000080)=0x14) r2 = socket(0x1, 0x803, 0x0) getsockname$packet(r2, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000200)=@newlink={0x44, 0x10, 0x403, 0x70bd25, 0x3f, {0x0, 0x0, 0x0, 0x0, 0x88adfda5}, [@IFLA_LINKINFO={0x14, 0x12, 0x0, 0x1, @ipvlan={{0xb}, {0x4}}}, @IFLA_LINK={0x8, 0x5, r3}, @IFLA_MASTER={0x8, 0xa, r3}]}, 0x44}, 0x1, 0x300000000000000, 0x0, 0x4004}, 0x0) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) sendmsg$inet(0xffffffffffffffff, &(0x7f00000015c0)={0x0, 0x14, &(0x7f0000001600)=[{&(0x7f0000000240)=' ', 0xffffff1f}], 0x1}, 0x0) unshare(0x2c060000) unshare(0x24020400) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r4, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cgroup.controllers\x00', 0x275a, 0x0) mmap(&(0x7f00006b7000/0x14000)=nil, 0x14000, 0x4, 0x12, r5, 0x0) 407.864021ms ago: executing program 4 (id=688): sendto$inet6(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0) r0 = socket$inet6(0xa, 0x2, 0x0) bind$inet6(r0, &(0x7f0000f5dfe4)={0xa, 0x4e20, 0x0, @empty}, 0x1c) sendto$inet6(r0, 0x0, 0x0, 0x0, &(0x7f0000000300)={0xa, 0x4e20, 0x0, @mcast1}, 0x1c) r1 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000009c0)=ANY=[@ANYBLOB="1b0000000000000000000000000004"], 0x48) r2 = bpf$PROG_LOAD(0x5, &(0x7f0000000b00)={0x11, 0xf, &(0x7f0000000340)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b702000014000000b7030000000000008500000083000000bf0900000000000055090100000000009500000800000000bf91000000000000b702000043e7b5538500000085000000b70000000000000095"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) socketpair$tipc(0x1e, 0x2, 0x0, &(0x7f0000000300)) socket$inet_sctp(0x2, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_ASSOCINFO(0xffffffffffffffff, 0x84, 0x1, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000140)='kmem_cache_free\x00', r2}, 0x10) r3 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000280)=ANY=[@ANYBLOB="38000000490001002bbd7000000000000a"], 0x38}, 0x1, 0x0, 0x0, 0x800}, 0x0) ppoll(&(0x7f0000000500)=[{r1}], 0x1, 0x0, 0x0, 0x0) pselect6(0x40, &(0x7f00000001c0)={0x0, 0x0, 0x3}, 0x0, &(0x7f00000002c0)={0x3ff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x7fffffff}, 0x0, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r4, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000027020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_MSG_GETOBJ_RESET(r5, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000080)={0x34, 0x15, 0xa, 0x401, 0x0, 0x0, {0x2, 0x0, 0x6}, [@NFTA_OBJ_TYPE={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_OBJ_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_OBJ_NAME={0x9, 0x2, 'syz1\x00'}]}, 0x34}, 0x1, 0x0, 0x0, 0x1}, 0x8004) bpf$PROG_LOAD(0x5, &(0x7f00000054c0)={0x3, 0x16, &(0x7f0000000140)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x37de6c8a68769c38, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) 264.679079ms ago: executing program 1 (id=689): setsockopt$inet6_tcp_TCP_ULP(0xffffffffffffffff, 0x6, 0x1f, &(0x7f0000000140), 0x4) setsockopt$packet_rx_ring(0xffffffffffffffff, 0x107, 0x5, &(0x7f0000000040)=@req3={0x1000, 0x3a, 0x1000, 0x3a, 0x9, 0x0, 0xffffffff}, 0x1c) r0 = socket$inet(0x2, 0x2, 0x0) setsockopt$inet_mreqn(r0, 0x0, 0x23, &(0x7f0000000740)={@multicast2, @loopback}, 0x2c) setsockopt$inet_msfilter(r0, 0x0, 0x29, &(0x7f0000000040)=ANY=[@ANYBLOB="e00000027f0000010000000003"], 0x1c) r1 = socket$netlink(0x10, 0x3, 0x0) writev(r1, &(0x7f00000003c0)=[{&(0x7f0000000300)="390000001300034700bb65e1c3e4ffff01000000010000005600000025", 0x1d}], 0x1) socket(0x6, 0x6, 0x8) writev(r1, &(0x7f0000000140)=[{&(0x7f0000000080)="390000001300034700bb5be1c3fbfeff06000000010000004500000025000000190004000400ad000d00000000000006040000000000f93132", 0x39}], 0x1) setsockopt$inet_mreqsrc(r0, 0x0, 0x25, &(0x7f0000000100)={@multicast2, @loopback, @empty}, 0xc) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}, 0x1, 0x0, 0x0, 0x40000}, 0x4004) r3 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$kcm(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{0x0}, {&(0x7f0000000580)="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", 0x13c}], 0x2, 0x0, 0x48}, 0x0) pipe(&(0x7f0000000180)={0xffffffffffffffff}) sendmsg$AUDIT_USER(r4, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0xfd16a32f6cba3e0e}, 0xc, &(0x7f0000000380)={&(0x7f00000002c0)={0xbc, 0x3ed, 0x20, 0x70bd2d, 0x25dfdbfd, "841bc83045f29dff61a1469323665aa4338bfb900ed0d9b09d2cf1d7ace840b5931db6f16d92e29d868df1a6c2b3c2502b14f648d8161fa07337f31e4a9237437022e031d67302754e290cde4ddea933c905238ecb556a5307bc1202aa523b1f49b443112d231c7676ae425395897714e7c4ab50f21ec3ecdc15e22b6dfe433ced4ef6b232659ab97e7cf3a7677237f83180f642f4232509b06f426e9042802e0f1b914ff5f9b7a7c7", ["", "", "", ""]}, 0xbc}, 0x1, 0x0, 0x0, 0x40000}, 0x44) bpf$PROG_LOAD(0x5, &(0x7f00000005c0)={0x4, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x82000, 0x1, '\x00', 0x0, @fallback=0xc, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x94) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8b18, &(0x7f0000000000)={'wlan0\x00'}) sendmsg$NFT_BATCH(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000240)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a78000000060a090400000000000000000200fffe0900020073797a32000000000900010073797a30000000004c00048024000180090001006d65746100000000140002800800014000000001080002400000001724000180090001006d6173710000000014000280080002"], 0xa0}, 0x1, 0x0, 0x0, 0x24040800}, 0x0) 9.959433ms ago: executing program 1 (id=690): r0 = socket$xdp(0x2c, 0x3, 0x0) r1 = socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$RDMA_NLDEV_CMD_NEWLINK(r1, 0x0, 0x200040c0) setsockopt$XDP_RX_RING(r0, 0x11b, 0x2, &(0x7f0000000080)=0x200000, 0x4) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000006c0)={0x18, 0xb, &(0x7f0000000640)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020000000000000000000007b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b7030000000000"], &(0x7f00000004c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000540)={&(0x7f0000000300)='rcu_utilization\x00', r2}, 0x10) r3 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000140), 0xc0381, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000005c40)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000000)=@newtaction={0x68, 0x30, 0x9, 0x0, 0x0, {}, [{0x54, 0x1, [@m_bpf={0x50, 0x1, 0x0, 0x0, {{0x8}, {0x28, 0x2, 0x0, 0x1, [@TCA_ACT_BPF_OPS_LEN={0x6}, @TCA_ACT_BPF_OPS={0x4}, @TCA_ACT_BPF_PARMS={0x18, 0x2, {0x0, 0x0, 0x10000000}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x68}}, 0x0) ioctl$PPPIOCNEWUNIT(r3, 0xc004743e, &(0x7f0000000100)=0x3) close(r3) ioctl$sock_SIOCETHTOOL(0xffffffffffffffff, 0x8946, &(0x7f0000000040)={'netdevsim0\x00', &(0x7f0000000000)=@ethtool_pauseparam={0x13}}) r4 = socket(0x11, 0x800000003, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r4, 0x8933, 0x0) ioctl$sock_x25_SIOCADDRT(r4, 0x890b, &(0x7f0000000800)={@remote={'\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc\xcc', 0x1}, 0x2, 'veth0_to_batadv\x00'}) socket$unix(0x1, 0x1, 0x0) sendmsg(r1, 0x0, 0x8001) bpf$ENABLE_STATS(0x20, 0x0, 0x0) shutdown(0xffffffffffffffff, 0x1) 0s ago: executing program 3 (id=691): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000000580)=@mangle={'mangle\x00', 0x2, 0x6, 0x4f0, 0x350, 0xd0, 0x0, 0x350, 0x1b0, 0x420, 0x420, 0x420, 0x420, 0x420, 0x6, 0x0, {[{{@ipv6={@mcast2, @private1, [], [0x0, 0xffffffff], 'macvlan1\x00', 'erspan0\x00'}, 0x0, 0xa8, 0xd0, 0x0, {0x7a00000000000000}}, @inet=@DSCP={0x28}}, {{@ipv6={@private0, @private1, [0xffffffff, 0xff000000, 0xff000000, 0xff], [0xffffffff, 0xff000000, 0xffffff00, 0xff000000], 'vlan0\x00', 'bridge_slave_0\x00', {}, {0xff}, 0x21, 0x80, 0x1, 0x24}, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38, 'SET\x00', 0x3, {{0xffffffffffffffff}, {0xffffffffffffffff}}}}, {{@ipv6={@ipv4={'\x00', '\xff\xff', @multicast2}, @remote, [0x0, 0xffffffff, 0x0, 0xffffffff], [], '\x00', 'bond_slave_0\x00'}, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}, {{@uncond, 0x0, 0xa8, 0xd0}, @HL={0x28, 'HL\x00', 0x0, {0x1, 0xa}}}, {{@uncond, 0x0, 0xa8, 0xd0}, @unspec=@CHECKSUM={0x28}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x550) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x13, &(0x7f0000000080)=ANY=[@ANYBLOB="180800001bc81a000000000000001e00851000000600000018000000", @ANYRES32, @ANYBLOB="00000000000100006608000000000000180000000000000000000000000000009500000000000000360a000000000000180100002020782500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b50a00000000000085000000060000009500000000000000"], &(0x7f0000000000)='GPL\x00', 0x2, 0xff5c, &(0x7f0000000340)=""/222, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x78) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000780)={0x6, 0x4, &(0x7f0000000000)=ANY=[@ANYBLOB="18020000f2ffffff0000000000000000850000001700000095"], &(0x7f0000000080)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000200)={r4, 0x0, 0x2000, 0x2000, &(0x7f0000000040)="976d9023d56482cd284a63da539706d7009be646625bd75b025352ebe557df463106baeed6c2d75549b140f143fb8bb67bfe5b308b8d05758115c7ad", &(0x7f0000000180)=""/114, 0x0, 0x0, 0xd8, 0xc4, &(0x7f0000000400)="cf2240e6919817e49555d221b4e6c6ba11c4d974ddab2318db7b52cee499399a00be4b710e9246d7bca28cc8346eb84414e45f3f4633f4acb77bf8cc38c4c16fe035905db79cdc0be634a915662c4cac58ae94706f86ea320f339c21399b5bb7607044916c63c528ab4149718d6215a9a3749113c268e49b2b9dae91ed804e5ac5d4ec7ac9c5fd67a76f9a2b06f7304f6e81221a751008e786e1edde82cf1ecb76cb4cd71cf781ea3a19b917a1e215b1a6c7ee605b32b91eaae38517fde4303d5f2b1e63e9e52ae4b197fd72de1f71801e1f9f1369d1f530", &(0x7f0000000280)="bf049fd184f7b03c21d9bcddc4eef9ebb6a0da3eb91c56454e873dd7336ccf21a1eeb8da7adf80d6e06ef46c7f36222fadaed2103c286468b3f44adee51445bd1bedf8fcc1c0b9fdc8b3829b1bf0c9d2d409cdecb12ad033e299c029331993ae9760345bf7feb91ee96b0eee19454ad3dbce5019b68c114ff1921a9b4665744c7784ac6736101a70592d83c448a84c31ec60bb901d96ea99471d823ee523318878ee704a8d9502b566cad45587cb74ea8259c1c0a926fc09499395b2db5af40bb6f4c526", 0x0, 0x8000}, 0x24) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000500)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x5, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x401, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x18}]}, @NFT_MSG_NEWSETELEM={0x38, 0xc, 0xa, 0x101, 0x0, 0x0, {0x7}, [@NFTA_SET_ELEM_LIST_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_ELEM_LIST_ELEMENTS={0x4}, @NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x3}, @NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0xbc}}, 0x0) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r7 = socket(0x15, 0x5, 0x0) bind$l2tp6(r7, &(0x7f0000000000)={0xa, 0x0, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, 0x4, 0x20004}, 0x20) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r8 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000440)=@bpf_lsm={0x1d, 0x18, &(0x7f0000000280)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x4}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x2}}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x2}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000000)='GPL\x00', 0x7, 0x83, &(0x7f0000000340)=""/131, 0x41000, 0x78, '\x00', r6, 0x1b, 0xffffffffffffffff, 0x8, &(0x7f00000000c0)={0x7, 0x2}, 0x8, 0x10, &(0x7f00000001c0)={0x5, 0xa, 0x4, 0x9}, 0x10, 0x0, 0x0, 0x3, &(0x7f0000000200)=[0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0xffffffffffffffff, 0x1], &(0x7f0000000400)=[{0x3, 0x4, 0x5, 0x3}, {0x2, 0x2, 0xa, 0x4}, {0x0, 0x5, 0x7, 0xb}], 0x10, 0x8, @void, @value}, 0x94) ioctl$TUNSETFILTEREBPF(r0, 0x800454e1, &(0x7f0000000500)=r8) sendmsg$nl_route_sched(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000015c0)=@newtfilter={0x88c, 0x2c, 0xd27, 0x70bd25, 0x2, {0x0, 0x0, 0x0, r6, {0x0, 0x1}, {}, {0xa, 0xa}}, [@TCA_RATE={0x6, 0x5, {0xff, 0x5}}, @filter_kind_options=@f_flow={{0x9}, {0x854, 0x2, [@TCA_FLOW_POLICE={0x850, 0xa, 0x0, 0x1, [@TCA_POLICE_RESULT={0x8, 0x5, 0x80}, @TCA_POLICE_PEAKRATE={0x404, 0x3, [0x1e0, 0x54, 0x0, 0x3, 0x47e, 0x9, 0x3, 0x8, 0x10, 0x7, 0x0, 0x0, 0x7, 0x40, 0xb083, 0x7, 0x3, 0xd0000000, 0x15, 0x1, 0x5, 0xe0000000, 0xe, 0x2e82, 0x2, 0x9, 0x1, 0x2, 0x6, 0x3, 0x2, 0x5, 0x7fff, 0x6, 0x8, 0x718, 0x2, 0x2, 0x6, 0xc3, 0x100, 0xfffffffe, 0x1, 0x6, 0xc, 0x2049b29, 0x6, 0x7f, 0xbd, 0x7, 0x5197, 0xfff, 0x6, 0x7, 0x4, 0x88f, 0xffff, 0x8, 0x3ff, 0x7fff, 0x401, 0x4, 0x13, 0x7, 0x8, 0x10, 0xb0d1, 0x7ff, 0x4, 0x80, 0x8, 0x3, 0x1, 0x6454, 0x3, 0xffff, 0x3, 0x4, 0x80000000, 0x9, 0xe, 0x9, 0x10001, 0x40, 0x1, 0x4, 0x6, 0x7, 0x1149, 0x0, 0x3, 0x6, 0x3, 0x7, 0xea2f, 0x7, 0x2fbcbcdf, 0x2, 0x6, 0x9, 0x1, 0x3, 0xffffffff, 0x7, 0x4, 0xb18, 0x1, 0x800, 0x6, 0x9, 0xffffffff, 0xcaf, 0x3ff, 0x7, 0x11, 0x100, 0x2, 0x1, 0x7f, 0xbe, 0xc171, 0xfffffff7, 0x8, 0x0, 0x4a102091, 0xfffff9a7, 0x4, 0x8, 0x1, 0x9, 0x3, 0x91c, 0x329c, 0x3, 0xae, 0x7ff, 0x7, 0x9, 0xd6f, 0x7fffffff, 0x400, 0xef, 0x5, 0x41, 0x1, 0x5, 0x4, 0x9, 0x7, 0x5, 0x2, 0x903, 0xfffffffb, 0x1, 0x6, 0x9, 0x80000001, 0x10, 0x63c, 0xea, 0xe659, 0x10001, 0x101, 0x1, 0xffffffff, 0x1, 0x56, 0xf87, 