last executing test programs: 2m32.643331952s ago: executing program 4 (id=985): r0 = socket(0x2a, 0x2, 0x0) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000400)={&(0x7f00000005c0)=@newqdisc={0x24}, 0x24}, 0x1, 0x0, 0x0, 0x800}, 0x0) (async, rerun: 32) getsockname$packet(r0, &(0x7f0000000200)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000040)=0x14) (rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000440)=@newqdisc={0x44, 0x24, 0xf0b, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_hfsc={{0x9}, {0x14, 0x2, @TCA_HFSC_FSC={0x10, 0x2, {0x9, 0x5}}}}]}, 0x44}}, 0x0) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r2, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000400)=@gettaction={0x60, 0x32, 0x9408f9ce2610ee65, 0x0, 0x0, {}, [@action_gd=@TCA_ACT_TAB={0x40, 0x1, [{0xc, 0x4, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0x7ff}}, {0xc, 0xd, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xf6bc}}, {0xc, 0x1e, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}, {0xc, 0xe, 0x0, 0x0, @TCA_ACT_INDEX={0x8, 0x3, 0xffffffff}}, {0xc, 0x20, 0x0, 0x0, @TCA_ACT_INDEX={0x8}}]}, @action_dump_flags=@TCA_ROOT_FLAGS={0x2e, 0x2, {0x0, 0x1}}]}, 0x60}, 0x1, 0x0, 0x0, 0x44}, 0x0) (async, rerun: 32) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f0000000340)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000140)=@newtfilter={0x58, 0x2c, 0xd27, 0x0, 0x0, {0x0, 0x0, 0x0, r1, {0x0, 0x9}, {}, {0x1, 0xfff1}}, [@filter_kind_options=@f_cgroup={{0xb}, {0x28, 0x2, [@TCA_CGROUP_EMATCHES={0x5, 0x3, 0x0, 0x1, [@TCA_EMATCH_TREE_LIST={0x18, 0x2, 0x0, 0x1, [@TCF_EM_IPT={0x14, 0x1, 0x0, 0x0, {{0x3, 0x9, 0x80}, [@TCA_EM_IPT_HOOK={0x8, 0x1, 0x4}]}}]}, @TCA_EMATCH_TREE_HDR={0x8, 0x1, {0x6}}]}]}}]}, 0x58}}, 0x1) (async, rerun: 32) r3 = socket$netlink(0x10, 0x3, 0x0) sendmmsg(r3, &(0x7f00000002c0), 0x40000000000009f, 0x0) 2m31.871883262s ago: executing program 4 (id=994): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = socket(0x2, 0x80805, 0x0) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value={0x0}, &(0x7f0000001080)=0x8) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={r2, 0xd58}, 0x8) r3 = socket$kcm(0x10, 0x2, 0x0) r4 = socket$nl_generic(0x10, 0x3, 0x10) r5 = syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r5, 0x1, 0x2000000, 0x0, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x91}, {0x6, 0x16, 0x2}, {0x5}}]}, 0x54}}, 0x0) write$tun(0xffffffffffffffff, &(0x7f00000001c0)={@void, @val={0x1, 0x1, 0x4f, 0x1, 0x2, 0x8db9}, @ipv6=@generic={0x1, 0x6, "0ba8f9", 0x19a, 0x0, 0xff, @loopback, @private1, {[@hopopts={0x0, 0x8, '\x00', [@jumbo={0xc2, 0x4, 0xae06}, @enc_lim={0x4, 0x1, 0xad}, @ra={0x5, 0x2, 0x6}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x8}, @calipso={0x7, 0x20, {0x1, 0x6, 0xf, 0x2, [0x8c2, 0xf, 0x7]}}, @jumbo={0xc2, 0x4, 0xf0e}]}, @routing={0x2c, 0x6, 0x1, 0x6, 0x0, [@private0, @local, @dev={0xfe, 0x80, '\x00', 0x20}]}, @routing={0x21, 0x8, 0x1, 0x1, 0x0, [@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, @loopback]}], "49aa00bc908febb47774559035988d2de5abb4a0274236c01cdc9f350ac4ff8ca2c57876a432daba75a661ae46c53424fe99f1c9ba2a2b886e9851d6ce1a535825762f3702088a5799af332040b213912229f8bb5c5aa8e7bc507e5aa49c410f83977340c4b3d39bbd71bd36e7dfb0c3389b17c12b27b2164ab69d22618c01ff340a1169fe78f6169c77e951789d3370b7b0882ee6435d67d290456125fa7acb40a83320cba87edc316e13271d43fe6aebfa06289a0579471def65834c036f92bcb62476ce60e1f0b435"}}}, 0x1cc) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c0000000000000e0021001400000002800000121f", 0x2e}], 0x1}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) socket(0x2, 0x80805, 0x0) (async) getsockopt$inet_sctp6_SCTP_SOCKOPT_CONNECTX3(r1, 0x84, 0x6f, &(0x7f0000000000)={0x0, 0x10, &(0x7f0000000380)=[@in={0x2, 0x0, @initdev={0xac, 0x1e, 0x0, 0x0}}]}, &(0x7f0000000180)=0x10) (async) getsockopt$inet_sctp_SCTP_MAX_BURST(r1, 0x84, 0x14, &(0x7f0000000000)=@assoc_value, &(0x7f0000001080)=0x8) (async) setsockopt$inet_sctp6_SCTP_PR_SUPPORTED(r0, 0x84, 0x71, &(0x7f0000000000)={r2, 0xd58}, 0x8) (async) socket$kcm(0x10, 0x2, 0x0) (async) socket$nl_generic(0x10, 0x3, 0x10) (async) syz_genetlink_get_family_id$devlink(&(0x7f0000002b40), 0xffffffffffffffff) (async) sendmsg$DEVLINK_CMD_SB_TC_POOL_BIND_GET(r4, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000200)={0x54, r5, 0x1, 0x2000000, 0x0, {0x6}, [{{@nsim={{0xe}, {0xf, 0x2, {'netdevsim', 0x0}}}, {0x8}}, {0x8, 0x91}, {0x6, 0x16, 0x2}, {0x5}}]}, 0x54}}, 0x0) (async) write$tun(0xffffffffffffffff, &(0x7f00000001c0)={@void, @val={0x1, 0x1, 0x4f, 0x1, 0x2, 0x8db9}, @ipv6=@generic={0x1, 0x6, "0ba8f9", 0x19a, 0x0, 0xff, @loopback, @private1, {[@hopopts={0x0, 0x8, '\x00', [@jumbo={0xc2, 0x4, 0xae06}, @enc_lim={0x4, 0x1, 0xad}, @ra={0x5, 0x2, 0x6}, @padn={0x1, 0x2, [0x0, 0x0]}, @jumbo={0xc2, 0x4, 0x3}, @enc_lim={0x4, 0x1, 0x8}, @calipso={0x7, 0x20, {0x1, 0x6, 0xf, 0x2, [0x8c2, 0xf, 0x7]}}, @jumbo={0xc2, 0x4, 0xf0e}]}, @routing={0x2c, 0x6, 0x1, 0x6, 0x0, [@private0, @local, @dev={0xfe, 0x80, '\x00', 0x20}]}, @routing={0x21, 