last executing test programs: 2m19.055643456s ago: executing program 3 (id=2249): bind$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @default}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) close(0xffffffffffffffff) 2m6.693778706s ago: executing program 3 (id=2249): bind$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @default}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) close(0xffffffffffffffff) 1m56.217504554s ago: executing program 3 (id=2249): bind$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @default}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) close(0xffffffffffffffff) 1m32.76871044s ago: executing program 3 (id=2249): bind$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @default}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) close(0xffffffffffffffff) 1m14.471457759s ago: executing program 3 (id=2249): bind$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @default}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) close(0xffffffffffffffff) 1m11.545620285s ago: executing program 2 (id=3759): r0 = socket(0x10, 0x3, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x3000001, 0x8031, 0xffffffffffffffff, 0x0) bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000180)={0x0, 0x0, 0x0, 0x0, 0x1, 0x9, 0x0, @void, @value}, 0x28) r1 = socket$inet_tcp(0x2, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) r3 = socket(0x10, 0x3, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) r5 = socket(0x10, 0x803, 0x2) syz_genetlink_get_family_id$mptcp(&(0x7f00000000c0), r5) getsockname$packet(r5, &(0x7f0000000100)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000003c0)=0x14) sendmsg$nl_route(r4, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="3c0000001000010400eeffff11ffffffff000000", @ANYRES32=r6, @ANYBLOB="01000000010000001c0012000c000100627269646765"], 0x3c}}, 0x0) sendmsg$nl_route_sched(r3, &(0x7f0000005840)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000200)=@newqdisc={0x48, 0x24, 0x5820a61ca228651, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_htb={{0x8}, {0x1c, 0x2, [@TCA_HTB_INIT={0x18, 0x2, {0x3, 0xfffffffe, 0x8}}]}}]}, 0x48}}, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000005880)=@newtfilter={0xe88, 0x28, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r6, {}, {}, {0xfff1, 0x3d}}, [@filter_kind_options=@f_cgroup={{0xb}, {0xe58, 0x2, [@TCA_CGROUP_ACT={0xe54, 0x1, [@m_pedit={0xe50, 0x1f, 0x0, 0x0, {{0xa}, {0xe24, 0x2, 0x0, 0x1, [@TCA_PEDIT_PARMS={0xe20, 0x2, {{{0x2, 0x1, 0x4, 0x28, 0x5}, 0x3, 0x6}, [{0x1, 0x2, 0x2, 0x8, 0xe8, 0x1297}, {0xb, 0x200, 0x3, 0xfffffffd, 0x2ff, 0x8}, {0x9, 0x8, 0x5, 0x5fc, 0xfff, 0x54}, {0x0, 0xf294, 0xfffffff8, 0x9, 0x7, 0xe8}, {0x7, 0x7, 0x6, 0x5, 0x7f, 0x600}, {0x9, 0x1, 0x1, 0x1ff, 0x7fff, 0x1}, {0x3, 0x5, 0x5, 0x5, 0x5, 0x9}, {0x8001, 0x9, 0x19, 0x4000, 0x5, 0x6}, {0x5, 0x7, 0x40, 0xae, 0x9, 0x6}, {0x4, 0x93, 0x1, 0xffff, 0x9, 0x100}, {0x0, 0x9fc, 0x2, 0x5, 0x5, 0x7fffffff}, {0x6, 0x9, 0x9, 0xfffffff4, 0x8, 0x2}, {0x7ff, 0xc070, 0x9, 0x1dc0, 0xffff, 0x2}, {0x5, 0x88a, 0x65b4708e, 0xd31, 0x31a, 0x3}, {0x5870, 0x7, 0xffff, 0x7, 0xffffffff, 0x2000}, {0x6a, 0x8, 0x2, 0x2, 0x4, 0x418}, {0x9, 0x6, 0x6, 0x7, 0x4, 0xffff}, {0x8, 0x0, 0x7, 0x40000, 0x3ea, 0x200}, {0x8001, 0x9, 0x2, 0x7fff, 0xaeab, 0x3}, {0xfff, 0x100, 0x7, 0xfffffffe, 0x6, 0x4}, {0x1, 0x3, 0x7ff, 0x6, 0x4, 0x77e}, {0x53, 0xfe5b1bba, 0x5, 0x15, 0x5, 0xf3}, {0x4, 0x5, 0x5, 0xb6e, 0x2, 0xc}, {0xfffffff4, 0x8, 0xe8, 0x0, 0x80, 0xcf}, {0x10000, 0x0, 0x8000, 0x6, 0x72, 0x8000}, {0x2, 0xa1, 0x6, 0x80000000, 0x4, 0x1}, {0xbc, 0x5, 0x9, 0x1680000, 0x10001, 0x4}, {0x8, 0xfffffffd, 0x7, 0x80000001, 0x7, 0x3}, {0xaf, 0x3, 0xfa2e, 0x14c5, 0x4, 0x2c181e06}, {0x2, 0x5, 0x8, 0x5, 0x5, 0x7}, {0x6, 0xa626, 0x1, 0xffff, 0xfffffffb, 0xea}, {0x2, 0x3, 0x9, 0xf5, 0x4, 0xc}, {0x6, 0x2, 0x9, 0x6, 0xfffffff8, 0x7}, {0x2, 0x0, 0x7, 0x3, 0x81, 0x3}, {0x1, 0x2, 0x7, 0x0, 0x9, 0x401}, {0x200, 0x9, 0x1, 0xffffffff, 0x0, 0x5}, {0x9, 0x0, 0x3, 0x5, 0x3, 0xb0}, {0x7, 0x3f, 0x6000000, 0x8, 0xe24, 0xffffffff}, {0x4, 0x5, 0xc724, 0x5, 0x4, 0x800}, {0xdce5, 0x5, 0xfffffffd, 0x7f, 0x5, 0xffff}, {0xfffffffc, 0x4, 0x4, 0x9, 0x2, 0x6}, {0xffffff7f, 0x7171, 0x2, 0x2, 0x8, 0x4}, {0x1, 0x800, 0x3, 0x8, 0x9, 0x2}, {0x7fffffff, 0xe7b7, 0x7fffffff, 0x7b4f, 0xf22, 0x12f8}, {0x7, 0x2, 0xfffffe01, 0x9, 0x3, 0x6}, {0x1000, 0xc0, 0x9, 0x7f1, 0x8001, 0xc04}, {0x3, 0x401, 0xf971, 0x1, 0x9, 0xd2fb}, {0x6, 0xffff, 0x25, 0x2, 0x80000001, 0x5}, {0x1, 0x7ff, 0x1, 0x80000001, 0x8, 0x3}, {0x200, 0x8, 0x7, 0x1, 0x1, 0x3}, {0x813d, 0x4, 0x100, 0x8, 0x7fffffff, 0x8}, {0x8, 0x9, 0xfffffeff, 0x101, 0x3, 0x9}, {0x0, 0xfff, 0x5, 0x1, 0x5, 0x2}, {0x7fff, 0x9, 0x1, 0xc6a, 0x2, 0xbb53}, {0xe, 0x2, 0x725, 0x0, 0x7fff, 0x5}, {0x81, 0x8, 0x7, 0x5, 0x4, 0x34000000}, {0x1, 0xad61, 0x3, 0x6, 0x7ff, 0x7}, {0x7fff, 0x1, 0x7, 0x5, 0x27a1, 0x3}, {0x5, 0xf, 0x6, 0x12, 0x1, 0x3}, {0x7, 0x7fffffff, 0x311e, 0x5be, 0x8, 0x5}, {0x5, 0x4, 0x8, 0xfff, 0x2, 0x10001}, {0x9, 0x401, 0x7, 0xeae, 0xfffffffa, 0x200}, {0x7, 0x4, 0xffff, 0x7, 0xf96, 0x2}, {0x5, 0xe, 0x401, 0x4, 0x6}, {0x1, 0x4, 0x9, 0xdfb3, 0x80000001, 0x7}, {0x7ff, 0x3, 0x1440, 0x0, 0x5, 0x9}, {0xfb, 0x80000001, 0x5, 0x5395, 0x5, 0x5d2}, {0x7, 0x2, 0x3d0b, 0x5, 0xac, 0x12e}, {0x2, 0xfe46, 0x1800, 0xac17, 0x7, 0xf663}, {0x4, 0xc4a3, 0x2cf, 0x9, 0x1, 0x4}, {0x80000001, 0x0, 0x7, 0x3, 0x6, 0xa}, {0x9, 0x5, 0x3, 0x9, 0x2, 0xa9}, {0x0, 0x9, 0x4, 0x60b8, 0x80}, {0x9, 0x9d4, 0x5, 0x0, 0x1, 0x883}, {0x3871, 0x10000, 0x6, 0x5e4, 0xd2c, 0x80000001}, {0x0, 0xb, 0x100, 0x9, 0xcc9, 0x3ff}, {0x8001, 0x39bd, 0x0, 0x94ac, 0x800, 0xf58}, {0xc5bb, 0x0, 0x2, 0x1ff, 0x3, 0x7}, {0x4, 0x23, 0x10000, 0x5, 0x9, 0x6}, {0x5, 0x3, 0x69, 0x7, 0x9, 0x2ae}, {0x8, 0x5b, 0x8, 0x5, 0x80, 0x43869bda}, {0x2, 0x5, 0x8, 0x796a, 0x6, 0x8001}, {0x5e1, 0x4fee, 0x2, 0x10000, 0x8, 0x7}, {0x6, 0x86d, 0x1, 0x0, 0x9653, 0xffff}, {0x3, 0x276d, 0xff8a, 0x6, 0x9, 0xad9}, {0x400, 0x5, 0xfffffff9, 0x4, 0xc55, 0x40}, {0x6, 0x2, 0x100, 0x0, 0x7, 0x9}, {0x5, 0x88, 0x8, 0x1, 0x4, 0xce0d}, {0x22, 0x6, 0x0, 0x6636, 0xffffffd3, 0x9}, {0x0, 0xd, 0x8, 0x10001, 0xffff8001, 0x2c}, {0x3a1, 0x81, 0x203, 0xe5f7, 0x7, 0x3}, {0x10000, 0xffffffff, 0x9, 0x6, 0x40, 0x9}, {0x3, 0x2, 0x9, 0x8000, 0x5, 0xffff}, {0x8, 0x4, 0x4, 0x81, 0x7, 0x7fffffff}, {0xffff65cb, 0x10, 0x7, 0x8, 0xfffffffb, 0x5}, {0x3, 0x3, 0x2, 0x8, 0x9, 0x3}, {0xe, 0x7f, 0x9, 0x4, 0x7e, 0x3ff}, {0x7, 0xfffffffa, 0x3, 0x6, 0xff, 0x27}, {0x9, 0x5, 0x8, 0x8, 0x2, 0x1}, {0x1, 0x1, 0x4, 0x8, 0x80000001, 0x7}, {0x10000, 0x10001, 0x8, 0x9, 0x7, 0x8}, {0x2, 0x5, 0x7fff, 0x9, 0x5, 0x170}, {0x1, 0x9cb6, 0x9, 0x1ff, 0x0, 0x3}, {0x0, 0xfffffff9, 0x4, 0xed87, 0xf5, 0x4}, {0x6, 0x0, 0x7f, 0x4, 0x80000000}, {0x3, 0x8001, 0x4, 0x5, 0x2, 0x9}, {0x5, 0xdd42, 0x7, 0x3, 0x3}, {0x6, 0x1, 0x1, 0xfca7, 0x7, 0xffffff81}, {0x0, 0x0, 0x2, 0x60000000, 0x180000, 0x8}, {0x0, 0x0, 0x5, 0x0, 0x1, 0x7}, {0x7, 0x140a, 0x7859, 0x6, 0x100, 0x8}, {0x3ff, 0x9, 0x4, 0x2, 0x6, 0x200}, {0x1ff, 0x6, 0x3, 0x5, 0x1, 0xf}, {0x8, 0x10001, 0x2, 0x2, 0x2ee, 0x50a2}, {0x7, 0x7, 0x7f, 0x4f5e, 0xc0fa, 0x5}, {0x0, 0x96, 0x1000, 0x594b16ac, 0x5, 0x5}, {0x8, 0x8a, 0x7, 0x1c0, 0x0, 0x800}, {0x4, 0x42b3, 0x80000000, 0x8, 0xdc2, 0xfffffff7}, {0x8001, 0x3, 0x1, 0x9, 0x8d0b, 0x3f7}, {0x6, 0xf0, 0x5ada3d2f, 0x4, 0x9, 0x1}, {0xfa0, 0x9, 0x0, 0x1, 0x3, 0x3}, {0x8, 0xffff, 0xfffffff8, 0x5, 0x2849fdbd, 0x9}, {0x911, 0x3, 0x9417, 0x5, 0x2, 0x2c28}, {0x10000, 0xb0, 0x5, 0x1, 0x5, 0x2}, {0x4351, 0x0, 0x1ff, 0xfffffff6, 0x9, 0xc91e}, {0x70, 0x2, 0x8, 0x2, 0x6c, 0x1}, {0x7fff, 0x7fff, 0x7, 0x80000000, 0x5, 0xef}, {0x9, 0xfffffffa, 0x8000, 0x29f0, 0x7, 0x3}], [{0x5, 0x1}, {0x5, 0x1}, {0x5}, {0x2}, {0x2, 0x1}, {0x3}, {0x3}, {0x2, 0x1}, {0x3, 0x1}, {0x6}, {0x0, 0x1}, {0x5}, {}, {0x2, 0x1}, {0x1, 0x1}, {}, {0x0, 0x1}, {0x4, 0x1}, {0x3, 0x1}, {0x5}, {0x1, 0x1}, {0x5}, {0x2, 0x1}, {0x5}, {0x3, 0x1}, {0xc275566a119854ac}, {0x1}, {0x3, 0x1}, {}, {0x5, 0x2}, {0x0, 0x1}, {0x2, 0x1}, {0x0, 0x1}, {0x5}, {0x3}, {0x2, 0x1}, {0x5, 0x1}, {0x4}, {0x0, 0x1}, {0x1, 0x1}, {0x4}, {}, {0x8}, {0x1, 0x1}, {0x2}, {}, {0x3, 0x1}, {0x5}, {0x4}, {0x5, 0x1}, {0x5, 0x1}, {0x2}, {0x6}, {0x2, 0x1}, {0x5, 0x1}, {0x5, 0x2}, {0x1}, {0x2, 0x1}, {0x4, 0x1}, {0x5, 0x1}, {0x2}, {0x1, 0x1}, {0x2, 0x1}, {0x1}, {0x5}, {0x2}, {0x5, 0x1}, {0x0, 0x1}, {0x0, 0x1}, {0x5}, {0x1}, {0x1}, {0x5}, {0x4}, {0x1}, {0x2}, {}, {0x5, 0x1}, {0x3}, {0x0, 0x1}, {0x4}, {0x2551858b62382b61, 0x1}, {0x5, 0x1}, {0x3}, {0x5, 0x1}, {0x1}, {0x2}, {0x4, 0x1}, {}, {0x1}, {0x3}, {0x2}, {0x3}, {0x1, 0x1}, {0x1}, {0x4}, {0x1}, {0x5, 0x1}, {0x0, 0x1}, {0x4, 0xdf006e4f372ef84a}, {0x4, 0x1}, {0x25d3a02247530a10}, {0x5}, {0x7514c42a4ef2c982, 0x1}, {0x0, 0x1}, {}, {0x0, 0x1}, {0x1, 0x1}, {0x5}, {0x4, 0x1}, {0x1, 0x1}, {0x2}, {0x7}, {0x0, 0x1}, {0x3}, {0x3}, {0x5, 0x1}, {0x1}, {0x4}, {}, {0x0, 0x1}, {0x2}, {0x3}, {0x2, 0x1}, {0x4}, {0x4}, {0x3}, {0x4, 0x1}], 0x1}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x1}}}}]}]}}]}, 0xe88}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x48, 0x24, 0xd0f, 0x0, 0x0, {0x60, 0x0, 0x0, r2, {0x0, 0xc}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0x8}}}]}, 0x48}}, 0x0) sendmsg$IPSET_CMD_SWAP(r0, &(0x7f00000000c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x800000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x1c, 0x6, 0x6, 0x801, 0x0, 0x0, {0x3, 0x0, 0x8}, [@IPSET_ATTR_PROTOCOL={0x5}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008000}, 0x4001) socket$netlink(0x10, 0x3, 0x10) 1m10.404687487s ago: executing program 2 (id=3766): syz_emit_ethernet(0x1fe, &(0x7f0000000300)={@multicast, @remote, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "000210", 0x1c8, 0x3a, 0x0, @remote, @mcast2, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "8bb91d", 0x0, 0x11, 0x0, @local, @empty, [@fragment={0x87, 0x0, 0x5, 0x1, 0x0, 0x3, 0x68}, @hopopts={0x0, 0x30, '\x00', [@ra, @padn={0x1, 0x6, [0x0, 0x0, 0x0, 0x0, 0x0, 0x0]}, @generic={0x0, 0x9d, "a17e9ab13f6e142b20582c8d220c698a74dbf13dfc0ad1f526dfc43313759300929090dd4792ce67ea9f8769d3246f94412c56e0247939ed4b318e4b6066b72d91d9aff97fcf30977dfd4028dea535a8e9d1682c4794d255d62089716f2f97577f9bef264da3cfd3e5511fb253122f61808a73cc2e760f93ceb68a0db2613cf0956b23235f057c2f980a19266a6bb4a33a17f550a571c5b4211c6fa371"}, @ra, @generic={0x0, 0x8c, "65fd1a52737fa1ec91495f4d25a766a5dd36bcffb376f4b35d4a5bc51b0f8fb9a273282a9c8ef192a4de26c8732765dbeb6ce083e81cebf0612d1cc7956b78fb34ce0e4a867c8b4094bab04b23680ba97ad5c624055e8504a7a121cf38a402a7aa80e05dbe56fecab8b014420231c0e997cbfda9bdc7f29e3a8b13dcfc396cf6ff1fcd8a7f43a107871fdd7e"}, @generic={0x0, 0x33, "8b168e4b48529453d91cea424030c8b200632af95e7c30322241dd567db14507f8b523b418a0edc41397a2f639f9f6c3b379fe"}, @pad1, @calipso={0x7, 0x10, {0x0, 0x2, 0xc, 0x0, [0x80000000]}}]}]}}}}}}}, 0x0) r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000600)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x10012, r0, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000580)=@newtaction={0x94, 0x30, 0x1, 0x0, 0x0, {}, [{0x80, 0x1, [@m_ct={0x2c, 0x2, 0x0, 0x0, {{0x7}, {0x4}, {0x4, 0x2}, {0xc}, {0xc}}}, @m_tunnel_key={0x50, 0x1, 0x0, 0x0, {{0xf}, {0x20, 0x2, 0x0, 0x1, [@TCA_TUNNEL_KEY_PARMS={0x1c, 0x2, {{}, 0x2}}]}, {0x4}, {0xc, 0x7, {0x1, 0x1}}, {0xc}}}]}]}, 0x94}}, 0x0) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{0xffffffffffffffff, 0xffffffffffffffff}, &(0x7f0000000000), &(0x7f0000000040)}, 0x20) r3 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x2, 0x4, 0x5, 0x2, 0x1000, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000002c0)={r3, &(0x7f00000001c0)="7e9c41dd3d", &(0x7f0000000240)}, 0x20) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f00000007c0)={0xffffffffffffffff, 0xe0, &(0x7f00000006c0)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x5, &(0x7f0000000500)=[0x0, 0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x7, 0x1, &(0x7f0000000540)=[0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000580)=[0x0], 0x0, 0x77, &(0x7f00000005c0)=[{}, {}, {}, {}, {}, {}], 0x30, 0x10, &(0x7f0000000600), &(0x7f0000000640), 0x8, 0x12, 0x8, 0x8, &(0x7f0000000680)}}, 0x10) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) setsockopt$RXRPC_SECURITY_KEY(r5, 0x110, 0x1, &(0x7f0000000a40)='+\x1d)#\xd4-.,\\$:-\\*,}\\\'\x00', 0x13) r6 = bpf$MAP_CREATE(0x0, &(0x7f00000004c0)=ANY=[@ANYBLOB="0200000004000000040000000800000000000000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/27], 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f0000000040)=@base={0xd, 0x4, 0x4, 0x9, 0x0, r6, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0xd, &(0x7f0000000280)=ANY=[@ANYBLOB="18000000000000000000000000000000850000002a00000018110000", @ANYRES32=r7, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000000100000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) r8 = openat$cgroup_ro(0xffffffffffffffff, &(0x7f0000000840)='memory.stat\x00', 0x0, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000980)={0x6, 0x1b, &(0x7f00000000c0)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x3, 0x0, 0x0, 0x0, 0x2}, {{0x18, 0x1, 0x1, 0x0, r0}}, {}, [@call={0x85, 0x0, 0x0, 0xac}, @map_idx={0x18, 0x5, 0x5, 0x0, 0x6}, @map_val={0x18, 0x3, 0x2, 0x0, r2, 0x0, 0x0, 0x0, 0x3ff}, @tail_call={{0x18, 0x2, 0x1, 0x0, r3}}, @ldst={0x2, 0x1, 0x4, 0x4, 0x4, 0xc, 0x1}, @ldst={0x2, 0x2, 0x2, 0x6, 0x2, 0x80, 0xfffffffffffffff0}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f00000001c0)='syzkaller\x00', 0xffffff81, 0xd5, &(0x7f0000000200)=""/213, 0x40f00, 0x52, '\x00', r4, 0x25, r5, 0x8, &(0x7f0000000800)={0x6, 0x1}, 0x8, 0x10, 0x0, 0x0, 0x0, 0x0, 0xa, &(0x7f0000000880)=[0x1, r7, r8], &(0x7f00000008c0)=[{0x4, 0x5, 0xc, 0x5}, {0x1, 0x2, 0xc}, {0x1, 0x5, 0xe, 0x1}, {0x2, 0x3, 0x1, 0x9}, {0x0, 0x2, 0x1, 0x1}, {0x1, 0x5, 0x3, 0xc}, {0x2, 0x1, 0x7, 0x7}, {0x3, 0x1, 0x2, 0x9}, {0x5, 0x2, 0xe, 0xa}, {0x1, 0x3, 0x1, 0x5}], 0x10, 0x36e, @void, @value}, 0x94) 1m10.263712736s ago: executing program 2 (id=3767): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000700)=""/4113, 0x1011}, {&(0x7f0000000440)=""/178, 0xb2}, {&(0x7f0000000540)=""/216, 0xd8}, {&(0x7f0000000240)=""/134, 0x86}, {&(0x7f0000003c40)=""/4092, 0xffc}, {&(0x7f0000001840)=""/105, 0x69}, {&(0x7f00000018c0)=""/147, 0x93}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x40008062, 0x0) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0xb0, 0x2a, 0x229, 0x70bd2b, 0x0, {0xa}, [@typed={0x6, 0x5, 0x0, 0x0, @str='!\x00'}, @generic="11289ab3443d789565f1b27a1299aaa287fda5652a29e46bd67bd26bc0bcdb4955bc88a2ed9cbd09f8153428d58b943605c450ad48e23b4d74401b7ec0aabd2e2f7272ae28072c8f9a50e341aafff0bfb5580b69d84edd956968d207ee827e45ba9e24cd2e08e4b12eebea44917117a112b1b4031f596ebaf2b6cd131595473e654ce2b2acd36cf0b7aa14273ac843dbd2fa"]}, 0xb0}}, 0x4) socket$nl_generic(0x10, 0x3, 0x10) (async) sendmsg$nl_generic(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000300)=ANY=[@ANYBLOB="18000000240001030000000000000000010000000400ae"], 0x18}, 0x1, 0x0, 0x0, 0x8001}, 0x4000) (async) syz_genetlink_get_family_id$mptcp(&(0x7f0000000080), r0) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000000000), r0) (async) recvmmsg(r0, &(0x7f00000086c0)=[{{0x0, 0x0, 0x0}, 0x101}, {{0x0, 0x0, 0x0}, 0x7}, {{0x0, 0x0, 0x0}, 0x1}, {{0x0, 0x0, &(0x7f0000001980)=[{&(0x7f0000000700)=""/4113, 0x1011}, {&(0x7f0000000440)=""/178, 0xb2}, {&(0x7f0000000540)=""/216, 0xd8}, {&(0x7f0000000240)=""/134, 0x86}, {&(0x7f0000003c40)=""/4092, 0xffc}, {&(0x7f0000001840)=""/105, 0x69}, {&(0x7f00000018c0)=""/147, 0x93}], 0x7}, 0x80000000}, {{0x0, 0x0, 0x0}, 0x5}], 0x5, 0x40008062, 0x0) (async) socket$netlink(0x10, 0x3, 0x0) (async) sendmsg$nl_generic(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)={0xb0, 0x2a, 0x229, 0x70bd2b, 0x0, {0xa}, [@typed={0x6, 0x5, 0x0, 0x0, @str='!\x00'}, @generic="11289ab3443d789565f1b27a1299aaa287fda5652a29e46bd67bd26bc0bcdb4955bc88a2ed9cbd09f8153428d58b943605c450ad48e23b4d74401b7ec0aabd2e2f7272ae28072c8f9a50e341aafff0bfb5580b69d84edd956968d207ee827e45ba9e24cd2e08e4b12eebea44917117a112b1b4031f596ebaf2b6cd131595473e654ce2b2acd36cf0b7aa14273ac843dbd2fa"]}, 0xb0}}, 0x4) (async) 1m7.559406002s ago: executing program 2 (id=3771): sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000006c0)={&(0x7f0000000580)=ANY=[@ANYBLOB="6c0000001000010400d20100"], 0x6c}}, 0x0) r0 = socket(0x10, 0x3, 0x0) sendmmsg$alg(r0, &(0x7f0000000140), 0x4924b68, 0x0) r1 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r1, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000380)=@newlink={0x38, 0x10, 0x401, 0x0, 0x0, {}, [@IFLA_LINKINFO={0x18, 0x12, 0x0, 0x1, @sit={{0x8}, {0xc, 0x2, 0x0, 0x1, [@IFLA_IPTUN_FWMARK={0x8, 0x14, 0x1000}]}}}]}, 0x38}}, 0x0) (async) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=ANY=[], 0x30}}, 0x4090) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$devlink(&(0x7f0000000300), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_TRAP_POLICER_GET(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000340)={0x3c, r3, 0x1, 0x0, 0x0, {0x53}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}]}, 0x3c}}, 0x0) (async, rerun: 64) sendmsg$TIPC_NL_NET_GET(0xffffffffffffffff, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000140)={0x0, 0x14}}, 0x0) (async, rerun: 64) sendmsg$NL80211_CMD_CONNECT(0xffffffffffffffff, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)={0x20, 0x0, 0x5, 0x7, 0x8, {{}, {@val={0x8}, @void}}, [@NL80211_ATTR_SSID={0x4}]}, 0x20}, 0x1, 0x0, 0x0, 0x8004880}, 0x0) 1m7.327543092s ago: executing program 2 (id=3773): r0 = socket(0x10, 0x803, 0x0) syz_emit_ethernet(0x16, &(0x7f00000003c0)={@multicast, @remote, @void, {@mpls_uc={0x8847, {[], @llc={@snap={0x0, 0xaa, 'D', "259e0b", 0xa01}}}}}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=@newtaction={0x98, 0x30, 0x1, 0x0, 0x0, {}, [{0x84, 0x1, [@m_ct={0x2c, 0x0, 0x0, 0x0, {{0x7}, {0x4}, {0x4}, {0xc}, {0xc}}}, @m_ife={0x54, 0x1, 0x0, 0x0, {{0x8}, {0x2c, 0x2, 0x0, 0x1, [@TCA_IFE_PARMS={0x1c}, @TCA_IFE_METALST={0xc, 0x6, [@IFE_META_SKBMARK={0x5, 0x1, @void}]}]}, {0x4}, {0xc}, {0xfffffffffffffeba}}}]}]}, 0x98}}, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000240)={'batadv_slave_1\x00', 0x0}) bind$packet(r0, &(0x7f0000000280)={0x11, 0x3, r1, 0x1, 0x2, 0x6, @multicast}, 0x14) sendmsg$nl_netfilter(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x4000000}, 0xc, &(0x7f0000000080)={&(0x7f0000000040)={0x2c, 0x12, 0x6, 0x101, 0x70bd25, 0x25dfdbfc, {0x1, 0x0, 0x3}, [@typed={0x4, 0xac}, @typed={0x11, 0x121, 0x0, 0x0, @str='/@%#(\\*\xc6!]!.\x00'}]}, 0x2c}, 0x1, 0x0, 0x0, 0x8001}, 0x40400f5) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xc, 0x4, &(0x7f0000000180)=@framed={{}, [@call={0x85, 0x0, 0x0, 0x11}]}, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1e, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x101, @void, @value}, 0x94) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFC_CMD_GET_TARGET(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000005c0)={&(0x7f0000000040)={0x14, 0x0, 0x4}, 0x14}}, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000800)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000700)={&(0x7f0000000480)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x401, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x2c, 0x1, 0x0, 0x1, @numgen={{0xb}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_NG_MODULUS={0x8, 0x2, 0x1, 0x0, 0x1c5c}, @NFTA_NG_TYPE={0x8}, @NFTA_NG_DREG={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) syz_genetlink_get_family_id$nfc(&(0x7f0000000140), r2) r4 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), r2) sendmsg$NL802154_CMD_NEW_INTERFACE(r2, &(0x7f0000000480)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000580)=ANY=[@ANYBLOB='0\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000eeff110000000a0004007778616e3300000008001520", @ANYRES32, @ANYBLOB="080001"], 0x30}}, 0x0) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000300), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(0xffffffffffffffff, 0x8933, &(0x7f0000000340)={'wpan4\x00', 0x0}) r7 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r9 = syz_genetlink_get_family_id$ieee802154(&(0x7f0000000400), r8) ioctl$sock_SIOCGIFINDEX_802154(r7, 0x8933, &(0x7f0000000100)={'wpan0\x00', 0x0}) r11 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$IEEE802154_LLSEC_ADD_SECLEVEL(r11, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f00000000c0)={0x1c, r9, 0x60b, 0x0, 0x0, {}, [@IEEE802154_ATTR_DEV_INDEX={0x8, 0x2, r10}]}, 0x1c}, 0x1, 0x0, 0x0, 0x40}, 0x80) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r2, &(0x7f0000000440)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000400)={&(0x7f0000000380)={0x30, r5, 0x400, 0x70bd25, 0x25dfdbfc, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r6}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r10}, @NL802154_ATTR_WPAN_DEV={0xc}]}, 0x30}, 0x1, 0x0, 0x0, 0x8000}, 0x81) 1m6.991737258s ago: executing program 2 (id=3777): r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) sendfile(0xffffffffffffffff, r1, 0x0, 0x7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffffffffffe98) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='rxrpc_conn\x00', r2, 0x0, 0x4}, 0x18) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) unshare(0x62040200) 51.237066513s ago: executing program 32 (id=3777): r0 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000040), 0x2, 0x0) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='memory.events\x00', 0x7a05, 0x1700) sendfile(0xffffffffffffffff, r1, 0x0, 0x7) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='freezer.parent_freezing\x00', 0x275a, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x3, &(0x7f0000000800)=ANY=[], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x1f, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0xfffffffffffffe98) bpf$BPF_GET_PROG_INFO(0xf, 0x0, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000140)={&(0x7f00000000c0)='rxrpc_conn\x00', r2, 0x0, 0x4}, 0x18) write$cgroup_subtree(0xffffffffffffffff, 0x0, 0x0) unshare(0x62040200) 38.370049872s ago: executing program 3 (id=2249): bind$ax25(0xffffffffffffffff, &(0x7f0000000000)={{0x3, @default}, [@null, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}, @null, @null, @default, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @remote={0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0xcc, 0x2}, @netrom={0xbb, 0xbb, 0xbb, 0xbb, 0xbb, 0x0, 0x0}]}, 0x48) close(0xffffffffffffffff) 12.7355981s ago: executing program 1 (id=3899): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{0x0}, {&(0x7f00000001c0)="9c74dfbf", 0x4}], 0x2) 9.64890514s ago: executing program 4 (id=3902): r0 = socket$inet_tcp(0x2, 0x1, 0x0) r1 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000b00), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000b40)={'wlan0\x00', 0x0}) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f00000011c0)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_SET_STATION(r1, &(0x7f0000000c40)={0x0, 0x0, &(0x7f0000000c00)={&(0x7f0000000080)=ANY=[@ANYBLOB="30000000cc7fca9bfb1042e6edeb01daf2eb8f41915543313dadb04e8efa33f915796533b9f5a91584606a9d3b3a7aaa050585b037caff3cd0580d4bcb9cbd644721020381ba54695c9becb8ceb36381e1", @ANYRES16=r2, @ANYBLOB="010000000000feffffff1200000008000300", @ANYRES32=r3, @ANYBLOB="08001400", @ANYRES32=r4, @ANYBLOB="0a000600ffffffffffff0000"], 0x30}, 0x1, 0x0, 0x0, 0x4}, 0x0) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000100)={@in={{0x2, 0x0, @local}}, 0x0, 0x0, 0x23, 0x0, "3a3bd6d1586eebc5abc69bff3508bd75462643dcf7439f3f03d934049f68b4be932558e5164611dbdf6fc60fa9af0d8469d28a4dba103bbd8849c71bf635b7ea0bfadad2459eef720e4e63fbe16f01a7"}, 0xd8) setsockopt$inet_tcp_TCP_MD5SIG(r0, 0x6, 0xe, &(0x7f0000000540)={@in={{0x2, 0x4e20, @remote}}, 0x0, 0x0, 0x4a, 0x0, "2bc98c2ebaef50dbfa5260f773b780148afd86db86031696c8613b1b1ab3014f76e0a997a98b1bc30889102d5757a6421fb8591a638f75db21cc79695f1b7c8a1e7ac2cf62f7704ada1008ab775820b0"}, 0xd8) connect$inet(r0, &(0x7f0000000800)={0x2, 0xfffd, @loopback}, 0x10) 8.64983356s ago: executing program 4 (id=3904): r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r0, 0x8933, &(0x7f0000000200)={'batadv_slave_0\x00'}) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000180)={'vlan0\x00'}) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000180)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000780)={&(0x7f00000001c0)=@newqdisc={0x58, 0x24, 0xd0f, 0x2, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xfff2}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_sfb={{0x8}, {0x2c, 0x2, @TCA_SFB_PARMS={0xffffffffffffff17}}}]}, 0x58}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000000)=@newlink={0x40, 0x10, 0x503, 0x0, 0x1, {0x0, 0x0, 0x0, 0x0, 0x0, 0x8080}, [@IFLA_BROADCAST={0x0, 