0x5, 0x6, 0x1, 0x8, 0x5, 0x0, 0x3, 0x5904, 0xffffffda, 0x1, 0x80000000, 0x1, 0x4, 0x9, 0xb48, 0xfffffffa, 0x1ff, 0xc, 0x2, 0x6, 0x88, 0x2, 0x7, 0x5, 0x7, 0x7ff, 0x9, 0x8000, 0x600, 0x0, 0xac, 0xff, 0x6c1794d3, 0x0, 0xc, 0x10001, 0x0, 0x882a, 0x8, 0xe, 0x0, 0x7, 0x1, 0x9, 0x4, 0x431f763e, 0x1, 0x2, 0x80, 0x2, 0x4, 0x80000000, 0x5, 0x3, 0x7a2, 0x82c, 0x6a, 0x5, 0x1, 0xf, 0x52000000, 0x3, 0x7db, 0x2, 0x3, 0xffff, 0xfff, 0xfffffffd, 0x6, 0xffffff81, 0x5, 0x9, 0x2, 0x616b8048, 0x8, 0xfffffff2, 0x0, 0x4, 0xfffffffb, 0x9, 0x0, 0x7, 0x7c418a57, 0x73, 0xffff, 0x3, 0x0, 0x2a4]}, @TCA_POLICE_TBF={0x3c, 0x1, {0xa, 0x7, 0x7, 0x7, 0x5, {0x15, 0x2, 0x200, 0x9, 0x7, 0x2}, {0x8, 0x1, 0x7fff, 0x5465, 0x4, 0x5a}, 0x3, 0x8001, 0x81}}, @TCA_POLICE_RATE={0x404, 0x2, [0x7, 0xe4, 0x1ff, 0x5, 0x8, 0x0, 0x6, 0x0, 0x7, 0x0, 0x8, 0xb3, 0x4, 0x7, 0x2, 0x8, 0x8, 0x3, 0x100, 0x4, 0xd5500, 0xca, 0x331, 0x8, 0x0, 0x7, 0xb091, 0x0, 0x7fff, 0x5, 0x0, 0xe00, 0x11, 0x1000, 0x2, 0xe, 0x4, 0x8, 0x7fff, 0x6, 0x1000, 0x7fffffff, 0x81, 0x6, 0x7, 0x3, 0x4, 0x8, 0x8, 0x1, 0x5bd, 0x3, 0x6, 0x1, 0x7, 0x2, 0x5, 0x3, 0x2, 0x2, 0x3, 0x4, 0x4, 0x33e774c4, 0x40000000, 0x0, 0x0, 0xcb5, 0x12, 0x3, 0x10000, 0x80000000, 0x0, 0x2, 0x9, 0x9, 0x3, 0xfffffffb, 0x4, 0x7, 0x5, 0x6, 0xffffffff, 0x1, 0x9, 0x81, 0x7b58, 0x9, 0x2, 0x1, 0x81, 0xfffffffe, 0xa, 0x0, 0xffffffff, 0x0, 0x9, 0x8b, 0x9, 0x4, 0x7bf, 0x5, 0x5, 0x3, 0x80, 0x9, 0x7fffffff, 0x2, 0x6, 0x4, 0x800, 0xa9a, 0x1, 0x1, 0x79ce, 0x3ff, 0x7ff, 0xffff, 0x1, 0x400, 0x1ff, 0x0, 0x0, 0x7, 0x9, 0x0, 0x8, 0xad, 0x7, 0x1ff, 0x9, 0x808, 0x5, 0x1, 0x8, 0x3, 0x1ff, 0x4, 0xb, 0x8, 0x7, 0x9, 0x6, 0x80, 0x2, 0xd0000000, 0x5, 0x6, 0x7, 0x6, 0x1, 0x4, 0x3, 0x9, 0x6, 0x5, 0x8, 0x80000001, 0x1ff16624, 0x6, 0x0, 0x1, 0x8, 0x3, 0x5, 0xdd3e, 0x3, 0x401, 0x9, 0x9, 0xff, 0x9, 0x609624be, 0x3, 0xa, 0xfffffffe, 0x7ff, 0x42d8, 0x200, 0x2, 0x200, 0x100, 0x5, 0x9, 0xd1f, 0x6, 0x5, 0x9, 0x8000, 0x8000, 0xffffffff, 0x7, 0x3, 0x1, 0x2, 0x200, 0x1, 0x55, 0x2de, 0xc2bb, 0x3, 0x5, 0x4, 0xe, 0x3ff, 0x4, 0x8, 0x105, 0xa0a6, 0xa, 0x8000, 0xffff, 0x8, 0x8, 0x9, 0x2, 0x8, 0x6, 0x858c, 0xb247, 0x6, 0x10000, 0x0, 0x4, 0x2, 0xf96, 0x2, 0x9, 0xd, 0x9, 0x1, 0xffffffff, 0x200, 0x3, 0x1, 0x3, 0x8, 0x4, 0xba44, 0x3, 0xe, 0x17, 0x73, 0x1, 0x7, 0xd, 0x9b, 0x8, 0x53e6, 0x80000001, 0x2, 0xffffffff, 0x6, 0x7, 0x1c, 0x5]}]}]}}]}, 0x88c}}, 0x20040000) bpf$BPF_PROG_QUERY(0x10, &(0x7f0000000c00)={@fallback=r8, 0x0, 0x1, 0x2, &(0x7f0000000b00)=[0x0, 0x0, 0x0, 0x0], 0x4, 0x0, &(0x7f0000000b40)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000b80)=[0x0, 0x0], &(0x7f0000000bc0)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, 0x40) kernel console output (not intermixed with test programs): Warning: Permanently added '10.128.10.7' (ED25519) to the list of known hosts. [ 73.657188][ T5823] cgroup: Unknown subsys name 'net' [ 73.780697][ T5823] cgroup: Unknown subsys name 'cpuset' [ 73.790165][ T5823] cgroup: Unknown subsys name 'rlimit' Setting up swapspace version 1, size = 127995904 bytes [ 75.386376][ T5823] Adding 124996k swap on ./swap-file. Priority:0 extents:1 across:124996k [ 79.282308][ T5838] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 79.297813][ T5839] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 79.307021][ T5839] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 79.327053][ T5839] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 79.334439][ T5839] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 79.359123][ T5839] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 79.369313][ T5841] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 79.378723][ T5839] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 79.386092][ T5847] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 79.387825][ T5841] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 79.394346][ T5847] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 79.400515][ T5839] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 79.408048][ T5847] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 79.415698][ T5841] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 79.438148][ T5839] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 79.447048][ T5841] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 79.455347][ T5839] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 79.460207][ T55] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 79.463138][ T5841] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 79.471294][ T55] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 79.478555][ T5841] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 79.486798][ T55] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 79.498509][ T55] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 79.507296][ T5149] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 79.515124][ T5841] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 79.523186][ T5149] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 79.532800][ T55] Bluetooth: hci3: unexpected cc 0x0c25 length: 249 > 3 [ 79.540816][ T55] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 79.541047][ T5149] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 79.555818][ T5149] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 79.995543][ T5842] chnl_net:caif_netlink_parms(): no params data found [ 80.008868][ T5833] chnl_net:caif_netlink_parms(): no params data found [ 80.134446][ T5846] chnl_net:caif_netlink_parms(): no params data found [ 80.267533][ T5834] chnl_net:caif_netlink_parms(): no params data found [ 80.286433][ T5851] chnl_net:caif_netlink_parms(): no params data found [ 80.303136][ T5842] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.311458][ T5842] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.320591][ T5842] bridge_slave_0: entered allmulticast mode [ 80.327735][ T5842] bridge_slave_0: entered promiscuous mode [ 80.350700][ T5833] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.358017][ T5833] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.365467][ T5833] bridge_slave_0: entered allmulticast mode [ 80.372753][ T5833] bridge_slave_0: entered promiscuous mode [ 80.399982][ T5842] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.407573][ T5842] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.414947][ T5842] bridge_slave_1: entered allmulticast mode [ 80.423023][ T5842] bridge_slave_1: entered promiscuous mode [ 80.445630][ T5833] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.453231][ T5833] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.461911][ T5833] bridge_slave_1: entered allmulticast mode [ 80.470474][ T5833] bridge_slave_1: entered promiscuous mode [ 80.511227][ T5846] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.518553][ T5846] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.526060][ T5846] bridge_slave_0: entered allmulticast mode [ 80.533897][ T5846] bridge_slave_0: entered promiscuous mode [ 80.588820][ T5846] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.596045][ T5846] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.604494][ T5846] bridge_slave_1: entered allmulticast mode [ 80.611556][ T5846] bridge_slave_1: entered promiscuous mode [ 80.626702][ T5842] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.640509][ T5833] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.653436][ T5833] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.694907][ T5842] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.769929][ T5851] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.777599][ T5851] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.784869][ T5851] bridge_slave_0: entered allmulticast mode [ 80.793868][ T5851] bridge_slave_0: entered promiscuous mode [ 80.804297][ T5846] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 80.817335][ T5846] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 80.848675][ T5833] team0: Port device team_slave_0 added [ 80.857433][ T5833] team0: Port device team_slave_1 added [ 80.863479][ T5851] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.870900][ T5851] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.878808][ T5851] bridge_slave_1: entered allmulticast mode [ 80.885849][ T5851] bridge_slave_1: entered promiscuous mode [ 80.902164][ T5834] bridge0: port 1(bridge_slave_0) entered blocking state [ 80.909736][ T5834] bridge0: port 1(bridge_slave_0) entered disabled state [ 80.917340][ T5834] bridge_slave_0: entered allmulticast mode [ 80.924256][ T5834] bridge_slave_0: entered promiscuous mode [ 80.933760][ T5834] bridge0: port 2(bridge_slave_1) entered blocking state [ 80.941526][ T5834] bridge0: port 2(bridge_slave_1) entered disabled state [ 80.949201][ T5834] bridge_slave_1: entered allmulticast mode [ 80.956405][ T5834] bridge_slave_1: entered promiscuous mode [ 80.965977][ T5842] team0: Port device team_slave_0 added [ 80.975070][ T5842] team0: Port device team_slave_1 added [ 81.010437][ T5846] team0: Port device team_slave_0 added [ 81.062035][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.069414][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.098297][ T5833] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.125289][ T5846] team0: Port device team_slave_1 added [ 81.151226][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.159231][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.185669][ T5842] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.199231][ T5842] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.206394][ T5842] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.233588][ T5842] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.246473][ T5833] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.254195][ T5833] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.281310][ T5833] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.295255][ T5851] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.307805][ T5851] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.331589][ T5834] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 81.343884][ T5834] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 81.391647][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.398895][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.425537][ T5846] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.439443][ T5846] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.446441][ T5846] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.473245][ T5846] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.510507][ T5847] Bluetooth: hci0: command tx timeout [ 81.510511][ T5149] Bluetooth: hci1: command tx timeout [ 81.525562][ T5851] team0: Port device team_slave_0 added [ 81.551955][ T5834] team0: Port device team_slave_0 added [ 81.562275][ T5842] hsr_slave_0: entered promiscuous mode [ 81.569277][ T5842] hsr_slave_1: entered promiscuous mode [ 81.578153][ T5851] team0: Port device team_slave_1 added [ 81.587143][ T5847] Bluetooth: hci4: command tx timeout [ 81.587208][ T5841] Bluetooth: hci2: command tx timeout [ 81.599133][ T5149] Bluetooth: hci3: command tx timeout [ 81.639682][ T5834] team0: Port device team_slave_1 added [ 81.650369][ T5846] hsr_slave_0: entered promiscuous mode [ 81.656827][ T5846] hsr_slave_1: entered promiscuous mode [ 81.663039][ T5846] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.671266][ T5846] Cannot create hsr debugfs directory [ 81.702934][ T5833] hsr_slave_0: entered promiscuous mode [ 81.709955][ T5833] hsr_slave_1: entered promiscuous mode [ 81.716452][ T5833] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 81.724582][ T5833] Cannot create hsr debugfs directory [ 81.773015][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.780059][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.806172][ T5851] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.854282][ T5851] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.861618][ T5851] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.888564][ T5851] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 81.921002][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 81.928349][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.956216][ T5834] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 81.970342][ T5834] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 81.978012][ T5834] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 82.004217][ T5834] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 82.106211][ T5851] hsr_slave_0: entered promiscuous mode [ 82.112868][ T5851] hsr_slave_1: entered promiscuous mode [ 82.119519][ T5851] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.127523][ T5851] Cannot create hsr debugfs directory [ 82.205037][ T5834] hsr_slave_0: entered promiscuous mode [ 82.213374][ T5834] hsr_slave_1: entered promiscuous mode [ 82.220707][ T5834] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 82.228966][ T5834] Cannot create hsr debugfs directory [ 82.428288][ T5846] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 82.463434][ T5846] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 