last executing test programs: 32.939448608s ago: executing program 2: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_raw(0x1d, 0x3, 0x1) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) sendmsg$can_raw(r1, &(0x7f0000000140)={&(0x7f0000000100)={0x1d, r2}, 0x10, &(0x7f0000000240)={&(0x7f0000000200)=@can={{}, 0x40, 0x0, 0x0, 0x0, "b13d775c3d73ad43"}, 0x10}, 0x2}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuset.effective_cpus\x00', 0x275a, 0x0) r3 = socket$inet_udp(0x2, 0x2, 0x0) r4 = socket$key(0xf, 0x3, 0x2) sendmsg$key(r4, &(0x7f0000000000)={0x40000000, 0x0, &(0x7f0000000040)={&(0x7f00000002c0)=ANY=[@ANYBLOB="0207a20802"], 0x10}}, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast1}, 0x10) setsockopt$inet_IP_XFRM_POLICY(r3, 0x0, 0x11, &(0x7f0000000080)={{{@in=@multicast2, @in=@initdev={0xac, 0x1e, 0x0, 0x0}, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, 0xee00}, {0x0, 0x9, 0x0, 0x0, 0x0, 0x1}, {}, 0x0, 0x0, 0x1}, {{@in=@loopback, 0x4d5, 0x32}, 0x0, @in6=@mcast1, 0x0, 0x0, 0x0, 0xb7}}, 0xe8) sendmmsg(r3, &(0x7f0000000180), 0x400000000000077, 0x0) r5 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000002c80)={0x3, 0xc, &(0x7f0000000140)=@framed={{0x18, 0x2}, [@call={0x85, 0x0, 0x0, 0x29}, @printk={@x, {}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x72}}]}, &(0x7f0000000080)='GPL\x00'}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f00000002c0)={r5, 0x0, 0xe, 0x0, &(0x7f0000000100)="e0b9547ed387dbe9abc89b6f5bec", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) r6 = socket(0x18, 0x0, 0x0) ioctl$sock_ipv4_tunnel_SIOCCHGTUNNEL(r6, 0x89f3, &(0x7f0000000300)={'sit0\x00', &(0x7f0000000380)={'tunl0\x00', 0x0, 0x0, 0x0, 0x0, 0x0, {{0x6, 0x4, 0x0, 0x0, 0x18, 0x0, 0x0, 0x0, 0x4, 0x0, @dev, @loopback, {[@lsrr={0x83, 0x3}]}}}}}) 32.804549264s ago: executing program 0: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) shutdown(r1, 0x1) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140), 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000100)=0x8) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0xc8, 0x8, 0x1c8, 0x5803, 0x2a8, 0x2e8, 0x2e8, 0x2a8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'vlan0\x00', 'geneve1\x00'}, 0x0, 0x198, 0x1c8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5"}}, @common=@ah={{0x30}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='rss_stat\x00'}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) getsockname$packet(r2, &(0x7f0000000140)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000200)=0x28a) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32=r3, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32=r3], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32=r3, @ANYBLOB="00000000008000001800128008000100677265000c00028006ffffff7f020000"], 0x38}}, 0x0) 32.422354385s ago: executing program 2: r0 = socket$packet(0x11, 0x2, 0x300) socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x6, 0x4, 0x0) getsockopt$bt_BT_SECURITY(r1, 0x29, 0x42, 0x0, 0x20000000) sendmsg$ETHTOOL_MSG_RINGS_SET(r1, &(0x7f0000000280)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x2000}, 0xc, &(0x7f0000000140)={&(0x7f0000000100)=ANY=[@ANYBLOB="87000000", @ANYRES16, @ANYBLOB="00022abd7000fedbdf251000000008000800348e00000800070004000000"], 0x24}, 0x1, 0x0, 0x0, 0x40050}, 0x20000000) getsockopt$inet6_IPV6_XFRM_POLICY(r1, 0x29, 0x23, &(0x7f0000000500)={{{@in6=@empty, @in=@loopback}}, {{@in6=@empty}}}, &(0x7f00000004c0)=0xe8) socket$nl_route(0x10, 0x3, 0x0) r2 = socket(0x10, 0x803, 0x0) connect$netlink(r2, &(0x7f0000000080), 0xc) r3 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000340)=ANY=[@ANYBLOB="1400a68b53eb004c"], 0x14}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) setsockopt$packet_rx_ring(r0, 0x107, 0x5, &(0x7f0000000040)=@req3={0x4, 0x200, 0x79, 0x20000, 0x2, 0x800000}, 0x1c) setsockopt$inet6_IPV6_RTHDR(r1, 0x29, 0x39, &(0x7f0000000300)=ANY=[@ANYBLOB="00020402000000d0f818c6e191a69782d2fbf9cf01002001"], 0x18) socketpair(0x1, 0x2, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r5 = socket$inet_smc(0x2b, 0x1, 0x0) ioctl$int_in(r5, 0x5452, &(0x7f0000000480)=0x8) write$binfmt_elf32(r5, 0x0, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000040)={'veth0_to_bond\x00', 0x0}) getsockopt$kcm_KCM_RECV_DISABLE(r4, 0x119, 0x1, &(0x7f0000000400), 0x4) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x0, 0x4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x90) r7 = socket(0x10, 0x4, 0xffffffff) setsockopt$netlink_NETLINK_TX_RING(r7, 0x10e, 0xc, &(0x7f0000000040)={0xffb}, 0x10) write(r7, &(0x7f0000000180)="2000000012005f0214f9f4070000fbe40a0000000000", 0x41d) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000380)='f2fs_iostat_latency\x00'}, 0x10) r8 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r8, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600093582c137153e370c0c188005ac0f000300", 0x33fe0}], 0x1}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0xc, &(0x7f0000000440)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB="0000000000000000b7080000000010007b8af8ff00000000bfa200000000000007020000f8ffffffb703000022000000b70400000000000085"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r9 = bpf$MAP_CREATE(0x0, &(0x7f0000000180)=@base={0xb, 0x7, 0xfffffffd, 0x9, 0x1, 0xffffffffffffffff, 0x0, '\x00', r6}, 0x48) bpf$MAP_GET_NEXT_KEY(0x2, &(0x7f0000000080)={r9, &(0x7f0000000080), &(0x7f0000000200)=""/166}, 0x20) 32.34681299s ago: executing program 0: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2c}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket(0x23, 0x5, 0x0) listen(r1, 0x0) 32.263202977s ago: executing program 2: r0 = socket$qrtr(0x2a, 0x2, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x0, 0x4, &(0x7f0000000040)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3}, [@ldst={0x3, 0x0, 0x3, 0x1, 0x0, 0x2c}]}, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000140)={0x9, 0x4, &(0x7f0000000040)=ANY=[], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0xd}, 0x90) bind$inet6(0xffffffffffffffff, 0x0, 0x0) (async) r2 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000180)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0}, 0x48) r3 = bpf$PROG_LOAD(0x5, &(0x7f0000000680)={0x11, 0xf, &(0x7f0000000480)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32=r2, @ANYBLOB="0000000000000000b702000014000000b7030000000000188500000083000000bf09000000000000550901000000000095000000000000000091000000000000b7020000000000008500000084000000bf0ad0f60000000095"], &(0x7f0000001dc0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r1, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socket$inet_udp(0x2, 0x2, 0x0) r4 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000003c0)={&(0x7f0000000400)='sched_switch\x00', r3}, 0x10) (async) r5 = openat$tun(0xffffffffffffff9c, &(0x7f00000001c0), 0x0, 0x0) ioctl$TUNSETIFF(r5, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) ioctl$TUNSETQUEUE(r5, 0x400454d9, &(0x7f0000000000)={'geneve1\x00', 0x400}) (async) close(r5) (async) socket$nl_audit(0x10, 0x3, 0x9) listen(0xffffffffffffffff, 0x0) (async) r6 = socket$nl_route(0x10, 0x3, 0x0) r7 = socket(0x10, 0x803, 0x0) sendmsg$nl_route(r7, &(0x7f0000000900)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000001c0)=ANY=[@ANYBLOB="3800000020000100000000001200000014000100fe80000000000000000000000000000008000f002000"/56], 0x38}}, 0x0) ioctl$EXT4_IOC_MOVE_EXT(r4, 0xc028660f, &(0x7f0000000240)={0x0, r1, 0xbd8f, 0x7089b5ee, 0x800, 0xfa0}) sendmsg$nl_route(r6, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000740)=ANY=[@ANYBLOB="5c000000100039040000000000000000000000008d7820fd1c906fe2127d9c94ee8d27f0a1511f7fff260897f26f27b7bad536d8119e6d1eef56f115c0d0825e6f0b4e3369fceed0a95caeeedac606494f43227130cfa10715fdb68f6d2ecfed2b8de9a81add8bd8fde51edd069b3b01fd668c8acf5bfe1a741f2920e812b495d62584fe55a7426ff431d5470acbfa108b2f527a1d373c5c8ea6523ae0f3e912bf0840553d8bc7fa32319a", @ANYRES32=0x0, @ANYBLOB="00000000000000003c0012800b000100697036746e6c00002c000280140003002001000000000000000000000000000114000200fc0200"/68], 0x5c}}, 0x0) (async) r8 = socket(0xa, 0x3, 0x3a) r9 = socket$kcm(0x10, 0x2, 0x0) sendmsg$kcm(r9, &(0x7f0000000080)={0x0, 0x5, &(0x7f0000000440)=[{&(0x7f0000000580)="d8000000140081054e81f782db44b904021d080225000000040000a118000200fcffffff00000e1208000f0100810401a80016ea1f0006400303000803600cfab94dcf5c0461c1d67f6f94007134cf6ee08000a0e408e8d8ef075c0100000000000000cb090000001fb791643a5ee4001b146218a07445d6d930dfe1d9d322fe7c9fd68775730d16a4683f5aeb4edbb57a5025ccca9e00360db70100000040fad95667e0060000000000000080bb9ad809d5e1cace81ed0bffece0b42a9ecbee5de6ccd40dd68adbef3d93452a00"/216, 0xd8}], 0x1, 0x0, 0x0, 0x7400}, 0x0) (async) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f00000000c0)={0x1, 0x1}, 0xc) ioctl$sock_SIOCGIFINDEX(0xffffffffffffffff, 0x8933, &(0x7f0000000080)={'erspan0\x00', 0x0}) setsockopt$MRT6_ADD_MIF(r8, 0x29, 0xca, &(0x7f0000000000)={0x0, 0x0, 0x0, r10}, 0xc) setsockopt$MRT6_ADD_MFC(r8, 0x29, 0xcc, &(0x7f0000000100)={{0xa, 0x0, 0x0, @private0}, {0xa, 0x0, 0x0, @mcast1}, 0x0, {[0x7]}}, 0x5c) getpeername$qrtr(r0, &(0x7f0000000040), &(0x7f00000000c0)=0xc) (async) r11 = socket$igmp(0x2, 0x3, 0x2) setsockopt$MRT_INIT(r11, 0x0, 0xc8, &(0x7f00000002c0), 0x4) (async) setsockopt$MRT_ADD_MFC_PROXY(r11, 0x0, 0xd2, &(0x7f0000000200)={@remote, @empty, 0x1, "e798888beab3af341dbec4427a73b0fbda814c5f5cd6f92215f46e0b091038f9"}, 0x3c) 32.190935781s ago: executing program 0: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000180)='cgroup.controllers\x00', 0x26e1, 0x0) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x0, 0x0, 0x0, 0x8000}, 0x48) r1 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="7800000039000900000f0f0000b9000001000000040000000c000180cafc089d00000073080002"], 0x78}}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000001140)={&(0x7f00000006c0)=ANY=[@ANYBLOB="440000001000"/20, @ANYRES32=0x0, @ANYBLOB], 0x44}}, 0x0) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_CT_GET(r2, &(0x7f0000000000)={0x0, 0x4400, &(0x7f00000002c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="4400000001010101000000000000000002000000040001801800028014000180080001007f00000108000200ac1414aa140019800800010004000000080002"], 0x44}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$nl80211(&(0x7f0000000100), 0xffffffffffffffff) bpf$MAP_UPDATE_BATCH(0x2, &(0x7f0000000380)={0x0, 0x0, 0x0, 0x0}, 0x38) socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(0xffffffffffffffff, 0x0, 0x0) r3 = socket$nl_generic(0x10, 0x3, 0x10) socket(0x10, 0x3, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) getpeername$inet(r2, &(0x7f0000000080)={0x2, 0x0, @multicast1}, &(0x7f0000000140)=0x10) ioctl$sock_SIOCGIFINDEX_80211(r3, 0x8933, &(0x7f00000002c0)={'wlan1\x00'}) r4 = socket$inet_tcp(0x2, 0x1, 0x0) bind$inet(r4, &(0x7f0000000040)={0x2, 0x4e21, @local}, 0x10) setsockopt$inet_tcp_int(r4, 0x6, 0x210000000013, &(0x7f00000000c0)=0x100000001, 0x4) bpf$PROG_LOAD(0x5, &(0x7f0000002600)={0x11, 0xb, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xd, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000002c0)={&(0x7f00000025c0)='sched_switch\x00'}, 0x10) sendmsg$TEAM_CMD_NOOP(r0, &(0x7f0000000900)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000008c0)={&(0x7f0000000980)={0x410, 0x0, 0x20, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0x40, 0x2, 0x0, 0x1, [{0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}]}}, {{0x8}, {0x74, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x200}}}, {0x38, 0x1, @lb_stats_refresh_interval={{0x24}, {0x5}, {0x8, 0x4, 0x8}}}]}}, {{0x8}, {0x12c, 0x2, 0x0, 0x1, [{0x74, 0x1, @bpf_hash_func={{0x24}, {0x5}, {0x44, 0x4, [{0x2, 0x8, 0x0, 0x7}, {0x8, 0x6, 0xff, 0xe17}, {0x401, 0x9, 0x9, 0x4}, {0x4, 0x8, 0x7, 0x6}, {0x1, 0xff, 0x4, 0x5}, {0xc, 0x6, 0x3, 0x9}, {0x1359, 0x7f, 0xc1, 0x800}, {0x8, 0x9, 0x4, 0x7}]}}}, {0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x3}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6}}, {0x8}}}]}}, {{0x8}, {0x3c, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x2}}}]}}, {{0x8}, {0xf4, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}, {0x3c, 0x1, @user_linkup={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x3c, 0x1, @enabled={{{0x24}, {0x5}, {0x4}}, {0x8}}}, {0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x9}}}]}}, {{0x8}, {0xbc, 0x2, 0x0, 0x1, [{0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x5}}, {0x8}}}, {0x38, 0x1, @activeport={{0x24}, {0x5}, {0x8}}}, {0x40, 0x1, @lb_tx_hash_to_port_mapping={{{0x24}, {0x5}, {0x8}}, {0x8}}}]}}]}, 0x410}, 0x1, 0x0, 0x0, 0x40}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x7, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000181100", @ANYRES32, @ANYBLOB], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) splice(0xffffffffffffffff, &(0x7f0000002440)=0x600000000000, r4, &(0x7f0000002480)=0x5, 0x80, 0x3) socket$pppl2tp(0x18, 0x1, 0x1) socket(0x2, 0x3, 0x0) connect$pppl2tp(0xffffffffffffffff, &(0x7f0000000240)=@pppol2tpv3in6={0x18, 0x1, {0x0, 0xffffffffffffffff, 0x4, 0x1, 0x1, 0x4, {0xa, 0x4e24, 0x0, @private2, 0x7fff}}}, 0x3a) syz_genetlink_get_family_id$nl80211(0x0, 0xffffffffffffffff) sendmsg$NL80211_CMD_LEAVE_IBSS(0xffffffffffffffff, &(0x7f0000000940)={&(0x7f0000000840)={0x10, 0x0, 0x0, 0x8}, 0xc, 0x0, 0x1, 0x0, 0x0, 0x4004814}, 0x10001) 32.169859485s ago: executing program 3: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_udp(0xa, 0x2, 0x0) write(r1, &(0x7f0000000080)="2117f8884de38ac77f72a66a9cb31968f81de1", 0x13) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000040), 0x1c1341, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller0\x00', 0x84aebfbd6349b7f2}) close(r2) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r4 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r4, &(0x7f0000020240), 0x10010) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x7, 0x10012, r4, 0x0) r5 = socket$nl_generic(0x10, 0x3, 0x10) epoll_ctl$EPOLL_CTL_ADD(r4, 0x1, r5, &(0x7f00000001c0)={0x20002008}) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[], 0x7c}}, 0x0) r6 = socket$nl_generic(0x10, 0x3, 0x10) r7 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_DEBUG_SET(r6, &(0x7f0000001540)={0x0, 0x0, &(0x7f0000001500)={&(0x7f0000000140)=ANY=[@ANYBLOB='D\x00\x00\x00', @ANYRES16=r7, @ANYBLOB="0100000000000000000008000000180001801400020073797a5f74756e00000000000000000018000280080002001100000004000100080004"], 0x44}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000240)=@newqdisc={0x30, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x4}}]}, 0x30}}, 0x0) socketpair(0xf, 0x80000, 0x7f, &(0x7f00000000c0)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$inet_tcp_buf(r8, 0x6, 0x1f, &(0x7f0000000280)="251f8fe498e9b6ead0765ed1ea8800576bd6658aaedc24aceda48e49416b97fcccb740d9f51dc7d061fbebf5bf8c6ad0061e72274d01daf1a79eee554852a131db216a9f6933ef2ff51dba644432f40b5190324cfd7aa91a5d2d814a04cec4f6eb617895ed8f3cae29baa55a725c4e1351e73ffd32f4695289609b13d4642c3f932d0579819a99ee001a93f2b9a408e81c3cd8529738ec4761f6987a9fe4d903347c44bef426e88a6eeed3d5db9306075bda14db8950cc2c5a4028c6d4085cf59b4741", 0xc3) 32.114422791s ago: executing program 4: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="3400000039000900000000000000000001000000040000000c000180060000000547000008000200", @ANYRES32, @ANYBLOB="0800098004"], 0x34}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x0, 0x8, 0xfa04, 0x98, 0x6c02, 0x170, 0x194, 0x194, 0x170, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@dev, @dev, 0x0, 0x0, '\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r1, 0x8b22, &(0x7f0000000040)) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x5a, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x1, 0x0, 0x0, @str='\x00'}]}, 0x1c}}, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r6}, 0x8) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000001c0)={r6, @in6={{0xa, 0x4e21, 0x3, @remote, 0x401}}, 0x401, 0x10000, 0x6, 0x2, 0x10000}, &(0x7f0000000100)=0x98) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r8, @in={{0x2, 0x4e24, @empty}}, 0x7, 0x6}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) 31.856847666s ago: executing program 2: socket(0x1d, 0x2, 0x6) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket(0x1d, 0x2, 0x6) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xa, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x71, 0x10, 0xa2}, [@ldst={0x6}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xfd96, &(0x7f0000000080)=""/201, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0xfffffffffffffd56, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f0000000040)={'vcan0\x00', 0x0}) bind$can_j1939(r1, &(0x7f0000000080)={0x1d, r2, 0x2}, 0x18) sendmsg$nl_route(r0, &(0x7f0000002300)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000000c0)=ANY=[@ANYBLOB="2000000011000100"/20, @ANYRES32=r2, @ANYBLOB="291657f7b5b03a2f"], 0x20}}, 0x0) 31.812186802s ago: executing program 4: r0 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl802154(&(0x7f0000003100), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_802154(r0, 0x8933, &(0x7f0000000180)={'wpan0\x00', 0x0}) sendmsg$NL802154_CMD_SET_LBT_MODE(r0, &(0x7f0000003780)={0x0, 0xa000000, &(0x7f0000003740)={&(0x7f0000000600)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r1, @ANYBLOB="010000000000000000001200000008000300", @ANYRES32=r2], 0x1c}}, 0x0) 31.794035145s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) shutdown(r1, 0x1) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140), 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000100)=0x8) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0xc8, 0x8, 0x1c8, 0x5803, 0x2a8, 0x2e8, 0x2e8, 0x2a8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'vlan0\x00', 'geneve1\x00'}, 0x0, 0x198, 0x1c8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5"}}, @common=@ah={{0x30}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='rss_stat\x00'}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32, @ANYBLOB="00000000008000001800128008000100677265000c00028006ffffff7f020000"], 0x38}}, 0x0) 31.727114824s ago: executing program 0: r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX(r0, 0x84, 0x6e, &(0x7f00000000c0)=[@in6={0xa, 0x0, 0x0, @mcast1}], 0x1c) r1 = socket$kcm(0x10, 0x3, 0x10) sendmsg$kcm(r1, &(0x7f0000000000)={0x0, 0xfffffffffffffed2, &(0x7f0000000080)=[{&(0x7f0000000040)="e03f03002a000b05d25a806c8c6f94f90424fc601000127a0a000600093582c137153e370c0c18800dac0f000300", 0x33fe0}], 0x1}, 0x0) bpf$MAP_UPDATE_BATCH(0x1a, 0x0, 0x0) r2 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000340)={0x2, 0x4, 0x8, 0x1, 0x80, 0xffffffffffffffff, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000000)={r2}, 0x4) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events.local\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x2000)=nil, 0x2000, 0x0, 0x2012, r3, 0x0) r4 = bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x11, 0xf, &(0x7f0000000800)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x7fff, 0x0, 0x0, 0x0, 0x236}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x85}}}, &(0x7f00000007c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0}, 0x90) r5 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$BATADV_CMD_GET_DAT_CACHE(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f00000005c0)=ANY=[@ANYBLOB="14000000e2c38b"], 0x14}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000540), r5) r6 = syz_genetlink_get_family_id$smc(&(0x7f0000000000), r5) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="2c0000003b0007010000000020000000047c0000040000001400018006"], 0x2c}}, 0x0) r7 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$SMC_PNETID_ADD(r7, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000040)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="0103000000000000000001"], 0x34}}, 0x0) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000003c0)='mm_page_free_batched\x00', r4}, 0x10) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) r8 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_DEFAULT_GET(r8, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000a80)=ANY=[@ANYBLOB="2400000004080300000000000000000000000000050003008400005b70470c015beef5b5"], 0x24}}, 0x0) r9 = socket$nl_generic(0x10, 0x3, 0x10) r10 = syz_genetlink_get_family_id$devlink(&(0x7f0000000180), r3) sendmsg$DEVLINK_CMD_PORT_SET(r9, &(0x7f00000002c0)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000001c0)={&(0x7f0000000240)={0x70, r10, 0x400, 0x70bd27, 0x25dfdbff, {}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0x3, 0x3}}, {0x6, 0x4, 0x2}}, {{@pci={{0x8}, {0x11}}, {0x8, 0x3, 0x1}}, {0x6, 0x4, 0x1}}]}, 0x70}, 0x1, 0x0, 0x0, 0x4000000}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000400)='net_prio.prioidx\x00', 0x7a05, 0x1700) r11 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r12, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) ioctl$BTRFS_IOC_DEV_INFO(r12, 0xd000941e, &(0x7f0000000880)={0x0, "70229904def3264bf3e22936e826a24e"}) write$cgroup_type(r11, &(0x7f0000000140), 0x9) 31.724694032s ago: executing program 3: pipe(&(0x7f00000006c0)={0xffffffffffffffff, 