0x2, @dev={'\xaa\xaa\xaa\xaa\xaa', 0x3c}}]}, 0x40}}, 0x0) 6.629352127s ago: executing program 1 (id=3906): r0 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$sock_cred(r2, 0x1, 0x11, &(0x7f0000001fc0)={0x0}, &(0x7f0000002000)=0xc) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r5, 0x6, 0x13, &(0x7f0000000040)=0x100000001, 0x4) connect$inet6(r5, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) r6 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL802154_CMD_GET_WPAN_PHY(r6, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000140)={0x3c, r7, 0x1, 0x70bd26, 0x25dfdbfd, {}, [@NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x100000001}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x300000003}, @NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x3}, @NL802154_ATTR_IFINDEX={0x8}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4045}, 0x4) setsockopt$inet6_tcp_TCP_ULP(r5, 0x6, 0x1f, &(0x7f00000002c0), 0x4) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x2, &(0x7f0000000200)=@gcm_256={{0x304}, "3f60eb8f2777c39a", "5985e81ad0d9585bc175cbecd3f55eb699e3070cc206f3ba527c85bde06fbf19", "bc5ec28f", "b200"}, 0x38) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r9 = socket$packet(0x11, 0x3, 0x300) setsockopt$packet_fanout(r9, 0x107, 0x12, &(0x7f0000000040)={0x0, 0x6}, 0x4) setsockopt$packet_fanout_data(r9, 0x107, 0x16, &(0x7f00000000c0)={0x2, &(0x7f0000000180)=[{0x3c}, {0x6}]}, 0x10) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r8, 0x0) setsockopt$inet6_tcp_TLS_TX(r5, 0x11a, 0x4, &(0x7f0000000100)=@gcm_256={{}, "2474794233890da1", "d830005894bf527ae179a740634a1236f3678de8ea2d0d661607e24300", "5615d9f5", "7c5cec21691a43fe"}, 0x38) r10 = syz_genetlink_get_family_id$tipc2(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$TIPC_NL_LINK_RESET_STATS(r4, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000240)={0x14, r10, 0x1}, 0x14}}, 0x0) sendmmsg$unix(r1, &(0x7f0000001d40)=[{{0x0, 0x0, &(0x7f0000000e40)=[{&(0x7f0000000240)="af", 0x1}], 0x1}}, {{0x0, 0x0, 0x0, 0x0, &(0x7f00000003c0)=ANY=[@ANYBLOB="1c000000000000000100000002000000", @ANYRES32=r3, @ANYRES32=0x0, @ANYRES32=0x0, @ANYRES8=r1, @ANYRES32=r1, @ANYBLOB="b9d183eb934dba1c99b0f70816757a4a8719e17d96fd27121d33945634e8223312b7538731c788b292e9adcc68ddebe9cefb09ca5ce58796362231957f206badc9337c5afb6baac8956009a9cb52c8c9997b8e5eeefa26dd6cf28f3b242de27d7ab87b51c060c46f9ff8e5d53f0eef822e8cd0dad077f352905c6de83e614895bc092f60cfb3d573ec918cfb37b390e2f624f18777a1470e58f8a8a62c446eca00207ba9"], 0x38}}], 0x2, 0x801) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000000c0)=ANY=[@ANYBLOB="1400000016001d0a"], 0x14}}, 0x0) r11 = socket$nl_route(0x10, 0x3, 0x0) r12 = socket$inet6_udp(0xa, 0x2, 0x0) ioctl$sock_SIOCGIFINDEX(r12, 0x8933, &(0x7f0000000040)={'lo\x00'}) unshare(0x20000400) r13 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x0) getsockopt$inet_sctp6_SCTP_I_WANT_MAPPED_V4_ADDR(r13, 0x84, 0xc, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route_sched(r11, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)={&(0x7f00000004c0)=@gettfilter={0x5c, 0x2e, 0x200, 0x70bd2c, 0x25dfdbfd, {0x0, 0x0, 0x0, 0x0, {0x10, 0xffff}, {0xfff2, 0x4}, {0x10, 0xffe0}}, [{0x8, 0xb, 0x7}, {0x8, 0xb, 0x95}, {0x8, 0xb, 0xd9}, {0x8, 0xb, 0x147b33d5}, {0x8, 0xb, 0x1}, {0x8, 0xb, 0xb}, {0x8, 0xb, 0xf}]}, 0x5c}}, 0x0) 6.628932468s ago: executing program 4 (id=3907): r0 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$ifreq_SIOCGIFINDEX_vcan(r0, 0x8933, &(0x7f0000000080)={'vcan0\x00', 0x0}) sendmsg$can_raw(r0, &(0x7f0000000240)={&(0x7f0000000780)={0x1d, r1}, 0x10, &(0x7f0000000200)={&(0x7f0000000fc0)=@can={{}, 0x0, 0x0, 0x0, 0x0, "b171164680a4bf03"}, 0x48}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000540)=@mpls_delroute={0x1c, 0x19, 0x1, 0x0, 0x0, {0x1c, 0x14, 0x20, 0x0, 0xfe, 0x0, 0xff}}, 0x1c}}, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) clock_gettime(0x0, &(0x7f0000000040)={0x0, 0x0}) sendmsg$can_bcm(r3, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000000c0)={0x1, 0x402, 0x400, {0x0, 0xea60}, {r4, r5/1000+10000}, {0x0, 0x0, 0x1, 0x1}, 0x1, @can={{0x4}, 0x2, 0x2, 0x0, 0x0, "fcf6d23014922335"}}, 0x48}, 0x1, 0x0, 0x0, 0x4008811}, 0x1) 6.443245601s ago: executing program 1 (id=3908): r0 = bpf$BPF_BTF_LOAD(0x12, &(0x7f00000003c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="9feb010018000000000000000c0000000c000000020000000000000000000004"], 0x0, 0x26, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x20) r1 = socket$vsock_stream(0x28, 0x1, 0x0) bind$vsock_stream(r1, &(0x7f0000000040)={0x28, 0x0, 0x2710, @host}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'wlan1\x00', 0x0}) sendmsg$nl_route(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000001840)=@newlink={0x34, 0x10, 0x401, 0x0, 0x0, {0x0, 0x48, 0x0, r3}, [@IFLA_VFINFO_LIST={0x14, 0x16, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, [@IFLA_VF_TRUST={0xc, 0x9, {0x81000000}}]}]}]}, 0x34}}, 0x0) listen(r1, 0x0) r4 = socket$vsock_stream(0x28, 0x1, 0x0) connect$vsock_stream(r4, &(0x7f0000000080)={0x28, 0x0, 0x2710}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0x1, 0x4, &(0x7f0000000000)=@framed={{}, [@ldst={0x1, 0x0, 0x3, 0x0, 0x1, 0x5b}]}, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x90) listen(r4, 0x9) r5 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0xd, 0x3, &(0x7f0000001740)=ANY=[@ANYBLOB="180000000000000000000000000000009500000000000000bc7ef9642d29ba564165605dca29708efdf9b15a5c10a126121b2751f642635bcd9a8bf7a928a5d054b0d2c54d519ea75c52f41ed6f2886973626b684c8bd9108c0b0b2ea7e556948f0367aff4fbcede3294f6e73d06ad16dc2d26725ff833b5f83b499918e6a6ec245b781d41aee9624c847e2f2312d6b9db45bad354fc1a3f20407ffe406483a0524937ee7559e4bf70136746b37fdfbbb152758d37ed8bcac41fb7243bdcd536249c7996e898b61927eaa5a8790054ba13d3ade593220f96027090a34aaf7ea92f41aab73e7a85eef87e956bb7c5c76a347264fd99359f4e57b0dcc2bcc188ea880a4b11a8bb81eb22b0ddfc689e3218cf310dcc61cab354149d9107d8a88b0aa5b5661555f00443aee5e714009e52cee5e88f008148ddbc0fa81bf938bed4a1ac778d5337cc0311d0772eeac3eab38426e8d1472ff514aa5379ed21551790cc10148410b4fc27582fd7106a8887a9a0b613dfe10aee77542d887208f5534f5dce4d43f258fc9ef975834e1917666e2aff1cebfc3ce2c1e8ff66bba1d9050000000000000078db7024bf321636bede8651e672ed4f01ba5da2c3f9042a8552bd3f2c9ad546ad0ea20b4d35fb0a15c6239f67c7747a40fe26a88adf727fd1b801b4e56fbffcad99ce68fe2af0d94fdc78d27268de435021dca51acaa7a9e0944bdf579c170db6405944b6791a7713ee54f650fdf71b57c3629fb185efce700620ef5744623be08ec935dd563e6ba0b461bda98b364acf3dcdafa9b0e68c21ea509212c2938aa09cc31aa4ee5bfb8e507181909f5854b13997af4888cd61c8aab5fdfd701a16d546e5a533cd9b985dcc582b67979551dcc750fc51f2c9b6814edeffc76a86ea9f58b7c66fa24540daf14c2163d064f8cf0b4878f81e6b8bc4dabc10dac82b39e033963a6d02434cb783a198829d1373790a85c0e01a362d89e80165d280283af3c2060000000000000034b12a73b0c53bfae5d2f6e55728052247adfe0966c6c5eca57918c4540c979a70a281ba00e408c9fe1b20fa208976dd6a56f9bd9a74d81447c9b265d8c23f0e983e0b1d2d62d1e57c9188e4882634476e62ab1b7415a58208eaaf166d14720092f79a6197fe8b4ea7d5485cc6b3630afed8d3403cfa4d7bf48efb371706e0e65901eea3743c98261cbb7a246cf62f99bbc918741d32539ec0754e7d7f08dd45aaf49623342eabf466e54d8da4346e73da54ba2e4b5e2ae2823864d4147b490e55c9509f75c8828500ac32cab11b0262e75fa9e39e3792d01e0b210fdfb686bfffdc677432f6332c1a27502b43997060acdf7784c79fed0325e06f6b64b6434ebf4730509bcf95b9a1d0ba7c469d55351cc1dce6c90f5872e7ad5eed5f850d9d1f928b4e0263b241e8fe03e5e66252c8a3bd320e8deee5b91c653b8f22f58cff36c2ba4d6774f14229939595d2beb998c9312212de00468fc488591aca07ab75fba4a318d3ee4581711927b77a7f14dbcd639892f8cb0000000000000080411736eb1ee86eec338197a56293c9cdb72e84155681553b896d58b62a96852320e74dc4c9b41d6f90d2353dc573a94a092a84209c12da57f8c78e161b0899eb1c8b694d26c5fbf7f65fefacdbf39151f335dddc3b179a13f6de93ffb338e94738c86e35e9fcc654e4d6618dc1201cbd16e1281df911e6c699da16fbbb7a2e5c77966c98d3e7edd58cabfe6bf1bb7f6329084e3e4a2a36da07bbac3ebc00472f55b7966f250109fcce0ad5d4526d20ef74d1a634d724"], &(0x7f0000000080)='GPL\x00', 0x5, 0x1f6, &(0x7f00000002c0)=""/168, 0x0, 0x0, '\x00', 0x0, @sock_ops, r0, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000200), 0x1, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x6d) bpf$BPF_BTF_GET_NEXT_ID(0x17, &(0x7f0000000000)={0x0, 0x0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x1c, 0x3, &(0x7f0000000200)=ANY=[@ANYBLOB="1802000002ff0100000000000000000095"], &(0x7f0000000180)='GPL\x00', 0x4, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, r6, r5, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) bpf$TOKEN_CREATE(0x24, &(0x7f0000000040)={0x0, r0}, 0x8) bpf$PROG_LOAD(0x5, &(0x7f0000000540)={0x1, 0x4, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000061600001000000e7d4cd38000200000000000000000000009500000000000000"], &(0x7f0000000100)='syzkaller\x00', 0x0, 0x52, 0x0, 0x40f00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r6, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) 6.351717359s ago: executing program 4 (id=3909): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)=@newtaction={0x6c, 0x30, 0x1, 0x0, 0x0, {}, [{0x58, 0x1, [@m_mpls={0x54, 0x7, 0x0, 0x0, {{0x9}, {0x28, 0x2, 0x0, 0x1, [@TCA_MPLS_PARMS={0x1c, 0x2, {{}, 0x4}}, @TCA_MPLS_PROTO={0x6, 0x4, 0x9}]}, {0x4, 0x4}, {0xc}, {0xc}}}]}]}, 0x6c}}, 0x0) bind$alg(r1, &(0x7f0000000100)={0x26, 'hash\x00', 0x0, 0x0, 'sha1\x00'}, 0x65) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r3, &(0x7f0000000000)={0x0, 0x11, &(0x7f0000000040)={&(0x7f0000000080)=ANY=[@ANYBLOB="600000000206010300000000000000000000000005000400000000000900020073797a32000000000500010007000000050005000a000000140007800800114000000000050015000c00000012000300686173683a6e6574"], 0x60}}, 0x0) r4 = socket$packet(0x11, 0x3, 0x300) r5 = socket$packet(0x11, 0x3, 0x300) ioctl$sock_SIOCGIFINDEX(r5, 0x8933, &(0x7f0000000000)={'wlan1\x00', 0x0}) setsockopt$packet_add_memb(r4, 0x107, 0x1, &(0x7f0000000100)={r6, 0x2, 0x6, @local}, 0x10) setsockopt$packet_drop_memb(r4, 0x107, 0x2, &(0x7f00000000c0)={0x0, 0x1, 0x6, @link_local={0x1, 0x80, 0xc2, 0x0, 0x0, 0x1}}, 0x10) r7 = accept4(r1, 0x0, 0x0, 0x0) sendmsg$OSF_MSG_ADD(r7, &(0x7f00000000c0)={0x0, 0x2, &(0x7f0000000080)={&(0x7f00000007c0)=ANY=[], 0xe0c}, 0x1, 0x0, 0x0, 0x8080}, 0x40040000) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01030000000000000000010000000900010073797a300000000040000000030a01020000000000000000010000000900030073797a32000000001400048008000240326565a708000140000000000900010073797a300000000048000000060a010400000000000000000100000008000b40000000000900010073797a3000000000200004801c0001800b00010072656a65637400000c000280080001400000000114000000110001"], 0xd0}}, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$sock_SIOCGIFVLAN_DEL_VLAN_CMD(r0, 0x8982, &(0x7f0000000080)={0x1, 'team_slave_0\x00', {}, 0x84d1}) sendmsg$NFT_BATCH(r8, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a34000000030a01080000000000000000010000000900030073797a32000000000900010073797a30000000000800054000000000140000001100010000000000000000000000000a13e131d32f20f612fe1a50faccca6972e3376b8316d51945424f4e"], 0x5c}}, 0x0) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(0xffffffffffffffff, 0x84, 0x18, &(0x7f0000000100)={0x0, 0x6}, 0x8) bpf$PROG_LOAD_XDP(0x5, &(0x7f00000001c0)={0x12, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="18000000010000000000000000000000711205000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1d, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x80) sendmsg$OSF_MSG_ADD(r7, &(0x7f0000000c40)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x80000}, 0xc, &(0x7f0000000c00)={&(0x7f00000004c0)={0x710, 0x0, 0x5, 0x801, 0x0, 0x0, {0x3, 0x0, 0x6}, [{{0x254, 0x1, {{0x0, 0x9}, 0x0, 0x3, 0xd, 0x7, 0x9, 'syz1\x00', "ad54a34fa85eee4d0772604a53cc39836b3283efcba9a8649d1f98a744165d88", "c1bc6ed5d75eb36fbadf82ec4dc872a0b94957a78cbe7af67baca5ff3569df84", [{0x7, 0x5, {0x0, 0x9}}, {0x9, 0x9, {0x0, 0x400}}, {0xe1, 0xb4, {0x0, 0x3ff}}, {0xbed, 0x5, {0x1, 0xf}}, {0x401, 0x3, {0x0, 0x8}}, {0xfbff, 0x0, {0x0, 0x4}}, {0x9, 0x2629, {0x1, 0x80000000}}, {0x7, 0x7c6, {0x3, 0x80000000}}, {0x40, 0x1, {0x1}}, {0xff7f, 0x3, {0x0, 0x5}}, {0x6, 0x7fff, {0x2, 0x9c2}}, {0x1, 0x5, {0x3, 0x3}}, {0xff, 0x400, {0x1, 0x10001}}, {0xfff7, 0x9, {0x1, 0x99}}, {0xfff7, 0x8, {0x0, 0x5}}, {0x7, 0x4, {0x2, 0x80000001}}, {0x9, 0x1, {0x3, 0x8}}, {0x4, 0x5}, {0x0, 0x3, {0x1, 0xfffffffe}}, {0x8, 0x8, {0x0, 0x9}}, {0x4, 0x2, {0x0, 0x5}}, {0xf5c5, 0x3, {0x0, 0x5}}, {0xb, 0x101, {0x2, 0x10000}}, {0x2, 0x4, {0x2, 0x6}}, {0xfff, 0x5, {0x0, 0x6}}, {0x10, 0x9, {0x3, 0x889}}, {0x200, 0x0, {0x2, 0x7fff}}, {0x8, 0x2, {0x3, 0xd}}, {0x1d19, 0x89, {0x3, 0x5}}, {0x4, 0x8, {0x3, 0x9}}, {0x3, 0x7ff, {0x2, 0xff}}, {0x53f, 0x2, {0x2, 0x7}}, {0x6, 0x4, {0x3, 0x8}}, {0xc, 0x1, {0x3, 0xf96}}, {0x6, 0x1db7, {0x1, 0x5}}, {0xfff9, 0x7, {0x3, 0x3}}, {0x9, 0x4, {0x1, 0x10}}, {0xa4e, 0xe015, {0x3}}, {0x2, 0xfff9, {0x2, 0x8}}, {0x0, 0x989, {0x1, 0x1}}]}}}, {{0x254, 0x1, {{0x3, 0x800}, 0x8, 0xf2, 0x81, 0x7, 0x15, 'syz0\x00', "48b279dcc2f1d553607a19426fc3a4b2e57fdb2a9d8b87bea90964c1e804b5d4", "f51e6f01522e920d26be1b93eef4a0c421a3cc87bafed9d94b4c0f9db43ac385", [{0x8, 0xcd88, {0x0, 0x6}}, {0x4, 0x3ff, {0x2, 0x6}}, {0x4, 0xc, {0x1, 0x8}}, {0x3ff, 0x1000, {0x3, 0x9}}, {0x59cc, 0x9, {0x0, 0x2}}, {0x0, 0xe, {0x1, 0x7}}, {0x700, 0x21, {0x2, 0x5}}, {0x4, 0x200, {0x0, 0x1fdb}}, {0x8001, 0x0, {0x3, 0x8}}, {0x3, 0x3, {0x0, 0x4}}, {0xe5, 0x4, {0x0, 0x3}}, {0x0, 0x80, {0x3}}, {0x80, 0x4, {0x1, 0x1}}, {0x1, 0x7, {0x2, 0xff}}, {0x3, 0xf4, {0x171fcd4380818dde, 0xd70}}, {0xffff, 0x8000, {0x0, 0x10001}}, {0x956, 0xa6d, {0x1, 0x9}}, {0x2, 0x5, {0x0, 0x9}}, {0x7, 0x35e, {0x1, 0xc}}, {0x9, 0x8, {0x3, 0x7fffffff}}, {0xe, 0x0, {0x0, 0x8}}, {0x4, 0x6, {0x1, 0xd}}, {0x4, 0x0, {0x3, 0x1000}}, {0xffff, 0x2, {0x3, 0x9}}, {0x3, 0x63, {0x3, 0x8}}, {0x7, 0x4, {0x2, 0x8}}, {0xffff, 0x1, {0x2, 0x9}}, {0x4, 0x9, {0x1, 0x97}}, {0x1000, 0x8000, {0x2}}, {0x9555, 0x5, {0x1}}, {0xff, 0x800, {0x3, 0x4}}, {0x3, 0x100, {0x1, 0x7fffffff}}, {0xe52, 0x5, {0x0, 0x3ff}}, {0x6, 0x479, {0x2, 0x3}}, {0xe8b, 0x3, {0x0, 0xffff}}, {0x9000, 0x9, {0x1, 0x4}}, {0x5, 0xe2f, {0x2, 0xffffffff}}, {0x1, 0x1ff, {0x3}}, {0x14f, 0x6544, {0x3, 0x3}}, {0xbc, 0x800, {0x0, 0x1400}}]}}}, {{0x254, 0x1, {{0x0, 0x8}, 0x9, 0x0, 0x97, 0x7, 0x24, 'syz0\x00', "b48f62c8db88f7fb52d06099eac848cd4d23c39877633468979c00f037cc72e8", "7cc3adcb10a69968dfcc4a8be7fd7d90b0ac07ae3c80340b4c1b7ff8157ff778", [{0xe, 0x5, {0x3, 0x1}}, {0x9, 0x8000, {0x0, 0x4}}, {0x3, 0x101, {0x1, 0x4}}, {0x8, 0x3, {0x2, 0x9}}, {0xe44, 0x1, {0x3, 0x800}}, {0x4, 0x5, {0x2, 0x7}}, {0x80, 0x5b7, {0x2, 0xf}}, {0x9a, 0x10, {0x0, 0x9}}, {0x0, 0x9, {0x1, 0x8}}, {0x401, 0x8, {0x3, 0x5}}, {0x7, 0x4, {0x1, 0x3ff}}, {0x6, 0x0, {0x0, 0x6}}, {0xb927, 0x2a, {0x0, 0x8f}}, {0x8, 0x7f, {0x1, 0x9}}, {0x5ab2, 0x2, {0x3, 0xffffffff}}, {0x4, 0x3, {0x3, 0x1}}, {0x7, 0x81, {0x0, 0x4bb7}}, {0xff, 0x81}, {0x8, 0x1, {0x1}}, {0x3, 0x8000, {0x2, 0x85}}, {0xf, 0x10, {0x3, 0x3}}, {0x8000, 0x200, {0x2, 0x2}}, {0x8, 0xfff, {0x2, 0x9}}, {0x8, 0x6f61, {0x2, 0x9}}, {0x10, 0x9, {0x0, 0xd4a}}, {0x8, 0x7, {0x1, 0x3}}, {0x0, 0x7, {0x3, 0x8000}}, {0x3, 0x8, {0x0, 0x8}}, {0x7a45, 0x5, {0x0, 0x51}}, {0xc902, 0x7b3, {0x2, 0x4}}, {0x4, 0xfffa, {0x0, 0x7ff}}, {0x7, 0x5, {0x0, 0x572d}}, {0x1, 0x4, {0x2, 0x200}}, {0x1, 0xc, {0x1, 0x6040}}, {0x7, 0x2, {0x0, 0x7}}, {0x9, 0xa, {0x2, 0x9}}, {0xa, 0x0, {0x3, 0x5}}, {0x8, 0xf, {0x1, 0x80}}, {0x8000, 0xb, {0x0, 0x2}}, {0x388, 0x5, {0x1, 0x80}}]}}}]}, 0x710}}, 0x80) ioctl$sock_inet_SIOCSIFBRDADDR(r8, 0x891a, &(0x7f0000000280)={'nr0\x00', {0x2, 0x4e21, @private=0xa010102}}) setsockopt$packet_fanout(r7, 0x107, 0x12, &(0x7f0000000180)={0x2, 0x2}, 0x4) 6.346494965s ago: executing program 0 (id=3910): r0 = socket(0x400000000010, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000040)=ANY=[@ANYBLOB="e0fe8b6181000000000400100000000000000000", @ANYRES32, @ANYBLOB="0137f2367a0000001c0012000c"], 0x3c}}, 0x0) write(r0, &(0x7f0000000040)="3a03000019002551075c0165ff0ffc02802000030004000500e1000c040007031a000300", 0x33a) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000280)={0x12, 0x4, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000200000000000000000073012b000000000095"], &(0x7f0000000000)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xe, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x200400, 0x0) 6.194645224s ago: executing program 1 (id=3911): syz_init_net_socket$llc(0x1a, 0x1, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) socket$packet(0x11, 0x3, 0x300) socketpair(0x1, 0x20000000000001, 0x0, &(0x7f0000000100)) pipe(&(0x7f00000001c0)={0xffffffffffffffff, 0xffffffffffffffff}) getpeername$llc(r1, &(0x7f0000000780)={0x1a, 0x0, 0x0, 0x0, 0x0, 0x0, @remote}, &(0x7f00000000c0)=0x10) syz_genetlink_get_family_id$devlink(&(0x7f0000000100), 0xffffffffffffffff) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_route(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=ANY=[@ANYBLOB="540000001000010400000000000000ffff000000", @ANYRES32=0x0, @ANYBLOB="0380000000000000240012800c0001006d6163766c616e00140002800800010008000000060002000100000008000500", @ANYRES32=r2, @ANYBLOB='\b\x00\n\x00'], 0x54}}, 0x0) socket$inet6_sctp(0xa, 0x801, 0x84) syz_emit_ethernet(0x3a, &(0x7f0000000500)=ANY=[@ANYBLOB="0012ffffffffaaaaaaaaaabb0800456a002c0064000001069078e0000001e00000020000000000000000000000000000000200004e2200004e23"], 0x0) 6.074183499s ago: executing program 4 (id=3912): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{&(0x7f0000000300)="89e7ee2c78dad9b4b473fec988cafbe863cac505", 0x14}, {&(0x7f00000001c0)="9c74dfbf77572856c809ff8634", 0xd}], 0x2) 6.020067565s ago: executing program 0 (id=3913): mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz1\x00', 0x1ff) r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000000)='hugetlb.2MB.rsvd.usage_in_bytes\x00', 0x275a, 0x0) r2 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000300), 0x20000, 0x0) preadv(r2, &(0x7f0000002840)=[{&(0x7f0000000340)=""/4096, 0x1000}], 0x1, 0x757b, 0x3) ioctl$FS_IOC_RESVSP(r1, 0x40305829, &(0x7f0000000240)={0x1100, 0x2, 0x8000000b, 0x8}) r3 = openat$cgroup_procs(r0, &(0x7f0000000480)='cgroup.procs\x00', 0x2, 0x0) r4 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r4, 0x84, 0x7b, &(0x7f0000000380)={0x0, 0x2}, 0x8) sendto$inet6(r4, &(0x7f0000000080)="b8268b45733bade359", 0x9, 0x0, &(0x7f0000000100)={0xa, 0x0, 0x0, @dev={0xfe, 0x80, '\x00', 0x41}}, 0x1c) r5 = openat$ppp(0xffffffffffffff9c, &(0x7f0000000200), 0x0, 0x0) pwritev(r5, 0x0, 0x0, 0x0, 0x5) connect$inet6(r4, &(0x7f0000000040)={0xa, 0x0, 0x0, @private1}, 0x1c) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER_VALUE(r4, 0x84, 0x7c, &(0x7f0000000000)={0x0, 0x0, 0x5}, 0x8) write$cgroup_pid(r3, &(0x7f00000000c0)=0xffffffffffffffff, 0x12) socket$nl_generic(0x10, 0x3, 0x10) mmap(&(0x7f0000ff9000/0x4000)=nil, 0x4000, 0xe, 0x8010, 0xffffffffffffffff, 0x952de000) ioctl$FS_IOC_SETFLAGS(r0, 0x40086602, &(0x7f0000000040)=0x200000) 5.911571428s ago: executing program 0 (id=3914): r0 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$netlink_NETLINK_NO_ENOBUFS(r0, 0x10e, 0x5, &(0x7f0000000180)=0xdd3, 0x4) (async) r1 = socket(0x18, 0x5, 0x1) getsockname$packet(r1, 0x0, 0x0) (async, rerun: 32) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000480), 0xffffffffffffffff) (rerun: 32) sendmsg$NL80211_CMD_GET_REG(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000d00)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010000000000000002251f000000080001004e000000569193bf7d", @ANYBLOB="7f8dedfb0e9c241d427e54a57b5fecb44dc06cfbf86a65bcd83f158f212b175922c185ef32910db3d653a4763746335628c8554eb205d6d861df6ddfde443b25be2fa2507a646c457151b5da9aa2cdcc96337f8e8a28481a997ad44684a712c9fd9b9ada8b208042ca5ad9df64c3b8282134d9e28aa958c8868f9a8162fa0dac4f2bebea5bfa9d6afff617f113ea8b010ba150a0ce5e72d3b78161c9a56cb3918556d9932461f6fe9e56bf06bf467fdce145fc5f06fa549900800000000000000dee0810b43dce9d25fa29197e58e540207ef126", @ANYRES16=r2], 0x1c}, 0x1, 0x0, 0x0, 0x4004}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) (async) getsockopt$inet_pktinfo(0xffffffffffffffff, 0x0, 0x8, &(0x7f0000000300)={0x0, @private, @local}, &(0x7f0000000340)=0xc) (async) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='pids.events\x00', 0x275a, 0x0) write$cgroup_subtree(r5, &(0x7f00000000c0)=ANY=[@ANYBLOB="2d6381d2be"], 0x5) (async) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000740)={0xffffffffffffffff, 0xe0, &(0x7f0000000640)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, &(0x7f0000000440)=[0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x2, &(0x7f00000004c0)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000500)=[0x0, 0x0], 0x0, 0xdb, &(0x7f0000000540)=[{}, {}, {}, {}, {}, {}, {}, {}], 0x40, 0x10, &(0x7f0000000580), &(0x7f00000005c0), 0x8, 0xba, 0x8, 0x8, &(0x7f0000000600)}}, 0x10) r6 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_ERRQUEUE(r6, 0x6b, 0x2, 0x0, 0x4) (async) r7 = bpf$MAP_CREATE_TAIL_CALL(0x0, &(0x7f0000000780)={0x3, 0x4, 0x4, 0xa, 0x0, 0xffffffffffffffff, 0x20a, '\x00', 0x0, 0xffffffffffffffff, 0x3, 0x1, 0x2, 0x0, @void, @value, @void, @value}, 0x50) (async) r8 = bpf$MAP_CREATE(0x0, &(0x7f0000000e00)=ANY=[@ANYBLOB="1000000004000000050000000300000000800400", @ANYRES32=0x1, @ANYBLOB="0100"/20, @ANYRES8, @ANYRESDEC=r2, @ANYBLOB="000000000400"/20, @ANYRES32, @ANYBLOB="00b20135"], 0x50) (async) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r9, 0x0) (async) r10 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) r11 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xc, &(0x7f00000001c0)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r10, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bc82000000000000a6020000f8ffffffb703000008000000b704000000000000850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000080)={{r10}, &(0x7f0000000000), &(0x7f0000000040)=r11}, 0x20) r12 = bpf$MAP_CREATE(0x0, &(0x7f0000000880)=ANY=[@ANYBLOB="1e0400007f0000000f0000000c00000001000000", @ANYRES32=0x1, @ANYBLOB="fdffffff00"/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000004000000050000000e00"/28], 0x50) (async) r13 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000c00)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB="0000000000000000000000000000000000000000ba6ff475190b0e6d65e7d0315c0128e85bb1a0966c1786eb0c0c84b865ade029b6927da2d6a654f52ca472bd0383dfccfb60ba91e7b0fc2494260441b91cb23da3a942f3193d9658fd989c18ce504154fd6c79f047e83c58af68e2bb5518bc5e4d7d4d8d43c24cbe537d4188a40edeb7312bc0d8ca065231d56f55e9", @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r13, 0x35, 0xffffffffffffffff}, 0x10) (async) ioctl$F2FS_IOC_MOVE_RANGE(r0, 0xc020f509, &(0x7f0000000900)={r0, 0x4, 0x6, 0x4}) r15 = bpf$BPF_MAP_GET_FD_BY_ID(0xe, &(0x7f0000000940)={0x0, 0xf0, 0x18}, 0xc) (async, rerun: 64) r16 = bpf$ITER_CREATE(0x21, &(0x7f0000000980), 0x8) (rerun: 64) bpf$PROG_LOAD(0x5, &(0x7f0000000a80)={0x14, 0x9, &(0x7f00000001c0)=ANY=[@ANYBLOB="00fa03000100000018110000", @ANYRES32=r16, @ANYBLOB="004b010000000000b702000000000000850000008604000000000000000c0000000000002d3e522a186200000d000000000083add98effff"], &(0x7f0000000280)='syzkaller\x00', 0x9, 0x40, &(0x7f00000002c0)=""/64, 0x40f00, 0x20, '\x00', r3, @fallback=0x35, r5, 0x8, 0x0, 0x0, 0x10, &(0x7f0000000380)={0x3, 0x14, 0x2, 0x7}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x7, &(0x7f00000009c0)=[r7, r8, r9, r10, r12, r13, r14, r15, 0xffffffffffffffff], &(0x7f0000000a00)=[{0x3, 0x4, 0x1, 0x1}, {0x800, 0x3, 0x10}, {0x1, 0x1, 0x1, 0xb}, {0x3, 0x4, 0x1}, {0x1, 0x2, 0x3, 0x1}, {0x3, 0x4, 0xf, 0xc}, {0x2, 0x3, 0x1, 0xc}], 0x10, 0x7fff, @void, @value}, 0x94) 5.888572836s ago: executing program 1 (id=3915): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000080), 0x1c1341, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000400), 0x0, 0x0) close(r1) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$tipc(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$TIPC_CMD_ENABLE_BEARER(r2, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000680)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="010000000d0000000000010000000000000001410000001c001700000000000000006574683a73797a6b616c6c657230"], 0x38}}, 0x0) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000002280)={'syzkaller0\x00', @multicast}) writev(r0, &(0x7f0000000040)=[{0x0}, {&(0x7f00000001c0)="9c74dfbf", 0x4}], 0x2) 5.624161232s ago: executing program 0 (id=3916): r0 = socket(0x1f, 0x80000, 0x1) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x4001}, 0xfea3) sendmsg$nl_route(r0, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="180000001600156f0000"], 0x18}}, 0x0) 5.505454393s ago: executing program 0 (id=3917): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NFT_BATCH(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a03000000000000000000010000a26ddb6c0073797a30000000004c000000030a01010000000000000000010000000900030073797a300000000014000480080002400000000008000140000000000900010073797a30000000000a000700726f75749c80de0465000000140000001000010000000000000000000000000a5b8a457b5c8ae8f48abb4e52c4e862c71bb3349c5e6f53048459330b5019e1ffd54de6f0f4f5142bf920243259ad50e88e680f786f0cfdec4b"], 0x94}}, 0x0) r1 = socket$packet(0x11, 0x3, 0x300) r2 = socket$nl_route(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) sendmsg$nl_xfrm(0xffffffffffffffff, 0x0, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='blkio.bfq.io_serviced\x00', 0x26e1, 0x0) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000280)=@bpf_lsm={0x6, 0x3, &(0x7f00000003c0)=ANY=[@ANYBLOB="18000000003f000000000000000000f195"], &(0x7f0000000080)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1b, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x94) r5 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) r6 = bpf$MAP_CREATE(0x0, &(0x7f0000000680)=@base={0x15, 0x10, 0x2, 0x0, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x50) r7 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0x5, &(0x7f00000002c0)=ANY=[@ANYBLOB="1800000008000000000000005805000018100000", @ANYRES32=r6, @ANYBLOB="000000000000000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, @void, @value}, 0x90) close(r5) r8 = socket$can_raw(0x1d, 0x3, 0x1) bind$can_raw(r8, &(0x7f0000000080), 0x10) ioctl$ifreq_SIOCGIFINDEX_vcan(r8, 0x8933, &(0x7f0000000000)={'vxcan0\x00', 0x0}) setsockopt$CAN_RAW_FILTER(r8, 0x65, 0x1, 0x0, 0x0) bind$can_raw(r8, &(0x7f0000000100)={0x1d, r9}, 0x10) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000240)={r4, 0x8, 0x25, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x40) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000500)={r5, r7, 0x4, r4}, 0x10) r10 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r10, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000340)={0x50, 0x2, 0x6, 0x3, 0x0, 0x0, {}, [@IPSET_ATTR_DATA={0xc, 0x7, 0x0, 0x1, [@IPSET_ATTR_BUCKETSIZE={0x5, 0x15, 0xab}]}, @IPSET_ATTR_PROTOCOL={0x5, 0x1, 0x6}, @IPSET_ATTR_FAMILY={0x5, 0x5, 0x2}, @IPSET_ATTR_REVISION={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz1\x00'}, @IPSET_ATTR_TYPENAME={0xc, 0x3, 'hash:ip\x00'}]}, 0x50}}, 0x0) r11 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x14, 0x4, 0x4, 0x4, 0x0, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, @void, @value, @void, @value}, 0x48) bpf$MAP_UPDATE_ELEM(0x2, &(0x7f00000000c0)={r11, &(0x7f0000000140), &(0x7f0000000040)=@tcp6, 0x1000000}, 0x20) sendmsg$nl_route(r2, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=0x0, @ANYBLOB="01980000000000002000128008000100677265001400028008000700ac1414009900000000000000"], 0x40}, 0x1, 0x0, 0x0, 0x4010}, 0x0) sendto$packet(r1, 0x0, 0x0, 0x0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, 0x14) r12 = openat$cgroup_ro(0xffffffffffffff9c, 0x0, 0x7a44, 0x1700) ioctl$EXT4_IOC_GROUP_ADD(r12, 0x40086602, &(0x7f0000000000)={0xfff}) sendmsg$key(r12, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={0xfffffffffffffffe}}, 0x20000080) write$cgroup_subtree(r12, &(0x7f0000000100)={[{0x2d, 'blkio'}, {0x2d, 'rdma'}, {0x2d, 'perf_event'}, {0x2b, 'net_prio'}]}, 0x23) 2.824296806s ago: executing program 4 (id=3918): syz_init_net_socket$802154_raw(0x24, 0x4, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x3, 0x8, &(0x7f00000003c0)=ANY=[@ANYBLOB="620af8ff0c200021bfa100000000000007010000f8ffffffb702000003000000bd1200000000000085000000d0000000b70000000000000095000000000000003fba6a7d36d9b18ed812a2e2c49e8020a6f4e0e4a9446ca2b5f1cc1a100a9af698393aa0f3881f9c24aa56f15199fad0093c59d66b5ece9f36c70d0f010c5077da80fb982c1e9400c603146cea484a415b76966118b64f751a0f241b072e90080008002d75593a280000c93e64c227c95aa0b784625704f07a72c2918451ebdcf4cef7f9606056fe5c34664c0af9360a1f7a5e6b607130c89f18c0c1089d8b85880000c29c48b45ef4adf634be763288d01aa27ae8b09e13e79ab20b0b8ed8fb7a68af2ad0000000000000006f803c6468082089b302d7bff8f06f7f918d65eae391cb41336023cdcedb5e0125ebbcebddcf10cb2364149215108355ee570f8078be5cab389cd65e7133719acd97cfa107d40224edc5465a932b77e74e802a0d42bc6099ad23000000803a90bce6dc3a13871765df961c2ed3b1006ef6c1ff0900000000000010c63a949e8b7955394ffa82b8e942c89112f40cfd7c3a1d37a6ab87b1586602d985430cea0162ab3fcf4591c926abfb076719237c8d0e60b0eea24492a660583eecdbf5bcd3de3a83209da17a0faf60fd6ad9b97aa5fa68480366c9c6fd6fa5043aa3926b81e3b59c9f081d6a08000000ea2b1a52496dfcaf99431412fd134a996382a1a04d5bb924cfe5f3185418d60532be9c4d2ec7c32f2095e63c8cdc28f74d043ed8dba2f23b01a9aeb980aff9fa3a64709270c701db801f44cf945b7632f32030916f89c6dad7603f2ba2a790d62d6faec2fed44da4928b30142bdda5e6c5d50b83bae616b5054d1e7c13b1355d6f4a8245eaa4997da9c77af4c0eb97fca585ec6bf58351d599e9b61e8caab9c70764b0a8a7583c90b3433b809bdb9fbd48bc873495cbff8a41326eea31ae4e0f75057df3c9d13330ca006bce1a84521f14518c9b476fccbd6c712016219848624b87cec2dbe98223a0eb4fa39f6b5c02e6d6d90756ff57902a8f57010000009700ce0b4b8bc22941330000000000000000000300000000000000000000000010008bc0d955f2a83366b99711e6e8861c46495ba585a4b2d02edc3e28dd279a896249ed85b9806f0b6c4a000000002b43dcacc413b48dafb7a2c8cb482bac0ac502d9ba96ffffff7f00000000df73be83bb7d5ad883ef3b7cda42013d53046da21b40216e14ba2d6af8656bfff17addaedab25b30002abbba7fa725f38400be7c1f001b2cd317902f19e385be9e48dccff72943327d830689da6b53ffffffff631c7771429d1200000033ed846197fcff5e1c7c3d1d6e3a52872baef9753fffffffffffffe09fec2271fe010cd7bb2366fde4a59429738fcc917a57f94f6c453cea623cc5ee0c2a5ff870ce5dfd3467decb05cfd9fcd41df54cdbd9d10a64c108285e71b5565b1768ee58969c41595229df17bcad70fb4021428ce978275d5bc8955778567bc79e13b78249788f11f708008b75d4fe32b561d46ea3abe0fa4d30dc94ef241875f3b4b6ab7929a57affe7d7fa29822aea68a660e717a04becff0f719107000000000000002d7e927123d8ecbbc55bf404571be54c72d978cf2804107f0238abccd32368e57040906df0042e19000000000000002c06f815312e086dd022c074eb8a322fb0bf47c0a8d154b405c37feaf3dd95f6ef44cd1fe582786105c7df8be4877084d4173731efe895efc71f665c4d75cf2458e35d2c9062ece84c99e061887a20639b41c8c12ee86c50804042b3eac1f879b136345cf67ca3fb2b5e518a75f9e7d7101d5e186c489b3a06fb99e0aa7f23a054de2f4d92d6bd72ee2c9fdc75aaaf1e3e483b4ad055e4af403269b4a39ce40293947d9a631bcbf3583784acbda216550d7aec6b79e30cbd128f54c2d3335457ac0eaaa99bf0bdc14ae358c3b377327ac9ecc34f24c9ae153ec60ac0694da85bff9f5f4df9b3fdf242b985bf16b99c9cc0ad1857036f1a985f369191ae954febb3df464bfe0f773ee9afe72f32a2befb89d3777399f5874c553a2ebe9061fe86e669642e09bb6d163118e4cbe024fd452277c3887d6116c6cc9d8046c216c1f8a9778cb26e22a2a998de5eaeadea2a40da8daccf080842a486721737390cbf3a74cb2003efb9a101b51ab63e9600040000b8a8c9ae3d14f93100c2e0893862eef552fcde2981f48c482bde6e4a4304e50c349f4f9ecee27defd83871c5191e10096e7e60fc3541a2c905a1a95e9571bf38aebd15172f94e3245c582909e2a3bce109b6000000000000000000d6d5210d7560eb92d6a97a27602b81f7636df1535bef1497f90100000000000000abf9010000007740890200d627e87306703be8672dc84eeadba6a41891c170d1ab57075228a9f46ed9bd1f08fb8191bbab2dc51de3a61f0868afc4294859323e7a45319f18101288a0268893373750d10a3fc22dd704e4214de5946912d6c98cd1a9fbe1e7ef8c08acaf30235b920500d2eca55f74a23641f61f2d5b308cf0d031b0c7f0ced69b93e9960ff5f76062adae283d9756237badf4e7965bbe2777e808fcba821aa8e8c5c39609ff85000000000000c1fee30a3f7a85d1b29e58c77685efc0ceb1c8e5729c66018d169fc03aa188546b3ad2a182068e1e3a0e2505bc7f41019645466a31c72ad53bc19faa5401120000793ac48c1b539c75ab40743b00020000a1f68df75cf43f8ecc8d3726602111b40e761fd210a1920382f14d12ca3c3431ee97471c781d0d1280fb00818654a53b6df4b2c97cc1c98d85fda8f80fe908b65550b441233151122b41a8d73062197655b7f0469250a5989cef0e10773920ed3ccee42d2c3eb80159da5c002511e6eb93842054cfce2ac306cb6e472db3fd67a49b6855a694a8d359add43907003223a47a7fae4f3748d5a432825bc40a03aaef1c8488d86dc211dd2a3ba71e0f45492ef1f8b65ccb3dcd251a61b152d02c29ca0a3328fa7753a5cddea1acaae55ae8263fb284b7a6ab2a8826c1b948207c498cf4824ab1ea3225c380fac12f8205d182f8999e0311da5b8378bc841e1787e3a8128dda381a26cb2b365702ff8a27831375b2ddaa2f56e21169f7ca4fd9655ccd4a584acd244e965a0afedaff7c415ff682a4044b3381cc2df28278c9a6824c52048a7cfabda294925cc0956bffa8e950ff5e49f41ae600d830207bf728cd9807933c3c16d80bbea611a18becc2dc38ca0a6f5740f340b76edcd1f539bd43007231dcef58c7b88b5aeedaf9626cb51ce1737c10ab37d4f98a934b0f900e0eb639878a1200629f5503cf679154d27681d7a3744cbcd42af59407c9c8e39c5271868917954e604352ba26171d004f1cb2976fab3fa19c7d3ef9678bff79f5155524f061378f94fb453786c3a6f78b10d383b49e31d1568bd43ee34ce6e6be235aa6207285665c2fba773671da41959f51610963b48930658e2d6125a26085001345b0473240b7e5e91811312c43663e76f711d7219ecdec75c7ea1cf0f8f8fff40247d59bbde2ebb8659197e0f37a71be1b12a182ed7de3acba28561a04b807f7a4647e2ea6d8fb92541d07c3d5e4ba077d3cad9f8ba1919592014c00c8eccb2ca5d48ba7b1c3fb185a4bb79700cf51f818b0c701c8de47d12281a67bdaf4b0c50bee9e8f5936250df2e15c1172e7ea6619f7db330700d1e9e42a035e6fd532f61fbfed9c4a7124a1e38eee50a6bbcd1d4e3f68c3f27dd9a70f1a7c6046237ddfb0b26e197322226367d998010458cd4df10af249ce717f6f45e5176e0ddae3054d7289d4e13ab0912703ee39ce264572b89194fdf7acecc35cf8309d4b680a08eed367dad855fce210f1a7c7222dd360eafb4bef7d58bf83362930af6e3f3f851abdc0003bdf9401b533019e90feb069189100007a82df8d9b5f44ebf9355e7b1b01c9470608d4f306d21004730396a4d6c6d46e1ffac97aa93c36123532a36186575266be4981c847160079421d0137801e553069f8d025c40f287378810defc7f2ed4e15f6af17b21153394f8bcfa6a23a77c8d61c9bbc127a57b8d631f36558d9093dee08bc53d97a8003363421738650a26c8fd87b13026799caf58e59951b125e7f161ca34e2c0dd65a23d01a3cb191e743de07247c7f993cf01166fa2ac1ba02f60550e63a7f50422e478c6b5d87f9bd0567a279a9d85a380db25c43bd0529ad783b9d64aaac1b793afb44b7126e17d2b7c0d6be650de7eeef3f3605af344015d03c3e7819145cb9fe1978c98bf9cf10773db59505ae33708c728844c872dfd2cb0b29754f928c59306ce105ca18cb72f0944d0e4fea0a0abd0285bdaf1b000000c089d640c2facb0d1e6243873ac4b1e1068c45c715b68effb7d58d1f9e726dbf6bd910ca4ce0e075658ede42192cf393a50dcc197b03402fed75083628e5dd38213d353b9049e71f037064b05e73ec00c710f1ffc5737d397d555d1cf8859cc05bea8dc3c6a5b3b6fa1c81707479db1833d593a271253aa11efdb36b74784f2fc286814848e92d8ee541bc179813297a0a4cc3c8f80c28701185bea091f32475e859479b734727afc110e1abcff460172fd1b42e3c0e2a4bf94a060069000010000087c7572a1e7596f89e5c3d5e70640c90815f77b7b13d0000000085a1e1e84900000000000000000000000000b422fc160a458ee5a91a2471e6e56fdabec6c73ce8983fc68f0b7cdcdde632e6f54a07620e8aa116ce9e84fc3cd5e8288a333dcebb233da9186796995ba69487d8f77d2f8800f02d690fc70a08b231cad1bdcf3740a95d4dd1cfe0f417f275493cf33b19ffff93dfdaf7eb00b8ad87cdf7c21bab5af8e2bac54ee5597e6508c1158124a538c36f9bb11fea7d8b8c7e954b1bc7811654a6636b33f271d0923e9ecd1b724b8feffadfc23c07000000f0785fb722f346d6a5dffe1884d4d0cd8f00000092c85ed44db68ab800000000000000406e6ed9b219ad07125381087298e75965d1cc5932ddf9e66351ba332a34bee3e3d562c914c629933f0b8724cf680889ade72558d191d96ee1b84bb64b14aebc6b5194c55dd6890c69a718f9018586c5131c8dc8e0379bafda1a0fd2997ff115215ce23dca8db7236c1554cdaaadcce2f31834c1bd1908d8e1b361034db56be76acb7654a195bc3e98df3a5dffd5b07838a3ef7da3433110e37f7c7cb7f3800de7f99abf910d6949e062747a9c87dcfcc716d6a9c0ec53b9cffe3cfd1df69a76f373d7f997edb9b80bdea1a99c2a6fbb25e035deadaadd7917ebfedd6304a19491769476208684e343f86b4d55a7dbbb07283cb1e35a139d24ebc5b4f8e35a82d3a7f84cb1e02a5a92b53567088be0b1ca023ccd518c0e0715b1c8760801a419ebd2e26440ff7493019bdb655cc88d72d6d7b6bca5a2e19b63ec52fcc49a729f11ab377f7132c543d29646a9378eea0761b7ed9d2172e33ed87c6513c843b180cc00000000006bedf2ed716ca43a941119b96d82b26d9061de240d85ec2cfa462bd52104489bb7a7548d7cc53627031e909c69cb824233975a1ea645de63522407c3a240a37e946f30ebf075ea97846a0a8d2286f3f446b1b99ab83a12ddf8a1c06294eadc3eb3e339591afd5c00000000000000000000000000000000000000000000000000579dad8347a3d16976bb7483840b32db0158fb6c809349333325a7866ca5d3133e33ef1a183cefdb65a79fa71800988c8445029e024822dbcfcab49c3a0aec9bd43e6e14078b260700d849a2aa14c9b593f6dcb1de334c065ecfd65031606e55949c185bcda9fde4f9b46a76b8a24bbcd31b22373eb0473248150cd179405ee1af1183b0c0ce3483dc1d9bf732b0751b78fb211d6706b55960c6431afbc02b3c7e08086573939290bb9e590a3875f02a828bf209d0ed9829dec16ab67a4f59a504e09f55ab82bbd405087a17a229a149c53ee9145500db213cb36489a10957739e481a756e65bde579bbbfb404213f661eeaaffacbcfbfd60b1a715c366da2b37ac7e9e3033f8ec04db1c2412e02ccd0617d9fb646c4897750d068c936c3558a94b05d7c65c0d458c0d70d0aa864bc1e324d3f69b1b4061627da875a4b5c2668ab0990623fe6f3b54cd1c79da4baf256f88750c18486330589473e267fa44e220cf40db662b570c2a2fbba9a34a3dd7bbd8368fe506daa62b45797d4b397905a69e58eb436c08cc78963197adb1b16ad83a1a9b4"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x0, @void, @value}, 0x48) bpf$BPF_PROG_DETACH(0x1c, &(0x7f0000000000)={@cgroup=r0, r0, 0x2e, 0x0, 0x0, @void, @value}, 0x20) (async) bpf$LINK_GET_NEXT_ID(0x1f, &(0x7f0000000180)={0x0, 0x0}, 0x0) r2 = bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=r1, 0x4) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000340)={r2, r0, 0x4, r0}, 0x10) (async) bpf$ITER_CREATE(0x21, &(0x7f0000001800)={r2}, 0x8) (async) r3 = bpf$ITER_CREATE(0x21, &(0x7f0000000000), 0x8) sendmsg$NFT_BATCH(r3, &(0x7f00000017c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000001780)={&(0x7f0000001840)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x2}}, [@NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x4}, @NFT_OBJECT_CT_EXPECT=@NFTA_OBJ_NAME={0x9, 0x2, 'syz2\x00'}}, @NFT_MSG_NEWSETELEM={0x1c, 0xc, 0xa, 0x101, 0x0, 0x0, {0xa, 0x0, 0x1}, [@NFTA_SET_ELEM_LIST_SET_ID={0x8, 0x4, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x3}, [@NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}, @NFTA_RULE_ID={0x8, 0x9, 0x1, 0x0, 0x1}, @NFTA_RULE_POSITION_ID={0x8, 0xa, 0x1, 0x0, 0x3}]}, @NFT_MSG_NEWSETELEM={0x20, 0xc, 0xa, 0x3, 0x0, 0x0, {0x1, 0x0, 0x8}, [@NFTA_SET_ELEM_LIST_SET={0x9, 0x2, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x1590, 0x9, 0xa, 0x201, 0x0, 0x0, {0xa, 0x0, 0x9}, [@NFTA_SET_TIMEOUT={0xc, 0xb, 0x1, 0x0, 0x8}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_USERDATA={0xf4, 0xd, 0x1, 0x0, "a1b12f2f213628e5785325aa0c72284957bd5e091fb224e5e2d70e46ef719a8ee0cb81fd9d705cae5df844f6be2ee2b127809f856e54155f43a076a5213f4d8a1a1c01b4fa5b1f2185c1a6d3a888471762e77200b068269ba88ddd70ef1de1e8fd81a0406740d2b68bf2ab9fa12c3cd3c3cbd1880dc9dcd6972ca9cc88a0784a7a95af44f81cfcfa41372ed6138aa86462a7fb50250e3025e3ae312af6b55db745d53c4278f169412ddd1be1b3c70298c62c788a975bd07a2879ce60fb21229a7da9e9a7d516375d4d1c0a0e50e260f8424124110bca3d1b961a0405e5186f02b2904b8fd17081c176bba859f1ba90ab"}, @NFTA_SET_EXPRESSIONS={0x1398, 0x12, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @notrack={{0xc}, @void}}, {0x1384, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x1370, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_IMMEDIATE_DATA={0x10c, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0xa1, 0x1, "5bd414465f30f4b2f11f200964581273f88f04b24fb91df32aad4bd42f9184fd6b241f4a3c1a2a9e1577036f332b39e5e3c53a36b3b678cf12529dd14f97a981c5ffd57c5e052c9bff6fc92d48da80ecbe75304c548f9b6ac835d05d6e84794dd83d0deb8d2960f2eee8390a7ccbb586ef7a3b0e4fdd52995796950343deddefb9aa7b6a51f6500d676dc6b66689a05d09696151ca9a936e74a2f62e5b"}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}]}]}, @NFTA_IMMEDIATE_DATA={0x54, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x50, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}]}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x11}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x17}, @NFTA_IMMEDIATE_DATA={0x11e4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}]}, @NFTA_DATA_VALUE={0x79, 0x1, "820f90f38589e48c969173938f457a0db4024352e0ccf9f1a032769eec9a15bacb53bfc71896a0d7d5e6660b385b392557defe130153d3d2e82e6891b6983a930d60ecdee65e1a9620132b97cf8a5b8a71aba146442f2eefcf654638712fbf24588e6b01ca49f8d88c06abeb724589a60c35aa4b17"}, @NFTA_DATA_VALUE={0xdd, 0x1, "c8c8af88e6d207868ba78bab288dc4fc733552f1a826388fa17793cdaea0dc73b6299e414fb5e02238d2379e2637d7d38bf40d26fa0e9a48f2011661de4d312ccf16798b8daf7e71b27fdb90558f50ca6dffa127891c35aa5225b0ad3964cddc98e293fdad99523e94a61cd3f9694b6c71f9bee84ab07fe08ea7d267c95a8a1edd36196e5e9b3c0f4fb6fbd9f7105f0427f83bdc8f584749c7a63c01b49fe82f45e327effbd3b3d8c0b1e6f895f10ffca4e6c71a017941840b1ba8320aa00bb6c37abcd587fd94ebeaa02bb3c6c0d168720d824ec183879bfa"}, @NFTA_DATA_VERDICT={0x30, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}]}, @NFTA_DATA_VALUE={0x1004, 0x1, "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"}, @NFTA_DATA_VERDICT={0xc, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}]}]}}}]}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x3}, @NFTA_SET_EXPRESSIONS={0x7c, 0x12, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0xb}, @NFTA_RT_KEY={0x8, 0x2, 0x1, 0x0, 0x2}, @NFTA_RT_KEY={0x8}]}}}, {0x28, 0x1, 0x0, 0x1, @dup_ipv4={{0x8}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x2}, @NFTA_DUP_SREG_ADDR={0x8, 0x1, 0x1, 0x0, 0x16}, @NFTA_DUP_SREG_DEV={0x8, 0x2, 0x1, 0x0, 0x10}]}}}, {0x14, 0x1, 0x0, 0x1, @connlimit={{0xe}, @void}}, {0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x0, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x0, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xfffffffffffffffe}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz2\x00'}]}, @NFTA_DATA_VERDICT={0x0, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x0, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x0, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x0, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x0, 0x1, "4265f74d56bb5b54908f047a2f746995e5355d9fc1d58b1fae83f10804ab7a869f856d3e9683ccafdf796ccd80d843cc5bfa519e4be55939c42fabff60c51edf52f7df2f9baf5242613cb3facbde64ad2e68eb53925d516d4a1b886b8e6d2e0743f11842dd6758ccf3be1d2d2d46baef056a8c29ad1f385c400f6e9be87cb9a2c2a15030398b57f6be6637f22167e847de647bf5134c88b2acc5ab4e22fa95413dbd9cbaca71aed439c96050f7a364f5cf342b"}, @NFTA_DATA_VALUE={0x0, 0x1, "e6758bbd0650507464a6f789748ed553856d583579ee4c9ef0ba19cabbfeaf104c9d7935d6ac"}]}, @NFTA_IMMEDIATE_DREG={0x0, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_SET_EXPRESSIONS={0x38, 0x12, 0x0, 0x1, [{0x34, 0x1, 0x0, 0x1, @queue={{0xa}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0xfff}, @NFTA_QUEUE_SREG_QNUM={0x8, 0x4, 0x1, 0x0, 0x17}, @NFTA_QUEUE_NUM={0x6, 0x1, 0x1, 0x0, 0x101}, @NFTA_QUEUE_TOTAL={0x6, 0x2, 0x1, 0x0, 0x5}]}}}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x2}, @NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @queue={{0xa}, @void}}]}, @NFT_MSG_DELRULE={0x2c, 0x8, 0xa, 0x801, 0x0, 0x0, {0x0, 0x0, 0x5}, [@NFTA_RULE_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_RULE_POSITION={0xc, 0x6, 0x1, 0x0, 0x1}]}, @NFT_MSG_DELCHAIN={0x34, 0x5, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x3}, [@NFTA_CHAIN_COUNTERS={0x10, 0x8, 0x0, 0x1, [@NFTA_COUNTER_BYTES={0xc, 0x1, 0x1, 0x0, 0x701a400b}]}, @NFTA_CHAIN_USERDATA={0x7, 0xc, "5e111f"}, @NFTA_CHAIN_FLAGS={0xfffffffffffffe4c, 0xa, 0x1, 0x0, 0x4}]}, @NFT_MSG_DELTABLE={0x2c, 0x2, 0xa, 0x201, 0x0, 0x0, {0x4, 0x0, 0x8}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}, @NFTA_TABLE_NAME={0x9, 0x1, 'syz1\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x7}}}, 0x16cc}, 0x1, 0x0, 0x0, 0x8000}, 0x0) 109.353243ms ago: executing program 0 (id=3919): r0 = socket(0x10, 0x803, 0x0) r1 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r1, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r2 = socket(0x400000000010, 0x3, 0x0) r3 = socket$unix(0x1, 0x1, 0x0) r4 = socket$kcm(0x29, 0x5, 0x0) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='blkio.bfq.io_queued\x00', 0x275a, 0x0) writev(r4, &(0x7f0000000440)=[{&(0x7f0000000040)="fa35707563", 0x5}], 0x1) write$cgroup_int(r5, &(0x7f0000000000), 0xffffff6a) sendfile(r4, r5, 0x0, 0xffffffff000) ioctl$sock_SIOCGIFINDEX(r3, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r6, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xffe0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x1}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=@newtfilter={0x4c, 0x2c, 0xd2b, 0x0, 0x2, {0x0, 0x0, 0x0, r6, {0x6}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_fw={{0x7}, {0x20, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x9, 0x6}}, @TCA_FW_INDEV={0x14, 0x3, 'macsec0\x00'}]}}]}, 0x4c}}, 0x4044040) 0s ago: executing program 1 (id=3920): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r0, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) (async) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(r1, &(0x7f0000000280)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) sendto$inet6(r1, &(0x7f00000002c0)="9e", 0x1a000, 0x0, &(0x7f0000000200)={0xa, 0x4e23, 0x0, @loopback}, 0x1c) (async) r2 = socket$xdp(0x2c, 0x3, 0x0) bind$xdp(r2, &(0x7f0000000100)={0x2c, 0x20}, 0x10) (async) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r1, 0x84, 0x10, &(0x7f00000000c0)=@sack_info={0x0, 0x8, 0xffff}, 0xc) (async) setsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(r1, 0x84, 0x72, &(0x7f0000000300)={0x0, 0x0, 0x20}, 0xc) r3 = socket$kcm(0x11, 0x3, 0x0) sendmsg$kcm(r3, 0x0, 0x9cdc2384056b48b8) (async) sendmsg$inet6(r1, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000080)=[{&(0x7f0000000180)='h', 0x34000}], 0x1}, 0x0) (async) writev(r1, &(0x7f0000000100)=[{&(0x7f0000000040)="2c5e2aa7c06d731d9213fc52e1d8959b6a91c3b0680939009de142e1", 0x1c}], 0x1) (async) bind$inet(r0, &(0x7f0000000080)={0x2, 0x4e21, @broadcast}, 0x10) (async) connect$inet(r0, &(0x7f0000000180)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_TCP_REPAIR_OPTIONS(r0, 0x6, 0x16, &(0x7f0000000240)=[@mss, @sack_perm, @timestamp, @mss={0x2, 0x1}, @window={0x3, 0x0, 0xfffc}, @window={0x3, 0x0, 0x3ff}, @timestamp, @timestamp], 0x8) (async) setsockopt$inet_tcp_TCP_CONGESTION(r0, 0x6, 0xd, &(0x7f0000000040)='nv\x00', 0x3) (async) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f00000001c0), 0xc7) r4 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NLBL_UNLABEL_C_STATICADDDEF(r4, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000280)={0x14, 0x0, 0x4}, 0x14}}, 0x0) (async) syz_genetlink_get_family_id$nfc(&(0x7f00000003c0), r4) (async) r5 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000fc0), r4) sendmsg$NL802154_CMD_SET_TX_POWER(r4, &(0x7f0000001080)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000001c0)={0x1c, r5, 0x926fdb2c68a18847, 0x0, 0x0, {0x12}, [@NL802154_ATTR_WPAN_PHY={0x8, 0x1, 0x2}]}, 0x1c}}, 0x0) sendto$inet(r0, &(0x7f0000000000), 0xffffffffffffff94, 0x0, 0x0, 0x0) (async) recvfrom$inet(r0, &(0x7f0000000080)=""/8, 0xfffffffffffffd0b, 0x700, 0x0, 0xfffffffffffffd25) kernel console output (not intermixed with test programs): g attributes in process `syz.0.3267'. [ 347.067364][T17210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 347.089569][T17210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.130888][T17210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 347.135590][T17273] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3268'. [ 347.156183][T17267] netlink: 'syz.2.3269': attribute type 29 has an invalid length. [ 347.165673][T17267] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3269'. [ 347.179004][T17243] wlan0 speed is unknown, defaulting to 1000 [ 347.193010][T17210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 347.215016][T17210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 347.233219][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 347.244244][T17210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 347.255119][ T5846] Bluetooth: hci4: command tx timeout [ 347.344495][T17243] syzkaller0 speed is unknown, defaulting to 1000 [ 347.550467][T17210] hsr_slave_0: entered promiscuous mode [ 347.574414][T17210] hsr_slave_1: entered promiscuous mode [ 347.589925][T17284] SET target dimension over the limit! [ 347.713301][ T5846] Bluetooth: hci1: command tx timeout [ 347.992160][ T9799] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.025172][ T9799] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.052775][T17300] netlink: 'syz.4.3274': attribute type 4 has an invalid length. [ 348.179048][ T9799] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.190284][ T9799] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.274623][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 348.291446][ T9799] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.304214][ T9799] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.346094][T17243] chnl_net:caif_netlink_parms(): no params data found [ 348.401598][ T9799] netdevsim netdevsim1 netdevsim0 (unregistering): left promiscuous mode [ 348.412988][ T9799] netdevsim netdevsim1 netdevsim0 (unregistering): left allmulticast mode [ 348.438862][ T9799] team0: Port device netdevsim0 removed [ 348.455293][ T9799] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 348.472082][ T9799] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 348.679925][T17243] bridge0: port 1(bridge_slave_0) entered blocking state [ 