0x8, 0x1, 0x1, 0x0, [@empty, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x02', @private2={0xfc, 0x2, '\x00', 0x1}, @loopback]}], "49aa00bc908febb47774559035988d2de5abb4a0274236c01cdc9f350ac4ff8ca2c57876a432daba75a661ae46c53424fe99f1c9ba2a2b886e9851d6ce1a535825762f3702088a5799af332040b213912229f8bb5c5aa8e7bc507e5aa49c410f83977340c4b3d39bbd71bd36e7dfb0c3389b17c12b27b2164ab69d22618c01ff340a1169fe78f6169c77e951789d3370b7b0882ee6435d67d290456125fa7acb40a83320cba87edc316e13271d43fe6aebfa06289a0579471def65834c036f92bcb62476ce60e1f0b435"}}}, 0x1cc) (async) sendmsg$kcm(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000180)=[{&(0x7f0000000000)="2e00000010008188040f80ec59acbc0413a1f848100000005e0c0000000000000e0021001400000002800000121f", 0x2e}], 0x1}, 0x0) (async) 2m31.647103681s ago: executing program 4 (id=1000): socketpair(0x1, 0x1, 0x0, &(0x7f0000000000)={0xffffffffffffffff, 0xffffffffffffffff}) r1 = bpf$MAP_CREATE(0x0, &(0x7f00000000c0)=@base={0x12, 0x8, 0x6, 0x2, 0x0, 0xffffffffffffffff, 0x4}, 0x50) r2 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000340)={0x18, 0x3, &(0x7f0000000d00)=ANY=[@ANYBLOB="1800000000000000000000000000000095"], &(0x7f0000000000)='syzkaller\x00'}, 0x90) r3 = bpf$BPF_RAW_TRACEPOINT_OPEN(0x11, &(0x7f0000000200)={&(0x7f00000001c0)='task_newtask\x00', r2}, 0x10) mkdirat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000)='./cgroup/syz1\x00', 0x1ff) r4 = bpf$ITER_CREATE(0xb, &(0x7f0000000100)={r3}, 0x8) close(r4) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$MAP_CREATE(0x0, &(0x7f0000000100)=@base={0x15, 0x8, 0x8}, 0x50) r6 = bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000440)={0x8, 0xf, &(0x7f0000000c80)=@ringbuf={{}, {{0x18, 0x1, 0x1, 0x0, r5}, {}, {0x7, 0x0, 0xb, 0x2}, {0x85, 0x0, 0x0, 0x51}}, {}, [], {{}, {}, {0x85, 0x0, 0x0, 0x5}}}, &(0x7f0000000000)='GPL\x00'}, 0x90) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r6, 0x0, 0x0}, 0x10) r7 = bpf$PROG_LOAD(0x5, &(0x7f0000000440)={0x8, 0x6, &(0x7f00000006c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000080)='GPL\x00', 0x4, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb}, 0x70) r8 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r8) bpf$BPF_GET_PROG_INFO(0x1c, &(0x7f00000003c0)={r7, 0x0, 0x0}, 0x10) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000040)={r8, r7, 0x4, r7}, 0x10) bpf$MAP_UPDATE_ELEM_TAIL_CALL(0x2, &(0x7f0000000180)={{r1}, &(0x7f0000000040), &(0x7f0000000140)=r0}, 0x20) bpf$MAP_GET_NEXT_KEY(0x4, &(0x7f00000001c0)={r1, 0x0, &(0x7f0000000080)=""/12}, 0x20) 2m31.455972836s ago: executing program 4 (id=1003): r0 = socket$nl_generic(0x10, 0x3, 0x10) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f00000001c0)='memory.events\x00', 0x275a, 0x0) r2 = socket$can_j1939(0x1d, 0x2, 0x7) bind$can_j1939(r2, &(0x7f00000004c0)={0x1d, 0x0, 0x0, {0x0, 0x0, 0x4}}, 0x18) write$cgroup_subtree(r1, &(0x7f00000004c0)=ANY=[@ANYRESHEX=r1, @ANYRESHEX, @ANYRESHEX, @ANYRESHEX=r1], 0x32600) mmap(&(0x7f0000000000/0x3000)=nil, 0x3000, 0x2000001, 0x12, r1, 0x0) r3 = socket$inet_sctp(0x2, 0x1, 0x84) getsockopt$inet_sctp_SCTP_MAX_BURST(r3, 0x84, 0xd, &(0x7f0000000000)=@assoc_value, &(0x7f0000000040)=0x8) r4 = syz_genetlink_get_family_id$devlink(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$DEVLINK_CMD_GET(r0, &(0x7f00000006c0)={0x0, 0x0, &(0x7f0000000680)={&(0x7f0000000580)=ANY=[@ANYBLOB='4\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="01000000000000000000540500000e0002006e657464657673696d0000000f0002"], 0x34}}, 0x0) syz_genetlink_get_family_id$nl80211(&(0x7f0000000040), 0xffffffffffffffff) 2m31.205356897s ago: executing program 4 (id=1005): r0 = socket$inet6_sctp(0xa, 0x801, 0x84) syz_emit_ethernet(0x66, &(0x7f0000000600)={@local, @empty, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "fca33f", 0x30, 0x67, 0x0, @dev, @local, {[@fragment={0x21}, @hopopts={0x0, 0x3, '\x00', [@generic={0x0, 0x17, "0ce3c4989ea1a39290312280e6388bb3012ab2f6fcb2ba"}]}]}}}}}, 0x0) sendmmsg$inet6(r0, &(0x7f0000000ac0)=[{{&(0x7f00000001c0)={0xa, 0x0, 0x0, @private1}, 0x1c, &(0x7f0000000300)=[{&(0x7f0000000040)="18", 0x1}], 0x1}}], 0x1, 0x0) r1 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) setsockopt$inet6_int(r1, 0x29, 0xce, 0x0, 0x0) shutdown(r0, 0x1) r2 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$nbd(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$NBD_CMD_STATUS(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000280)={0x14, r3, 0x1, 0x70bd2a, 0x25dfdbfd}, 0x14}, 0x1, 0x0, 0x0, 0x44000}, 0x810) r4 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r4, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) ioctl$TUNSETLINK(r4, 0x400454cc, 0x102) write$tun(r4, &(0x7f0000000b00)={@void, @void, @ipv4=@icmp={{0x50, 0x4, 0x0, 0x39, 0x1bc, 0x64, 0x0, 0xc, 0x1, 0x0, @private=0xa010102, @private=0xa010100, {[@timestamp_prespec={0x44, 0x34, 0xde, 0x3, 0x9, [{@initdev={0xac, 0x1e, 0x0, 0x0}}, {@empty, 0x3}, {@rand_addr=0x64010100, 0x7}, {@empty, 0xa4}, {@broadcast, 0x2}, {@remote, 0x2}]}, @timestamp_addr={0x44, 