82.503143][ T5846] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 82.528264][ T5846] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 82.588127][ T5833] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 82.601565][ T5833] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 82.612814][ T5833] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 82.624537][ T5833] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 82.691737][ T5842] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 82.720047][ T5842] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 82.730455][ T5842] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 82.765039][ T5842] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 82.805803][ T5851] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 82.824490][ T5851] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 82.855163][ T5851] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 82.880739][ T5851] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 82.952858][ T5834] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 82.963621][ T5834] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 82.976153][ T5834] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 82.993265][ T5834] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 83.031909][ T5846] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.113579][ T5846] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.182937][ T5833] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.203916][ T1334] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.211323][ T1334] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.236256][ T5842] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.245646][ T1334] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.253047][ T1334] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.295218][ T5833] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.312756][ T5851] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.332522][ T5842] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.346851][ T3018] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.354313][ T3018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.390208][ T3018] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.397405][ T3018] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.406797][ T3018] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.414039][ T3018] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.441206][ T1324] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.448485][ T1324] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.484996][ T5851] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.511026][ T5846] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 83.525835][ T1324] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.533071][ T1324] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.561571][ T69] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.568766][ T69] bridge0: port 2(bridge_slave_1) entered forwarding state [ 83.588052][ T5841] Bluetooth: hci1: command tx timeout [ 83.593553][ T5841] Bluetooth: hci0: command tx timeout [ 83.601646][ T5834] 8021q: adding VLAN 0 to HW filter on device bond0 [ 83.673579][ T5841] Bluetooth: hci4: command tx timeout [ 83.673609][ T5149] Bluetooth: hci2: command tx timeout [ 83.679810][ T5847] Bluetooth: hci3: command tx timeout [ 83.771198][ T5834] 8021q: adding VLAN 0 to HW filter on device team0 [ 83.789342][ T1322] bridge0: port 1(bridge_slave_0) entered blocking state [ 83.796593][ T1322] bridge0: port 1(bridge_slave_0) entered forwarding state [ 83.837830][ T1322] bridge0: port 2(bridge_slave_1) entered blocking state [ 83.845317][ T1322] bridge0: port 2(bridge_slave_1) entered forwarding state [ 84.133891][ T5846] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.173223][ T5851] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.284253][ T5833] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.298919][ T5842] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.391932][ T5846] veth0_vlan: entered promiscuous mode [ 84.400544][ T5851] veth0_vlan: entered promiscuous mode [ 84.432515][ T5851] veth1_vlan: entered promiscuous mode [ 84.452296][ T5846] veth1_vlan: entered promiscuous mode [ 84.497139][ T5834] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 84.511500][ T5833] veth0_vlan: entered promiscuous mode [ 84.534766][ T5833] veth1_vlan: entered promiscuous mode [ 84.592142][ T5851] veth0_macvtap: entered promiscuous mode [ 84.621167][ T5851] veth1_macvtap: entered promiscuous mode [ 84.639535][ T5846] veth0_macvtap: entered promiscuous mode [ 84.662699][ T5846] veth1_macvtap: entered promiscuous mode [ 84.688695][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.715461][ T5833] veth0_macvtap: entered promiscuous mode [ 84.740216][ T5851] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.755948][ T5851] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.765401][ T5851] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.775536][ T5851] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.785315][ T5851] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.804708][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 84.815767][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.827196][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 84.844908][ T5834] veth0_vlan: entered promiscuous mode [ 84.854532][ T5833] veth1_macvtap: entered promiscuous mode [ 84.863804][ T5846] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 84.874715][ T5846] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 84.890036][ T5846] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 84.901233][ T5846] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.910575][ T5846] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.920035][ T5846] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.929005][ T5846] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 84.978354][ T5834] veth1_vlan: entered promiscuous mode [ 85.000023][ T5842] veth0_vlan: entered promiscuous mode [ 85.015275][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.026962][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.038007][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.048606][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.061896][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.080474][ T5842] veth1_vlan: entered promiscuous mode [ 85.097890][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.110919][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.121932][ T5833] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.132920][ T5833] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.144130][ T5833] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.181001][ T5833] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.190404][ T5833] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.200296][ T5833] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.209188][ T5833] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.252652][ T5834] veth0_macvtap: entered promiscuous mode [ 85.289840][ T5834] veth1_macvtap: entered promiscuous mode [ 85.310529][ T1329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.318951][ T1329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.383362][ T5842] veth0_macvtap: entered promiscuous mode [ 85.385203][ T1334] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.396131][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.406030][ T1334] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.414540][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.425757][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.437501][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.447770][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.459043][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.471120][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.528993][ T1324] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.535202][ T1322] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.542356][ T5842] veth1_macvtap: entered promiscuous mode [ 85.546812][ T1322] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.552170][ T1324] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.575843][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.587787][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.600042][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.610684][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.620617][ T5834] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.631158][ T5834] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.643051][ T5834] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 85.667557][ T5847] Bluetooth: hci1: command tx timeout [ 85.673091][ T5841] Bluetooth: hci0: command tx timeout [ 85.696983][ T1329] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 85.704954][ T1329] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 85.721292][ T5834] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.742486][ T5834] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.751707][ T5841] Bluetooth: hci2: command tx timeout [ 85.756967][ T5847] Bluetooth: hci3: command tx timeout [ 85.762874][ T5841] Bluetooth: hci4: command tx timeout [ 85.776962][ T5834] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.785837][ T5834] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 85.804680][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.825691][ T5851] soft_limit_in_bytes is deprecated and will be removed. Please report your usecase to linux-mm@kvack.org if you depend on this functionality. [ 85.848455][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.860603][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.871541][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.881499][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.892123][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.902230][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 85.913125][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.924240][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 85.968383][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 85.981706][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 85.993237][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.004241][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.015097][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.026341][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.036970][ T5842] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 86.049102][ T5842] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 86.062391][ T5842] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 86.120420][ T5842] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.143193][ T5842] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.155339][ T5842] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.167056][ T5842] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 86.228088][ T150] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.235981][ T150] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.455577][ T69] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.482507][ T69] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.609751][ T3018] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.642115][ T69] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.662386][ T3018] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.682481][ T69] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 86.839498][ T3018] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 86.854335][ T5937] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input5 [ 86.867910][ T3018] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 87.757051][ T5841] Bluetooth: hci0: command tx timeout [ 87.762572][ T5841] Bluetooth: hci1: command tx timeout [ 87.826601][ T5958] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 87.837254][ T5841] Bluetooth: hci4: command tx timeout [ 87.842731][ T5841] Bluetooth: hci3: command tx timeout [ 87.842808][ T5847] Bluetooth: hci2: command tx timeout [ 88.234798][ T5968] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 88.252879][ T5969] netlink: 'syz.0.10': attribute type 10 has an invalid length. [ 88.611497][ T5969] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 88.984935][ T5977] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.009787][ T5984] netlink: 24 bytes leftover after parsing attributes in process `syz.4.13'. [ 89.030945][ T5984] netlink: 48 bytes leftover after parsing attributes in process `syz.4.13'. [ 89.113792][ T5982] ip6tnl1: entered promiscuous mode [ 89.128122][ T5982] ip6tnl1: entered allmulticast mode [ 89.168847][ T5982] team0: Device ip6tnl1 is of different type [ 89.464416][ T5977] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 89.698575][ T5977] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.014892][ T5977] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 90.710319][ T5977] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.750904][ T5977] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.843099][ T5977] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 90.893546][ T5977] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 91.376685][ T6078] openvswitch: netlink: Duplicate or invalid key (type 0). [ 91.420532][ T6078] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 92.312151][ T26] cfg80211: failed to load regulatory.db [ 92.420651][ T6107] netlink: 'syz.0.32': attribute type 7 has an invalid length. [ 92.433019][ T6107] netlink: 8 bytes leftover after parsing attributes in process `syz.0.32'. [ 92.717867][ T5847] Bluetooth: hci4: command tx timeout [ 92.865601][ T5925] hid-generic 0005:0B57:0009.0001: item fetching failed at offset 0/1 [ 92.976033][ T5925] hid-generic 0005:0B57:0009.0001: probe with driver hid-generic failed with error -22 [ 93.074096][ T6119] Zero length message leads to an empty skb [ 93.131570][ T6119] netlink: 12 bytes leftover after parsing attributes in process `syz.0.36'. [ 93.145165][ T6125] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 93.239982][ T6122] IPVS: nq: UDP 224.0.0.2:0 - no destination available [ 93.247424][ T5925] IPVS: starting estimator thread 0... [ 93.377153][ T6132] IPVS: using max 18 ests per chain, 43200 per kthread [ 93.743431][ T6144] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 94.132003][ T6150] tipc: Started in network mode [ 94.147686][ T6150] tipc: Node identity 6a6a66af3ecd, cluster identity 4711 [ 94.168496][ T6150] tipc: Enabled bearer , priority 0 [ 94.366424][ T6148] tipc: Resetting bearer [ 94.754187][ T6157] netlink: 'syz.1.45': attribute type 4 has an invalid length. [ 94.806176][ T6161] netlink: 'syz.1.45': attribute type 4 has an invalid length. [ 95.208372][ T5888] tipc: Node number set to 1420256943 [ 97.191993][ T6148] tipc: Disabling bearer [ 97.331410][ T6181] netlink: 'syz.1.50': attribute type 39 has an invalid length. [ 97.350696][ T6176] tipc: Enabling of bearer rejected, failed to enable media [ 97.402991][ T6179] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 97.579264][ T6190] Cannot find del_set index 1 as target [ 98.065559][ T6198] netlink: 28 bytes leftover after parsing attributes in process `syz.3.58'. [ 98.082369][ T6198] netlink: 28 bytes leftover after parsing attributes in process `syz.3.58'. [ 98.087744][ T6202] netlink: 8 bytes leftover after parsing attributes in process `syz.1.59'. [ 98.156644][ T6198] bridge0: entered promiscuous mode [ 98.185792][ T6198] ip6gretap0: entered promiscuous mode [ 98.617918][ T6208] bridge0: port 2(bridge_slave_1) entered disabled state [ 98.626962][ T6208] bridge0: port 1(bridge_slave_0) entered disabled state [ 98.883552][ T6208] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 98.931638][ T6208] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 99.175492][ T6208] netdevsim netdevsim0 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.214708][ T6208] netdevsim netdevsim0 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.244229][ T6208] netdevsim netdevsim0 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.270024][ T6208] netdevsim netdevsim0 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 99.564613][ T6208] syz.0.61 (6208) used greatest stack depth: 18704 bytes left [ 99.650883][ T6232] netlink: 'syz.2.67': attribute type 10 has an invalid length. [ 99.764282][ T6232] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 100.166922][ T6244] syzkaller0: entered promiscuous mode [ 100.172977][ T6244] syzkaller0: entered allmulticast mode [ 100.351313][ T6247] netlink: 40 bytes leftover after parsing attributes in process `syz.2.72'. [ 101.507360][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 103.587098][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 103.815076][ T6300] trusted_key: syz.2.91 sent an empty control message without MSG_MORE. [ 104.116510][ T6311] ip6tnl1: entered promiscuous mode [ 104.323486][ T6317] netlink: 156 bytes leftover after parsing attributes in process `syz.1.97'. [ 104.329047][ T6316] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.431585][ T6314] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.490862][ T6316] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.585639][ T6314] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.693009][ T6316] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.769561][ T6314] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.815654][ T6316] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 104.930342][ T6314] bond0: (slave netdevsim0): Releasing backup interface [ 104.956552][ T6314] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 105.142145][ T6316] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.172739][ T6330] openvswitch: netlink: Flow set message rejected, Key attribute missing. [ 105.229513][ T6331] Bluetooth: MGMT ver 1.23 [ 105.255431][ T6316] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.366533][ T6316] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.402753][ T6314] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.423280][ T6316] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.446622][ T6314] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.500926][ T6314] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.569837][ T6314] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 105.706302][ T6339] syz.1.104 uses obsolete (PF_INET,SOCK_PACKET) [ 105.786959][ T6341] syz.0.105 (6341) used obsolete PPPIOCDETACH ioctl [ 106.204223][ T6354] syzkaller0: entered promiscuous mode [ 106.210133][ T6354] syzkaller0: entered allmulticast mode [ 108.615954][ T6372] bridge1: entered allmulticast mode [ 109.248355][ T6408] netlink: 'syz.1.125': attribute type 1 has an invalid length. [ 109.304222][ T6408] bridge2: entered promiscuous mode [ 109.702558][ T6422] team_slave_0: entered promiscuous mode [ 109.708675][ T6422] team_slave_1: entered promiscuous mode [ 109.727197][ T6422] macsec1: entered promiscuous mode [ 109.732751][ T6422] team0: entered promiscuous mode [ 109.741973][ T6422] team0: left promiscuous mode [ 109.748099][ T6422] team_slave_0: left promiscuous mode [ 109.753688][ T6422] team_slave_1: left promiscuous mode [ 109.973678][ T6428] netlink: 'syz.4.133': attribute type 7 has an invalid length. [ 110.004225][ T6428] netlink: 8 bytes leftover after parsing attributes in process `syz.4.133'. [ 110.402456][ T6435] netlink: 8 bytes leftover after parsing attributes in process `syz.1.137'. [ 110.434735][ T6435] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 110.444923][ T6435] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 110.834236][ T6450] warning: `syz.4.143' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 111.555295][ T6471] netlink: 20 bytes leftover after parsing attributes in process `syz.2.148'. [ 111.578912][ T6471] vlan2: entered promiscuous mode [ 111.584020][ T6471] bridge0: entered promiscuous mode [ 112.297020][ T6489] netlink: 'syz.2.157': attribute type 1 has an invalid length. [ 112.356896][ T6489] netlink: 228 bytes leftover after parsing attributes in process `syz.2.157'. [ 112.417048][ T6489] netlink: 8 bytes leftover after parsing attributes in process `syz.2.157'. [ 112.650789][ T6498] netlink: 8 bytes leftover after parsing attributes in process `syz.0.160'. [ 112.941374][ T6502] netlink: 12 bytes leftover after parsing attributes in process `syz.1.162'. [ 113.009558][ T6506] netlink: 24 bytes leftover after parsing attributes in process `syz.3.164'. [ 113.059156][ T6508] netlink: 137456 bytes leftover after parsing attributes in process `syz.0.163'. [ 113.074360][ T6508] netlink: zone id is out of range [ 113.084841][ T6508] netlink: zone id is out of range [ 113.095114][ T6508] netlink: zone id is out of range [ 113.102951][ T6508] netlink: zone id is out of range [ 113.108475][ T6508] netlink: zone id is out of range [ 113.113737][ T6508] netlink: zone id is out of range [ 113.119434][ T6508] netlink: zone id is out of range [ 113.124712][ T6508] netlink: zone id is out of range [ 113.146888][ T6508] netlink: zone id is out of range [ 113.153283][ T6508] netlink: zone id is out of range [ 113.272179][ T6513] vlan2: entered allmulticast mode [ 113.277621][ T6513] macsec0: entered allmulticast mode [ 113.294157][ T6513] veth1_macvtap: entered allmulticast mode [ 113.305953][ T6513] bridge0: port 3(vlan2) entered blocking state [ 113.328275][ T6513] bridge0: port 3(vlan2) entered disabled state [ 113.336633][ T6513] vlan2: entered promiscuous mode [ 113.351428][ T6513] macsec0: entered promiscuous mode [ 113.362272][ T6513] bridge0: port 3(vlan2) entered blocking state [ 113.369201][ T6513] bridge0: port 3(vlan2) entered forwarding state [ 113.493515][ T6520] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input6 [ 113.872997][ T6527] netlink: 3 bytes leftover after parsing attributes in process `syz.1.171'. [ 113.918346][ T6527] batadv1: entered promiscuous mode [ 113.923632][ T6527] batadv1: entered allmulticast mode [ 114.031559][ T6530] batadv1: entered promiscuous mode [ 114.064193][ T6530] batadv1: entered allmulticast mode [ 115.776071][ T6567] __nla_validate_parse: 1 callbacks suppressed [ 115.776096][ T6567] netlink: 8 bytes leftover after parsing attributes in process `syz.3.185'. [ 115.792706][ T6567] netlink: 4 bytes leftover after parsing attributes in process `syz.3.185'. [ 115.801926][ T6567] netlink: 32 bytes leftover after parsing attributes in process `syz.3.185'. [ 115.863955][ T5847] block nbd0: Receive control failed (result -107) [ 115.897614][ T6567] nbd0: detected capacity change from 0 to 256 [ 116.669652][ T6588] netlink: 12 bytes leftover after parsing attributes in process `syz.0.189'. [ 117.081279][ T6599] netlink: 'syz.1.193': attribute type 10 has an invalid length. [ 117.224352][ T6599] 8021q: adding VLAN 0 to HW filter on device team0 [ 117.251221][ T6599] bond0: (slave team0): Enslaving as an active interface with an up link [ 117.309561][ T6604] bridge_slave_0: left allmulticast mode [ 117.325026][ T6604] bridge_slave_0: left promiscuous mode [ 117.343377][ T6604] bridge0: port 1(bridge_slave_0) entered disabled state [ 117.385309][ T6604] bridge_slave_1: left allmulticast mode [ 117.406255][ T6604] bridge_slave_1: left promiscuous mode [ 117.429970][ T6604] bridge0: port 2(bridge_slave_1) entered disabled state [ 117.469601][ T6604] bond0: (slave bond_slave_0): Releasing backup interface [ 117.488682][ T6604] bond0: (slave bond_slave_1): Releasing backup interface [ 117.531018][ T6604] team0: Port device team_slave_0 removed [ 117.554131][ T6604] team0: Port device team_slave_1 removed [ 117.561648][ T6604] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 117.576156][ T6604] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 117.595787][ T6604] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 117.625175][ T6604] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 117.751761][ T6606] team0: Mode changed to "loadbalance" [ 118.658462][ T5925] IPVS: starting estimator thread 0... [ 118.741518][ T6651] netlink: 24 bytes leftover after parsing attributes in process `syz.0.209'. [ 118.750670][ T6649] IPVS: using max 18 ests per chain, 43200 per kthread [ 118.968048][ T6661] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 118.978045][ T6662] netlink: 'syz.1.212': attribute type 10 has an invalid length. [ 119.017033][ T6662] netlink: 40 bytes leftover after parsing attributes in process `syz.1.212'. [ 119.141311][ T6662] team0: Port device geneve0 added [ 120.276643][ T6699] netlink: 8 bytes leftover after parsing attributes in process `syz.2.227'. [ 120.668391][ T6713] netlink: 20 bytes leftover after parsing attributes in process `syz.3.232'. [ 120.702320][ T6715] sctp: [Deprecated]: syz.2.230 (pid 6715) Use of struct sctp_assoc_value in delayed_ack socket option. [ 120.702320][ T6715] Use struct sctp_sack_info instead [ 120.797667][ T6714] netlink: 'syz.0.233': attribute type 1 has an invalid length. [ 120.826448][ T6714] netlink: 36 bytes leftover after parsing attributes in process `syz.0.233'. [ 121.004801][ T6717] syzkaller0: entered promiscuous mode [ 121.032551][ T6717] syzkaller0: entered allmulticast mode [ 121.099072][ T6723] netlink: 212 bytes leftover after parsing attributes in process `syz.3.235'. [ 121.241630][ T6721] netdevsim netdevsim3 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.228193][ T6725] team_slave_0: entered promiscuous mode [ 124.233950][ T6725] team_slave_1: entered promiscuous mode [ 124.240395][ T6725] macsec1: entered promiscuous mode [ 124.245807][ T6725] team0: entered promiscuous mode [ 124.254976][ T6725] team0: left promiscuous mode [ 124.262500][ T6725] team_slave_0: left promiscuous mode [ 124.268053][ T6725] team_slave_1: left promiscuous mode [ 124.364994][ T6721] netdevsim netdevsim3 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.399214][ T6734] ieee802154 phy1 wpan1: encryption failed: -22 [ 124.471481][ T6736] netlink: 'syz.0.241': attribute type 3 has an