348.701676][T17243] bridge0: port 1(bridge_slave_0) entered disabled state [ 348.732187][T17243] bridge_slave_0: entered allmulticast mode [ 348.740214][T17243] bridge_slave_0: entered promiscuous mode [ 348.765418][T17243] bridge0: port 2(bridge_slave_1) entered blocking state [ 348.773504][T17243] bridge0: port 2(bridge_slave_1) entered disabled state [ 348.781307][T17243] bridge_slave_1: entered allmulticast mode [ 348.790045][T17243] bridge_slave_1: entered promiscuous mode [ 348.887848][T17243] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 348.946168][T17243] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 349.103701][ T9799] team0: left allmulticast mode [ 349.108750][ T9799] team_slave_0: left allmulticast mode [ 349.121370][ T9799] team_slave_1: left allmulticast mode [ 349.129978][ T9799] team0: left promiscuous mode [ 349.162330][ T9799] team_slave_0: left promiscuous mode [ 349.182824][ T9799] team_slave_1: left promiscuous mode [ 349.190331][ T9799] bridge0: port 3(team0) entered disabled state [ 349.220769][ T9799] bridge_slave_1: left allmulticast mode [ 349.229841][ T9799] bridge_slave_1: left promiscuous mode [ 349.238857][ T9799] bridge0: port 2(bridge_slave_1) entered disabled state [ 349.259059][ T9799] bridge_slave_0: left allmulticast mode [ 349.271560][ T9799] bridge0: port 1(bridge_slave_0) entered disabled state [ 349.313312][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 349.322180][ T5846] Bluetooth: hci4: command tx timeout [ 349.605863][ T9799] erspan0 (unregistering): left promiscuous mode [ 349.643874][ T9799] gretap0 (unregistering): left promiscuous mode [ 349.672821][ T9799] bond4 (unregistering): (slave gretap2): Releasing active interface [ 349.735343][ T9799] dvmrp1 (unregistering): left allmulticast mode [ 349.793543][ T5846] Bluetooth: hci1: command tx timeout [ 350.351727][ T9799] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 350.353179][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 350.371561][ T9799] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 350.382317][ T9799] bond0 (unregistering): Released all slaves [ 350.569828][ T9799] bond1 (unregistering): Released all slaves [ 350.749372][ T9799] bond2 (unregistering): Released all slaves [ 350.762287][ T9799] bond3 (unregistering): Released all slaves [ 350.943923][ T9799] bond4 (unregistering): Released all slaves [ 350.957543][ T9799] bond5 (unregistering): Released all slaves [ 350.982502][ T9799] bond6 (unregistering): Released all slaves [ 351.006658][T17243] team0: Port device team_slave_0 added [ 351.050397][T17243] team0: Port device team_slave_1 added [ 351.229096][T17342] openvswitch: netlink: Flow key attribute not present in set flow. [ 351.239510][T17243] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 351.253860][T17243] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.315748][T17243] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 351.330971][ T9799] IPVS: stopping backup sync thread 16885 ... [ 351.394284][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 351.409508][ T5846] Bluetooth: hci4: command tx timeout [ 351.440019][T17345] veth0: entered promiscuous mode [ 351.457004][T17243] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 351.483821][T17243] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 351.511360][T17243] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 351.581585][T17353] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3287'. [ 351.581791][T17350] veth0: left promiscuous mode [ 351.689084][T17358] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3287'. [ 351.690395][T17353] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3287'. [ 351.731967][T17353] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3287'. [ 351.782338][T17243] hsr_slave_0: entered promiscuous mode [ 351.790693][T17243] hsr_slave_1: entered promiscuous mode [ 351.804667][ T5846] block nbd0: Receive control failed (result -107) [ 351.804735][T17243] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 351.828332][T17243] Cannot create hsr debugfs directory [ 351.873716][ T5846] Bluetooth: hci1: command tx timeout [ 352.230635][T17210] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 352.269477][T17210] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 352.312398][T17210] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 352.374629][T17210] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 352.433174][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 352.560125][T17210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 352.604763][T17210] 8021q: adding VLAN 0 to HW filter on device team0 [ 352.617919][ T1123] bridge0: port 1(bridge_slave_0) entered blocking state [ 352.625545][ T1123] bridge0: port 1(bridge_slave_0) entered forwarding state [ 352.656212][ T9812] bridge0: port 2(bridge_slave_1) entered blocking state [ 352.663468][ T9812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 352.821128][T17396] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3299'. [ 353.059656][T17243] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 353.088420][T17243] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 353.111630][T17243] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 353.164591][T17243] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 353.200850][T17210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 353.204680][T17411] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3304'. [ 353.319987][T17210] veth0_vlan: entered promiscuous mode [ 353.413910][T17210] veth1_vlan: entered promiscuous mode [ 353.473232][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 353.480385][ T5837] Bluetooth: hci4: command tx timeout [ 353.598069][T17243] 8021q: adding VLAN 0 to HW filter on device bond0 [ 353.617500][T17210] veth0_macvtap: entered promiscuous mode [ 353.649614][T17210] veth1_macvtap: entered promiscuous mode [ 353.675273][T17243] 8021q: adding VLAN 0 to HW filter on device team0 [ 353.719695][ T9819] bridge0: port 1(bridge_slave_0) entered blocking state [ 353.727014][ T9819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 353.776301][T17210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 353.787485][T17210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.801440][T17210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 353.819302][ T9819] bridge0: port 2(bridge_slave_1) entered blocking state [ 353.826567][ T9819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 353.855497][T17210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 353.870434][T17210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 353.882471][T17210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 353.964655][T17210] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.003298][T17210] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.012101][T17210] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.053403][T17210] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 354.279242][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.307955][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.375660][T17450] x_tables: duplicate underflow at hook 2 [ 354.394516][T17445] sysfs: cannot create duplicate filename '/class/ieee80211/¯HcUØîÑË•‚Ž¹+ÕuµŽê!Þ÷œ8¦°7JÙÊVú?zlI胆Gx!§X˜çÚ|D#åk!' [ 354.410100][T17445] CPU: 0 UID: 0 PID: 17445 Comm: syz.4.3316 Not tainted 6.14.0-rc1-syzkaller-00126-g44ce3511c21c #0 [ 354.410133][T17445] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 354.410152][T17445] Call Trace: [ 354.410159][T17445] [ 354.410170][T17445] dump_stack_lvl+0x241/0x360 [ 354.410204][T17445] ? __pfx_dump_stack_lvl+0x10/0x10 [ 354.410228][T17445] ? __pfx__printk+0x10/0x10 [ 354.410269][T17445] ? __kmalloc_cache_noprof+0x243/0x390 [ 354.410294][T17445] ? sysfs_warn_dup+0x51/0xa0 [ 354.410331][T17445] sysfs_warn_dup+0x8e/0xa0 [ 354.410362][T17445] sysfs_do_create_link_sd+0xbe/0x110 [ 354.410398][T17445] device_add_class_symlinks+0x1c5/0x250 [ 354.410425][T17445] device_add+0x553/0xbf0 [ 354.410453][T17445] wiphy_register+0x1a58/0x27b0 [ 354.410496][T17445] ? __pfx_wiphy_register+0x10/0x10 [ 354.410520][T17445] ? minstrel_ht_alloc+0x72b/0x860 [ 354.410555][T17445] ? ieee80211_init_rate_ctrl_alg+0x5a2/0x620 [ 354.410589][T17445] ieee80211_register_hw+0x354e/0x4240 [ 354.410633][T17445] ? ieee80211_register_hw+0x15b1/0x4240 [ 354.410671][T17445] ? __pfx_ieee80211_register_hw+0x10/0x10 [ 354.410720][T17445] ? __asan_memset+0x23/0x50 [ 354.410748][T17445] ? __hrtimer_init+0x170/0x250 [ 354.410786][T17445] mac80211_hwsim_new_radio+0x2a9f/0x4aa0 [ 354.410851][T17445] ? __pfx_mac80211_hwsim_new_radio+0x10/0x10 [ 354.410882][T17445] ? kstrndup+0x5c/0xb0 [ 354.410907][T17445] ? __asan_memcpy+0x40/0x70 [ 354.410938][T17445] hwsim_new_radio_nl+0xece/0x2290 [ 354.410984][T17445] ? __pfx___nla_validate_parse+0x10/0x10 [ 354.411025][T17445] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 354.411095][T17445] ? genl_family_rcv_msg_attrs_parse+0x1d1/0x290 [ 354.411136][T17445] genl_rcv_msg+0xb14/0xec0 [ 354.411174][T17445] ? __pfx_genl_rcv_msg+0x10/0x10 [ 354.411236][T17445] ? __pfx_lock_acquire+0x10/0x10 [ 354.411266][T17445] ? __pfx_hwsim_new_radio_nl+0x10/0x10 [ 354.411300][T17445] ? __pfx___might_resched+0x10/0x10 [ 354.411338][T17445] netlink_rcv_skb+0x1e3/0x430 [ 354.411374][T17445] ? __pfx_genl_rcv_msg+0x10/0x10 [ 354.411404][T17445] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 354.411473][T17445] genl_rcv+0x28/0x40 [ 354.411497][T17445] netlink_unicast+0x7f6/0x990 [ 354.411540][T17445] ? __pfx_netlink_unicast+0x10/0x10 [ 354.411569][T17445] ? __virt_addr_valid+0x45f/0x530 [ 354.411603][T17445] ? __phys_addr_symbol+0x2f/0x70 [ 354.411634][T17445] ? __check_object_size+0x47a/0x730 [ 354.411662][T17445] netlink_sendmsg+0x8e4/0xcb0 [ 354.411707][T17445] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.411736][T17445] ? aa_sock_msg_perm+0x91/0x160 [ 354.411773][T17445] ? __pfx_netlink_sendmsg+0x10/0x10 [ 354.411794][T17445] __sock_sendmsg+0x221/0x270 [ 354.411825][T17445] ____sys_sendmsg+0x52a/0x7e0 [ 354.411859][T17445] ? __pfx_____sys_sendmsg+0x10/0x10 [ 354.411879][T17445] ? __fget_files+0x2a/0x410 [ 354.411907][T17445] ? __fget_files+0x2a/0x410 [ 354.411942][T17445] __sys_sendmsg+0x269/0x350 [ 354.411963][T17445] ? __pfx_futex_wake+0x10/0x10 [ 354.411997][T17445] ? __pfx___sys_sendmsg+0x10/0x10 [ 354.412071][T17445] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 354.412104][T17445] ? do_syscall_64+0x100/0x230 [ 354.412139][T17445] ? do_syscall_64+0xb6/0x230 [ 354.412173][T17445] do_syscall_64+0xf3/0x230 [ 354.412203][T17445] ? clear_bhb_loop+0x35/0x90 [ 354.412237][T17445] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 354.412265][T17445] RIP: 0033:0x7f461938cde9 [ 354.412283][T17445] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 354.412302][T17445] RSP: 002b:00007f461a14f038 EFLAGS: 00000246 ORIG_RAX: 000000000000002e [ 354.412325][T17445] RAX: ffffffffffffffda RBX: 00007f46195a5fa0 RCX: 00007f461938cde9 [ 354.412341][T17445] RDX: 0000000020000094 RSI: 0000400000000140 RDI: 0000000000000004 [ 354.412355][T17445] RBP: 00007f461940e2a0 R08: 0000000000000000 R09: 0000000000000000 [ 354.412369][T17445] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000000 [ 354.412382][T17445] R13: 0000000000000000 R14: 00007f46195a5fa0 R15: 00007fff9325de08 [ 354.412416][T17445] [ 354.832988][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 354.897824][ T9812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 354.907991][ T9812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 354.915596][T17243] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 354.993028][T17243] veth0_vlan: entered promiscuous mode [ 355.007503][T17243] veth1_vlan: entered promiscuous mode [ 355.038389][T17243] veth0_macvtap: entered promiscuous mode [ 355.049287][T17243] veth1_macvtap: entered promiscuous mode [ 355.076495][T17243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.087343][T17243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.097846][T17243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 355.108791][T17243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.122769][T17243] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 355.202914][T17243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.226323][T17459] netlink: 44 bytes leftover after parsing attributes in process `syz.4.3320'. [ 355.230358][T17243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.247136][T17460] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3320'. [ 355.266015][T17243] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 355.289844][T17243] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 355.318781][T17466] netlink: 188 bytes leftover after parsing attributes in process `syz.0.3321'. [ 355.335264][T17466] netlink: 'syz.0.3321': attribute type 1 has an invalid length. [ 355.347098][T17243] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 355.437346][T17460] batadv0 (unregistering): left promiscuous mode [ 355.468379][T17243] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.484837][T17243] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.506362][T17243] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.525054][T17243] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 355.526256][T17475] netlink: 44 bytes leftover after parsing attributes in process `syz.0.3323'. [ 355.561019][ T5837] Bluetooth: hci4: command 0x0405 tx timeout [ 355.826197][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.839013][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 355.873176][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 355.948124][ T9817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 355.983692][ T9817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 356.434202][T17517] netlink: 'syz.4.3333': attribute type 1 has an invalid length. [ 356.442054][T17517] netlink: 'syz.4.3333': attribute type 2 has an invalid length. [ 356.462877][T17519] x_tables: duplicate underflow at hook 3 [ 356.590435][T17526] tipc: Started in network mode [ 356.604763][T17526] tipc: Node identity dedeae22cbd, cluster identity 4711 [ 356.611990][T17526] tipc: Enabled bearer , priority 0 [ 356.656587][T17525] tipc: Disabling bearer [ 356.913527][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 357.366610][ T5837] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 357.378585][ T5837] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 357.390356][ T5837] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 357.402067][ T5837] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 357.410782][ T5837] Bluetooth: hci0: unexpected cc 0x0c25 length: 249 > 3 [ 357.427635][ T5837] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 357.462177][T17548] syzkaller0 speed is unknown, defaulting to 1000 [ 357.576895][T17548] chnl_net:caif_netlink_parms(): no params data found [ 357.650870][T17548] bridge0: port 1(bridge_slave_0) entered blocking state [ 357.658829][T17548] bridge0: port 1(bridge_slave_0) entered disabled state [ 357.667094][T17548] bridge_slave_0: entered allmulticast mode [ 357.675205][T17548] bridge_slave_0: entered promiscuous mode [ 357.684455][T17548] bridge0: port 2(bridge_slave_1) entered blocking state [ 357.691852][T17548] bridge0: port 2(bridge_slave_1) entered disabled state [ 357.699948][T17548] bridge_slave_1: entered allmulticast mode [ 357.707832][T17548] bridge_slave_1: entered promiscuous mode [ 357.742410][T17548] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 357.756394][T17548] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 357.796580][T17548] team0: Port device team_slave_0 added [ 357.811970][T17548] team0: Port device team_slave_1 added [ 357.840634][T17548] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 357.848793][T17548] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.877976][T17548] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 357.896639][T17548] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 357.905248][T17548] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 357.931691][T17548] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 357.953232][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 357.977096][T17548] hsr_slave_0: entered promiscuous mode [ 357.989433][T17548] hsr_slave_1: entered promiscuous mode [ 357.997665][T17548] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 358.006264][T17548] Cannot create hsr debugfs directory [ 358.108381][T17548] netdevsim netdevsim4 eth3 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 358.119840][T17548] netdevsim netdevsim4 eth3 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 358.204494][T17548] netdevsim netdevsim4 eth2 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 358.215132][T17548] netdevsim netdevsim4 eth2 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 358.282487][T17548] netdevsim netdevsim4 eth1 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 358.292823][T17548] netdevsim netdevsim4 eth1 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 358.339692][T17548] netdevsim netdevsim4 eth0 (unregistering): unset [1, 0] type 2 family 0 port 20003 - 0 [ 358.350005][T17548] netdevsim netdevsim4 eth0 (unregistering): unset [1, 1] type 2 family 0 port 6081 - 0 [ 358.470175][T17548] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 358.516567][T17548] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 358.553713][T17548] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 358.571011][T17561] netlink: 'syz.1.3345': attribute type 1 has an invalid length. [ 358.595659][T17548] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 358.805193][T17569] __nla_validate_parse: 1 callbacks suppressed [ 358.805213][T17569] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3348'. [ 358.822966][T17569] netlink: 24 bytes leftover after parsing attributes in process `syz.1.3348'. [ 358.993196][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 359.018461][T17548] 8021q: adding VLAN 0 to HW filter on device bond0 [ 359.074789][T17574] tipc: Enabled bearer , priority 0 [ 359.102118][T17548] 8021q: adding VLAN 0 to HW filter on device team0 [ 359.160289][ T9819] bridge0: port 1(bridge_slave_0) entered blocking state [ 359.168034][ T9819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 359.225041][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 359.236950][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 359.245871][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 359.261697][ T9819] bridge0: port 2(bridge_slave_1) entered blocking state [ 359.269523][ T9819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 359.288223][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 359.305685][ T5837] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 359.322560][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 359.370980][T17548] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 359.380810][T17583] netlink: 44 bytes leftover after parsing attributes in process `syz.2.3353'. [ 359.461337][T17580] syzkaller0 speed is unknown, defaulting to 1000 [ 359.473282][ T5837] Bluetooth: hci0: command tx timeout [ 359.848179][T17580] chnl_net:caif_netlink_parms(): no params data found [ 359.952636][T17548] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 359.984041][T17618] netlink: 'syz.0.3359': attribute type 3 has an invalid length. [ 359.991923][T17618] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3359'. [ 360.033195][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 360.069075][T17580] bridge0: port 1(bridge_slave_0) entered blocking state [ 360.085862][T17580] bridge0: port 1(bridge_slave_0) entered disabled state [ 360.094204][T17580] bridge_slave_0: entered allmulticast mode [ 360.101634][T17580] bridge_slave_0: entered promiscuous mode [ 360.111608][T17580] bridge0: port 2(bridge_slave_1) entered blocking state [ 360.121556][T17580] bridge0: port 2(bridge_slave_1) entered disabled state [ 360.130058][T17580] bridge_slave_1: entered allmulticast mode [ 360.138070][T17580] bridge_slave_1: entered promiscuous mode [ 360.186018][T17580] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 360.219303][T17580] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 360.307884][T17580] team0: Port device team_slave_0 added [ 360.336477][T17580] team0: Port device team_slave_1 added [ 360.401945][T17580] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 360.409359][T17580] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.438689][T17580] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 360.475408][T17580] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 360.482511][T17580] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 360.547173][T17580] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 360.672570][T17632] netlink: 'syz.1.3363': attribute type 10 has an invalid length. [ 360.699425][T17632] team0: Device veth0_macvtap failed to register rx_handler [ 360.742260][T17580] hsr_slave_0: entered promiscuous mode [ 360.761561][T17580] hsr_slave_1: entered promiscuous mode [ 360.780218][T17580] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 360.800684][T17580] Cannot create hsr debugfs directory [ 360.827348][T17635] tipc: Enabling of bearer rejected, already enabled [ 360.881337][T17548] veth0_vlan: entered promiscuous mode [ 360.907486][T17548] veth1_vlan: entered promiscuous mode [ 361.004068][T17642] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 361.073185][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 361.151216][T17646] netlink: 104 bytes leftover after parsing attributes in process `syz.2.3368'. [ 361.249721][T17648] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 361.286454][T17650] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3370'. [ 361.304123][T17548] veth0_macvtap: entered promiscuous mode [ 361.378704][T17580] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.393415][ T5837] Bluetooth: hci4: command tx timeout [ 361.455769][T17548] veth1_macvtap: entered promiscuous mode [ 361.514511][T17580] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.554028][ T5837] Bluetooth: hci0: command tx timeout [ 361.582984][T17548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.620616][T17548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.654299][T17548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.676034][T17548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.696825][T17548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 361.712464][T17548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.726347][T17548] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 361.758414][T17580] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 361.795777][T17548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.808754][T17548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.823666][T17548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.834618][T17548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.845397][T17548] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 361.856418][T17548] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 361.868214][T17664] netlink: 'syz.1.3374': attribute type 10 has an invalid length. [ 361.868294][T17548] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 361.891812][T17548] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.901817][T17548] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.912231][T17548] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.921804][T17548] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 361.940039][T17663] tipc: Enabled bearer , priority 0 [ 361.961467][T17580] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 362.010225][T17665] syzkaller0: entered promiscuous mode [ 362.027335][T17665] syzkaller0: entered allmulticast mode [ 362.034716][T17665] tipc: Resetting bearer [ 362.045658][T17664] macvlan0: entered promiscuous mode [ 362.051116][T17664] macvlan0: entered allmulticast mode [ 362.060784][T17664] veth1_vlan: entered allmulticast mode [ 362.070011][T17664] bond0: (slave macvlan0): Enslaving as an active interface with an up link [ 362.107313][T17662] tipc: Resetting bearer [ 362.113358][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 362.967495][ T9] tipc: Node number set to 353283618 [ 363.158351][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 363.478939][ T5837] Bluetooth: hci4: command tx timeout [ 363.635531][ T5837] Bluetooth: hci0: command tx timeout [ 364.193205][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 364.838808][T17662] tipc: Disabling bearer [ 364.879631][T17669] netlink: 16178 bytes leftover after parsing attributes