0x44, 0x82, 0x1, 0x8, [{@dev={0xac, 0x14, 0x14, 0x30}, 0x4}, {@private=0xa010101, 0x7}, {@broadcast, 0xfffffff7}, {@local, 0x1}, {@private=0xa010102, 0xce}, {@multicast1, 0xeae0682}, {@remote, 0x408b}, {@local, 0x2}]}, @cipso={0x86, 0x48, 0x2, [{0x5, 0x5, '0mJ'}, {0x6, 0x10, "e53e4968e08cff450439fda987a7"}, {0x7, 0xf, "34d59c28b6c167cb498831c936"}, {0x0, 0x11, "0839448b33f457cb33b6b4540863a4"}, {0x0, 0x9, "1e4a99cb5a676b"}, {0x7, 0x4, "c24e"}]}, @lsrr={0x83, 0x1f, 0x75, [@rand_addr=0x64010102, @broadcast, @empty, @multicast1, @multicast2, @rand_addr=0x64010100, @initdev={0xac, 0x1e, 0x0, 0x0}]}, @timestamp_addr={0x44, 0xc, 0x83, 0x1, 0x4, [{@loopback, 0x7}]}, @ssrr={0x89, 0x13, 0x9e, [@local, @loopback, @multicast1, @multicast1]}, @timestamp={0x44, 0x18, 0x45, 0x0, 0x9, [0x9, 0x1a0, 0x8, 0x3, 0x7]}, @end, @cipso={0x86, 0x14, 0x1, [{0x1, 0xe, "a137b32e56bf17da75fe4a27"}]}]}}, @parameter_prob={0xc, 0x0, 0x0, 0x5, 0x1, 0x0, {0x1b, 0x4, 0x1, 0x9, 0x1, 0x67, 0xe10, 0x8, 0x6, 0x8, @empty, @empty, {[@lsrr={0x83, 0x1b, 0x8d, [@empty, @multicast2, @remote, @loopback, @loopback, @dev={0xac, 0x14, 0x14, 0x3e}]}, @cipso={0x86, 0x3c, 0x0, [{0x1, 0xd, "8b39dd3b9785dc19b1b948"}, {0x1, 0x10, "a505d443843559a6e80e990750fb"}, {0x2, 0xb, "0f7e50b75df87b9e03"}, {0x7, 0xe, "fcd8f10fe7e370152fa0d640"}]}]}}, "4bc7e6855e024a8f"}}}, 0x1bc) getsockopt$inet_sctp6_SCTP_STREAM_SCHEDULER(r0, 0x84, 0x7b, &(0x7f00000000c0)={0x0, 0x7fff}, &(0x7f0000000140)=0x8) r5 = socket(0x10, 0x3, 0x0) getsockopt$sock_linger(r5, 0x1, 0x38, 0x0, &(0x7f0000000240)) r6 = socket$alg(0x26, 0x5, 0x0) getsockopt$SO_BINDTODEVICE(r0, 0x1, 0x19, &(0x7f0000000a00), 0x10) bind$alg(r6, &(0x7f0000000280)={0x26, 'skcipher\x00', 0x0, 0x0, 'ctr(sm4)\x00'}, 0x58) setsockopt$ALG_SET_KEY(r6, 0x117, 0x1, &(0x7f0000000140)="2c385aa3d49100dc6626c892b6bc436a", 0x10) getpeername$packet(0xffffffffffffffff, &(0x7f0000000780)={0x11, 0x0, 0x0}, &(0x7f00000007c0)=0x14) sendmmsg$inet6(r0, &(0x7f0000000980)=[{{&(0x7f0000000100)={0xa, 0x4e20, 0x1ad, @private0={0xfc, 0x0, '\x00', 0x1}, 0x9}, 0x1c, &(0x7f00000003c0)=[{&(0x7f0000000340)="562925e2f5abfd9d92fdbfa6d6a2599989fc99176e325d9a4db4d6f0473df7157d07e2cbe190adc5c27f0de614ca78583a541b692a74ad15b0c6e9ab4f98bb484abb2afa6bafb5b26ecd330853fe45dcfbf042c60d2b95cd192978856e6615db664e716172", 0x65}], 0x1, &(0x7f0000000400)=[@dstopts={{0x1d0, 0x29, 0x37, {0x3b, 0x37, '\x00', [@pad1, @generic={0x0, 0xb8, "ed6709d3790a522e47ad948885cd812b930d80aaf93b0de48096b8e8cc739df9a049ccd31c8b6207169475325bb501785dc8f522a2b92ea417245e5e1500c7e050d02c1392d801ee9df51005086022bbad20aa96f45254f4964b09d73faa840f43ca5c76b765c6ca1c0bc58cc7bd39c2a14d4a8d46a4c66dd2f2e606dd1325f4ec4778229ca3a3d11e49b10c86074d0307f7e1dcf96ccd840d4e033fc2a80cca91787c6719e4649e6fda3539a71fdbfe722c3dd39e51f74f"}, @calipso={0x7, 0x20, {0x1, 0x6, 0xe0, 0xa85, [0x100000001, 0x8000, 0xfffffffffffffeff]}}, @enc_lim={0x4, 0x1, 0x8f}, @generic={0x3, 0xbb, "6e723c10303b7287640517461ae0fec3d75a3516f5e7525b5fc1f59c5f54681c3e62fa2e27de7ab998a5fa1210f397fa7772dfde3c79654ae1e1f875272b49b7304afd0e721ba6f052d99a592e3a326f79d30974a7cc3b8aada5d3fa19c26bce075292423db7b7d5f39f801ec394578792e9c5f55630ed4e8940f6c439635d0d2e98385b2bd75280ac60fb9305b3d20b2a4a5a51c81ec6fd33562746c086211f3f016fb2409abadaee6435adbfc351f82fd93918bf9e23b1f9a08f"}, @hao={0xc9, 0x10, @rand_addr=' \x01\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x00\x01'}, @ra={0x5, 0x2, 0x4}, @enc_lim={0x4, 0x1, 0x6}]}}}, @hopopts={{0x30, 0x29, 0x36, {0x65, 0x2, '\x00', [@pad1, @enc_lim={0x4, 0x1, 0x7}, @ra={0x5, 0x2, 0x3}, @enc_lim={0x4, 0x1, 0xb3}, @ra={0x5, 0x2, 0x1}, @jumbo={0xc2, 0x4, 0x5}]}}}, @dstopts_2292={{0x30, 0x29, 0x4, {0x8, 0x2, '\x00', [@pad1, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}, @enc_lim={0x4, 0x1, 0xc}, @padn={0x1, 0x1, [0x0]}, @padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @hoplimit={{0x14, 0x29, 0x34, 0x7ff}}, @hoplimit_2292={{0x14, 0x29, 0x8, 0x3}}, @hopopts={{0x20, 0x29, 0x36, {0x8, 0x0, '\x00', [@enc_lim={0x4, 0x1, 0x1}]}}}], 0x280}}, {{&(0x7f0000000680)={0xa, 0x4e24, 0x3, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x6a2d}, 0x1c, &(0x7f0000000740)=[{&(0x7f00000006c0)="cd638fbedde8b8ed39744dfd632787f7890c062e3fe8cb8fac47b4710208474a32a5e42fc61efa45aa2d87f5ba9b15b6c10a043a4d15a64962d8b325f7459f4f6cfb330ad7", 0x45}], 0x1, &(0x7f0000000800)=[@dstopts_2292={{0x90, 0x29, 0x4, {0x2c, 0xe, '\x00', [@generic={0x9, 0x71, "c56068d384871350746ad7f4a14a7b85a5d686e9008fd19bc5d273bcc88b5a46b2c72474b4dcfae4afb3f177a590ec987e6247ff92ab6eb54d72c9632263c9b41d5fae91b29675aa67a244298444b837dee83a4744eff5be009cab74e9185ff59369c36716ce091e683a8d3e6fa936a1da"}]}}}, @pktinfo={{0x24, 0x29, 0x32, {@mcast1, r7}}}, @hopopts_2292={{0x28, 0x29, 0x36, {0x5e, 0x1, '\x00', [@padn={0x1, 0x1, [0x0]}, @ra={0x5, 0x2, 0x2}, @padn={0x1, 0x2, [0x0, 0x0]}]}}}, @flowinfo={{0x14, 0x29, 0xb, 0x4}}, @hopopts_2292={{0x20, 0x29, 0x36, {0x2f, 0x0, '\x00', [@padn={0x1, 0x5, [0x0, 0x0, 0x0, 0x0, 0x0]}]}}}, @dontfrag={{0x14, 0x29, 0x3e, 0x93e5}}, @rthdr_2292={{0x48, 0x29, 0x39, {0x0, 