invalid length. [ 124.472998][ T6721] netdevsim netdevsim3 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.489289][ T6736] netlink: 8 bytes leftover after parsing attributes in process `syz.0.241'. [ 124.572513][ T6736] bond0: (slave wlan1): Releasing backup interface [ 124.647373][ T6721] netdevsim netdevsim3 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 124.781244][ T6721] netdevsim netdevsim3 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.812765][ T6721] netdevsim netdevsim3 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.836672][ T6721] netdevsim netdevsim3 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 124.865071][ T6745] netlink: 'syz.4.244': attribute type 4 has an invalid length. [ 124.901394][ T6721] netdevsim netdevsim3 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 126.105050][ T6771] netlink: 12 bytes leftover after parsing attributes in process `syz.2.253'. [ 126.292037][ T6778] netlink: 'syz.4.255': attribute type 1 has an invalid length. [ 126.332700][ T6778] bond1: entered promiscuous mode [ 126.345726][ T6778] 8021q: adding VLAN 0 to HW filter on device bond1 [ 126.358823][ T6781] netlink: 3 bytes leftover after parsing attributes in process `syz.4.255'. [ 126.422520][ T6778] netlink: 3 bytes leftover after parsing attributes in process `syz.4.255'. [ 126.479129][ T6784] bridge_slave_0: left allmulticast mode [ 126.485091][ T6784] bridge_slave_0: left promiscuous mode [ 126.492718][ T6784] bridge0: port 1(bridge_slave_0) entered disabled state [ 126.509014][ T6784] bridge_slave_1: left allmulticast mode [ 126.514916][ T6784] bridge_slave_1: left promiscuous mode [ 126.521265][ T6784] bridge0: port 2(bridge_slave_1) entered disabled state [ 126.531723][ T6784] bond0: (slave bond_slave_0): Releasing backup interface [ 126.541655][ T6784] bond0: (slave bond_slave_1): Releasing backup interface [ 126.558979][ T6784] team0: Port device team_slave_0 removed [ 126.570621][ T6784] team0: Port device team_slave_1 removed [ 126.577379][ T6784] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 126.585505][ T6784] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 126.600634][ T6781] batadv1: entered promiscuous mode [ 126.606311][ T6781] batadv1: entered allmulticast mode [ 126.621452][ T6781] 8021q: adding VLAN 0 to HW filter on device batadv1 [ 126.635650][ T6781] bond1: (slave batadv1): making interface the new active one [ 126.648113][ T6781] bond1: (slave batadv1): Enslaving as an active interface with an up link [ 126.669798][ T6782] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.678618][ T6782] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.686927][ T6782] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.695178][ T6782] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 126.708690][ T6782] bond0: (slave vxlan0): Enslaving as an active interface with an up link [ 126.737734][ T6778] batadv2: entered promiscuous mode [ 126.755741][ T6778] batadv2: entered allmulticast mode [ 126.775339][ T6778] 8021q: adding VLAN 0 to HW filter on device batadv2 [ 126.787344][ T6778] bond1: (slave batadv2): Enslaving as an active interface with an up link [ 126.805986][ T6785] team0: Mode changed to "loadbalance" [ 130.938231][ T6786] bond1: (slave veth3): Enslaving as an active interface with a down link [ 131.301238][ T6794] bond0 (unregistering): (slave vxlan0): Releasing backup interface [ 131.337380][ T6794] netdevsim netdevsim2 eth0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.346277][ T6794] netdevsim netdevsim2 eth1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.355205][ T6794] netdevsim netdevsim2 eth2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.363786][ T6794] netdevsim netdevsim2 eth3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 131.405072][ T6794] bond0 (unregistering): Released all slaves [ 131.619650][ T6864] syzkaller0: entered promiscuous mode [ 131.625494][ T6864] syzkaller0: entered allmulticast mode [ 131.688896][ T6871] net_ratelimit: 2098 callbacks suppressed [ 131.688919][ T6871] A link change request failed with some changes committed already. Interface wg2 may have been left with an inconsistent configuration, please check. [ 132.888326][ T6904] netlink: 'syz.4.279': attribute type 4 has an invalid length. [ 133.271605][ T1298] ieee802154 phy1 wpan1: encryption failed: -22 [ 134.690649][ T6884] bond0: entered promiscuous mode [ 134.696029][ T6884] bond_slave_0: entered promiscuous mode [ 134.708016][ T6884] bond_slave_1: entered promiscuous mode [ 134.714387][ T6884] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 134.737043][ T6884] bond0: left promiscuous mode [ 134.756954][ T6884] bond_slave_0: left promiscuous mode [ 134.762598][ T6884] bond_slave_1: left promiscuous mode [ 135.006228][ T6920] netlink: 'syz.4.283': attribute type 4 has an invalid length. [ 135.240053][ T6925] syzkaller0: entered promiscuous mode [ 135.245649][ T6925] syzkaller0: entered allmulticast mode [ 137.916948][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 138.112442][ T6959] netlink: 8 bytes leftover after parsing attributes in process `syz.4.297'. [ 138.448076][ T6968] netlink: 'syz.0.301': attribute type 1 has an invalid length. [ 140.554136][ T6968] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 140.677416][ T6978] netlink: 'syz.4.303': attribute type 39 has an invalid length. [ 140.908285][ T6986] netlink: 8 bytes leftover after parsing attributes in process `syz.0.306'. [ 140.933502][ T6986] netlink: 4 bytes leftover after parsing attributes in process `syz.0.306'. [ 140.956983][ T6986] netlink: 'syz.0.306': attribute type 1 has an invalid length. [ 140.983226][ T6986] netlink: 10 bytes leftover after parsing attributes in process `syz.0.306'. [ 141.051737][ T5847] block nbd1: Receive control failed (result -107) [ 141.354719][ T6997] sit0: entered promiscuous mode [ 141.362998][ T6997] netlink: 'syz.0.311': attribute type 1 has an invalid length. [ 141.371866][ T6997] netlink: 1 bytes leftover after parsing attributes in process `syz.0.311'. [ 142.300578][ T7024] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 142.331821][ T7024] netlink: 12 bytes leftover after parsing attributes in process `syz.3.322'. [ 143.024866][ T7040] ieee802154 phy1 wpan1: encryption failed: -22 [ 143.445296][ T7047] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.454417][ T7047] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.919030][ T7047] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 143.995251][ T7047] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 144.145056][ T7047] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.178366][ T7047] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.187617][ T7047] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.197393][ T7047] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 144.290816][ T7047] bond1: left promiscuous mode [ 144.300939][ T7047] batadv1: left promiscuous mode [ 144.306259][ T7047] batadv1: left allmulticast mode [ 144.314981][ T7047] batadv2: left promiscuous mode [ 144.329716][ T7047] batadv2: left allmulticast mode [ 144.358132][ T7081] : renamed from bond_slave_1 (while UP) [ 144.590805][ T7092] macsec1: entered promiscuous mode [ 144.596214][ T7092] team0: entered promiscuous mode [ 144.602279][ T7092] team_slave_0: entered promiscuous mode [ 144.608781][ T7092] team_slave_1: entered promiscuous mode [ 144.614988][ T7092] macsec1: entered allmulticast mode [ 144.620468][ T7092] team0: entered allmulticast mode [ 144.625713][ T7092] team_slave_0: entered allmulticast mode [ 144.631777][ T7092] team_slave_1: entered allmulticast mode [ 144.779004][ T7095] sch_tbf: burst 4398 is lower than device lo mtu (11337746) ! [ 144.899510][ T7096] netlink: 16 bytes leftover after parsing attributes in process `syz.1.343'. [ 146.161307][ T7133] Bluetooth: MGMT ver 1.23 [ 146.179055][ T7133] netlink: 8 bytes leftover after parsing attributes in process `syz.1.354'. [ 146.189948][ T7133] netlink: 4 bytes leftover after parsing attributes in process `syz.1.354'. [ 146.199002][ T7133] netlink: 32 bytes leftover after parsing attributes in process `syz.1.354'. [ 146.211672][ T7135] Driver unsupported XDP return value 0 on prog (id 185) dev N/A, expect packet loss! [ 146.261385][ T5847] block nbd2: Receive control failed (result -107) [ 146.297333][ T7133] nbd2: detected capacity change from 0 to 256 [ 146.512444][ T7144] netlink: 8 bytes leftover after parsing attributes in process `syz.1.359'. [ 146.548705][ T7144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.359'. [ 146.557689][ T7144] netlink: 'syz.1.359': attribute type 1 has an invalid length. [ 146.566549][ T7144] netlink: 10 bytes leftover after parsing attributes in process `syz.1.359'. [ 146.621396][ T5847] block nbd3: Receive control failed (result -107) [ 146.839268][ T7152] SET target dimension over the limit! [ 146.875767][ T7152] netlink: 4 bytes leftover after parsing attributes in process `syz.2.362'. [ 146.889224][ T7155] netlink: 4 bytes leftover after parsing attributes in process `syz.1.361'. [ 146.910742][ T7155] ipvlan2: entered promiscuous mode [ 146.940170][ T7155] 8021q: adding VLAN 0 to HW filter on device ipvlan2 [ 146.948815][ T7155] bond0: (slave ipvlan2): enslaved VLAN challenged slave. Adding VLANs will be blocked as long as it is part of bond. [ 147.077447][ T7156] syzkaller1: entered promiscuous mode [ 147.086814][ T7156] syzkaller1: entered allmulticast mode [ 147.148586][ T7163] netlink: 4 bytes leftover after parsing attributes in process `syz.2.365'. [ 147.432897][ T7170] xt_NFQUEUE: number of queues (65532) out of range (got 66665) [ 147.516465][ T7167] syzkaller0: entered allmulticast mode [ 151.006042][ T7203] netlink: 'syz.0.381': attribute type 1 has an invalid length. [ 151.016505][ T7203] __nla_validate_parse: 2 callbacks suppressed [ 151.016525][ T7203] netlink: 104 bytes leftover after parsing attributes in process `syz.0.381'. [ 151.284907][ T12] netdevsim netdevsim2 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.471509][ T12] netdevsim netdevsim2 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.775202][ T12] netdevsim netdevsim2 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 151.792927][ T5841] Bluetooth: hci1: unexpected cc 0x0c03 length: 249 > 1 [ 151.803677][ T5841] Bluetooth: hci1: unexpected cc 0x1003 length: 249 > 9 [ 151.817092][ T5841] Bluetooth: hci1: unexpected cc 0x1001 length: 249 > 9 [ 151.834528][ T5841] Bluetooth: hci1: unexpected cc 0x0c23 length: 249 > 4 [ 151.847078][ T5841] Bluetooth: hci1: unexpected cc 0x0c25 length: 249 > 3 [ 151.854607][ T5841] Bluetooth: hci1: unexpected cc 0x0c38 length: 249 > 2 [ 151.973106][ T12] netdevsim netdevsim2 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.471909][ T7227] netlink: 168 bytes leftover after parsing attributes in process `syz.0.389'. [ 152.506958][ T7227] netlink: 'syz.0.389': attribute type 1 has an invalid length. [ 152.722480][ T7237] netlink: 4 bytes leftover after parsing attributes in process `syz.4.392'. [ 152.737956][ T7239] netlink: 44 bytes leftover after parsing attributes in process `syz.1.391'. [ 152.833476][ T7241] netlink: 28 bytes leftover after parsing attributes in process `syz.0.394'. [ 152.844036][ T7241] netlink: 28 bytes leftover after parsing attributes in process `syz.0.394'. [ 153.029106][ T5847] Bluetooth: hci4: command 0x0405 tx timeout [ 153.916929][ T5847] Bluetooth: hci1: command tx timeout [ 153.960156][ T7241] dummy0: entered promiscuous mode [ 153.981681][ T7241] dummy0: left promiscuous mode [ 154.102294][ T7244] workqueue: Failed to create a rescuer kthread for wq "bond1": -EINTR [ 154.115865][ T7217] chnl_net:caif_netlink_parms(): no params data found [ 154.221127][ T7256] vlan2: entered promiscuous mode [ 154.237038][ T7256] bond0: entered promiscuous mode [ 154.246151][ T7256] bond_slave_0: entered promiscuous mode [ 154.260778][ T7256] bond_slave_1: entered promiscuous mode [ 154.306059][ T7260] netlink: 4 bytes leftover after parsing attributes in process `syz.0.399'. [ 154.384538][ T7261] openvswitch: netlink: Missing valid actions attribute. [ 154.404705][ T7261] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 154.910734][ T7277] netlink: 'syz.3.401': attribute type 1 has an invalid length. [ 154.920653][ T7277] netlink: 'syz.3.401': attribute type 1 has an invalid length. [ 155.057738][ T7217] bridge0: port 1(bridge_slave_0) entered blocking state [ 155.071050][ T7217] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.097506][ T7217] bridge_slave_0: entered allmulticast mode [ 155.122353][ T7217] bridge_slave_0: entered promiscuous mode [ 155.319932][ T7217] bridge0: port 2(bridge_slave_1) entered blocking state [ 155.349835][ T7217] bridge0: port 2(bridge_slave_1) entered disabled state [ 155.367561][ T7068] IPVS: starting estimator thread 0... [ 155.374630][ T7283] IPVS: wrr: UDP 224.0.0.2:0 - no destination available [ 155.377278][ T30] audit: type=1800 audit(1742624489.252:2): pid=7277 