in process `syz.2.3376'. [ 365.100557][T17676] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3377'. [ 365.209950][T17580] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 365.233965][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 365.287363][T17580] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 365.318198][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.326839][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.344299][T17580] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 365.406453][T17580] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 365.418668][T17695] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3382'. [ 365.449542][T17692] 8021q: VLANs not supported on lo [ 365.450949][T17695] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3382'. [ 365.476096][ T9812] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 365.513397][ T9812] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 365.553453][ T5837] Bluetooth: hci4: command tx timeout [ 365.714280][ T5837] Bluetooth: hci0: command tx timeout [ 365.780518][T17580] 8021q: adding VLAN 0 to HW filter on device bond0 [ 365.835028][T17708] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3386'. [ 365.868774][T17580] 8021q: adding VLAN 0 to HW filter on device team0 [ 365.901686][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 365.909147][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 365.951000][ T81] bridge0: port 2(bridge_slave_1) entered blocking state [ 365.958287][ T81] bridge0: port 2(bridge_slave_1) entered forwarding state [ 366.031688][T17713] netlink: 156 bytes leftover after parsing attributes in process `syz.2.3387'. [ 366.121696][T17718] sch_fq: defrate 0 ignored. [ 366.149371][T17723] af_packet: tpacket_rcv: packet too big, clamped from 42 to 4294967286. macoff=82 [ 366.273216][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 366.498389][T17737] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3392'. [ 366.720059][T17580] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 366.848303][T17751] netlink: 'syz.4.3395': attribute type 21 has an invalid length. [ 366.857473][T17751] netlink: 'syz.4.3395': attribute type 20 has an invalid length. [ 366.866232][T17751] IPv6: NLM_F_CREATE should be specified when creating new route [ 366.889045][T17748] netlink: 'syz.4.3395': attribute type 21 has an invalid length. [ 366.903248][T17748] netlink: 'syz.4.3395': attribute type 20 has an invalid length. [ 366.916554][T17580] veth0_vlan: entered promiscuous mode [ 366.960638][T17757] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 366.978392][T17580] veth1_vlan: entered promiscuous mode [ 366.995280][T17757] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.046835][T17757] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.069032][T17580] veth0_macvtap: entered promiscuous mode [ 367.091507][T17757] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.098433][T17760] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.102840][T17580] veth1_macvtap: entered promiscuous mode [ 367.133501][T17762] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3401'. [ 367.144848][T17762] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3401'. [ 367.164177][T17757] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.186344][T17580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.203542][T17580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.225875][T17757] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 367.245569][T17580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.268613][T17580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.289600][T17580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.310216][T17580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.341372][T17580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 367.363195][T17580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.384646][T17580] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 367.416362][T17766] syzkaller1: tun_chr_ioctl cmd 1074025677 [ 367.422498][T17766] syzkaller1: Linktype set failed because interface is up [ 367.439008][T17766] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3402'. [ 367.449824][T17580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.461802][T17580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.475305][ T5926] syzkaller1: tun_net_xmit 90 [ 367.496499][T17580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.521741][T17580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.532828][T17580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.544323][T17580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.557333][T17580] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 367.587560][T17580] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 367.613837][T17580] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 367.633876][ T5837] Bluetooth: hci4: command tx timeout [ 367.682850][T17580] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.692514][T17580] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.703835][T17580] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.712594][T17580] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 367.959241][T17784] netlink: 'syz.0.3408': attribute type 3 has an invalid length. [ 368.109927][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.153440][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 368.228961][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 368.257362][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 369.393248][ C0] net_ratelimit: 61 callbacks suppressed [ 369.393277][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 370.433299][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 370.853449][T17840] No such timeout policy "syz0" [ 371.110161][T17851] netlink: 'syz.4.3430': attribute type 4 has an invalid length. [ 371.440930][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 371.452578][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 371.473206][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 371.485416][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 371.505940][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 371.532514][ T5846] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 371.542636][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 371.588143][T17862] syzkaller0 speed is unknown, defaulting to 1000 [ 371.926295][T17878] dummy0: entered allmulticast mode [ 371.966276][T17878] batman_adv: batadv0: Adding interface: dummy0 [ 372.000116][T17878] batman_adv: batadv0: The MTU of interface dummy0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 372.023654][T17891] netlink: 'syz.2.3438': attribute type 10 has an invalid length. [ 372.039532][T17878] batman_adv: batadv0: Not using interface dummy0 (retrying later): interface not active [ 372.104818][T17862] chnl_net:caif_netlink_parms(): no params data found [ 372.397136][T17904] __nla_validate_parse: 4 callbacks suppressed [ 372.397159][T17904] netlink: 80 bytes leftover after parsing attributes in process `syz.1.3441'. [ 372.400302][T17907] xt_ct_set_helper: 10 callbacks suppressed [ 372.400325][T17907] xt_CT: You must specify a L4 protocol and not use inversions on it [ 372.435861][T17862] bridge0: port 1(bridge_slave_0) entered blocking state [ 372.446370][T17910] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3444'. [ 372.459211][T17912] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3442'. [ 372.469990][T17862] bridge0: port 1(bridge_slave_0) entered disabled state [ 372.478298][T17862] bridge_slave_0: entered allmulticast mode [ 372.499888][T17904] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3441'. [ 372.505298][T17862] bridge_slave_0: entered promiscuous mode [ 372.515247][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 372.555479][T17862] bridge0: port 2(bridge_slave_1) entered blocking state [ 372.582165][T17862] bridge0: port 2(bridge_slave_1) entered disabled state [ 372.600627][T17862] bridge_slave_1: entered allmulticast mode [ 372.620814][T17862] bridge_slave_1: entered promiscuous mode [ 372.841251][T17862] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 372.873270][T17926] sock: sock_timestamping_bind_phc: sock not bind to device [ 372.887173][T17862] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 372.919071][T17930] netlink: 64 bytes leftover after parsing attributes in process `syz.1.3451'. [ 373.023739][T17862] team0: Port device team_slave_0 added [ 373.032720][T17862] team0: Port device team_slave_1 added [ 373.105352][T17862] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 373.122777][T17862] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.162777][T17862] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 373.189471][T17938] syzkaller1: entered promiscuous mode [ 373.195262][T17938] syzkaller1: entered allmulticast mode [ 373.211016][T17862] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 373.227508][T17862] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 373.258264][T17862] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 373.299640][T17938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3453'. [ 373.316901][T17938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3453'. [ 373.330122][T17938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3453'. [ 373.343126][T17938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3453'. [ 373.359971][T17938] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3453'. [ 373.370096][T17938] erspan0: left allmulticast mode [ 373.386434][T17938] dummy0: left allmulticast mode [ 373.417087][T17938] ipvlan0: left allmulticast mode [ 373.422171][T17938] ip6gretap0: left allmulticast mode [ 373.431361][T17938] xfrm1: left allmulticast mode [ 373.442342][T17938] mac80211_hwsim hwsim11 syzkaller0: left allmulticast mode [ 373.452431][T17938] tipc: Resetting bearer [ 373.459962][T17938] tipc: Resetting bearer [ 373.467975][T17938] bond6: left allmulticast mode [ 373.507393][T17862] hsr_slave_0: entered promiscuous mode [ 373.522267][T17862] hsr_slave_1: entered promiscuous mode [ 373.540662][T17862] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 373.551709][T17862] Cannot create hsr debugfs directory [ 373.558911][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 373.633573][ T5837] Bluetooth: hci4: command tx timeout [ 374.025503][T17862] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.189713][T17862] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.398912][T17862] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.534507][T17984] netlink: 'syz.4.3462': attribute type 39 has an invalid length. [ 374.593327][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 374.677128][T17862] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 374.716317][T17987] bridge1: the hash_elasticity option has been deprecated and is always 16 [ 374.987833][T17862] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 375.057263][T17862] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 375.095982][T17862] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 375.139594][T17862] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 375.311503][T18022] openvswitch: netlink: Invalid MD length 0 for MD type 0 [ 375.352640][T18022] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 375.425546][T18018] IPVS: set_ctl: invalid protocol: 47 224.0.0.2:0 [ 375.454144][T17862] 8021q: adding VLAN 0 to HW filter on device bond0 [ 375.509152][T17862] 8021q: adding VLAN 0 to HW filter on device team0 [ 375.541952][ T9812] bridge0: port 1(bridge_slave_0) entered blocking state [ 375.550113][ T9812] bridge0: port 1(bridge_slave_0) entered forwarding state [ 375.594305][ T9812] bridge0: port 2(bridge_slave_1) entered blocking state [ 375.602531][ T9812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 375.633298][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 375.714072][ T5837] Bluetooth: hci4: command tx timeout [ 375.905868][T18041] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 376.035639][T17862] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 376.142564][T17862] veth0_vlan: entered promiscuous mode [ 376.189406][T17862] veth1_vlan: entered promiscuous mode [ 376.319492][T17862] veth0_macvtap: entered promiscuous mode [ 376.373951][T17862] veth1_macvtap: entered promiscuous mode [ 376.452634][T17862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.482008][T17862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.513403][T17862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.572878][T17862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.599069][T17862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.612309][T18072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.633275][T17862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.655635][T17862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.655899][T18072] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 376.673318][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 376.699296][T17862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.713929][T17862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 376.725013][T17862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 376.739464][T17862] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 377.346360][T18082] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 377.360142][T18082] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 377.371521][T18082] bond0 (unregistering): Released all slaves [ 377.397059][T17862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.409594][T17862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.425050][T17862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.438276][T17862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.450073][T17862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.461560][T17862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.471946][T17862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.482615][T17862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.493394][T17862] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 377.504163][T17862] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 377.515758][T17862] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 377.534840][T17862] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.544333][T17862] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.556180][T17862] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.565439][T17862] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 377.676865][T18084] bridge0: port 2(bridge_slave_1) entered disabled state [ 377.684414][T18084] bridge0: port 1(bridge_slave_0) entered disabled state [ 377.713316][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 377.761229][T18084] dummy0: left allmulticast mode [ 377.793683][ T5837] Bluetooth: hci4: command tx timeout [ 377.854126][T18084] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 377.872475][T18084] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 377.927533][T18084] veth1_vlan: left allmulticast mode [ 377.934115][T18084] macvlan0: left promiscuous mode [ 377.939196][T18084] macvlan0: left allmulticast mode [ 377.978782][T18084] netdevsim netdevsim1 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.988339][T18084] netdevsim netdevsim1 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 377.998714][T18084] netdevsim netdevsim1 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.008232][T18084] netdevsim netdevsim1 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 378.088342][T18100] workqueue: Failed to create a rescuer kthread for wq "bond3": -EINTR [ 378.216729][T18102] __nla_validate_parse: 186 callbacks suppressed [ 378.216756][T18102] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3494'. [ 378.252862][T18102] tc_dump_action: action bad kind [ 378.452762][ T61] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.482645][T18117] openvswitch: netlink: IP tunnel dst address not specified [ 378.484834][ T61] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.556806][ T9817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 378.583888][ T9817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 378.715805][T18130] netlink: 48 bytes leftover after parsing attributes in process `syz.4.3502'. [ 378.753219][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 379.138079][T18147] geneve2: entered promiscuous mode [ 379.153866][T18147] geneve2: entered allmulticast mode [ 379.363678][T18150] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3510'. [ 379.511067][T18161] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3514'. [ 379.550740][T18150] hsr_slave_1 (unregistering): left promiscuous mode [ 379.774358][T18173] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3517'. [ 379.793327][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 380.833315][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 381.494308][T18185] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3521'. [ 381.497399][T18186] tipc: Started in network mode [ 381.522897][T18185] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3521'. [ 381.540732][T18186] tipc: Node identity 2611d8f39941, cluster identity 4711 [ 381.570959][T18186] tipc: Enabled bearer , priority 0 [ 381.668336][T18192] syzkaller0: entered promiscuous mode [ 381.691295][T18192] syzkaller0: entered allmulticast mode [ 381.724082][T18192] tipc: Resetting bearer [ 381.800842][T18184] tipc: Resetting bearer [ 381.873428][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 381.901062][T18200] netlink: 1284 bytes leftover after parsing attributes in process `syz.0.3524'. [ 382.046565][T18203] netlink: 24 bytes leftover after parsing attributes in process `syz.4.3526'. [ 382.079506][T18205] netlink: 'syz.2.3527': attribute type 3 has an invalid length. [ 382.114540][T18205] netlink: 224 bytes leftover after parsing attributes in process `syz.2.3527'. [ 382.126933][T18208] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 382.155697][T18209] tipc: Can't bind to reserved service type 1 [ 382.241226][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 382.251983][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 382.262554][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 382.279968][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 382.298140][ T5846] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 382.305963][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 382.658627][T17048] tipc: Node number set to 3209746675 [ 382.913893][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 383.953234][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 384.361941][ T5846] Bluetooth: hci4: command tx timeout [ 384.993300][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 385.402913][T18184] tipc: Disabling bearer [ 385.519736][T18210] syzkaller0 speed is unknown, defaulting to 1000 [ 385.567245][T18222] netlink: 'syz.0.3531': attribute type 10 has an invalid length. [ 385.647521][T18222] geneve0: entered promiscuous mode [ 385.698767][T18222] geneve0: entered allmulticast mode [ 385.772292][T18222] bond0: (slave geneve0): Enslaving as an active interface with an up link [ 386.026051][T18244] syzkaller1: entered promiscuous mode [ 386.032029][T18244] syzkaller1: entered allmulticast mode [ 386.037921][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 386.119499][T18244] 8021q: adding VLAN 0 to HW filter on device bond3 [ 386.128565][T18244] bond3: entered promiscuous mode [ 386.137181][T18244] bond3: entered allmulticast mode [ 386.143701][T18244] bond0: (slave bond3): Enslaving as an active interface with an up link [ 386.232492][T18245] 8021q: adding VLAN 0 to HW filter on device bond4 [ 386.265458][T18245] bond4: entered promiscuous mode [ 386.287540][T18245] bond4: entered allmulticast mode [ 386.306228][T18245] bond0: (slave bond4): Enslaving as an active interface with an up link [ 386.433293][ T5846] Bluetooth: hci4: command tx timeout [ 386.473916][T18210] chnl_net:caif_netlink_parms(): no params data found [ 386.778269][T18265] tipc: Started in network mode [ 386.789916][T18265] tipc: Node identity a6e9beebb722, cluster identity 4711 [ 386.799119][T18265] tipc: Enabled bearer , priority 0 [ 386.920808][T18274] syzkaller0: entered promiscuous mode [ 386.927088][T18274] syzkaller0: entered allmulticast mode [ 386.934282][T18274] tipc: Resetting bearer [ 386.976250][T18263] tipc: Resetting bearer [ 387.049985][T18292] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3551'. [ 387.059989][T18292] netlink: 24 bytes leftover after parsing attributes in process `syz.0.3551'. [ 387.073476][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 387.814161][ T5889] tipc: Node number set to 298565355 [ 388.114604][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 388.514025][ T5846] Bluetooth: hci4: command tx timeout [ 389.153246][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 390.194989][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 390.502619][T18263] tipc: Disabling bearer [ 390.533374][T18210] bridge0: port 1(bridge_slave_0) entered blocking state [ 390.542256][T18210] bridge0: port 1(bridge_slave_0) entered disabled state [ 390.551771][T18210] bridge_slave_0: entered allmulticast mode [ 390.560926][T18210] bridge_slave_0: entered promiscuous mode [ 390.593766][ T5846] Bluetooth: hci4: command tx timeout [ 390.600473][T18210] bridge0: port 2(bridge_slave_1) entered blocking state [ 390.630900][T18210] bridge0: port 2(bridge_slave_1) entered disabled state [ 390.674026][T18210] bridge_slave_1: entered allmulticast mode [ 390.681927][T18210] bridge_slave_1: entered promiscuous mode [ 390.787747][T18210] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 390.838560][T18210] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 391.014464][T18210] team0: Port device team_slave_0 added [ 391.035214][T18315] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 391.044839][T18210] team0: Port device team_slave_1 added [ 391.146509][T18210] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 391.163179][T18210] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.204554][T18325] netlink: 516 bytes leftover after parsing attributes in process `syz.1.3562'. [ 391.224388][T18210] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 391.233496][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 391.276234][T18332] xt_HMARK: proto mask must be zero with L3 mode [ 391.277960][T18210] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 391.321295][T18210] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 391.368436][T18210] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 391.390173][T18332] mac80211_hwsim hwsim57 ÿ: renamed from wlan1 (while UP) [ 391.530745][T18210] hsr_slave_0: entered promiscuous mode [ 391.544777][T18210] hsr_slave_1: entered promiscuous mode [ 391.561914][T18210] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 391.570821][T18210] Cannot create hsr debugfs directory [ 391.798356][T18344] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3567'. [ 391.905080][T18345] netlink: 24 bytes leftover after parsing attributes in process `syz.2.3569'. [ 392.138817][T18210] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.273279][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 392.309818][T18373] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3575'. [ 392.427304][T18210] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.466731][T18379] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3576'. [ 392.553993][T18380] netlink: 72 bytes leftover after parsing attributes in process `syz.0.3577'. [ 392.576366][T18379] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3576'. [ 392.587556][T18379] netlink: 108 bytes leftover after parsing attributes in process `syz.1.3576'. [ 392.598892][T18379] netlink: 84 bytes leftover after parsing attributes in process `syz.1.3576'. [ 392.636457][T18379] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3576'. [ 392.719390][T18210] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 392.792855][T18388] netdevsim netdevsim4 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.802347][T18388] netdevsim netdevsim4 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.812519][T18388] netdevsim netdevsim4 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.823912][T18388] netdevsim netdevsim4 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 392.946940][T18210] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 393.006846][T18402] netlink: 830 bytes leftover after parsing attributes in process `syz.4.3584'. [ 393.014652][T18403] netlink: 