0x6, 0x3, 0x5, 0x0, [@remote, @loopback, @private2={0xfc, 0x2, '\x00', 0x1}]}}}], 0x178}}], 0x2, 0x11) r8 = accept4(r6, 0x0, 0x0, 0x80000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000180), r8) writev(r8, &(0x7f0000000040)=[{&(0x7f00000012c0)="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", 0xfd1}], 0x1) sendmsg$NL80211_CMD_UNEXPECTED_FRAME(r8, &(0x7f0000000200)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000640)=ANY=[], 0x14}, 0x1, 0x0, 0x0, 0x4001}, 0x40000) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x8, 0x4, &(0x7f0000000040)=@framed={{0xffffffb4, 0x0, 0x0, 0x0, 0x80000001, 0xffffffdd, 0xa}, [@ldst={0x3, 0x2, 0x3, 0x1c10a1, 0x0, 0x33}]}, &(0x7f0000003ff6)='GPL\x00', 0x5, 0xc3, &(0x7f000000cf3d)=""/195, 0x0, 0x0, '\x00', 0x0, @cgroup_skb, 0xffffffffffffffff, 0x19, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000080), 0x10}, 0x94) 2m30.271969258s ago: executing program 4 (id=1019): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="240000002d000100000000000000000008000c00", @ANYRES32], 0x24}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r7, 0xff04, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e40)=@newtclass={0x24, 0x28, 0x1, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x11, 0x7}, {0xf, 0xd}, {0xa, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84044}, 0x80) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x6, 0x5, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x1, 0x0, 0x6}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0003e32fcbfbe21f0e9f28582cbd70000100000004eda37c8371018008000100", @ANYRES32=r5, @ANYBLOB="2800018008000100", @ANYRES32=r8, @ANYBLOB="14000200626174616476300000000000000000000800030003000000"], 0x48}, 0x1, 0x0, 0x0, 0x4040}, 0x4048850) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000160a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="05f300000000000000002000000004000380"], 0x18}}, 0x0) 2m14.943525245s ago: executing program 32 (id=1019): r0 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000100), 0xffffffffffffffff) r1 = socket$netlink(0x10, 0x3, 0x0) sendmsg$netlink(r1, &(0x7f0000001280)={0x0, 0x0, &(0x7f0000000280)=[{&(0x7f0000000380)=ANY=[@ANYBLOB="240000002d000100000000000000000008000c00", @ANYRES32], 0x24}], 0x1, 0x0, 0x0, 0x2000000}, 0x0) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000340)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r3, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000000c0)={{0x14}, [@NFT_MSG_NEWRULE={0x4c, 0x6, 0xa, 0x40b, 0x0, 0x0, {0x2}, [@NFTA_RULE_EXPRESSIONS={0x20, 0x4, 0x0, 0x1, [{0x1c, 0x1, 0x0, 0x1, @bitwise={{0xc}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_BITWISE_LEN={0x8}]}}}]}, @NFTA_RULE_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}]}], {0x14}}, 0x74}}, 0x0) r4 = socket(0x400000000010, 0x3, 0x0) ioctl$sock_SIOCGIFINDEX(r4, 0x8933, &(0x7f00000000c0)={'dummy0\x00', 0x0}) socketpair$unix(0x1, 0x2, 0x0, &(0x7f0000000680)={0xffffffffffffffff, 0xffffffffffffffff}) setsockopt$sock_attach_bpf(r6, 0x1, 0x4c, &(0x7f0000000000), 0x4) recvmsg$unix(r6, &(0x7f0000000080)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000300)=[@rights={{0x14, 0x1, 0x1, [0xffffffffffffffff]}}], 0x18}, 0x2000) ioctl$TUNSETNOCSUM(r7, 0xff04, 0x0) sendmsg$nl_route_sched(r4, &(0x7f0000006040)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000e40)=@newtclass={0x24, 0x28, 0x1, 0x70bd2b, 0x25dfdbfd, {0x0, 0x0, 0x0, r5, {0x11, 0x7}, {0xf, 0xd}, {0xa, 0x1}}}, 0x24}, 0x1, 0x0, 0x0, 0x84044}, 0x80) ioctl$sock_ipv6_tunnel_SIOCCHGTUNNEL(0xffffffffffffffff, 0x89f3, &(0x7f00000000c0)={'syztnl2\x00', &(0x7f0000000040)={'ip6_vti0\x00', 0x0, 0x29, 0x0, 0x6, 0x5, 0x4, @private0={0xfc, 0x0, '\x00', 0x1}, @initdev={0xfe, 0x88, '\x00', 0x1, 0x0}, 0x40, 0x1, 0x0, 0x6}}) sendmsg$ETHTOOL_MSG_LINKMODES_GET(r1, &(0x7f0000000340)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x8000}, 0xc, &(0x7f0000000140)={&(0x7f00000003c0)=ANY=[@ANYBLOB='H\x00\x00\x00', @ANYRES16=0x0, @ANYBLOB="0003e32fcbfbe21f0e9f28582cbd70000100000004eda37c8371018008000100", @ANYRES32=r5, @ANYBLOB="2800018008000100", @ANYRES32=r8, @ANYBLOB="14000200626174616476300000000000000000000800030003000000"], 0x48}, 0x1, 0x0, 0x0, 0x4040}, 0x4048850) r9 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r9, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000003c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000680)=ANY=[@ANYBLOB="14000000100001000000000000b890c1a000000a80000000160a01030000000000000000020000000900020073797a30000000000900010073797a30000000005400038008000240000000000800014000000000400003801400010076657468315f746f5f6272696467650014000100776732000000000000000000000000001400010076657468305f746f5f7465616d00000014000000110001"], 0xa8}}, 0x0) sendmsg$NFT_BATCH(r9, &(0x7f0000000500)={0x0, 0x0, &(0x7f00000004c0)={&(0x7f0000000540)=ANY=[@ANYBLOB="140000001000010000000000000000000500000a5c000000160a0500000000000000000002000000300003802c00038004000100776732000000000000000000000000001400010076657468315f746f5f627269646765000900020073797a30000000000900010073797a30"], 