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.3.401" name="memory.events" dev="tmpfs" ino=461 res=0 errno=0 [ 155.383914][ T7217] bridge_slave_1: entered allmulticast mode [ 155.432397][ T7217] bridge_slave_1: entered promiscuous mode [ 155.497089][ T7285] IPVS: using max 21 ests per chain, 50400 per kthread [ 155.601820][ T12] hsr_slave_0: left promiscuous mode [ 155.638001][ T12] hsr_slave_1: left promiscuous mode [ 155.699038][ T7287] xt_hashlimit: invalid rate [ 155.721725][ T12] veth1_macvtap: left promiscuous mode [ 155.740219][ T12] veth0_macvtap: left promiscuous mode [ 155.757802][ T12] veth1_vlan: left promiscuous mode [ 155.767225][ T12] veth0_vlan: left promiscuous mode [ 155.987033][ T5847] Bluetooth: hci1: command tx timeout [ 157.167920][ T7290] lo: entered allmulticast mode [ 157.192173][ T7290] lo: left allmulticast mode [ 157.208725][ T7289] vlan2: entered promiscuous mode [ 157.228302][ T7293] bond_slave_0: entered promiscuous mode [ 157.234418][ T7293] bond_slave_1: entered promiscuous mode [ 157.241056][ T7293] vlan3: entered promiscuous mode [ 157.246425][ T7293] bond0: entered promiscuous mode [ 157.315070][ T7217] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 157.340235][ T7217] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 157.520469][ T7217] team0: Port device team_slave_0 added [ 157.540528][ T7217] team0: Port device team_slave_1 added [ 157.555472][ T7307] netlink: 'syz.3.411': attribute type 3 has an invalid length. [ 157.597733][ T7307] netlink: 8 bytes leftover after parsing attributes in process `syz.3.411'. [ 157.662051][ T7217] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 157.677997][ T7217] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.715735][ T7217] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 157.865218][ T7217] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 157.890028][ T7217] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 157.943769][ T7217] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 158.011704][ T7318] tipc: Started in network mode [ 158.016660][ T7318] tipc: Node identity 7, cluster identity 4711 [ 158.027129][ T7318] tipc: Node number set to 7 [ 158.057122][ T7318] tipc: Cannot configure node identity twice [ 158.066975][ T5847] Bluetooth: hci1: command tx timeout [ 158.143540][ T7321] netlink: 28 bytes leftover after parsing attributes in process `syz.3.414'. [ 158.163325][ T7217] hsr_slave_0: entered promiscuous mode [ 158.184702][ T7217] hsr_slave_1: entered promiscuous mode [ 158.197783][ T7217] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 158.216813][ T7217] Cannot create hsr debugfs directory [ 158.229011][ T7321] team_slave_0: entered promiscuous mode [ 158.234835][ T7321] team_slave_1: entered promiscuous mode [ 158.408372][ T7321] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 158.417449][ T7321] team_slave_0: left promiscuous mode [ 158.423357][ T7321] team_slave_1: left promiscuous mode [ 158.484084][ T7327] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci1/hci1:200/input7 [ 158.956525][ T7332] netlink: 8 bytes leftover after parsing attributes in process `syz.3.418'. [ 159.008674][ T7332] netlink: 4 bytes leftover after parsing attributes in process `syz.3.418'. [ 159.038539][ T7332] netlink: 'syz.3.418': attribute type 1 has an invalid length. [ 159.046601][ T7332] netlink: 10 bytes leftover after parsing attributes in process `syz.3.418'. [ 159.128568][ T7332] nbd: socks must be embedded in a SOCK_ITEM attr [ 159.136345][ T7332] block nbd4: shutting down sockets [ 159.396221][ T7217] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 159.433795][ T7217] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 159.462603][ T7217] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 159.499236][ T7217] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 159.819892][ T7217] 8021q: adding VLAN 0 to HW filter on device bond0 [ 159.864090][ T7217] 8021q: adding VLAN 0 to HW filter on device team0 [ 159.903734][ T150] bridge0: port 1(bridge_slave_0) entered blocking state [ 159.910979][ T150] bridge0: port 1(bridge_slave_0) entered forwarding state [ 159.956539][ T150] bridge0: port 2(bridge_slave_1) entered blocking state [ 159.963859][ T150] bridge0: port 2(bridge_slave_1) entered forwarding state [ 160.147460][ T5847] Bluetooth: hci1: command tx timeout [ 160.187753][ T7354] netlink: 168 bytes leftover after parsing attributes in process `syz.3.424'. [ 160.454246][ T7217] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 160.515328][ T7362] syzkaller0: entered allmulticast mode [ 160.638190][ T7217] veth0_vlan: entered promiscuous mode [ 160.665100][ T7217] veth1_vlan: entered promiscuous mode [ 160.696628][ T7217] veth0_macvtap: entered promiscuous mode [ 160.749796][ T7217] veth1_macvtap: entered promiscuous mode [ 160.822577][ T7217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.876546][ T7217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.909291][ T7217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 160.932044][ T7217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 160.954074][ T7217] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 161.105358][ T7376] syzkaller0: entered promiscuous mode [ 161.122524][ T7376] syzkaller0: entered allmulticast mode [ 161.162641][ T7390] netlink: 4 bytes leftover after parsing attributes in process `syz.4.433'. [ 161.257829][ T7217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.286789][ T7217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.298144][ T7217] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 161.309052][ T7217] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 161.321642][ T7217] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 161.423508][ T7392] netlink: 'syz.1.434': attribute type 3 has an invalid length. [ 161.433365][ T7392] netlink: 8 bytes leftover after parsing attributes in process `syz.1.434'. [ 163.762446][ T7217] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.771866][ T7217] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.780816][ T7217] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.789970][ T7217] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 163.801899][ T7394] tipc: Enabling of bearer rejected, failed to enable media [ 164.029719][ T7403] IPVS: dh: UDP 224.0.0.2:0 - no destination available [ 164.039363][ T5843] IPVS: starting estimator thread 0... [ 164.131232][ T7407] IPVS: using max 23 ests per chain, 55200 per kthread [ 164.180424][ T7409] netlink: 'syz.1.440': attribute type 1 has an invalid length. [ 164.201973][ T7409] netlink: 184 bytes leftover after parsing attributes in process `syz.1.440'. [ 164.215668][ T7409] netlink: 'syz.1.440': attribute type 1 has an invalid length. [ 164.419082][ T7398] team0 (unregistering): left allmulticast mode [ 164.444295][ T7398] team_slave_0: left allmulticast mode [ 164.453645][ T7398] team_slave_1: left allmulticast mode [ 164.486093][ T7423] RDS: rds_bind could not find a transport for ::4000:0:20:0, load rds_tcp or rds_rdma? [ 164.529038][ T7423] netlink: 'syz.3.444': attribute type 8 has an invalid length. [ 164.537519][ T7398] team_slave_0: left promiscuous mode [ 164.569639][ T7398] team0 (unregistering): Port device team_slave_0 removed [ 164.578612][ T7398] team_slave_1: left promiscuous mode [ 164.589558][ T7398] team0 (unregistering): Port device team_slave_1 removed [ 164.638195][ T7417] sit0: left promiscuous mode [ 164.904139][ T6039] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.938013][ T6039] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 164.970969][ T6039] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 164.997318][ T6039] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 166.406469][ T5841] Bluetooth: hci1: command tx timeout [ 166.550203][ T7473] netlink: zone id is out of range [ 166.555418][ T7473] netlink: zone id is out of range [ 166.560681][ T7473] netlink: zone id is out of range [ 166.565839][ T7473] netlink: zone id is out of range [ 166.597097][ T7473] netlink: zone id is out of range [ 166.607027][ T7473] netlink: zone id is out of range [ 166.622837][ T7473] netlink: zone id is out of range [ 166.624831][ T7476] netlink: 16 bytes leftover after parsing attributes in process `syz.1.456'. [ 166.631272][ T7473] netlink: zone id is out of range [ 166.662797][ T7473] netlink: zone id is out of range [ 166.951001][ T7478] syzkaller0: entered promiscuous mode [ 166.957080][ T7478] syzkaller0: entered allmulticast mode [ 167.093225][ T7470] netlink: 'syz.0.455': attribute type 9 has an invalid length. [ 167.110687][ T7470] xt_SECMARK: invalid mode: 0 [ 167.371790][ T7491] netlink: 'syz.0.462': attribute type 39 has an invalid length. [ 170.024431][ T7514] netlink: 'syz.0.468': attribute type 1 has an invalid length. [ 170.748662][ T7539] netlink: 20 bytes leftover after parsing attributes in process `syz.3.475'. [ 172.795519][ T30] audit: type=1800 audit(1742624506.682:3): pid=7561 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed comm="syz.0.481" name="cgroup.controllers" dev="tmpfs" ino=564 res=0 errno=0 [ 173.392644][ T10] IPVS: starting estimator thread 0... [ 173.487035][ T7588] IPVS: using max 21 ests per chain, 50400 per kthread [ 174.285504][ T7605] netlink: 12 bytes leftover after parsing attributes in process `syz.4.494'. [ 174.307465][ T7605] tipc: Enabling of bearer rejected, media not registered [ 174.424457][ T7605] IPv6: NLM_F_CREATE should be specified when creating new route [ 175.467671][ T7620] syzkaller1: entered promiscuous mode [ 175.473233][ T7620] syzkaller1: entered allmulticast mode [ 175.555923][ T7625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.499'. [ 175.573727][ T7625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.499'. [ 175.592712][ T7625] netlink: 8 bytes leftover after parsing attributes in process `syz.1.499'. [ 175.624133][ T7627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.499'. [ 175.656010][ T7627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.499'. [ 175.800949][ T7629] smc: net device bond0 applied user defined pnetid SYZ0 [ 175.809818][ T7629] smc: net device bond0 erased user defined pnetid SYZ0 [ 176.430491][ T7635] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 176.444225][ T7635] xt_CHECKSUM: unsupported CHECKSUM operation 68 [ 177.506048][ T7658] xt_hashlimit: size too large, truncated to 1048576 [ 177.520966][ T7658] xt_hashlimit: max too large, truncated to 1048576 [ 178.253119][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.515'. [ 178.262356][ T7674] netlink: 8 bytes leftover after parsing attributes in process `syz.1.515'. [ 179.033049][ T7703] netlink: 20 bytes leftover after parsing attributes in process `syz.3.525'. [ 179.147941][ T7705] netlink: 168864 bytes leftover after parsing attributes in process `syz.3.526'. [ 179.185379][ T7705] net_ratelimit: 10 callbacks suppressed [ 179.185406][ T7705] openvswitch: netlink: Message has 44053 unknown bytes. [ 179.408315][ T7709] netlink: 12 bytes leftover after parsing attributes in process `syz.3.528'. [ 179.471120][ T7712] xt_nfacct: accounting object `syz1' does not exists [ 179.575066][ T7717] Bluetooth: MGMT ver 1.23 [ 179.669820][ T7720] netlink: 24 bytes leftover after parsing attributes in process `syz.3.531'. [ 179.715455][ T7720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.531'. [ 179.751464][ T7720] netlink: 12 bytes leftover after parsing attributes in process `syz.3.531'. [ 180.231967][ T7728] pimreg: entered allmulticast mode [ 180.263418][ T7728] 8021q: VLANs not supported on pimreg [ 180.627178][ T5149] Bluetooth: hci4: command 0x0405 tx timeout [ 180.990470][ T7740] netlink: 'syz.0.537': attribute type 1 has an invalid length. [ 180.999236][ T7740] netlink: 224 bytes leftover after parsing attributes in process `syz.0.537'. [ 182.045973][ T7753] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 182.832203][ T7769] batman_adv: batadv0: Adding interface: dummy0 [ 182.876880][ T7769] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 182.925914][ T7770] Cannot find del_set index 1 as target [ 182.944532][ T7769] batman_adv: batadv0: Interface activated: dummy0 [ 182.967619][ T7771] batadv0: mtu less than device minimum [ 183.009187][ T7771] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 183.021531][ T7771] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 183.034519][ T7771] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 183.047432][ T7771] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 183.060254][ T7771] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 183.073104][ T7771] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 183.085836][ T7771] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 183.098593][ T7771] batman_adv: batadv0: Forced to purge local tt entries to fit new maximum fragment MTU (-320) [ 183.771412][ T7787] netlink: 'syz.1.550': attribute type 39 has an invalid length. [ 184.948483][ T7797] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input8 [ 185.010041][ T7797] netlink: 'syz.3.552': attribute