0xffffffffffffffff}) vmsplice(r0, &(0x7f0000000580)=[{&(0x7f0000000040)='d', 0x1}], 0x1, 0x0) r1 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x11, 0x3, &(0x7f0000000100)=ANY=[@ANYBLOB="18000000000000000000000000ed000095"], 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={0x0, r1}, 0x10) ioctl$sock_inet6_udp_SIOCINQ(r0, 0xc0189436, 0x0) 31.675592019s ago: executing program 4: bpf$MAP_CREATE(0x0, 0x0, 0x0) socket$nl_route(0x10, 0x3, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x14, &(0x7f0000000480)=ANY=[], &(0x7f0000000400)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000005c0)={&(0x7f0000000080)='kfree\x00', r0}, 0x10) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, 0x0, 0x0) bpf$LINK_GET_FD_BY_ID(0x1e, &(0x7f0000000000)=0xffffffffffffffff, 0x4) close(0xffffffffffffffff) bpf$MAP_CREATE(0x0, 0x0, 0x0) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x18, 0x4, &(0x7f0000000600)=ANY=[@ANYBLOB="18000000000000000000000000000000850000000f0000009500000000000000b3347149a651b1fc310d333bfc4e1ba354864373be0ea03604cd17cef043b4e7443e3446b7ad20d071365114afc69f49af3a220a527777d6925c4b3d023711f5d7d6f5e613ba82fa8224d75d160f68fe50d741b878add4ba29923395dbb5f8abc952eaef3e2a7da6345583a007741ad23b4bb29cda69a451d2cd77bc031559961521f50e757271e46f02c054e7c104f8906a5a964107f453ba1ab4dd8b6e3677dc219bd29621b44d1a13a77b96485dc7daa7766cd86abc8a7e"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x45, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x3f}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000001c0)={&(0x7f0000000180)='kfree\x00', r1}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000700)={0xc, 0x6, &(0x7f0000000480)=ANY=[], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x6c, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x10, 0x2}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000800)={0x1f, 0x2, &(0x7f0000000440)=ANY=[@ANYRES32], &(0x7f0000000180)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x11}, 0xe3) bpf$PROG_LOAD(0x5, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x0, 0x5, 0x0, &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cgroup.events\x00', 0x26e1, 0x0) socketpair$unix(0x1, 0x5, 0x0, 0x0) ioctl$SIOCSIFHWADDR(r2, 0x8b18, &(0x7f0000000000)={'wlan1\x00', @random="010000000700"}) r3 = socket$netlink(0x10, 0x3, 0x15) writev(r3, &(0x7f0000000280)=[{&(0x7f0000000340)="4800000014001d0d09074beafd0d8c560284606080ffe0064e204e20590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b", 0x48}], 0x1) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) socket$tipc(0x1e, 0x0, 0x0) sendmsg$tipc(0xffffffffffffffff, &(0x7f0000000340)={&(0x7f0000000000)=@name={0x1e, 0x2, 0x1, {{0x40, 0x4}, 0x3}}, 0x10, &(0x7f0000000a40), 0x0, &(0x7f0000000380)="c166c79c03a7dd342c346994dda043f307d10665f5ca7c767d50017088f45d6c4c410898b10d9bc2e122671e470d745e0d553b48dba2ed71c54b75b5f2c960e3abb900d046419ef854463786c8a59b67f398b525d6039ff468610f3bc1ac5f7e01b2375d33c6e8c0b48afe833bb478832fa377014362fc26272292f23db9d3", 0x7f, 0xc040}, 0x5) sendmsg$IPSET_CMD_CREATE(r5, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000044c0)={&(0x7f0000000100)=ANY=[@ANYBLOB="5c000000020601780000000000000000000000000900020073797a300000000005000100060000000500050000000000050004000000000014000780080011400000000005001500ff0000000d000300686173683a6d6163"], 0x5c}}, 0x0) mmap(&(0x7f0000400000/0x3000)=nil, 0x3000, 0x0, 0x4d032, 0xffffffffffffffff, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='cpuacct.usage_sys\x00', 0x275a, 0x0) mmap(&(0x7f0000632000/0x2000)=nil, 0x2000, 0x0, 0x12, r6, 0x87346000) mmap(&(0x7f0000000000/0x400000)=nil, 0x400000, 0x0, 0x10, r6, 0x0) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x0, 0x28011, r6, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r4, 0x8933, &(0x7f0000000200)={'batadv_slave_1\x00'}) 31.645717672s ago: executing program 2: setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, &(0x7f0000000080)={0x0, 0x8000}, 0x8) r0 = socket$inet6_sctp(0xa, 0x801, 0x84) r1 = gettid() ioctl$sock_FIOSETOWN(0xffffffffffffffff, 0x8901, &(0x7f0000000080)=r1) sendto$inet6(r0, &(0x7f0000001080)='_', 0x1, 0x0, &(0x7f0000000000)={0xa, 0x0, 0x0, @private2}, 0x1c) shutdown(r0, 0x1) getsockopt$bt_hci(r0, 0x84, 0x7f, &(0x7f0000000080)=""/4057, &(0x7f0000001180)=0xfd9) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) r3 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) r4 = socket(0x840000000002, 0x3, 0x100) connect$inet(r4, &(0x7f0000000000)={0x2, 0x0, @remote}, 0x10) sendmmsg$inet(r4, &(0x7f0000005240), 0x4000095, 0x0) setsockopt$inet_msfilter(r4, 0x0, 0x2f, 0x0, 0x14) write$tun(r2, &(0x7f0000000040)={@val, @void, @eth={@dev, @link_local, @val={@void, {0x8864}}}}, 0x16) r5 = openat$cgroup_pressure(0xffffffffffffffff, &(0x7f00000010c0)='memory.pressure\x00', 0x2, 0x0) write$binfmt_script(r5, &(0x7f00000011c0)={'#! ', './file0', [{0x20, '/+,'}, {0x20, '\x00'}, {}, {0x20, '\xaa\xaa\xaa\xaa\xaa'}, {0x20, '\x00'}, {0x20, 'syzkaller1\x00'}, {0x20, '%'}, {}, {0x20, '/dev/net/tun\x00'}], 0xa, "5dfe2fb2d68aed1d5db7b0b268fc8148230c3a046f57ca23ca31f32cd1eaa2130e16d3787f16c10b5e8c86fe970cc94ee051376f1c3b87f8996b864324108979a5c6cc923b01cbeb74c72181692b372b7814ab7ca87d4dc9b7032a1b626c55d527699079e3062be57339ffde743274953a7b7e"}, 0xaa) 31.561320428s ago: executing program 3: r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000000c0)={&(0x7f0000000040)='contention_end\x00', r0}, 0x10) r1 = socket(0x23, 0x5, 0x0) listen(r1, 0x0) 31.536991047s ago: executing program 4: r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000300)={0x26, 'aead\x00', 0x0, 0x0, 'echainiv(aegis128)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmsg$nl_route(r1, 0x0, 0x0) recvmmsg$unix(r1, &(0x7f0000001440)=[{{0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f0000000380)=""/74, 0x4a}], 0x1}}], 0x1, 0x0, 0x0) 31.47223331s ago: executing program 1: r0 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r0, 0x8933, &(0x7f0000000000)={'syz_tun\x00', 0x0}) r2 = socket$nl_route(0x10, 0x3, 0x0) setsockopt$inet_sctp_SCTP_PEER_ADDR_THLDS(0xffffffffffffffff, 0x84, 0x84, &(0x7f00000003c0)={0x0, @in={{0x2, 0x0, @multicast2}}}, 0x90) r3 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$bt_BT_SECURITY(0xffffffffffffffff, 0x112, 0x4, &(0x7f0000003000), 0x2) poll(&(0x7f00000001c0)=[{}], 0x1, 0x0) bind$inet(r3, &(0x7f00000001c0)={0x2, 0x0, @local}, 0x10) connect$inet(r3, &(0x7f0000000480)={0x2, 0x0, @multicast2}, 0x10) sendmmsg(r3, &(0x7f0000007fc0), 0x2d, 0x0) sendmsg$nl_route(r2, &(0x7f0000000440)={0x0, 0x0, &(0x7f00000000c0)={&(0x7f0000000040)=ANY=[@ANYBLOB="30000000100003040000", @ANYRES32=r1, @ANYBLOB="000000006200001f050021000000000008000d"], 0x30}}, 0x0) 31.467705515s ago: executing program 0: syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000400)={0x18, 0x10, &(0x7f0000000140)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0xfffffc67, 0x0, 0x0, 0x0, 0x11}, {{0x18, 0x1, 0x1, 0x0, 0x1}}, {}, [@func={0x85, 0x0, 0x1, 0x0, 0xffffffffffffffff}], {{}, {0x7, 0x0, 0xb, 0x2, 0x0, 0x0, 0x1}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000200)='syzkaller\x00', 0xc67a, 0x0, 0x0, 0x41100, 0x2, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000240)={0x1, 0x1}, 0x8, 0x10, &(0x7f0000000300)={0x5, 0x7, 0x0, 0x2}, 0x10, 0x0, 0x0, 0x8, &(0x7f0000000340)=[0x1, 0x1], &(0x7f0000000380)=[{0x2, 0x5, 0x9, 0x8}, {0x3, 0x2, 0xd, 0x4}, {0x3, 0x4, 0x1}, {0x3, 0x2, 0x10, 0x3}, {0x5, 0x5, 0x4, 0x6}, {0x5, 0x3, 0x2, 0x1}, {0x4, 0x4, 0x5, 0x3f2c1dd2fbcdf9a3}, {0x2, 0x5, 0xc, 0xb}], 0x10, 0x7}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f00000004c0)={&(0x7f0000000040)='afs_io_error\x00', r0}, 0x10) r1 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x11, 0x8, &(0x7f0000003580)=ANY=[@ANYBLOB="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"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x2e) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000180)={&(0x7f0000000540)='rcu_utilization\x00', r1}, 0x10) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000001c40)=@newtaction={0xf0, 0x30, 0x1, 0x0, 0x0, {}, [{0xdc, 0x1, [@m_police={0x6c, 0x1, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c}]]}, {0x4}, {0xc}, {0xc}}}, @m_police={0x6c, 0x2, 0x0, 0x0, {{0xb}, {0x40, 0x2, 0x0, 0x1, [[@TCA_POLICE_TBF={0x3c, 0x1, {0x1}}]]}, {0x4}, {0xc}, {0xc}}}]}]}, 0xf0}}, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x26e1, 0x0) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='memory.events\x00', 0x7a05, 0x1700) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r3, 0x0, 0x0) socket$igmp(0x2, 0x3, 0x2) getsockopt$IPT_SO_GET_ENTRIES(0xffffffffffffffff, 0x0, 0x41, 0x0, 0x0) r4 = socket$inet(0xa, 0x0, 0x84) ioctl$int_in(r4, 0x5452, &(0x7f0000000280)=0x32d) pipe(&(0x7f0000000fc0)={0xffffffffffffffff, 0xffffffffffffffff}) syz_open_procfs$namespace(0xffffffffffffffff, &(0x7f0000000000)='ns/time_for_children\x00') setsockopt$SO_BINDTODEVICE(0xffffffffffffffff, 0x1, 0x19, 0x0, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, 0x0, 0x0) r7 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f0000000080)={0x1b, 0x0, 0x0, 0x9, 0x0, 0x1, 0x36, '\x00', 0x0, r6, 0x0, 0x5, 0x2}, 0x48) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x1b, &(0x7f0000000200)={@private1, 0x0}, &(0x7f00000004c0)=0x14) r9 = bpf$OBJ_GET_MAP(0x7, &(0x7f00000005c0)=@generic={&(0x7f0000000580)='./file0\x00', 0x0, 0x8}, 0x18) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000600)={r5, 0xffffffffffffffff}, 0x4) bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000700)=@bpf_tracing={0x1a, 0x13, &(0x7f0000000300)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x800, 0x0, 0x0, 0x0, 0x6}, {{0x18, 0x1, 0x1, 0x0, r7}}, {}, [@ringbuf_query={{0x18, 0x1, 0x1, 0x0, r6}}]}, &(0x7f00000001c0)='GPL\x00', 0xf8, 0xc8, &(0x7f00000003c0)=""/200, 0x40f00, 0xc, '\x00', r8, 0x1a, r5, 0x8, &(0x7f0000000500)={0x0, 0x1}, 0x8, 0x10, &(0x7f0000000540)={0x2, 0x4, 0x4a5, 0x3}, 0x10, 0x2de98, r6, 0x5, &(0x7f0000000640)=[r9, r6, r6, r6, r10], &(0x7f0000000680)=[{0x2, 0x5, 0x2, 0xc}, {0x2, 0x1, 0x1, 0x2}, {0x2, 0x4, 0x8, 0x1}, {0x3}, {0x3, 0x4, 0x6, 0xa}], 0x10, 0x80000001}, 0x90) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg(0xffffffffffffffff, &(0x7f0000000180)={0x0, 0xffffffffffffff18, &(0x7f0000000100)=[{&(0x7f0000000000)="2f0000001c0005c5ffffff000d000000020000000b000000ec0091c913000180f0ffffeb", 0x1dd}], 0x1}, 0x0) r11 = socket(0x10, 0x80002, 0x0) write(0xffffffffffffffff, &(0x7f0000000000)="fc0000001c00071bab0925000900070007ab08000c000000f0007e93210001c000000000000000000000000000039915fa2c1ec28670e9889bb94b46fe0000000a0002", 0xff82) sendmmsg$alg(r11, &(0x7f0000000140)=[{0x3, 0x0, &(0x7f0000000100), 0x6, &(0x7f0000000100)}], 0x492492492492856, 0x0) 31.448062919s ago: executing program 3: sendmsg$NFT_BATCH(0xffffffffffffffff, 0x0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, 0x0) socket$packet(0x11, 0x0, 0x300) socket$inet_udp(0x2, 0x2, 0x0) r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPCTNL_MSG_TIMEOUT_NEW(r0, &(0x7f0000002480)={0x0, 0xa, &(0x7f0000001b80)={&(0x7f0000001880)={0x3c, 0x0, 0x8, 0x401, 0x0, 0x0, {}, [@CTA_TIMEOUT_L3PROTO={0x6}, @CTA_TIMEOUT_NAME={0x9, 0x1, 'syz1\x00'}, @CTA_TIMEOUT_DATA={0xc, 0x4, 0x0, 0x1, @tcp=[@CTA_TIMEOUT_TCP_FIN_WAIT={0x8}]}, @CTA_TIMEOUT_L4PROTO={0x5, 0x3, 0x21}]}, 0x3c}}, 0x0) 31.347148566s ago: executing program 3: bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x9, 0x4, 0x8, 0xc}, 0x48) bpf$PROG_LOAD(0x5, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000480)=ANY=[@ANYBLOB="3400000039000900000000000000000001000000040000000c000180060000000547000008000200", @ANYRES32, @ANYBLOB="0800098004"], 0x34}}, 0x0) setsockopt$IPT_SO_SET_REPLACE(0xffffffffffffffff, 0x4000000000000, 0x40, &(0x7f0000000000)=@raw={'raw\x00', 0x8, 0x3, 0x208, 0x0, 0x8, 0xfa04, 0x98, 0x6c02, 0x170, 0x194, 0x194, 0x170, 0x194, 0x3, 0x0, {[{{@ip={@empty=0x1e00, @broadcast, 0x0, 0x0, 'veth0_to_hsr\x00', 'veth0_virt_wifi\x00'}, 0x0, 0x70, 0x98, 0x0, {0x0, 0x74020000}}, @common=@inet=@TCPMSS={0x28}}, {{@ip={@dev, @dev, 0x0, 0x0, '\x00', 'netpci0\x00'}, 0x0, 0x70, 0xd8}, @unspec=@CT1={0x68, 'CT\x00', 0x1, {0x0, 0x0, 0x0, 0x0, 'pptp\x00', 'syz0\x00'}}}], {{'\x00', 0x0, 0x70, 0x98}, {0x28}}}}, 0x268) r1 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_inet_SIOCSIFPFLAGS(0xffffffffffffffff, 0x8934, &(0x7f0000000040)={'wlan0\x00'}) ioctl(r1, 0x8b22, &(0x7f0000000040)) r2 = socket(0x2, 0x80805, 0x0) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000008c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)={{0x14}, [@NFT_MSG_NEWRULE={0x5c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x30, 0x4, 0x0, 0x1, [{0x20, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_CT_KEY={0x8}, @NFTA_CT_DREG={0x8, 0x1, 0x1, 0x0, 0x17}]}}}, {0xc, 0x1, 0x0, 0x1, @log={{0x8}, @void}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x84}}, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r2, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000000)={&(0x7f0000000040)='sys_exit\x00'}, 0x10) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) r5 = socket$inet(0x2, 0x80001, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r5, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000000040)=0x8) connect$inet(r2, &(0x7f0000000080)={0x2, 0x4e22, @loopback}, 0x10) r7 = socket(0x10, 0x3, 0x0) sendmsg$nl_generic(r7, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000002c0)={0x1c, 0x5a, 0x1, 0x0, 0x0, {}, [@typed={0x5, 0x1, 0x0, 0x0, @str='\x00'}]}, 0x1c}}, 0x0) setsockopt$inet_sctp6_SCTP_DELAYED_SACK(r4, 0x84, 0x10, &(0x7f0000000000)=@assoc_value={r6}, 0x8) setsockopt$sock_attach_bpf(r5, 0x1, 0x32, &(0x7f00000000c0), 0x4) getsockopt$inet_sctp6_SCTP_GET_PEER_ADDR_INFO(r2, 0x84, 0xf, &(0x7f00000001c0)={r6, @in6={{0xa, 0x4e21, 0x3, @remote, 0x401}}, 0x401, 0x10000, 0x6, 0x2, 0x10000}, &(0x7f0000000100)=0x98) setsockopt$inet_sctp6_SCTP_PEER_ADDR_THLDS(r4, 0x84, 0x1f, &(0x7f0000000280)={r8, @in={{0x2, 0x4e24, @empty}}, 0x7, 0x6}, 0x90) socket$nl_netfilter(0x10, 0x3, 0xc) 31.336152407s ago: executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x0, 0x4, &(0x7f00000002c0)=ANY=[@ANYBLOB="180100001c0000000000000000000000850000006d00000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) r0 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000200)={0x11, 0x4, 0x0, &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f0000000980)='sys_exit\x00', r0}, 0x10) pselect6(0x0, 0x0, 0x0, 0x0, 0x0, &(0x7f0000000200)={&(0x7f00000001c0)={[0x2a]}, 0x8}) socket(0x0, 0x0, 0x0) 31.332992284s ago: executing program 4: socket$kcm(0x2, 0x0, 0x106) socket$nl_audit(0x10, 0x3, 0x9) setsockopt$inet6_IPV6_HOPOPTS(0xffffffffffffffff, 0x29, 0x36, &(0x7f0000000280)=ANY=[], 0x8) r0 = socket$alg(0x26, 0x5, 0x0) bind$alg(r0, &(0x7f0000000240)={0x26, 'hash\x00', 0x0, 0x0, 'michael_mic-generic\x00'}, 0x65) setsockopt$ALG_SET_KEY(r0, 0x117, 0x1, &(0x7f0000000040)="4dc07f947163300c", 0x8) r1 = accept4(r0, 0x0, 0x0, 0x0) sendmmsg$inet(r1, &(0x7f0000000e40)=[{{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000000180)="e3", 0x1}, {&(0x7f0000000140)="cd1de4ea9b5c798fc37d3de663757aeeabbe0f32cb5d7ec32d95e7010f4bb6df7e38800f74b27d10bb91874cbd", 0x2d}, {&(0x7f0000000080)="2904fe324eef70be9f3042fd2ebc9fd3f337467b2074f3149e75544455", 0x1d}], 0x3}}], 0x1, 0x8004) recvmmsg(r1, &(0x7f0000002b00)=[{{0x0, 0x0, 0x0}}], 0x1, 0x0, 0x0) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140)=0x10001, 0x4) recvmmsg(0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup.cpu/syz0\x00', 0x1ff) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f00000096c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000500)=@newtaction={0x74, 0x30, 0x1, 0x0, 0x0, {}, [{0x60, 0x1, [@m_vlan={0x5c, 0x1, 0x0, 0x0, {{0x9}, {0x30, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6}, @TCA_VLAN_PUSH_VLAN_ID={0xfffffffffffffed4}, @TCA_VLAN_PARMS={0x1c}]}, {0x4}, {0xc}, {0xc}}}, @m_ctinfo={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_CTINFO_ACT, @TCA_CTINFO_PARMS_CPMARK_MASK, @TCA_CTINFO_PARMS_DSCP_MASK, @TCA_CTINFO_PARMS_CPMARK_MASK, @TCA_CTINFO_PARMS_DSCP_STATEMASK]}, {0x0, 0x6, "45699270cf604d06e94fbcfe3c92dff11fafbd09abd0f8fdce8f5a96044e21e1b4498daaa4e1c5426828376c03d19acfac099f0cde1261"}, {0x0, 0x7, {0x0, 0x1}}, {0x0, 0x8, {0x1, 0x2}}}}, @m_xt={0x0, 0x0, 0x0, 0x0, {{}, {0x0, 0x2, 0x0, 0x1, [@TCA_IPT_TARG={0x0, 0x6, {0x0, 'nat\x00', 0x0, 0x0, "e8f2a7ca49baa4add6321fecc10542517a16feec0e1568a7694e6ba605e29707430a66302cf46cf7bd58844c854dcb7295f692197965522f4e50f0e162236e1cb2a28a21955084e189e455c692d89009ed768cd37f9d23237b47a6fdd186a2f5558faee568e2a56cd2bbfc53a35b85189fa34ec14ccef8add14907378fdd53058130618cfeda571508b28381052db1d5294573724c9f0fe562f6eed13183ccc0fd5a964e58a906f8b310a95780add946551356f703fbbf148f351b1ce2987433743dbeb691495a54c72462"}}, @TCA_IPT_HOOK, @TCA_IPT_INDEX, @TCA_IPT_TABLE={0x0, 0x1, 'mangle\x00'}, @TCA_IPT_INDEX]}, {0x0, 0x6, "1160074cc51a9d707dde51d73c53a054d64ff98d16264a80330b743f9fbfa822a7f5f7848746ab772de4af19e7c43b6cada2ffa12192ed9d4fe00ec06668956f2d90df4bface7e289e8a255b184c2e25698527836efa8350284fdc8aaeeb6bdcd50c376f2d4d2bfc68c85f88000b039dedc72988cde254deeee40cb011385d1c88673d5ab2c5048e5f4bb20fcb3eb524c0c808a09deec5a1d5e52825d81daa48f6ab765ecab196d9f85fe0882fdf86c4619217c6a6c7b11aaa35f816e815184c204fa9eeb361310357352a67eb29e4510406c009c1611e4ef378ef17ee447ad110e6eea9305ca7cf86d5891c79ef"}, {}, {0x0, 0x8, {0x1, 0x2}}}}]}]}, 0x74}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_team(r3, 0x8933, &(0x7f0000000000)={'team0\x00', 0x0}) sendmsg$nl_route(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)=ANY=[@ANYBLOB="3c00000010000100"/20, @ANYRES32=0x0, @ANYBLOB="044301000000000014000300766c616e30000000000000000000000008000a00", @ANYRES32=r4], 0x3c}}, 0x0) 30.414257242s ago: executing program 1: r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='cgroup.controllers\x00', 0x275a, 0x0) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) ioctl$FS_IOC_FSSETXATTR(r1, 0x401c5820, &(0x7f0000000140)={0x10020}) write$cgroup_int(r1, &(0x7f0000000000), 0xffffff6a) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000002c0)='cpuacct.usage_percpu_sys\x00', 0x275a, 0x0) write$cgroup_int(r0, &(0x7f0000000380)=0x1000000, 0x12) ioctl$EXT4_IOC_MOVE_EXT(r2, 0xc028660f, &(0x7f0000001300)={0x2880008, r1}) mmap(&(0x7f0000000000/0xb36000)=nil, 0xb36000, 0x1000012, 0x28011, r0, 0x0) 30.018781943s ago: executing program 1: r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000180)=0x100000001, 0x4) r1 = socket$inet6_udplite(0xa, 0x2, 0x88) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002300)=@raw={'raw\x00', 0x9, 0x3, 0x2a8, 0x1f8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x8000000, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, [], [], 'dvmrp1\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) (async) setsockopt$IP6T_SO_SET_REPLACE(r1, 0x29, 0x40, &(0x7f0000002300)=@raw={'raw\x00', 0x9, 0x3, 0x2a8, 0x1f8, 0xffffffff, 0xffffffff, 0x0, 0xffffffff, 0x330, 0xffffffff, 0xffffffff, 0x330, 0xffffffff, 0x8000000, 0x0, {[{{@ipv6={@initdev={0xfe, 0x88, '\x00', 0x0, 0x0}, @private2, [], [], 'dvmrp1\x00', 'veth1_macvtap\x00'}, 0x0, 0xa8, 0xc8}, @unspec=@NOTRACK={0x20}}, {{@uncond, 0x0, 0xa8, 0x110}, @unspec=@CT2={0x68, 'CT\x00', 0x2, {0x0, 0x0, 0x0, 0x0, 'snmp\x00', 'syz1\x00'}}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x308) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) (async) r2 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r3 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000140)='memory.events\x00', 0x7a05, 0x1700) write$cgroup_int(r3, &(0x7f0000000200), 0xf000) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1e, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071121f00000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000100)={0x1e, 0x4, &(0x7f00000005c0)=ANY=[@ANYBLOB="1800000000000000000000000000000071121f00000000009500000000000000"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x2, '\x00', 0x0, 0x24, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r4 = socket$inet_udplite(0x2, 0x2, 0x88) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) socket(0x10, 0x2, 0x0) (async) r6 = socket(0x10, 0x2, 0x0) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000014001a80100005800c000180080001"], 0x34}}, 0x0) (async) sendmsg$nl_route(r6, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000880)=ANY=[@ANYBLOB="340000001300290a000000000000000007000000", @ANYRES32=r5, @ANYBLOB="000000000000000014001a80100005800c000180080001"], 0x34}}, 0x0) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x52, r2, 0x0) r7 = syz_init_net_socket$bt_sco(0x1f, 0x5, 0x2) bind$bt_sco(r7, &(0x7f0000000000)={0x1f, @none}, 0x8) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) (async) ioctl$sock_kcm_SIOCKCMCLONE(0xffffffffffffffff, 0x89e2, &(0x7f0000000000)={r0}) setsockopt$inet6_tcp_TCP_REPAIR_QUEUE(r8, 0x6, 0x14, &(0x7f0000000140)=0x2, 0x5d) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) (async) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @ipv4={'\x00', '\xff\xff', @dev}}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) (async) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000002c0), 0x3) r9 