32 bytes leftover after parsing attributes in process `syz.0.3582'. [ 393.074642][T18406] tipc: Enabling of bearer rejected, already enabled [ 393.119737][T18406] mac80211_hwsim hwsim11 syzkaller0: entered allmulticast mode [ 393.176303][T18406] tipc: Resetting bearer [ 393.200121][T18406] tipc: Resetting bearer [ 393.313232][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 393.358015][T18210] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 393.387934][T18210] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 393.438660][T18210] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 393.522454][T18210] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 393.543564][T18415] netlink: 4 bytes leftover after parsing attributes in process `syz.2.3589'. [ 393.777473][T18210] 8021q: adding VLAN 0 to HW filter on device bond0 [ 393.786907][T18433] netlink: 'syz.1.3594': attribute type 1 has an invalid length. [ 393.860993][T18210] 8021q: adding VLAN 0 to HW filter on device team0 [ 393.887534][ T1098] bridge0: port 1(bridge_slave_0) entered blocking state [ 393.895177][ T1098] bridge0: port 1(bridge_slave_0) entered forwarding state [ 393.939369][ T9812] bridge0: port 2(bridge_slave_1) entered blocking state [ 393.946705][ T9812] bridge0: port 2(bridge_slave_1) entered forwarding state [ 394.006143][T18440] netlink: 'syz.2.3597': attribute type 1 has an invalid length. [ 394.050209][T18440] netlink: 'syz.2.3597': attribute type 11 has an invalid length. [ 394.079168][T18441] tipc: Enabled bearer , priority 0 [ 394.159347][T18441] syzkaller0: entered promiscuous mode [ 394.165677][T18441] syzkaller0: entered allmulticast mode [ 394.172360][T18441] tipc: Resetting bearer [ 394.216548][T18439] tipc: Resetting bearer [ 394.353246][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 395.077139][T18464] netlink: 'syz.0.3606': attribute type 1 has an invalid length. [ 395.097355][T18464] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 395.393292][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 396.435943][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 397.432267][T18439] tipc: Disabling bearer [ 397.473164][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 397.680352][T18476] __nla_validate_parse: 4 callbacks suppressed [ 397.680372][T18476] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3610'. [ 397.758354][T18484] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3611'. [ 397.939588][T18210] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 398.081539][T18210] veth0_vlan: entered promiscuous mode [ 398.133426][T18210] veth1_vlan: entered promiscuous mode [ 398.138539][T18494] can: request_module (can-proto-4) failed. [ 398.237225][T18210] veth0_macvtap: entered promiscuous mode [ 398.248837][T18210] veth1_macvtap: entered promiscuous mode [ 398.305319][T18210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.336773][T18210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.362783][T18210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.376788][T18210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.387091][T18210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.398171][T18210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.412024][T18210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.423196][T18210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.434328][T18210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 398.475909][T18210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.513661][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 398.525238][T18210] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 398.554014][T18210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.596079][T18210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.622342][T18210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.663168][T18210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.685853][T18210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.697687][T18210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.709439][T18210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.720489][T18520] netlink: 28 bytes leftover after parsing attributes in process `syz.0.3623'. [ 398.730681][T18210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.741888][T18210] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 398.769408][T18210] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 398.784525][T18210] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 398.825929][T18516] tipc: Enabled bearer , priority 0 [ 398.856157][T18210] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.878897][T18210] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.893739][T18210] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 398.905636][T18210] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 399.060943][T18521] syzkaller0: entered promiscuous mode [ 399.082725][T18521] syzkaller0: entered allmulticast mode [ 399.104197][T18521] tipc: Resetting bearer [ 399.126575][T18510] tipc: Resetting bearer [ 399.553151][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 400.593237][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 401.633240][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 401.871670][T18510] tipc: Disabling bearer [ 402.070943][T18544] macsec1: entered promiscuous mode [ 402.093823][T18544] macsec1: entered allmulticast mode [ 402.114642][T18544] veth1_macvtap: entered allmulticast mode [ 402.136506][T18544] veth1_macvtap: left allmulticast mode [ 402.280913][ T81] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.302274][ T81] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.360623][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 402.384694][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 402.479369][T18562] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 402.673205][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 402.963336][T18584] syz.4.3639 uses old SIOCAX25GETINFO [ 403.188084][T18589] IPVS: set_ctl: invalid protocol: 4 172.20.20.187:20002 [ 403.335976][T18591] tipc: Enabled bearer , priority 0 [ 403.441397][T18591] syzkaller0: entered promiscuous mode [ 403.453616][T18591] syzkaller0: entered allmulticast mode [ 403.462164][T18591] tipc: Resetting bearer [ 403.482270][T18590] tipc: Resetting bearer [ 403.713187][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 404.761675][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 405.026549][T18595] netlink: 'syz.2.3643': attribute type 2 has an invalid length. [ 405.093415][T18595] netlink: 188 bytes leftover after parsing attributes in process `syz.2.3643'. [ 405.392028][T18617] netlink: 12 bytes leftover after parsing attributes in process `syz.2.3646'. [ 405.445287][T18608] can: request_module (can-proto-0) failed. [ 405.675737][T18625] xt_policy: output policy not valid in PREROUTING and INPUT [ 405.711130][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 405.743908][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 405.763480][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 405.772890][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 405.783902][T18630] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3649'. [ 405.794698][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 405.805798][ T5837] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 405.814666][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 406.833583][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 407.176255][T18590] tipc: Disabling bearer [ 407.298499][T18627] syzkaller0 speed is unknown, defaulting to 1000 [ 407.378641][T18637] netlink: 'syz.4.3651': attribute type 3 has an invalid length. [ 407.387219][T18637] netlink: 224 bytes leftover after parsing attributes in process `syz.4.3651'. [ 407.475965][T18642] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3654'. [ 407.503282][ T5926] IPVS: starting estimator thread 0... [ 407.509595][T18642] netlink: 'syz.0.3654': attribute type 1 has an invalid length. [ 407.569530][T18647] Bluetooth: MGMT ver 1.23 [ 407.575252][T18642] 8021q: adding VLAN 0 to HW filter on device bond6 [ 407.593685][T18644] IPVS: using max 19 ests per chain, 45600 per kthread [ 407.639295][T18647] netlink: 'syz.4.3655': attribute type 12 has an invalid length. [ 407.820034][T18627] chnl_net:caif_netlink_parms(): no params data found [ 407.874705][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 407.881768][ T5846] Bluetooth: hci4: command tx timeout [ 407.908756][T18660] nbd: couldn't find device at index 1255035857 [ 408.146254][T18674] netlink: 28 bytes leftover after parsing attributes in process `syz.1.3662'. [ 408.169364][T18627] bridge0: port 1(bridge_slave_0) entered blocking state [ 408.187924][T18627] bridge0: port 1(bridge_slave_0) entered disabled state [ 408.224920][T18627] bridge_slave_0: entered allmulticast mode [ 408.244669][T18627] bridge_slave_0: entered promiscuous mode [ 408.288895][T18679] tipc: Enabled bearer , priority 0 [ 408.418091][T18691] netlink: 20 bytes leftover after parsing attributes in process `syz.1.3667'. [ 408.441703][T18676] syzkaller0: entered promiscuous mode [ 408.467392][T18676] syzkaller0: entered allmulticast mode [ 408.476784][T18691] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3667'. [ 408.494561][T18676] tipc: Resetting bearer [ 408.508340][T18627] bridge0: port 2(bridge_slave_1) entered blocking state [ 408.535347][T18627] bridge0: port 2(bridge_slave_1) entered disabled state [ 408.542756][T18627] bridge_slave_1: entered allmulticast mode [ 408.565762][T18627] bridge_slave_1: entered promiscuous mode [ 408.691304][T18675] tipc: Resetting bearer [ 408.913195][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 409.954096][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 409.963416][ T5846] Bluetooth: hci4: command tx timeout [ 410.998657][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 411.531783][T18675] tipc: Disabling bearer [ 411.606878][T18627] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 411.646073][T18627] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 411.715077][T18712] netlink: 'syz.2.3673': attribute type 1 has an invalid length. [ 411.723569][T18712] netlink: 36 bytes leftover after parsing attributes in process `syz.2.3673'. [ 411.779071][T18627] team0: Port device team_slave_0 added [ 411.823553][T18627] team0: Port device team_slave_1 added [ 411.936090][T18627] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 411.973183][T18627] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.033154][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 412.033816][ T5846] Bluetooth: hci4: command tx timeout [ 412.073139][T18627] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 412.125781][T18627] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 412.132954][T18627] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 412.164789][T18627] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 412.371796][T18627] hsr_slave_0: entered promiscuous mode [ 412.384092][T18627] hsr_slave_1: entered promiscuous mode [ 412.415372][T18627] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 412.434075][T18627] Cannot create hsr debugfs directory [ 412.559842][T18744] netlink: 232 bytes leftover after parsing attributes in process `syz.1.3685'. [ 412.926236][T18765] xt_l2tp: unknown flags: 18 [ 413.075203][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 413.276047][T18627] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.309465][T18769] netlink: 'syz.0.3690': attribute type 10 has an invalid length. [ 413.333964][T18768] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3691'. [ 413.402381][T18769] mac80211_hwsim hwsim40 wlan1: entered promiscuous mode [ 413.440960][T18773] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3692'. [ 413.461496][T18769] mac80211_hwsim hwsim40 wlan1: entered allmulticast mode [ 413.471044][T18773] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3692'. [ 413.484216][T18769] bond0: (slave wlan1): Enslaving as an active interface with an up link [ 413.508632][T18767] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 413.562589][T18627] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.751146][T18627] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 413.905038][T18627] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 414.113171][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 414.124229][ T5846] Bluetooth: hci4: command tx timeout [ 414.202497][T18788] input: Bluetooth HID Boot Protocol Device as /devices/virtual/bluetooth/hci4/hci4:200/input7 [ 414.216621][T18627] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 414.285000][T18627] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 414.315563][T18627] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 414.355726][T18627] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 414.395218][T18795] netlink: 216 bytes leftover after parsing attributes in process `syz.2.3698'. [ 414.474933][T18799] netlink: 71 bytes leftover after parsing attributes in process `syz.1.3699'. [ 414.697724][T18627] 8021q: adding VLAN 0 to HW filter on device bond0 [ 414.713957][T18811] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3702'. [ 414.855405][T18627] 8021q: adding VLAN 0 to HW filter on device team0 [ 414.928599][ T9819] bridge0: port 1(bridge_slave_0) entered blocking state [ 414.936005][ T9819] bridge0: port 1(bridge_slave_0) entered forwarding state [ 414.996399][ T9819] bridge0: port 2(bridge_slave_1) entered blocking state [ 415.004081][ T9819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 415.011885][T18825] netlink: 'syz.4.3706': attribute type 1 has an invalid length. [ 415.022553][T18825] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3706'. [ 415.109427][T18822] tipc: Enabling of bearer rejected, already enabled [ 415.154208][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 415.432631][T18841] bridge2: the hash_elasticity option has been deprecated and is always 16 [ 415.584032][T18847] netlink: 'syz.0.3713': attribute type 3 has an invalid length. [ 415.608162][T18847] netlink: 224 bytes leftover after parsing attributes in process `syz.0.3713'. [ 415.634780][T18847] x_tables: duplicate entry at hook 2 [ 415.645554][T18627] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 415.810670][T18627] veth0_vlan: entered promiscuous mode [ 415.896282][T18627] veth1_vlan: entered promiscuous mode [ 415.966399][T18627] veth0_macvtap: entered promiscuous mode [ 415.987549][T18627] veth1_macvtap: entered promiscuous mode [ 416.065408][T18627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.103215][T18627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.123218][T18627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.136159][T18627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.147381][T18627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.160715][T18627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.171337][T18627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.183588][T18627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.193746][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 416.234622][T18627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.247218][T18627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.269925][T18627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 416.290572][T18627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.304988][T18627] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 416.350524][T18627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.389888][T18627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.422624][T18627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.455668][T18627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.484900][T18627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.504592][T18627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.519593][T18627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.533745][T18627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.544458][T18627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.560603][T18627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.572600][T18627] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 416.584011][T18627] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 416.600701][T18627] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 416.614987][T18882] netlink: 'syz.2.3722': attribute type 15 has an invalid length. [ 416.736843][T18627] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.764184][T18627] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.803552][T18627] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 416.833806][T18627] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 417.068549][T18894] __nla_validate_parse: 2 callbacks suppressed [ 417.068570][T18894] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3728'. [ 417.095073][T18894] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3728'. [ 417.138997][T18897] tipc: Enabled bearer , priority 0 [ 417.165166][T18894] netlink: 48 bytes leftover after parsing attributes in process `syz.0.3728'. [ 417.191561][T18897] syzkaller0: entered promiscuous mode [ 417.197775][T18897] syzkaller0: entered allmulticast mode [ 417.215209][T18897] tipc: Resetting bearer [ 417.233262][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 417.243855][T18896] tipc: Resetting bearer [ 417.488208][T18914] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3732'. [ 417.510565][T18914] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3732'. [ 418.273149][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 418.565053][T18917] netlink: 'syz.2.3734': attribute type 4 has an invalid length. [ 419.313235][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 420.356151][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 420.377125][T18896] tipc: Disabling bearer [ 420.394131][ T1123] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.411027][ T1123] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.502294][ T9817] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 420.511862][ T9817] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 420.588367][T18922] netlink: 'syz.4.3736': attribute type 21 has an invalid length. [ 421.398693][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 421.577338][T18961] syzkaller0: entered allmulticast mode [ 422.433255][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 423.411199][T18968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3744'. [ 423.445503][T18968] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3744'. [ 423.474172][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 423.511136][T18968] vlan3: entered allmulticast mode [ 423.528018][T18968] erspan0: entered allmulticast mode [ 423.547698][T18974] tipc: Enabling of bearer rejected, already enabled [ 423.727664][T18980] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3750'. [ 423.924711][T18988] openvswitch: netlink: IPv4 frag type 255 is out of range max 2 [ 424.073604][T18999] netlink: 'syz.2.3755': attribute type 21 has an invalid length. [ 424.081561][T18999] netlink: 152 bytes leftover after parsing attributes in process `syz.2.3755'. [ 424.135426][ T5837] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 424.150531][ T5837] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 424.165128][ T5837] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 424.188982][ T5837] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 424.201266][ T5837] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 424.213793][ T5837] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 424.280041][T19000] syzkaller0 speed is unknown, defaulting to 1000 [ 424.513142][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 424.679364][T19022] tipc: Enabled bearer , priority 0 [ 424.805037][T19014] syzkaller0: entered promiscuous mode [ 424.810750][T19014] syzkaller0: entered allmulticast mode [ 424.817566][T19014] tipc: Resetting bearer [ 424.879392][T19013] tipc: Resetting bearer [ 424.977900][T19032] netlink: 16 bytes leftover after parsing attributes in process `syz.4.3763'. [ 425.553108][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 426.289343][ T5837] Bluetooth: hci4: command tx timeout [ 426.595696][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 427.633110][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 427.977001][T19013] tipc: Disabling bearer [ 427.993813][T19000] chnl_net:caif_netlink_parms(): no params data found [ 428.171725][T19053] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3768'. [ 428.253256][T19058] netlink: 76 bytes leftover after parsing attributes in process `syz.2.3771'. [ 428.268047][T19000] bridge0: port 1(bridge_slave_0) entered blocking state [ 428.276268][T19053] openvswitch: netlink: nsh attribute has 65532 unknown bytes. [ 428.284916][T19000] bridge0: port 1(bridge_slave_0) entered disabled state [ 428.285196][T19000] bridge_slave_0: entered allmulticast mode [ 428.309706][T19000] bridge_slave_0: entered promiscuous mode [ 428.325366][T19053] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 428.327076][T19000] bridge0: port 2(bridge_slave_1) entered blocking state [ 428.354110][ T5837] Bluetooth: hci4: command tx timeout [ 428.365126][T19000] bridge0: port 2(bridge_slave_1) entered disabled state [ 428.372484][T19000] bridge_slave_1: entered allmulticast mode [ 428.404543][T19000] bridge_slave_1: entered promiscuous mode [ 428.541319][T19000] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 428.586683][T19000] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 428.617536][T19075] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3773'. [ 428.635252][T19075] netlink: 16 bytes leftover after parsing attributes in process `syz.2.3773'. [ 428.673226][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 428.696333][T19075] netlink: 'syz.2.3773': attribute type 4 has an invalid length. [ 428.768395][T19080] netlink: 12 bytes leftover after parsing attributes in process `syz.4.3774'. [ 428.811917][T19000] team0: Port device team_slave_0 added [ 428.856591][T19000] team0: Port device team_slave_1 added [ 428.938495][T19000] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 428.949981][T19000] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 428.992193][T19000] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 429.015305][T19086] syzkaller0 speed is unknown, defaulting to 1000 [ 429.062924][T19089] tipc: Enabled bearer , priority 0 [ 429.084395][T19000] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 429.092185][T19000] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 429.122359][T19000] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 429.200936][T19089] syzkaller0: entered promiscuous mode [ 429.207119][T19089] syzkaller0: entered allmulticast mode [ 429.214046][T19089] tipc: Resetting bearer [ 429.248979][T19091] tipc: Enabled bearer , priority 0 [ 429.262999][T19088] tipc: Resetting bearer [ 429.713118][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 430.433650][ T5837] Bluetooth: hci4: command tx timeout [ 430.753151][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 431.794277][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 432.198745][T19088] tipc: Disabling bearer [ 432.244673][T19092] syzkaller0: entered promiscuous mode [ 432.250584][T19092] syzkaller0: entered allmulticast mode [ 432.274527][T19092] tipc: Resetting bearer [ 432.328262][T19090] tipc: Resetting bearer [ 432.513952][ T5837] Bluetooth: hci4: command tx timeout [ 432.833120][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 433.345502][T19106] netlink: 108 bytes leftover after parsing attributes in process `syz.4.3785'. [ 433.873148][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 434.913135][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 435.292499][T19090] tipc: Disabling bearer [ 435.307613][T19000] hsr_slave_0: entered promiscuous mode [ 435.315159][T19000] hsr_slave_1: entered promiscuous mode [ 435.321646][T19000] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 435.330784][T19000] Cannot create hsr debugfs directory [ 435.748109][T19000] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.781601][T19125] netlink: 4 bytes leftover after parsing attributes in process `syz.1.3790'. [ 435.800845][T19125] ipvlan2: entered promiscuous mode [ 435.879268][T19000] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 435.953147][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 435.996107][T19000] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.087737][T19000] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 