last executing test programs: 1m12.506826152s ago: executing program 4 (id=826): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/net\x00') ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x9, 0x4, [0xfff9, 0xa6, 0x4, 0x2]}, &(0x7f0000000180)=0x10) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000002c0)={r4, 0x88, &(0x7f0000000200)=[@in={0x2, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e22, 0xe, @remote, 0x2}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e21, 0x6, @mcast2, 0x5}, @in={0x2, 0x4e21, @remote}]}, &(0x7f0000000300)=0x10) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) r6 = socket(0x840000000002, 0x3, 0x100) setsockopt$WPAN_SECURITY(r6, 0x0, 0x32, 0x0, 0x0) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r5) r8 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000001c0)={0xf0}, 0x8) (async, rerun: 64) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, r7, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) (rerun: 64) 1m11.976539283s ago: executing program 0 (id=989): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 59.998099787s ago: executing program 0 (id=989): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 59.440714424s ago: executing program 4 (id=826): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/net\x00') ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x9, 0x4, [0xfff9, 0xa6, 0x4, 0x2]}, &(0x7f0000000180)=0x10) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000002c0)={r4, 0x88, &(0x7f0000000200)=[@in={0x2, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e22, 0xe, @remote, 0x2}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e21, 0x6, @mcast2, 0x5}, @in={0x2, 0x4e21, @remote}]}, &(0x7f0000000300)=0x10) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) r6 = socket(0x840000000002, 0x3, 0x100) setsockopt$WPAN_SECURITY(r6, 0x0, 0x32, 0x0, 0x0) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r5) r8 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000001c0)={0xf0}, 0x8) (async, rerun: 64) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, r7, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) (rerun: 64) 53.553192238s ago: executing program 3 (id=1391): syz_emit_ethernet(0x2a, &(0x7f0000000000)=ANY=[@ANYBLOB="0580c2000000aaaaaaaaaa0008004583bab9025fe0d8a6029078ac1e0001e000000112009078e0000001"], 0x0) r0 = socket$inet_smc(0x2b, 0x1, 0x0) setsockopt$inet_tcp_TCP_REPAIR(r0, 0x6, 0x13, &(0x7f0000000000)=0x1, 0x4) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f0000000040)={0xf0400000, 0x0, 0x0, 0xfffffffe, 0x2007}, 0x14) r1 = socket$pppl2tp(0x18, 0x1, 0x1) r2 = socket$inet6_udp(0xa, 0x2, 0x0) connect$pppl2tp(r1, &(0x7f0000000740)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e24, @broadcast}, 0x2, 0x0, 0x4}}, 0x2e) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$L2TP_CMD_SESSION_DELETE(r4, &(0x7f0000000640)={0x0, 0x0, &(0x7f0000000100)={&(0x7f00000001c0)={0x34, r3, 0x1, 0x70bd26, 0x4, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0x3}, @L2TP_ATTR_SESSION_ID={0x8}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x7}]}, 0x34}}, 0x20) r5 = socket$inet6_udp(0xa, 0x2, 0x0) r6 = socket$pppl2tp(0x18, 0x1, 0x1) writev(r0, &(0x7f0000000300)=[{&(0x7f00000002c0)="fe53fb163582f6174e8d91d039497f88", 0x10}], 0x1) setsockopt$inet_tcp_TCP_REPAIR_WINDOW(r0, 0x6, 0x1d, &(0x7f00000000c0)={0x8001, 0x1, 0x8, 0x7, 0x80000000}, 0x14) connect$pppl2tp(r6, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x0, r5, {0x2, 0x0, @multicast2}, 0x8000004}}, 0x2e) r7 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) r8 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)=ANY=[@ANYBLOB="140100002b00010000000000ffdbdf25020100800c0002000000000000000000140001000100000000000000000000000000000150bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc07c43dbf13711b9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e58c5061dc35817a66c29be82fd3f00"/248], 0x114}], 0x1}, 0x0) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000500)={'syztnl2\x00', &(0x7f0000000400)={'ip_vti0\x00', 0x0, 0x7800, 0x8, 0x9, 0x9, {{0x35, 0x4, 0x1, 0x0, 0xd4, 0x67, 0x0, 0x4, 0x4, 0x0, @dev={0xac, 0x14, 0x14, 0x29}, @local, {[@timestamp_prespec={0x44, 0x3c, 0x55, 0x3, 0x7, [{@loopback, 0x7}, {@private=0xa010100, 0x6}, {@multicast1, 0x7}, {@loopback, 0x5}, {@empty, 0x1b8}, {@local, 0x406e}, {@empty, 0xf}]}, @ra={0x94, 0x4}, @timestamp_addr={0x44, 0x2c, 0x58, 0x1, 0x9, [{@private=0xa010101, 0x8}, {@local, 0x7f}, {@loopback, 0x8}, {@remote, 0x1}, {@broadcast, 0x3ff}]}, @timestamp_addr={0x44, 0x54, 0x3e, 0x1, 0x7, [{@local}, {@loopback, 0x8080}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7ff}, {@empty, 0xbad}, {@remote, 0x8}, {@rand_addr=0x64010100, 0x96c}, {@local, 0x1}, {@private=0xa010101, 0xa930}, {@initdev={0xac, 0x1e, 0x0, 0x0}, 0x7}, {@loopback, 0x401}]}]}}}}}) ioctl$ifreq_SIOCGIFINDEX_batadv_mesh(r4, 0x8933, &(0x7f0000000540)={'batadv0\x00', 0x0}) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r5, 0x8933, &(0x7f0000000580)={'batadv_slave_1\x00', 0x0}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r4, &(0x7f0000000680)={&(0x7f0000000380)={0x10, 0x0, 0x0, 0x100}, 0xc, &(0x7f0000000600)={&(0x7f0000000780)={0x104, 0x0, 0x1, 0x70bd29, 0x25dfdbfc, {}, [@HEADER={0x3c, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r9}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'syzkaller0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r10}]}, @HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x6}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_FLAGS={0x8}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}]}, @HEADER={0x14, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x3}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r11}]}, @HEADER={0x44, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_bridge\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_team\x00'}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x2}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8}]}]}, 0x104}}, 0x1) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r12 = socket(0x400000000010, 0x3, 0x0) r13 = socket$unix(0x1, 0x1, 0x0) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000100)={0x1f, 0x2, &(0x7f0000000200)=@raw=[@call={0x85, 0x0, 0x0, 0xa9}, @exit], &(0x7f0000000180)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x11}, 0x90) ioctl$sock_SIOCGIFINDEX(r13, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) ioctl$TUNSETIFF(r7, 0x400454ca, &(0x7f0000000000)={'dvmrp1\x00', 0x100}) sendmsg$nl_route_sched(r12, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r14, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0xa73}}}]}, 0x38}}, 0x24000098) sendmsg$nl_route_sched(r12, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000001300)=@newtfilter={0x52, 0x2c, 0xd27, 0x70bd25, 0x25dfdbfc, {0x0, 0x0, 0x0, r14, {0x0, 0x7}, {}, {0x7, 0x2}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_KEY_ENC_IP_TTL_MASK={0x5, 0x53, 0xc}, @TCA_FLOWER_KEY_ENC_IP_TTL={0x5}]}}]}, 0x44}, 0x1, 0x0, 0x0, 0x804}, 0x0) 52.922471973s ago: executing program 3 (id=1397): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={0x0, 0x1c}}, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 52.457653693s ago: executing program 3 (id=1402): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x3, 0x0) getsockname$packet(r1, &(0x7f0000000080)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000100)=0x14) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000008c0)=ANY=[@ANYBLOB="4800000010000507000000000000000016000000", @ANYRES32=r2, @ANYBLOB="0000000200000000280012000c00010076657468"], 0x48}}, 0x0) sendmsg$nl_route_sched(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000140)=@newqdisc={0x30, 0x24, 0xf1d, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0xfff1, 0xffff}}, [@qdisc_kind_options=@q_clsact={0xb}]}, 0x30}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) r4 = socket(0x10, 0x803, 0x4) syz_genetlink_get_family_id$nl80211(&(0x7f0000000380), r4) getsockname$packet(r4, &(0x7f0000000180)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f00000001c0)=0x14) sendmsg$nl_route_sched(r3, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000900)=@delchain={0x38, 0x2c, 0xf31, 0x0, 0x2000, {0x0, 0x0, 0x0, r5, {0xf}, {0xfff2, 0xffff}, {0xffff, 0x1}}, [@filter_kind_options=@f_fw={{0x7}, {0xc, 0x2, [@TCA_FW_CLASSID={0x8, 0x1, {0x1, 0x9}}]}}]}, 0x38}, 0x1, 0x0, 0x0, 0x4008854}, 0x4010) 51.942556499s ago: executing program 3 (id=1403): r0 = socket$inet6(0xa, 0x80002, 0x0) setsockopt$inet6_udp_int(r0, 0x11, 0x67, &(0x7f0000000040)=0x91, 0x4) connect$inet6(r0, &(0x7f0000000140)={0xa, 0x4e24, 0x1ff, @ipv4={'\x00', '\xff\xff', @dev={0xac, 0x14, 0x14, 0x2a}}, 0x6}, 0x1c) r1 = socket(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000240)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000000)={'lo\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000080)=@newqdisc={0x60, 0x24, 0xd0f, 0x70bd2d, 0x0, {0x60, 0x0, 0x0, r3, {0x0, 0xa}, {0xffff, 0xffff}, {0x0, 0xffff}}, [@qdisc_kind_options=@q_tbf={{0x8}, {0x34, 0x2, [@TCA_TBF_PARMS={0x28, 0x1, {{0x4, 0x2, 0x0, 0x0, 0x7, 0x8}, {0x12, 0x3, 0x0, 0x1, 0x8001, 0x2400}, 0xa5, 0x4, 0x10100000}}, @TCA_TBF_BURST={0x8, 0x6, 0x8057}]}}]}, 0x60}}, 0x44080) sendmsg$nl_route_sched(r1, &(0x7f0000000100)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000380)=@newqdisc={0x34, 0x24, 0xd0f, 0x70bd26, 0x0, {0x60, 0x0, 0x0, r3, {}, {0xfff2, 0xa}}, [@qdisc_kind_options=@q_codel={{0xa}, {0x4}}]}, 0x34}}, 0x800) sendmmsg$inet6(r0, &(0x7f0000003cc0)=[{{0x0, 0x0, &(0x7f0000003980), 0x171}}], 0x400000000000172, 0x4001c00) 51.762183141s ago: executing program 3 (id=1404): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000200)=@newlink={0x3c, 0x10, 0x44b, 0x0, 0x0, {0x7a}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_VLAN_STATS_PER_PORT={0x5}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x4010}, 0x0) 51.523277998s ago: executing program 3 (id=1406): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x200000010, &(0x7f0000000000)=0xfffffffc, 0x4) recvfrom$unix(r4, 0x0, 0x0, 0x10102, 0x0, 0x0) r5 = getpid() ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000080)=r5) close(r3) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000580)=[{0x2, 0x2, {0x0, 0xf0}, {0x1, 0xf0, 0x2}, 0xfe, 0x2}, {0x2, 0x3, {0x1, 0xf0, 0x2}, {0x2, 0xf0}, 0xfd, 0x2}, {0x2, 0x2, {0x2, 0x0, 0x1}, {0x0, 0xf0, 0x2}, 0x2, 0x2}, {0x1, 0x0, {0x2, 0x1, 0x2}, {0x0, 0xff, 0x4}}], 0x80) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) (async) setsockopt$sock_int(r4, 0x1, 0x200000010, &(0x7f0000000000)=0xfffffffc, 0x4) (async) recvfrom$unix(r4, 0x0, 0x0, 0x10102, 0x0, 0x0) (async) getpid() (async) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000080)=r5) (async) close(r3) (async) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000580)=[{0x2, 0x2, {0x0, 0xf0}, {0x1, 0xf0, 0x2}, 0xfe, 0x2}, {0x2, 0x3, {0x1, 0xf0, 0x2}, {0x2, 0xf0}, 0xfd, 0x2}, {0x2, 0x2, {0x2, 0x0, 0x1}, {0x0, 0xf0, 0x2}, 0x2, 0x2}, {0x1, 0x0, {0x2, 0x1, 0x2}, {0x0, 0xff, 0x4}}], 0x80) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) 47.231343416s ago: executing program 0 (id=989): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 45.38546973s ago: executing program 4 (id=826): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/net\x00') ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x9, 0x4, [0xfff9, 0xa6, 0x4, 0x2]}, &(0x7f0000000180)=0x10) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000002c0)={r4, 0x88, &(0x7f0000000200)=[@in={0x2, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e22, 0xe, @remote, 0x2}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e21, 0x6, @mcast2, 0x5}, @in={0x2, 0x4e21, @remote}]}, &(0x7f0000000300)=0x10) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) r6 = socket(0x840000000002, 0x3, 0x100) setsockopt$WPAN_SECURITY(r6, 0x0, 0x32, 0x0, 0x0) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r5) r8 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000001c0)={0xf0}, 0x8) (async, rerun: 64) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, r7, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) (rerun: 64) 36.465928732s ago: executing program 32 (id=1406): r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = socket$can_j1939(0x1d, 0x2, 0x7) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00', 0x0}) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_int(r4, 0x1, 0x200000010, &(0x7f0000000000)=0xfffffffc, 0x4) recvfrom$unix(r4, 0x0, 0x0, 0x10102, 0x0, 0x0) r5 = getpid() ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000080)=r5) close(r3) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000580)=[{0x2, 0x2, {0x0, 0xf0}, {0x1, 0xf0, 0x2}, 0xfe, 0x2}, {0x2, 0x3, {0x1, 0xf0, 0x2}, {0x2, 0xf0}, 0xfd, 0x2}, {0x2, 0x2, {0x2, 0x0, 0x1}, {0x0, 0xf0, 0x2}, 0x2, 0x2}, {0x1, 0x0, {0x2, 0x1, 0x2}, {0x0, 0xff, 0x4}}], 0x80) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) socket$nl_route(0x10, 0x3, 0x0) (async) socket$can_j1939(0x1d, 0x2, 0x7) (async) ioctl$ifreq_SIOCGIFINDEX_vcan(r1, 0x8933, &(0x7f00000000c0)={'vcan0\x00'}) (async) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000000400)) (async) setsockopt$sock_int(r4, 0x1, 0x200000010, &(0x7f0000000000)=0xfffffffc, 0x4) (async) recvfrom$unix(r4, 0x0, 0x0, 0x10102, 0x0, 0x0) (async) getpid() (async) ioctl$sock_SIOCSPGRP(r3, 0x8902, &(0x7f0000000080)=r5) (async) close(r3) (async) bind$can_j1939(r1, &(0x7f0000000340)={0x1d, r2, 0x0, {0x2, 0x0, 0x6}, 0xfe}, 0x18) (async) setsockopt$sock_int(r1, 0x1, 0x6, &(0x7f0000000040)=0x1, 0x4) (async) sendmsg$inet(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f00000003c0)=[{&(0x7f0000000540)="81b641f1f3843704b6", 0x9}], 0x1}, 0x4048081) (async) setsockopt$SO_J1939_FILTER(r1, 0x6b, 0x1, &(0x7f0000000580)=[{0x2, 0x2, {0x0, 0xf0}, {0x1, 0xf0, 0x2}, 0xfe, 0x2}, {0x2, 0x3, {0x1, 0xf0, 0x2}, {0x2, 0xf0}, 0xfd, 0x2}, {0x2, 0x2, {0x2, 0x0, 0x1}, {0x0, 0xf0, 0x2}, 0x2, 0x2}, {0x1, 0x0, {0x2, 0x1, 0x2}, {0x0, 0xff, 0x4}}], 0x80) (async) sendmsg$nl_route_sched(r0, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000440)=@newtfilter={0x24, 0x11, 0x1, 0x70bd28, 0x0, {0x0, 0x0, 0x74, r2, {0xfffd, 0xffeb}, {0x1, 0x1}, {0xfff2, 0xd}}}, 0x24}, 0x1, 0xf0ffffffffffff, 0x0, 0x4012}, 0x850) (async) 35.389258925s ago: executing program 0 (id=989): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 32.346940393s ago: executing program 4 (id=826): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/net\x00') ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x9, 0x4, [0xfff9, 0xa6, 0x4, 0x2]}, &(0x7f0000000180)=0x10) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000002c0)={r4, 0x88, &(0x7f0000000200)=[@in={0x2, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e22, 0xe, @remote, 0x2}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e21, 0x6, @mcast2, 0x5}, @in={0x2, 0x4e21, @remote}]}, &(0x7f0000000300)=0x10) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) r6 = socket(0x840000000002, 0x3, 0x100) setsockopt$WPAN_SECURITY(r6, 0x0, 0x32, 0x0, 0x0) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r5) r8 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000001c0)={0xf0}, 0x8) (async, rerun: 64) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, r7, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) (rerun: 64) 21.492479061s ago: executing program 0 (id=989): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 19.408634349s ago: executing program 4 (id=826): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/net\x00') ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x9, 0x4, [0xfff9, 0xa6, 0x4, 0x2]}, &(0x7f0000000180)=0x10) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000002c0)={r4, 0x88, &(0x7f0000000200)=[@in={0x2, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e22, 0xe, @remote, 0x2}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e21, 0x6, @mcast2, 0x5}, @in={0x2, 0x4e21, @remote}]}, &(0x7f0000000300)=0x10) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) r6 = socket(0x840000000002, 0x3, 0x100) setsockopt$WPAN_SECURITY(r6, 0x0, 0x32, 0x0, 0x0) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r5) r8 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000001c0)={0xf0}, 0x8) (async, rerun: 64) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, r7, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) (rerun: 64) 6.19458048s ago: executing program 0 (id=989): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x58, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x2c, 0x4, 0x0, 0x1, [{0x28, 0x1, 0x0, 0x1, @ct={{0x7}, @val={0x1c, 0x2, 0x0, 0x1, [@NFTA_CT_SREG={0x8}, @NFTA_CT_KEY={0x8, 0x2, 0x1, 0x0, 0xd}, @NFTA_CT_SREG={0x8, 0x4, 0x1, 0x0, 0xe}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x80}}, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) (async) r1 = bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x6, 0xe, &(0x7f00000008c0)=ANY=[@ANYBLOB="b7020000000d0000bfa30000000000000703000000feffff7a0af0fff8ffff1971a4f0ff00000000b7060000080000006f6400000000000045040400010000001704000001000a00b7040000ff0100006a0a00fe0000000085000000be000000b70000000000000095000000000000009e17f199a68b06d83298a8cdc21ce784909b849d5550ad857d0454d8877a6db61d69f2ffcaa10350e11cb97c8adf1bc9a0c4eeceb9971e43405d621ffbc9ce000000d8ca56b50d0c010d631f6dde53a9a53608c10556e5734eb84049761451ce540c772e2d9f8004e26f7fcc059c062234d5595f6fbaa187b81d1106000000000fd60000fd9ac3d09e29a9d542ca9d85a5c9c88474895d679838def0a83a733dc6a39b63a5ed69d32394c53361d7e43c5cbd80450f859ce8122a79c3e40000b59b0fc46d6cec3c0802882add4e3179bd4a44f231b6d753a7be428ba953df4aece69311687f4122073a236c3a32efa04137d4524847d2638da3261c8162bb7c7824be6195a66d2e17e122040e1100000000928612a29fc691e4f1f7bd053abb885f39381f1759410b1059f05684261f332d606834669b49ec99320ca7712d7e79bd5bf5ed818ecc7640917f6a559a47db608fcf9f6c131b84e41c354c66838f72b9e12d36e996f316f0812ca83efb30c7f6c6d57c4a64590401eec22523dd712c680013e87f649a1ede7142ca9d5d8a8c9f9b440fe4331ad5532c74d9a31a5d737537f7a2caa30581253d14dd3e92af7dc836686365ae01bdec561c0402b67801267a8df97d2f85426a5963d4fa3e26cc05972c162f223f000000d999e80de00fcbcc02d0aed7bb8f7ba337d59c14f39dcd4aad4139ef6425a9367f1bd1467fc6b95a4df7669839771ce9d5788029901e5a79d8b9990ace8f74087f25ad50c46088000000008000"/686], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x3a, 0x10, &(0x7f0000000340), 0xd58495bc, 0x0, 0xffffffffffffffff, 0xffffffffffffff5b}, 0x42) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000c80)={r1, 0x2000012, 0x100e, 0x2, &(0x7f0000000c40)="63eced8e46dc3f2ddf33c9e9b986", 0x0, 0x7ffe, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x50) 4.933172647s ago: executing program 4 (id=826): r0 = socket$pppl2tp(0x18, 0x1, 0x1) (async) r1 = syz_open_procfs$namespace(0x0, &(0x7f0000000380)='ns/net\x00') ioctl$NS_GET_USERNS(r1, 0xb701, 0x0) (async) r2 = socket$inet6_udp(0xa, 0x2, 0x0) (async) r3 = socket$inet_sctp(0x2, 0x5, 0x84) getsockopt$inet_sctp_SCTP_RESET_STREAMS(r3, 0x84, 0x77, &(0x7f00000000c0)={0x0, 0x9, 0x4, [0xfff9, 0xa6, 0x4, 0x2]}, &(0x7f0000000180)=0x10) (async) connect$pppl2tp(r0, &(0x7f0000000000)=@pppol2tpv3={0x18, 0x1, {0x3, r2, {0x2, 0x4e21, @initdev={0xac, 0x1e, 0x0, 0x0}}, 0x2}}, 0x2e) r5 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000340)='blkio.throttle.io_service_bytes_recursive\x00', 0x275a, 0x0) mmap(&(0x7f0000002000/0x3000)=nil, 0x3000, 0x0, 0x12, r5, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r5, 0x84, 0x6f, &(0x7f00000002c0)={r4, 0x88, &(0x7f0000000200)=[@in={0x2, 0xa, @initdev={0xac, 0x1e, 0x0, 0x0}}, @in={0x2, 0x4e23, @multicast1}, @in={0x2, 0x4e21, @local}, @in6={0xa, 0x4e22, 0xe, @remote, 0x2}, @in={0x2, 0x4e21, @remote}, @in6={0xa, 0x4e21, 0x6, @mcast2, 0x5}, @in={0x2, 0x4e21, @remote}]}, &(0x7f0000000300)=0x10) ioctl$NS_GET_USERNS(r5, 0xb701, 0x0) r6 = socket(0x840000000002, 0x3, 0x100) setsockopt$WPAN_SECURITY(r6, 0x0, 0x32, 0x0, 0x0) (async) r7 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000040), r5) r8 = socket$nl_generic(0x10, 0x3, 0x10) setsockopt$inet6_IPV6_DSTOPTS(r2, 0x29, 0x3b, &(0x7f00000001c0)={0xf0}, 0x8) (async, rerun: 64) sendmsg$L2TP_CMD_SESSION_DELETE(r8, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)={0x34, r7, 0x1, 0x70bd26, 0x25dfdbfe, {0x5}, [@L2TP_ATTR_CONN_ID={0x8, 0x9, 0x2}, @L2TP_ATTR_PW_TYPE={0x6, 0x1, 0x5}, @L2TP_ATTR_PEER_SESSION_ID={0x8, 0xc, 0xaaa}, @L2TP_ATTR_SESSION_ID={0x8, 0xb, 0x4}]}, 0x34}, 0x1, 0x0, 0x0, 0x20006911}, 0x0) (rerun: 64) 1.595302976s ago: executing program 2 (id=1697): r0 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_opts(r0, 0x0, 0x80000000000008, &(0x7f0000000180)="0f", 0x1) getsockopt$inet_opts(r0, 0x0, 0x9, 0x0, &(0x7f0000000080)) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f0000000000)={0x0, r0}, 0x8) r2 = socket(0x23, 0x2, 0x0) sendmsg$NFT_BATCH(r2, &(0x7f0000000800)={0x0, 0x0, &(0x7f00000007c0)={0x0}, 0x1, 0x0, 0x0, 0x8040}, 0x2804) r3 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x18, &(0x7f00000000c0)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r3}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r3}, {}, {0x3, 0x3, 0x3, 0x9}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x24}}]}, &(0x7f0000000240)='GPL\x00'}, 0x90) syz_genetlink_get_family_id$tipc(&(0x7f0000000bc0), r2) r4 = syz_genetlink_get_family_id$netlbl_calipso(&(0x7f0000003a00), r1) sendmsg$NLBL_CALIPSO_C_REMOVE(r1, &(0x7f0000003ac0)={0x0, 0x0, &(0x7f0000003a80)={&(0x7f0000003a40)=ANY=[@ANYBLOB="14000000", @ANYRES16=r4, @ANYBLOB="010026bd7000fca05e2502000000"], 0x14}, 0x1, 0x0, 0x0, 0x4014000}, 0x800) 1.463110018s ago: executing program 2 (id=1699): r0 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_int(r0, 0x6, 0x13, &(0x7f0000000100)=0x100000001, 0x4) connect$inet6(r0, &(0x7f0000000080)={0xa, 0x0, 0x0, @loopback}, 0x1c) setsockopt$inet6_tcp_TCP_ULP(r0, 0x6, 0x1f, &(0x7f00000003c0), 0x3) getsockopt$bt_hci(r0, 0x11a, 0x1, 0x0, &(0x7f00000000c0)) syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000180)=ANY=[@ANYBLOB="1c0000001500010300000000000000200c00000008000100c0799f4ded56d1b212fe8b46ef22c7f608f81ce448af2e4a5b9672820c2aedcb051fb8b37828e351e9a1c48ce4d106ac9bedc9954c6881d87ce908d1c41c4e73c8be56488e3e8daa6023215b87937f0100000000000000ebbbdbbb65a48b72434d4ec9f37697f9d6cf3fcd8809f44a53eb267226800f7ff25ed24c75d648e1c603000000d041ccc47c9fc9abf04bc8617eb777306865b7d0e0ecf63aaeb00707b3d84603592f08e352c063441c5db3cc625f818a7d0352f25f76c19df9ea6e534ed57c63646d0e8a430fdcf69d752f1d109f7df496456eae2ae49c2dd0fe3847e4f6706e13f07df9966ee400000000", @ANYBLOB="9e05ddd8825526c43f15f82d7f19d86fb4ff0a73e4f4cd1e36046b96e1088f54317d62cdc9d7534d72824d80ace178f8009f593edd42ed5de8552d3e92ac26377ca0bdfebca901e7739dd89b701abceade24f6dcfb1182e76ab595", @ANYBLOB="42922008e8e32f8a6c6eccd147548b5e53d79c5951ac1599f447fe59379d336225bb70bbd1f5b0a19fad49e143738fd70382d3d297fb41b4d3c2553e8c799bfd034252dc86fe4bf9f23fd29a0fbbefea3f7879"], 0x1c}, 0x1, 0x0, 0x0, 0x400c004}, 0x4000000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x1, 0x4, &(0x7f0000000080)=@framed={{0xffffffb4, 0x5, 0x0, 0x0, 0x0, 0x61, 0x10, 0x4c}, [@ldst={0x4}]}, &(0x7f0000003ff6)='GPL\x00', 0x4bcb0513, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f00000000c0), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 1.211040848s ago: executing program 2 (id=1701): r0 = socket$inet(0x2, 0x5, 0x800) getsockopt$inet_sctp6_SCTP_DEFAULT_PRINFO(0xffffffffffffffff, 0x84, 0x72, &(0x7f0000000000)={0x0, 0x9, 0x20}, &(0x7f0000000040)=0xc) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0xa0, "a5e19b833d672b2f05975cec59212fd62f4205bf5ded476a0af7ed798134429324cd976a9c006de072900232019e33e324a8aebb2eb69d0172617fcc0035c604c226fcb8dcd1124e1b3647abf2785877d0cc7d635e5cf2326ad435805b9a7ca0e87bc15a679223424052d1dca4b51d675f75499e74857f6ac98a8d269aa7945b2f1f8144282e0bbb8355b948a8c31ac3fb1e4d08ec66265b8e936a1faf813e25"}, &(0x7f0000000140)=0xa8) (async) getsockopt$inet_sctp_SCTP_GET_LOCAL_ADDRS(0xffffffffffffffff, 0x84, 0x6d, &(0x7f0000000080)={0x0, 