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000380)='cpuacct.usage_sys\x00', 0x275a, 0x0) write$binfmt_script(r9, &(0x7f000000e0c0), 0x10010) setsockopt$inet6_tcp_TLS_TX(r0, 0x11a, 0x1, &(0x7f0000000240)=@ccm_128={{0x304}, "cdedbe27d7c9678a", "ed86a155b66f481507086fe637736e4c", "a2dc23ff", "842546172794808f"}, 0x28) sendmsg$nl_route_sched(r8, &(0x7f00000001c0)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000000c0)={&(0x7f00000003c0)=@gettaction={0xf0, 0x32, 0x100, 0x70bd2c, 0x25dfdbfb, {}, [@action_gd=@TCA_ACT_TAB={0x44, 0x1, [{0xc, 0x1d, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0x16, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x1ff}}, {0x10, 0x1d, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x10000}}, {0xc, 0x13, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x8}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0xc, 0x2, {0x1, 0x1}}, @action_gd=@TCA_ACT_TAB={0x2c, 0x1, [{0xc, 0x14, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x7, 0x1, 'xt\x00'}}, {0x10, 0x1f, 0x0, 0x0, @TCA_ACT_KIND={0xb, 0x1, 'sample\x00'}}]}, @action_gd=@TCA_ACT_TAB={0x60, 0x1, [{0x10, 0x14, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'vlan\x00'}}, {0xc, 0x4, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'bpf\x00'}}, {0xc, 0x9, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x5}}, {0x10, 0x1e, 0x0, 0x0, @TCA_ACT_KIND={0x9, 0x1, 'csum\x00'}}, {0xc, 0x1a, 0x0, 0x0, @TCA_ACT_KIND={0x8, 0x1, 'nat\x00'}}, {0xc, 0x11, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xdde9}}]}]}, 0xf0}, 0x1, 0x0, 0x0, 0x50}, 0x4091) sendfile(r0, r9, &(0x7f0000000100), 0x10001) 1.627578929s ago: executing program 2: r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket$inet_udplite(0x2, 0x2, 0x88) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x11, 0x8, &(0x7f00000006c0)=ANY=[@ANYBLOB="18080000010001000000000000800000851000000300000018000000000000000000000000bd00009500000000000000bfa0000000000000950000000000000030e5a2c3121831b8c7944269dc35a3c4c88ac2d9ad6f457e55e04facbe38ade531e9a63ec55269f414b8a3297d21d0732c599483645edbe7e409c5517cb06eed2e862a083c6a2c6e0afc89940ea62b2372022bad8cef23c96486a29d8608da30685ccbfe8d4ff3861ae515d67219d2249bb731ac81ff43adac5597d0c363e1464de9ce26a6"], &(0x7f0000000000)='GPL\x00', 0x8}, 0x90) r2 = socket$nl_route(0x10, 0x3, 0x0) r3 = socket$can_bcm(0x1d, 0x2, 0x2) ioctl$ifreq_SIOCGIFINDEX_vcan(r3, 0x8933, &(0x7f0000000240)={'vxcan0\x00', 0x0}) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) r6 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) write$cgroup_type(r6, &(0x7f0000000140), 0x9) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x1, 0x12, r5, 0x0) r7 = socket(0xa, 0x6, 0x0) getsockopt$inet6_mreq(r7, 0x10d, 0xec, 0x0, &(0x7f0000000300)) r8 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r8, &(0x7f0000000000), 0x10) recvmsg$can_bcm(0xffffffffffffffff, 0x0, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000002c0)=@getchain={0x24, 0x11, 0x839, 0x0, 0xfffffffc, {0x0, 0x0, 0x0, r4, {}, {0x8}}}, 0x24}}, 0x20008081) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000b40)={0x0, 0x0, &(0x7f0000000b00)={&(0x7f0000000600)=@newtaction={0x84, 0x30, 0x0, 0x70bd2b, 0x0, {}, [{0x70, 0x1, [@m_connmark={0x6c, 0x0, 0x0, 0x0, {{0xd}, {0x3c, 0x2, 0x0, 0x1, [@TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x3, 0xfffffffe, 0x8, 0x8, 0x5cb4}, 0x5}}, @TCA_CONNMARK_PARMS={0x1c, 0x1, {{0x1000, 0x8, 0x10000005, 0x9, 0xfffffffa}, 0x4081}}]}, {0x4}, {0xc}, {0xc}}}]}]}, 0x84}}, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) bpf$BPF_PROG_TEST_RUN(0x1c, &(0x7f0000000200)={0xffffffffffffffff, 0x2000000, 0x2f, 0x0, &(0x7f00000001c0)="5cdd3086ddffff6633c9bbac88a8861000dffd00139fb7a884", 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) connect$can_bcm(r0, &(0x7f0000000280)={0x1d, r9}, 0x10) sendmsg$nl_route(r0, &(0x7f00000003c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)=ANY=[@ANYBLOB="3400000013000500000000000000000007000000", @ANYRES32=r9, @ANYBLOB="000000000000000014001a80100004800c000180"], 0x34}}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0x5, 0x2, 0x2, 0x4}, 0x48) bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x1b, 0x0, 0x0, 0x8000}, 0x48) r10 = socket$nl_crypto(0x10, 0x3, 0x15) sendmsg$netlink(r10, &(0x7f0000000880)={0x0, 0x0, &(0x7f0000000840)=[{&(0x7f0000002680)=ANY=[@ANYBLOB="e00000001000090500000000000000006f6d8864d22a3f2ffaa46c88bca90000002b0e13e735a3184f121899a96e0ee8ce02840343f63d6da2f1acedc0ee2dd2b184b27db1f302de337c0004060000000000bf852c8986626691b01b2d44e4ce2d715f5fbdda0a9423debbb86f9dba4a2dba4dbe076c02262600c446a567de243ab0d676f98766dadcb4c5246e1690b532d53683f7bb11c9cab3b3eed8a8bef4ff1631aa78acefca03c1a66db4424a8ba100022db228bb7b5eb5100e6da877179e909a6cde183c81361e434db5dd5e995aa0912086d9"], 0xe0}], 0x1}, 0x0) r11 = socket$alg(0x26, 0x5, 0x0) bind$alg(r11, &(0x7f00000007c0)={0x26, 'hash\x00', 0x0, 0x0, 'streebog512\x00'}, 0x28) bpf$PROG_LOAD(0x5, &(0x7f00000004c0)={0x0, 0x15, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000047b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000100850000000100000018110000", @ANYRES32, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bfa200000000000007020000f8ffffffb703000008000000b704000000000000850000008200000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r12 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='memory.events\x00', 0x275a, 0x0) write$binfmt_script(r12, &(0x7f0000000100), 0xfecc) 1.446628756s ago: executing program 0: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000580)='memory.events\x00', 0x100002, 0x0) r0 = bpf$PROG_LOAD(0x5, &(0x7f0000000200)={0x4, 0xe, &(0x7f0000000d40)=ANY=[@ANYBLOB="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"], &(0x7f0000000340)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000880), 0xfffffffffffffddd}, 0x48) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000380)={r0, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x10) r2 = bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000d00)={r1}, 0x4) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000840)={r2, 0xe0, &(0x7f0000000440)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, ""/16, 0x0, 0x0, 0x0, 0x0, 0xffe4, 0xfffffffffffffda0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x8, 0x0, 0x0}}, 0x4) r4 = bpf$MAP_CREATE(0x0, &(0x7f0000000280)=@base={0x2, 0x4, 0x8, 0x1, 0x0, 0xffffffffffffffff, 0x0, '\x00', r3}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000240)={0x18, 0x3, &(0x7f0000001980)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f00000000c0)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r5 = socket$alg(0x26, 0x5, 0x0) bind$alg(r5, &(0x7f0000000000)={0x26, 'skcipher\x00', 0x0, 0x0, 'xts(twofish)\x00'}, 0x58) ioctl$TUNSETIFF(0xffffffffffffffff, 0x400454ca, &(0x7f00000000c0)={'syzkaller1\x00', 0x6bf1c2d5adba8c32}) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000060a0000000000000000000000000000500000000c0a00000000000000000000000000000900020073797a31000000000900010073797a30000000000900010073797a310000000009000000000000000000000000000a00000000000000000000000000736e1fe99e7fa6b66156109ba711"], 0x8c}}, 0x0) r6 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r6, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(0xffffffffffffffff, &(0x7f00000001c0)=ANY=[@ANYBLOB="00001b1de4356c052e79aaaaaaaaaaaa88a800008100000086dd6017785c00182f0000000000000000000000000000000000fe80000000000000000000000000000e800086dd"], 0xfdef) r7 = socket$inet(0x2, 0x2000080001, 0x84) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route(r8, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000580)=@ipv6_newroute={0x28, 0x18, 0x1, 0x0, 0x0, {0xa, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600}, [@RTA_MULTIPATH={0xc, 0x9, {0x8}}]}, 0x28}}, 0x0) bind$inet(r7, 0x0, 0x0) sendto$inet(r7, &(0x7f00000000c0)="18", 0x1, 0x0, &(0x7f0000000000)={0x2, 0x0, @private=0xa010100}, 0x10) sendto$inet(r7, &(0x7f0000000100)='h', 0x1, 0x0, &(0x7f0000000240)={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x10) r9 = socket$netlink(0x10, 0x3, 0x4) writev(r9, &(0x7f0000000280)=[{&(0x7f0000000340)="4800000014001d0d09074beafd0d8c560284606080ffe0064e204e20590000a2bc5603ca00000f7f8907000020008d42188fedc22e47ad8f75edc6d100000101ff0000000309ff5b", 0x48}], 0x1) setsockopt$ALG_SET_KEY(r5, 0x117, 0x1, &(0x7f0000000080)="c99a57001000008c0908000000000000005a47b2f3caa73dcd2a6a3700547da0ccfd", 0x22) bpf$BPF_BTF_LOAD(0x12, &(0x7f00000000c0)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x34, 0x34, 0x6, [@var={0x4, 0x0, 0x0, 0xe, 0x3}, @func_proto, @ptr={0x0, 0x0, 0x0, 0x2, 0x4}, @volatile={0x0, 0x0, 0x0, 0xb, 0x4}]}, {0x0, [0x0, 0x0, 0x0, 0x61]}}, 0x0, 0x52}, 0x20) bpf$MAP_LOOKUP_ELEM(0x1, &(0x7f00000003c0)={r4, &(0x7f0000000580), &(0x7f0000001740)=""/248}, 0x20) r10 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r10, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000380)=ANY=[@ANYBLOB="c4000000190001000000000000000000ac1414c800000000000100000000000000000000000000000000000000002dd300000000000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0xee01, @ANYBLOB="000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000a00100001"], 0xc4}}, 0x0) 1.317435444s ago: executing program 3: openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000000c0)='memory.events\x00', 0x275a, 0x200000000000000) (async) bpf$MAP_CREATE(0x0, 0x0, 0x0) (async) write$cgroup_type(0xffffffffffffffff, 0x0, 0x0) (async) r0 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x13, &(0x7f0000000580)=ANY=[@ANYBLOB="180000008000000000000000000000001801000020756c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb702000008000000b70300000000c44185000000040000001801000020646c2500000000002020207b1af8ff00000000bfa100000000000007010000f8ffffffb70200000a000000b703000000000000850000007500000095"], &(0x7f0000000200)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000040)={&(0x7f00000001c0)='ext4_ext_remove_space\x00', r0}, 0x10) bpf$PROG_LOAD(0x5, &(0x7f0000000880)={0x0, 0xc, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) (async) openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket$rds(0x15, 0x5, 0x0) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000180)={0x18, 0x5, &(0x7f0000000280)=ANY=[@ANYBLOB="1801000021000000000000003b810000850000006d000000070000000000000095"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x2}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000880)={&(0x7f0000000a80)='kfree\x00', r2}, 0x10) (async) r3 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r3, 0x6, 0x12, &(0x7f0000000040)=0xfffffffe, 0x4) (async) ioctl$ifreq_SIOCGIFINDEX_wireguard(r1, 0x8933, &(0x7f0000000000)={'wg1\x00', 0x0}) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000480)={0x4, 0x15, &(0x7f00000002c0)=@framed={{0x18, 0x0, 0x0, 0x0, 0x3ff, 0x0, 0x0, 0x0, 0xa0}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, 0x1}, {0x7, 0x0, 0xb, 0x8, 0x0, 0x0, 0x3}, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x4, 0x0, 0x0, 0x1}}, @ringbuf_query, @map_idx={0x18, 0xb, 0x5, 0x0, 0x10}, @cb_func={0x18, 0x5, 0x4, 0x0, 0xfffffffffffffff9}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}]}, &(0x7f0000000040)='GPL\x00', 0x8, 0x54, &(0x7f0000000380)=""/84, 0x41000, 0x50, '\x00', r4, 0x2f, 0xffffffffffffffff, 0x8, &(0x7f0000000080)={0x4, 0x1}, 0x8, 0x10, &(0x7f0000000200)={0x1, 0x5, 0x9e6c, 0x8}, 0x10, 0xffffffffffffffff, 0xffffffffffffffff, 0x2, &(0x7f0000000400)=[0x1], &(0x7f0000000440)=[{0x5, 0x3, 0x8, 0x4}, {0x3, 0x2, 0x7, 0x3}], 0x10, 0x5}, 0x90) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000280)=ANY=[@ANYBLOB="180000f36c860000b156a2dd37cbaad0000000"], &(0x7f0000000540)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x19, '\x00', r4, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, r5, 0x0, 0x0, 0x0, 0x0}, 0x90) (async) socket$pppoe(0x18, 0x1, 0x0) (async) r6 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r6) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) write$cgroup_int(r7, &(0x7f0000000040), 0xfea0) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='cpuset.effective_cpus\x00', 0x275a, 0x0) write$cgroup_int(r8, &(0x7f0000000380), 0x101bf) (async) ioctl$EXT4_IOC_ALLOC_DA_BLKS(r8, 0x660c) ioctl$EXT4_IOC_MOVE_EXT(r7, 0xc028660f, &(0x7f0000000300)={0x0, r8, 0x0, 0x2}) (async) write$binfmt_elf32(r8, &(0x7f00000003c0)={{0x7f, 0x45, 0x4c, 0x46, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x38}}, 0x38) (async) ioctl$EXT4_IOC_MOVE_EXT(r8, 0xc028660f, &(0x7f0000000200)={0x0, r7}) (async) close(r6) (async) r9 = bpf$MAP_CREATE_RINGBUF(0x0, &(0x7f00000007c0)={0x1b, 0x0, 0x0, 0x40000, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) bpf$PROG_LOAD(0x5, &(0x7f0000000180)={0xf, 0xf, &(0x7f0000000000)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r9}, {}, {}, {0x85, 0x0, 0x0, 0xba}}}, &(0x7f0000000100)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x1, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0xfffffffffffffe13}, 0x90) 1.313659777s ago: executing program 4: r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$inet6_sctp(0xa, 0x1, 0x84) bind$inet6(0xffffffffffffffff, 0x0, 0x0) sendto$inet6(r1, &(0x7f0000847fff)='X', 0xfee4, 0x0, &(0x7f000005ffe4)={0xa, 0x0, 0x0, @loopback}, 0x1c) shutdown(r1, 0x1) socket$inet6(0xa, 0x0, 0x0) setsockopt$inet6_int(0xffffffffffffffff, 0x29, 0x0, &(0x7f0000000140), 0x4) sendto$inet6(0xffffffffffffffff, &(0x7f0000000000), 0x0, 0x0, 0x0, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x0, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) getsockopt$inet_sctp6_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f00000000c0)=@assoc_value, &(0x7f0000000100)=0x8) sendmsg$RDMA_NLDEV_CMD_STAT_GET(0xffffffffffffffff, 0x0, 0x0) r2 = socket(0x10, 0x803, 0x0) socket$inet6_sctp(0xa, 0x0, 0x84) setsockopt$IP6T_SO_SET_REPLACE(0xffffffffffffffff, 0x29, 0x40, &(0x7f0000000440)=@raw={'raw\x00', 0x3c1, 0x3, 0x378, 0x0, 0xc8, 0x8, 0x1c8, 0x5803, 0x2a8, 0x2e8, 0x2e8, 0x2a8, 0x2e8, 0x3, 0x0, {[{{@ipv6={@remote, @mcast1, [], [], 'vlan0\x00', 'geneve1\x00'}, 0x0, 0x198, 0x1c8, 0x0, {0x0, 0x2000000000000}, [@common=@unspec=@string={{0xc0}, {0x0, 0x0, 'bm\x00', "cfcaf80c672f61cd17ae5119b5135c2aee68d23a465cd431e1ecef50c3234e082555f67222476147864fa03182f5df11d8c348cbd06dc8de1dcbde7d4e252c3394fed47bf78c70f607b0178fa5ea335019ac07a602061c96baebc989f1f35a214e67262c1fe4b124e0f7323a587d2a1fcfe36bbf12eca0a7b66c60c527bac2b5"}}, @common=@ah={{0x30}}]}, @common=@unspec=@CONNMARK={0x30}}, {{@uncond, 0x0, 0xa8, 0xe0}, @common=@inet=@SET3={0x38}}], {{'\x00', 0x0, 0xa8, 0xd0}, {0x28}}}}, 0x3d8) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000300)={&(0x7f00000002c0)='rss_stat\x00'}, 0x10) syz_genetlink_get_family_id$mptcp(&(0x7f0000000200), 0xffffffffffffffff) sendmsg$nl_route(r2, &(0x7f0000000380)={0x0, 0x4076cbba9945d516, &(0x7f0000000340)={0x0, 0x14}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f00000000c0)=ANY=[@ANYBLOB="400000001000390400"/20, @ANYRES32, @ANYBLOB="01980000000000002000128008000100677265001400028008000100", @ANYRES32], 0x40}}, 0x0) sendmsg$nl_route(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000500)={&(0x7f0000000000)=ANY=[@ANYBLOB="380000001000390400"/20, @ANYRES32, @ANYBLOB="00000000008000001800128008000100677265000c00028006ffffff7f020000"], 0x38}}, 0x0) 0s ago: executing program 1: bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000480)={0x11, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000340)='syzkaller\x00'}, 0x90) bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, 0x0, 0x0) r0 = socket(0x23, 0x5, 0x0) listen(r0, 0x0) kernel console output (not intermixed with test programs): 44][ T5114] bridge_slave_0: entered allmulticast mode [ 56.521857][ T5114] bridge_slave_0: entered promiscuous mode [ 56.530921][ T5107] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.538151][ T5107] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.545450][ T5107] bridge_slave_0: entered allmulticast mode [ 56.552175][ T5107] bridge_slave_0: entered promiscuous mode [ 56.563325][ T5107] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.571033][ T5107] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.578504][ T5107] bridge_slave_1: entered allmulticast mode [ 56.586194][ T5107] bridge_slave_1: entered promiscuous mode [ 56.612699][ T5110] chnl_net:caif_netlink_parms(): no params data found [ 56.622388][ T5114] bridge0: port 2(bridge_slave_1) entered blocking state [ 56.629802][ T5114] bridge0: port 2(bridge_slave_1) entered disabled state [ 56.637190][ T5114] bridge_slave_1: entered allmulticast mode [ 56.643981][ T5114] bridge_slave_1: entered promiscuous mode [ 56.651267][ T5117] chnl_net:caif_netlink_parms(): no params data found [ 56.731450][ T5107] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.745392][ T5107] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.782545][ T5114] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 56.796340][ T5114] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 56.865657][ T5114] team0: Port device team_slave_0 added [ 56.890016][ T5120] chnl_net:caif_netlink_parms(): no params data found [ 56.904197][ T5114] team0: Port device team_slave_1 added [ 56.913661][ T5107] team0: Port device team_slave_0 added [ 56.956050][ T5107] team0: Port device team_slave_1 added [ 56.975875][ T5110] bridge0: port 1(bridge_slave_0) entered blocking state [ 56.983107][ T5110] bridge0: port 1(bridge_slave_0) entered disabled state [ 56.991195][ T5110] bridge_slave_0: entered allmulticast mode [ 56.998745][ T5110] bridge_slave_0: entered promiscuous mode [ 57.012721][ T5110] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.019933][ T5110] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.027288][ T5110] bridge_slave_1: entered allmulticast mode [ 57.033991][ T5110] bridge_slave_1: entered promiscuous mode [ 57.111338][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.118575][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.144655][ T5114] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.172441][ T5117] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.180063][ T5117] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.187592][ T5117] bridge_slave_0: entered allmulticast mode [ 57.194430][ T5117] bridge_slave_0: entered promiscuous mode [ 57.220382][ T5114] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.227402][ T5114] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.253549][ T5114] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.271344][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.279002][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.305848][ T5107] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.317450][ T5117] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.324958][ T5117] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.332157][ T5117] bridge_slave_1: entered allmulticast mode [ 57.339195][ T5117] bridge_slave_1: entered promiscuous mode [ 57.374164][ T5110] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.389243][ T5107] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.396576][ T5107] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.422798][ T5107] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.441758][ T5120] bridge0: port 1(bridge_slave_0) entered blocking state [ 57.449203][ T5120] bridge0: port 1(bridge_slave_0) entered disabled state [ 57.456450][ T5120] bridge_slave_0: entered allmulticast mode [ 57.463268][ T5120] bridge_slave_0: entered promiscuous mode [ 57.472298][ T5110] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.508901][ T5110] team0: Port device team_slave_0 added [ 57.531805][ T5117] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.541369][ T5120] bridge0: port 2(bridge_slave_1) entered blocking state [ 57.548846][ T5120] bridge0: port 2(bridge_slave_1) entered disabled state [ 57.556314][ T5120] bridge_slave_1: entered allmulticast mode [ 57.563028][ T5120] bridge_slave_1: entered promiscuous mode [ 57.582892][ T5110] team0: Port device team_slave_1 added [ 57.602943][ T5117] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.685479][ T5116] Bluetooth: hci0: command tx timeout [ 57.695914][ T5120] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 57.709679][ T5120] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 57.722697][ T5114] hsr_slave_0: entered promiscuous mode [ 57.730097][ T5114] hsr_slave_1: entered promiscuous mode [ 57.764382][ T5116] Bluetooth: hci1: command tx timeout [ 57.775774][ T5116] Bluetooth: hci2: command tx timeout [ 57.783899][ T5107] hsr_slave_0: entered promiscuous mode [ 57.790280][ T5107] hsr_slave_1: entered promiscuous mode [ 57.798483][ T5107] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 57.807016][ T5107] Cannot create hsr debugfs directory [ 57.817987][ T5117] team0: Port device team_slave_0 added [ 57.842088][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 57.849189][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.875582][ T5110] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 57.888879][ T5110] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 57.895977][ T5110] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 57.922490][ T5110] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 