type 11 has an invalid length. [ 185.018192][ T7797] netlink: 60 bytes leftover after parsing attributes in process `syz.3.552'. [ 185.149927][ T7800] syzkaller1: entered promiscuous mode [ 185.156053][ T7800] syzkaller1: entered allmulticast mode [ 185.765903][ T7812] netlink: 'syz.1.557': attribute type 4 has an invalid length. [ 185.815100][ T7812] netlink: 'syz.1.557': attribute type 4 has an invalid length. [ 186.997459][ T7831] dummy0: entered promiscuous mode [ 187.003173][ T7831] vlan3: entered promiscuous mode [ 187.127956][ T7837] netlink: 4 bytes leftover after parsing attributes in process `syz.4.562'. [ 187.273069][ T7837] bridge_slave_1: left allmulticast mode [ 187.293798][ T7837] bridge_slave_1: left promiscuous mode [ 187.299915][ T7837] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.357557][ T7837] bridge_slave_0: left allmulticast mode [ 187.390086][ T7837] bridge_slave_0: left promiscuous mode [ 187.407971][ T7837] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.636915][ T7846] bridge_slave_0: left allmulticast mode [ 187.642742][ T7846] bridge_slave_0: left promiscuous mode [ 187.659296][ T7846] bridge0: port 1(bridge_slave_0) entered disabled state [ 187.701738][ T7846] bridge_slave_1: left allmulticast mode [ 187.717374][ T7846] bridge_slave_1: left promiscuous mode [ 187.739473][ T7846] bridge0: port 2(bridge_slave_1) entered disabled state [ 187.778317][ T7846] bond0: (slave bond_slave_0): Releasing backup interface [ 187.802534][ T7846] bond_slave_0: left promiscuous mode [ 187.857912][ T7846] bond0: (slave bond_slave_1): Releasing backup interface [ 187.868439][ T7846] bond_slave_1: left promiscuous mode [ 187.927977][ T7846] team0: Port device team_slave_0 removed [ 187.957987][ T7846] team0: Port device team_slave_1 removed [ 187.964777][ T7846] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 187.997031][ T7846] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 188.009716][ T7846] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 188.034493][ T7846] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 188.041301][ T7851] netlink: 'syz.4.569': attribute type 1 has an invalid length. [ 188.070937][ T7846] vlan2: left promiscuous mode [ 188.075780][ T7846] macsec0: left promiscuous mode [ 188.110141][ T7846] bridge0: port 3(vlan2) entered disabled state [ 188.235479][ T7851] bond3: entered promiscuous mode [ 188.248693][ T7851] 8021q: adding VLAN 0 to HW filter on device bond3 [ 188.284042][ T7852] bond3: (slave veth5): making interface the new active one [ 188.295323][ T7852] veth5: entered promiscuous mode [ 188.315154][ T7852] bond3: (slave veth5): Enslaving as an active interface with an up link [ 188.536438][ T7857] netlink: 24 bytes leftover after parsing attributes in process `syz.4.570'. [ 188.574390][ T7857] netlink: 8 bytes leftover after parsing attributes in process `syz.4.570'. [ 188.576582][ T7859] net_ratelimit: 11 callbacks suppressed [ 188.576604][ T7859] openvswitch: netlink: Actions may not be safe on all matching packets [ 188.732887][ T7861] tipc: Failed to remove unknown binding: 66,1,1/7:3260522831/3260522833 [ 188.744630][ T7861] tipc: Failed to remove unknown binding: 66,1,1/7:3260522831/3260522833 [ 188.778301][ T7861] tipc: Failed to remove unknown binding: 66,1,1/7:3260522831/3260522833 [ 188.895593][ T7863] xt_policy: neither incoming nor outgoing policy selected [ 189.712352][ T7886] netlink: 'syz.3.584': attribute type 10 has an invalid length. [ 189.744090][ T7886] 8021q: adding VLAN 0 to HW filter on device team0 [ 189.754392][ T7886] team0: entered promiscuous mode [ 189.767740][ T7886] bond0: (slave team0): Enslaving as an active interface with an up link [ 189.957352][ T7893] netlink: 28 bytes leftover after parsing attributes in process `syz.4.586'. [ 189.966325][ T7893] netlink: 28 bytes leftover after parsing attributes in process `syz.4.586'. [ 190.019219][ T7896] sctp: [Deprecated]: syz.3.587 (pid 7896) Use of struct sctp_assoc_value in delayed_ack socket option. [ 190.019219][ T7896] Use struct sctp_sack_info instead [ 191.099443][ T6036] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 191.127853][ T6036] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 191.652200][ T7929] macvlan0: entered promiscuous mode [ 191.689412][ T7929] bridge0: entered promiscuous mode [ 191.792164][ T7929] macvlan1: entered promiscuous mode [ 192.057710][ T7934] netlink: 8 bytes leftover after parsing attributes in process `syz.0.598'. [ 192.100007][ T7936] batman_adv: batadv0: Adding interface: dummy0 [ 192.106652][ T7936] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 192.157814][ T7936] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 192.244889][ T7939] netlink: 56 bytes leftover after parsing attributes in process `syz.1.600'. [ 192.359023][ T7943] workqueue: name exceeds WQ_NAME_LEN. Truncating to: !آDUDw}zR3p(@O> [ 192.438503][ T7951] xt_hashlimit: size too large, truncated to 1048576 [ 192.560493][ T7955] netlink: 8 bytes leftover after parsing attributes in process `syz.3.605'. [ 192.573013][ T7955] platform regulatory.0: Direct firmware load for regulatory.db failed with error -2 [ 192.586661][ T7955] platform regulatory.0: Falling back to sysfs fallback for: regulatory.db [ 193.092744][ T5841] Bluetooth: hci4: link tx timeout [ 193.099635][ T5841] Bluetooth: hci4: killing stalled connection 11:aa:aa:aa:aa:aa [ 193.157400][ T7968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.608'. [ 193.170826][ T7968] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 193.181392][ T7968] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 193.195036][ T7968] vlan0: entered allmulticast mode [ 193.200452][ T7968] dummy0: entered allmulticast mode [ 193.517128][ T7978] netlink: 4 bytes leftover after parsing attributes in process `syz.0.610'. [ 193.865718][ T7982] 8021q: adding VLAN 0 to HW filter on device bond1 [ 193.874586][ T7982] bond1: entered promiscuous mode [ 193.881599][ T7982] bond0: (slave bond1): Enslaving as an active interface with an up link [ 194.100665][ T7993] netlink: 4 bytes leftover after parsing attributes in process `syz.0.616'. [ 194.130303][ T7993] macvtap1: entered promiscuous mode [ 194.135702][ T7993] bond0: entered promiscuous mode [ 194.152012][ T7998] netlink: 4 bytes leftover after parsing attributes in process `syz.0.616'. [ 194.157194][ T7993] macvtap1: entered allmulticast mode [ 194.186846][ T7993] bond0: entered allmulticast mode [ 194.203008][ T7993] 8021q: adding VLAN 0 to HW filter on device macvtap1 [ 194.256548][ T7998] macvtap1: left promiscuous mode [ 194.273791][ T8002] netlink: 84 bytes leftover after parsing attributes in process `syz.1.614'. [ 194.286897][ T7998] bond0: left promiscuous mode [ 194.292052][ T7998] macvtap1: left allmulticast mode [ 194.311441][ T7998] bond0: left allmulticast mode [ 194.478498][ T8010] netlink: 4 bytes leftover after parsing attributes in process `syz.4.618'. [ 195.156886][ T8016] netlink: 'syz.0.619': attribute type 10 has an invalid length. [ 195.187175][ T5841] Bluetooth: hci4: command 0x0405 tx timeout [ 195.213887][ T8016] netlink: 40 bytes leftover after parsing attributes in process `syz.0.619'. [ 195.278305][ T8022] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input9 [ 196.178245][ T8046] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 196.689927][ T8053] sctp: [Deprecated]: syz.3.630 (pid 8053) Use of int in max_burst socket option. [ 196.689927][ T8053] Use struct sctp_assoc_value instead [ 197.321355][ T8071] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:24) already exists on: dummy0 [ 197.377019][ T8071] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 197.418667][ T8071] bridge0: port 3(vlan2) entered blocking state [ 197.425159][ T8071] bridge0: port 3(vlan2) entered disabled state [ 197.448309][ T8071] vlan2: entered allmulticast mode [ 197.471312][ T8071] dummy0: entered allmulticast mode [ 197.512326][ T8071] vlan2: entered promiscuous mode [ 197.535689][ T8071] dummy0: entered promiscuous mode [ 197.562859][ T8071] bridge0: port 3(vlan2) entered blocking state [ 197.569506][ T8071] bridge0: port 3(vlan2) entered forwarding state [ 197.848264][ T8084] team0: Device gtp0 is of different type [ 199.038068][ T8127] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input10 [ 199.153936][ T8132] __nla_validate_parse: 2 callbacks suppressed [ 199.153958][ T8132] netlink: 16 bytes leftover after parsing attributes in process `syz.3.644'. [ 199.548892][ T8095] tipc: Enabling of bearer rejected, failed to enable media [ 200.341365][ T8159] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input11 [ 200.669354][ T8165] syzkaller1: entered promiscuous mode [ 200.674947][ T8165] syzkaller1: entered allmulticast mode [ 200.942007][ T8179] netlink: 4 bytes leftover after parsing attributes in process `syz.0.655'. [ 201.032279][ T8179] bridge0 (unregistering): left promiscuous mode [ 201.140223][ T8187] netlink: 12 bytes leftover after parsing attributes in process `syz.4.659'. [ 201.484860][ T8193] : entered promiscuous mode [ 201.802142][ T8204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.664'. [ 201.844976][ T8208] netlink: 'syz.1.665': attribute type 4 has an invalid length. [ 201.907655][ T5839] Bluetooth: hci3: command 0x0406 tx timeout [ 201.909663][ T5149] Bluetooth: hci2: command 0x0406 tx timeout [ 201.917645][ T5838] Bluetooth: hci0: command 0x0406 tx timeout [ 202.135303][ T8215] tipc: Started in network mode [ 202.140525][ T8215] tipc: Node identity 7, cluster identity 4711 [ 202.150419][ T8216] netlink: 4 bytes leftover after parsing attributes in process `syz.0.666'. [ 202.164023][ T8215] tipc: Node number set to 7 [ 202.201891][ T8216] vlan0: entered allmulticast mode [ 202.232021][ T8216] hsr0: entered allmulticast mode [ 202.252356][ T8216] hsr_slave_0: entered allmulticast mode [ 202.282847][ T8216] hsr_slave_1: entered allmulticast mode [ 202.480746][ T8213] IPVS: Schedule: port zero only supported in persistent services, check your ipvs configuration [ 202.497354][ T8225] netlink: 4 bytes leftover after parsing attributes in process `syz.1.671'. [ 202.550212][ T8223] xt_CT: No such helper "pptp" [ 202.570413][ T8217] netlink: 'syz.0.666': attribute type 12 has an invalid length. [ 202.578532][ T8217] netlink: 132 bytes leftover after parsing attributes in process `syz.0.666'. [ 202.596352][ C1] vcan0: j1939_session_tx_dat: 0xffff88807e741400: queue data error: -100 [ 202.639068][ T8228] netlink: 4 bytes leftover after parsing attributes in process `syz.4.670'. [ 202.649072][ T8216] netlink: 'syz.0.666': attribute type 12 has an invalid length. [ 202.657455][ T8216] netlink: 132 bytes leftover after parsing attributes in process `syz.0.666'. [ 202.728190][ T8228] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 203.484119][ T8254] netlink: 4 bytes leftover after parsing attributes in process `syz.4.679'. [ 203.551187][ T8254] netlink: 'syz.4.679': attribute type 1 has an invalid length. [ 203.577709][ T8254] netlink: 'syz.4.679': attribute type 1 has an invalid length. [ 203.816554][ T8259] netlink: 'syz.3.681': attribute type 1 has an invalid length. [ 203.855635][ T8259] netlink: 'syz.3.681': attribute type 1 has an invalid length. [ 204.532773][ T8272] netlink: 'syz.3.686': attribute type 1 has an invalid length. [ 204.552217][ T8274] __nla_validate_parse: 1 callbacks suppressed [ 204.552239][ T8274] netlink: 28 bytes leftover after parsing attributes in process `syz.4.688'. [ 204.622310][ T8272] 8021q: adding VLAN 0 to HW filter on device bond2 [ 204.667270][ T8278] bond2: (slave ip6gretap1): making interface the new active one [ 204.676555][ T8278] bond2: (slave ip6gretap1): Enslaving as an active interface with an up link [ 204.693456][ T8280] netlink: 'syz.1.689': attribute type 4 has an invalid length. [ 204.781668][ T8272] vlan3: entered promiscuous mode [ 204.787408][ T8272] bond2: entered promiscuous mode [ 204.792813][ T8272] ip6gretap1: entered promiscuous mode [ 204.799131][ T8272] vlan3: entered allmulticast mode [ 204.804721][ T8272] bond2: entered allmulticast mode [ 204.810758][ T8272] ip6gretap1: entered allmulticast mode [ 204.832051][ T8280] netlink: 8 bytes leftover after parsing attributes in process `syz.1.689'. [ 204.966066][ T7084] ================================================================== [ 204.974597][ T7084] BUG: KASAN: slab-use-after-free in lock_release+0x151/0xa30 [ 204.982220][ T7084] Read of size 8 at addr ffff888011c2fb38 by task kworker/1:13/7084 [ 204.990237][ T7084] [ 204.992767][ T7084] CPU: 1 UID: 0 PID: 7084 Comm: kworker/1:13 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 204.992795][ T7084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 204.992809][ T7084] Workqueue: events l2cap_chan_timeout [ 204.992859][ T7084] Call Trace: [ 204.992866][ T7084] [ 204.992880][ T7084] dump_stack_lvl+0x241/0x360 [ 204.992908][ T7084] ? __pfx_dump_stack_lvl+0x10/0x10 [ 204.992938][ T7084] ? __pfx__printk+0x10/0x10 [ 204.992960][ T7084] ? _printk+0xd5/0x120 [ 