0xa0, "a5e19b833d672b2f05975cec59212fd62f4205bf5ded476a0af7ed798134429324cd976a9c006de072900232019e33e324a8aebb2eb69d0172617fcc0035c604c226fcb8dcd1124e1b3647abf2785877d0cc7d635e5cf2326ad435805b9a7ca0e87bc15a679223424052d1dca4b51d675f75499e74857f6ac98a8d269aa7945b2f1f8144282e0bbb8355b948a8c31ac3fb1e4d08ec66265b8e936a1faf813e25"}, &(0x7f0000000140)=0xa8) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000180)={r1, 0x101, 0x9, 0x0, 0x5, 0xd, 0x6, 0x6, {r2, @in6={{0xa, 0x4e22, 0x0, @mcast2, 0x200}}, 0x5, 0x9, 0x10, 0x32a, 0x401}}, &(0x7f0000000240)=0xb0) (async) getsockopt$inet_sctp_SCTP_STATUS(r0, 0x84, 0xe, &(0x7f0000000180)={r1, 0x101, 0x9, 0x0, 0x5, 0xd, 0x6, 0x6, {r2, @in6={{0xa, 0x4e22, 0x0, @mcast2, 0x200}}, 0x5, 0x9, 0x10, 0x32a, 0x401}}, &(0x7f0000000240)=0xb0) r5 = syz_genetlink_get_family_id$devlink(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_GET(r0, &(0x7f0000000400)={&(0x7f0000000280)={0x10, 0x0, 0x0, 0x20000000}, 0xc, &(0x7f00000003c0)={&(0x7f0000000300)={0x84, r5, 0x100, 0x70bd26, 0x25dfdbfe, {}, [{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8, 0xb, 0x1}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x9}}, {@pci={{0x8}, {0x11}}, {0x8, 0xb, 0x3}}]}, 0x84}, 0x1, 0x0, 0x0, 0x1}, 0x40c0) r6 = openat$cgroup_subtree(0xffffffffffffffff, &(0x7f0000000440), 0x2, 0x0) write$cgroup_subtree(r6, &(0x7f0000000480)={[{0x2b, 'rlimit'}, {0x2d, 'memory'}]}, 0x10) socket$pppoe(0x18, 0x1, 0x0) (async) r7 = socket$pppoe(0x18, 0x1, 0x0) ioctl$PPPOEIOCSFWD(r7, 0x4008b100, &(0x7f00000004c0)={0x18, 0x0, {0x3, @local, 'batadv0\x00'}}) getsockopt$IP_VS_SO_GET_TIMEOUT(r0, 0x0, 0x486, &(0x7f0000000500), &(0x7f0000000540)=0xc) setsockopt$inet_sctp_SCTP_MAX_BURST(r0, 0x84, 0x14, &(0x7f0000000580)=@assoc_value={r4}, 0x8) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000005c0)={r1, 0xc0, "57a92c4e393e58f22c176b274b1d90404e503ce215b63a1ddaba64a91dba60f39f5ae78a280918c528da4870d17f668f49e4eadd49eaf91f41d78d732c3bfb918207c07432076660b600a7d54262052300772455f07f86ae7de4908bd16c3316850511a2c0a6eea6c32a9ef86d99ad1d6f59b4f74b270a3035e274ee5ecebe08975fe016a5d96d56ad9bc7c063fe09f2c3ba5d54b7bb5014436e6b1c5d6f8138c400fc69bf0ee8895907ccdc1c8d853034af88c63b4c3257c28fc284c57612df"}, &(0x7f00000006c0)=0xc8) (async) getsockopt$inet_sctp_SCTP_GET_PEER_ADDRS(r0, 0x84, 0x6c, &(0x7f00000005c0)={r1, 0xc0, "57a92c4e393e58f22c176b274b1d90404e503ce215b63a1ddaba64a91dba60f39f5ae78a280918c528da4870d17f668f49e4eadd49eaf91f41d78d732c3bfb918207c07432076660b600a7d54262052300772455f07f86ae7de4908bd16c3316850511a2c0a6eea6c32a9ef86d99ad1d6f59b4f74b270a3035e274ee5ecebe08975fe016a5d96d56ad9bc7c063fe09f2c3ba5d54b7bb5014436e6b1c5d6f8138c400fc69bf0ee8895907ccdc1c8d853034af88c63b4c3257c28fc284c57612df"}, &(0x7f00000006c0)=0xc8) setsockopt$inet6_tcp_TCP_REPAIR_WINDOW(0xffffffffffffffff, 0x6, 0x1d, &(0x7f0000000700)={0xf052, 0x5, 0x2, 0x6, 0x94}, 0x14) r9 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x6f}, @void, @val={0xc, 0x99, {0x7fff, 0x2}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) (async) sendmsg$NL80211_CMD_GET_COALESCE(r9, &(0x7f0000000800)={&(0x7f0000000740)={0x10, 0x0, 0x0, 0x40000000}, 0xc, &(0x7f00000007c0)={&(0x7f0000000780)={0x28, 0x0, 0x400, 0x70bd29, 0x25dfdbfd, {{}, {@val={0x8, 0x1, 0x6f}, @void, @val={0xc, 0x99, {0x7fff, 0x2}}}}, ["", "", "", "", "", "", "", "", "", ""]}, 0x28}, 0x1, 0x0, 0x0, 0x4044000}, 0x0) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840), 0x4) (async) bpf$BPF_MAP_CONST_STR_FREEZE(0x16, &(0x7f0000000840)={0xffffffffffffffff, 0xffffffffffffffff}, 0x4) r11 = bpf$BPF_BTF_GET_FD_BY_ID(0x13, &(0x7f0000000880)=0xffffffffffffffff, 0x4) bpf$MAP_CREATE(0x0, &(0x7f00000008c0)=@bloom_filter={0x1e, 0x5, 0x5cc64c5e, 0xffffffff, 0x40001, r10, 0x3, '\x00', 0x0, r11, 0x3, 0x0, 0x5, 0x3}, 0x50) ioctl$sock_proto_private(r9, 0x89e9, &(0x7f0000000940)="d90432ec82309fb5eedf020da8b82690c929d7176bc9acafac3adcabefdf232a2785a85dbc78b20eae621ba9935d2b34b1ce6b712216019e13de8b36e0a2") (async) ioctl$sock_proto_private(r9, 0x89e9, &(0x7f0000000940)="d90432ec82309fb5eedf020da8b82690c929d7176bc9acafac3adcabefdf232a2785a85dbc78b20eae621ba9935d2b34b1ce6b712216019e13de8b36e0a2") socket$inet6_sctp(0xa, 0x1, 0x84) (async) r12 = socket$inet6_sctp(0xa, 0x1, 0x84) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r12, 0x84, 0x6f, &(0x7f0000000a00)={r3, 0x74, &(0x7f0000000980)=[@in={0x2, 0x4e21, @empty}, @in6={0xa, 0x4e24, 0x210a, @mcast2, 0xfffffff1}, @in6={0xa, 0x4e21, 0x10001, @private1, 0x8}, @in={0x2, 0x4e23, @broadcast}, @in6={0xa, 0x4e24, 0x9, @empty, 0x2}]}, &(0x7f0000000a40)=0x10) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000a80)={r8, 0x3ff}, 0x8) (async) setsockopt$inet_sctp_SCTP_CONTEXT(r0, 0x84, 0x11, &(0x7f0000000a80)={r8, 0x3ff}, 0x8) ioctl$VFAT_IOCTL_READDIR_BOTH(r7, 0x82307201, &(0x7f0000000ac0)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) r13 = openat$tun(0xffffffffffffff9c, &(0x7f0000000d00), 0x100, 0x0) ioctl$TUNSETSTEERINGEBPF(r13, 0x800454e0, &(0x7f0000000d40)) pipe(&(0x7f0000000d80)={0xffffffffffffffff, 0xffffffffffffffff}) getsockopt$SO_J1939_SEND_PRIO(r14, 0x6b, 0x3, &(0x7f0000000dc0), &(0x7f0000000e00)=0x4) (async) getsockopt$SO_J1939_SEND_PRIO(r14, 0x6b, 0x3, &(0x7f0000000dc0), &(0x7f0000000e00)=0x4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000e40)='./cgroup/syz1\x00', 0x200002, 0x0) syz_emit_ethernet(0x1e, &(0x7f0000000e80)={@local, @local, @void, {@can={0xc, {{0x1, 0x0, 0x0, 0x1}, 0x7, 0x1, 0x0, 0x0, "63a2d904af6a07ea"}}}}, &(0x7f0000000ec0)={0x1, 0x3, [0xba6, 0xf67, 0x46f, 0xdd3]}) 1.209327974s ago: executing program 1 (id=1702): getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(0xffffffffffffffff, 0x84, 0x6f, &(0x7f0000000200)={0x0, 0x1c, &(0x7f00000001c0)=[@in6={0xa, 0x0, 0x0, @private0={0xfc, 0x0, '\x00', 0x1}, 0xfffffffb}]}, 0x0) setsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(0xffffffffffffffff, 0x84, 0x7b, 0x0, 0x0) r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000a00), 0xffffffffffffffff) r2 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r2, 0x8933, &(0x7f0000000040)={'wlan0\x00', 0x0}) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz0\x00', 0x1ff) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = openat$cgroup_ro(r4, &(0x7f0000000040)='cgroup.freeze\x00', 0x275a, 0x0) write$cgroup_int(r5, &(0x7f0000000200)=0x2, 0x12) sendmsg$NL80211_CMD_SET_WIPHY(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000040)={0x24, r1, 0x2, 0x2000, 0x2, {}, [@NL80211_ATTR_TXQ_QUANTUM={0x8, 0x10c, 0x85}, @NL80211_ATTR_TXQ_MEMORY_LIMIT={0x8, 0x10b, 0x3}]}, 0x24}, 0x1, 0x0, 0x0, 0x4000084}, 0x2000c000) sendmsg$NL80211_CMD_SET_COALESCE(r0, &(0x7f0000000200)={0x0, 0xffffffffffffff8c, &(0x7f0000000b00)={&(0x7f0000000040)={0x28, r1, 0x1, 0x0, 0x0, {{0x2}, {@val={0x8, 0x3, r3}, @void}}}, 0x28}, 0x1, 0x6c00}, 0x0) r6 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r6, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="1400000010000100000000000000000000fc000a20000000000a03000000000000000000070000000900010073797a30000000004c000000090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a3000000000080005400000001c08000640ffffff000800034000000028580000000c0a01010000000000000000070000000900020073797a31000000000900010073797a30000000002c0003802800008008000340000000021c00028018000280080001"], 0xec}}, 0x0) r7 = socket(0x10, 0x2, 0x0) write(r7, &(0x7f0000000280)="2c0000001d005f80004000000000000002000000000000000000080008000100000000ff5b1844ad30c8ac46", 0x2c) 1.106030072s ago: executing program 5 (id=1704): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f0000000780)={&(0x7f0000000100)=@ipv4_newroute={0x1c, 0x18, 0x35f32a6dfa748ddd, 0x0, 0x0, {0x2, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x6}}, 0x1c}, 0x1, 0x2000}, 0x0) 934.897355ms ago: executing program 1 (id=1705): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000004c0)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000440)=@ipv4_delrule={0x24, 0x21, 0x1, 0x0, 0x0, {}, [@FRA_GENERIC_POLICY=@FRA_FWMARK={0x8}]}, 0x24}}, 0x44044) r1 = socket(0x10, 0x80002, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000180)={'veth1_to_bond\x00', 0x0}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000380)={0x6, 0x3, &(0x7f0000000080)=@framed, &(0x7f0000000300)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x40, '\x00', r3}, 0x90) r4 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000140), r1) sendmsg$IPVS_CMD_SET_INFO(r1, &(0x7f0000000440)={&(0x7f0000000100)={0x10, 0x0, 0x0, 0x8800}, 0xc, &(0x7f00000002c0)={&(0x7f00000001c0)={0x74, r4, 0x400, 0x70bd28, 0x25dfdbfc, {}, [@IPVS_CMD_ATTR_TIMEOUT_TCP_FIN={0x8, 0x5, 0x6}, @IPVS_CMD_ATTR_DEST={0xc, 0x2, 0x0, 0x1, [@IPVS_DEST_ATTR_INACT_CONNS={0x8, 0x8, 0x96fe}]}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x77}, @IPVS_CMD_ATTR_TIMEOUT_UDP={0x8, 0x6, 0x84b}, @IPVS_CMD_ATTR_TIMEOUT_TCP={0x8, 0x4, 0x1}, @IPVS_CMD_ATTR_SERVICE={0x34, 0x1, 0x0, 0x1, [@IPVS_SVC_ATTR_FLAGS={0xc, 0x7, {0x1, 0x11}}, @IPVS_SVC_ATTR_AF={0x6, 0x1, 0xa}, @IPVS_SVC_ATTR_ADDR={0x14, 0x3, @ipv4=@broadcast}, @IPVS_SVC_ATTR_SCHED_NAME={0x7, 0x6, 'rr\x00'}]}]}, 0x74}, 0x1, 0x0, 0x0, 0x8011}, 0x10) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r6, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[@ANYBLOB="28010000000000000100000001"], 0x128}, 0x0) recvmsg$unix(r5, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000100)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r8, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r7, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000140), 0x100}, 0x0) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000040)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r10, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) recvmsg$unix(r9, &(0x7f0000000000)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000280), 0x100}, 0x0) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000580)={0xffffffffffffffff, 0xffffffffffffffff}) sendmsg$inet(r11, &(0x7f0000001b00)={0x0, 0x0, 0x0, 0x0, &(0x7f0000001d80)=ANY=[], 0x128}, 0x0) bpf$BPF_PROG_GET_NEXT_ID(0xb, &(0x7f00000001c0)={0x5, 0x0}, 0x8) bpf$BPF_PROG_GET_FD_BY_ID(0xd, &(0x7f0000000240)={r12}, 0x4) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000500)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', r3, 0xffffffffffffffff, 0x0, 0x0, 0x1}, 0x50) sendmsg$nl_route(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000040)=ANY=[@ANYBLOB="4800000010001fff0000056800080000faff0000", @ANYRES32=0x0, @ANYBLOB="c30c424700000000280012800a00010076786c616e00000018000280140010", @ANYRES8=0x0, @ANYBLOB="fcdd"], 0x48}}, 0x400400c0) r13 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$IPSET_CMD_CREATE(r13, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="64000000020605000a0000000000000000000000100003006269746d61703a706f72740005000400000000000900020073797a3000000000050005000000000005000100060000001c00078008000840000000200600044000000000060005"], 0x64}}, 0x0) r14 = socket$nl_netfilter(0x10, 0x3, 0xc) r15 = socket$inet6_sctp(0xa, 0x5, 0x84) connect$inet6(r15, &(0x7f0000000100)={0xa, 0x4e20, 0x1, @dev={0xfe, 0x80, '\x00', 0x28}, 0x400}, 0x1c) sendmsg$NFT_BATCH(r14, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000340)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x1}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x60, 0x9, 0xa, 0x401, 0x0, 0x0, {0x1, 0x0, 0x9}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x1e}, @NFTA_SET_EXPR={0x24, 0x11, 0x0, 0x1, @exthdr={{0xb}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_EXTHDR_OP={0x8}, @NFTA_EXTHDR_DREG={0x8}]}}}]}], {0x14, 0x10}}, 0xa8}}, 0x0) 934.319617ms ago: executing program 2 (id=1706): r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x40241, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r1 = socket$kcm(0x2, 0xa, 0x2) ioctl$SIOCSIFHWADDR(r1, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) sendmsg$NFQNL_MSG_CONFIG(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000020305030000000000000000000016b9080001000157a292deef9f8de86e8a15a7ff2c2d063b47220b936ff5a5d38147d7c4517e32f0f41e824ab9179b314ce51833eac60de2f2fde5fd2334587e8a417aaaf106e152d7751e49a2356f47c7254d0860446ca8653d944a58b2a844012961abaea8f2b5b678f28e5e4f4e078812b9e2c23205fa4818486ccaee2fb5fe2ba117d0555629867d27aec10ce27306aec1fc74027d897fc880a6eb46e4ebb15fb06e5880159f719f626148039903ca0b47bb54"], 0x1c}}, 0x0) write$tun(r0, &(0x7f0000000280)={@val={0x0, 0x800}, @val={0x1, 0x0, 0x0, 0x0, 0x3d}, @mpls={[], @ipv4=@tcp={{0x6, 0x4, 0x0, 0x0, 0x40, 0x0, 0x0, 0x0, 0x84, 0x0, @empty=0x3fffffff, @local}, {{0x0, 0x0, 0x41424344, 0x41424344, 0x0, 0x2, 0xb, 0x0, 0x0, 0x0, 0x4, {[@window={0xa, 0x3}, @timestamp={0x5, 0x2}, @generic={0x0, 0x2, "d58838068b91"}]}}}}}}, 0x4e) 933.754905ms ago: executing program 5 (id=1707): r0 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000040)='memory.events\x00', 0x275a, 0x0) r1 = socket$inet6_tcp(0xa, 0x1, 0x0) close(r1) r2 = socket$inet6_mptcp(0xa, 0x1, 0x106) listen(r2, 0xfffffffc) r3 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r3, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r4 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x0) bind$bt_l2cap(r4, &(0x7f0000000300)={0x1f, 0x0, @any, 0x4}, 0xe) setsockopt$bt_l2cap_L2CAP_OPTIONS(r4, 0x6, 0x1, &(0x7f0000000280)={0x3, 0x101, 0xfffd, 0x4, 0x0, 0x0, 0x2}, 0xc) setsockopt$MRT6_DEL_MFC(r0, 0x29, 0xcd, &(0x7f0000000480)={{0xa, 0x4e21, 0x10000, @empty, 0x9}, {0xa, 0x4e22, 0x5, @mcast1, 0xe9d}, 0xffffffffffffffff, {[0x5, 0x7, 0x3, 0x7f, 0x8b, 0x20c, 0x7f, 0x5]}}, 0x5c) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r5, &(0x7f0000000400)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000080)={0x34, r6, 0x1, 0x0, 0x80000000, {}, [@MPTCP_PM_ATTR_ADDR={0x20, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_FAMILY={0x6, 0x1, 0xa}, @MPTCP_PM_ADDR_ATTR_ADDR6={0x14, 0x4, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}}]}]}, 0x34}, 0x1, 0x0, 0x0, 0xaa34a4cfdf933201}, 0x10) sendmsg$alg(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)=[{&(0x7f0000000300)="b9e63a01bd36241c8241f37504bb9183258299a01a74849ec0a865a35565652e4e2558e4f4c4eba89d46487b31d8d46342cbe0cb72321a2ff4442c48c94b68cc8060310174af4b31e47ed23e95f40c3b8aa6506f14e2af77b7672560a6035c2fcfb4f29750c82d9cc4b50c8799d32e4e6fee759c5d07a1eb056891839063ef3eba943ef04e456f0e8d3fcbd6a175701ab878e40185c664598a1067d5c448bcf29ad45cd0516a230b27539e9fc7e22d2d0a6ad69beb2ef70a74627d754003061bc48b61eeae96cbe46b1f5f42088f6f9ec0b4244306af88e904939ccd354614949bb5b3e9558b439d0348aec9c19fe6bb56a6f97440", 0xf5}], 0x1, &(0x7f0000000600)=ANY=[@ANYBLOB="00010000000000001701000002000000e7000000057f8bf67c8b3dea8f646da3def43f8d8aa5c4ca3328ce30cef2d4da749d0c060126554831a5dcc2da17f12ebcc9497ada07d30023f5d70cee15dbc0d24a204f9f3d103e03676eebf13ff3777c1132b93e0f7bb81b473bf3d0ea1d3e856f46f4e3284f6c09ccfe943daae20d0c8b71b35a733b05dce039ecffc06549fbbdfdd7b89c5a25d19714d3ee42196283096106aca73b1d37d0de30e30e656e42470c06c85497dda397ecd2aabb53a16a09046c4ab55338c2d28c9a64391c95ab6fbf8c2381d31853e9cc7030a034c1fbce65dde2935257649e60921d75fecc889fbd31305ac1e6c9d33769837a98dcf20a0900000000001800000000000000170100000300000001000000000000003000000000000000170100000200000019000000745f290f725c72da7e00556cf5f530e602f43ab4adfee078a0000000"], 0x148, 0x44884}, 0x280000c4) r7 = socket$nl_generic(0x10, 0x3, 0x10) r8 = syz_genetlink_get_family_id$mptcp(&(0x7f00000002c0), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_ADD_ADDR(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f0000000200)={0x28, r8, 0x1, 0x0, 0x0, {0x7}, [@MPTCP_PM_ATTR_ADDR={0x14, 0x1, 0x0, 0x1, [@MPTCP_PM_ADDR_ATTR_ID={0x5, 0x2, 0x1}, @MPTCP_PM_ADDR_ATTR_FLAGS={0x8, 0x6, 0x1f}]}]}, 0x28}}, 0x0) 795.324302ms ago: executing program 5 (id=1708): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$inet_sctp(0x2, 0x1, 0x84) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00', 0x0}) r5 = socket$kcm(0x29, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, 0x0) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002440)={0xffffffffffffffff}) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='netdevsim0\x00') sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4044005}, 0x20040050) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) socket$nl_netfilter(0x10, 0x3, 0xc) (async) socket$inet_sctp(0x2, 0x1, 0x84) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$nl80211(&(0x7f00000000c0), 0xffffffffffffffff) (async) ioctl$sock_SIOCGIFINDEX_80211(r1, 0x8933, &(0x7f0000000100)={'wlan1\x00'}) (async) socket$kcm(0x29, 0x2, 0x0) (async) ioctl$sock_kcm_SIOCKCMATTACH(r5, 0x89e0, 0x0) (async) socketpair$nbd(0x1, 0x1, 0x0, &(0x7f0000002440)) (async) ioctl$sock_SIOCBRDELBR(r6, 0x89a2, &(0x7f0000000000)='netdevsim0\x00') (async) sendmsg$NL80211_CMD_TDLS_CHANNEL_SWITCH(r2, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000140)={0x1c, r3, 0x1, 0x70bd28, 0x25dfdbfc, {{}, {@val={0x8, 0x3, r4}, @void}}}, 0x1c}, 0x1, 0x0, 0x0, 0x4044005}, 0x20040050) (async) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000080)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000001e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) (async) sendmsg$NFT_BATCH(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000280)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2, 0x0, 0xfffe}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @hash={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_HASH_SREG={0x8, 0x1, 0x1, 0x0, 0x3}, @NFTA_HASH_DREG={0x8, 0x2, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) (async) 637.620247ms ago: executing program 1 (id=1709): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket(0x1e, 0x4, 0x0) r2 = socket$can_bcm(0x1d, 0x2, 0x2) connect$can_bcm(r2, &(0x7f00000005c0), 0x10) recvmmsg(r2, &(0x7f0000000e40), 0x0, 0x10002, 0x0) sendmsg$can_bcm(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000240)=ANY=[@ANYBLOB="050000007f0000000000010000000000", @ANYRES64=0x0, @ANYRES64=0x2710], 0x48}}, 0x0) setsockopt$packet_tx_ring(r1, 0x10f, 0x87, &(0x7f0000000440)=@req={0x3fc}, 0x10) connect$can_bcm(r1, &(0x7f0000000040), 0x10) r4 = socket(0x10, 0x80002, 0x0) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[], 0x64}, 0x1, 0x0, 0x0, 0x4004001}, 0x0) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000100)=@newlink={0x3c, 0x10, 0x8, 0x70bd25, 0x25ffdbfc, {0x0, 0x0, 0x0, 0x0, 0x10, 0x40482}, [@IFLA_LINKINFO={0x1c, 0x12, 0x0, 0x1, @bridge={{0xb}, {0xc, 0x2, 0x0, 0x1, [@IFLA_BR_MAX_AGE={0x8, 0x3, 0x1d}]}}}]}, 0x3c}, 0x1, 0x0, 0x0, 0x10}, 0x0) listen(r2, 0x80000001) sendmsg$nl_route(0xffffffffffffffff, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="500000001000010425bbe5ad600027842cf52300", @ANYRES32=0x0, @ANYBLOB="0300000000000000280012800a00010076786c616e00"], 0x50}, 0x1, 0x0, 0x0, 0x13d33d22cca65c15}, 0x4008840) r5 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r5, 0x8933, &(0x7f00000002c0)={'wlan0\x00'}) sendmmsg$alg(r4, &(0x7f00000000c0), 0x492492492492627, 0x0) sendmsg$IPSET_CMD_CREATE(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000000c0)=ANY=[@ANYRES16=r3], 0x50}, 0x1, 0x0, 0x0, 0x4000000}, 0x8040) 431.258509ms ago: executing program 5 (id=1710): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001a40)=ANY=[@ANYBLOB="140000001000010000000000000000000100000a20000000000a01040000000000000000010000030900010073797a30000000002c000000030a01010000000000000000010000000900010073797a30000000000900030073797a320000000094000000060a010400000000000000000100000008000b40000000006c000480340001800b000100657874686472000024000280080001400000000c080003400000000008000440000000220500020007000000340001800c00010062697477697365002400028008000340000000020800014000000014080002400000001208000840000000030900010073797a30"], 0x108}}, 0x0) r1 = socket$l2tp6(0xa, 0x2, 0x73) bind$l2tp6(r1, &(0x7f0000000000)={0xa, 0x0, 0xfffffffd, @private0={0xfc, 0x0, '\x00', 0x1}, 0x0, 0x6}, 0xf) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) r4 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000240)={'wlan1\x00', 0x0}) r6 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$NL80211_CMD_SET_TID_CONFIG(r4, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000340)={&(0x7f0000000640)={0x24, r6, 0x1, 0x0, 0x0, {{}, {@val={0x8, 0x3, r5}, @void}}, [@NL80211_ATTR_TID_CONFIG={0x8, 0x11d, 0x0, 0x1, [{0x4, 0x0, 0x0, 0x0}]}]}, 0x24}, 0x1, 0x0, 0x0, 0x10000}, 0x0) (async) sendmsg$L2TP_CMD_TUNNEL_CREATE(r2, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 423.89245ms ago: executing program 1 (id=1711): sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}}, 0x0) (async) r0 = socket(0x2a, 0x2, 0x0) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000001480)=0x14) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000600)=@newqdisc={0x34, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_cake={{0x9}, {0x4}}]}, 0x34}}, 0x0) (async) syz_emit_ethernet(0x6a, &(0x7f0000000000)={@broadcast, @link_local, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "d20040", 0x34, 0x3a, 0x0, @dev, @local, {[], @param_prob={0x4, 0x0, 0x0, 0x0, {0x0, 0x6, "31c944", 0x0, 0x2b, 0x0, @empty, @remote, [], "d4a3fb00"}}}}}}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) ioctl$ifreq_SIOCGIFINDEX_batadv_hard(r2, 0x8933, &(0x7f00000003c0)={'batadv_slave_1\x00', 0x0}) sendmsg$nl_route_sched(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000300)={&(0x7f0000000180)=@delchain={0x24, 0x5f, 0xf31, 0x0, 0x0, {0x0, 0x0, 0x0, r3, {}, {0x5, 0xf}, {0xffe0, 0x8}}}, 0x24}}, 0x4040850) (async) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f00000003c0)={&(0x7f0000000040)=@newtfilter={0x44, 0x2c, 0x52f, 0x0, 0x25dfdbff, {0x0, 0x0, 0x0, r1, {}, {}, {0x2, 0xe}}, [@filter_kind_options=@f_flower={{0xb}, {0x14, 0x2, [@TCA_FLOWER_CLASSID={0x8, 0x1, {0x4, 0x1}}, @TCA_FLOWER_KEY_CT_STATE={0x6, 0x5b, 0x3}]}}]}, 0x44}}, 0x0) r4 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r4, &(0x7f00000002c0), 0x40000000000009f, 0x0) writev(0xffffffffffffffff, &(0x7f00000000c0)=[{&(0x7f0000000080)="390000001300090468fe0700000000000000", 0x12}], 0x1) 366.392639ms ago: executing program 5 (id=1712): r0 = socket$nl_xfrm(0x10, 0x3, 0x6) sendmsg$nl_xfrm(r0, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000540)=@updpolicy={0xb8, 0x19, 0x1, 0xffffffff, 0x0, {{@in=@multicast1=0xe0000002, @in, 0x0, 0x0, 0x4, 0x0, 0xa, 0x0, 0x0, 0x87}, {0x0, 0x0, 0x0, 0x8, 0x0, 0x0, 0x0, 0xfffffffffffffffb}, {0x0, 0x0, 0xe7}, 0x0, 0x0, 0x0, 0x1}}, 0xb8}, 0x1, 0x0, 0x0, 0x40}, 0x4000090) ioctl(r0, 0xa, &(0x7f0000000280)="b8cb991ac8c460098dbd5a298a892f7404868d37a8111a985ca2247a32257aaec07161ff6600199764f53ceaf5cafe2b064146668ddb3b895e7584eb773b0b6f2525f2936a69253ae579854b751886631576f1e3b38dfd08d8bea2c0548a26ba859709a934acf6ce3cf214f0924c67d774d22821aaed0e165deb190eba5a7b4c822c4b04e16380fe4a") r1 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0x10, 0x4, 0x8, 0x8}, 0x50) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x6, 0xd, &(0x7f0000000200)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000bc00000018110000", @ANYRES32=r1, @ANYBLOB="0000000000000000b7080000000000007b8af8ff00000000bca2000000000000a6020000f8ffffffb703000008000000b704000000000400850000003300000095"], &(0x7f0000000180)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @xdp, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r2, 0x5, 0xe, 0x0, &(0x7f0000000280)="432275e2065074ef2415f73227b2", 0x0, 0xd01, 0x0, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x50) syz_emit_ethernet(0x46, &(0x7f0000000000)={@random="91b882b09a5b", @multicast, @void, {@ipv4={0x800, @icmp={{0x5, 0x4, 0x0, 0x0, 0x38, 0x0, 0x0, 0x0, 0x1, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}, @local}, @time_exceeded={0x3, 0x4, 0x0, 0x12, 0x0, 0x3f18, {0x5, 0x2, 0x0, 0x0, 0xfff, 0x0, 0x0, 0x0, 0x1, 0x0, @private=0xa010101, @rand_addr=0x64010100}, "08000071ae9b1c43"}}}}}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f00000018c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f0000000000)=ANY=[@ANYBLOB="400000001e000100d14a0000fcdbdf250700", @ANYRES32], 0x40}}, 0x0) r4 = socket$nl_xfrm(0x10, 0x3, 0x6) r5 = socket$nl_generic(0x10, 0x3, 0x10) r6 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r5, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000140)=ANY=[@ANYBLOB=',\x00\x00\x00', @ANYRES16=r6, @ANYBLOB="01000010000000f7ffff29000000180001801400020073797a5f74756e"], 