57.933254][ T53] Bluetooth: hci3: command tx timeout [ 57.933549][ T5116] Bluetooth: hci4: command tx timeout [ 57.954095][ T5117] team0: Port device team_slave_1 added [ 58.021169][ T5120] team0: Port device team_slave_0 added [ 58.066446][ T5120] team0: Port device team_slave_1 added [ 58.072852][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.081178][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.107179][ T5117] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.158262][ T5117] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.165632][ T5117] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.192930][ T5117] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.270676][ T5117] hsr_slave_0: entered promiscuous mode [ 58.279980][ T5117] hsr_slave_1: entered promiscuous mode [ 58.286391][ T5117] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.293970][ T5117] Cannot create hsr debugfs directory [ 58.307094][ T5110] hsr_slave_0: entered promiscuous mode [ 58.313513][ T5110] hsr_slave_1: entered promiscuous mode [ 58.320009][ T5110] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.327687][ T5110] Cannot create hsr debugfs directory [ 58.340732][ T5120] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 58.347782][ T5120] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.374529][ T5120] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 58.386756][ T5120] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 58.393723][ T5120] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 58.419880][ T5120] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 58.629662][ T5114] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 58.644914][ T5120] hsr_slave_0: entered promiscuous mode [ 58.651567][ T5120] hsr_slave_1: entered promiscuous mode [ 58.659219][ T5120] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 58.667115][ T5120] Cannot create hsr debugfs directory [ 58.700630][ T5114] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 58.729492][ T5114] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 58.784985][ T5114] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 58.947733][ T5107] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 58.958777][ T5107] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 58.985296][ T5107] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 58.996864][ T5107] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 59.087239][ T5117] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 59.096923][ T5117] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 59.115331][ T5117] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 59.126171][ T5117] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 59.224052][ T5110] netdevsim netdevsim3 netdevsim0: renamed from eth0 [ 59.237612][ T5110] netdevsim netdevsim3 netdevsim1: renamed from eth1 [ 59.253073][ T5110] netdevsim netdevsim3 netdevsim2: renamed from eth2 [ 59.267960][ T5114] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.286652][ T5110] netdevsim netdevsim3 netdevsim3: renamed from eth3 [ 59.401761][ T5114] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.427699][ T5120] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 59.440047][ T5120] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 59.452482][ T5158] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.459868][ T5158] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.471101][ T5158] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.478248][ T5158] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.518428][ T5120] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 59.530332][ T5120] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 59.547983][ T5107] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.577085][ T5117] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.651793][ T5117] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.686176][ T5107] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.712633][ T5159] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.719762][ T5159] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.730388][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.737509][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.752410][ T5110] 8021q: adding VLAN 0 to HW filter on device bond0 [ 59.773382][ T5157] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.780668][ T5157] bridge0: port 1(bridge_slave_0) entered forwarding state [ 59.789986][ T5116] Bluetooth: hci0: command tx timeout [ 59.814976][ T5157] bridge0: port 2(bridge_slave_1) entered blocking state [ 59.822237][ T5157] bridge0: port 2(bridge_slave_1) entered forwarding state [ 59.844585][ T53] Bluetooth: hci1: command tx timeout [ 59.850097][ T5116] Bluetooth: hci2: command tx timeout [ 59.870790][ T5110] 8021q: adding VLAN 0 to HW filter on device team0 [ 59.951696][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 59.958890][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.004984][ T5116] Bluetooth: hci4: command tx timeout [ 60.010449][ T5116] Bluetooth: hci3: command tx timeout [ 60.016554][ T45] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.023779][ T45] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.091114][ T5120] 8021q: adding VLAN 0 to HW filter on device bond0 [ 60.132058][ T5110] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.219691][ T5120] 8021q: adding VLAN 0 to HW filter on device team0 [ 60.259160][ T45] bridge0: port 1(bridge_slave_0) entered blocking state [ 60.266358][ T45] bridge0: port 1(bridge_slave_0) entered forwarding state [ 60.293371][ T5114] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.343968][ T5159] bridge0: port 2(bridge_slave_1) entered blocking state [ 60.351175][ T5159] bridge0: port 2(bridge_slave_1) entered forwarding state [ 60.399040][ T5117] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.469746][ T5120] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 60.530204][ T5114] veth0_vlan: entered promiscuous mode [ 60.628296][ T5114] veth1_vlan: entered promiscuous mode [ 60.663377][ T5110] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.686425][ T5107] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 60.776559][ T5114] veth0_macvtap: entered promiscuous mode [ 60.830520][ T5110] veth0_vlan: entered promiscuous mode [ 60.867432][ T5114] veth1_macvtap: entered promiscuous mode [ 60.905521][ T5110] veth1_vlan: entered promiscuous mode [ 60.939785][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 60.976784][ T5114] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 60.989477][ T5107] veth0_vlan: entered promiscuous mode [ 61.011313][ T5114] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.022732][ T5114] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.033332][ T5114] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.042077][ T5114] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.058297][ T5120] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 61.112243][ T5107] veth1_vlan: entered promiscuous mode [ 61.121173][ T5110] veth0_macvtap: entered promiscuous mode [ 61.169016][ T5117] veth0_vlan: entered promiscuous mode [ 61.198823][ T5110] veth1_macvtap: entered promiscuous mode [ 61.230527][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.243549][ T5117] veth1_vlan: entered promiscuous mode [ 61.252686][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.279553][ T5120] veth0_vlan: entered promiscuous mode [ 61.320560][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.331508][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.342623][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.366090][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 61.372165][ T5120] veth1_vlan: entered promiscuous mode [ 61.380071][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 61.396863][ T5110] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.409148][ T5110] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.420280][ T5110] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.440992][ T5107] veth0_macvtap: entered promiscuous mode [ 61.453616][ T5110] netdevsim netdevsim3 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.462710][ T5110] netdevsim netdevsim3 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.472731][ T5110] netdevsim netdevsim3 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.481522][ T5110] netdevsim netdevsim3 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.519189][ T5107] veth1_macvtap: entered promiscuous mode [ 61.558163][ T5120] veth0_macvtap: entered promiscuous mode [ 61.579472][ T5120] veth1_macvtap: entered promiscuous mode [ 61.660332][ T5117] veth0_macvtap: entered promiscuous mode [ 61.668602][ T5190] UDPLite: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 61.684004][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.701059][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.711479][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 61.724445][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.737292][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 61.766815][ T5117] veth1_macvtap: entered promiscuous mode [ 61.782310][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.793694][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.805096][ T5107] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 61.816781][ T5107] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 61.832241][ T5107] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 61.845209][ T5116] Bluetooth: hci0: command tx timeout [ 61.888025][ T5107] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.914486][ T5107] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.923237][ T5107] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 61.944517][ T5116] Bluetooth: hci2: command tx timeout [ 61.949986][ T5116] Bluetooth: hci1: command tx timeout [ 61.978255][ T5107] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.061591][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.084526][ T5116] Bluetooth: hci3: command tx timeout [ 62.084539][ T53] Bluetooth: hci4: command tx timeout [ 62.124326][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.134184][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.145704][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.155619][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.166252][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.178793][ T5120] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.285333][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.325428][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.356538][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.394347][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.424398][ T5120] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.454446][ T5120] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.493341][ T5120] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.548442][ T2481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.586406][ T2481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.608795][ T5120] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.626580][ T5120] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.637478][ T5120] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.646927][ T5120] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 62.683691][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.700160][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.710274][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.721075][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.732596][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.745416][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.756315][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 62.767094][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.780905][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 62.809227][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.826836][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.836827][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.848396][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.859065][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.869985][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.880743][ T5117] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 62.891277][ T5117] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 62.903004][ T5117] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 62.915990][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.930270][ T2481] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 62.941784][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.942078][ T2481] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 62.997215][ T5117] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.014782][ T5117] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.028728][ T5117] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.037754][ T5117] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 63.090877][ T51] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.113011][ T51] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.449054][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.474104][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.532852][ T5210] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 63.561589][ T1104] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.590636][ T1104] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.623570][ T1104] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.652220][ T1104] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.670204][ T5218] lo speed is unknown, defaulting to 1000 [ 63.708306][ T5221] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 63.736795][ T5218] lo speed is unknown, defaulting to 1000 [ 63.746669][ T11] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 63.784084][ T11] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 63.796514][ T5218] lo speed is unknown, defaulting to 1000 [ 63.935876][ T5116] Bluetooth: hci0: command tx timeout [ 64.005982][ T5116] Bluetooth: hci2: command tx timeout [ 64.006006][ T53] Bluetooth: hci1: command tx timeout [ 64.165409][ T53] Bluetooth: hci4: command tx timeout [ 64.165500][ T5116] Bluetooth: hci3: command tx timeout [ 64.269892][ T785] lo speed is unknown, defaulting to 1000 [ 64.276890][ T5218] infiniband syz0: set active [ 64.285289][ T5218] infiniband syz0: added lo [ 64.581895][ T5245] sctp: failed to load transform for md5: -4 [ 64.620823][ T5218] RDS/IB: syz0: added [ 64.639269][ T5218] smc: adding ib device syz0 with port count 1 [ 64.674797][ T5218] smc: ib device syz0 port 1 has pnetid [ 64.718700][ T5162] lo speed is unknown, defaulting to 1000 [ 64.729300][ T5255] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 64.771849][ T5218] lo speed is unknown, defaulting to 1000 [ 65.016220][ T5264] team0: entered promiscuous mode [ 65.021320][ T5264] team_slave_0: entered promiscuous mode [ 65.035449][ T5264] team_slave_1: entered promiscuous mode [ 65.043591][ T5264] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 65.057075][ T5264] team0: left promiscuous mode [ 65.073699][ T5264] team_slave_0: left promiscuous mode [ 65.084092][ T5264] team_slave_1: left promiscuous mode [ 65.141957][ T5269] netlink: 'syz-executor.1': attribute type 2 has an invalid length. [ 65.242917][ T5275] Cannot find add_set index 0 as target [ 65.394323][ T5218] lo speed is unknown, defaulting to 1000 [ 66.623158][ T5283] netlink: 'syz-executor.0': attribute type 16 has an invalid length. [ 66.663199][ T5218] lo speed is unknown, defaulting to 1000 [ 66.674338][ T5290] : renamed from vlan1 (while UP) [ 66.721887][ T5296] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 66.730597][ T5283] syz-executor.0 (5283) used greatest stack depth: 18200 bytes left [ 66.734857][ T5291] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 66.984630][ T5306] pim6reg: entered allmulticast mode [ 67.036293][ T5301] Zero length message leads to an empty skb [ 67.190689][ T5218] lo speed is unknown, defaulting to 1000 [ 67.418339][ T5313] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 67.440272][ T5313] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 67.459430][ T5313] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. [ 67.561015][ T5315] team0: entered promiscuous mode [ 67.573425][ T5315] team_slave_0: entered promiscuous mode [ 67.580159][ T5315] team_slave_1: entered promiscuous mode [ 67.590210][ T5315] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 67.598877][ T5315] team0: left promiscuous mode [ 67.603660][ T5315] team_slave_0: left promiscuous mode [ 67.610827][ T5315] team_slave_1: left promiscuous mode [ 67.634849][ T5318] syz-executor.3 uses obsolete (PF_INET,SOCK_PACKET) [ 67.691308][ T5295] lo speed is unknown, defaulting to 1000 [ 68.029563][ T5330] EXT4-fs warning (device sda1): ext4_group_extend:1869: need to use ext2online to resize further [ 68.105237][ T5218] lo speed is unknown, defaulting to 1000 [ 69.300762][ T5361] pim6reg: entered allmulticast mode [ 69.530172][ T5376] tap0: tun_chr_ioctl cmd 1074025678 [ 69.546609][ T5376] tap0: group set to 0 [ 69.573536][ T5376] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 69.595422][ T5376] netlink: 44 bytes leftover after parsing attributes in process `syz-executor.3'. [ 69.670743][ T5379] lo speed is unknown, defaulting to 1000 [ 70.079655][ T5394] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 70.987896][ T5379] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 71.121471][ T5426] pim6reg: entered allmulticast mode [ 71.358189][ T5437] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 71.458393][ T5439] pim6reg: entered allmulticast mode [ 71.782812][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 71.790140][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 72.257241][ T5460] warning: `syz-executor.0' uses wireless extensions which will stop working for Wi-Fi 7 hardware; use nl80211 [ 72.926110][ T5479] ip6t_srh: unknown srh invflags 7863 [ 73.335455][ T5491] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 73.348117][ T5493] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 73.358335][ T5493] ipvlan0: entered promiscuous mode [ 73.369780][ T5493] ipvlan0: entered allmulticast mode [ 73.371172][ T5496] Driver unsupported XDP return value 0 on prog (id 24) dev N/A, expect packet loss! [ 73.375315][ T5493] veth0_vlan: entered allmulticast mode [ 73.830233][ T5519] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 73.856880][ T5519] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 73.871648][ T5520] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 73.884169][ T5520] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 74.349270][ T5544] syz-executor.3[5544] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.349436][ T5544] syz-executor.3[5544] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.395433][ T5546] syz-executor.3[5546] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 74.474899][ T5551] pim6reg: entered allmulticast mode [ 75.348883][ T5588] smc: removing ib device syz0 [ 75.372420][ T29] audit: type=1800 audit(1718266036.119:2): pid=5589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name=A3 dev="sda1" ino=1966 res=0 errno=0 [ 75.449435][ T29] audit: type=1804 audit(1718266036.119:3): pid=5589 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=ToMToU comm="syz-executor.1" name=2F726F6F742F73797A6B616C6C65722D74657374646972313338313336353430382F73797A6B616C6C65722E73487847464B2F32332FA3 dev="sda1" ino=1966 res=1 errno=0 [ 75.525622][ T29] audit: type=1804 audit(1718266036.189:4): pid=5592 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2180805293/syzkaller.HWHScx/25/cgroup.controllers" dev="sda1" ino=1960 res=1 errno=0 [ 76.599688][ T5628] Cannot find del_set index 0 as target [ 76.916460][ T25] cfg80211: failed to load regulatory.db [ 77.212565][ T29] audit: type=1804 audit(1718266037.959:5): pid=5649 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1381365408/syzkaller.sHxGFK/29/cgroup.controllers" dev="sda1" ino=1944 res=1 errno=0 [ 77.714394][ T29] audit: type=1800 audit(1718266038.469:6): pid=5655 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.4" name="memory.events" dev="sda1" ino=1965 res=0 errno=0 [ 78.133236][ T5664] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 78.182091][ T5663] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 78.271793][ T5669] Bluetooth: MGMT ver 1.22 [ 78.473955][ T5673] UDPLite6: UDP-Lite is deprecated and scheduled to be removed in 2025, please contact the netdev mailing list [ 78.662754][ T5681] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 78.712820][ T5681] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.4'. [ 78.731773][ T5684] bond_slave_0: entered promiscuous mode [ 78.738102][ T5684] bond_slave_1: entered promiscuous mode [ 78.776910][ T5686] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 78.810400][ T5688] bond_slave_0: left promiscuous mode [ 78.834994][ T5688] bond_slave_1: left promiscuous mode [ 79.154185][ T29] audit: type=1804 audit(1718266039.909:7): pid=5693 