204.992977][ T7084] ? __virt_addr_valid+0x183/0x530 [ 204.992999][ T7084] ? __virt_addr_valid+0x183/0x530 [ 204.993020][ T7084] print_report+0x16e/0x5b0 [ 204.993046][ T7084] ? __virt_addr_valid+0x183/0x530 [ 204.993066][ T7084] ? __virt_addr_valid+0x183/0x530 [ 204.993086][ T7084] ? __virt_addr_valid+0x45f/0x530 [ 204.993106][ T7084] ? __phys_addr+0xba/0x170 [ 204.993125][ T7084] ? lock_release+0x151/0xa30 [ 204.993156][ T7084] kasan_report+0x143/0x180 [ 204.993184][ T7084] ? lock_release+0x151/0xa30 [ 204.993216][ T7084] ? process_scheduled_works+0xabe/0x18e0 [ 204.993243][ T7084] lock_release+0x151/0xa30 [ 204.993278][ T7084] ? __pfx_lock_release+0x10/0x10 [ 204.993307][ T7084] ? mark_lock+0x9a/0x360 [ 204.993328][ T7084] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 204.993361][ T7084] ? process_scheduled_works+0xabe/0x18e0 [ 204.993390][ T7084] __mutex_unlock_slowpath+0xec/0x800 [ 204.993421][ T7084] ? kasan_quarantine_put+0xdc/0x230 [ 204.993444][ T7084] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 204.993472][ T7084] ? l2cap_chan_timeout+0x196/0x360 [ 204.993503][ T7084] ? l2cap_chan_timeout+0x196/0x360 [ 204.993534][ T7084] ? l2cap_chan_timeout+0x196/0x360 [ 204.993564][ T7084] ? process_scheduled_works+0x9c6/0x18e0 [ 204.993587][ T7084] process_scheduled_works+0xabe/0x18e0 [ 204.993626][ T7084] ? __pfx_process_scheduled_works+0x10/0x10 [ 204.993657][ T7084] ? assign_work+0x364/0x3d0 [ 204.993683][ T7084] worker_thread+0x870/0xd30 [ 204.993715][ T7084] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 204.993743][ T7084] ? __kthread_parkme+0x169/0x1d0 [ 204.993775][ T7084] ? __pfx_worker_thread+0x10/0x10 [ 204.993803][ T7084] kthread+0x7a9/0x920 [ 204.993821][ T7084] ? __pfx_kthread+0x10/0x10 [ 204.993841][ T7084] ? __pfx_worker_thread+0x10/0x10 [ 204.993869][ T7084] ? __pfx_kthread+0x10/0x10 [ 204.993896][ T7084] ? __pfx_kthread+0x10/0x10 [ 204.993916][ T7084] ? __pfx_kthread+0x10/0x10 [ 204.993932][ T7084] ? _raw_spin_unlock_irq+0x23/0x50 [ 204.993956][ T7084] ? lockdep_hardirqs_on+0x99/0x150 [ 204.993983][ T7084] ? __pfx_kthread+0x10/0x10 [ 204.994000][ T7084] ret_from_fork+0x4b/0x80 [ 204.994028][ T7084] ? __pfx_kthread+0x10/0x10 [ 204.994047][ T7084] ret_from_fork_asm+0x1a/0x30 [ 204.994082][ T7084] [ 204.994095][ T7084] [ 205.264010][ T7084] Allocated by task 5847: [ 205.268433][ T7084] kasan_save_track+0x3f/0x80 [ 205.273130][ T7084] __kasan_kmalloc+0x98/0xb0 [ 205.277775][ T7084] __kmalloc_cache_noprof+0x243/0x390 [ 205.283254][ T7084] l2cap_conn_add+0xa9/0x8e0 [ 205.287858][ T7084] l2cap_connect_cfm+0x136/0x1220 [ 205.292899][ T7084] hci_remote_features_evt+0x672/0xa20 [ 205.298369][ T7084] hci_event_packet+0xac1/0x1540 [ 205.303318][ T7084] hci_rx_work+0x3f3/0xdb0 [ 205.307756][ T7084] process_scheduled_works+0xabe/0x18e0 [ 205.313342][ T7084] worker_thread+0x870/0xd30 [ 205.317968][ T7084] kthread+0x7a9/0x920 [ 205.322137][ T7084] ret_from_fork+0x4b/0x80 [ 205.326592][ T7084] ret_from_fork_asm+0x1a/0x30 [ 205.331403][ T7084] [ 205.333730][ T7084] Freed by task 7217: [ 205.337714][ T7084] kasan_save_track+0x3f/0x80 [ 205.342407][ T7084] kasan_save_free_info+0x40/0x50 [ 205.347564][ T7084] __kasan_slab_free+0x59/0x70 [ 205.352447][ T7084] kfree+0x196/0x430 [ 205.356623][ T7084] hci_conn_hash_flush+0xff/0x240 [ 205.361692][ T7084] hci_dev_close_sync+0xa8b/0x1260 [ 205.367867][ T7084] hci_unregister_dev+0x20b/0x510 [ 205.373081][ T7084] vhci_release+0x80/0xd0 [ 205.377612][ T7084] __fput+0x3e9/0x9f0 [ 205.381895][ T7084] task_work_run+0x24f/0x310 [ 205.387386][ T7084] do_exit+0xa2a/0x2940 [ 205.391879][ T7084] do_group_exit+0x207/0x2c0 [ 205.397192][ T7084] __x64_sys_exit_group+0x3f/0x40 [ 205.403135][ T7084] x64_sys_call+0x26a8/0x26b0 [ 205.408106][ T7084] do_syscall_64+0xf3/0x230 [ 205.413264][ T7084] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 205.419547][ T7084] [ 205.421892][ T7084] Last potentially related work creation: [ 205.427648][ T7084] kasan_save_stack+0x3f/0x60 [ 205.432357][ T7084] kasan_record_aux_stack+0xaa/0xc0 [ 205.437608][ T7084] insert_work+0x3e/0x330 [ 205.442096][ T7084] __queue_work+0xd9a/0x1090 [ 205.446743][ T7084] call_timer_fn+0x187/0x650 [ 205.451605][ T7084] __run_timer_base+0x695/0x8e0 [ 205.456647][ T7084] run_timer_softirq+0xb7/0x170 [ 205.461524][ T7084] handle_softirqs+0x2d4/0x9b0 [ 205.466308][ T7084] do_softirq+0x11b/0x1e0 [ 205.470707][ T7084] __local_bh_enable_ip+0x1bb/0x200 [ 205.475961][ T7084] dev_mc_del+0xca/0x110 [ 205.480216][ T7084] __igmp_group_dropped+0x1b1/0x880 [ 205.485477][ T7084] ip_mc_down+0x101/0x340 [ 205.489830][ T7084] inetdev_event+0x2b6/0x1620 [ 205.494798][ T7084] notifier_call_chain+0x1a5/0x3f0 [ 205.500033][ T7084] dev_close_many+0x33c/0x4c0 [ 205.504917][ T7084] unregister_netdevice_many_notify+0x629/0x24f0 [ 205.511281][ T7084] default_device_exit_batch+0x7fd/0x880 [ 205.516936][ T7084] cleanup_net+0x8ad/0xd60 [ 205.521489][ T7084] process_scheduled_works+0xabe/0x18e0 [ 205.527164][ T7084] worker_thread+0x870/0xd30 [ 205.531774][ T7084] kthread+0x7a9/0x920 [ 205.535860][ T7084] ret_from_fork+0x4b/0x80 [ 205.540294][ T7084] ret_from_fork_asm+0x1a/0x30 [ 205.545103][ T7084] [ 205.547442][ T7084] Second to last potentially related work creation: [ 205.554057][ T7084] kasan_save_stack+0x3f/0x60 [ 205.558753][ T7084] kasan_record_aux_stack+0xaa/0xc0 [ 205.563971][ T7084] insert_work+0x3e/0x330 [ 205.568313][ T7084] __queue_work+0xc62/0x1090 [ 205.572921][ T7084] queue_work_on+0x1c2/0x380 [ 205.577613][ T7084] l2cap_connect_cfm+0xec2/0x1220 [ 205.582658][ T7084] hci_remote_features_evt+0x672/0xa20 [ 205.588132][ T7084] hci_event_packet+0xac1/0x1540 [ 205.593171][ T7084] hci_rx_work+0x3f3/0xdb0 [ 205.597777][ T7084] process_scheduled_works+0xabe/0x18e0 [ 205.603366][ T7084] worker_thread+0x870/0xd30 [ 205.608235][ T7084] kthread+0x7a9/0x920 [ 205.612315][ T7084] ret_from_fork+0x4b/0x80 [ 205.616754][ T7084] ret_from_fork_asm+0x1a/0x30 [ 205.621536][ T7084] [ 205.623863][ T7084] The buggy address belongs to the object at ffff888011c2f800 [ 205.623863][ T7084] which belongs to the cache kmalloc-1k of size 1024 [ 205.638012][ T7084] The buggy address is located 824 bytes inside of [ 205.638012][ T7084] freed 1024-byte region [ffff888011c2f800, ffff888011c2fc00) [ 205.652080][ T7084] [ 205.654439][ T7084] The buggy address belongs to the physical page: [ 205.660871][ T7084] page: refcount:0 mapcount:0 mapping:0000000000000000 index:0x0 pfn:0x11c28 [ 205.670088][ T7084] head: order:3 mapcount:0 entire_mapcount:0 nr_pages_mapped:0 pincount:0 [ 205.679738][ T7084] flags: 0xfff00000000040(head|node=0|zone=1|lastcpupid=0x7ff) [ 205.687430][ T7084] page_type: f5(slab) [ 205.691436][ T7084] raw: 00fff00000000040 ffff88801b041dc0 dead000000000100 dead000000000122 [ 205.700229][ T7084] raw: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 205.708839][ T7084] head: 00fff00000000040 ffff88801b041dc0 dead000000000100 dead000000000122 [ 205.717617][ T7084] head: 0000000000000000 0000000000100010 00000000f5000000 0000000000000000 [ 205.726298][ T7084] head: 00fff00000000003 ffffea0000470a01 ffffffffffffffff 0000000000000000 [ 205.735088][ T7084] head: 0000000000000008 0000000000000000 00000000ffffffff 0000000000000000 [ 205.743856][ T7084] page dumped because: kasan: bad access detected [ 205.750304][ T7084] page_owner tracks the page as allocated [ 205.756034][ T7084] page last allocated via order 3, migratetype Unmovable, gfp_mask 0x52820(GFP_ATOMIC|__GFP_NOWARN|__GFP_NORETRY|__GFP_COMP), pid 17, tgid 17 (ksoftirqd/0), ts 129053951424, free_ts 126894841917 [ 205.775598][ T7084] post_alloc_hook+0x1f4/0x240 [ 205.780394][ T7084] get_page_from_freelist+0x365c/0x37a0 [ 205.785957][ T7084] __alloc_frozen_pages_noprof+0x292/0x710 [ 205.791864][ T7084] alloc_pages_mpol+0x311/0x660 [ 205.796751][ T7084] allocate_slab+0x8f/0x3a0 [ 205.801371][ T7084] ___slab_alloc+0xc27/0x14a0 [ 205.806157][ T7084] __slab_alloc+0x58/0xa0 [ 205.810593][ T7084] __kmalloc_noprof+0x2e6/0x4c0 [ 205.815462][ T7084] ieee802_11_parse_elems_full+0x166/0x2ef0 [ 205.821462][ T7084] ieee80211_inform_bss+0x15f/0x10d0 [ 205.826770][ T7084] cfg80211_inform_single_bss_data+0xf5d/0x1ed0 [ 205.833125][ T7084] cfg80211_inform_bss_data+0x3c3/0x5820 [ 205.838775][ T7084] cfg80211_inform_bss_frame_data+0x3bb/0x720 [ 205.844873][ T7084] ieee80211_bss_info_update+0x8a7/0xbc0 [ 205.850552][ T7084] ieee80211_scan_rx+0x526/0x9c0 [ 205.855501][ T7084] ieee80211_rx_list+0x28c6/0x3480 [ 205.860720][ T7084] page last free pid 5886 tgid 5886 stack trace: [ 205.867148][ T7084] free_frozen_pages+0xe0d/0x10e0 [ 205.872188][ T7084] __put_partials+0x160/0x1c0 [ 205.876871][ T7084] put_cpu_partial+0x17c/0x250 [ 205.881694][ T7084] __slab_free+0x290/0x380 [ 205.886122][ T7084] qlist_free_all+0x9a/0x140 [ 205.890982][ T7084] kasan_quarantine_reduce+0x14f/0x170 [ 205.896468][ T7084] __kasan_slab_alloc+0x23/0x80 [ 205.901329][ T7084] __kmalloc_cache_noprof+0x1d9/0x390 [ 205.906746][ T7084] nsim_fib_event_work+0x17d3/0x3f00 [ 205.912110][ T7084] process_scheduled_works+0xabe/0x18e0 [ 205.917759][ T7084] worker_thread+0x870/0xd30 [ 205.922380][ T7084] kthread+0x7a9/0x920 [ 205.926491][ T7084] ret_from_fork+0x4b/0x80 [ 205.930936][ T7084] ret_from_fork_asm+0x1a/0x30 [ 205.935714][ T7084] [ 205.938077][ T7084] Memory state around the buggy address: [ 205.943738][ T7084] ffff888011c2fa00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 205.951957][ T7084] ffff888011c2fa80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 205.960339][ T7084] >ffff888011c2fb00: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 205.968412][ T7084] ^ [ 205.974336][ T7084] ffff888011c2fb80: fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb fb [ 205.982425][ T7084] ffff888011c2fc00: fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc fc [ 205.990526][ T7084] ================================================================== [ 206.022024][ T8287] RDS: rds_bind could not find a transport for fc00::1, load rds_tcp or rds_rdma? [ 206.040646][ T7084] Kernel panic - not syncing: KASAN: panic_on_warn set ... [ 206.047921][ T7084] CPU: 1 UID: 0 PID: 7084 Comm: kworker/1:13 Not tainted 6.14.0-rc7-syzkaller-01431-gbfc17c165835 #0 [ 206.058818][ T7084] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 02/12/2025 [ 206.068925][ T7084] Workqueue: events l2cap_chan_timeout [ 206.074469][ T7084] Call Trace: [ 206.077777][ T7084] [ 206.080737][ T7084] dump_stack_lvl+0x241/0x360 [ 206.085462][ T7084] ? __pfx_dump_stack_lvl+0x10/0x10 [ 206.090694][ T7084] ? __pfx__printk+0x10/0x10 [ 206.095302][ T7084] ? preempt_schedule+0xe1/0xf0 [ 206.100197][ T7084] ? vscnprintf+0x5d/0x90 [ 206.104545][ T7084] panic+0x349/0x880 [ 206.108543][ T7084] ? check_panic_on_warn+0x21/0xb0 [ 206.113845][ T7084] ? __pfx_panic+0x10/0x10 [ 206.118295][ T7084] ? _raw_spin_unlock_irqrestore+0x130/0x140 [ 206.124475][ T7084] ? __pfx__raw_spin_unlock_irqrestore+0x10/0x10 [ 206.130862][ T7084] ? print_report+0x519/0x5b0 [ 206.135570][ T7084] check_panic_on_warn+0x86/0xb0 [ 206.140541][ T7084] ? lock_release+0x151/0xa30 [ 206.145240][ T7084] end_report+0x77/0x160 [ 206.149502][ T7084] kasan_report+0x154/0x180 [ 206.154024][ T7084] ? lock_release+0x151/0xa30 [ 206.158721][ T7084] ? process_scheduled_works+0xabe/0x18e0 [ 206.164472][ T7084] lock_release+0x151/0xa30 [ 206.169025][ T7084] ? __pfx_lock_release+0x10/0x10 [ 206.174071][ T7084] ? mark_lock+0x9a/0x360 [ 206.179232][ T7084] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 206.185502][ T7084] ? process_scheduled_works+0xabe/0x18e0 [ 206.191336][ T7084] __mutex_unlock_slowpath+0xec/0x800 [ 206.197777][ T7084] ? kasan_quarantine_put+0xdc/0x230 [ 206.203094][ T7084] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 206.209105][ T7084] ? l2cap_chan_timeout+0x196/0x360 [ 206.214329][ T7084] ? l2cap_chan_timeout+0x196/0x360 [ 206.219560][ T7084] ? l2cap_chan_timeout+0x196/0x360 [ 206.224779][ T7084] ? process_scheduled_works+0x9c6/0x18e0 [ 206.230559][ T7084] process_scheduled_works+0xabe/0x18e0 [ 206.236258][ T7084] ? __pfx_process_scheduled_works+0x10/0x10 [ 206.243245][ T7084] ? assign_work+0x364/0x3d0 [ 206.247905][ T7084] worker_thread+0x870/0xd30 [ 206.252684][ T7084] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 206.258611][ T7084] ? __kthread_parkme+0x169/0x1d0 [ 206.263664][ T7084] ? __pfx_worker_thread+0x10/0x10 [ 206.268814][ T7084] kthread+0x7a9/0x920 [ 206.272999][ T7084] ? __pfx_kthread+0x10/0x10 [ 206.277913][ T7084] ? __pfx_worker_thread+0x10/0x10 [ 206.283059][ T7084] ? __pfx_kthread+0x10/0x10 [ 206.287668][ T7084] ? __pfx_kthread+0x10/0x10 [ 206.292445][ T7084] ? __pfx_kthread+0x10/0x10 [ 206.297217][ T7084] ? _raw_spin_unlock_irq+0x23/0x50 [ 206.302447][ T7084] ? lockdep_hardirqs_on+0x99/0x150 [ 206.307842][ T7084] ? __pfx_kthread+0x10/0x10 [ 206.312447][ T7084] ret_from_fork+0x4b/0x80 [ 206.317167][ T7084] ? __pfx_kthread+0x10/0x10 [ 206.321775][ T7084] ret_from_fork_asm+0x1a/0x30 [ 206.326655][ T7084] [ 206.329977][ T7084] Kernel Offset: disabled [ 206.334407][ T7084] Rebooting in 86400 seconds..