0x2c}, 0x1, 0x0, 0x0, 0x40040}, 0x0) bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x9, 0x4, 0xba9, 0x1, 0x1}, 0x48) r7 = bpf$MAP_CREATE(0x0, &(0x7f00000009c0)=@base={0xe, 0x4, 0x8, 0x8}, 0x48) bpf$MAP_DELETE_ELEM(0x3, &(0x7f0000000380)={r7, &(0x7f0000000300)}, 0x20) sendmsg$nl_xfrm(r4, &(0x7f0000000180)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000000)=ANY=[@ANYBLOB="b8000000150001000000000000000000e000000200000000000000000000000000000000000000000000ffffac1e000100010800000000000a00000000000000", @ANYRES32=0x0, @ANYRES32=0x0, @ANYBLOB="000000000000000000000000000000fbffffff0009e4d65bc78d9172ed000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000100"/112], 0xb8}}, 0x0) 253.472518ms ago: executing program 1 (id=1713): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) r1 = socket$alg(0x26, 0x5, 0x0) bind$alg(r1, &(0x7f00000004c0)={0x26, 'skcipher\x00', 0x0, 0x0, 'cbc-twofish-3way\x00'}, 0x58) setsockopt$ALG_SET_KEY(r1, 0x117, 0x1, &(0x7f0000c18000)="ad56b6c5820fae9d6dcd3292ea54c7beef915d564c90c200", 0x18) r2 = accept4(r1, 0x0, 0x0, 0x80800) sendmsg$TEAM_CMD_OPTIONS_GET(r2, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000dc0)={&(0x7f0000000a80)={0x25c, 0x0, 0x410, 0x70bd2c, 0x25dfdbfc, {}, [{{0x8}, {0x138, 0x2, 0x0, 0x1, [{0x38, 0x1, @mcast_rejoin_interval={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x7add}}, {0x8}}}, {0x3c, 0x1, @lb_tx_method={{0x24}, {0x5}, {0x9, 0x4, 'hash\x00'}}}, {0x40, 0x1, @queue_id={{{0x24}, {0x5}, {0x8, 0x4, 0x101}}, {0x8}}}, {0x40, 0x1, @lb_port_stats={{{0x24}, {0x5}, {0x8, 0x4, 0x6d}}, {0x8}}}]}}, {{0x8}, {0xb4, 0x2, 0x0, 0x1, [{0x38, 0x1, @notify_peers_interval={{0x24}, {0x5}, {0x8, 0x4, 0x6}}}, {0x40, 0x1, @name={{0x24}, {0x5}, {0x10, 0x4, 'loadbalance\x00'}}}, {0x38, 0x1, @notify_peers_count={{0x24}, {0x5}, {0x8, 0x4, 0x7}}}]}}, {{0x8}, {0x44, 0x2, 0x0, 0x1, [{0x40, 0x1, @priority={{{0x24}, {0x5}, {0x8, 0x4, 0x77}}, {0x8}}}]}}]}, 0x25c}, 0x1, 0x0, 0x0, 0x1}, 0x4004) recvmsg(r2, &(0x7f00000005c0)={0x0, 0x0, &(0x7f00000001c0)=[{&(0x7f00000000c0)=""/81, 0x7ffff000}, {&(0x7f0000000200)=""/83, 0x20000253}], 0x2}, 0x0) sendmsg$NFT_BATCH(r0, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) r3 = socket(0x10, 0x803, 0x0) r4 = socket$nl_netfilter(0x10, 0x3, 0xc) mmap(&(0x7f0000ffb000/0x3000)=nil, 0x3000, 0x3, 0x10, r0, 0xb3d64000) sendmsg$NFT_BATCH(r4, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000240)={&(0x7f0000000000)={{0x14}, [@NFT_MSG_NEWCHAIN={0x20, 0x1d, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}]}], {0x14}}, 0x48}}, 0x0) socket$nl_generic(0x10, 0x3, 0x10) getsockopt$inet_sctp6_SCTP_SOCKOPT_PEELOFF(0xffffffffffffffff, 0x84, 0x66, &(0x7f0000000000)={0x0, 0x2cb}, 0x0) r5 = socket(0x2d, 0x2, 0x0) ioctl$sock_kcm_SIOCKCMCLONE(r5, 0x89e3, &(0x7f0000000000)={r5}) r6 = socket$inet_tcp(0x2, 0x1, 0x0) setsockopt$inet_tcp_int(r6, 0x6, 0x2c, &(0x7f0000000000)=0x80000001, 0x4) ioctl$sock_SIOCETHTOOL(r3, 0x8932, &(0x7f0000003f80)={'team0\x00', 0x0}) getsockopt$inet_tcp_int(r6, 0x6, 0x1, &(0x7f00000000c0), &(0x7f0000000100)=0x4) sendmsg$NFT_BATCH(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000280)={&(0x7f00000006c0)={{0x14}, [@NFT_MSG_NEWRULE={0x54, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x28, 0x4, 0x0, 0x1, [{0x24, 0x1, 0x0, 0x1, @meta={{0x9}, @val={0x14, 0x2, 0x0, 0x1, [@NFTA_META_DREG={0x8, 0x1, 0x1, 0x0, 0xf}, @NFTA_META_KEY={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x7c}}, 0x0) r7 = socket$nl_generic(0x10, 0x3, 0x10) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r8 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r8, 0x10e, 0xc, &(0x7f0000000280)={0xfffffffc}, 0x9) sendmsg$nl_generic(r8, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000001240)={0x24, 0x12, 0xa01, 0x0, 0x0, {0x80, 0x2}, [@generic="299a50bdc19377268b5707eafb"]}, 0x24}, 0x1, 0x0, 0x0, 0x81}, 0x0) r9 = syz_genetlink_get_family_id$ipvs(&(0x7f0000000240), r7) sendmsg$IPVS_CMD_NEW_DAEMON(r8, &(0x7f00000003c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f0000000300)={&(0x7f00000002c0)={0x14, r9, 0x20, 0x70bd26, 0x25dfdbfc}, 0x14}, 0x1, 0x0, 0x0, 0x4000000}, 0x2) r10 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r7, &(0x7f0000000180)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x10000000}, 0xc, &(0x7f0000000140)={&(0x7f0000000400)=ANY=[@ANYBLOB="4c00000071eb50917d49b9c4cb65d2e3f37b0e542cf7d972b9e7a5d556e850cbe40f42919905a3c7b35b252b4e8003b7379e", @ANYRES16=r10, @ANYBLOB="080027bd7000fcdbdf253b0000000c00990011ed00006000000004008e0004008e0022003300c0b0040008021100000008021100000050505050505032e3ea0003003b000000"], 0x4c}, 0x1, 0x0, 0x0, 0x4048001}, 0x80048c1) 234.306288ms ago: executing program 2 (id=1714): r0 = socket(0x400000000010, 0x3, 0x0) r1 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r3 = bpf$MAP_CREATE(0x0, &(0x7f0000000400)=ANY=[@ANYBLOB="0e00ff1900000400000007000000030000190000", @ANYRES32, @ANYBLOB='\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB='\x00'/28], 0x48) r4 = bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000240)={0x2, 0x4, 0x8, 0x1, 0x80, 0x0, 0x0, '\x00', 0x0, 0x0}, 0x48) r5 = socket(0x28, 0x1, 0x0) getsockopt$SO_TIMESTAMPING(r5, 0x1, 0x52, 0x0, &(0x7f00000002c0)) bpf$PROG_LOAD(0x5, &(0x7f0000000840)={0x11, 0x1c, &(0x7f0000000d80)=@ringbuf={{0x18, 0x8}, {{0x18, 0x1, 0x1, 0x0, r3}, {}, {}, {0x85, 0x0, 0x0, 0x5}, {0x7, 0x1, 0xb, 0x9, 0x0, 0x8}}, {{0x5, 0x0, 0x3}, {0x95, 0x0, 0x0, 0x700}}, [@snprintf={{}, {0x3, 0x0, 0x3, 0xa, 0x9, 0xfe04}, {0x6, 0x0, 0x6, 0x9}, {0x3, 0x3, 0x6, 0xa, 0xa, 0xfff0, 0x50}, {0x7, 0x1, 0xb, 0x6, 0x8}, {0x7, 0x0, 0x0, 0x8}, {}, {}, {0x7, 0x0, 0x5, 0x0}, {0x18, 0x2, 0x2, 0x0, r4}, {}, {0x46, 0x8, 0xfff0, 0x76}}], {{0x7, 0x1, 0xb, 0x8}, {0x6, 0x0, 0x5, 0x8}}, {0x95, 0x0, 0x6000}}, &(0x7f0000000040)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0xf00, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$nl_route_sched(r0, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2a, 0xffffffff, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x0, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8}}]}, 0x38}}, 0x0) r6 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r6, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000003c0)=@newtfilter={0x24, 0x2c, 0xd27, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r2, {}, {0xfff2, 0x2}, {0x7}}}, 0x24}, 0x1, 0x0, 0x0, 0x20000080}, 0x8850) bpf$MAP_CREATE(0x0, &(0x7f0000000000)=@base={0xf, 0x4, 0x8, 0x101, 0x42, 0xffffffffffffffff, 0x0, '\x00', r2}, 0x50) r7 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000080)='blkio.bfq.io_wait_time\x00', 0x26e1, 0x0) sendmsg$IPCTNL_MSG_EXP_NEW(0xffffffffffffffff, 0x0, 0x0) socket$nl_generic(0x10, 0x3, 0x10) close(r7) socket$kcm(0x23, 0x5, 0x0) ioctl$SIOCSIFHWADDR(r7, 0x8b14, &(0x7f0000000000)={'wlan1\x00', @random="0100ffffffff"}) 136.946346ms ago: executing program 1 (id=1715): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000001080)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$bt_hci(r1, 0x84, 0x6d, &(0x7f0000000000)=""/4102, &(0x7f0000001040)=0x1006) sendmsg$NFT_BATCH(0xffffffffffffffff, &(0x7f0000000840)={0x0, 0x0, &(0x7f0000000380)={&(0x7f0000000240)={{0x14}, [@NFT_MSG_DELFLOWTABLE={0x2c, 0x18, 0xa, 0x5, 0x0, 0x0, {0x2}, [@NFTA_FLOWTABLE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_FLOWTABLE_NAME={0x9, 0x2, 'syz0\x00'}]}], {0x14}}, 0x54}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000140), 0x40241, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'syzkaller1\x00', 0xc201}) r3 = socket$kcm(0x2, 0xa, 0x2) r4 = bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0xe, 0x4, &(0x7f00000000c0)=ANY=[@ANYBLOB="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"], &(0x7f0000003ff6)='GPL\x00', 0x4, 0xfd90, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x366, 0x10, &(0x7f0000000000), 0x1dd}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000200)=@base={0x12, 0x4, 0x4, 0x12}, 0x48) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@map=r5, r4, 0x26}, 0x10) close(r5) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f0000000180)={'syzkaller1\x00', @link_local}) write$tun(r2, &(0x7f0000000240)=ANY=[@ANYBLOB="000086dd0500560008005400000060ec970001983a00fc000018c6ba35000000000000000700ff020000000000000000000000000001"], 0xfdef) sendmsg$nl_generic(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f00000010c0)={&(0x7f00000011c0)=ANY=[@ANYBLOB="200000003e00010326bd700200bedf25035100f97fcd5f909f3289500515be0a033f5add38c1b0085ef48e82bd688733d520c8ed3578a25b8b5728a306cc683ceff91425d9708220a79c2deb0aa15439f6ef69704c28a2020dec45a82eff8d8979b4a06d8978c17388f60b52a88f0a484c36f7ffe458123eaf1c9b6ca2d60386408d719f8fafc62c22ded10b186d896ef6179bf7120111acb2765cbe00"/167], 0x20}}, 0x8004) read(r0, &(0x7f0000001100)=""/178, 0xb2) r6 = accept4(0xffffffffffffffff, &(0x7f0000000080)=@ll={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000100)=0x80, 0x0) getsockopt$inet6_mptcp_buf(r6, 0x11c, 0x4, &(0x7f0000000140)=""/220, &(0x7f0000000240)=0xdc) 19.341119ms ago: executing program 5 (id=1716): r0 = socket$nl_generic(0x10, 0x3, 0x10) ioctl$sock_SIOCGIFINDEX_80211(r0, 0x8933, &(0x7f00000003c0)={'wlan0\x00', 0x0}) r2 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000280), 0xffffffffffffffff) sendmsg$NL80211_CMD_FRAME(r0, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000005c0)={0x64, r2, 0x1, 0x70bd26, 0x0, {{}, {@val={0x8, 0x3, r1}, @void}}, [@NL80211_ATTR_OFFCHANNEL_TX_OK={0x4}, @NL80211_ATTR_FRAME={0x42, 0x33, @assoc_req={{{0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x1, 0x0, 0x1, 0x0, 0x1}, {0x10}, @device_b, @device_a, @initial, {0xc, 0x9}, @value=@ver_80211n={0x0, 0x0, 0x0, 0x0, 0x0, 0x3, 0x1, 0x0, 0x0, 0x1}}, 0x2f20, 0x2, {}, @void, @val={0x2d, 0x1a, {0x80, 0x2, 0x2, 0x0, {0xf, 0x9, 0x0, 0x9, 0x0, 0x1, 0x1, 0x0, 0x1}, 0x8, 0x3, 0x5}}}}]}, 0x64}, 0x1, 0x0, 0x0, 0xc0}, 0x0) r3 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r4 = syz_genetlink_get_family_id$netlbl_cipso(&(0x7f0000000bc0), r3) sendmsg$NLBL_CIPSOV4_C_ADD(r3, &(0x7f0000000580)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000001c0)=ANY=[@ANYBLOB="34010000", @ANYRES16=r4, @ANYBLOB="01000000000000000000010000000400048008000200010000000800010000000000080108805400078008000500000000000800050000000000080005009d2c690d0800050000000000080005000000000008000500000000000800050000ebffff070005"], 0x134}}, 0x4048014) 0s ago: executing program 2 (id=1717): r0 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r1 = openat$cgroup_ro(r0, &(0x7f0000000600)='blkio.bfq.io_wait_time\x00', 0x275a, 0x0) read(r1, &(0x7f00000003c0)=""/132, 0x84) getsockopt$inet6_mreq(0xffffffffffffffff, 0x29, 0x15, &(0x7f0000000200)={@loopback, 0x0}, &(0x7f0000000240)=0x14) r3 = bpf$OBJ_GET_MAP(0x7, &(0x7f0000000340)=@generic={&(0x7f0000000300)='./file0\x00', 0x0, 0x10}, 0x18) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000540)={0x18, 0xd, &(0x7f0000000040)=@raw=[@jmp={0x5, 0x0, 0xd, 0xb, 0x5, 0xc, 0x1}, @btf_id={0x18, 0x7, 0x3, 0x0, 0x3}, @map_fd={0x18, 0x5, 0x1, 0x0, r1}, @printk={@u, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x4}}], &(0x7f00000000c0)='GPL\x00', 0x4, 0xd8, &(0x7f0000000100)=""/216, 0x41000, 0x8, '\x00', r2, 0x0, 0xffffffffffffffff, 0x8, &(0x7f0000000280)={0x9, 0x4}, 0x8, 0x10, &(0x7f00000002c0)={0x5, 0x3, 0x3d, 0x4}, 0x10, 0x0, 0x0, 0x7, &(0x7f0000000480)=[r3], &(0x7f00000004c0)=[{0x4, 0x4, 0xf, 0x3}, {0x1, 0x2, 0xf, 0xb}, {0x2, 0x3, 0x1, 0x7}, {0x2, 0x3, 0xf, 0xa}, {0x1, 0x3, 0x2, 0x5}, {0x0, 0x4, 0x27}, {0x2, 0x3, 0xb, 0x3}], 0x10, 0x26}, 0x94) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f00000003c0)={0x10, 0x4, &(0x7f0000000380)=ANY=[@ANYBLOB="1802000000c400000000000000000000850000003e00000095"], &(0x7f0000000000)='GPL\x00'}, 0x94) kernel console output (not intermixed with test programs): vsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.058686][ T9097] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.104107][ T9097] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.239780][ T5840] Bluetooth: hci0: command tx timeout [ 182.284084][ T9208] veth0_vlan: entered promiscuous mode [ 182.355004][ T9208] veth1_vlan: entered promiscuous mode [ 182.424253][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.446586][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.526696][ T9208] veth0_macvtap: entered promiscuous mode [ 182.538515][ T36] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 182.554866][ T36] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 182.568561][ T9208] veth1_macvtap: entered promiscuous mode [ 182.627574][ T9208] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 182.667541][ T9208] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 182.695825][ T9208] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.707339][ T9208] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.717814][ T9208] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.738181][ T9208] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 182.815011][ T9376] infiniband syz2: set down [ 182.826503][ T9376] infiniband syz2: added bond_slave_0 [ 182.914010][ T9376] RDS/IB: syz2: added [ 182.919118][ T9376] smc: adding ib device syz2 with port count 1 [ 182.926113][ T9376] smc: ib device syz2 port 1 has pnetid [ 183.052385][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.069927][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.197219][ T1015] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.259130][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 183.300073][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 183.337098][ T1015] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.465197][ T1015] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 183.842531][ T1015] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 184.075751][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 184.089765][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 184.098469][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 184.106705][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 184.114553][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 184.354686][ T1015] bridge_slave_1: left allmulticast mode [ 184.369935][ T1015] bridge_slave_1: left promiscuous mode [ 184.387664][ T1015] bridge0: port 2(bridge_slave_1) entered disabled state [ 184.413092][ T1015] bridge_slave_0: left allmulticast mode [ 184.429146][ T1015] bridge_slave_0: left promiscuous mode [ 184.439940][ T1015] bridge0: port 1(bridge_slave_0) entered disabled state [ 184.710372][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 184.718738][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 184.727885][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 184.737296][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 184.750792][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 184.983593][ T1015] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 184.994668][ T1015] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 185.005120][ T1015] bond0 (unregistering): Released all slaves [ 186.159666][ T5840] Bluetooth: hci0: command tx timeout [ 186.799975][ T5840] Bluetooth: hci4: command tx timeout [ 186.927996][ T1015] hsr_slave_0: left promiscuous mode [ 186.935990][ T1015] hsr_slave_1: left promiscuous mode [ 186.942839][ T1015] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 186.954128][ T1015] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 186.963644][ T1015] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 186.972376][ T1015] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 186.997013][ T1015] veth1_macvtap: left promiscuous mode [ 187.008399][ T1015] veth0_macvtap: left promiscuous mode [ 187.014209][ T1015] veth1_vlan: left promiscuous mode [ 187.019958][ T1015] veth0_vlan: left promiscuous mode [ 187.470163][ T1015] team0 (unregistering): Port device team_slave_1 removed [ 187.506484][ T1015] team0 (unregistering): Port device team_slave_0 removed [ 188.240568][ T5840] Bluetooth: hci0: command tx timeout [ 188.430832][ T9399] chnl_net:caif_netlink_parms(): no params data found [ 188.678782][ T9405] chnl_net:caif_netlink_parms(): no params data found [ 188.715150][ T9464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.747430][ T9464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.763234][ T9464] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 188.880008][ T5840] Bluetooth: hci4: command tx timeout [ 188.938566][ T9399] bridge0: port 1(bridge_slave_0) entered blocking state [ 188.956139][ T9399] bridge0: port 1(bridge_slave_0) entered disabled state [ 188.969949][ T9399] bridge_slave_0: entered allmulticast mode [ 188.987933][ T9399] bridge_slave_0: entered promiscuous mode [ 189.002757][ T9399] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.020978][ T9399] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.028209][ T9399] bridge_slave_1: entered allmulticast mode [ 189.051494][ T9399] bridge_slave_1: entered promiscuous mode [ 189.158248][ T13] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.274401][ T9399] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 189.320302][ T13] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.433777][ T9399] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 189.483330][ T13] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.675626][ T13] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 189.699262][ T9405] bridge0: port 1(bridge_slave_0) entered blocking state [ 189.707139][ T9405] bridge0: port 1(bridge_slave_0) entered disabled state [ 189.714706][ T9405] bridge_slave_0: entered allmulticast mode [ 189.727359][ T9405] bridge_slave_0: entered promiscuous mode [ 189.742303][ T9399] team0: Port device team_slave_0 added [ 189.751836][ T9399] team0: Port device team_slave_1 added [ 189.764017][ T9405] bridge0: port 2(bridge_slave_1) entered blocking state [ 189.771704][ T9405] bridge0: port 2(bridge_slave_1) entered disabled state [ 189.779012][ T9405] bridge_slave_1: entered allmulticast mode [ 189.787401][ T9405] bridge_slave_1: entered promiscuous mode [ 189.911743][ T9399] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 189.922336][ T9399] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 189.951336][ T9399] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.003046][ T9405] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 190.024423][ T9399] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 190.057911][ T9399] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.089920][ T9399] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 190.162216][ T9405] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 190.319552][ T5840] Bluetooth: hci0: command tx timeout [ 190.335687][ T9405] team0: Port device team_slave_0 added [ 190.402095][ T9504] ip_tunnel: non-ECT from 0.0.0.0 with TOS=0x3 [ 190.495291][ T9399] hsr_slave_0: entered promiscuous mode [ 190.514753][ T9399] hsr_slave_1: entered promiscuous mode [ 190.528623][ T9405] team0: Port device team_slave_1 added [ 190.558783][ T9508] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1102'. [ 190.624458][ T9507] veth0: entered promiscuous mode [ 190.635226][ T9507] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1103'. [ 190.815724][ T9405] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 190.823338][ T9405] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 190.853499][ T9405] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 190.874598][ T13] bridge_slave_1: left allmulticast mode [ 190.889693][ T13] bridge_slave_1: left promiscuous mode [ 190.896683][ T13] bridge0: port 2(bridge_slave_1) entered disabled state [ 190.925156][ T13] bridge_slave_0: left allmulticast mode [ 190.934896][ T13] bridge_slave_0: left promiscuous mode [ 190.945462][ T13] bridge0: port 1(bridge_slave_0) entered disabled state [ 190.960815][ T5840] Bluetooth: hci4: command tx timeout [ 191.495754][ T13] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 191.507504][ T13] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 191.518529][ T13] bond0 (unregistering): Released all slaves [ 191.542883][ T9405] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 191.560908][ T9405] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 191.589213][ T9405] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 191.788630][ T9405] hsr_slave_0: entered promiscuous mode [ 191.804987][ T9405] hsr_slave_1: entered promiscuous mode [ 191.812181][ T9405] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 191.829672][ T9405] Cannot create hsr debugfs directory [ 192.089993][ T9531] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1112'. [ 192.401194][ T5840] Bluetooth: hci0: command tx timeout [ 192.601354][ T13] hsr_slave_0: left promiscuous mode [ 192.608750][ T13] hsr_slave_1: left promiscuous mode [ 192.614883][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 192.622956][ T13] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 192.641001][ T13] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 192.648496][ T13] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 192.683566][ T13] veth1_macvtap: left promiscuous mode [ 192.689266][ T13] veth0_macvtap: left promiscuous mode [ 192.720607][ T13] veth1_vlan: left promiscuous mode [ 192.726856][ T13] veth0_vlan: left promiscuous mode [ 193.043941][ T5840] Bluetooth: hci4: command tx timeout [ 193.289016][ T13] team0 (unregistering): Port device team_slave_1 removed [ 193.325484][ T13] team0 (unregistering): Port device team_slave_0 removed [ 193.702038][ T9548] A link change request failed with some changes committed already. Interface bridge_slave_1 may have been left with an inconsistent configuration, please check. [ 194.244419][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 195.064287][ T9562] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1125'. [ 195.216182][ T9399] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 195.302458][ T9399] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 195.423756][ T9399] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 195.496773][ T9399] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 195.777065][ T9405] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 195.787807][ T9405] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 195.800921][ T9405] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 195.817123][ T9399] 8021q: adding VLAN 0 to HW filter on device bond0 [ 195.826663][ T9405] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 195.864863][ T9399] 8021q: adding VLAN 0 to HW filter on device team0 [ 195.886668][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 195.893872][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 195.916523][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 195.923672][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.148403][ T9405] 8021q: adding VLAN 0 to HW filter on device bond0 [ 196.213902][ T9405] 8021q: adding VLAN 0 to HW filter on device team0 [ 196.247881][ T3488] bridge0: port 1(bridge_slave_0) entered blocking state [ 196.255104][ T3488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 196.308546][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 196.315769][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 196.584052][ T9603] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1133'. [ 196.597718][ T9399] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 196.946028][ T9405] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 197.095462][ T9405] veth0_vlan: entered promiscuous mode [ 197.133225][ T9405] veth1_vlan: entered promiscuous mode [ 197.253587][ T9405] veth0_macvtap: entered promiscuous mode [ 197.288680][ T9405] veth1_macvtap: entered promiscuous mode [ 197.366925][ T9405] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 197.428711][ T9405] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 197.467075][ T9405] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.486492][ T9405] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.515814][ T9405] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.550943][ T9634] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1143'. [ 197.552468][ T9405] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 197.632920][ T9399] veth0_vlan: entered promiscuous mode [ 197.702186][ T9399] veth1_vlan: entered promiscuous mode [ 197.843072][ T9644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1146'. [ 197.852839][ T9644] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1146'. [ 197.862710][ T9644] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1146'. [ 197.885044][ T9644] netlink: 60 bytes leftover after parsing attributes in process `syz.3.1146'. [ 197.913609][ T9644] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1146'. [ 197.943800][ T9399] veth0_macvtap: entered promiscuous mode [ 197.993363][ T9399] veth1_macvtap: entered promiscuous mode [ 198.052001][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.097575][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.259786][ T9399] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 198.285242][ T3488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.300971][ T3488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.303873][ T9399] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 198.385462][ T9399] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.407426][ T9399] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.429559][ T9399] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.448534][ T9399] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 198.750166][ T3488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.775420][ T3488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.853019][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 198.863282][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 198.875960][ T9677] x_tables: duplicate underflow at hook 1 [ 198.994146][ T9679] tipc: Started in network mode [ 198.999234][ T9679] tipc: Node identity fe16bcd90e9b, cluster identity 4711 [ 199.015820][ T9679] tipc: Enabled bearer , priority 0 [ 199.031376][ T9679] syzkaller0: entered promiscuous mode [ 199.038010][ T9679] syzkaller0: entered allmulticast mode [ 199.214776][ T9679] tipc: Resetting bearer [ 199.223428][ T9678] tipc: Resetting bearer [ 199.239003][ T9678] tipc: Disabling bearer [ 199.430653][ T9696] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1166'. [ 199.434641][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.656072][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 199.791598][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.151789][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 200.614050][ T12] bridge_slave_1: left allmulticast mode [ 200.638596][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 200.641078][ T12] bridge_slave_1: left promiscuous mode [ 200.652887][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 200.662425][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 200.663945][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 200.693273][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 200.703903][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 200.704529][ T12] bridge_slave_0: left allmulticast mode [ 200.725526][ T12] bridge_slave_0: left promiscuous mode [ 200.745176][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 200.767022][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 200.776224][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 200.785181][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 200.795223][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 200.806166][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 201.275787][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 201.287629][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 201.299030][ T12] bond0 (unregistering): Released all slaves [ 201.314915][ T9703] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1167'. [ 201.858439][ T9736] netlink: 96 bytes leftover after parsing attributes in process `syz.2.1179'. [ 201.947833][ T9740] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1180'. [ 202.063929][ T9745] (unnamed net_device) (uninitialized): option tlb_dynamic_lb: mode dependency failed, not supported in mode balance-rr(0) [ 202.177729][ T9748] Bluetooth: MGMT ver 1.23 [ 202.196368][ T9748] sch_tbf: burst 4398 is lower than device lo mtu (65550) ! [ 202.223214][ T9748] netlink: 'syz.2.1183': attribute type 39 has an invalid length. [ 202.705504][ T9763] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1185'. [ 202.801028][ T51] Bluetooth: hci0: command tx timeout [ 202.885691][ T51] Bluetooth: hci4: command tx timeout [ 202.892005][ T12] hsr_slave_0: left promiscuous mode [ 202.913729][ T12] hsr_slave_1: left promiscuous mode [ 202.928472][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 202.937964][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 202.946297][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 202.953862][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 202.978427][ T12] veth1_macvtap: left promiscuous mode [ 202.984275][ T12] veth0_macvtap: left promiscuous mode [ 202.990539][ T12] veth1_vlan: left promiscuous mode [ 202.995956][ T12] veth0_vlan: left promiscuous mode [ 203.386529][ T12] team0 (unregistering): Port device team_slave_1 removed [ 203.508281][ T12] team0 (unregistering): Port device team_slave_0 removed [ 203.757302][ T9778] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1190'. [ 203.767355][ T9778] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1190'. [ 203.994404][ T9720] chnl_net:caif_netlink_parms(): no params data found [ 204.010572][ T9775] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1189'. [ 204.030468][ T9775] netlink: 64 bytes leftover after parsing attributes in process `syz.1.1189'. [ 204.253083][ T9793] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1193'. [ 204.266725][ T9793] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 204.297118][ T9787] syzkaller0: entered promiscuous mode [ 204.309573][ T9787] syzkaller0: entered allmulticast mode [ 204.375409][ T9797] netlink: 'syz.3.1194': attribute type 30 has an invalid length. [ 204.387138][ T9798] netlink: 248 bytes leftover after parsing attributes in process `syz.2.1192'. [ 204.415477][ T9798] NCSI netlink: No device for ifindex 0 [ 204.465817][ T9797] (unnamed net_device) (uninitialized): option arp_missed_max: invalid value (0) [ 204.477064][ T9797] (unnamed net_device) (uninitialized): option arp_missed_max: allowed values 1 - 255 [ 204.557173][ T9720] bridge0: port 1(bridge_slave_0) entered blocking state [ 204.565194][ T9720] bridge0: port 1(bridge_slave_0) entered disabled state [ 204.578593][ T9720] bridge_slave_0: entered allmulticast mode [ 204.614266][ T9720] bridge_slave_0: entered promiscuous mode [ 204.682568][ T9720] bridge0: port 2(bridge_slave_1) entered blocking state [ 204.694718][ T9720] bridge0: port 2(bridge_slave_1) entered disabled state [ 204.703483][ T9810] netlink: 'syz.3.1197': attribute type 11 has an invalid length. [ 204.710534][ T9720] bridge_slave_1: entered allmulticast mode [ 204.719935][ T9720] bridge_slave_1: entered promiscuous mode [ 204.726253][ T9810] netlink: 'syz.3.1197': attribute type 11 has an invalid length. [ 204.736898][ T9810] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1197'. [ 204.879533][ T51] Bluetooth: hci0: command tx timeout [ 204.881272][ T9720] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 204.898288][ T9720] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 204.965581][ T51] Bluetooth: hci4: command tx timeout [ 205.055905][ T9822] netlink: 'syz.1.1201': attribute type 1 has an invalid length. [ 205.086726][ T9720] team0: Port device team_slave_0 added [ 205.139644][ T9720] team0: Port device team_slave_1 added [ 205.166549][ T9713] chnl_net:caif_netlink_parms(): no params data found [ 205.237053][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.274466][ T9720] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 205.295390][ T9720] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.326431][ T9720] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 205.375134][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.400740][ T9720] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 205.415594][ T9720] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 205.446355][ T9720] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 205.517335][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.565215][ T9837] netlink: 'syz.1.1205': attribute type 9 has an invalid length. [ 205.648076][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 205.653462][ T9840] xt_recent: Unsupported userspace flags (00000061) [ 205.803668][ T9720] hsr_slave_0: entered promiscuous mode [ 205.810643][ T9720] hsr_slave_1: entered promiscuous mode [ 205.890212][ T9713] bridge0: port 1(bridge_slave_0) entered blocking state [ 205.897680][ T9713] bridge0: port 1(bridge_slave_0) entered disabled state [ 205.906009][ T9713] bridge_slave_0: entered allmulticast mode [ 205.914342][ T9713] bridge_slave_0: entered promiscuous mode [ 205.932401][ T9713] bridge0: port 2(bridge_slave_1) entered blocking state [ 205.962485][ T9713] bridge0: port 2(bridge_slave_1) entered disabled state [ 205.989980][ T9713] bridge_slave_1: entered allmulticast mode [ 205.997738][ T9713] bridge_slave_1: entered promiscuous mode [ 206.218260][ T9857] veth0_vlan: mtu greater than device maximum [ 206.316083][ T9868] netlink: 'syz.3.1215': attribute type 2 has an invalid length. [ 206.394158][ T9713] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 206.426844][ T9713] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 206.463143][ T12] bridge_slave_1: left allmulticast mode [ 206.470519][ T12] bridge_slave_1: left promiscuous mode [ 206.476349][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 206.488193][ T12] bridge_slave_0: left allmulticast mode [ 206.507745][ T12] bridge_slave_0: left promiscuous mode [ 206.526159][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 206.877261][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 206.888457][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 206.898742][ T12] bond0 (unregistering): Released all slaves [ 206.959500][ T51] Bluetooth: hci0: command tx timeout [ 206.977112][ T9713] team0: Port device team_slave_0 added [ 207.027184][ T9713] team0: Port device team_slave_1 added [ 207.046278][ T51] Bluetooth: hci4: command tx timeout [ 207.238410][ T9713] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 207.248976][ T9713] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.276871][ T9713] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 207.288314][ T9884] __nla_validate_parse: 4 callbacks suppressed [ 207.288330][ T9884] netlink: 96 bytes leftover after parsing attributes in process `syz.3.1220'. [ 207.382493][ T9713] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 207.400426][ T9713] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 207.434409][ T9713] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 207.658915][ T9713] hsr_slave_0: entered promiscuous mode [ 207.681108][ T9713] hsr_slave_1: entered promiscuous mode [ 207.687523][ T9713] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 207.709612][ T9713] Cannot create hsr debugfs directory [ 208.106872][ T9906] netlink: 'syz.3.1226': attribute type 8 has an invalid length. [ 208.331806][ T9909] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1226'. [ 208.351509][ T9909] netlink: 10 bytes leftover after parsing attributes in process `syz.3.1226'. [ 208.374771][ T12] hsr_slave_0: left promiscuous mode [ 208.395029][ T12] hsr_slave_1: left promiscuous mode [ 208.406035][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 208.432603][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 208.452042][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 208.473328][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 208.518536][ T12] veth1_macvtap: left promiscuous mode [ 208.546334][ T12] veth0_macvtap: left promiscuous mode [ 208.557075][ T12] veth1_vlan: left promiscuous mode [ 208.586585][ T12] veth0_vlan: left promiscuous mode [ 208.985370][ T12] team0 (unregistering): Port device team_slave_1 removed [ 209.021004][ T12] team0 (unregistering): Port device team_slave_0 removed [ 209.039485][ T51] Bluetooth: hci0: command tx timeout [ 209.123950][ T51] Bluetooth: hci4: command tx timeout [ 209.673136][ T9934] hsr_slave_0: hsr_addr_subst_dest: Unknown node [ 209.679976][ T9934] hsr_slave_1: hsr_addr_subst_dest: Unknown node [ 209.753223][ T9720] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 209.872845][ T9720] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 209.920329][ T9720] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 209.937046][ T9720] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 210.205073][ T9720] 8021q: adding VLAN 0 to HW filter on device bond0 [ 210.274082][ T9720] 8021q: adding VLAN 0 to HW filter on device team0 [ 210.349363][ T3488] bridge0: port 1(bridge_slave_0) entered blocking state [ 210.356613][ T3488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 210.444075][ T9713] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 210.514674][ T3488] bridge0: port 2(bridge_slave_1) entered blocking state [ 210.521943][ T3488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 210.558825][ T9713] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 210.617648][ T9713] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 210.638661][ T9713] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 210.647778][ T9959] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1241'. [ 210.683681][ T9960] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1240'. [ 210.828542][ T9720] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 210.854932][ T9970] x_tables: unsorted entry at hook 2 [ 211.016566][ T9713] 8021q: adding VLAN 0 to HW filter on device bond0 [ 211.045615][ T9982] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1245'. [ 211.065166][ T9982] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1245'. [ 211.083462][ T9713] 8021q: adding VLAN 0 to HW filter on device team0 [ 211.102381][ T9985] openvswitch: netlink: Missing key (keys=40, expected=80) [ 211.113529][ T3488] bridge0: port 1(bridge_slave_0) entered blocking state [ 211.120755][ T3488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 211.182537][ T3488] bridge0: port 2(bridge_slave_1) entered blocking state [ 211.189774][ T3488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 211.441023][ T9720] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 211.500557][ T9997] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 211.679971][ T5150] Bluetooth: hci1: command 0x0406 tx timeout [ 211.686872][ T5150] Bluetooth: hci3: command 0x0406 tx timeout [ 212.023781][ T9713] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 212.186224][ T9713] veth0_vlan: entered promiscuous mode [ 212.217850][ T9713] veth1_vlan: entered promiscuous mode [ 212.358806][ T9713] veth0_macvtap: entered promiscuous mode [ 212.388912][ T9720] veth0_vlan: entered promiscuous mode [ 212.405995][ T9713] veth1_macvtap: entered promiscuous mode [ 212.453147][ T9720] veth1_vlan: entered promiscuous mode [ 212.476493][ T9713] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.525559][ T9713] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.552324][ T9713] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.562863][ T9713] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.579916][ T9713] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.588855][ T9713] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.629982][T10034] netlink: 64985 bytes leftover after parsing attributes in process `syz.2.1258'. [ 212.645695][T10034] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1258'. [ 212.657574][ T9720] veth0_macvtap: entered promiscuous mode [ 212.685713][ T9720] veth1_macvtap: entered promiscuous mode [ 212.745107][ T9720] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 212.788688][ T9720] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 212.823035][ T9720] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.834444][ T9720] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.843746][ T9720] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.852958][ T9720] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 212.885190][ T3488] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 212.927299][ T3488] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.094876][ T3488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.128877][ T3488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.263092][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.306432][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.426319][ T3488] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 213.449418][ T3488] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 213.928878][ T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 213.947719][T10066] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1268'. [ 213.959686][T10066] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1268'. [ 214.044039][ T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.133105][ T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.226937][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 214.433397][ T49] bridge_slave_1: left allmulticast mode [ 214.439111][ T49] bridge_slave_1: left promiscuous mode [ 214.452170][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 214.468681][ T49] bridge_slave_0: left allmulticast mode [ 214.475001][ T49] bridge_slave_0: left promiscuous mode [ 214.486980][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 214.736572][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 214.752909][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 214.761129][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 214.772514][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 214.781738][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 214.905902][T10078] netlink: 'syz.2.1269': attribute type 10 has an invalid length. [ 214.997273][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 215.027233][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 215.045998][ T49] bond0 (unregistering): Released all slaves [ 215.074225][T10078] tipc: Resetting bearer [ 215.096401][T10078] tipc: Resetting bearer [ 215.111484][T10078] 8021q: adding VLAN 0 to HW filter on device team0 [ 215.140611][T10078] bond0: (slave team0): Enslaving as an active interface with an up link [ 215.308424][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 215.342912][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 215.356593][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 215.379995][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 215.396504][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 215.504428][T10093] netlink: 9 bytes leftover after parsing attributes in process `syz.2.1274'. [ 215.515952][T10093] 0ªX¹¦D: entered promiscuous mode [ 215.521864][T10093] 0ªX¹¦D: left allmulticast mode [ 215.535291][T10093] netlink: 5 bytes leftover after parsing attributes in process `syz.2.1274'. [ 215.555590][T10093] 1ªX¹¦D: renamed from 30ªX¹¦D [ 215.574631][T10093] 1ªX¹¦D: left promiscuous mode [ 215.583637][T10093] 1ªX¹¦D: entered allmulticast mode [ 215.594748][T10093] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 215.761728][T10098] netlink: 44 bytes leftover after parsing attributes in process `syz.2.1276'. [ 216.265593][ T49] hsr_slave_0: left promiscuous mode [ 216.280641][T10110] RDS: rds_bind could not find a transport for fc01::1, load rds_tcp or rds_rdma? [ 216.309800][ T49] hsr_slave_1: left promiscuous mode [ 216.325309][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 216.334727][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 216.370322][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 216.396669][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 216.462202][ T49] veth1_macvtap: left promiscuous mode [ 216.478027][ T49] veth0_macvtap: left promiscuous mode [ 216.498429][ T49] veth1_vlan: left promiscuous mode [ 216.503969][ T49] veth0_vlan: left promiscuous mode [ 216.807074][T10119] can: request_module (can-proto-0) failed. [ 216.879991][ T5840] Bluetooth: hci0: command tx timeout [ 217.126402][ T49] team0 (unregistering): Port device team_slave_1 removed [ 217.163059][ T49] team0 (unregistering): Port device team_slave_0 removed [ 217.443354][ T5840] Bluetooth: hci4: command tx timeout [ 217.566797][T10130] sch_tbf: burst 32855 is lower than device lo mtu (65550) ! [ 217.898085][T10137] netlink: 'syz.2.1285': attribute type 34 has an invalid length. [ 217.913502][T10071] chnl_net:caif_netlink_parms(): no params data found [ 218.032540][T10087] chnl_net:caif_netlink_parms(): no params data found [ 218.175108][T10149] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1288'. [ 218.225783][T10071] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.233489][T10071] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.243274][T10071] bridge_slave_0: entered allmulticast mode [ 218.250665][T10071] bridge_slave_0: entered promiscuous mode [ 218.268863][T10071] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.276295][T10071] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.283988][T10071] bridge_slave_1: entered allmulticast mode [ 218.292648][T10071] bridge_slave_1: entered promiscuous mode [ 218.352859][T10087] bridge0: port 1(bridge_slave_0) entered blocking state [ 218.363774][T10087] bridge0: port 1(bridge_slave_0) entered disabled state [ 218.371884][T10087] bridge_slave_0: entered allmulticast mode [ 218.379296][T10087] bridge_slave_0: entered promiscuous mode [ 218.390468][T10071] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.402434][T10087] bridge0: port 2(bridge_slave_1) entered blocking state [ 218.412218][T10087] bridge0: port 2(bridge_slave_1) entered disabled state [ 218.419908][T10087] bridge_slave_1: entered allmulticast mode [ 218.427286][T10087] bridge_slave_1: entered promiscuous mode [ 218.452017][T10071] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.512821][T10087] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 218.525523][T10087] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 218.539626][T10071] team0: Port device team_slave_0 added [ 218.567021][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.586860][T10071] team0: Port device team_slave_1 added [ 218.655988][T10087] team0: Port device team_slave_0 added [ 218.667865][T10087] team0: Port device team_slave_1 added [ 218.689032][T10071] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.696214][T10071] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.723041][T10071] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.735861][T10071] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.746308][T10071] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.773061][T10071] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.813847][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.850848][T10087] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 218.857866][T10087] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.887310][T10087] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 218.901772][T10087] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 218.909805][T10087] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 218.935901][T10087] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 218.960953][ T5840] Bluetooth: hci0: command tx timeout [ 219.001456][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.021749][T10156] netlink: 'syz.1.1290': attribute type 10 has an invalid length. [ 219.075101][T10071] hsr_slave_0: entered promiscuous mode [ 219.081932][T10071] hsr_slave_1: entered promiscuous mode [ 219.096077][T10156] ip6tnl1: entered promiscuous mode [ 219.102646][T10156] ip6tnl1: entered allmulticast mode [ 219.147275][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 219.271686][T10087] hsr_slave_0: entered promiscuous mode [ 219.290049][T10087] hsr_slave_1: entered promiscuous mode [ 219.309712][T10087] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 219.317515][T10087] Cannot create hsr debugfs directory [ 219.525840][ T5840] Bluetooth: hci4: command tx timeout [ 219.961961][ T49] bridge_slave_1: left allmulticast mode [ 219.967687][ T49] bridge_slave_1: left promiscuous mode [ 219.974533][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.994331][ T49] bridge_slave_0: left allmulticast mode [ 220.007787][ T49] bridge_slave_0: left promiscuous mode [ 220.029580][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 220.506295][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 220.519147][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 220.536195][ T49] bond0 (unregistering): Released all slaves [ 221.026798][T10203] netlink: 'syz.1.1306': attribute type 4 has an invalid length. [ 221.039575][ T5840] Bluetooth: hci0: command tx timeout [ 221.213253][T10207] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1308'. [ 221.252272][ T49] hsr_slave_0: left promiscuous mode [ 221.262458][ T49] hsr_slave_1: left promiscuous mode [ 221.268424][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 221.277362][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 221.285735][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 221.293205][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 221.314585][ T49] veth1_macvtap: left promiscuous mode [ 221.320201][ T49] veth0_macvtap: left promiscuous mode [ 221.325801][ T49] veth1_vlan: left promiscuous mode [ 221.331322][ T49] veth0_vlan: left promiscuous mode [ 221.599699][ T5840] Bluetooth: hci4: command tx timeout [ 221.725395][ T49] team0 (unregistering): Port device team_slave_1 removed [ 221.768746][ T49] team0 (unregistering): Port device team_slave_0 removed [ 222.315692][T10212] netlink: 212376 bytes leftover after parsing attributes in process `syz.1.1311'. [ 222.503883][T10221] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1313'. [ 222.550415][T10221] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1313'. [ 222.643498][T10229] openvswitch: netlink: Actions may not be safe on all matching packets [ 222.652737][T10228] netlink: 100 bytes leftover after parsing attributes in process `syz.2.1315'. [ 222.668675][T10221] : entered promiscuous mode [ 222.697684][T10071] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 222.750744][T10071] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 222.773571][T10071] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 222.826712][T10071] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 222.933274][T10087] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 222.973926][T10087] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 222.993710][T10087] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 223.017524][T10087] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 223.119739][ T5840] Bluetooth: hci0: command tx timeout [ 223.119943][T10071] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.178214][T10071] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.216804][ T49] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.224022][ T49] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.251723][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.258926][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.334852][T10087] 8021q: adding VLAN 0 to HW filter on device bond0 [ 223.387584][T10087] 8021q: adding VLAN 0 to HW filter on device team0 [ 223.428142][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 223.435337][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 223.472459][T10258] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1321'. [ 223.500414][ T1004] bridge0: port 2(bridge_slave_1) entered blocking state [ 223.507657][ T1004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 223.508543][T10260] netlink: 'syz.2.1322': attribute type 1 has an invalid length. [ 223.538063][T10258] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1321'. [ 223.612742][T10264] netlink: 60 bytes leftover after parsing attributes in process `syz.2.1322'. [ 223.612776][T10260] bond2 (unregistering): Released all slaves [ 223.678802][T10266] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1322'. [ 223.692896][ T5840] Bluetooth: hci4: command tx timeout [ 223.859650][T10269] netlink: 104 bytes leftover after parsing attributes in process `syz.3.1323'. [ 224.069119][T10071] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.527241][T10087] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 224.689069][T10087] veth0_vlan: entered promiscuous mode [ 224.865508][T10087] veth1_vlan: entered promiscuous mode [ 224.978774][T10071] veth0_vlan: entered promiscuous mode [ 225.005446][T10087] veth0_macvtap: entered promiscuous mode [ 225.050720][T10087] veth1_macvtap: entered promiscuous mode [ 225.065340][T10071] veth1_vlan: entered promiscuous mode [ 225.074537][T10317] Bluetooth: MGMT ver 1.23 [ 225.102363][T10087] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.136225][T10087] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.202090][T10071] veth0_macvtap: entered promiscuous mode [ 225.226407][T10087] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.240910][T10087] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.258855][T10087] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.268843][T10087] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.296317][T10071] veth1_macvtap: entered promiscuous mode [ 225.489148][T10071] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.507968][T10071] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.510323][T10322] block nbd0: server does not support multiple connections per device. [ 225.527640][T10322] block nbd0: shutting down sockets [ 225.539046][T10071] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.559029][T10071] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.582414][T10071] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.609240][T10071] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.758521][ T1004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.815732][ T1004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 225.902992][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 225.924672][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.029288][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.048635][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.082220][T10343] netlink: 'syz.3.1348': attribute type 39 has an invalid length. [ 226.118797][T10343] netlink: 168 bytes leftover after parsing attributes in process `syz.3.1348'. [ 226.130154][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.140699][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.465577][ T12] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.651694][ T12] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.755358][ T12] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.866533][ T12] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 226.971485][T10362] sctp: [Deprecated]: syz.2.1353 (pid 10362) Use of int in max_burst socket option. [ 226.971485][T10362] Use struct sctp_assoc_value instead [ 227.247640][ T51] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 227.257012][ T51] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 227.266182][ T51] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 227.274931][ T51] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 227.283473][ T51] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 227.420185][ T12] bridge_slave_1: left allmulticast mode [ 227.425900][ T12] bridge_slave_1: left promiscuous mode [ 227.433945][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 227.453313][ T12] bridge_slave_0: left allmulticast mode [ 227.459006][ T12] bridge_slave_0: left promiscuous mode [ 227.465694][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 227.588358][T10371] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1357'. [ 228.125820][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 228.135075][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 228.152921][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 228.173586][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 228.187829][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 228.273224][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 228.284643][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 228.297089][ T12] bond0 (unregistering): Released all slaves [ 228.446026][T10388] tipc: Resetting bearer [ 228.586522][T10388] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 228.599286][T10388] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 228.648763][T10388] netdevsim netdevsim2 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.657744][T10388] netdevsim netdevsim2 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.668213][T10388] netdevsim netdevsim2 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.677224][T10388] netdevsim netdevsim2 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.815731][T10399] bridge0: port 3(gretap0) entered blocking state [ 228.823005][T10399] bridge0: port 3(gretap0) entered disabled state [ 228.830404][T10399] gretap0: entered allmulticast mode [ 228.838580][T10399] gretap0: entered promiscuous mode [ 229.287133][T10366] chnl_net:caif_netlink_parms(): no params data found [ 229.362410][ T51] Bluetooth: hci0: command tx timeout [ 229.584592][T10366] bridge0: port 1(bridge_slave_0) entered blocking state [ 229.584630][T10429] IPVS: length: 134 != 8 [ 229.599722][T10366] bridge0: port 1(bridge_slave_0) entered disabled state [ 229.620144][T10366] bridge_slave_0: entered allmulticast mode [ 229.635327][T10366] bridge_slave_0: entered promiscuous mode [ 229.815741][T10366] bridge0: port 2(bridge_slave_1) entered blocking state [ 229.823398][T10366] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.831648][T10366] bridge_slave_1: entered allmulticast mode [ 229.886415][T10366] bridge_slave_1: entered promiscuous mode [ 230.047084][ T12] hsr_slave_0: left promiscuous mode [ 230.053254][ T12] hsr_slave_1: left promiscuous mode [ 230.059578][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 230.067726][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 230.076299][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 230.084786][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 230.106622][ T12] veth1_macvtap: left promiscuous mode [ 230.112428][ T12] veth0_macvtap: left promiscuous mode [ 230.118114][ T12] veth1_vlan: left promiscuous mode [ 230.126581][ T12] veth0_vlan: left promiscuous mode [ 230.249643][ T51] Bluetooth: hci4: command tx timeout [ 230.607762][T10451] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1376'. [ 230.661068][ T12] team0 (unregistering): Port device team_slave_1 removed [ 230.698655][ T12] team0 (unregistering): Port device team_slave_0 removed [ 231.062358][T10442] tipc: Enabling of bearer rejected, media not registered [ 231.102462][T10366] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.161498][T10455] netlink: 'syz.1.1377': attribute type 1 has an invalid length. [ 231.249755][T10459] netlink: 'syz.1.1377': attribute type 1 has an invalid length. [ 231.264838][T10366] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.380780][T10366] team0: Port device team_slave_0 added [ 231.421491][T10366] team0: Port device team_slave_1 added [ 231.439758][ T51] Bluetooth: hci0: command tx timeout [ 231.494391][T10470] netlink: 'syz.1.1380': attribute type 1 has an invalid length. [ 231.502988][T10470] netlink: 'syz.1.1380': attribute type 1 has an invalid length. [ 231.536026][T10366] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 231.548122][T10366] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.607357][T10366] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 231.659584][T10366] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 231.683396][T10366] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 231.745711][T10366] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 231.961039][T10366] hsr_slave_0: entered promiscuous mode [ 231.974573][T10366] hsr_slave_1: entered promiscuous mode [ 231.982970][T10366] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 231.997322][T10366] Cannot create hsr debugfs directory [ 232.253196][ T12] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.319642][ T51] Bluetooth: hci4: command tx timeout [ 232.351255][T10390] chnl_net:caif_netlink_parms(): no params data found [ 232.403955][ T12] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.528251][ T12] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.555252][T10503] netlink: 'syz.1.1387': attribute type 10 has an invalid length. [ 232.595514][T10504] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1388'. [ 232.690493][T10509] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1389'. [ 232.736026][ T12] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 232.801932][T10512] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1390'. [ 232.858214][T10512] netlink: 244 bytes leftover after parsing attributes in process `syz.2.1390'. [ 232.917580][T10517] netlink: 'syz.3.1391': attribute type 1 has an invalid length. [ 232.925557][T10517] netlink: 224 bytes leftover after parsing attributes in process `syz.3.1391'. [ 232.936257][T10517] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1391'. [ 233.010195][T10390] bridge0: port 1(bridge_slave_0) entered blocking state [ 233.027899][T10390] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.038483][T10390] bridge_slave_0: entered allmulticast mode [ 233.065847][T10390] bridge_slave_0: entered promiscuous mode [ 233.098296][T10390] bridge0: port 2(bridge_slave_1) entered blocking state [ 233.114318][T10390] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.122538][T10390] bridge_slave_1: entered allmulticast mode [ 233.133130][T10390] bridge_slave_1: entered promiscuous mode [ 233.316526][T10390] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 233.330851][T10390] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 233.529872][ T51] Bluetooth: hci0: command tx timeout [ 233.642861][T10390] team0: Port device team_slave_0 added [ 233.658547][T10390] team0: Port device team_slave_1 added [ 233.827463][ T12] bridge_slave_1: left allmulticast mode [ 233.833652][ T12] bridge_slave_1: left promiscuous mode [ 233.843415][ T12] bridge0: port 2(bridge_slave_1) entered disabled state [ 233.855212][ T12] bridge_slave_0: left allmulticast mode [ 233.861259][ T12] bridge_slave_0: left promiscuous mode [ 233.867046][ T12] bridge0: port 1(bridge_slave_0) entered disabled state [ 233.937410][T10562] netlink: 24 bytes leftover after parsing attributes in process `syz.3.1402'. [ 234.233229][ T12] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 234.245194][ T12] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 234.255707][ T12] bond0 (unregistering): Released all slaves [ 234.353055][T10390] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 234.362098][T10390] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.388892][T10390] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 234.400176][ T51] Bluetooth: hci4: command tx timeout [ 234.431748][T10390] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 234.438757][T10390] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 234.465656][T10390] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 234.601411][T10390] hsr_slave_0: entered promiscuous mode [ 234.608088][T10390] hsr_slave_1: entered promiscuous mode [ 234.618415][T10390] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 234.643335][T10390] Cannot create hsr debugfs directory [ 234.893033][T10576] netlink: 4 bytes leftover after parsing attributes in process `syz.3.1406'. [ 234.919245][T10574] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1405'. [ 234.998968][T10580] 8021q: VLANs not supported on xfrm0 [ 235.089593][T10366] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 235.104486][T10366] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 235.171524][T10366] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 235.171740][T10573] mac80211_hwsim: wmediumd released netlink socket, switching to perfect channel medium [ 235.198934][ T12] hsr_slave_0: left promiscuous mode [ 235.208610][ T12] hsr_slave_1: left promiscuous mode [ 235.215158][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 235.223346][ T12] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 235.231901][ T12] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 235.240691][ T12] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 235.260774][ T12] veth1_macvtap: left promiscuous mode [ 235.266471][ T12] veth0_macvtap: left promiscuous mode [ 235.273391][ T12] veth1_vlan: left promiscuous mode [ 235.278770][ T12] veth0_vlan: left promiscuous mode [ 235.609589][ T51] Bluetooth: hci0: command tx timeout [ 235.648887][ T12] team0 (unregistering): Port device team_slave_1 removed [ 235.684850][ T12] team0 (unregistering): Port device team_slave_0 removed [ 235.786606][T10594] __nla_validate_parse: 1 callbacks suppressed [ 235.786627][T10594] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1409'. [ 236.068505][T10366] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 236.241709][T10605] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1411'. [ 236.252955][T10605] netlink: 14 bytes leftover after parsing attributes in process `syz.1.1411'. [ 236.378918][T10609] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1413'. [ 236.480247][ T51] Bluetooth: hci4: command tx timeout [ 236.526606][T10614] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1414'. [ 236.695477][T10616] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1415'. [ 236.744569][T10366] 8021q: adding VLAN 0 to HW filter on device bond0 [ 236.835101][T10366] 8021q: adding VLAN 0 to HW filter on device team0 [ 236.853741][ T1004] bridge0: port 1(bridge_slave_0) entered blocking state [ 236.860981][ T1004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 236.882907][ T1004] bridge0: port 2(bridge_slave_1) entered blocking state [ 236.890170][ T1004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 237.054161][T10366] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 237.284124][T10390] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 237.345266][T10390] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 237.372507][T10390] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 237.387349][T10390] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 237.501628][T10366] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 237.559089][T10650] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1424'. [ 237.648598][T10366] veth0_vlan: entered promiscuous mode [ 237.715127][T10366] veth1_vlan: entered promiscuous mode [ 237.737683][T10390] 8021q: adding VLAN 0 to HW filter on device bond0 [ 237.792812][T10366] veth0_macvtap: entered promiscuous mode [ 237.836903][T10656] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1427'. [ 237.865738][T10366] veth1_macvtap: entered promiscuous mode [ 237.893909][T10390] 8021q: adding VLAN 0 to HW filter on device team0 [ 237.934539][ T13] bridge0: port 1(bridge_slave_0) entered blocking state [ 237.941779][ T13] bridge0: port 1(bridge_slave_0) entered forwarding state [ 238.004968][T10366] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 238.024327][T10659] netlink: 32 bytes leftover after parsing attributes in process `syz.2.1428'. [ 238.025258][ T13] bridge0: port 2(bridge_slave_1) entered blocking state [ 238.040528][ T13] bridge0: port 2(bridge_slave_1) entered forwarding state [ 238.049210][T10660] netlink: 164 bytes leftover after parsing attributes in process `syz.2.1428'. [ 238.074444][T10366] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 238.115121][T10366] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.127123][T10366] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.136795][T10366] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.151242][T10366] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 238.398245][ T63] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.437294][ T63] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.505849][ T13] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 238.524504][ T13] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 238.616319][T10677] netlink: 'syz.1.1434': attribute type 4 has an invalid length. [ 238.858759][T10390] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 239.227341][ T1004] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.487676][T10390] veth0_vlan: entered promiscuous mode [ 239.527007][ T1004] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.551305][T10390] veth1_vlan: entered promiscuous mode [ 239.579078][T10390] veth0_macvtap: entered promiscuous mode [ 239.591561][T10390] veth1_macvtap: entered promiscuous mode [ 239.613914][T10390] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 239.630356][T10390] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 239.643679][T10390] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.655091][T10390] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.664831][T10390] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.673776][T10390] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 239.744383][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.761777][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.790488][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 239.798938][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 239.831992][ T1004] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.007173][ T1004] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 240.135060][ T1004] bridge_slave_1: left allmulticast mode [ 240.140974][ T1004] bridge_slave_1: left promiscuous mode [ 240.150246][ T1004] bridge0: port 2(bridge_slave_1) entered disabled state [ 240.196055][ T1004] bridge_slave_0: left allmulticast mode [ 240.207940][ T1004] bridge_slave_0: left promiscuous mode [ 240.214467][ T1004] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.607727][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 240.617636][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 240.626913][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 240.639810][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 240.649055][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 240.778219][ T1004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.790823][ T1004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.801712][ T1004] bond0 (unregistering): Released all slaves [ 241.021079][T10720] __nla_validate_parse: 4 callbacks suppressed [ 241.021096][T10720] netlink: 212324 bytes leftover after parsing attributes in process `syz.1.1444'. [ 241.582803][ T1004] hsr_slave_0: left promiscuous mode [ 241.588678][ T1004] hsr_slave_1: left promiscuous mode [ 241.595015][ T1004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.603191][ T1004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.611214][ T1004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.618624][ T1004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 241.639989][ T1004] veth1_macvtap: left promiscuous mode [ 241.645541][ T1004] veth0_macvtap: left promiscuous mode [ 241.651696][ T1004] veth1_vlan: left promiscuous mode [ 241.657031][ T1004] veth0_vlan: left promiscuous mode [ 242.016604][ T1004] team0 (unregistering): Port device team_slave_1 removed [ 242.054515][ T1004] team0 (unregistering): Port device team_slave_0 removed [ 242.463065][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 242.477350][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 242.492778][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 242.501152][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 242.526196][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 242.720853][ T51] Bluetooth: hci0: command tx timeout [ 242.754688][T10740] tun0: tun_chr_ioctl cmd 1074025675 [ 242.779509][T10740] tun0: persist disabled [ 242.863314][T10717] chnl_net:caif_netlink_parms(): no params data found [ 243.029021][T10755] netlink: 'syz.2.1452': attribute type 2 has an invalid length. [ 243.069607][T10755] netlink: 1184 bytes leftover after parsing attributes in process `syz.2.1452'. [ 243.225615][T10717] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.234500][T10717] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.242401][T10717] bridge_slave_0: entered allmulticast mode [ 243.251166][T10717] bridge_slave_0: entered promiscuous mode [ 243.267763][T10717] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.294658][T10717] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.308966][T10717] bridge_slave_1: entered allmulticast mode [ 243.324129][T10717] bridge_slave_1: entered promiscuous mode [ 243.462545][T10717] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 243.512846][T10717] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 243.647671][T10774] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1457'. [ 243.648806][T10717] team0: Port device team_slave_0 added [ 243.666391][T10717] team0: Port device team_slave_1 added [ 243.774668][T10717] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 243.786429][T10717] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 243.816033][T10717] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 243.830141][T10781] netlink: 'syz.2.1458': attribute type 29 has an invalid length. [ 243.898678][ T1004] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 243.977901][T10717] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 243.985216][T10717] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.012877][T10717] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.045276][ T1004] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.185094][T10717] hsr_slave_0: entered promiscuous mode [ 244.193494][T10717] hsr_slave_1: entered promiscuous mode [ 244.213779][ T1004] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.275121][T10794] dvmrp0: entered allmulticast mode [ 244.331028][ T1004] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 244.420215][T10803] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1465'. [ 244.522873][T10805] team0: Port device bond0 removed [ 244.558380][T10805] bridge_slave_0: left allmulticast mode [ 244.565810][ T51] Bluetooth: hci4: command tx timeout [ 244.573854][T10805] bridge_slave_0: left promiscuous mode [ 244.580059][T10805] bridge0: port 1(bridge_slave_0) entered disabled state [ 244.593007][T10805] bridge_slave_1: left allmulticast mode [ 244.598746][T10805] bridge_slave_1: left promiscuous mode [ 244.604866][T10805] bridge0: port 2(bridge_slave_1) entered disabled state [ 244.616197][T10805] bond0: (slave bond_slave_0): Releasing backup interface [ 244.625050][T10805] bond0: (slave bond_slave_1): Releasing backup interface [ 244.637215][T10805] team0: Port device team_slave_0 removed [ 244.644654][T10805] team0: Port device team_slave_1 removed [ 244.651507][T10805] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 244.661735][T10805] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 244.728692][T10741] chnl_net:caif_netlink_parms(): no params data found [ 244.801798][ T51] Bluetooth: hci0: command tx timeout [ 244.834656][T10815] xt_policy: too many policy elements [ 245.082848][ T1004] bridge_slave_1: left allmulticast mode [ 245.088553][ T1004] bridge_slave_1: left promiscuous mode [ 245.112405][ T1004] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.125488][ T1004] bridge_slave_0: left allmulticast mode [ 245.139129][ T1004] bridge_slave_0: left promiscuous mode [ 245.145147][ T1004] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.477651][ T1004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 245.488499][ T1004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 245.498770][ T1004] bond0 (unregistering): Released all slaves [ 245.534270][T10823] netlink: 'syz.1.1472': attribute type 10 has an invalid length. [ 245.678819][T10832] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1473'. [ 245.745101][T10741] bridge0: port 1(bridge_slave_0) entered blocking state [ 245.752716][T10741] bridge0: port 1(bridge_slave_0) entered disabled state [ 245.764755][T10741] bridge_slave_0: entered allmulticast mode [ 245.776890][T10741] bridge_slave_0: entered promiscuous mode [ 245.785960][T10741] bridge0: port 2(bridge_slave_1) entered blocking state [ 245.794911][T10741] bridge0: port 2(bridge_slave_1) entered disabled state [ 245.805300][T10741] bridge_slave_1: entered allmulticast mode [ 245.813168][T10741] bridge_slave_1: entered promiscuous mode [ 245.962694][T10741] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 245.985774][T10741] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 246.148626][T10741] team0: Port device team_slave_0 added [ 246.187035][T10741] team0: Port device team_slave_1 added [ 246.307525][T10847] netlink: 28 bytes leftover after parsing attributes in process `syz.2.1477'. [ 246.333223][T10741] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 246.340753][T10741] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.376083][T10741] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 246.388761][T10741] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 246.396059][T10741] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 246.422547][T10741] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 246.460176][ T1004] hsr_slave_0: left promiscuous mode [ 246.520362][ T1004] hsr_slave_1: left promiscuous mode [ 246.526491][ T1004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 246.546048][ T1004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 246.565402][ T1004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 246.579192][ T1004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 246.625904][T10856] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1480'. [ 246.626460][ T1004] veth1_macvtap: left promiscuous mode [ 246.634964][T10856] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1480'. [ 246.645529][ T1004] veth0_macvtap: left promiscuous mode [ 246.652680][ T51] Bluetooth: hci4: command tx timeout [ 246.656903][ T1004] veth1_vlan: left promiscuous mode [ 246.666838][ T1004] veth0_vlan: left promiscuous mode [ 246.881491][ T51] Bluetooth: hci0: command tx timeout [ 247.050038][ T1004] team0 (unregistering): Port device team_slave_1 removed [ 247.088165][ T1004] team0 (unregistering): Port device team_slave_0 removed [ 247.437311][T10854] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1478'. [ 247.756236][T10741] hsr_slave_0: entered promiscuous mode [ 247.773334][T10741] hsr_slave_1: entered promiscuous mode [ 247.780455][T10741] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 247.788042][T10741] Cannot create hsr debugfs directory [ 247.796651][T10717] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 247.839993][T10717] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 247.867852][T10717] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 247.924301][T10717] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 248.116739][T10882] netlink: 'syz.2.1487': attribute type 8 has an invalid length. [ 248.130813][T10883] netlink: 'syz.2.1487': attribute type 8 has an invalid length. [ 248.244661][T10885] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1488'. [ 248.250634][T10717] 8021q: adding VLAN 0 to HW filter on device bond0 [ 248.278639][T10885] vlan0: entered promiscuous mode [ 248.287162][T10885] bridge0: entered promiscuous mode [ 248.360505][T10717] 8021q: adding VLAN 0 to HW filter on device team0 [ 248.434938][T10714] bridge0: port 1(bridge_slave_0) entered blocking state [ 248.442179][T10714] bridge0: port 1(bridge_slave_0) entered forwarding state [ 248.498242][T10714] bridge0: port 2(bridge_slave_1) entered blocking state [ 248.505540][T10714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 248.523349][T10893] netlink: 'syz.2.1489': attribute type 1 has an invalid length. [ 248.534353][T10893] netlink: 172 bytes leftover after parsing attributes in process `syz.2.1489'. [ 248.686848][T10896] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1490'. [ 248.722296][ T51] Bluetooth: hci4: command tx timeout [ 248.925396][T10741] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 248.960108][ T51] Bluetooth: hci0: command tx timeout [ 248.971485][T10741] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 248.987673][T10741] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 249.003334][T10741] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 249.132086][T10717] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 249.211662][T10717] veth0_vlan: entered promiscuous mode [ 249.247630][T10717] veth1_vlan: entered promiscuous mode [ 249.285026][T10741] 8021q: adding VLAN 0 to HW filter on device bond0 [ 249.337262][T10717] veth0_macvtap: entered promiscuous mode [ 249.368484][T10717] veth1_macvtap: entered promiscuous mode [ 249.381018][T10741] 8021q: adding VLAN 0 to HW filter on device team0 [ 249.413238][ T3488] bridge0: port 1(bridge_slave_0) entered blocking state [ 249.420419][ T3488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 249.448955][T10717] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 249.481961][T10714] bridge0: port 2(bridge_slave_1) entered blocking state [ 249.489152][T10714] bridge0: port 2(bridge_slave_1) entered forwarding state [ 249.498828][T10920] x_tables: duplicate underflow at hook 1 [ 249.518682][T10717] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 249.549327][T10717] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.558200][T10717] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.573400][T10717] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.587115][T10717] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 249.832806][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.881442][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.000903][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 250.047567][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 250.454958][T10741] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 250.584475][T10952] netlink: 256 bytes leftover after parsing attributes in process `syz.2.1505'. [ 250.604300][T10952] netlink: 'syz.2.1505': attribute type 9 has an invalid length. [ 250.615514][ T5840] Bluetooth: hci0: unexpected cc 0x0c03 length: 249 > 1 [ 250.625326][ T5840] Bluetooth: hci0: unexpected cc 0x1003 length: 249 > 9 [ 250.639719][ T5840] Bluetooth: hci0: unexpected cc 0x1001 length: 249 > 9 [ 250.649101][ T5840] Bluetooth: hci0: unexpected cc 0x0c23 length: 249 > 4 [ 250.657684][ T5840] Bluetooth: hci0: unexpected cc 0x0c38 length: 249 > 2 [ 250.810349][ T51] Bluetooth: hci4: command tx timeout [ 251.004408][T10960] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1506'. [ 251.031297][T10960] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1506'. [ 251.088715][T10714] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.454799][T10741] veth0_vlan: entered promiscuous mode [ 251.481510][T10741] veth1_vlan: entered promiscuous mode [ 251.559030][T10741] veth0_macvtap: entered promiscuous mode [ 251.603668][T10741] veth1_macvtap: entered promiscuous mode [ 251.642436][T10714] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 251.669983][T10953] chnl_net:caif_netlink_parms(): no params data found [ 251.744422][T10741] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 251.790087][T10953] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.797285][T10953] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.804704][T10953] bridge_slave_0: entered allmulticast mode [ 251.813153][T10953] bridge_slave_0: entered promiscuous mode [ 251.821688][T10953] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.828863][T10953] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.836811][T10953] bridge_slave_1: entered allmulticast mode [ 251.844953][T10953] bridge_slave_1: entered promiscuous mode [ 251.880886][T10741] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 251.910941][T10953] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 251.930833][T10953] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 251.945452][T10741] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.954603][T10741] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.963901][T10741] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 251.972688][T10741] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 252.009112][T10714] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.055151][T10953] team0: Port device team_slave_0 added [ 252.065876][T10953] team0: Port device team_slave_1 added [ 252.088405][T10714] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 252.143449][T10953] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 252.151799][T10953] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.182023][T10953] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 252.236061][T10953] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 252.262766][T10953] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 252.290329][T10974] __nla_validate_parse: 1 callbacks suppressed [ 252.290358][T10974] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1508'. [ 252.316638][T10953] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 252.602527][ T49] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 252.646334][ T49] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 252.677107][T10953] hsr_slave_0: entered promiscuous mode [ 252.684448][T10953] hsr_slave_1: entered promiscuous mode [ 252.693246][T10953] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 252.701718][T10953] Cannot create hsr debugfs directory [ 252.719922][ T51] Bluetooth: hci0: command tx timeout [ 252.778872][ T5840] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 252.787625][ T5840] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 252.801327][ T5840] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 252.826457][ T5840] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 252.846474][ T5840] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 252.942264][T10714] bridge_slave_1: left allmulticast mode [ 252.948276][T10714] bridge_slave_1: left promiscuous mode [ 252.955710][T10714] bridge0: port 2(bridge_slave_1) entered disabled state [ 252.972437][T10989] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1511'. [ 252.982531][T10714] bridge_slave_0: left allmulticast mode [ 252.988293][T10714] bridge_slave_0: left promiscuous mode [ 252.995348][T10714] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.052391][T10992] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1512'. [ 253.327085][T10714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 253.338469][T10714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 253.356551][T10714] bond0 (unregistering): Released all slaves [ 253.459582][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 253.467454][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 253.840216][T10999] netlink: 12 bytes leftover after parsing attributes in process `syz.2.1515'. [ 254.206924][T10953] netdevsim netdevsim5 netdevsim0: renamed from eth0 [ 254.249577][T10953] netdevsim netdevsim5 netdevsim1: renamed from eth1 [ 254.389621][T10953] netdevsim netdevsim5 netdevsim2: renamed from eth2 [ 254.447950][T10953] netdevsim netdevsim5 netdevsim3: renamed from eth3 [ 254.581551][T10714] hsr_slave_0: left promiscuous mode [ 254.587806][T10714] hsr_slave_1: left promiscuous mode [ 254.594435][T10714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 254.601900][T10714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 254.610061][T10714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 254.617493][T10714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 254.637617][T10714] veth1_macvtap: left promiscuous mode [ 254.644583][T10714] veth0_macvtap: left promiscuous mode [ 254.650356][T10714] veth1_vlan: left promiscuous mode [ 254.655665][T10714] veth0_vlan: left promiscuous mode [ 254.801176][ T5840] Bluetooth: hci0: command tx timeout [ 254.882661][ T5840] Bluetooth: hci5: command tx timeout [ 255.031730][T10714] team0 (unregistering): Port device team_slave_1 removed [ 255.065915][T10714] team0 (unregistering): Port device team_slave_0 removed [ 255.612321][T11020] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1518'. [ 255.628953][ T51] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 255.637463][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 255.649652][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 255.658459][ T51] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 255.676071][ T51] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 255.692389][ T1302] ieee802154 phy0 wpan0: encryption failed: -22 [ 255.849508][T11034] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1520'. [ 255.940272][T10984] chnl_net:caif_netlink_parms(): no params data found [ 256.293610][T10984] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.306064][T10984] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.317217][T10984] bridge_slave_0: entered allmulticast mode [ 256.342870][T10984] bridge_slave_0: entered promiscuous mode [ 256.365384][T10953] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.377642][T10984] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.388136][T10984] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.395704][T10984] bridge_slave_1: entered allmulticast mode [ 256.404677][T10984] bridge_slave_1: entered promiscuous mode [ 256.547602][T10714] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.666677][T10984] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 256.681155][T10953] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.708398][T10714] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.726125][T11056] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1527'. [ 256.825548][T10714] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 256.844974][T10984] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 256.880073][ T51] Bluetooth: hci0: command tx timeout [ 256.883858][T11061] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1528'. [ 256.912562][ T1004] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.919761][ T1004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.964177][ T51] Bluetooth: hci5: command tx timeout [ 256.973017][T10984] team0: Port device team_slave_0 added [ 256.995934][T10714] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 257.035252][T10984] team0: Port device team_slave_1 added [ 257.076893][ T1004] bridge0: port 2(bridge_slave_1) entered blocking state [ 257.084149][ T1004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 257.111053][T11064] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1530'. [ 257.136069][T10984] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 257.147920][T10984] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.176277][T10984] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 257.212177][T10984] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 257.219919][T10984] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 257.252226][T10984] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 257.373415][T11069] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1531'. [ 257.384123][T11069] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1531'. [ 257.432709][T10984] hsr_slave_0: entered promiscuous mode [ 257.439112][T10984] hsr_slave_1: entered promiscuous mode [ 257.499153][T11069] 0ªX¹¦D: entered promiscuous mode [ 257.505662][T11069] 0ªX¹¦D: left promiscuous mode [ 257.592598][T11030] chnl_net:caif_netlink_parms(): no params data found [ 257.754588][T11077] xt_TCPMSS: Only works on TCP SYN packets [ 257.764881][ T51] Bluetooth: hci4: command tx timeout [ 257.827479][T10714] bridge_slave_1: left allmulticast mode [ 257.834505][T10714] bridge_slave_1: left promiscuous mode [ 257.841139][T10714] bridge0: port 2(bridge_slave_1) entered disabled state [ 257.851726][T10714] bridge_slave_0: left allmulticast mode [ 257.857401][T10714] bridge_slave_0: left promiscuous mode [ 257.863840][T10714] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.179167][T10714] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 258.190380][T10714] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 258.200885][T10714] bond0 (unregistering): Released all slaves [ 258.234134][T11082] netlink: 81 bytes leftover after parsing attributes in process `syz.1.1534'. [ 258.414079][T11030] bridge0: port 1(bridge_slave_0) entered blocking state [ 258.423822][T11030] bridge0: port 1(bridge_slave_0) entered disabled state [ 258.433373][T11030] bridge_slave_0: entered allmulticast mode [ 258.445972][T11030] bridge_slave_0: entered promiscuous mode [ 258.477972][T11030] bridge0: port 2(bridge_slave_1) entered blocking state [ 258.493201][T11030] bridge0: port 2(bridge_slave_1) entered disabled state [ 258.504031][T11030] bridge_slave_1: entered allmulticast mode [ 258.512458][T11030] bridge_slave_1: entered promiscuous mode [ 258.725233][T11030] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 258.744842][T11030] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 258.961838][ T51] Bluetooth: hci0: command tx timeout [ 258.974513][T11030] team0: Port device team_slave_0 added [ 259.007678][T11030] team0: Port device team_slave_1 added [ 259.038033][T11099] netlink: 'syz.2.1538': attribute type 29 has an invalid length. [ 259.046282][T11099] netlink: 4 bytes leftover after parsing attributes in process `syz.2.1538'. [ 259.049538][ T51] Bluetooth: hci5: command tx timeout [ 259.066441][T11099] xt_addrtype: output interface limitation not valid in PREROUTING and INPUT [ 259.145537][T10953] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 259.245394][T10714] hsr_slave_0: left promiscuous mode [ 259.262399][T10714] hsr_slave_1: left promiscuous mode [ 259.276220][T10714] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 259.304320][T10714] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 259.332971][T10714] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 259.355242][T10714] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 259.406446][T10714] veth1_macvtap: left promiscuous mode [ 259.419421][T10714] veth0_macvtap: left promiscuous mode [ 259.425130][T10714] veth1_vlan: left promiscuous mode [ 259.446025][T10714] veth0_vlan: left promiscuous mode [ 259.842351][ T51] Bluetooth: hci4: command tx timeout [ 260.148618][T10714] team0 (unregistering): Port device team_slave_1 removed [ 260.184215][T10714] team0 (unregistering): Port device team_slave_0 removed [ 260.574212][T11030] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 260.591861][T11030] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.602147][T11111] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1540'. [ 260.627613][T11030] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 260.642122][T11030] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 260.653833][T11030] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 260.686020][T11030] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 260.932429][T11030] hsr_slave_0: entered promiscuous mode [ 260.949642][T11030] hsr_slave_1: entered promiscuous mode [ 260.956296][T11030] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 260.965464][T11030] Cannot create hsr debugfs directory [ 260.994912][T11121] IPVS: Error connecting to the multicast addr [ 261.024353][T10984] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 261.074707][T10984] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 261.113078][T10984] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 261.113684][T11125] netlink: 'syz.1.1544': attribute type 7 has an invalid length. [ 261.127947][ T51] Bluetooth: hci5: command tx timeout [ 261.225847][T10984] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 261.421300][T10953] veth0_vlan: entered promiscuous mode [ 261.515650][T11144] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1549'. [ 