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3060851254/syzkaller.H35zlT/27/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 79.240610][ T5688] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 79.298178][ T5688] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 79.351812][ T5688] bond0 (unregistering): Released all slaves [ 79.910300][ T5718] hsr0: entered promiscuous mode [ 81.016136][ T5764] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 81.053259][ T5764] batman_adv: batadv0: Adding interface: wlan0 [ 81.061868][ T5731] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 81.081733][ T5764] batman_adv: batadv0: The MTU of interface wlan0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 81.109725][ T29] audit: type=1804 audit(1718266041.869:8): pid=5768 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir1381365408/syzkaller.sHxGFK/38/cgroup.controllers" dev="sda1" ino=1957 res=1 errno=0 [ 81.142234][ T5764] batman_adv: batadv0: Interface activated: wlan0 [ 81.150045][ T5767] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 81.196515][ T5764] Bluetooth: MGMT ver 1.22 [ 81.312089][ T5773] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.3'. [ 81.784832][ T5789] hsr0: entered promiscuous mode [ 82.130707][ T5802] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 82.146747][ T4543] udevd[4543]: worker [5119] terminated by signal 33 (Unknown signal 33) [ 82.156015][ T5802] netlink: 64 bytes leftover after parsing attributes in process `syz-executor.0'. [ 82.166393][ T4543] udevd[4543]: worker [5119] failed while handling '/devices/virtual/block/loop1' [ 82.175839][ T5802] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 82.420271][ T5819] No such timeout policy "syz0" [ 82.803176][ T5842] tun0: tun_chr_ioctl cmd 1074812118 [ 82.818519][ T5842] pimreg: entered allmulticast mode [ 82.847063][ T5842] dvmrp5: entered allmulticast mode [ 82.871054][ T5842] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 83.214409][ T5860] __nla_validate_parse: 3 callbacks suppressed [ 83.214428][ T5860] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.1'. [ 83.271205][ T5860] mac80211_hwsim hwsim3 wlan1: entered promiscuous mode [ 83.760699][ T5877] hsr0: entered promiscuous mode [ 83.910005][ T5887] syzkaller1: entered promiscuous mode [ 83.922021][ T5887] syzkaller1: entered allmulticast mode [ 84.025068][ T5885] sctp: [Deprecated]: syz-executor.4 (pid 5885) Use of int in max_burst socket option. [ 84.025068][ T5885] Use struct sctp_assoc_value instead [ 84.428583][ T5906] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.1'. [ 84.440987][ T5906] unsupported nla_type 8192 [ 84.485832][ T5910] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'. [ 84.504157][ T5910] netlink: 80 bytes leftover after parsing attributes in process `syz-executor.2'. [ 84.653367][ T5916] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 84.885670][ T5923] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 84.903718][ T5923] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.0'. [ 84.926708][ T5923] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 84.952242][ T5926] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 84.984679][ T5926] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 85.012763][ T5926] netlink: 'syz-executor.1': attribute type 14 has an invalid length. [ 85.051130][ T5926] netdevsim netdevsim1 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.060455][ T5926] netdevsim netdevsim1 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.069244][ T5926] netdevsim netdevsim1 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.078908][ T5926] netdevsim netdevsim1 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 85.098340][ T5926] vxlan0: entered promiscuous mode [ 85.116465][ T5929] mac80211_hwsim hwsim8 wlan0: entered promiscuous mode [ 85.126802][ T5929] macvlan2: entered promiscuous mode [ 85.137500][ T5929] mac80211_hwsim hwsim8 wlan0: left promiscuous mode [ 85.160480][ T5932] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 85.919546][ T5958] raw_sendmsg: syz-executor.2 forgot to set AF_INET. Fix it! [ 86.110793][ T5971] Cannot find del_set index 0 as target [ 87.680099][ T6031] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 87.687754][ T6031] IPv6: NLM_F_CREATE should be set when creating new route [ 88.488072][ T5116] Bluetooth: hci0: command 0x0c20 tx timeout [ 88.590946][ T6039] __nla_validate_parse: 11 callbacks suppressed [ 88.590966][ T6039] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 89.852522][ T6139] xfrm0: entered promiscuous mode [ 89.888321][ T6139] bond0: (slave vlan2): Enslaving as an active interface with an up link [ 89.950641][ T6119] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 89.997310][ T6119] bond0: (slave netdevsim0): Enslaving as an active interface with an up link [ 90.112538][ T6155] xt_socket: unknown flags 0x8 [ 90.213579][ T6155] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 90.233160][ T6159] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 90.299026][ T6161] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.1'. [ 90.473218][ C1] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 91.035806][ T6187] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 91.036691][ T6190] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 91.140399][ T6195] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 91.360140][ T6195] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.2'. [ 91.448003][ T6195] bridge0: port 2(bridge_slave_1) entered disabled state [ 91.496409][ T6209] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 91.892172][ T6226] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.2'. [ 92.187140][ C0] TCP: request_sock_subflow_v4: Possible SYN flooding on port [::]:20002. Sending cookies. [ 92.310923][ T6227] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 92.688170][ T6252] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 93.013783][ T6272] netlink: 'syz-executor.4': attribute type 5 has an invalid length. [ 93.871307][ T6305] __nla_validate_parse: 5 callbacks suppressed [ 93.871323][ T6305] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.0'. [ 93.917082][ C1] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 93.983542][ T6293] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 94.272905][ T6318] netlink: 'syz-executor.4': attribute type 7 has an invalid length. [ 94.423007][ T6323] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 94.472127][ T6325] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 94.779854][ T6338] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.4'. [ 94.863497][ T6345] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 95.184719][ T6353] syz-executor.3 (6353) used obsolete PPPIOCDETACH ioctl [ 95.226737][ T6355] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 95.676445][ T6362] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 97.142865][ T6390] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.4'. [ 97.178352][ T6424] IPVS: set_ctl: invalid protocol: 60 10.1.1.2:0 [ 97.327856][ T6435] netlink: 'syz-executor.3': attribute type 5 has an invalid length. [ 97.385154][ T6435] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 97.421894][ T6442] hsr0: entered promiscuous mode [ 98.299634][ T6482] hsr0: entered promiscuous mode [ 98.448554][ T6489] Bluetooth: MGMT ver 1.22 [ 99.234478][ T6508] syzkaller1: entered promiscuous mode [ 99.258049][ T6508] syzkaller1: entered allmulticast mode [ 99.653572][ T6530] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 99.871706][ T6546] macvlan0: entered promiscuous mode [ 99.886998][ T6546] macvlan0: left promiscuous mode [ 100.203027][ T6559] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 100.258173][ T6559] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 100.323369][ T6559] syz_tun: entered promiscuous mode [ 100.484496][ T53] Bluetooth: hci3: command 0x1407 tx timeout [ 100.487660][ T5116] Bluetooth: hci3: Opcode 0x1407 failed: -110 [ 100.569424][ T6574] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 100.925537][ T6592] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 101.034693][ T6598] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 101.097933][ T6600] netlink: 56 bytes leftover after parsing attributes in process `syz-executor.0'. [ 101.893026][ T6656] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 102.006694][ T6608] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.3'. [ 102.975773][ T6706] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.3'. [ 103.485301][ T6688] tc_dump_action: action bad kind [ 103.757180][ T6738] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 104.676621][ T6767] __nla_validate_parse: 1 callbacks suppressed [ 104.676639][ T6767] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 105.123629][ T6791] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 105.175338][ T6778] ip6t_srh: unknown srh invflags 7863 [ 105.556225][ T6801] netlink: 182 bytes leftover after parsing attributes in process `syz-executor.2'. [ 106.507698][ T6835] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 106.523981][ T6835] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 106.543265][ T6837] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 106.697929][ T6845] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 106.718639][ T6847] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 106.764379][ T6845] netlink: 512 bytes leftover after parsing attributes in process `syz-executor.3'. [ 107.160996][ T6869] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 107.170684][ T6870] ip6t_srh: unknown srh invflags 7863 [ 107.221189][ T6869] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 107.428646][ T6880] netlink: 104 bytes leftover after parsing attributes in process `syz-executor.3'. [ 107.492598][ T6884] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.2'. [ 108.708468][ T6914] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 108.955141][ T6925] syz_tun: entered promiscuous mode [ 108.971322][ T6925] syz_tun: left promiscuous mode [ 109.242793][ T6937] openvswitch: netlink: Message has -1 unknown bytes. [ 109.380588][ T6944] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 109.424363][ T6944] openvswitch: netlink: Flow key attr not present in new flow. [ 109.441203][ T6945] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.444924][ T6944] openvswitch: netlink: Message has -1 unknown bytes. [ 109.493220][ T6951] netlink: 'syz-executor.4': attribute type 29 has an invalid length. [ 109.505001][ T6949] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.1'. [ 109.623648][ T6945] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.751386][ T6945] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 109.875392][ T6945] bond0: (slave netdevsim0): Releasing backup interface [ 109.911439][ T6945] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 110.147320][ T6945] netdevsim netdevsim0 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.193596][ T6945] netdevsim netdevsim0 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.232253][ T6945] netdevsim netdevsim0 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.263969][ T6945] netdevsim netdevsim0 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 110.393651][ T6984] syzkaller0: entered allmulticast mode [ 110.485282][ T5116] Bluetooth: hci4: command tx timeout [ 110.574573][ T6994] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 110.920528][ T7001] netlink: 'syz-executor.1': attribute type 5 has an invalid length. [ 111.073920][ T7007] x_tables: duplicate underflow at hook 3 [ 111.172306][ T7009] netdevsim netdevsim1 netdevsim3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.186015][ T7009] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.306817][ T7009] netdevsim netdevsim1 netdevsim2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.325643][ T7009] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.496584][ T7009] netdevsim netdevsim1 netdevsim1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.513391][ T7009] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.563311][ T7025] ip6_tunnel: non-ECT from fe88:0000:0000:0000:0000:0000:0000:0004 with DS=0x2 [ 111.652804][ T7009] netdevsim netdevsim1 netdevsim0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 111.680028][ T7009] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 111.870539][ T7009] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.884079][ T7009] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.928497][ T7009] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 111.948610][ T7009] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 111.970346][ T7032] vlan2: entered allmulticast mode [ 112.042111][ T7009] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.055765][ T7009] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.072795][ T7009] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 112.082763][ T7009] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 112.093091][ T29] audit: type=1804 audit(1718266072.859:9): pid=7017 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3060851254/syzkaller.H35zlT/122/cgroup.controllers" dev="sda1" ino=1964 res=1 errno=0 [ 112.383456][ T7046] ip6t_REJECT: TCP_RESET illegal for non-tcp [ 112.431049][ T7046] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 112.629162][ T7052] ICMPv6: NA: 6a:00:08:4f:a5:3b advertised our address fe80::aa on syz_tun! [ 112.787916][ T7059] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.833846][ T7059] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 112.903169][ T7062] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 112.950287][ T7068] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 112.968388][ T7059] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 112.996918][ T7059] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.109909][ T7059] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.121065][ T7059] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.216505][ T7059] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 113.244814][ T7059] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 113.258986][ T7076] dccp_invalid_packet: P.Data Offset(172) too large [ 113.290294][ T7079] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.2'. [ 113.357754][ T7079] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 114.002106][ T7112] dccp_invalid_packet: P.Data Offset(172) too large [ 114.233643][ T7119] hsr_slave_0: left promiscuous mode [ 114.271169][ T7119] hsr_slave_1: left promiscuous mode [ 114.390363][ T7122] dvmrp0: entered allmulticast mode [ 114.762576][ T7127] infiniband syz1: set active [ 114.788988][ T7127] infiniband syz1: added veth1_to_batadv [ 114.946077][ T7127] RDS/IB: syz1: added [ 114.950166][ T7127] smc: adding ib device syz1 with port count 1 [ 114.965582][ T7127] smc: ib device syz1 port 1 has pnetid [ 115.002150][ T7121] dvmrp0: left allmulticast mode [ 115.609255][ T29] audit: type=1107 audit(1718266076.369:10): pid=7204 uid=0 auid=4294967295 ses=4294967295 subj=unconfined msg='' [ 115.653516][ T7207] team0: entered promiscuous mode [ 115.673737][ T7207] team_slave_0: entered promiscuous mode [ 115.682478][ T7207] team_slave_1: entered promiscuous mode [ 116.303990][ T7228] IPVS: length: 96 != 8 [ 116.312105][ T7228] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 116.446271][ T7206] team0: left promiscuous mode [ 116.451089][ T7206] team_slave_0: left promiscuous mode [ 116.463287][ T7206] team_slave_1: left promiscuous mode [ 116.644542][ T53] Bluetooth: hci0: command 0x0c20 tx timeout [ 116.644880][ T5116] Bluetooth: hci0: Opcode 0x0c1a failed: -110 [ 117.590313][ T7277] ieee802154 phy0 wpan0: encryption failed: -90 [ 117.920426][ T7059] netdevsim netdevsim1 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 117.941020][ T7059] netdevsim netdevsim1 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 117.993084][ T7059] netdevsim netdevsim1 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.025783][ T7297] IPVS: length: 96 != 8 [ 118.038191][ T7059] netdevsim netdevsim1 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.039220][ T7297] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 118.082146][ T7300] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 118.083527][ T7059] netdevsim netdevsim1 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.110033][ T7059] netdevsim netdevsim1 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 118.262088][ T7059] netdevsim netdevsim1 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 118.289905][ T7059] netdevsim netdevsim1 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 119.488856][ T7363] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 120.202973][ T7390] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.4'. [ 120.352792][ T7397] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 120.387383][ T7397] sctp: [Deprecated]: syz-executor.1 (pid 7397) Use of struct sctp_assoc_value in delayed_ack socket option. [ 120.387383][ T7397] Use struct sctp_sack_info instead [ 121.223414][ T7440] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 121.382933][ T7440] netlink: 'syz-executor.0': attribute type 12 has an invalid length. [ 121.393410][ T7440] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 121.402879][ T7440] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 121.412621][ T7440] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 121.421162][ T7440] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 121.431581][ T7440] netlink: 'syz-executor.0': attribute type 37 has an invalid length. [ 121.440451][ T7440] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 121.454896][ T7440] bridge0: port 1(bridge_slave_0) entered disabled state [ 121.469650][ T7446] vlan2: entered promiscuous mode [ 121.484513][ T7446] vlan2: entered allmulticast mode [ 122.837646][ T7505] team0: entered promiscuous mode [ 122.850746][ T7505] team_slave_0: entered promiscuous mode [ 122.872719][ T7505] team_slave_1: entered promiscuous mode [ 122.890416][ T7505] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 122.896441][ T7510] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 123.311092][ T7533] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 123.747222][ T7554] bond0: entered promiscuous mode [ 123.761548][ T7554] bond_slave_0: entered promiscuous mode [ 123.788764][ T7554] bond_slave_1: entered promiscuous mode [ 123.813176][ T7554] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 123.901932][ T7557] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 123.945888][ T7557] sctp: [Deprecated]: syz-executor.0 (pid 7557) Use of struct sctp_assoc_value in delayed_ack socket option. [ 123.945888][ T7557] Use struct sctp_sack_info instead [ 124.230596][ T7579] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 124.395010][ T7588] trusted_key: syz-executor.4 sent an empty control message without MSG_MORE. [ 124.701448][ T7606] rose0: entered promiscuous mode [ 125.623672][ T7634] netlink: 112 bytes leftover after parsing attributes in process `syz-executor.3'. [ 125.660871][ T7637] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 125.691762][ T7637] sctp: [Deprecated]: syz-executor.1 (pid 7637) Use of struct sctp_assoc_value in delayed_ack socket option. [ 125.691762][ T7637] Use struct sctp_sack_info instead [ 126.075875][ T7651] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 126.127157][ T7656] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 126.581911][ T7677] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 126.635360][ T7677] netlink: 108 bytes leftover after parsing attributes in process `syz-executor.0'. [ 126.806036][ T7686] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 126.842272][ T7691] netlink: 136 bytes leftover after parsing attributes in process `syz-executor.1'. [ 126.901645][ T7686] dummy0: entered promiscuous mode [ 126.917768][ T7686] macsec2: entered allmulticast mode [ 126.932575][ T7686] dummy0: entered allmulticast mode [ 126.992308][ T7686] dummy0: left allmulticast mode [ 127.028266][ T7686] dummy0: left promiscuous mode [ 127.333893][ T7704] bond0: entered promiscuous mode [ 127.341350][ T7704] bond_slave_0: entered promiscuous mode [ 127.353984][ T7704] bond_slave_1: entered promiscuous mode [ 127.367299][ T7704] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 128.042063][ T29] audit: type=1804 audit(1718266088.799:11): pid=7727 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2656578471/syzkaller.z22aUn/174/cgroup.controllers" dev="sda1" ino=1961 res=1 errno=0 [ 128.187881][ T7735] bond0: entered promiscuous mode [ 128.196749][ T7735] bond_slave_0: entered promiscuous mode [ 128.202813][ T7735] bond_slave_1: entered promiscuous mode [ 128.208923][ T7735] vlan2: entered promiscuous mode [ 128.217157][ T7735] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 128.315882][ T7740] __nla_validate_parse: 2 callbacks suppressed [ 128.315900][ T7740] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 129.158815][ T2470] netdevsim netdevsim1 eth3 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.185741][ T2470] netdevsim netdevsim1 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.230817][ T53] Bluetooth: hci2: unexpected cc 0x0c03 length: 249 > 1 [ 129.240236][ T53] Bluetooth: hci2: unexpected cc 0x1003 length: 249 > 9 [ 129.260688][ T53] Bluetooth: hci2: unexpected cc 0x1001 length: 249 > 9 [ 129.271879][ T2470] netdevsim netdevsim1 eth2 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.283936][ T53] Bluetooth: hci2: unexpected cc 0x0c23 length: 249 > 4 [ 129.292231][ T53] Bluetooth: hci2: unexpected cc 0x0c25 length: 249 > 3 [ 129.301068][ T2470] netdevsim netdevsim1 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.311979][ T53] Bluetooth: hci2: unexpected cc 0x0c38 length: 249 > 2 [ 129.394859][ T2470] netdevsim netdevsim1 eth1 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.423969][ T2470] netdevsim netdevsim1 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 129.482481][ T7764] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 129.578844][ T2470] netdevsim netdevsim1 eth0 (unregistering): unset [0, 0] type 1 family 0 port 8472 - 0 [ 129.606221][ T2470] netdevsim netdevsim1 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 130.169362][ T2470] bridge_slave_1: left allmulticast mode [ 130.202414][ T2470] bridge_slave_1: left promiscuous mode [ 130.232333][ T2470] bridge0: port 2(bridge_slave_1) entered disabled state [ 130.333677][ T2470] bridge_slave_0: left allmulticast mode [ 130.361282][ T2470] bridge_slave_0: left promiscuous mode [ 130.389960][ T2470] bridge0: port 1(bridge_slave_0) entered disabled state [ 130.674832][ T7806] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 130.983809][ T2470] bond0 (unregistering): (slave vlan2): Releasing backup interface [ 130.995180][ T2470] vlan2 (unregistering): left promiscuous mode [ 131.364631][ T5116] Bluetooth: hci2: command tx timeout [ 131.419392][ T2470] bond0 (unregistering): left promiscuous mode [ 131.426486][ T2470] bond_slave_0: left promiscuous mode [ 131.432088][ T2470] bond_slave_1: left promiscuous mode [ 131.453473][ T2470] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 131.473502][ T2470] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 131.486391][ T2470] bond0 (unregistering): Released all slaves [ 131.505584][ T7813] bridge0: port 2(bridge_slave_1) entered disabled state [ 131.541893][ T7826] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 131.635860][ T7759] chnl_net:caif_netlink_parms(): no params data found [ 131.665932][ T7831] xt_hashlimit: max too large, truncated to 1048576 [ 131.724029][ T7832] xt_socket: unknown flags 0x4 [ 132.527560][ T7867] bond0: entered promiscuous mode [ 132.539132][ T7867] bond_slave_0: entered promiscuous mode [ 132.547755][ T7867] bond_slave_1: entered promiscuous mode [ 132.555656][ T7867] 8021q: adding VLAN 0 to HW filter on device macvlan3 [ 132.576964][ T7759] bridge0: port 1(bridge_slave_0) entered blocking state [ 132.595037][ T7759] bridge0: port 1(bridge_slave_0) entered disabled state [ 132.625518][ T7759] bridge_slave_0: entered allmulticast mode [ 132.666104][ T7759] bridge_slave_0: entered promiscuous mode [ 132.813180][ T7759] bridge0: port 2(bridge_slave_1) entered blocking state [ 132.833462][ T7759] bridge0: port 2(bridge_slave_1) entered disabled state [ 132.852144][ T7759] bridge_slave_1: entered allmulticast mode [ 132.860570][ T7759] bridge_slave_1: entered promiscuous mode [ 133.097657][ T7759] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 133.129781][ T7759] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 133.217767][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 133.224246][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 133.444985][ T5116] Bluetooth: hci2: command tx timeout [ 133.607256][ T7759] team0: Port device team_slave_0 added [ 133.673366][ T2470] hsr_slave_0: left promiscuous mode [ 133.723917][ T2470] hsr_slave_1: left promiscuous mode [ 133.732959][ T2470] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 133.748471][ T2470] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 133.763044][ T2470] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 133.773174][ T7924] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 133.780184][ T2470] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 133.822644][ T2470] veth1_macvtap: left promiscuous mode [ 133.829770][ T2470] veth0_macvtap: left promiscuous mode [ 133.837011][ T2470] veth1_vlan: left promiscuous mode [ 133.842636][ T2470] veth0_vlan: left promiscuous mode [ 133.871878][ T7929] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 134.010819][ T2470] pim6reg (unregistering): left allmulticast mode [ 134.372408][ T2470] team0 (unregistering): Port device team_slave_1 removed [ 134.444476][ T2470] team0 (unregistering): Port device team_slave_0 removed [ 135.029332][ T7759] team0: Port device team_slave_1 added [ 135.201366][ T7759] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 135.215155][ T7759] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.252278][ T7759] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 135.274397][ T7759] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 135.281467][ T7759] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 135.363429][ T7759] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 135.525602][ T5116] Bluetooth: hci2: command tx timeout [ 135.548584][ T7759] hsr_slave_0: entered promiscuous mode [ 135.598780][ T7759] hsr_slave_1: entered promiscuous mode [ 135.856069][ T7987] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 135.895603][ T7992] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 135.984675][ T7992] bridge0: port 1(bridge_slave_0) entered disabled state [ 136.059094][ T7996] bridge5: trying to set multicast query interval below minimum, setting to 100 (1000ms) [ 136.413158][ T8016] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 136.700633][ T8023] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 136.960368][ T7759] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 137.020756][ T7759] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 137.039729][ T7759] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 137.080887][ T7759] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 137.550554][ T7759] 8021q: adding VLAN 0 to HW filter on device bond0 [ 137.576632][ T8064] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 137.591077][ T8061] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 137.628534][ T5116] Bluetooth: hci2: command tx timeout [ 137.638016][ T7759] 8021q: adding VLAN 0 to HW filter on device team0 [ 137.685428][ T25] bridge0: port 1(bridge_slave_0) entered blocking state [ 137.692599][ T25] bridge0: port 1(bridge_slave_0) entered forwarding state [ 137.703832][ T25] bridge0: port 2(bridge_slave_1) entered blocking state [ 137.711145][ T25] bridge0: port 2(bridge_slave_1) entered forwarding state [ 137.754405][ T8071] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_to_bond, syncid = 0, id = 0 [ 137.819223][ T8077] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.0'. [ 138.373481][ T7759] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 138.660757][ T7759] veth0_vlan: entered promiscuous mode [ 138.722215][ T7759] veth1_vlan: entered promiscuous mode [ 138.773003][ T8128] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 138.822640][ T8126] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 138.890243][ T7759] veth0_macvtap: entered promiscuous mode [ 138.955725][ T7759] veth1_macvtap: entered promiscuous mode [ 139.036538][ T7759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.066247][ T7759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.084759][ T7759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.104676][ T7759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.134255][ T7759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.146620][ T7759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.164299][ T7759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 139.184322][ T7759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.221820][ T7759] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 139.256189][ T8144] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 139.310379][ T8147] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 139.370225][ T7759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.406095][ T7759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.433761][ T7759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.488028][ T7759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.501856][ T7759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.540355][ T7759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.564899][ T7759] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 139.613297][ T7759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 139.654081][ T7759] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 139.721513][ T7759] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.747140][ T7759] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.778658][ T7759] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 139.808549][ T7759] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 140.124165][ T8192] ip6t_srh: unknown srh invflags 7863 [ 140.165334][ T7759] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 140.188455][ T7759] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 140.231365][ T62] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.271143][ T62] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.386732][ T7194] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 140.430332][ T7194] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 140.450811][ T8211] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 141.105396][ T8239] sctp: [Deprecated]: syz-executor.2 (pid 8239) Use of struct sctp_assoc_value in delayed_ack socket option. [ 141.105396][ T8239] Use struct sctp_sack_info instead [ 141.409176][ T8251] pimreg: entered allmulticast mode [ 141.489749][ T8251] veth0_vlan: entered allmulticast mode [ 141.742374][ T8271] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 142.019990][ T8285] sctp: [Deprecated]: syz-executor.3 (pid 8285) Use of struct sctp_assoc_value in delayed_ack socket option. [ 142.019990][ T8285] Use struct sctp_sack_info instead [ 142.096466][ T8292] ip6t_srh: unknown srh invflags 7863 [ 142.726796][ T8321] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 142.739504][ T8321] sctp: [Deprecated]: syz-executor.2 (pid 8321) Use of struct sctp_assoc_value in delayed_ack socket option. [ 142.739504][ T8321] Use struct sctp_sack_info instead [ 143.192388][ T8341] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 143.233258][ T8343] netlink: 144316 bytes leftover after parsing attributes in process `syz-executor.1'. [ 143.281209][ T5156] IPVS: starting estimator thread 0... [ 143.290605][ T8343] netlink: 209852 bytes leftover after parsing attributes in process `syz-executor.1'. [ 143.324645][ T8343] openvswitch: netlink: VXLAN extension message has 13 unknown bytes. [ 143.384613][ T8347] IPVS: using max 19 ests per chain, 45600 per kthread [ 143.463756][ T8352] bridge0: port 2(bridge_slave_1) entered disabled state [ 143.473014][ T8352] bridge0: port 1(bridge_slave_0) entered disabled state [ 143.581820][ T8352] bridge0: port 2(bridge_slave_1) entered blocking state [ 143.589115][ T8352] bridge0: port 2(bridge_slave_1) entered forwarding state [ 143.596793][ T8352] bridge0: port 1(bridge_slave_0) entered blocking state [ 143.603969][ T8352] bridge0: port 1(bridge_slave_0) entered forwarding state [ 143.623137][ T8352] bridge0: entered promiscuous mode [ 143.630094][ T8352] bridge0: entered allmulticast mode [ 143.954048][ T8370] ip6t_srh: unknown srh invflags 7863 [ 143.989543][ T8372] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 144.035261][ T8374] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 144.098912][ T8378] A link change request failed with some changes committed already. Interface geneve1 may have been left with an inconsistent configuration, please check. [ 144.186102][ T8383] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 144.247626][ T8386] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 144.503065][ T8398] netlink: 144572 bytes leftover after parsing attributes in process `syz-executor.2'. [ 144.784567][ T8413] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 145.141398][ T8439] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 145.152641][ T8439] netlink: 130980 bytes leftover after parsing attributes in process `syz-executor.4'. [ 145.461207][ T8451] ip6t_srh: unknown srh invflags 7863 [ 146.525574][ T8491] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.0'. [ 146.733578][ T8495] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 146.763879][ T8495] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 147.282736][ T8522] ip6t_srh: unknown srh invflags 7863 [ 147.385969][ T8524] bond0: entered promiscuous mode [ 147.391073][ T8524] bond_slave_0: entered promiscuous mode [ 147.414716][ T8524] bond_slave_1: entered promiscuous mode [ 147.441972][ T8524] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 148.670660][ T8586] syzkaller0: entered promiscuous mode [ 148.683018][ T8586] syzkaller0: entered allmulticast mode [ 148.962094][ T8606] ip6t_srh: unknown srh invflags 7863 [ 148.968928][ T8605] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 149.001358][ T8605] sctp: [Deprecated]: syz-executor.4 (pid 8605) Use of struct sctp_assoc_value in delayed_ack socket option. [ 149.001358][ T8605] Use struct sctp_sack_info instead [ 149.260388][ T8622] __nla_validate_parse: 3 callbacks suppressed [ 149.260407][ T8622] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 149.279400][ T8623] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 149.622440][ T8644] vlan0: entered promiscuous mode [ 149.738260][ T8644] vlan0 (unregistering): left promiscuous mode [ 149.803449][ T8647] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 149.814806][ T8647] sctp: [Deprecated]: syz-executor.4 (pid 8647) Use of struct sctp_assoc_value in delayed_ack socket option. [ 149.814806][ T8647] Use struct sctp_sack_info instead [ 149.927334][ T8655] rdma_rxe: rxe_newlink: failed to add vcan0 [ 150.596607][ T8686] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 150.624019][ T8691] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 150.636830][ T8686] sctp: [Deprecated]: syz-executor.1 (pid 8686) Use of struct sctp_assoc_value in delayed_ack socket option. [ 150.636830][ T8686] Use struct sctp_sack_info instead [ 150.786947][ T8705] ip6t_srh: unknown srh invflags 7863 [ 151.286049][ T8730] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 151.351305][ T8730] netlink: 666 bytes leftover after parsing attributes in process `syz-executor.3'. [ 151.498384][ T8734] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 151.756837][ T8741] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 151.795399][ T8741] sctp: [Deprecated]: syz-executor.0 (pid 8741) Use of struct sctp_assoc_value in delayed_ack socket option. [ 151.795399][ T8741] Use struct sctp_sack_info instead [ 152.450574][ T8767] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.602713][ T8767] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.712697][ T8767] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.860962][ T8767] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 152.926857][ T8774] netlink: 188 bytes leftover after parsing attributes in process `syz-executor.0'. [ 152.957015][ T8774] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 153.097819][ T8784] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 153.281186][ T8767] netdevsim netdevsim2 eth0: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.340394][ T8794] IPVS: set_ctl: invalid protocol: 59 10.1.1.2:20002 [ 153.343892][ T8767] netdevsim netdevsim2 eth1: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.382920][ T8767] netdevsim netdevsim2 eth2: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.449575][ T8767] netdevsim netdevsim2 eth3: set [1, 0] type 2 family 0 port 6081 - 0 [ 153.475399][ T8799] ip6t_srh: unknown srh invflags 7863 [ 154.035323][ T8816] netlink: 'syz-executor.2': attribute type 3 has an invalid length. [ 154.114391][ T8816] netlink: 666 bytes leftover after parsing attributes in process `syz-executor.2'. [ 154.398118][ T8827] bridge1: entered promiscuous mode [ 154.415986][ T8827] bridge1: entered allmulticast mode [ 154.434120][ T8829] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.4'. [ 154.480243][ T8829] bridge0: port 2(bridge_slave_1) entered disabled state [ 154.487677][ T8829] bridge0: port 1(bridge_slave_0) entered disabled state [ 155.141648][ T8860] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 155.155552][ T8860] sctp: [Deprecated]: syz-executor.2 (pid 8860) Use of struct sctp_assoc_value in delayed_ack socket option. [ 155.155552][ T8860] Use struct sctp_sack_info instead [ 155.455665][ T8888] ip6t_srh: unknown srh invflags 7863 [ 155.733624][ T8900] netlink: 'syz-executor.4': attribute type 3 has an invalid length. [ 155.818281][ T8900] netlink: 666 bytes leftover after parsing attributes in process `syz-executor.4'. [ 155.861786][ T8905] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.2'. [ 155.963105][ T8905] 8021q: adding VLAN 0 to HW filter on device team1 [ 155.994564][ T8905] team1: entered promiscuous mode [ 156.018170][ T8905] bond0: (slave team1): Enslaving as an active interface with an up link [ 156.242087][ T8915] IPVS: set_ctl: invalid protocol: 8483 0.0.0.0:0 [ 156.299370][ T8915] IPVS: set_ctl: invalid protocol: 8483 0.0.0.0:0 [ 156.340349][ T8923] netlink: 27 bytes leftover after parsing attributes in process `syz-executor.0'. [ 156.476581][ T8923] netlink: 27 bytes leftover after parsing attributes in process `syz-executor.0'. [ 156.529795][ T8923] netlink: 27 bytes leftover after parsing attributes in process `syz-executor.0'. [ 156.563750][ T8923] netlink: 27 bytes leftover after parsing attributes in process `syz-executor.0'. [ 156.600298][ T8936] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 156.600959][ T8923] netlink: 27 bytes leftover after parsing attributes in process `syz-executor.0'. [ 156.645720][ T8923] netlink: 27 bytes leftover after parsing attributes in process `syz-executor.0'. [ 156.669145][ T8940] netlink: 'syz-executor.3': attribute type 30 has an invalid length. [ 156.681644][ T8923] netlink: 27 bytes leftover after parsing attributes in process `syz-executor.0'. [ 156.819992][ T8933] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 156.839037][ T8933] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 156.870850][ T8933] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 156.889237][ T8933] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 156.988745][ T8949] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 157.230738][ T8972] ip6t_srh: unknown srh invflags 7863 [ 157.633360][ T8996] rdma_rxe: rxe_newlink: failed to add vcan0 [ 157.689092][ T8998] netlink: 'syz-executor.3': attribute type 3 has an invalid length. [ 158.229250][ T9010] netlink: 'syz-executor.1': attribute type 11 has an invalid length. [ 158.288887][ T9010] netlink: 'syz-executor.1': attribute type 30 has an invalid length. [ 158.364616][ T9012] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 158.400034][ T9012] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 158.430636][ T9012] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 158.448220][ T9012] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 158.988419][ T9033] netlink: 'syz-executor.0': attribute type 4 has an invalid length. [ 159.739074][ T25] IPVS: starting estimator thread 0... [ 159.834973][ T9080] IPVS: using max 17 ests per chain, 40800 per kthread [ 160.080430][ T9093] xt_CT: You must specify a L4 protocol and not use inversions on it [ 160.220997][ T9105] xt_l2tp: v2 sid > 0xffff: 16777216 [ 160.375759][ T9114] __nla_validate_parse: 31 callbacks suppressed [ 160.375779][ T9114] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 160.453036][ T9118] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 160.661387][ T9139] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.3'. [ 160.900689][ T9158] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.0'. [ 160.930414][ T9158] team0: Failed to send port change of device team_slave_0 via netlink (err -105) [ 161.583491][ T9192] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 161.595201][ T9192] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 161.714945][ T9199] vlan0: entered promiscuous mode [ 161.729424][ T9199] vlan0: entered allmulticast mode [ 161.745821][ T9199] bond0: entered allmulticast mode [ 161.756265][ T9199] bond_slave_0: entered allmulticast mode [ 161.784257][ T9199] bond_slave_1: entered allmulticast mode [ 161.804733][ T9199] bond0: left allmulticast mode [ 161.812776][ T9199] bond_slave_0: left allmulticast mode [ 161.826987][ T9199] bond_slave_1: left allmulticast mode [ 161.919203][ T9209] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 162.079593][ T9216] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 