0x84}, 0x1, 0x0, 0x0, 0x40000}, 0x20008000) sendmsg$ETHTOOL_MSG_PRIVFLAGS_SET(r2, &(0x7f0000000300)={0x0, 0x0, &(0x7f00000002c0)={&(0x7f0000000180)=ANY=[@ANYBLOB="18000000", @ANYRES16=r0, @ANYBLOB="05f300000000000000002000000004000380"], 0x18}}, 0x0) 1m10.849958984s ago: executing program 2 (id=591): r0 = socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) bpf$LINK_DETACH(0x22, &(0x7f0000001ac0)=r1, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0x0, 0x0}, 0x10) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000080)=0xa, 0x4) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={r1, r1, 0x4, r1}, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) listen(r2, 0x4) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x6}, 0x20) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 1m0.909962269s ago: executing program 2 (id=591): r0 = socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) bpf$LINK_DETACH(0x22, &(0x7f0000001ac0)=r1, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0x0, 0x0}, 0x10) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000080)=0xa, 0x4) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={r1, r1, 0x4, r1}, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) listen(r2, 0x4) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x6}, 0x20) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 51.555485938s ago: executing program 2 (id=591): r0 = socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) bpf$LINK_DETACH(0x22, &(0x7f0000001ac0)=r1, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0x0, 0x0}, 0x10) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000080)=0xa, 0x4) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={r1, r1, 0x4, r1}, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) listen(r2, 0x4) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x6}, 0x20) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 47.093449664s ago: executing program 1 (id=2090): r0 = socket$netlink(0x10, 0x3, 0x0) r1 = socket(0x10, 0x803, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) r3 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) r4 = openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) r5 = bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r5, 0x2, 0x2}, 0x10) bpf$ENABLE_STATS(0x20, 0x0, 0x0) socket(0x2, 0x80805, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) socket$netlink(0x10, 0x3, 0x0) (async) socket(0x10, 0x803, 0x0) (async) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x0, 0x0) (async) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000200)={'rose0\x00', 0x112}) (async) socket$nl_route(0x10, 0x3, 0x0) (async) sendmsg$nl_route(r3, &(0x7f0000000440)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000240)=ANY=[@ANYBLOB="e80000006c00010029bd7000fcdbdf2500000000", @ANYRES32, @ANYBLOB="001000008000000008000f002000000014003500726f7365300000000000000000000000a40034801400350070696d367265673000000020000000001400350076657468305f6d614176746170000000140035006d61637674617030020000000000000014003500677265300000000000000000000000001400350076657468305f746f5f626174616476001400350001657468315f6d6163767461700000001400350067726530000000000000000000000000140035006261746164765f736c6176655f31000008000f"], 0xe8}}, 0x0) (async) bpf$BPF_TASK_FD_QUERY(0x14, &(0x7f0000000240)={0x0, 0xffffffffffffffff, 0x0, 0x7, &(0x7f0000000000)='cgroup\x00'}, 0x30) (async) openat$cgroup_root(0xffffffffffffff9c, &(0x7f0000000000), 0x200002, 0x0) (async) bpf$PROG_LOAD(0x5, &(0x7f0000000080)={0x9, 0x4, &(0x7f00000008c0)=ANY=[@ANYBLOB="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"], &(0x7f0000000100)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @cgroup_sock}, 0x70) (async) bpf$BPF_PROG_DETACH(0x8, &(0x7f0000000040)={@cgroup=r4, r5, 0x2, 0x2}, 0x10) (async) bpf$ENABLE_STATS(0x20, 0x0, 0x0) (async) socket(0x2, 0x80805, 0x0) (async) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r6, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x0) (async) 46.75745074s ago: executing program 1 (id=2093): r0 = socket$inet6_sctp(0xa, 0x1, 0x84) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f0000000000)={0x0, 0x8000}, 0x8) ioctl$sock_SIOCSIFVLAN_GET_VLAN_REALDEV_NAME_CMD(r0, 0x8983, &(0x7f0000000040)={0x8, 'ip6_vti0\x00', {'veth1_to_bond\x00'}, 0x6}) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) ioctl$EXT4_IOC_GETSTATE(r1, 0x40046629, &(0x7f0000000080)) setsockopt$inet_sctp6_SCTP_AUTH_ACTIVE_KEY(r0, 0x84, 0x18, &(0x7f00000000c0), 0x8) r2 = socket$isdn(0x22, 0x3, 0x26) r3 = socket$inet_icmp(0x2, 0x2, 0x1) getsockopt$inet_opts(r3, 0x0, 0x9, &(0x7f0000000100), &(0x7f0000000140)) ioctl$F2FS_IOC_MOVE_RANGE(r1, 0xc020f509, &(0x7f0000000180)={r2, 0x9, 0x3, 0x9}) connect$pppl2tp(r4, &(0x7f00000001c0)=@pppol2tpv3={0x18, 0x1, {0x0, r2, {0x2, 0x4e22, @private=0xa010100}, 0x2, 0x3, 0x4, 0x3}}, 0x2e) r5 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$pppl2tp(r4, &(0x7f0000000200)=@pppol2tp={0x18, 0x1, {0x0, r5, {0x2, 0x4e20, @loopback}, 