261.539421][T11146] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1550'. [ 261.548746][T10953] veth1_vlan: entered promiscuous mode [ 261.722433][T10953] veth0_macvtap: entered promiscuous mode [ 261.788547][T10953] veth1_macvtap: entered promiscuous mode [ 261.799214][T11149] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1551'. [ 261.810645][T10984] 8021q: adding VLAN 0 to HW filter on device bond0 [ 261.833860][T11151] (unnamed net_device) (uninitialized): invalid ARP target 0.0.0.0 specified for addition [ 261.845459][T11151] (unnamed net_device) (uninitialized): option arp_ip_target: invalid value (0) [ 261.912148][T10953] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 261.924298][ T51] Bluetooth: hci4: command tx timeout [ 261.949785][T11152] netlink: 16 bytes leftover after parsing attributes in process `syz.2.1551'. [ 261.961050][T11152] netlink: 8 bytes leftover after parsing attributes in process `syz.2.1551'. [ 262.014093][T10953] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 262.036159][T10984] 8021q: adding VLAN 0 to HW filter on device team0 [ 262.077079][T10953] netdevsim netdevsim5 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.090426][T10953] netdevsim netdevsim5 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.099160][T10953] netdevsim netdevsim5 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.138368][T10953] netdevsim netdevsim5 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 262.159193][ T3488] bridge0: port 1(bridge_slave_0) entered blocking state [ 262.166501][ T3488] bridge0: port 1(bridge_slave_0) entered forwarding state [ 262.176587][ T3488] bridge0: port 2(bridge_slave_1) entered blocking state [ 262.183771][ T3488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 262.390801][ T1004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.398669][ T1004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.447563][T10984] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 262.484768][T11030] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 262.522076][ T49] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 262.530502][T11030] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 262.544734][ T49] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 262.566991][T11030] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 262.605283][T11030] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 262.747882][T11181] __nla_validate_parse: 1 callbacks suppressed [ 262.747901][T11181] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1560'. [ 262.994200][T10984] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 263.024781][T11030] 8021q: adding VLAN 0 to HW filter on device bond0 [ 263.111936][T11030] 8021q: adding VLAN 0 to HW filter on device team0 [ 263.139203][ T1004] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.146417][ T1004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 263.232880][T10984] veth0_vlan: entered promiscuous mode [ 263.247987][ T1004] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.255219][ T1004] bridge0: port 2(bridge_slave_1) entered forwarding state [ 263.288227][T10984] veth1_vlan: entered promiscuous mode [ 263.506578][T10984] veth0_macvtap: entered promiscuous mode [ 263.536727][T10984] veth1_macvtap: entered promiscuous mode [ 263.603159][T11186] infiniband syz0: set down [ 263.607856][T11186] infiniband syz0: added ipvlan1 [ 263.646843][T11186] RDS/IB: syz0: added [ 263.649861][T10984] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 263.651045][T11186] smc: adding ib device syz0 with port count 1 [ 263.675529][T10984] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 263.680229][T11186] smc: ib device syz0 port 1 has pnetid [ 263.700020][T10984] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.708884][T10984] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.709705][T11207] netlink: 'syz.2.1566': attribute type 10 has an invalid length. [ 263.726335][T10984] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.745662][T10984] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 263.837124][T11215] ip6tnl2: entered promiscuous mode [ 263.847098][T11215] ip6tnl2: entered allmulticast mode [ 263.869749][T11207] team0: Device bond0 is already an upper device of the team interface [ 264.000182][ T51] Bluetooth: hci4: command tx timeout [ 264.074393][ T1004] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.089375][ T1004] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.137233][T11030] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 264.272538][ T1004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 264.325651][ T1004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 264.489182][T11230] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1572'. [ 265.061656][ T1004] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.184559][ T1004] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.218681][T11030] veth0_vlan: entered promiscuous mode [ 265.243626][T11030] veth1_vlan: entered promiscuous mode [ 265.324238][T11030] veth0_macvtap: entered promiscuous mode [ 265.336075][T11030] veth1_macvtap: entered promiscuous mode [ 265.367902][T11030] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 265.392049][T11030] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 265.434774][ T1004] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.457767][T11030] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.472607][T11030] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.483301][T11030] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.497693][T11030] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 265.596624][ T1004] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 265.646032][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.655177][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.715939][ T63] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 265.727223][ T63] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 265.880286][ T1004] bridge_slave_1: left allmulticast mode [ 265.890394][ T1004] bridge_slave_1: left promiscuous mode [ 265.896128][ T1004] bridge0: port 2(bridge_slave_1) entered disabled state [ 265.940835][ T1004] bridge_slave_0: left allmulticast mode [ 265.946537][ T1004] bridge_slave_0: left promiscuous mode [ 265.960539][ T1004] bridge0: port 1(bridge_slave_0) entered disabled state [ 266.162781][T11249] netlink: 'syz.2.1577': attribute type 1 has an invalid length. [ 266.568352][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 266.587857][ T5840] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 266.595819][ T5840] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 266.607229][ T1004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 266.618767][ T5840] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 266.628108][ T5840] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 266.636408][ T1004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 266.648596][ T1004] bond0 (unregistering): Released all slaves [ 268.044318][ T1004] hsr_slave_0: left promiscuous mode [ 268.058438][ T1004] hsr_slave_1: left promiscuous mode [ 268.068505][ T1004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 268.076487][ T1004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 268.085957][ T1004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 268.093598][ T1004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 268.112131][ T1004] veth1_macvtap: left promiscuous mode [ 268.117652][ T1004] veth0_macvtap: left promiscuous mode [ 268.123865][ T1004] veth1_vlan: left promiscuous mode [ 268.129157][ T1004] veth0_vlan: left promiscuous mode [ 268.729965][ T51] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 268.738298][ T5150] Bluetooth: hci4: command tx timeout [ 268.744829][ T51] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 268.754624][ T51] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 268.764256][ T51] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 268.778861][ T51] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 268.838867][ T1004] team0 (unregistering): Port device team_slave_1 removed [ 268.877387][ T1004] team0 (unregistering): Port device team_slave_0 removed [ 269.293604][T11278] netlink: 24 bytes leftover after parsing attributes in process `syz.5.1584'. [ 269.719137][T11293] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1589'. [ 269.776094][T11254] chnl_net:caif_netlink_parms(): no params data found [ 270.335361][T11318] netlink: 40 bytes leftover after parsing attributes in process `syz.2.1596'. [ 270.362000][ T1004] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.598198][T11254] bridge0: port 1(bridge_slave_0) entered blocking state [ 270.606869][T11254] bridge0: port 1(bridge_slave_0) entered disabled state [ 270.626614][T11254] bridge_slave_0: entered allmulticast mode [ 270.651096][T11254] bridge_slave_0: entered promiscuous mode [ 270.690371][ T1004] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.744517][T11254] bridge0: port 2(bridge_slave_1) entered blocking state [ 270.764070][T11254] bridge0: port 2(bridge_slave_1) entered disabled state [ 270.784679][T11254] bridge_slave_1: entered allmulticast mode [ 270.801248][ T51] Bluetooth: hci4: command tx timeout [ 270.802285][T11254] bridge_slave_1: entered promiscuous mode [ 270.863571][ T1004] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 270.880181][ T51] Bluetooth: hci5: command tx timeout [ 270.996211][T11254] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 271.053638][ T1004] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 271.127708][T11254] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 271.321158][T11254] team0: Port device team_slave_0 added [ 271.341125][T11254] team0: Port device team_slave_1 added [ 271.456407][T11254] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 271.511330][T11254] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.624701][T11360] netlink: 44 bytes leftover after parsing attributes in process `syz.5.1611'. [ 271.632191][T11254] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 271.688538][T11254] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 271.709419][T11254] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 271.789502][T11254] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 271.997897][T11371] netlink: 'syz.2.1612': attribute type 1 has an invalid length. [ 272.025495][T11365] netdevsim netdevsim5 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.034929][T11365] netdevsim netdevsim5 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.044097][T11365] netdevsim netdevsim5 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.053288][T11365] netdevsim netdevsim5 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 272.360259][T11385] netlink: 7 bytes leftover after parsing attributes in process `syz.1.1619'. [ 272.446608][T11254] hsr_slave_0: entered promiscuous mode [ 272.481080][T11254] hsr_slave_1: entered promiscuous mode [ 272.554182][ T1004] bridge_slave_1: left allmulticast mode [ 272.567337][ T1004] bridge_slave_1: left promiscuous mode [ 272.573917][ T1004] bridge0: port 2(bridge_slave_1) entered disabled state [ 272.591456][ T1004] bridge_slave_0: left allmulticast mode [ 272.598194][ T1004] bridge_slave_0: left promiscuous mode [ 272.614133][ T1004] bridge0: port 1(bridge_slave_0) entered disabled state [ 272.882917][ T5150] Bluetooth: hci4: command tx timeout [ 272.956057][ T1004] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 272.960055][ T5150] Bluetooth: hci5: command tx timeout [ 272.975895][ T1004] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 272.986361][ T1004] bond0 (unregistering): Released all slaves [ 273.120218][ T5150] Bluetooth: hci2: command 0x0406 tx timeout [ 273.174213][T11409] netlink: 132 bytes leftover after parsing attributes in process `syz.5.1626'. [ 273.194132][T11409] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 273.306431][T11275] chnl_net:caif_netlink_parms(): no params data found [ 273.323046][T11414] SET target dimension over the limit! [ 273.845437][T11433] xt_CT: No such helper "syz0" [ 273.904396][T11275] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.922786][T11275] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.940480][T11275] bridge_slave_0: entered allmulticast mode [ 273.969631][T11275] bridge_slave_0: entered promiscuous mode [ 274.084822][T11275] bridge0: port 2(bridge_slave_1) entered blocking state [ 274.108030][T11275] bridge0: port 2(bridge_slave_1) entered disabled state [ 274.130384][T11275] bridge_slave_1: entered allmulticast mode [ 274.187704][T11275] bridge_slave_1: entered promiscuous mode [ 274.388929][ T1004] hsr_slave_0: left promiscuous mode [ 274.428856][ T1004] hsr_slave_1: left promiscuous mode [ 274.441792][ T1004] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 274.458271][ T1004] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 274.477183][ T1004] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 274.485078][ T1004] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 274.506026][ T1004] veth1_macvtap: left promiscuous mode [ 274.512507][ T1004] veth0_macvtap: left promiscuous mode [ 274.519018][ T1004] veth1_vlan: left promiscuous mode [ 274.539490][ T1004] veth0_vlan: left promiscuous mode [ 274.959452][ T5840] Bluetooth: hci4: command tx timeout [ 274.980087][ T1004] team0 (unregistering): Port device team_slave_1 removed [ 275.018667][ T1004] team0 (unregistering): Port device team_slave_0 removed [ 275.042609][ T5840] Bluetooth: hci5: command tx timeout [ 275.487685][T11275] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.525318][T11275] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.747486][T11275] team0: Port device team_slave_0 added [ 275.815441][T11275] team0: Port device team_slave_1 added [ 275.905874][T11485] netlink: 236 bytes leftover after parsing attributes in process `syz.2.1648'. [ 276.106106][T11275] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 276.135415][T11275] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.175702][T11275] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 276.237192][T11275] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 276.267472][T11275] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 276.338520][T11275] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 276.461153][T11505] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1652'. [ 276.510477][T11505] netlink: 165 bytes leftover after parsing attributes in process `syz.2.1652'. [ 276.535726][T11275] hsr_slave_0: entered promiscuous mode [ 276.546793][T11275] hsr_slave_1: entered promiscuous mode [ 276.555084][T11275] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 276.573487][T11275] Cannot create hsr debugfs directory [ 276.766039][T11254] netdevsim netdevsim0 netdevsim0: renamed from eth0 [ 276.791280][T11254] netdevsim netdevsim0 netdevsim1: renamed from eth1 [ 276.814665][T11254] netdevsim netdevsim0 netdevsim2: renamed from eth2 [ 276.846508][T11254] netdevsim netdevsim0 netdevsim3: renamed from eth3 [ 277.021735][T11254] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.071297][T11254] 8021q: adding VLAN 0 to HW filter on device team0 [ 277.088310][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 277.095564][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 277.118614][ T3488] bridge0: port 2(bridge_slave_1) entered blocking state [ 277.125862][ T3488] bridge0: port 2(bridge_slave_1) entered forwarding state [ 277.134193][ T5840] Bluetooth: hci5: command tx timeout [ 277.159852][T11530] veth0: entered promiscuous mode [ 277.374780][T11529] veth0: left promiscuous mode [ 277.391644][T11537] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 277.402805][T11538] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 277.485167][T11275] netdevsim netdevsim4 netdevsim0: renamed from eth0 [ 277.518575][T11275] netdevsim netdevsim4 netdevsim1: renamed from eth1 [ 277.558511][T11275] netdevsim netdevsim4 netdevsim2: renamed from eth2 [ 277.617868][T11275] netdevsim netdevsim4 netdevsim3: renamed from eth3 [ 277.627599][T11544] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1661'. [ 277.802584][T11254] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 277.916250][T11275] 8021q: adding VLAN 0 to HW filter on device bond0 [ 277.941246][T11559] netlink: 20 bytes leftover after parsing attributes in process `syz.2.1664'. [ 278.004445][T11275] 8021q: adding VLAN 0 to HW filter on device team0 [ 278.020796][T11254] veth0_vlan: entered promiscuous mode [ 278.040636][T11254] veth1_vlan: entered promiscuous mode [ 278.118142][ T1004] bridge0: port 1(bridge_slave_0) entered blocking state [ 278.125350][ T1004] bridge0: port 1(bridge_slave_0) entered forwarding state [ 278.186375][ T49] bridge0: port 2(bridge_slave_1) entered blocking state [ 278.193608][ T49] bridge0: port 2(bridge_slave_1) entered forwarding state [ 278.262020][T11254] veth0_macvtap: entered promiscuous mode [ 278.355263][T11254] veth1_macvtap: entered promiscuous mode [ 278.458670][T11254] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 278.482911][T11254] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 278.521529][T11583] x_tables: arp_tables: MARK.2 target: invalid size 8 (kernel) != (user) 0 [ 278.532182][T11254] netdevsim netdevsim0 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.548100][T11254] netdevsim netdevsim0 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.563160][T11254] netdevsim netdevsim0 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.572492][T11254] netdevsim netdevsim0 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 278.804261][ T13] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.825910][ T13] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 278.925881][ T1004] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 278.942760][ T1004] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 279.037783][T11602] netlink: 32 bytes leftover after parsing attributes in process `syz.1.1676'. [ 279.168132][T11275] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 279.229126][T11607] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1678'. [ 279.408533][T11610] netlink: 24 bytes leftover after parsing attributes in process `syz.2.1679'. [ 279.457040][T11613] xt_hashlimit: max too large, truncated to 1048576 [ 279.737802][T11275] veth0_vlan: entered promiscuous mode [ 279.774639][T11275] veth1_vlan: entered promiscuous mode [ 279.848048][T11275] veth0_macvtap: entered promiscuous mode [ 279.925477][T11275] veth1_macvtap: entered promiscuous mode [ 279.955941][T11627] netlink: 20 bytes leftover after parsing attributes in process `syz.1.1683'. [ 279.978021][T11275] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 279.994486][T11275] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 280.029033][T11275] netdevsim netdevsim4 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.041654][T11275] netdevsim netdevsim4 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.046712][T11627] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1683'. [ 280.054702][T11275] netdevsim netdevsim4 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.068907][T11275] netdevsim netdevsim4 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 280.278993][ T49] netdevsim netdevsim0 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 280.448705][ T1166] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.472116][ T1166] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.511613][ T1166] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 280.521129][ T1166] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 280.825005][ T49] netdevsim netdevsim0 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.171180][ T49] netdevsim netdevsim0 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.208526][ T49] netdevsim netdevsim0 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 281.325651][ T49] bridge_slave_1: left allmulticast mode [ 281.333315][ T49] bridge_slave_1: left promiscuous mode [ 281.339202][ T49] bridge0: port 2(bridge_slave_1) entered disabled state [ 281.349949][ T49] bridge_slave_0: left allmulticast mode [ 281.355719][ T49] bridge_slave_0: left promiscuous mode [ 281.362206][ T49] bridge0: port 1(bridge_slave_0) entered disabled state [ 281.905851][ T5150] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 281.916571][ T5150] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 281.935907][ T5150] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 281.957933][ T5150] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 281.969854][ T5150] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 282.038774][ T49] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 282.052932][ T49] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 282.063257][ T49] bond0 (unregistering): Released all slaves [ 282.081175][T11639] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1686'. [ 283.169004][T11651] team0 (unregistering): Port device team_slave_0 removed [ 283.195950][T11651] team0 (unregistering): Port device team_slave_1 removed [ 283.284564][ T49] hsr_slave_0: left promiscuous mode [ 283.304064][ T49] hsr_slave_1: left promiscuous mode [ 283.329630][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 283.337195][ T49] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 283.346895][ T5150] Bluetooth: hci5: unexpected cc 0x0c03 length: 249 > 1 [ 283.362402][ T5150] Bluetooth: hci5: unexpected cc 0x1003 length: 249 > 9 [ 283.376087][ T5150] Bluetooth: hci5: unexpected cc 0x1001 length: 249 > 9 [ 283.385482][ T5150] Bluetooth: hci5: unexpected cc 0x0c23 length: 249 > 4 [ 283.386051][ T49] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 283.415856][ T5150] Bluetooth: hci5: unexpected cc 0x0c38 length: 249 > 2 [ 283.424339][ T49] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 283.471302][ T49] veth1_macvtap: left promiscuous mode [ 283.476909][ T49] veth0_macvtap: left promiscuous mode [ 283.483058][ T49] veth1_vlan: left promiscuous mode [ 283.488456][ T49] veth0_vlan: left promiscuous mode [ 283.554752][T11664] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1693'. [ 283.881376][ T49] team0 (unregistering): Port device team_slave_1 removed [ 283.922919][ T49] team0 (unregistering): Port device team_slave_0 removed [ 284.010754][ T5840] Bluetooth: hci4: command tx timeout [ 284.617196][T11642] chnl_net:caif_netlink_parms(): no params data found [ 284.692134][T11677] sch_tbf: burst 32855 is lower than device lo mtu (39799) ! [ 284.785539][T11679] C: renamed from team_slave_0 [ 284.802183][T11679] netlink: 'syz.5.1698': attribute type 1 has an invalid length. [ 284.827971][T11677] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1696'. [ 284.867300][T11679] A link change request failed with some changes committed already. Interface C may have been left with an inconsistent configuration, please check. [ 285.010733][T11680] netlink: 128 bytes leftover after parsing attributes in process `syz.1.1696'. [ 285.278626][T11703] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1702'. [ 285.286562][ T49] netdevsim netdevsim4 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.328682][T11703] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1702'. [ 285.468415][T11642] bridge0: port 1(bridge_slave_0) entered blocking state [ 285.498338][T11642] bridge0: port 1(bridge_slave_0) entered disabled state [ 285.520258][ T5840] Bluetooth: hci5: command tx timeout [ 285.527394][T11642] bridge_slave_0: entered allmulticast mode [ 285.542546][T11642] bridge_slave_0: entered promiscuous mode [ 285.582359][ T49] netdevsim netdevsim4 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.635487][T11642] bridge0: port 2(bridge_slave_1) entered blocking state [ 285.661863][T11642] bridge0: port 2(bridge_slave_1) entered disabled state [ 285.676379][T11642] bridge_slave_1: entered allmulticast mode [ 285.699661][T11642] bridge_slave_1: entered promiscuous mode [ 285.765361][T11722] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1709'. [ 