162.101621][ T9220] netlink: 'syz-executor.0': attribute type 21 has an invalid length. [ 162.112269][ T9220] netlink: 156 bytes leftover after parsing attributes in process `syz-executor.0'. [ 162.236656][ T9229] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 162.251479][ T9229] sctp: [Deprecated]: syz-executor.3 (pid 9229) Use of struct sctp_assoc_value in delayed_ack socket option. [ 162.251479][ T9229] Use struct sctp_sack_info instead [ 162.316047][ T9235] netlink: 'syz-executor.0': attribute type 3 has an invalid length. [ 162.335797][ T9235] netlink: 130984 bytes leftover after parsing attributes in process `syz-executor.0'. [ 162.385806][ T9239] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 162.497090][ T9246] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 162.629720][ T9260] dccp_invalid_packet: P.Data Offset(68) too large [ 162.830957][ T9269] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 162.854014][ T9269] sctp: [Deprecated]: syz-executor.2 (pid 9269) Use of struct sctp_assoc_value in delayed_ack socket option. [ 162.854014][ T9269] Use struct sctp_sack_info instead [ 163.399210][ T9318] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 163.409303][ T9318] sctp: [Deprecated]: syz-executor.2 (pid 9318) Use of struct sctp_assoc_value in delayed_ack socket option. [ 163.409303][ T9318] Use struct sctp_sack_info instead [ 163.439131][ T9321] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 163.462147][ T9321] netlink: 'syz-executor.3': attribute type 2 has an invalid length. [ 164.071129][ T9351] xt_hashlimit: max too large, truncated to 1048576 [ 164.211104][ T9359] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 164.225292][ T9355] sctp: [Deprecated]: syz-executor.3 (pid 9355) Use of struct sctp_assoc_value in delayed_ack socket option. [ 164.225292][ T9355] Use struct sctp_sack_info instead [ 164.228117][ T9361] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 165.008797][ T9407] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 165.028685][ T9407] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.057676][ T9409] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 165.158629][ T9418] vlan0: entered promiscuous mode [ 165.178647][ T9418] vlan0: entered allmulticast mode [ 165.187029][ T9422] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 165.190751][ T9418] bond0: entered allmulticast mode [ 165.215883][ T9418] bond_slave_0: entered allmulticast mode [ 165.222980][ T9418] bond_slave_1: entered allmulticast mode [ 165.232634][ T9418] bond0: left allmulticast mode [ 165.238158][ T9418] bond_slave_0: left allmulticast mode [ 165.243783][ T9418] bond_slave_1: left allmulticast mode [ 165.445680][ T9439] __nla_validate_parse: 11 callbacks suppressed [ 165.445698][ T9439] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 165.663393][ T9456] netlink: 9412 bytes leftover after parsing attributes in process `syz-executor.1'. [ 165.673800][ T9458] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 165.686543][ T9458] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 165.690206][ T5116] Bluetooth: hci2: command 0x0405 tx timeout [ 165.736079][ T9463] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.4'. [ 165.823000][ T9466] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 165.870901][ T9471] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.3'. [ 165.887784][ T9471] netlink: 128 bytes leftover after parsing attributes in process `syz-executor.3'. [ 165.898763][ T9471] netlink: 3 bytes leftover after parsing attributes in process `syz-executor.3'. [ 166.248618][ T9491] netlink: 36 bytes leftover after parsing attributes in process `syz-executor.0'. [ 166.798367][ T9524] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.0'. [ 167.236782][ T9544] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 167.312849][ T9544] vlan0: entered allmulticast mode [ 167.339117][ T9544] bridge0: port 3(vlan0) entered blocking state [ 167.381100][ T9544] bridge0: port 3(vlan0) entered disabled state [ 167.694807][ T29] audit: type=1800 audit(1718266128.449:12): pid=9565 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.1" name="memory.events" dev="sda1" ino=1962 res=0 errno=0 [ 168.125043][ T9588] dccp_invalid_packet: P.Data Offset(144) too large [ 168.266790][ T29] audit: type=1800 audit(1718266129.029:13): pid=9599 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=collect_data cause=failed(directio) comm="syz-executor.0" name="memory.events" dev="sda1" ino=1961 res=0 errno=0 [ 169.239921][ T9653] tun0: tun_chr_ioctl cmd 1074025677 [ 169.256643][ T9653] tun0: linktype set to 1 [ 169.719472][ T9674] ip6t_srh: unknown srh match flags 4001 [ 169.810466][ T9681] validate_nla: 8 callbacks suppressed [ 169.810484][ T9681] netlink: 'syz-executor.2': attribute type 11 has an invalid length. [ 171.366962][ T9777] __nla_validate_parse: 7 callbacks suppressed [ 171.366981][ T9777] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.3'. [ 171.393567][ T9773] netlink: 16402 bytes leftover after parsing attributes in process `syz-executor.3'. [ 172.421344][ T9831] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 172.484025][ T9834] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.1'. [ 172.749713][ T9853] IPVS: length: 96 != 8 [ 172.758288][ T9853] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 173.929404][ T9880] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 174.252658][ T9904] netlink: 256 bytes leftover after parsing attributes in process `syz-executor.1'. [ 174.321689][ T9909] netlink: 574 bytes leftover after parsing attributes in process `syz-executor.2'. [ 174.558407][ T9924] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 174.631973][ T9927] Bluetooth: hci3: invalid length 0, exp 2 for type 12 [ 175.092510][ T9960] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 175.213073][ T9963] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.0'. [ 175.315254][ T9969] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 175.589798][ T9990] xt_CT: You must specify a L4 protocol and not use inversions on it [ 175.734498][T10000] netdevsim netdevsim4 netdevsim0: entered promiscuous mode [ 175.768952][ T9999] netdevsim netdevsim4 netdevsim0: left promiscuous mode [ 176.348482][T10041] bridge_slave_1: left allmulticast mode [ 176.354978][T10041] bridge_slave_1: left promiscuous mode [ 176.362605][T10041] bridge0: port 2(bridge_slave_1) entered disabled state [ 176.378152][T10046] __nla_validate_parse: 4 callbacks suppressed [ 176.378172][T10046] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 176.395350][T10047] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 176.415570][T10047] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 177.104343][T10080] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 177.295725][T10044] RDS: rds_bind could not find a transport for ::ffff:172.20.20.34, load rds_tcp or rds_rdma? [ 177.724043][T10121] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 178.487776][T10177] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 179.016465][T10220] xt_l2tp: v2 tid > 0xffff: 100794368 [ 179.903535][ T29] audit: type=1804 audit(1718266140.659:14): pid=10272 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.0" name="/root/syzkaller-testdir2640405977/syzkaller.T9Anlu/331/cgroup.controllers" dev="sda1" ino=1954 res=1 errno=0 [ 180.198797][T10286] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 180.239299][T10286] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 181.364501][ T5121] Bluetooth: hci3: command 0x1407 tx timeout [ 181.367832][ T5112] Bluetooth: hci1: command 0x0406 tx timeout [ 182.588608][ T29] audit: type=1804 audit(1718266143.339:15): pid=10336 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2180805293/syzkaller.HWHScx/331/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 182.900897][T10343] pim6reg1: entered promiscuous mode [ 182.914682][T10343] pim6reg1: entered allmulticast mode [ 183.099536][T10359] sctp: [Deprecated]: syz-executor.1 (pid 10359) Use of struct sctp_assoc_value in delayed_ack socket option. [ 183.099536][T10359] Use struct sctp_sack_info instead [ 184.734049][ T29] audit: type=1804 audit(1718266145.489:16): pid=10377 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3226820256/syzkaller.dgCh48/144/cgroup.controllers" dev="sda1" ino=1946 res=1 errno=0 [ 184.836995][T10383] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.3'. [ 184.895612][ T29] audit: type=1804 audit(1718266145.659:17): pid=10383 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2656578471/syzkaller.z22aUn/342/cgroup.controllers" dev="sda1" ino=1942 res=1 errno=0 [ 184.982130][T10385] xt_CT: You must specify a L4 protocol and not use inversions on it [ 184.993598][T10393] sctp: [Deprecated]: syz-executor.0 (pid 10393) Use of struct sctp_assoc_value in delayed_ack socket option. [ 184.993598][T10393] Use struct sctp_sack_info instead [ 185.409453][ T29] audit: type=1804 audit(1718266146.169:18): pid=10417 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3226820256/syzkaller.dgCh48/147/cgroup.controllers" dev="sda1" ino=1958 res=1 errno=0 [ 185.454685][T10415] netlink: 16 bytes leftover after parsing attributes in process `syz-executor.2'. [ 185.471944][T10412] syzkaller0: entered promiscuous mode [ 185.493645][T10412] syzkaller0: entered allmulticast mode [ 185.578569][T10418] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.0'. [ 185.670783][T10423] netdevsim netdevsim1 netdevsim0: entered promiscuous mode [ 185.699910][T10423] macvtap1: entered promiscuous mode [ 185.705775][T10423] macvtap1: entered allmulticast mode [ 185.711367][T10423] netdevsim netdevsim1 netdevsim0: entered allmulticast mode [ 185.727231][T10423] netdevsim netdevsim1 netdevsim0: left allmulticast mode [ 185.738245][T10423] netdevsim netdevsim1 netdevsim0: left promiscuous mode [ 188.455741][T10448] hsr_slave_0: left promiscuous mode [ 188.462523][T10448] hsr_slave_1: left promiscuous mode [ 188.543322][T10452] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 188.553088][T10452] netlink: 'syz-executor.2': attribute type 5 has an invalid length. [ 188.573741][T10452] netdevsim netdevsim2 eth0: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.582546][T10452] netdevsim netdevsim2 eth1: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.591504][T10452] netdevsim netdevsim2 eth2: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.600429][T10452] netdevsim netdevsim2 eth3: set [0, 0] type 1 family 0 port 8472 - 0 [ 188.625826][T10452] vxlan0: entered promiscuous mode [ 188.817178][ T29] audit: type=1804 audit(1718266149.569:19): pid=10461 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.2" name="/root/syzkaller-testdir3060851254/syzkaller.H35zlT/373/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 189.091134][T10477] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.3'. [ 189.202000][T10486] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 189.274387][T10493] pimreg: left allmulticast mode [ 189.279664][T10493] dvmrp5: left allmulticast mode [ 189.466578][T10502] netlink: 132 bytes leftover after parsing attributes in process `syz-executor.0'. [ 189.658465][T10514] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.1'. [ 189.668458][ T29] audit: type=1804 audit(1718266150.419:20): pid=10511 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2180805293/syzkaller.HWHScx/336/cgroup.controllers" dev="sda1" ino=1962 res=1 errno=0 [ 189.850815][T10525] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 190.149695][T10540] ip6t_srh: unknown srh invflags 7863 [ 190.275424][T10546] pimreg: left allmulticast mode [ 190.905367][T10558] netlink: 28 bytes leftover after parsing attributes in process `syz-executor.2'. [ 190.928747][ T29] audit: type=1804 audit(1718266151.689:21): pid=10559 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.1" name="/root/syzkaller-testdir3226820256/syzkaller.dgCh48/160/cgroup.controllers" dev="sda1" ino=1948 res=1 errno=0 [ 190.981515][T10565] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 191.012077][T10569] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.3'. [ 191.198914][T10579] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 191.219100][T10579] bridge0: port 2(bridge_slave_1) entered disabled state [ 191.250891][T10584] sctp: [Deprecated]: syz-executor.2 (pid 10584) Use of struct sctp_assoc_value in delayed_ack socket option. [ 191.250891][T10584] Use struct sctp_sack_info instead [ 191.328371][T10591] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 191.461387][T10600] ip6t_srh: unknown srh invflags 7863 [ 191.491352][T10601] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.2'. [ 191.514504][T10601] siw: device registration error -23 [ 191.847488][ T29] audit: type=1804 audit(1718266152.609:22): pid=10624 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2180805293/syzkaller.HWHScx/341/cgroup.controllers" dev="sda1" ino=1963 res=1 errno=0 [ 192.119279][T10633] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.4'. [ 192.176896][T10629] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 192.467119][T10650] netlink: 54 bytes leftover after parsing attributes in process `syz-executor.3'. [ 192.474758][ C1] TCP: request_sock_TCP: Possible SYN flooding on port [::]:20002. Sending cookies. [ 192.645127][T10665] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.1'. [ 192.740577][T10672] netlink: 'syz-executor.2': attribute type 1 has an invalid length. [ 192.880244][T10682] ip6t_srh: unknown srh invflags 7863 [ 193.464395][ T5156] IPVS: starting estimator thread 0... [ 193.482538][T10719] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 193.505855][T10719] sctp: [Deprecated]: syz-executor.0 (pid 10719) Use of struct sctp_assoc_value in delayed_ack socket option. [ 193.505855][T10719] Use struct sctp_sack_info instead [ 193.564299][T10724] IPVS: using max 18 ests per chain, 43200 per kthread [ 194.241814][T10758] netlink: 'syz-executor.0': attribute type 6 has an invalid length. [ 194.270625][T10758] netlink: 'syz-executor.0': attribute type 5 has an invalid length. [ 194.349079][ T9] IPVS: starting estimator thread 0... [ 194.454335][T10764] IPVS: using max 19 ests per chain, 45600 per kthread [ 194.463987][T10768] netlink: 'syz-executor.1': attribute type 1 has an invalid length. [ 194.487334][T10768] sctp: [Deprecated]: syz-executor.1 (pid 10768) Use of struct sctp_assoc_value in delayed_ack socket option. [ 194.487334][T10768] Use struct sctp_sack_info instead [ 194.584620][T10781] vlan2: entered promiscuous mode [ 194.659683][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 194.666721][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 194.869015][T10789] ip6t_srh: unknown srh invflags 7863 [ 195.321191][T10821] xt_bpf: check failed: parse error [ 195.755204][T10842] xt_CT: You must specify a L4 protocol and not use inversions on it [ 195.966245][T10855] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 196.305061][T10869] ip6t_srh: unknown srh invflags 7863 [ 196.503331][T10881] __nla_validate_parse: 8 callbacks suppressed [ 196.503351][T10881] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 196.600637][T10881] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 196.862440][T10905] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 196.900552][T10905] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 197.118467][T10919] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 197.195795][T10921] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 197.213631][T10924] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 197.271186][T10926] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 197.287784][T10930] sctp: [Deprecated]: syz-executor.3 (pid 10930) Use of int in max_burst socket option. [ 197.287784][T10930] Use struct sctp_assoc_value instead [ 197.856122][T10972] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.3'. [ 197.858085][T10973] netlink: 'syz-executor.4': attribute type 11 has an invalid length. [ 197.901245][T10973] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 198.012197][T10983] ip6t_srh: unknown srh invflags 7863 [ 198.294000][T11002] tipc: Started in network mode [ 198.302515][T11002] tipc: Node identity 7f000001, cluster identity 4711 [ 198.316754][T11002] tipc: Enabling of bearer rejected, failed to enable media [ 198.607935][T11018] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 198.633939][T11018] netlink: 'syz-executor.0': attribute type 2 has an invalid length. [ 198.715968][T11025] netlink: 'syz-executor.3': attribute type 4 has an invalid length. [ 198.748652][T11027] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 198.771707][T11025] A link change request failed with some changes committed already. Interface macvlan0 may have been left with an inconsistent configuration, please check. [ 198.915852][T11029] can: request_module (can-proto-5) failed. [ 199.646415][ T29] audit: type=1804 audit(1718266160.399:23): pid=11089 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.4" name="/root/syzkaller-testdir2180805293/syzkaller.HWHScx/379/memory.events" dev="sda1" ino=1941 res=1 errno=0 [ 200.501778][T11140] netlink: 'syz-executor.3': attribute type 11 has an invalid length. [ 201.669759][T11218] __nla_validate_parse: 32 callbacks suppressed [ 201.669773][T11218] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 201.770946][T11220] dvmrp0: entered allmulticast mode [ 201.798334][T11223] netlink: 'syz-executor.0': attribute type 11 has an invalid length. [ 201.798621][T11220] TCP: request_sock_TCPv6: Possible SYN flooding on port [::]:20002. Sending cookies. [ 201.811968][T11223] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 201.870206][T11229] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. [ 202.148684][T11248] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 202.176861][T11250] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 202.203159][T11248] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.2'. [ 202.289709][T11252] netlink: 52 bytes leftover after parsing attributes in process `syz-executor.3'. [ 202.342080][T11258] netlink: 2 bytes leftover after parsing attributes in process `syz-executor.2'. [ 202.412876][T11262] ebt_among: dst integrity fail: 100 [ 202.429370][T11262] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.3'. [ 202.621367][T11279] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 202.994383][T11305] EXT4-fs warning (device sda1): __ext4_ioctl:1258: Setting inode version is not supported with metadata_csum enabled. [ 203.613712][T11354] xt_CHECKSUM: CHECKSUM should be avoided. If really needed, restrict with "-p udp" and only use in OUTPUT [ 204.313113][T11399] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 204.323802][T11399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 204.335778][T11399] batadv0: entered promiscuous mode [ 204.342999][T11399] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 204.595946][T11409] sctp: [Deprecated]: syz-executor.1 (pid 11409) Use of struct sctp_assoc_value in delayed_ack socket option. [ 204.595946][T11409] Use struct sctp_sack_info instead [ 204.642953][T11413] sctp: [Deprecated]: syz-executor.1 (pid 11413) Use of struct sctp_assoc_value in delayed_ack socket option. [ 204.642953][T11413] Use struct sctp_sack_info instead [ 205.043139][T11432] netlink: 'syz-executor.0': attribute type 10 has an invalid length. [ 205.082546][T11438] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.963161][T11492] netlink: 'syz-executor.2': attribute type 10 has an invalid length. [ 205.986887][T11492] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 206.010569][T11492] batadv0: entered promiscuous mode [ 206.048711][T11492] bond0: (slave batadv0): Enslaving as an active interface with an up link [ 206.169758][T11501] netlink: 'syz-executor.0': attribute type 58 has an invalid length. [ 206.682268][T11532] netlink: 'syz-executor.3': attribute type 10 has an invalid length. [ 206.686777][T11534] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 206.707781][T11536] x_tables: ip6_tables: SYNPROXY target: used from hooks PREROUTING, but only usable from INPUT/FORWARD [ 206.724862][T11536] netlink: 'syz-executor.0': attribute type 7 has an invalid length. [ 206.734725][T11536] __nla_validate_parse: 28 callbacks suppressed [ 206.734742][T11536] netlink: 224 bytes leftover after parsing attributes in process `syz-executor.0'. [ 207.125007][T11552] ip6gretap1: entered allmulticast mode [ 207.244832][T11552] netlink: 'syz-executor.2': attribute type 33 has an invalid length. [ 207.253071][T11552] netlink: 152 bytes leftover after parsing attributes in process `syz-executor.2'. [ 207.266843][T11555] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 207.284144][T11559] netlink: 68 bytes leftover after parsing attributes in process `syz-executor.3'. [ 207.297315][T11555] netlink: 11 bytes leftover after parsing attributes in process `syz-executor.4'. [ 207.363007][ T53] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 207.398456][ T53] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 207.427491][ T53] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 207.437873][ T53] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 207.448638][ T53] Bluetooth: hci4: unexpected cc 0x0c25 length: 249 > 3 [ 207.457312][ T53] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 207.837779][T11561] chnl_net:caif_netlink_parms(): no params data found [ 208.079800][T11561] bridge0: port 1(bridge_slave_0) entered blocking state [ 208.112456][T11561] bridge0: port 1(bridge_slave_0) entered disabled state [ 208.120483][T11561] bridge_slave_0: entered allmulticast mode [ 208.134845][T11561] bridge_slave_0: entered promiscuous mode [ 208.149681][T11561] bridge0: port 2(bridge_slave_1) entered blocking state [ 208.161919][T11561] bridge0: port 2(bridge_slave_1) entered disabled state [ 208.173194][T11561] bridge_slave_1: entered allmulticast mode [ 208.189921][T11561] bridge_slave_1: entered promiscuous mode [ 208.200249][T11608] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.4'. [ 208.209670][T11608] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.217536][T11608] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.227093][T11608] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.235877][T11608] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.383336][T11561] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 208.398241][T11561] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 208.502653][T11561] team0: Port device team_slave_0 added [ 208.531225][T11561] team0: Port device team_slave_1 added [ 208.609320][T11561] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 208.626784][T11561] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.659487][T11561] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 208.676683][T11561] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 208.691453][T11561] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 208.745093][T11561] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 208.757990][T11628] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.2'. [ 208.813651][T11631] openvswitch: netlink: Key 0 has unexpected len 4 expected 0 [ 208.878388][T11561] hsr_slave_0: entered promiscuous mode [ 208.889472][T11561] hsr_slave_1: entered promiscuous mode [ 209.046074][T11640] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 209.083656][T11561] netdevsim netdevsim0 eth3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.157850][T11561] netdevsim netdevsim0 eth2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.188315][T11651] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 209.204133][T11561] netdevsim netdevsim0 eth1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.266990][T11561] netdevsim netdevsim0 eth0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 209.311565][T11657] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 209.425791][T11561] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 209.439973][T11561] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 209.451412][T11561] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 209.466285][T11561] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 209.524645][ T53] Bluetooth: hci4: command tx timeout [ 209.642425][T11561] 8021q: adding VLAN 0 to HW filter on device bond0 [ 209.672427][T11561] 8021q: adding VLAN 0 to HW filter on device team0 [ 209.691675][ T5160] bridge0: port 1(bridge_slave_0) entered blocking state [ 209.698923][ T5160] bridge0: port 1(bridge_slave_0) entered forwarding state [ 209.715735][ T5160] bridge0: port 2(bridge_slave_1) entered blocking state [ 209.722951][ T5160] bridge0: port 2(bridge_slave_1) entered forwarding state [ 209.859119][T11665] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 209.925322][T11676] netlink: 'syz-executor.4': attribute type 10 has an invalid length. [ 210.167984][T11561] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 210.332278][T11561] veth0_vlan: entered promiscuous mode [ 210.355352][T11561] veth1_vlan: entered promiscuous mode [ 210.417418][T11561] veth0_macvtap: entered promiscuous mode [ 210.433681][T11561] veth1_macvtap: entered promiscuous mode [ 210.471675][T11561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.483457][T11561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.499141][T11561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3e) already exists on: batadv_slave_0 [ 210.510049][T11561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.528258][T11561] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 210.545590][T11561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.556413][T11561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.568107][T11561] batman_adv: The newly added mac address (aa:aa:aa:aa:aa:3f) already exists on: batadv_slave_1 [ 210.579037][T11561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.591992][T11561] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 210.617708][T11561] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.642672][T11561] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.663044][T11561] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.672289][T11561] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 210.791005][T11561] batman_adv: The newly added mac address (08:02:11:00:00:00) already exists on: wlan0 [ 210.802572][T11561] batman_adv: It is strongly recommended to keep mac addresses unique to avoid problems! [ 210.829681][ T7194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.848862][ T7194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 210.880454][ T2481] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 210.890040][ T2481] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 211.604380][ T5116] Bluetooth: hci4: command tx timeout [ 211.877691][T11768] netlink: 'syz-executor.1': attribute type 10 has an invalid length. [ 213.030411][T11824] netlink: 'syz-executor.1': attribute type 32 has an invalid length. [ 213.036041][T11823] syz-executor.4[11823] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 213.038759][T11823] syz-executor.4[11823] is installing a program with bpf_probe_write_user helper that may corrupt user memory! [ 213.051731][T11824] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 213.081825][T11824] (unnamed net_device) (uninitialized): Setting coupled_control to off (0) [ 213.472870][T11848] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.3'. [ 213.685177][ T5116] Bluetooth: hci4: command 0x040f tx timeout [ 213.729865][T11874] netlink: 5056 bytes leftover after parsing attributes in process `syz-executor.4'. [ 213.740134][T11874] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 213.750013][T11874] netlink: 5056 bytes leftover after parsing attributes in process `syz-executor.4'. [ 214.079189][T11886] bond0: entered promiscuous mode [ 214.093850][T11886] bond_slave_0: entered promiscuous mode [ 214.110550][T11886] bond_slave_1: entered promiscuous mode [ 214.122430][T11886] 8021q: adding VLAN 0 to HW filter on device macvlan2 [ 214.263089][T11894] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.0'. [ 214.317085][T11894] vlan2: entered promiscuous mode [ 214.471278][T11910] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.3'. [ 214.539902][T11904] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 214.578983][T11908] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 214.629232][T11913] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 214.812446][T11917] netlink: 'syz-executor.1': attribute type 6 has an invalid length. [ 215.765375][ T53] Bluetooth: hci4: command 0x040f tx timeout [ 217.662734][T12018] ip6t_srh: unknown srh invflags 7863 [ 217.844571][ T53] Bluetooth: hci4: command 0x040f tx timeout [ 218.485270][T12070] __nla_validate_parse: 6 callbacks suppressed [ 218.485288][T12070] netlink: 24 bytes leftover after parsing attributes in process `syz-executor.4'. [ 218.614267][T12076] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.4'. [ 218.767279][T12084] xt_CT: You must specify a L4 protocol and not use inversions on it [ 218.822983][T12078] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.4'. [ 219.191688][T12108] netlink: 12 bytes leftover after parsing attributes in process `syz-executor.1'. [ 219.222885][T12105] netlink: 40 bytes leftover after parsing attributes in process `syz-executor.4'. [ 219.251301][T12105] netlink: 32 bytes leftover after parsing attributes in process `syz-executor.4'. [ 219.276850][T12111] ip6t_srh: unknown srh invflags 7863 [ 219.294640][T12105] (unnamed net_device) (uninitialized): down delay (37750) is not a multiple of miimon (9), value rounded to 37746 ms [ 219.475717][T12124] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 219.483991][T12124] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 219.496080][T12124] netlink: 'syz-executor.0': attribute type 29 has an invalid length. [ 219.505277][T12124] netlink: 4 bytes leftover after parsing attributes in process `syz-executor.0'. [ 219.632749][T12136] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.2'. [ 222.154677][ T29] audit: type=1804 audit(1718266182.909:24): pid=12195 uid=0 auid=4294967295 ses=4294967295 subj=unconfined op=invalid_pcr cause=open_writers comm="syz-executor.3" name="/root/syzkaller-testdir2656578471/syzkaller.z22aUn/462/cgroup.controllers" dev="sda1" ino=1930 res=1 errno=0 [ 222.373955][T12209] xt_CT: You must specify a L4 protocol and not use inversions on it [ 222.563736][T12215] netlink: 48 bytes leftover after parsing attributes in process `syz-executor.3'. [ 222.855232][T12231] netlink: 'syz-executor.4': attribute type 16 has an invalid length. [ 223.083675][T12244] pim6reg: entered allmulticast mode [ 223.357836][T12267] ip6t_srh: unknown srh invflags 7863 [ 223.984279][T12310] __nla_validate_parse: 1 callbacks suppressed [ 223.984297][T12310] netlink: 1024 bytes leftover after parsing attributes in process `syz-executor.1'. [ 224.010752][T12310] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 224.026699][T12311] netlink: 1024 bytes leftover after parsing attributes in process `syz-executor.1'. [ 224.054983][T12311] sch_tbf: burst 0 is lower than device lo mtu (65550) ! [ 224.196901][T12325] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.1'. [ 224.252873][T12330] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 224.291507][T12316] netlink: 8 bytes leftover after parsing attributes in process `syz-executor.0'. [ 224.377452][T12335] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.4'. [ 224.396229][T12335] vlan2: entered promiscuous mode [ 224.411291][T12334] netlink: 20 bytes leftover after parsing attributes in process `syz-executor.1'. [ 224.433561][T12337] netlink: 209840 bytes leftover after parsing attributes in process `syz-executor.2'. [ 224.622483][T12346] netlink: 60 bytes leftover after parsing attributes in process `syz-executor.2'. [ 224.625116][T12350] netlink: 76 bytes leftover after parsing attributes in process `syz-executor.0'. [ 224.677969][T12350] Κό: entered promiscuous mode [ 224.684087][T12345] netlink: 'syz-executor.2': attribute type 2 has an invalid length. [ 224.734970][T12358] netlink: 'syz-executor.4': attribute type 1 has an invalid length. [ 224.747301][T12358] sctp: [Deprecated]: syz-executor.4 (pid 12358) Use of struct sctp_assoc_value in delayed_ack socket option. [ 224.747301][T12358] Use struct sctp_sack_info instead [ 225.182322][T12381] netlink: 'syz-executor.0': attribute type 1 has an invalid length. [ 225.655887][T12414] netlink: 'syz-executor.3': attribute type 1 has an invalid length. [ 225.670546][T12414] sctp: [Deprecated]: syz-executor.3 (pid 12414) Use of struct sctp_assoc_value in delayed_ack socket option. [ 225.670546][T12414] Use struct sctp_sack_info instead [ 253.054549][ T53] Bluetooth: hci2: command 0x0405 tx timeout [ 255.500566][ T53] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 255.510879][ T53] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 255.532796][ T53] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 255.544998][ T53] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 255.575444][ T53] Bluetooth: hci5: unexpected cc 0x0c25 length: 249 > 3 [ 255.587941][ T53] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 255.995530][ T53] Bluetooth: hci6: unexpected cc 0x0c03 length: 249 > 1 [ 256.019478][ T53] Bluetooth: hci6: unexpected cc 0x1003 length: 249 > 9 [ 256.035282][ T53] Bluetooth: hci6: unexpected cc 0x1001 length: 249 > 9 [ 256.046171][ T53] Bluetooth: hci6: unexpected cc 0x0c23 length: 249 > 4 [ 256.056860][ T53] Bluetooth: hci6: unexpected cc 0x0c25 length: 249 > 3 [ 256.065406][ T53] Bluetooth: hci6: unexpected cc 0x0c38 length: 249 > 2 [ 256.088792][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 256.095275][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 256.190667][ T5116] Bluetooth: hci7: unexpected cc 0x0c03 length: 249 > 1 [ 256.204354][ T5116] Bluetooth: hci7: unexpected cc 0x1003 length: 249 > 9 [ 256.212983][ T5116] Bluetooth: hci7: unexpected cc 0x1001 length: 249 > 9 [ 256.222281][ T5116] Bluetooth: hci7: unexpected cc 0x0c23 length: 249 > 4 [ 256.230124][ T5116] Bluetooth: hci7: unexpected cc 0x0c25 length: 249 > 3 [ 256.241798][ T5116] Bluetooth: hci7: unexpected cc 0x0c38 length: 249 > 2 [ 256.265076][ T5112] Bluetooth: hci8: unexpected cc 0x0c03 length: 249 > 1 [ 256.278678][ T5112] Bluetooth: hci8: unexpected cc 0x1003 length: 249 > 9 [ 256.286836][ T5112] Bluetooth: hci8: unexpected cc 0x1001 length: 249 > 9 [ 256.295891][ T5112] Bluetooth: hci8: unexpected cc 0x0c23 length: 249 > 4 [ 256.303585][ T5112] Bluetooth: hci8: unexpected cc 0x0c25 length: 249 > 3 [ 256.311113][ T5112] Bluetooth: hci8: unexpected cc 0x0c38 length: 249 > 2 [ 257.025047][ T5112] Bluetooth: hci9: unexpected cc 0x0c03 length: 249 > 1 [ 257.039393][ T5112] Bluetooth: hci9: unexpected cc 0x1003 length: 249 > 9 [ 257.047949][ T5112] Bluetooth: hci9: unexpected cc 0x1001 length: 249 > 9 [ 257.060002][ T5112] Bluetooth: hci9: unexpected cc 0x0c23 length: 249 > 4 [ 257.068815][ T5112] Bluetooth: hci9: unexpected cc 0x0c25 length: 249 > 3 [ 257.076463][ T5112] Bluetooth: hci9: unexpected cc 0x0c38 length: 249 > 2 [ 257.684457][ T5112] Bluetooth: hci5: command tx timeout [ 258.164807][ T5112] Bluetooth: hci6: command tx timeout [ 258.325556][ T5112] Bluetooth: hci7: command tx timeout [ 258.414366][ T5112] Bluetooth: hci8: command tx timeout [ 259.124426][ T5112] Bluetooth: hci9: command tx timeout [ 259.764607][ T5112] Bluetooth: hci5: command tx timeout [ 260.244867][ T5112] Bluetooth: hci6: command tx timeout [ 260.408836][ T5112] Bluetooth: hci7: command tx timeout [ 260.484423][ T5112] Bluetooth: hci8: command tx timeout [ 261.206500][ T5112] Bluetooth: hci9: command tx timeout [ 261.844677][ T5112] Bluetooth: hci5: command tx timeout [ 262.324760][ T5112] Bluetooth: hci6: command tx timeout [ 262.484499][ T5116] Bluetooth: hci7: command tx timeout [ 262.564359][ T5112] Bluetooth: hci8: command tx timeout [ 263.285442][ T5112] Bluetooth: hci9: command tx timeout [ 263.924334][ T5112] Bluetooth: hci5: command tx timeout [ 264.412657][ T5112] Bluetooth: hci6: command tx timeout [ 264.564371][ T5112] Bluetooth: hci7: command tx timeout [ 264.644431][ T5112] Bluetooth: hci8: command tx timeout [ 265.364430][ T5112] Bluetooth: hci9: command tx timeout [ 317.538184][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 317.544614][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 320.492216][ T5116] Bluetooth: hci10: unexpected cc 0x0c03 length: 249 > 1 [ 320.504532][ T5116] Bluetooth: hci10: unexpected cc 0x1003 length: 249 > 9 [ 320.513329][ T5116] Bluetooth: hci10: unexpected cc 0x1001 length: 249 > 9 [ 320.521643][ T5116] Bluetooth: hci10: unexpected cc 0x0c23 length: 249 > 4 [ 320.531566][ T5116] Bluetooth: hci10: unexpected cc 0x0c25 length: 249 > 3 [ 320.539575][ T5116] Bluetooth: hci10: unexpected cc 0x0c38 length: 249 > 2 [ 320.947583][ T5116] Bluetooth: hci11: unexpected cc 0x0c03 length: 249 > 1 [ 320.958462][ T5116] Bluetooth: hci11: unexpected cc 0x1003 length: 249 > 9 [ 320.974448][ T5116] Bluetooth: hci11: unexpected cc 0x1001 length: 249 > 9 [ 320.983806][ T5116] Bluetooth: hci11: unexpected cc 0x0c23 length: 249 > 4 [ 320.994756][ T5116] Bluetooth: hci11: unexpected cc 0x0c25 length: 249 > 3 [ 321.002358][ T5116] Bluetooth: hci11: unexpected cc 0x0c38 length: 249 > 2 [ 321.070223][ T5112] Bluetooth: hci12: unexpected cc 0x0c03 length: 249 > 1 [ 321.087834][ T5112] Bluetooth: hci12: unexpected cc 0x1003 length: 249 > 9 [ 321.096716][ T5112] Bluetooth: hci12: unexpected cc 0x1001 length: 249 > 9 [ 321.109404][ T5112] Bluetooth: hci12: unexpected cc 0x0c23 length: 249 > 4 [ 321.118503][ T5112] Bluetooth: hci12: unexpected cc 0x0c25 length: 249 > 3 [ 321.140491][ T5121] Bluetooth: hci12: unexpected cc 0x0c38 length: 249 > 2 [ 321.151909][ T53] Bluetooth: hci13: unexpected cc 0x0c03 length: 249 > 1 [ 321.176824][ T53] Bluetooth: hci13: unexpected cc 0x1003 length: 249 > 9 [ 321.199184][ T53] Bluetooth: hci13: unexpected cc 0x1001 length: 249 > 9 [ 321.209279][ T53] Bluetooth: hci13: unexpected cc 0x0c23 length: 249 > 4 [ 321.221264][ T53] Bluetooth: hci13: unexpected cc 0x0c25 length: 249 > 3 [ 321.229008][ T53] Bluetooth: hci13: unexpected cc 0x0c38 length: 249 > 2 [ 322.072749][ T53] Bluetooth: hci14: unexpected cc 0x0c03 length: 249 > 1 [ 322.084427][ T53] Bluetooth: hci14: unexpected cc 0x1003 length: 249 > 9 [ 322.093846][ T53] Bluetooth: hci14: unexpected cc 0x1001 length: 249 > 9 [ 322.102895][ T53] Bluetooth: hci14: unexpected cc 0x0c23 length: 249 > 4 [ 322.110777][ T53] Bluetooth: hci14: unexpected cc 0x0c25 length: 249 > 3 [ 322.125395][ T53] Bluetooth: hci14: unexpected cc 0x0c38 length: 249 > 2 [ 322.664219][ T53] Bluetooth: hci10: command tx timeout [ 323.044353][ T53] Bluetooth: hci11: command tx timeout [ 323.204475][ T53] Bluetooth: hci12: command tx timeout [ 323.284539][ T53] Bluetooth: hci13: command tx timeout [ 324.164407][ T53] Bluetooth: hci14: command tx timeout [ 324.724316][ T53] Bluetooth: hci10: command tx timeout [ 325.124535][ T53] Bluetooth: hci11: command tx timeout [ 325.284305][ T53] Bluetooth: hci12: command tx timeout [ 325.374356][ T53] Bluetooth: hci13: command tx timeout [ 326.257785][ T53] Bluetooth: hci14: command tx timeout [ 326.804713][ T53] Bluetooth: hci10: command tx timeout [ 327.217638][ T53] Bluetooth: hci11: command tx timeout [ 327.374284][ T53] Bluetooth: hci12: command tx timeout [ 327.444414][ T53] Bluetooth: hci13: command tx timeout [ 328.324304][ T5112] Bluetooth: hci14: command tx timeout [ 328.885609][ T5112] Bluetooth: hci10: command tx timeout [ 329.284669][ T5112] Bluetooth: hci11: command tx timeout [ 329.444389][ T5112] Bluetooth: hci12: command tx timeout [ 329.528145][ T5112] Bluetooth: hci13: command tx timeout [ 329.844303][ T5112] Bluetooth: hci4: command 0x040f tx timeout [ 330.404336][ T53] Bluetooth: hci14: command tx timeout [ 378.977443][ T1249] ieee802154 phy0 wpan0: encryption failed: -22 [ 378.991083][ T1249] ieee802154 phy1 wpan1: encryption failed: -22 [ 380.885200][ T30] INFO: task kworker/0:1:9 blocked for more than 143 seconds. [ 380.892707][ T30] Not tainted 6.10.0-rc2-syzkaller-00742-g91579c93a9b2 #0 [ 380.906013][ T30] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 380.919168][ T30] task:kworker/0:1 state:D stack:22920 pid:9 tgid:9 ppid:2 flags:0x00004000 [ 380.929506][ T30] Workqueue: events ovs_dp_masks_rebalance 2024/06/13 08:12:21 SYZFATAL: failed to recv *flatrpc.HostMessageRaw: EOF [ 380.937950][ T30] Call Trace: [ 380.964783][ T30] [ 380.967799][ T30] __schedule+0x17e8/0x4a20 [ 380.972342][ T30] ? __pfx___schedule+0x10/0x10 [ 380.994244][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 381.000279][ T30] ? __pfx_lock_release+0x10/0x10 [ 381.014628][ T30] ? kick_pool+0x45c/0x620 [ 381.019104][ T30] ? _raw_spin_unlock_irq+0x23/0x50 [ 381.034194][ T30] ? lockdep_hardirqs_on+0x99/0x150 [ 381.039448][ T30] ? schedule+0x90/0x320 [ 381.043706][ T30] schedule+0x14b/0x320 [ 381.051313][T12467] Bluetooth: hci5: command 0x0406 tx timeout [ 381.060242][T12467] Bluetooth: hci7: command 0x0406 tx timeout [ 381.066914][T12467] Bluetooth: hci9: command 0x0406 tx timeout [ 381.070353][T12466] Bluetooth: hci6: command 0x0406 tx timeout [ 381.073005][T12467] Bluetooth: hci8: command 0x0406 tx timeout [ 381.079277][ T30] schedule_preempt_disabled+0x13/0x30 [ 381.090759][ T30] __mutex_lock+0x6a4/0xd70 [ 381.095415][ T30] ? __mutex_lock+0x527/0xd70 [ 381.100323][ T30] ? ovs_dp_masks_rebalance+0x2f/0xe0 [ 381.116808][ T30] ? __pfx___mutex_lock+0x10/0x10 [ 381.124126][ T30] ? lockdep_hardirqs_on_prepare+0x43d/0x780 [ 381.130669][ T30] ? __pfx_lockdep_hardirqs_on_prepare+0x10/0x10 [ 381.154238][ T30] ovs_dp_masks_rebalance+0x2f/0xe0 [ 381.159879][ T30] ? process_scheduled_works+0x945/0x1830 [ 381.184127][ T30] process_scheduled_works+0xa2c/0x1830 [ 381.189760][ T30] ? __pfx_process_scheduled_works+0x10/0x10 [ 381.214308][ T30] ? assign_work+0x364/0x3d0 [ 381.219632][ T30] worker_thread+0x86d/0xd70 [ 381.234143][ T30] ? _raw_spin_unlock_irqrestore+0xdd/0x140 [ 381.240107][ T30] ? __kthread_parkme+0x169/0x1d0 [ 381.264153][ T30] ? __pfx_worker_thread+0x10/0x10 [ 381.269322][ T30] kthread+0x2f0/0x390 [ 381.273410][ T30] ? __pfx_worker_thread+0x10/0x10 [