0x0, 0x2, 0x3, 0x2}}, 0x26) r6 = socket$inet6_icmp_raw(0xa, 0x3, 0x3a) ioctl$FIGETBSZ(r6, 0x2, &(0x7f0000000240)) syz_genetlink_get_family_id$ethtool(&(0x7f0000000280), r4) r7 = syz_genetlink_get_family_id$batadv(&(0x7f0000000300), r4) sendmsg$BATADV_CMD_GET_NEIGHBORS(r6, &(0x7f00000003c0)={&(0x7f00000002c0)={0x10, 0x0, 0x0, 0x83000}, 0xc, &(0x7f0000000380)={&(0x7f0000000340)={0x1c, r7, 0x400, 0x70bd2d, 0x25dfdbfb, {}, [@BATADV_ATTR_VLANID={0x6, 0x28, 0x2}]}, 0x1c}, 0x1, 0x0, 0x0, 0x20008040}, 0x88c0) bpf$MAP_UPDATE_CONST_STR(0x2, &(0x7f0000000480)={{r4, 0xffffffffffffffff}, &(0x7f0000000400), &(0x7f0000000440)='%pI4 \x00'}, 0x20) ioctl$BTRFS_IOC_GET_SUBVOL_INFO(r8, 0x81f8943c, &(0x7f00000004c0)) socket$nl_rdma(0x10, 0x3, 0x14) sendmsg$AUDIT_GET(r4, &(0x7f0000000780)={&(0x7f00000006c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000740)={&(0x7f0000000700)={0x10, 0x3e8, 0x800, 0x70bd2a, 0x25dfdbfd, "", ["", "", "", "", "", "", "", ""]}, 0x10}, 0x1, 0x0, 0x0, 0x4000881}, 0x20008000) r9 = syz_genetlink_get_family_id$nl80211(&(0x7f0000000800), r4) ioctl$sock_SIOCGIFINDEX_80211(r4, 0x8933, &(0x7f0000000840)={'wlan1\x00', 0x0}) sendmsg$NL80211_CMD_DEL_PMK(r4, &(0x7f0000000900)={&(0x7f00000007c0)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f00000008c0)={&(0x7f0000000880)={0x34, r9, 0x2, 0x70bd2c, 0xfffffe01, {{}, {@val={0x8, 0x3, r10}, @val={0xc, 0x99, {0x2, 0x7f}}}}, [@NL80211_ATTR_MAC={0xa}]}, 0x34}, 0x1, 0x0, 0x0, 0x44811}, 0x14) connect$pppl2tp(r4, &(0x7f0000000940)=@pppol2tp={0x18, 0x1, {0x0, r1, {0x2, 0x4e24, @private=0xa010101}, 0x2, 0x0, 0x4}}, 0x26) r11 = accept4$x25(r4, &(0x7f0000000980)={0x9, @remote}, &(0x7f00000009c0)=0x12, 0x800) shutdown(r11, 0x1) ioctl$sock_ipv4_tunnel_SIOCADDTUNNEL(r4, 0x89f1, &(0x7f0000000cc0)={'syztnl0\x00', &(0x7f0000000c40)={'erspan0\x00', 0x0, 0x7840, 0x0, 0x761a, 0x2, {{0x11, 0x4, 0x1, 0x3a, 0x44, 0x67, 0x0, 0x80, 0x29, 0x0, @empty, @multicast1, {[@ssrr={0x89, 0x17, 0x6b, [@multicast2, @broadcast, @rand_addr=0x64010101, @broadcast, @multicast1]}, @end, @lsrr={0x83, 0xb, 0xa, [@remote, @initdev={0xac, 0x1e, 0x1, 0x0}]}, @generic={0x83, 0xc, "ad97be2272d30a7a135f"}]}}}}}) bpf$PROG_LOAD(0x5, &(0x7f00000025c0)={0x1d, 0x1a, &(0x7f0000000a00)=@ringbuf={{0x18, 0x0, 0x0, 0x0, 0x4, 0x0, 0x0, 0x0, 0x5da4}, {{0x18, 0x1, 0x1, 0x0, r4}}, {}, [@btf_id={0x18, 0x2, 0x3, 0x0, 0x2}, @printk={@lld, {}, {}, {}, {}, {0x7, 0x0, 0xb, 0x3, 0x0, 0x0, 0x7fff}}, @kfunc={0x85, 0x0, 0x2, 0x0, 0x5}], {{}, {}, {0x85, 0x0, 0x0, 0x84}}}, &(0x7f0000000b00)='syzkaller\x00', 0xc, 0xe8, &(0x7f0000000b40)=""/232, 0x41100, 0x0, '\x00', r12, @fallback=0x10, 0xffffffffffffffff, 0x8, &(0x7f0000000fc0)={0x0, 0x3}, 0x8, 0x10, &(0x7f0000001000)={0x0, 0x4, 0x9, 0x957b}, 0x10, 0x0, 0xffffffffffffffff, 0x2, 0x0, &(0x7f0000002580)=[{0x5, 0x3, 0x10, 0x1}, {0x4, 0x5, 0xa, 0x8}], 0x10, 0x1}, 0x94) 46.638385701s ago: executing program 1 (id=2095): setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x3, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="b40500000000000061109700001c00000711c200000010009500000000000000d71cd9a33b2669937566be10abddf6f3a84f99f99c941b38a1379f5f3b7a158c63989a2b843f6ffac634b89c30747e8f92e22164b3905f33954e4f78754b7782b850fa2053c39c3c4393d4537f2825fd9fa942472bfe3030d2aca82997350815c98d573306b5fabfc867548a8915"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@getchain={0x24, 0x66, 0x800, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xffe0, 0x3}, {0x4, 0x7}, {0xfff3, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0xfffffffffffffffd, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000000)=""/48, &(0x7f0000000080)=0x30) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3cff0300090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021540000000c0a01030000000000000000070000000900020073797a31000000000900010063797a30000000052800038024000080080003400000000218000b80140002800a00010071756f746100000004000280140000001000010000000000000000000084000a"], 0xb8}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000180)=""/32, &(0x7f00000001c0)=0x20) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000600)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)=@nl=@unspec, 0x80, &(0x7f0000000280)=[{&(0x7f00000003c0)=""/82, 0x52}], 0x1}, 0x40000023) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_delroute={0x28, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_MULTIPATH={0xc}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r11 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) ioctl$SIOCAX25ADDFWD(r11, 0x89ea, &(0x7f0000000100)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) 33.695913379s ago: executing program 2 (id=591): r0 = socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) bpf$LINK_DETACH(0x22, &(0x7f0000001ac0)=r1, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0x0, 0x0}, 0x10) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000080)=0xa, 0x4) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={r1, r1, 0x4, r1}, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) listen(r2, 