285.775644][T11722] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1709'. [ 285.793620][T11642] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 285.855751][ T49] netdevsim netdevsim4 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 285.906354][T11642] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 286.062130][ T49] netdevsim netdevsim4 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.087228][ T5840] Bluetooth: hci4: command tx timeout [ 286.156338][T11642] team0: Port device team_slave_0 added [ 286.169843][T11740] netlink: 104 bytes leftover after parsing attributes in process `syz.5.1712'. [ 286.251884][T11642] team0: Port device team_slave_1 added [ 286.399669][ C1] ================================================================== [ 286.407788][ C1] BUG: KFENCE: use-after-free write in rose_timer_expiry+0x22d/0x4b0 [ 286.407788][ C1] [ 286.418075][ C1] Use-after-free write at 0xffff88823bfc602a (in kfence-#226): [ 286.425627][ C1] rose_timer_expiry+0x22d/0x4b0 [ 286.430577][ C1] call_timer_fn+0x17e/0x5f0 [ 286.435173][ C1] __run_timer_base+0x61a/0x860 [ 286.440046][ C1] run_timer_softirq+0xb7/0x180 [ 286.444922][ C1] handle_softirqs+0x286/0x870 [ 286.449720][ C1] __irq_exit_rcu+0xca/0x1f0 [ 286.454353][ C1] irq_exit_rcu+0x9/0x30 [ 286.458617][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 286.464264][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 286.470256][ C1] lock_acquire+0x175/0x360 [ 286.474771][ C1] unwind_next_frame+0xc2/0x2390 [ 286.479722][ C1] arch_stack_walk+0x11c/0x150 [ 286.484490][ C1] stack_trace_save+0x9c/0xe0 [ 286.489175][ C1] kasan_save_track+0x3e/0x80 [ 286.493866][ C1] kasan_save_free_info+0x46/0x50 [ 286.498901][ C1] __kasan_slab_free+0x62/0x70 [ 286.503664][ C1] kfree+0x18e/0x440 [ 286.507567][ C1] kobject_put+0x270/0x480 [ 286.511993][ C1] net_rx_queue_update_kobjects+0x66f/0x720 [ 286.517904][ C1] netif_set_real_num_rx_queues+0x244/0x3b0 [ 286.523807][ C1] veth_newlink+0x859/0xa50 [ 286.528319][ C1] rtnl_newlink_create+0x310/0xb00 [ 286.533450][ C1] rtnl_newlink+0x16d6/0x1c70 [ 286.538140][ C1] rtnetlink_rcv_msg+0x7cf/0xb70 [ 286.543075][ C1] netlink_rcv_skb+0x208/0x470 [ 286.547845][ C1] netlink_unicast+0x75b/0x8d0 [ 286.552612][ C1] netlink_sendmsg+0x805/0xb30 [ 286.557393][ C1] __sock_sendmsg+0x21c/0x270 [ 286.562099][ C1] __sys_sendto+0x3bd/0x520 [ 286.566624][ C1] __x64_sys_sendto+0xde/0x100 [ 286.571406][ C1] do_syscall_64+0xfa/0x3b0 [ 286.575916][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.581822][ C1] [ 286.584154][ C1] kfence-#226: 0xffff88823bfc6000-0xffff88823bfc60ef, size=240, cache=skbuff_head_cache [ 286.584154][ C1] [ 286.596051][ C1] allocated by task 11617 on cpu 0 at 279.933770s (6.662279s ago): [ 286.603964][ C1] bpf_test_run_xdp_live+0x15f1/0x1b10 [ 286.609435][ C1] bpf_prog_test_run_xdp+0x713/0x1000 [ 286.614817][ C1] bpf_prog_test_run+0x2c7/0x340 [ 286.619766][ C1] __sys_bpf+0x4a4/0x860 [ 286.624009][ C1] __x64_sys_bpf+0x7c/0x90 [ 286.628448][ C1] do_syscall_64+0xfa/0x3b0 [ 286.632975][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.638903][ C1] [ 286.641242][ C1] freed by task 11617 on cpu 0 at 279.936306s (6.704934s ago): [ 286.648818][ C1] __netif_receive_skb_core+0x3be7/0x4180 [ 286.654577][ C1] __netif_receive_skb_list_core+0x23f/0x800 [ 286.660603][ C1] netif_receive_skb_list_internal+0x975/0xcc0 [ 286.666804][ C1] gro_receive_skb+0x642/0xce0 [ 286.671594][ C1] gro_cell_poll+0x142/0x1c0 [ 286.676224][ C1] __napi_poll+0xc7/0x480 [ 286.680589][ C1] net_rx_action+0x707/0xe30 [ 286.685191][ C1] handle_softirqs+0x286/0x870 [ 286.689974][ C1] do_softirq+0xec/0x180 [ 286.694240][ C1] __local_bh_enable_ip+0x17d/0x1c0 [ 286.699470][ C1] bpf_test_run_xdp_live+0x1868/0x1b10 [ 286.704959][ C1] bpf_prog_test_run_xdp+0x713/0x1000 [ 286.710349][ C1] bpf_prog_test_run+0x2c7/0x340 [ 286.715403][ C1] __sys_bpf+0x4a4/0x860 [ 286.719663][ C1] __x64_sys_bpf+0x7c/0x90 [ 286.724090][ C1] do_syscall_64+0xfa/0x3b0 [ 286.728605][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 286.734510][ C1] [ 286.736863][ C1] CPU: 1 UID: 0 PID: 11642 Comm: syz-executor Not tainted 6.16.0-rc3-syzkaller-00131-g72fb83735c71 #0 PREEMPT(full) [ 286.749110][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 286.759174][ C1] RIP: 0010:rose_timer_expiry+0x22d/0x4b0 [ 286.764897][ C1] Code: 80 3c 28 00 74 08 4c 89 e7 e8 2f a2 c7 f7 4d 8b 24 24 49 83 c4 2a 4c 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 2c 02 00 00 <66> 41 ff 0c 24 4c 89 ff be 6e 00 00 00 ba ff ff ff ff b9 ff ff ff [ 286.784502][ C1] RSP: 0018:ffffc90000a08b68 EFLAGS: 00010246 [ 286.790582][ C1] RAX: 0000000000000000 RBX: ffff888032dab6f8 RCX: ffff888028ff3c00 [ 286.798560][ C1] RDX: 0000000000000100 RSI: ffffffff8f66d090 RDI: 0000000000000002 [ 286.806538][ C1] RBP: 1ffff110065b56bd R08: ffff888028ff3c00 R09: 0000000000000004 [ 286.814512][ C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffff88823bfc602a [ 286.822484][ C1] R13: dffffc0000000000 R14: ffff888032dab1c0 R15: ffff888032dab000 [ 286.830463][ C1] FS: 0000555594f9d500(0000) GS:ffff888125d50000(0000) knlGS:0000000000000000 [ 286.839392][ C1] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 286.845971][ C1] CR2: ffff88823bfc602a CR3: 0000000079c76000 CR4: 00000000003526f0 [ 286.853955][ C1] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 286.861927][ C1] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 286.869905][ C1] Call Trace: [ 286.873184][ C1] [ 286.876032][ C1] call_timer_fn+0x17e/0x5f0 [ 286.880632][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 286.886110][ C1] ? call_timer_fn+0xbe/0x5f0 [ 286.890916][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 286.896051][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 286.901265][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 286.906483][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 286.911955][ C1] __run_timer_base+0x61a/0x860 [ 286.916822][ C1] ? ktime_get+0x3e/0x1f0 [ 286.921160][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 286.926541][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 286.932804][ C1] run_timer_softirq+0xb7/0x180 [ 286.937668][ C1] handle_softirqs+0x286/0x870 [ 286.942463][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 286.947248][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 286.952560][ C1] __irq_exit_rcu+0xca/0x1f0 [ 286.957169][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 286.962389][ C1] irq_exit_rcu+0x9/0x30 [ 286.966655][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 286.972304][ C1] [ 286.975240][ C1] [ 286.978176][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 286.984167][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 286.989471][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 3b dd fe 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 287.009087][ C1] RSP: 0018:ffffc9000b2b6778 EFLAGS: 00000206 [ 287.015171][ C1] RAX: 15bd7050dc008000 RBX: 0000000000000000 RCX: 15bd7050dc008000 [ 287.023150][ C1] RDX: 0000000000000000 RSI: ffffffff8db6f006 RDI: ffffffff8be28d40 [ 287.031123][ C1] RBP: ffffffff81728af5 R08: 0000000000000000 R09: ffffffff81728af5 [ 287.039098][ C1] R10: ffffc9000b2b6938 R11: ffffffff81ace6a0 R12: 0000000000000002 [ 287.047074][ C1] R13: ffffffff8e13ee60 R14: 0000000000000000 R15: 0000000000000246 [ 287.055056][ C1] ? unwind_next_frame+0xa5/0x2390 [ 287.060187][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 287.066348][ C1] ? unwind_next_frame+0xa5/0x2390 [ 287.071505][ C1] ? unwind_next_frame+0xa5/0x2390 [ 287.076635][ C1] ? __sock_sendmsg+0x21c/0x270 [ 287.081545][ C1] ? unwind_next_frame+0xa5/0x2390 [ 287.086703][ C1] unwind_next_frame+0xc2/0x2390 [ 287.091673][ C1] ? unwind_next_frame+0xa5/0x2390 [ 287.096815][ C1] ? unwind_next_frame+0xa5/0x2390 [ 287.101965][ C1] ? netlink_sendmsg+0x805/0xb30 [ 287.106919][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 287.113084][ C1] arch_stack_walk+0x11c/0x150 [ 287.117860][ C1] ? __sock_sendmsg+0x21c/0x270 [ 287.122740][ C1] stack_trace_save+0x9c/0xe0 [ 287.127422][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 287.132805][ C1] ? __lock_acquire+0xab9/0xd20 [ 287.137692][ C1] kasan_save_track+0x3e/0x80 [ 287.142393][ C1] ? kasan_save_track+0x3e/0x80 [ 287.147261][ C1] ? kasan_save_free_info+0x46/0x50 [ 287.152466][ C1] ? __kasan_slab_free+0x62/0x70 [ 287.157406][ C1] ? kfree+0x18e/0x440 [ 287.161504][ C1] ? kobject_put+0x270/0x480 [ 287.166103][ C1] ? net_rx_queue_update_kobjects+0x66f/0x720 [ 287.172181][ C1] ? netif_set_real_num_rx_queues+0x244/0x3b0 [ 287.178277][ C1] ? veth_newlink+0x859/0xa50 [ 287.182975][ C1] ? rtnl_newlink_create+0x310/0xb00 [ 287.188283][ C1] ? rtnl_newlink+0x16d6/0x1c70 [ 287.193198][ C1] ? rtnetlink_rcv_msg+0x7cf/0xb70 [ 287.198334][ C1] ? netlink_rcv_skb+0x208/0x470 [ 287.203292][ C1] ? netlink_unicast+0x75b/0x8d0 [ 287.208244][ C1] ? netlink_sendmsg+0x805/0xb30 [ 287.213208][ C1] ? __sock_sendmsg+0x21c/0x270 [ 287.218098][ C1] kasan_save_free_info+0x46/0x50 [ 287.223133][ C1] __kasan_slab_free+0x62/0x70 [ 287.227898][ C1] ? kobject_put+0x270/0x480 [ 287.232498][ C1] kfree+0x18e/0x440 [ 287.236424][ C1] kobject_put+0x270/0x480 [ 287.240865][ C1] net_rx_queue_update_kobjects+0x66f/0x720 [ 287.246831][ C1] ? netif_set_real_num_tx_queues+0x86d/0xac0 [ 287.252912][ C1] netif_set_real_num_rx_queues+0x244/0x3b0 [ 287.258843][ C1] veth_newlink+0x859/0xa50 [ 287.263367][ C1] ? __pfx_veth_newlink+0x10/0x10 [ 287.268423][ C1] ? alloc_netdev_mqs+0xc9e/0x11e0 [ 287.273558][ C1] ? rtnl_newlink_create+0x25c/0xb00 [ 287.278864][ C1] ? rtnl_newlink+0x16d6/0x1c70 [ 287.283728][ C1] ? rtnetlink_rcv_msg+0x7cf/0xb70 [ 287.288845][ C1] ? netlink_unicast+0x75b/0x8d0 [ 287.293789][ C1] ? netlink_sendmsg+0x805/0xb30 [ 287.298733][ C1] ? __sock_sendmsg+0x21c/0x270 [ 287.303615][ C1] ? do_syscall_64+0xfa/0x3b0 [ 287.308298][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.314392][ C1] ? validate_linkmsg+0x765/0x950 [ 287.319446][ C1] ? __pfx_veth_newlink+0x10/0x10 [ 287.324476][ C1] rtnl_newlink_create+0x310/0xb00 [ 287.329599][ C1] ? __mutex_lock+0x51b/0xe80 [ 287.334289][ C1] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 287.339928][ C1] ? rtnl_newlink+0x8db/0x1c70 [ 287.344706][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 287.349744][ C1] ? full_name_hash+0x92/0xe0 [ 287.354433][ C1] rtnl_newlink+0x16d6/0x1c70 [ 287.359121][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 287.364183][ C1] ? __lock_acquire+0xab9/0xd20 [ 287.369044][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 287.374067][ C1] rtnetlink_rcv_msg+0x7cf/0xb70 [ 287.379009][ C1] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 287.384124][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 287.389615][ C1] netlink_rcv_skb+0x208/0x470 [ 287.394386][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 287.399859][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 287.405157][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 287.410364][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 287.415576][ C1] netlink_unicast+0x75b/0x8d0 [ 287.420346][ C1] netlink_sendmsg+0x805/0xb30 [ 287.425120][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.430413][ C1] ? aa_sock_msg_perm+0x94/0x160 [ 287.435361][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 287.440651][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 287.445943][ C1] __sock_sendmsg+0x21c/0x270 [ 287.450635][ C1] __sys_sendto+0x3bd/0x520 [ 287.455140][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 287.460180][ C1] ? blkcg_maybe_throttle_current+0x1ab/0xb40 [ 287.466277][ C1] ? rcu_is_watching+0x15/0xb0 [ 287.471051][ C1] __x64_sys_sendto+0xde/0x100 [ 287.475820][ C1] do_syscall_64+0xfa/0x3b0 [ 287.480320][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 287.485526][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.491595][ C1] ? clear_bhb_loop+0x60/0xb0 [ 287.496277][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.502181][ C1] RIP: 0033:0x7fddc43907bc [ 287.506615][ C1] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 287.526240][ C1] RSP: 002b:00007ffeda535cb0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 287.534682][ C1] RAX: ffffffffffffffda RBX: 00007fddc50e4620 RCX: 00007fddc43907bc [ 287.542684][ C1] RDX: 000000000000006c RSI: 00007fddc50e4670 RDI: 0000000000000003 [ 287.550662][ C1] RBP: 0000000000000000 R08: 00007ffeda535d04 R09: 000000000000000c [ 287.558650][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 287.566622][ C1] R13: 0000000000000000 R14: 00007fddc50e4670 R15: 0000000000000000 [ 287.574608][ C1] [ 287.577627][ C1] ================================================================== [ 287.585700][ C1] Kernel panic - not syncing: KFENCE: panic_on_warn set ... [ 287.593487][ C1] CPU: 1 UID: 0 PID: 11642 Comm: syz-executor Not tainted 6.16.0-rc3-syzkaller-00131-g72fb83735c71 #0 PREEMPT(full) [ 287.605725][ C1] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 287.615782][ C1] Call Trace: [ 287.619067][ C1] [ 287.621922][ C1] dump_stack_lvl+0x99/0x250 [ 287.626540][ C1] ? __asan_memcpy+0x40/0x70 [ 287.631145][ C1] ? __pfx_dump_stack_lvl+0x10/0x10 [ 287.636369][ C1] ? __pfx__printk+0x10/0x10 [ 287.640979][ C1] panic+0x2db/0x790 [ 287.644905][ C1] ? __pfx_panic+0x10/0x10 [ 287.649335][ C1] ? _printk+0xcf/0x120 [ 287.653506][ C1] ? __pfx__printk+0x10/0x10 [ 287.658109][ C1] check_panic_on_warn+0x89/0xb0 [ 287.663053][ C1] kfence_report_error+0x748/0xa40 [ 287.668175][ C1] ? __pfx_kfence_report_error+0x10/0x10 [ 287.673813][ C1] ? rose_timer_expiry+0x22d/0x4b0 [ 287.678928][ C1] ? call_timer_fn+0x17e/0x5f0 [ 287.683709][ C1] ? __run_timer_base+0x61a/0x860 [ 287.688738][ C1] ? run_timer_softirq+0xb7/0x180 [ 287.693778][ C1] ? handle_softirqs+0x286/0x870 [ 287.698722][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 287.703497][ C1] ? irq_exit_rcu+0x9/0x30 [ 287.707924][ C1] ? sysvec_apic_timer_interrupt+0xa6/0xc0 [ 287.713735][ C1] ? asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 287.719892][ C1] ? lock_acquire+0x175/0x360 [ 287.724584][ C1] ? unwind_next_frame+0xc2/0x2390 [ 287.729705][ C1] ? arch_stack_walk+0x11c/0x150 [ 287.734643][ C1] ? stack_trace_save+0x9c/0xe0 [ 287.739496][ C1] ? kasan_save_track+0x3e/0x80 [ 287.744361][ C1] ? kasan_save_free_info+0x46/0x50 [ 287.749567][ C1] ? __kasan_slab_free+0x62/0x70 [ 287.754521][ C1] ? kfree+0x18e/0x440 [ 287.758607][ C1] ? kobject_put+0x270/0x480 [ 287.763198][ C1] ? net_rx_queue_update_kobjects+0x66f/0x720 [ 287.769272][ C1] ? netif_set_real_num_rx_queues+0x244/0x3b0 [ 287.775351][ C1] ? veth_newlink+0x859/0xa50 [ 287.780035][ C1] ? rtnl_newlink_create+0x310/0xb00 [ 287.785329][ C1] ? rtnl_newlink+0x16d6/0x1c70 [ 287.790184][ C1] ? rtnetlink_rcv_msg+0x7cf/0xb70 [ 287.795301][ C1] ? netlink_rcv_skb+0x208/0x470 [ 287.800244][ C1] ? netlink_unicast+0x75b/0x8d0 [ 287.805179][ C1] ? netlink_sendmsg+0x805/0xb30 [ 287.810121][ C1] ? __sock_sendmsg+0x21c/0x270 [ 287.814979][ C1] ? __sys_sendto+0x3bd/0x520 [ 287.819658][ C1] ? __x64_sys_sendto+0xde/0x100 [ 287.824595][ C1] ? do_syscall_64+0xfa/0x3b0 [ 287.829274][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 287.835385][ C1] ? _raw_spin_lock_irqsave+0xb3/0xf0 [ 287.840765][ C1] ? __pfx__raw_spin_lock_irqsave+0x10/0x10 [ 287.846662][ C1] ? search_bpf_extables+0x26/0x3c0 [ 287.851886][ C1] kfence_handle_page_fault+0x358/0x4d0 [ 287.857460][ C1] page_fault_oops+0x19f/0xa10 [ 287.862241][ C1] ? stack_trace_save+0x9c/0xe0 [ 287.867101][ C1] ? __pfx_fixup_exception+0x10/0x10 [ 287.872402][ C1] ? __pfx_page_fault_oops+0x10/0x10 [ 287.877704][ C1] ? is_prefetch+0x403/0x640 [ 287.882311][ C1] ? check_path+0x21/0x40 [ 287.886649][ C1] ? __pfx_is_prefetch+0x10/0x10 [ 287.891601][ C1] ? validate_chain+0x897/0x2140 [ 287.896557][ C1] __bad_area_nosemaphore+0x11a/0x780 [ 287.901950][ C1] ? __pfx___bad_area_nosemaphore+0x10/0x10 [ 287.907865][ C1] ? spurious_kernel_fault+0x1c7/0x6b0 [ 287.913362][ C1] ? do_kern_addr_fault+0x30/0x80 [ 287.918403][ C1] exc_page_fault+0xc3/0xf0 [ 287.922916][ C1] asm_exc_page_fault+0x26/0x30 [ 287.927766][ C1] RIP: 0010:rose_timer_expiry+0x22d/0x4b0 [ 287.933505][ C1] Code: 80 3c 28 00 74 08 4c 89 e7 e8 2f a2 c7 f7 4d 8b 24 24 49 83 c4 2a 4c 89 e0 48 c1 e8 03 42 0f b6 04 28 84 c0 0f 85 2c 02 00 00 <66> 41 ff 0c 24 4c 89 ff be 6e 00 00 00 ba ff ff ff ff b9 ff ff ff [ 287.953123][ C1] RSP: 0018:ffffc90000a08b68 EFLAGS: 00010246 [ 287.959204][ C1] RAX: 0000000000000000 RBX: ffff888032dab6f8 RCX: ffff888028ff3c00 [ 287.967190][ C1] RDX: 0000000000000100 RSI: ffffffff8f66d090 RDI: 0000000000000002 [ 287.975169][ C1] RBP: 1ffff110065b56bd R08: ffff888028ff3c00 R09: 0000000000000004 [ 287.983148][ C1] R10: 0000000000000004 R11: 0000000000000100 R12: ffff88823bfc602a [ 287.991120][ C1] R13: dffffc0000000000 R14: ffff888032dab1c0 R15: ffff888032dab000 [ 287.999117][ C1] ? rose_timer_expiry+0x1ea/0x4b0 [ 288.004238][ C1] call_timer_fn+0x17e/0x5f0 [ 288.008838][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 288.014301][ C1] ? call_timer_fn+0xbe/0x5f0 [ 288.019010][ C1] ? __pfx_call_timer_fn+0x10/0x10 [ 288.024141][ C1] ? _raw_spin_unlock_irq+0x23/0x50 [ 288.029367][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 288.034585][ C1] ? __pfx_rose_timer_expiry+0x10/0x10 [ 288.040048][ C1] __run_timer_base+0x61a/0x860 [ 288.044908][ C1] ? ktime_get+0x3e/0x1f0 [ 288.049255][ C1] ? __pfx___run_timer_base+0x10/0x10 [ 288.054638][ C1] ? seqcount_lockdep_reader_access+0x15f/0x1c0 [ 288.060900][ C1] run_timer_softirq+0xb7/0x180 [ 288.065762][ C1] handle_softirqs+0x286/0x870 [ 288.070543][ C1] ? __irq_exit_rcu+0xca/0x1f0 [ 288.075322][ C1] ? __pfx_handle_softirqs+0x10/0x10 [ 288.080622][ C1] __irq_exit_rcu+0xca/0x1f0 [ 288.085223][ C1] ? __pfx___irq_exit_rcu+0x10/0x10 [ 288.090441][ C1] irq_exit_rcu+0x9/0x30 [ 288.094694][ C1] sysvec_apic_timer_interrupt+0xa6/0xc0 [ 288.100348][ C1] [ 288.103287][ C1] [ 288.106221][ C1] asm_sysvec_apic_timer_interrupt+0x1a/0x20 [ 288.112210][ C1] RIP: 0010:lock_acquire+0x175/0x360 [ 288.117511][ C1] Code: 00 00 00 00 9c 8f 44 24 30 f7 44 24 30 00 02 00 00 0f 85 cd 00 00 00 f7 44 24 08 00 02 00 00 74 01 fb 65 48 8b 05 3b dd fe 10 <48> 3b 44 24 58 0f 85 f2 00 00 00 48 83 c4 60 5b 41 5c 41 5d 41 5e [ 288.137258][ C1] RSP: 0018:ffffc9000b2b6778 EFLAGS: 00000206 [ 288.143340][ C1] RAX: 15bd7050dc008000 RBX: 0000000000000000 RCX: 15bd7050dc008000 [ 288.151318][ C1] RDX: 0000000000000000 RSI: ffffffff8db6f006 RDI: ffffffff8be28d40 [ 288.159321][ C1] RBP: ffffffff81728af5 R08: 0000000000000000 R09: ffffffff81728af5 [ 288.167300][ C1] R10: ffffc9000b2b6938 R11: ffffffff81ace6a0 R12: 0000000000000002 [ 288.175280][ C1] R13: ffffffff8e13ee60 R14: 0000000000000000 R15: 0000000000000246 [ 288.183261][ C1] ? unwind_next_frame+0xa5/0x2390 [ 288.188389][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 288.194554][ C1] ? unwind_next_frame+0xa5/0x2390 [ 288.199698][ C1] ? unwind_next_frame+0xa5/0x2390 [ 288.204818][ C1] ? __sock_sendmsg+0x21c/0x270 [ 288.209679][ C1] ? unwind_next_frame+0xa5/0x2390 [ 288.214819][ C1] unwind_next_frame+0xc2/0x2390 [ 288.219773][ C1] ? unwind_next_frame+0xa5/0x2390 [ 288.224901][ C1] ? unwind_next_frame+0xa5/0x2390 [ 288.230035][ C1] ? netlink_sendmsg+0x805/0xb30 [ 288.234994][ C1] ? __pfx_stack_trace_consume_entry+0x10/0x10 [ 288.241156][ C1] arch_stack_walk+0x11c/0x150 [ 288.245929][ C1] ? __sock_sendmsg+0x21c/0x270 [ 288.250796][ C1] stack_trace_save+0x9c/0xe0 [ 288.255486][ C1] ? __pfx_stack_trace_save+0x10/0x10 [ 288.260871][ C1] ? __lock_acquire+0xab9/0xd20 [ 288.265734][ C1] kasan_save_track+0x3e/0x80 [ 288.270426][ C1] ? kasan_save_track+0x3e/0x80 [ 288.275288][ C1] ? kasan_save_free_info+0x46/0x50 [ 288.280498][ C1] ? __kasan_slab_free+0x62/0x70 [ 288.285441][ C1] ? kfree+0x18e/0x440 [ 288.289520][ C1] ? kobject_put+0x270/0x480 [ 288.294114][ C1] ? net_rx_queue_update_kobjects+0x66f/0x720 [ 288.300214][ C1] ? netif_set_real_num_rx_queues+0x244/0x3b0 [ 288.306295][ C1] ? veth_newlink+0x859/0xa50 [ 288.310978][ C1] ? rtnl_newlink_create+0x310/0xb00 [ 288.316263][ C1] ? rtnl_newlink+0x16d6/0x1c70 [ 288.321117][ C1] ? rtnetlink_rcv_msg+0x7cf/0xb70 [ 288.326230][ C1] ? netlink_rcv_skb+0x208/0x470 [ 288.331190][ C1] ? netlink_unicast+0x75b/0x8d0 [ 288.336168][ C1] ? netlink_sendmsg+0x805/0xb30 [ 288.341113][ C1] ? __sock_sendmsg+0x21c/0x270 [ 288.346018][ C1] kasan_save_free_info+0x46/0x50 [ 288.351052][ C1] __kasan_slab_free+0x62/0x70 [ 288.355870][ C1] ? kobject_put+0x270/0x480 [ 288.360466][ C1] kfree+0x18e/0x440 [ 288.364383][ C1] kobject_put+0x270/0x480 [ 288.368808][ C1] net_rx_queue_update_kobjects+0x66f/0x720 [ 288.374713][ C1] ? netif_set_real_num_tx_queues+0x86d/0xac0 [ 288.380793][ C1] netif_set_real_num_rx_queues+0x244/0x3b0 [ 288.386694][ C1] veth_newlink+0x859/0xa50 [ 288.391203][ C1] ? __pfx_veth_newlink+0x10/0x10 [ 288.396240][ C1] ? alloc_netdev_mqs+0xc9e/0x11e0 [ 288.401357][ C1] ? rtnl_newlink_create+0x25c/0xb00 [ 288.406651][ C1] ? rtnl_newlink+0x16d6/0x1c70 [ 288.411556][ C1] ? rtnetlink_rcv_msg+0x7cf/0xb70 [ 288.416678][ C1] ? netlink_unicast+0x75b/0x8d0 [ 288.421636][ C1] ? netlink_sendmsg+0x805/0xb30 [ 288.426685][ C1] ? __sock_sendmsg+0x21c/0x270 [ 288.431571][ C1] ? do_syscall_64+0xfa/0x3b0 [ 288.436269][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.442406][ C1] ? validate_linkmsg+0x765/0x950 [ 288.447460][ C1] ? __pfx_veth_newlink+0x10/0x10 [ 288.452498][ C1] rtnl_newlink_create+0x310/0xb00 [ 288.457627][ C1] ? __mutex_lock+0x51b/0xe80 [ 288.462326][ C1] ? __pfx_rtnl_newlink_create+0x10/0x10 [ 288.467975][ C1] ? rtnl_newlink+0x8db/0x1c70 [ 288.472748][ C1] ? __pfx___mutex_lock+0x10/0x10 [ 288.477795][ C1] ? full_name_hash+0x92/0xe0 [ 288.482489][ C1] rtnl_newlink+0x16d6/0x1c70 [ 288.487204][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 288.492326][ C1] ? __lock_acquire+0xab9/0xd20 [ 288.497219][ C1] ? __pfx_rtnl_newlink+0x10/0x10 [ 288.502257][ C1] rtnetlink_rcv_msg+0x7cf/0xb70 [ 288.507209][ C1] ? rtnetlink_rcv_msg+0x1ab/0xb70 [ 288.512336][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 288.517817][ C1] netlink_rcv_skb+0x208/0x470 [ 288.522592][ C1] ? __pfx_rtnetlink_rcv_msg+0x10/0x10 [ 288.528071][ C1] ? __pfx_netlink_rcv_skb+0x10/0x10 [ 288.533370][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 288.538613][ C1] ? netlink_deliver_tap+0x2e/0x1b0 [ 288.543824][ C1] netlink_unicast+0x75b/0x8d0 [ 288.548602][ C1] netlink_sendmsg+0x805/0xb30 [ 288.553387][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.558699][ C1] ? aa_sock_msg_perm+0x94/0x160 [ 288.563642][ C1] ? bpf_lsm_socket_sendmsg+0x9/0x20 [ 288.568934][ C1] ? __pfx_netlink_sendmsg+0x10/0x10 [ 288.574228][ C1] __sock_sendmsg+0x21c/0x270 [ 288.578938][ C1] __sys_sendto+0x3bd/0x520 [ 288.583445][ C1] ? __pfx___sys_sendto+0x10/0x10 [ 288.588487][ C1] ? blkcg_maybe_throttle_current+0x1ab/0xb40 [ 288.594596][ C1] ? rcu_is_watching+0x15/0xb0 [ 288.599376][ C1] __x64_sys_sendto+0xde/0x100 [ 288.604150][ C1] do_syscall_64+0xfa/0x3b0 [ 288.608672][ C1] ? lockdep_hardirqs_on+0x9c/0x150 [ 288.613892][ C1] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.619971][ C1] ? clear_bhb_loop+0x60/0xb0 [ 288.624663][ C1] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 288.630567][ C1] RIP: 0033:0x7fddc43907bc [ 288.635008][ C1] Code: 2a 5f 02 00 44 8b 4c 24 2c 4c 8b 44 24 20 89 c5 44 8b 54 24 28 48 8b 54 24 18 b8 2c 00 00 00 48 8b 74 24 10 8b 7c 24 08 0f 05 <48> 3d 00 f0 ff ff 77 34 89 ef 48 89 44 24 08 e8 70 5f 02 00 48 8b [ 288.654635][ C1] RSP: 002b:00007ffeda535cb0 EFLAGS: 00000293 ORIG_RAX: 000000000000002c [ 288.663062][ C1] RAX: ffffffffffffffda RBX: 00007fddc50e4620 RCX: 00007fddc43907bc [ 288.671048][ C1] RDX: 000000000000006c RSI: 00007fddc50e4670 RDI: 0000000000000003 [ 288.679024][ C1] RBP: 0000000000000000 R08: 00007ffeda535d04 R09: 000000000000000c [ 288.686997][ C1] R10: 0000000000000000 R11: 0000000000000293 R12: 0000000000000003 [ 288.694976][ C1] R13: 0000000000000000 R14: 00007fddc50e4670 R15: 0000000000000000 [ 288.702968][ C1] [ 288.706351][ C1] Kernel Offset: disabled [ 288.711068][ C1] Rebooting in 86400 seconds..