436.117118][T19133] tipc: Enabled bearer , priority 0 [ 436.167611][T19133] syzkaller0: entered promiscuous mode [ 436.203647][T19133] syzkaller0: entered allmulticast mode [ 436.210038][T19133] tipc: Resetting bearer [ 436.242918][T19132] tipc: Resetting bearer [ 436.993122][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 438.033138][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 439.067069][T19132] tipc: Disabling bearer [ 439.073114][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 439.107999][T19155] tipc: Enabling of bearer rejected, failed to enable media [ 439.237382][T19000] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 439.277107][T19000] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 439.314743][T19000] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 439.376134][T19000] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 439.472246][T19169] veth0: entered promiscuous mode [ 439.495612][T19168] veth0: left promiscuous mode [ 439.679348][T19174] netlink: 168 bytes leftover after parsing attributes in process `syz.1.3804'. [ 439.876844][T19000] 8021q: adding VLAN 0 to HW filter on device bond0 [ 439.907903][T19000] 8021q: adding VLAN 0 to HW filter on device team0 [ 439.922751][ T81] bridge0: port 1(bridge_slave_0) entered blocking state [ 439.929951][ T81] bridge0: port 1(bridge_slave_0) entered forwarding state [ 439.978084][ T9808] bridge0: port 2(bridge_slave_1) entered blocking state [ 439.985515][ T9808] bridge0: port 2(bridge_slave_1) entered forwarding state [ 440.116798][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 440.360439][T19202] tipc: Enabled bearer , priority 0 [ 440.391040][T19204] netlink: 4 bytes leftover after parsing attributes in process `syz.0.3808'. [ 440.490811][T19202] syzkaller0: entered promiscuous mode [ 440.504893][T19202] syzkaller0: entered allmulticast mode [ 440.511425][T19202] tipc: Resetting bearer [ 440.566525][T19000] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 440.569590][T19209] SET target dimension over the limit! [ 440.584707][T19200] tipc: Resetting bearer [ 441.153256][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 442.193158][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 443.233140][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 443.368567][T19200] tipc: Disabling bearer [ 443.378779][T19210] tipc: Enabled bearer , priority 0 [ 443.460053][T19215] syzkaller0: entered promiscuous mode [ 443.468500][T19215] syzkaller0: entered allmulticast mode [ 443.477505][T19215] tipc: Resetting bearer [ 443.578973][ T9812] tipc: Resetting bearer [ 443.592756][T19205] tipc: Resetting bearer [ 443.857392][T19225] netlink: 4 bytes leftover after parsing attributes in process `syz.4.3813'. [ 444.273106][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 444.944443][ T5846] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 444.955884][ T5846] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 444.984478][ T5846] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 444.995912][ T5846] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 445.012489][ T5846] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 445.020378][ T5846] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 445.313177][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 446.359920][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 446.560497][T19205] tipc: Disabling bearer [ 446.691006][T19227] syzkaller0 speed is unknown, defaulting to 1000 [ 446.738826][T19000] veth0_vlan: entered promiscuous mode [ 446.775868][T19000] veth1_vlan: entered promiscuous mode [ 446.806421][T19233] netlink: 'syz.4.3816': attribute type 29 has an invalid length. [ 446.835451][T19233] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3816'. [ 446.895728][T19237] IPv6: sit2: Disabled Multicast RS [ 447.026423][T19000] veth0_macvtap: entered promiscuous mode [ 447.042549][T19000] veth1_macvtap: entered promiscuous mode [ 447.073863][ T5837] Bluetooth: hci5: command tx timeout [ 447.146846][T19000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.212170][T19000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.264352][T19000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.291637][T19000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.311985][T19000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.335417][T19000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.361680][T19000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.377303][T19000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.393193][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 447.402003][T19000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.417035][T19000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.432462][T19000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.453664][T19000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.473157][T19000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 447.493288][T19000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 447.521601][T19000] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 447.582193][T19261] tipc: Enabled bearer , priority 0 [ 448.155534][T19266] bridge0: port 2(bridge_slave_1) entered disabled state [ 448.163245][T19266] bridge0: port 1(bridge_slave_0) entered disabled state [ 448.433751][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 448.724860][T19266] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 448.785968][T19266] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 449.153463][ T5837] Bluetooth: hci5: command tx timeout [ 449.253611][T19266] netdevsim netdevsim4 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.262908][T19266] netdevsim netdevsim4 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.283606][T19266] netdevsim netdevsim4 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.292930][T19266] netdevsim netdevsim4 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 449.432258][T19266] netdevsim netdevsim4 netdevsim0: unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.441922][T19266] netdevsim netdevsim4 netdevsim1: unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.451874][T19266] netdevsim netdevsim4 netdevsim2: unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.460931][T19266] netdevsim netdevsim4 netdevsim3: unset [0, 0] type 1 family 0 port 8472 - 0 [ 449.473223][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 449.515717][T19000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.533495][T19000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.552625][T19000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.563827][T19000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.574108][T19000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.585006][T19000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.595588][T19000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.613419][T19000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.633883][T19000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.645884][T19000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.657347][T19000] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 449.668574][T19000] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 449.680354][T19000] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 449.749423][T19264] syzkaller0: entered promiscuous mode [ 449.755280][T19264] syzkaller0: entered allmulticast mode [ 449.761477][T19264] tipc: Resetting bearer [ 449.778450][T19272] tipc: Enabling of bearer rejected, failed to enable media [ 449.790027][T19251] tipc: Resetting bearer [ 450.514058][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 451.129550][T19291] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3830'. [ 451.240114][ T5837] Bluetooth: hci5: command tx timeout [ 451.553114][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 452.593179][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 452.860903][T19251] tipc: Disabling bearer [ 452.944399][T19000] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.968489][T19000] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.979278][T19000] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 452.990155][T19000] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 453.078544][T19227] chnl_net:caif_netlink_parms(): no params data found [ 453.104794][T19294] netlink: 44 bytes leftover after parsing attributes in process `syz.1.3831'. [ 453.137286][T19294] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3831'. [ 453.154079][T19294] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3831'. [ 453.313200][ T5837] Bluetooth: hci5: command tx timeout [ 453.388645][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.407206][T19227] bridge0: port 1(bridge_slave_0) entered blocking state [ 453.418895][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 453.435108][T19227] bridge0: port 1(bridge_slave_0) entered disabled state [ 453.454056][T19227] bridge_slave_0: entered allmulticast mode [ 453.467323][T19227] bridge_slave_0: entered promiscuous mode [ 453.512897][T19227] bridge0: port 2(bridge_slave_1) entered blocking state [ 453.537706][T19227] bridge0: port 2(bridge_slave_1) entered disabled state [ 453.548969][T19227] bridge_slave_1: entered allmulticast mode [ 453.558800][T19227] bridge_slave_1: entered promiscuous mode [ 453.616651][T19227] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 453.632814][T19313] tipc: Enabled bearer , priority 0 [ 453.633197][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 453.652257][T19227] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 453.716330][T19313] syzkaller0: entered promiscuous mode [ 453.722837][T19313] syzkaller0: entered allmulticast mode [ 453.730773][T19313] tipc: Resetting bearer [ 453.775037][T19227] team0: Port device team_slave_0 added [ 453.781899][ T1123] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 453.795177][T19312] tipc: Resetting bearer [ 453.809033][ T1123] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 454.673164][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 455.713189][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 456.439329][T19312] tipc: Disabling bearer [ 456.462100][T19227] team0: Port device team_slave_1 added [ 456.605588][T19227] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 456.612740][T19227] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.694946][T19227] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 456.735553][T19227] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 456.742662][T19227] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 456.760465][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 456.771777][T19227] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 456.862198][T19331] tipc: Enabled bearer , priority 0 [ 456.936535][T19324] syzkaller0: entered promiscuous mode [ 456.942137][T19324] syzkaller0: entered allmulticast mode [ 456.959484][T19324] tipc: Resetting bearer [ 456.969594][T19333] FAULT_INJECTION: forcing a failure. [ 456.969594][T19333] name failslab, interval 1, probability 0, space 0, times 0 [ 456.989880][T19333] CPU: 1 UID: 0 PID: 19333 Comm: syz.4.3842 Not tainted 6.14.0-rc1-syzkaller-00126-g44ce3511c21c #0 [ 456.989909][T19333] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 456.989923][T19333] Call Trace: [ 456.989930][T19333] [ 456.989938][T19333] dump_stack_lvl+0x241/0x360 [ 456.989970][T19333] ? __pfx_dump_stack_lvl+0x10/0x10 [ 456.989994][T19333] ? __pfx__printk+0x10/0x10 [ 456.990031][T19333] ? kmem_cache_alloc_node_noprof+0x4f/0x380 [ 456.990058][T19333] ? __pfx___might_resched+0x10/0x10 [ 456.990081][T19333] ? aa_label_sk_perm+0x4f3/0x6c0 [ 456.990113][T19333] should_fail_ex+0x40a/0x550 [ 456.990141][T19333] should_failslab+0xac/0x100 [ 456.990165][T19333] kmem_cache_alloc_node_noprof+0x77/0x380 [ 456.990188][T19333] ? __alloc_skb+0x1c3/0x440 [ 456.990225][T19333] __alloc_skb+0x1c3/0x440 [ 456.990261][T19333] ? __pfx___alloc_skb+0x10/0x10 [ 456.990304][T19333] netlink_sendmsg+0x638/0xcb0 [ 456.990340][T19333] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.990367][T19333] ? aa_sock_msg_perm+0x91/0x160 [ 456.990403][T19333] ? __pfx_netlink_sendmsg+0x10/0x10 [ 456.990423][T19333] __sock_sendmsg+0x221/0x270 [ 456.990454][T19333] ____sys_sendmsg+0x52a/0x7e0 [ 456.990485][T19333] ? __pfx_____sys_sendmsg+0x10/0x10 [ 456.990512][T19333] ? __fget_files+0x2a/0x410 [ 456.990540][T19333] ? __sys_sendmmsg+0x392/0x720 [ 456.990560][T19333] ? __might_fault+0xaa/0x120 [ 456.990591][T19333] __sys_sendmmsg+0x36a/0x720 [ 456.990624][T19333] ? __pfx___sys_sendmmsg+0x10/0x10 [ 456.990658][T19333] ? __pfx_lock_release+0x10/0x10 [ 456.990684][T19333] ? kstrtouint_from_user+0x128/0x190 [ 456.990733][T19333] ? ksys_write+0x22a/0x2b0 [ 456.990768][T19333] ? __pfx_lock_release+0x10/0x10 [ 456.990802][T19333] ? sb_end_write+0xe9/0x1c0 [ 456.990825][T19333] ? vfs_write+0x7fa/0xd10 [ 456.990853][T19333] ? __mutex_unlock_slowpath+0x227/0x800 [ 456.990916][T19333] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 456.990950][T19333] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 456.990982][T19333] ? do_syscall_64+0x100/0x230 [ 456.991017][T19333] __x64_sys_sendmmsg+0xa0/0xb0 [ 456.991042][T19333] do_syscall_64+0xf3/0x230 [ 456.991072][T19333] ? clear_bhb_loop+0x35/0x90 [ 456.991105][T19333] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 456.991135][T19333] RIP: 0033:0x7ff8bb38cde9 [ 456.991155][T19333] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 456.991173][T19333] RSP: 002b:00007ff8bc24a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 456.991197][T19333] RAX: ffffffffffffffda RBX: 00007ff8bb5a5fa0 RCX: 00007ff8bb38cde9 [ 456.991213][T19333] RDX: 040000000000009f RSI: 00004000000002c0 RDI: 0000000000000004 [ 456.991228][T19333] RBP: 00007ff8bc24a090 R08: 0000000000000000 R09: 0000000000000000 [ 456.991241][T19333] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000001 [ 456.991254][T19333] R13: 0000000000000000 R14: 00007ff8bb5a5fa0 R15: 00007ffe976abde8 [ 456.991284][T19333] [ 457.360577][T19323] tipc: Resetting bearer [ 457.793231][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 458.833210][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 459.872048][ T5846] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 459.873241][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 459.884752][ T5846] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 459.896551][ T5846] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 459.918552][ T5846] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 459.928456][ T5846] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 459.940112][ T5846] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 460.581184][T19323] tipc: Disabling bearer [ 460.721063][T19227] hsr_slave_0: entered promiscuous mode [ 460.739723][T19227] hsr_slave_1: entered promiscuous mode [ 460.758995][T19227] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 460.774773][T19227] Cannot create hsr debugfs directory [ 460.781600][T19351] netlink: 'syz.1.3847': attribute type 1 has an invalid length. [ 460.808111][T19344] syzkaller0 speed is unknown, defaulting to 1000 [ 460.890516][T19351] bond1: (slave ip6gretap1): Enslaving as a backup interface with an up link [ 460.913188][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 460.953917][T19351] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3847'. [ 461.014158][T19351] veth3: entered promiscuous mode [ 461.079266][T19356] tipc: Enabled bearer , priority 0 [ 461.134635][T19356] syzkaller0: entered promiscuous mode [ 461.141100][T19356] syzkaller0: entered allmulticast mode [ 461.149193][T19356] tipc: Resetting bearer [ 461.168885][T19355] tipc: Resetting bearer [ 461.958917][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 462.033673][ T5837] Bluetooth: hci4: command tx timeout [ 462.993121][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 463.939144][T19355] tipc: Disabling bearer [ 463.971004][T19370] veth0_to_batadv: entered allmulticast mode [ 464.033141][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 464.114432][ T5837] Bluetooth: hci4: command tx timeout [ 464.319436][T19344] chnl_net:caif_netlink_parms(): no params data found [ 464.492113][T19385] tipc: Enabled bearer , priority 0 [ 464.499548][T19387] tc_dump_action: action bad kind [ 464.600575][T19389] syzkaller0: entered promiscuous mode [ 464.607949][T19389] syzkaller0: entered allmulticast mode [ 464.615589][T19389] tipc: Resetting bearer [ 464.663404][T19384] tipc: Resetting bearer [ 465.074689][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 466.118330][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 466.208364][ T5854] Bluetooth: hci4: command tx timeout [ 467.161451][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 467.675027][T19384] tipc: Disabling bearer [ 467.684256][T19227] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 467.794058][ T5854] Bluetooth: hci1: command 0x0406 tx timeout [ 467.906867][T19416] netlink: 36 bytes leftover after parsing attributes in process `syz.4.3862'. [ 467.917760][T19227] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 467.933893][T19344] bridge0: port 1(bridge_slave_0) entered blocking state [ 467.936273][T19416] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3862'. [ 467.958768][T19344] bridge0: port 1(bridge_slave_0) entered disabled state [ 467.980998][T19344] bridge_slave_0: entered allmulticast mode [ 467.995391][T19344] bridge_slave_0: entered promiscuous mode [ 468.017001][T19227] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 468.046044][T19344] bridge0: port 2(bridge_slave_1) entered blocking state [ 468.083929][T19344] bridge0: port 2(bridge_slave_1) entered disabled state [ 468.096513][T19344] bridge_slave_1: entered allmulticast mode [ 468.105134][T19344] bridge_slave_1: entered promiscuous mode [ 468.112166][T19227] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 468.132551][T19419] tipc: Enabled bearer , priority 0 [ 468.193125][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 468.200490][T19423] syzkaller0: entered promiscuous mode [ 468.206413][T19423] syzkaller0: entered allmulticast mode [ 468.212876][T19423] tipc: Resetting bearer [ 468.259063][T19427] FAULT_INJECTION: forcing a failure. [ 468.259063][T19427] name fail_usercopy, interval 1, probability 0, space 0, times 0 [ 468.274420][T19427] CPU: 1 UID: 0 PID: 19427 Comm: syz.4.3865 Not tainted 6.14.0-rc1-syzkaller-00126-g44ce3511c21c #0 [ 468.274449][T19427] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 468.274462][T19427] Call Trace: [ 468.274469][T19427] [ 468.274478][T19427] dump_stack_lvl+0x241/0x360 [ 468.274508][T19427] ? __pfx_dump_stack_lvl+0x10/0x10 [ 468.274531][T19427] ? __pfx__printk+0x10/0x10 [ 468.274567][T19427] ? __pfx_lock_release+0x10/0x10 [ 468.274605][T19427] should_fail_ex+0x40a/0x550 [ 468.274634][T19427] _copy_from_iter+0x1e9/0x1c20 [ 468.274667][T19427] ? __virt_addr_valid+0x183/0x530 [ 468.274709][T19427] ? __alloc_skb+0x28f/0x440 [ 468.274741][T19427] ? __pfx__copy_from_iter+0x10/0x10 [ 468.274774][T19427] ? __virt_addr_valid+0x183/0x530 [ 468.274804][T19427] ? __virt_addr_valid+0x183/0x530 [ 468.274831][T19427] ? __virt_addr_valid+0x45f/0x530 [ 468.274862][T19427] ? __phys_addr_symbol+0x2f/0x70 [ 468.274892][T19427] ? __check_object_size+0x47a/0x730 [ 468.274918][T19427] netlink_sendmsg+0x73d/0xcb0 [ 468.274957][T19427] ? __pfx_netlink_sendmsg+0x10/0x10 [ 468.274982][T19427] ? aa_sock_msg_perm+0x91/0x160 [ 468.275017][T19427] ? __pfx_netlink_sendmsg+0x10/0x10 [ 468.275036][T19427] __sock_sendmsg+0x221/0x270 [ 468.275076][T19427] ____sys_sendmsg+0x52a/0x7e0 [ 468.275107][T19427] ? __pfx_____sys_sendmsg+0x10/0x10 [ 468.275126][T19427] ? __fget_files+0x2a/0x410 [ 468.275153][T19427] ? __sys_sendmmsg+0x392/0x720 [ 468.275175][T19427] ? __might_fault+0xaa/0x120 [ 468.275207][T19427] __sys_sendmmsg+0x36a/0x720 [ 468.275239][T19427] ? __pfx___sys_sendmmsg+0x10/0x10 [ 468.275274][T19427] ? __pfx_lock_release+0x10/0x10 [ 468.275300][T19427] ? kstrtouint_from_user+0x128/0x190 [ 468.275354][T19427] ? ksys_write+0x22a/0x2b0 [ 468.275382][T19427] ? __pfx_lock_release+0x10/0x10 [ 468.275414][T19427] ? sb_end_write+0xe9/0x1c0 [ 468.275437][T19427] ? vfs_write+0x7fa/0xd10 [ 468.275467][T19427] ? __mutex_unlock_slowpath+0x227/0x800 [ 468.275526][T19427] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 468.275557][T19427] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 468.275587][T19427] ? do_syscall_64+0x100/0x230 [ 468.275619][T19427] __x64_sys_sendmmsg+0xa0/0xb0 [ 468.275641][T19427] do_syscall_64+0xf3/0x230 [ 468.275669][T19427] ? clear_bhb_loop+0x35/0x90 [ 468.275702][T19427] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 468.275728][T19427] RIP: 0033:0x7ff8bb38cde9 [ 468.275746][T19427] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 468.275763][T19427] RSP: 002b:00007ff8bc24a038 EFLAGS: 00000246 ORIG_RAX: 0000000000000133 [ 468.275785][T19427] RAX: ffffffffffffffda RBX: 00007ff8bb5a5fa0 RCX: 00007ff8bb38cde9 [ 468.275801][T19427] RDX: 040000000000009f RSI: 00004000000002c0 RDI: 0000000000000004 [ 468.275815][T19427] RBP: 00007ff8bc24a090 R08: 0000000000000000 R09: 0000000000000000 [ 468.275828][T19427] R10: 0000000000000000 R11: 0000000000000246 R12: 0000000000000002 [ 468.275840][T19427] R13: 0000000000000000 R14: 00007ff8bb5a5fa0 R15: 00007ffe976abde8 [ 468.275868][T19427] [ 468.282423][ T5837] Bluetooth: hci4: command tx timeout [ 468.616999][T19418] tipc: Resetting bearer [ 468.720609][T19434] netlink: 8 bytes leftover after parsing attributes in process `syz.4.3868'. [ 469.235299][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 470.275119][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 471.313235][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 471.504557][T19418] tipc: Disabling bearer [ 471.528635][T19344] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 471.539156][T19433] unknown channel width for channel at 909000KHz? [ 471.560326][T19439] workqueue: Failed to create a rescuer kthread for wq "bond2": -EINTR [ 471.582254][T19344] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 471.760958][T19344] team0: Port device team_slave_0 added [ 471.775092][T19344] team0: Port device team_slave_1 added [ 471.783680][T19444] tipc: Enabled bearer , priority 0 [ 471.868755][T19444] syzkaller0: entered promiscuous mode [ 471.876631][T19444] syzkaller0: entered allmulticast mode [ 471.884018][T19444] tipc: Resetting bearer [ 471.935117][T19443] tipc: Resetting bearer [ 472.353297][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 473.403581][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 474.433126][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 475.225451][T19443] tipc: Disabling bearer [ 475.244309][T19344] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 475.251318][T19344] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.278282][T19344] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 475.358401][T19344] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 475.403377][T19344] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 475.459911][T19344] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 475.473153][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 475.541807][T19465] netlink: 40 bytes leftover after parsing attributes in process `syz.1.3877'. [ 475.561523][T19344] hsr_slave_0: entered promiscuous mode [ 475.579291][T19344] hsr_slave_1: entered promiscuous mode [ 475.594584][T19344] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 475.612517][T19344] Cannot create hsr debugfs directory [ 475.666525][T19466] tipc: Enabled bearer , priority 0 [ 475.707798][T19464] syzkaller0: entered promiscuous mode [ 475.718022][T19464] syzkaller0: entered allmulticast mode [ 475.735847][T19464] tipc: Resetting bearer [ 475.821770][T19227] 8021q: adding VLAN 0 to HW filter on device bond0 [ 475.840633][T19463] tipc: Resetting bearer [ 476.514146][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 477.554934][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 478.593097][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 478.706516][T19463] tipc: Disabling bearer [ 478.829760][T19227] 8021q: adding VLAN 0 to HW filter on device team0 [ 478.879702][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 478.886889][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 478.975499][ T9819] bridge0: port 2(bridge_slave_1) entered blocking state [ 478.982900][ T9819] bridge0: port 2(bridge_slave_1) entered forwarding state [ 479.149328][T19501] syzkaller0: entered promiscuous