0x4) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x6}, 0x20) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 32.603906722s ago: executing program 1 (id=2095): setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x3, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="b40500000000000061109700001c00000711c200000010009500000000000000d71cd9a33b2669937566be10abddf6f3a84f99f99c941b38a1379f5f3b7a158c63989a2b843f6ffac634b89c30747e8f92e22164b3905f33954e4f78754b7782b850fa2053c39c3c4393d4537f2825fd9fa942472bfe3030d2aca82997350815c98d573306b5fabfc867548a8915"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@getchain={0x24, 0x66, 0x800, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xffe0, 0x3}, {0x4, 0x7}, {0xfff3, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0xfffffffffffffffd, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000000)=""/48, &(0x7f0000000080)=0x30) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3cff0300090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021540000000c0a01030000000000000000070000000900020073797a31000000000900010063797a30000000052800038024000080080003400000000218000b80140002800a00010071756f746100000004000280140000001000010000000000000000000084000a"], 0xb8}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000180)=""/32, &(0x7f00000001c0)=0x20) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000600)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)=@nl=@unspec, 0x80, &(0x7f0000000280)=[{&(0x7f00000003c0)=""/82, 0x52}], 0x1}, 0x40000023) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_delroute={0x28, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_MULTIPATH={0xc}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r11 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) ioctl$SIOCAX25ADDFWD(r11, 0x89ea, &(0x7f0000000100)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) 20.107091148s ago: executing program 2 (id=591): r0 = socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) bpf$LINK_DETACH(0x22, &(0x7f0000001ac0)=r1, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0x0, 0x0}, 0x10) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000080)=0xa, 0x4) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={r1, r1, 0x4, r1}, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) listen(r2, 0x4) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x6}, 0x20) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 19.341216797s ago: executing program 1 (id=2095): setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x3, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="b40500000000000061109700001c00000711c200000010009500000000000000d71cd9a33b2669937566be10abddf6f3a84f99f99c941b38a1379f5f3b7a158c63989a2b843f6ffac634b89c30747e8f92e22164b3905f33954e4f78754b7782b850fa2053c39c3c4393d4537f2825fd9fa942472bfe3030d2aca82997350815c98d573306b5fabfc867548a8915"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@getchain={0x24, 0x66, 0x800, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xffe0, 0x3}, {0x4, 0x7}, {0xfff3, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0xfffffffffffffffd, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000000)=""/48, &(0x7f0000000080)=0x30) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3cff0300090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021540000000c0a01030000000000000000070000000900020073797a31000000000900010063797a30000000052800038024000080080003400000000218000b80140002800a00010071756f746100000004000280140000001000010000000000000000000084000a"], 0xb8}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000180)=""/32, &(0x7f00000001c0)=0x20) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000600)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)=@nl=@unspec, 0x80, &(0x7f0000000280)=[{&(0x7f00000003c0)=""/82, 0x52}], 0x1}, 0x40000023) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_delroute={0x28, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_MULTIPATH={0xc}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r11 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) ioctl$SIOCAX25ADDFWD(r11, 0x89ea, &(0x7f0000000100)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) 3.898379024s ago: executing program 2 (id=591): r0 = socket$l2tp6(0xa, 0x2, 0x73) (async) r1 = openat$cgroup_ro(0xffffffffffffff9c, &(0x7f0000000280)='cgroup.controllers\x00', 0x275a, 0x0) close(r1) bpf$LINK_DETACH(0x22, &(0x7f0000001ac0)=r1, 0x4) bpf$BPF_GET_MAP_INFO(0xf, &(0x7f00000000c0)={r1, 0x0, 0x0}, 0x10) setsockopt$inet_sctp_SCTP_PARTIAL_DELIVERY_POINT(r1, 0x84, 0x13, &(0x7f0000000080)=0xa, 0x4) (async) bpf$BPF_LINK_UPDATE(0x1d, &(0x7f0000000100)={r1, r1, 0x4, r1}, 0x10) (async) r2 = socket$nl_generic(0x10, 0x3, 0x10) listen(r2, 0x4) bind$l2tp6(r0, &(0x7f0000000000)={0xa, 0x0, 0x1, @empty, 0x0, 0x6}, 0x20) (async) r3 = socket$nl_generic(0x10, 0x3, 0x10) (async) r4 = syz_genetlink_get_family_id$l2tp(&(0x7f0000000140), 0xffffffffffffffff) sendmsg$L2TP_CMD_TUNNEL_CREATE(r3, &(0x7f0000000380)={0x0, 