mode [ 479.158360][T19501] syzkaller0: entered allmulticast mode [ 479.195002][T19497] netlink: 8 bytes leftover after parsing attributes in process `syz.1.3885'. [ 479.219046][T19493] tipc: Enabled bearer , priority 0 [ 479.240444][T19500] netlink: 12 bytes leftover after parsing attributes in process `syz.1.3885'. [ 479.252221][T19490] netlink: 'syz.1.3885': attribute type 4 has an invalid length. [ 479.300935][T19492] tipc: Resetting bearer [ 479.637206][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 480.676414][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 481.714010][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 482.142295][T19492] tipc: Disabling bearer [ 482.294545][T19344] netdevsim netdevsim3 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.310361][T19513] netlink: 40 bytes leftover after parsing attributes in process `syz.0.3890'. [ 482.544767][T19344] netdevsim netdevsim3 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.555479][T19528] netlink: 'syz.4.3894': attribute type 1 has an invalid length. [ 482.563559][T19528] netlink: 'syz.4.3894': attribute type 2 has an invalid length. [ 482.604702][T19528] netlink: 'syz.4.3894': attribute type 1 has an invalid length. [ 482.655446][T19528] netlink: 'syz.4.3894': attribute type 2 has an invalid length. [ 482.684921][T19539] netlink: 'syz.1.3893': attribute type 1 has an invalid length. [ 482.695664][T19539] netlink: 88 bytes leftover after parsing attributes in process `syz.1.3893'. [ 482.726189][T19344] netdevsim netdevsim3 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.753200][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 482.781369][T19523] delete_channel: no stack [ 482.879444][T19344] netdevsim netdevsim3 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 482.946919][T19227] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 482.968049][T19541] tipc: Enabled bearer , priority 0 [ 483.108831][T19541] syzkaller0: entered promiscuous mode [ 483.144048][T19541] syzkaller0: entered allmulticast mode [ 483.164156][T19541] tipc: Resetting bearer [ 483.217863][T19540] tipc: Resetting bearer [ 483.794634][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 484.833095][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 485.873209][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 486.059784][T19540] tipc: Disabling bearer [ 486.080622][T19554] tipc: Enabled bearer , priority 0 [ 486.172505][T19558] syzkaller0: entered promiscuous mode [ 486.178260][T19558] syzkaller0: entered allmulticast mode [ 486.185415][T19558] tipc: Resetting bearer [ 486.354243][ T1098] tipc: Resetting bearer [ 486.361858][T19549] tipc: Resetting bearer [ 486.916358][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 487.227948][T19574] netlink: 32 bytes leftover after parsing attributes in process `syz.4.3904'. [ 487.953143][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 488.993331][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 489.047712][T19549] tipc: Disabling bearer [ 489.069020][T19573] netlink: 40 bytes leftover after parsing attributes in process `syz.4.3904'. [ 489.254771][T19227] veth0_vlan: entered promiscuous mode [ 489.293966][T19227] veth1_vlan: entered promiscuous mode [ 489.307384][T19344] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 489.363554][T19344] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 489.418197][T19344] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 489.478843][T19344] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 489.539324][T19227] veth0_macvtap: entered promiscuous mode [ 489.583464][T19589] netlink: 'syz.0.3910': attribute type 3 has an invalid length. [ 489.626693][T19589] netlink: 766 bytes leftover after parsing attributes in process `syz.0.3910'. [ 489.667142][T19227] veth1_macvtap: entered promiscuous mode [ 489.839966][T19600] tipc: Enabled bearer , priority 0 [ 489.951308][T19600] syzkaller0: entered promiscuous mode [ 489.957896][T19600] syzkaller0: entered allmulticast mode [ 489.969104][T19600] tipc: Resetting bearer [ 489.996543][T19227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.010688][T19227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.022567][T19227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.033534][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 490.046526][T19227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.057059][T19227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.068564][T19227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.079277][T19227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.092299][T19227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.106123][T19227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.117527][T19227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.134655][T19227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.146306][T19227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.156352][T19227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 490.173185][T19227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 490.204711][T19227] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 490.267544][T19599] tipc: Resetting bearer [ 490.391530][T19618] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3917'. [ 490.462905][T19618] netlink: 12 bytes leftover after parsing attributes in process `syz.0.3917'. [ 490.653858][T19622] netlink: 8 bytes leftover after parsing attributes in process `syz.0.3917'. [ 491.073207][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 492.116424][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 492.879504][T19599] tipc: Disabling bearer [ 492.888818][T19610] tipc: Enabled bearer , priority 0 [ 492.958402][T19611] syzkaller0: entered promiscuous mode [ 492.964416][T19611] syzkaller0: entered allmulticast mode [ 492.971570][T19611] tipc: Resetting bearer [ 493.033685][T19604] tipc: Resetting bearer [ 493.153104][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 494.193263][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 495.233299][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 495.653628][T19604] tipc: Disabling bearer [ 495.724725][T19227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.745005][T19227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.773554][T19227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.794978][ T30] INFO: task kworker/u8:8:5903 blocked for more than 143 seconds. [ 495.798596][T19227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.814241][ T30] Not tainted 6.14.0-rc1-syzkaller-00126-g44ce3511c21c #0 [ 495.828047][T19227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.835485][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 495.839578][T19227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.858562][T19227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.872539][ T30] task:kworker/u8:8 state:D stack:21368 pid:5903 tgid:5903 ppid:2 task_flags:0x4208160 flags:0x00004000 [ 495.873647][T19227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.896109][ T30] Workqueue: ib-unreg-wq ib_unregister_work [ 495.912418][ T30] Call Trace: [ 495.917081][ T30] [ 495.918831][T19227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.922570][ T30] __schedule+0x190e/0x4c90 [ 495.932407][T19227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.946893][T19227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 495.955128][ T30] ? __pfx___schedule+0x10/0x10 [ 495.972583][ T30] ? __pfx_lock_release+0x10/0x10 [ 495.982726][ T30] ? kthread_data+0x52/0xd0 [ 495.984703][T19227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 495.992890][ T30] ? wq_worker_sleeping+0x66/0x240 [ 496.010286][T19227] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 496.021012][ T9799] unregister_netdevice: waiting for wlan0 to become free. Usage count = 3 [ 496.021419][ T30] ? schedule+0x90/0x320 [ 496.031629][ T9799] ref_tracker: wlan%d@ffff88807d340608 has 1/1 users at [ 496.031629][ T9799] ib_device_set_netdev+0x2cb/0x6b0 [ 496.031629][ T9799] siw_newlink+0x404/0xd60 [ 496.031629][ T9799] nldev_newlink+0x5c0/0x640 [ 496.031629][ T9799] rdma_nl_rcv+0x6dd/0x9e0 [ 496.031629][ T9799] netlink_unicast+0x7f6/0x990 [ 496.031629][ T9799] netlink_sendmsg+0x8e4/0xcb0 [ 496.031629][ T9799] __sock_sendmsg+0x221/0x270 [ 496.031629][ T9799] ____sys_sendmsg+0x52a/0x7e0 [ 496.031629][ T9799] __sys_sendmsg+0x269/0x350 [ 496.031629][ T9799] do_syscall_64+0xf3/0x230 [ 496.031629][ T9799] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 496.031629][ T9799] [ 496.101957][ T30] schedule+0x14b/0x320 [ 496.106360][ T30] schedule_timeout+0xb0/0x290 [ 496.111280][ T30] ? __pfx_schedule_timeout+0x10/0x10 [ 496.119739][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 496.123359][T19227] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 496.126438][ T30] ? wait_for_completion+0x2fe/0x620 [ 496.148240][T19227] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 496.165603][ T30] ? wait_for_completion+0x2fe/0x620 [ 496.171070][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 496.177339][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 496.182717][ T30] ? wait_for_completion+0x2fe/0x620 [ 496.184040][T19227] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.189202][ T30] wait_for_completion+0x355/0x620 [ 496.212312][T19227] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.232125][T19227] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.246892][T19227] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 496.263281][ T30] ? __pfx_wait_for_completion+0x10/0x10 [ 496.273199][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 496.284388][ T30] ? remove_client_context+0xc0/0x1e0 [ 496.296689][ T30] disable_device+0x1c7/0x360 [ 496.307948][ T30] ? __pfx_disable_device+0x10/0x10 [ 496.319918][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 496.335624][ T30] __ib_unregister_device+0x2ac/0x3d0 [ 496.341369][ T30] ? process_scheduled_works+0x976/0x1840 [ 496.348117][ T30] ib_unregister_work+0x19/0x30 [ 496.362120][ T30] process_scheduled_works+0xa66/0x1840 [ 496.368508][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 496.375096][ T30] ? assign_work+0x364/0x3d0 [ 496.379860][ T30] worker_thread+0x870/0xd30 [ 496.385264][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 496.391847][ T30] ? __kthread_parkme+0x169/0x1d0 [ 496.398536][ T30] ? __pfx_worker_thread+0x10/0x10 [ 496.404425][ T30] kthread+0x7a9/0x920 [ 496.408749][ T30] ? __pfx_kthread+0x10/0x10 [ 496.413965][ T30] ? __pfx_worker_thread+0x10/0x10 [ 496.419299][ T30] ? __pfx_kthread+0x10/0x10 [ 496.425661][ T30] ? __pfx_kthread+0x10/0x10 [ 496.430475][ T30] ? __pfx_kthread+0x10/0x10 [ 496.447259][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 496.452635][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 496.459042][ T30] ? __pfx_kthread+0x10/0x10 [ 496.464178][ T30] ret_from_fork+0x4b/0x80 [ 496.468745][ T30] ? __pfx_kthread+0x10/0x10 [ 496.473994][ T30] ret_from_fork_asm+0x1a/0x30 [ 496.478939][ T30] [ 496.482163][ T30] [ 496.482163][ T30] Showing all locks held in the system: [ 496.492095][ T30] 1 lock held by khungtaskd/30: [ 496.497468][ T30] #0: ffffffff8e9387e0 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x55/0x2a0 [ 496.508613][ T30] 3 locks held by kworker/u8:6/1098: [ 496.514798][ T30] #0: ffff88803056d148 ((wq_completion)ipv6_addrconf){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 496.527099][ T30] #1: ffffc90003ecfc60 ((work_completion)(&(&ifa->dad_work)->work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 496.544103][ T30] #2: ffffffff8fcc0408 (rtnl_mutex){+.+.}-{4:4}, at: addrconf_dad_work+0x10e/0x16a0 [ 496.555255][ T30] 2 locks held by getty/5595: [ 496.560187][ T30] #0: ffff888030e1f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 496.570860][ T30] #1: ffffc90002fde2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x6a6/0x1e00 [ 496.582246][ T30] 3 locks held by kworker/u8:8/5903: [ 496.588078][ T30] #0: ffff888145aa2148 ((wq_completion)ib-unreg-wq){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 496.648617][ T30] #1: ffffc9000454fc60 ((work_completion)(&device->unregistration_work)){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 496.662432][ T30] #2: ffff8880653f46c0 (&device->unregistration_lock){+.+.}-{4:4}, at: __ib_unregister_device+0x264/0x3d0 [ 496.677804][ T30] 4 locks held by kworker/u8:9/9799: [ 496.683293][ T30] #0: ffff88801baf5948 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 496.694647][ T30] #1: ffffc9001b4cfc60 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 496.705934][ T30] #2: ffffffff8fcb3e10 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0x17a/0xd60 [ 496.715583][ T30] #3: ffffffff8e93db80 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x530 [ 496.726057][ T30] 3 locks held by kworker/u8:14/9817: [ 496.731463][ T30] #0: ffff88801ac89148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x93b/0x1840 [ 496.747702][ T30] #1: ffffc9001b49fc60 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x976/0x1840 [ 496.759327][ T30] #2: ffffffff8fcc0408 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 496.768718][ T30] 2 locks held by kworker/u8:15/9819: [ 496.774744][ T30] 2 locks held by syz.2.3777/19086: [ 496.780024][ T30] #0: ffffffff8fcb3e10 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x328/0x570 [ 496.789802][ T30] #1: ffff8880653f46c0 (&device->unregistration_lock){+.+.}-{4:4}, at: rdma_dev_change_netns+0x3a/0x2f0 [ 496.801684][ T30] 1 lock held by syz-executor/19227: [ 496.807643][ T30] #0: ffffffff8fcc0408 (rtnl_mutex){+.+.}-{4:4}, at: inet_rtm_newaddr+0x47e/0x1bd0 [ 496.817314][ T30] 1 lock held by syz-executor/19344: [ 496.822834][ T30] #0: ffffffff8fcc0408 (rtnl_mutex){+.+.}-{4:4}, at: inet6_rtm_newaddr+0x7f3/0xef0 [ 496.832507][ T30] 2 locks held by syz.4.3918/19625: [ 496.839116][ T30] #0: ffffffff8fcc0408 (rtnl_mutex){+.+.}-{4:4}, at: tcx_link_release+0xc7/0x620 [ 496.850650][ T30] #1: ffffffff8e93dcb8 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x451/0x830 [ 496.861838][ T30] 1 lock held by syz.0.3919/19629: [ 496.871392][ T30] #0: ffffffff8fcc0408 (rtnl_mutex){+.+.}-{4:4}, at: __tun_chr_ioctl+0x48c/0x2400 [ 496.881045][ T30] 1 lock held by syz.0.3919/19638: [ 496.886561][ T30] #0: ffffffff8fcc0408 (rtnl_mutex){+.+.}-{4:4}, at: rtnetlink_rcv_msg+0x6e6/0xcf0 [ 496.896934][ T30] [ 496.903794][T19344] 8021q: adding VLAN 0 to HW filter on device bond0 [ 496.917950][ T30] ============================================= [ 496.917950][ T30] [ 496.932315][ T30] NMI backtrace for cpu 0 [ 496.932334][ T30] CPU: 0 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc1-syzkaller-00126-g44ce3511c21c #0 [ 496.932358][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 496.932371][ T30] Call Trace: [ 496.932379][ T30] [ 496.932388][ T30] dump_stack_lvl+0x241/0x360 [ 496.932419][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 496.932442][ T30] ? __pfx__printk+0x10/0x10 [ 496.932488][ T30] nmi_cpu_backtrace+0x49c/0x4d0 [ 496.932519][ T30] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 496.932541][ T30] ? _printk+0xd5/0x120 [ 496.932572][ T30] ? __pfx__printk+0x10/0x10 [ 496.932604][ T30] ? __wake_up_klogd+0xcc/0x110 [ 496.932630][ T30] ? __pfx__printk+0x10/0x10 [ 496.932663][ T30] ? __rcu_read_unlock+0xa1/0x110 [ 496.932693][ T30] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 496.932720][ T30] nmi_trigger_cpumask_backtrace+0x198/0x320 [ 496.932749][ T30] watchdog+0x1058/0x10a0 [ 496.932779][ T30] ? watchdog+0x1ea/0x10a0 [ 496.932811][ T30] ? __pfx_watchdog+0x10/0x10 [ 496.932839][ T30] kthread+0x7a9/0x920 [ 496.932867][ T30] ? __pfx_kthread+0x10/0x10 [ 496.932898][ T30] ? __pfx_watchdog+0x10/0x10 [ 496.932926][ T30] ? __pfx_kthread+0x10/0x10 [ 496.932953][ T30] ? __pfx_kthread+0x10/0x10 [ 496.932990][ T30] ? __pfx_kthread+0x10/0x10 [ 496.933016][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 496.933040][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 496.933066][ T30] ? __pfx_kthread+0x10/0x10 [ 496.933094][ T30] ret_from_fork+0x4b/0x80 [ 496.933119][ T30] ? __pfx_kthread+0x10/0x10 [ 496.933241][ T30] ret_from_fork_asm+0x1a/0x30 [ 496.933281][ T30] [ 497.102658][ T30] Sending NMI from CPU 0 to CPUs 1: [ 497.108897][ C1] NMI backtrace for cpu 1 [ 497.108914][ C1] CPU: 1 UID: 0 PID: 61 Comm: kworker/u8:4 Not tainted 6.14.0-rc1-syzkaller-00126-g44ce3511c21c #0 [ 497.108933][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 497.108945][ C1] Workqueue: events_unbound cfg80211_wiphy_work [ 497.108973][ C1] RIP: 0010:stack_depot_save_flags+0x1cd/0x940 [ 497.108996][ C1] Code: 8b 44 24 08 45 85 e4 75 67 4d 8b 3f 49 39 d7 74 5c 45 39 77 10 75 f2 45 39 4f 14 75 ec 31 c0 49 8b 0c c0 49 3b 4c c7 20 75 df <48> ff c0 41 39 c5 75 ed f6 c3 02 74 39 49 8d 7f 1c 45 8b 67 1c 45 [ 497.109011][ C1] RSP: 0018:ffffc9000212e9e0 EFLAGS: 00000246 [ 497.109025][ C1] RAX: 0000000000000002 RBX: 0000000000000000 RCX: ffffffff820690e9 [ 497.109037][ C1] RDX: ffff88823b6dcf20 RSI: 0000000000000001 RDI: 00000000fd3a19b8 [ 497.109049][ C1] RBP: 00000000ddfd935b R08: ffffc9000212ea50 R09: 0000000000000011 [ 497.109060][ C1] R10: ffffc9000212e910 R11: ffffffff81ab1dc0 R12: ffff88801eeb1b08 [ 497.109073][ C1] R13: 0000000000000011 R14: 00000000b298dcf2 R15: ffff888028bf0d10 [ 497.109085][ C1] FS: 0000000000000000(0000) GS:ffff8880b8700000(0000) knlGS:0000000000000000 [ 497.109106][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 497.109118][ C1] CR2: 000055557ee465c8 CR3: 000000007ed94000 CR4: 00000000003526f0 [ 497.109133][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 497.109143][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 497.109154][ C1] Call Trace: [ 497.109160][ C1] [ 497.109168][ C1] ? nmi_cpu_backtrace+0x3c2/0x4d0 [ 497.109189][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 497.109215][ C1] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 497.109234][ C1] ? nmi_handle+0x2a/0x5a0 [ 497.109267][ C1] ? nmi_cpu_backtrace_handler+0xc/0x20 [ 497.109289][ C1] ? nmi_handle+0x14f/0x5a0 [ 497.109313][ C1] ? nmi_handle+0x2a/0x5a0 [ 497.109339][ C1] ? stack_depot_save_flags+0x1cd/0x940 [ 497.109359][ C1] ? default_do_nmi+0x63/0x160 [ 497.109377][ C1] ? exc_nmi+0x123/0x1f0 [ 497.109395][ C1] ? end_repeat_nmi+0xf/0x53 [ 497.109422][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 497.109443][ C1] ? kvfree_call_rcu+0xa9/0x3e0 [ 497.109470][ C1] ? stack_depot_save_flags+0x1cd/0x940 [ 497.109491][ C1] ? stack_depot_save_flags+0x1cd/0x940 [ 497.109512][ C1] ? stack_depot_save_flags+0x1cd/0x940 [ 497.109532][ C1] [ 497.109538][ C1] [ 497.109549][ C1] kasan_save_stack+0x4f/0x60 [ 497.109572][ C1] ? kasan_save_stack+0x3f/0x60 [ 497.109593][ C1] ? kasan_record_aux_stack+0xaa/0xc0 [ 497.109613][ C1] ? kvfree_call_rcu+0xa9/0x3e0 [ 497.109638][ C1] ? cfg80211_update_known_bss+0xb45/0x1590 [ 497.109654][ C1] ? __cfg80211_bss_update+0x153/0x2030 [ 497.109680][ C1] ? cfg80211_inform_single_bss_data+0xd82/0x2070 [ 497.109706][ C1] ? cfg80211_inform_bss_data+0x3c8/0x5d60 [ 497.109732][ C1] ? cfg80211_inform_bss_frame_data+0x3bb/0x720 [ 497.109759][ C1] ? ieee80211_bss_info_update+0x8a7/0xbc0 [ 497.109783][ C1] ? ieee80211_ibss_rx_queued_mgmt+0x1969/0x2d70 [ 497.109808][ C1] ? ieee80211_iface_work+0x8dc/0xf90 [ 497.109834][ C1] ? cfg80211_wiphy_work+0x2f0/0x490 [ 497.109859][ C1] ? process_scheduled_works+0xa66/0x1840 [ 497.109879][ C1] ? worker_thread+0x870/0xd30 [ 497.109898][ C1] ? kthread+0x7a9/0x920 [ 497.109920][ C1] ? ret_from_fork+0x4b/0x80 [ 497.109941][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 497.109979][ C1] ? __phys_addr+0xba/0x170 [ 497.110005][ C1] kasan_record_aux_stack+0xaa/0xc0 [ 497.110025][ C1] kvfree_call_rcu+0xa9/0x3e0 [ 497.110054][ C1] cfg80211_update_known_bss+0xb45/0x1590 [ 497.110075][ C1] ? cmp_bss+0x8c7/0xea0 [ 497.110172][ C1] __cfg80211_bss_update+0x153/0x2030 [ 497.110215][ C1] ? do_raw_spin_lock+0x14f/0x370 [ 497.110237][ C1] ? __pfx___local_bh_disable_ip+0x10/0x10 [ 497.110260][ C1] ? __pfx_do_raw_spin_lock+0x10/0x10 [ 497.110278][ C1] ? rcu_is_watching+0x15/0xb0 [ 497.110295][ C1] ? trace_kmalloc+0x1f/0xd0 [ 497.110312][ C1] ? cfg80211_inform_single_bss_data+0xd6e/0x2070 [ 497.110344][ C1] cfg80211_inform_single_bss_data+0xd82/0x2070 [ 497.110377][ C1] ? validate_chain+0x11e/0x5920 [ 497.110394][ C1] ? deref_stack_reg+0x17c/0x210 [ 497.110419][ C1] ? __pfx_cfg80211_inform_single_bss_data+0x10/0x10 [ 497.110459][ C1] ? ret_from_fork_asm+0x1a/0x30 [ 497.110481][ C1] ? cfg80211_inform_bss_data+0x3b0/0x5d60 [ 497.110512][ C1] cfg80211_inform_bss_data+0x3c8/0x5d60 [ 497.110555][ C1] ? __pfx_validate_chain+0x10/0x10 [ 497.110583][ C1] ? __pfx_validate_chain+0x10/0x10 [ 497.110601][ C1] ? __pfx_cfg80211_inform_bss_data+0x10/0x10 [ 497.110633][ C1] ? mark_lock+0x9a/0x360 [ 497.110660][ C1] ? __lock_acquire+0x1397/0x2100 [ 497.110698][ C1] ? __pfx_lock_acquire+0x10/0x10 [ 497.110722][ C1] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 497.110751][ C1] cfg80211_inform_bss_frame_data+0x3bb/0x720 [ 497.110784][ C1] ? ieee80211_bss_info_update+0x3d9/0xbc0 [ 497.110810][ C1] ieee80211_bss_info_update+0x8a7/0xbc0 [ 497.110839][ C1] ? __pfx_ieee80211_bss_info_update+0x10/0x10 [ 497.110866][ C1] ? __pfx_lock_release+0x10/0x10 [ 497.110899][ C1] ieee80211_ibss_rx_queued_mgmt+0x1969/0x2d70 [ 497.110936][ C1] ? ieee80211_ibss_rx_queued_mgmt+0xf7e/0x2d70 [ 497.110963][ C1] ? __pfx_ieee80211_ibss_rx_queued_mgmt+0x10/0x10 [ 497.110997][ C1] ? mark_lock+0x9a/0x360 [ 497.111023][ C1] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 497.111048][ C1] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 497.111082][ C1] ? kcov_remote_start+0x19a/0x7d0 [ 497.111111][ C1] ieee80211_iface_work+0x8dc/0xf90 [ 497.111151][ C1] cfg80211_wiphy_work+0x2f0/0x490 [ 497.111173][ C1] ? process_scheduled_works+0x976/0x1840 [ 497.111196][ C1] process_scheduled_works+0xa66/0x1840 [ 497.111232][ C1] ? __pfx_process_scheduled_works+0x10/0x10 [ 497.111258][ C1] ? assign_work+0x364/0x3d0 [ 497.111283][ C1] worker_thread+0x870/0xd30 [ 497.111313][ C1] ? __kthread_parkme+0x169/0x1d0 [ 497.111338][ C1] ? __pfx_worker_thread+0x10/0x10 [ 497.111358][ C1] kthread+0x7a9/0x920 [ 497.111381][ C1] ? __pfx_kthread+0x10/0x10 [ 497.111408][ C1] ? __pfx_worker_thread+0x10/0x10 [ 497.111429][ C1] ? __pfx_kthread+0x10/0x10 [ 497.111454][ C1] ? __pfx_kthread+0x10/0x10 [ 497.111479][ C1] ? __pfx_kthread+0x10/0x10 [ 497.111504][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 497.111527][ C1] ? lockdep_hardirqs_on+0x99/0x150 [ 497.111551][ C1] ? __pfx_kthread+0x10/0x10 [ 497.111576][ C1] ret_from_fork+0x4b/0x80 [ 497.111616][ C1] ? __pfx_kthread+0x10/0x10 [ 497.111642][ C1] ret_from_fork_asm+0x1a/0x30 [ 497.111670][ C1] [ 497.313181][ C0] IPVS: sed: UDP 224.0.0.2:0 - no destination available [ 497.383466][ T30] Kernel panic - not syncing: hung_task: blocked tasks [ 497.383494][ T30] CPU: 1 UID: 0 PID: 30 Comm: khungtaskd Not tainted 6.14.0-rc1-syzkaller-00126-g44ce3511c21c #0 [ 497.383521][ T30] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 12/27/2024 [ 497.383537][ T30] Call Trace: [ 497.383550][ T30] [ 497.383562][ T30] dump_stack_lvl+0x241/0x360 [ 497.383597][ T30] ? __pfx_dump_stack_lvl+0x10/0x10 [ 497.383624][ T30] ? __pfx__printk+0x10/0x10 [ 497.383659][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 497.383700][ T30] ? vscnprintf+0x5d/0x90 [ 497.383730][ T30] panic+0x349/0x880 [ 497.383767][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 497.383796][ T30] ? __pfx_panic+0x10/0x10 [ 497.383828][ T30] ? tick_nohz_tick_stopped+0x82/0xb0 [ 497.383855][ T30] ? __irq_work_queue_local+0x137/0x410 [ 497.383887][ T30] ? preempt_schedule_thunk+0x1a/0x30 [ 497.383920][ T30] ? nmi_trigger_cpumask_backtrace+0x244/0x320 [ 497.383946][ T30] ? nmi_trigger_cpumask_backtrace+0x2d4/0x320 [ 497.383977][ T30] ? nmi_trigger_cpumask_backtrace+0x2d9/0x320 [ 497.384008][ T30] watchdog+0x1097/0x10a0 [ 497.384040][ T30] ? watchdog+0x1ea/0x10a0 [ 497.384076][ T30] ? __pfx_watchdog+0x10/0x10 [ 497.384114][ T30] kthread+0x7a9/0x920 [ 497.384144][ T30] ? __pfx_kthread+0x10/0x10 [ 497.384178][ T30] ? __pfx_watchdog+0x10/0x10 [ 497.384208][ T30] ? __pfx_kthread+0x10/0x10 [ 497.384240][ T30] ? __pfx_kthread+0x10/0x10 [ 497.384274][ T30] ? __pfx_kthread+0x10/0x10 [ 497.384305][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 497.384333][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 497.384362][ T30] ? __pfx_kthread+0x10/0x10 [ 497.384400][ T30] ret_from_fork+0x4b/0x80 [ 497.384430][ T30] ? __pfx_kthread+0x10/0x10 [ 497.384464][ T30] ret_from_fork_asm+0x1a/0x30 [ 497.384506][ T30] [ 497.388044][ T30] Kernel Offset: disabled