0x0, &(0x7f0000000040)={&(0x7f00000003c0)=ANY=[@ANYBLOB='\\\x00\x00\x00', @ANYRES16=r4, @ANYBLOB="0100000000000000000001000500050007000000000008000900030000001400200000000000000000000000e1ffe000000108000a0000000000060002000100000014001f"], 0x5c}, 0x1, 0x6c}, 0x0) 2.49444794s ago: executing program 1 (id=2095): setsockopt$RXRPC_MIN_SECURITY_LEVEL(0xffffffffffffffff, 0x110, 0x3, &(0x7f0000000080), 0x4) bpf$PROG_LOAD(0x5, &(0x7f000000e000)={0x3, 0x4, &(0x7f0000000a00)=ANY=[@ANYBLOB="b40500000000000061109700001c00000711c200000010009500000000000000d71cd9a33b2669937566be10abddf6f3a84f99f99c941b38a1379f5f3b7a158c63989a2b843f6ffac634b89c30747e8f92e22164b3905f33954e4f78754b7782b850fa2053c39c3c4393d4537f2825fd9fa942472bfe3030d2aca82997350815c98d573306b5fabfc867548a8915"], 0x0, 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sched_cls, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) r0 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x0, 0x0) ioctl$TUNSETIFF(r0, 0x400454ca, &(0x7f0000000040)={'syzkaller0\x00', 0x7101}) r1 = socket(0x400000000010, 0x3, 0x0) r2 = socket$unix(0x1, 0x1, 0x0) ioctl$sock_SIOCGIFINDEX(r2, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) sendmsg$nl_route_sched(r1, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000005c0)=@newqdisc={0x38, 0x24, 0x4ee4e6a52ff56541, 0x70bd2d, 0xffffffff, {0x0, 0x0, 0x0, r3, {0x0, 0xfff1}, {0xffff, 0xffff}, {0x1, 0xf}}, [@qdisc_kind_options=@q_multiq={{0xb}, {0x8, 0x2, {0x28}}}]}, 0x38}}, 0x0) sendmsg$nl_route_sched(r1, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000440)={&(0x7f00000004c0)=@getchain={0x24, 0x66, 0x800, 0x70bd28, 0x25dfdbfb, {0x0, 0x0, 0x0, r3, {0xffe0, 0x3}, {0x4, 0x7}, {0xfff3, 0xf}}}, 0x24}, 0x1, 0x0, 0x0, 0x80}, 0x800) r4 = socket$inet6_sctp(0xa, 0x5, 0x84) setsockopt$IPT_SO_SET_REPLACE(r1, 0x0, 0x40, 0xfffffffffffffffd, 0x0) getsockopt$inet_sctp6_SCTP_PR_STREAM_STATUS(r4, 0x84, 0x74, &(0x7f0000000000)=""/48, &(0x7f0000000080)=0x30) r5 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r6 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) r7 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r7, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a3cff0300090a010400000000000000000700000008000a40000000000900020073797a31000000000900010073797a30000000000800054000000021540000000c0a01030000000000000000070000000900020073797a31000000000900010063797a30000000052800038024000080080003400000000218000b80140002800a00010071756f746100000004000280140000001000010000000000000000000084000a"], 0xb8}}, 0x0) getsockopt$IP_VS_SO_GET_DESTS(r5, 0x0, 0x484, &(0x7f0000000180)=""/32, &(0x7f00000001c0)=0x20) setsockopt$SO_ATTACH_FILTER(r6, 0x1, 0x1a, &(0x7f0000000080)={0x1, &(0x7f0000000040)=[{0x6}]}, 0x10) ioctl$VFAT_IOCTL_READDIR_SHORT(r1, 0x82307202, &(0x7f0000000600)=[{0x0, 0x0, 0x100}, {0x0, 0x0, 0x100}]) recvmsg(0xffffffffffffffff, &(0x7f0000000300)={&(0x7f0000000200)=@nl=@unspec, 0x80, &(0x7f0000000280)=[{&(0x7f00000003c0)=""/82, 0x52}], 0x1}, 0x40000023) bind$bt_hci(r1, &(0x7f0000000140)={0x1f, 0xffff, 0x2}, 0x6) openat$tun(0xffffffffffffff9c, &(0x7f0000000000), 0x48241, 0x0) r8 = socket$inet6_udp(0xa, 0x2, 0x0) r9 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r9, &(0x7f0000000080)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000000)=@mpls_delroute={0x28, 0x18, 0x9, 0x0, 0x0, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_MULTIPATH={0xc}]}, 0x28}}, 0x0) ioctl$sock_SIOCGIFINDEX(r8, 0x8933, &(0x7f0000000040)={'lo\x00', 0x0}) r11 = syz_init_net_socket$ax25(0x3, 0x2, 0xcd) ioctl$SIOCAX25ADDFWD(r11, 0x89ea, &(0x7f0000000100)={@default, @rose={0xbb, 0xbb, 0xbb, 0x1, 0x0}}) sendmsg$nl_route_sched(0xffffffffffffffff, &(0x7f00000012c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=@newqdisc={0x48, 0x24, 0x4ee4e6a52ff56541, 0x0, 0x0, {0x0, 0x0, 0x0, r10, {}, {0xffff, 0xffff}}, [@qdisc_kind_options=@q_prio={{0x9}, {0x18, 0x2, {0xf, "0000000000000000000100000e00"}}}]}, 0x48}, 0x1, 0x0, 0x0, 0x2000000}, 0x0) sendmsg$nl_generic(0xffffffffffffffff, &(0x7f0000000240)={0x0, 0x0, &(0x7f0000000480)={&(0x7f0000000080)=ANY=[], 0x78}}, 0x0) 2.074067865s ago: executing program 5 (id=2373): r0 = socket$netlink(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_DROP_MEMBERSHIP(r0, 0x10e, 0xc, &(0x7f00000000c0)=0x8004, 0x4) ioctl$sock_SIOCGPGRP(r0, 0x8904, &(0x7f0000000300)=0x0) r2 = getgid() r3 = syz_init_net_socket$nfc_raw(0x27, 0x3, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340), &(0x7f0000000380)=0xc) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000340)={0x0}, &(0x7f0000000380)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000003c0)={0x0, 0x0}, &(0x7f0000000400)=0xc) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440), &(0x7f0000000480)=0xc) (async) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f0000000440)={0x0, 0x0, 0x0}, &(0x7f0000000480)=0xc) socket$inet6_udp(0xa, 0x2, 0x0) (async) r8 = socket$inet6_udp(0xa, 0x2, 0x0) getsockopt$sock_cred(r0, 0x1, 0x11, &(0x7f00000004c0)={0x0}, &(0x7f0000000500)=0xc) getsockopt$inet6_IPV6_XFRM_POLICY(0xffffffffffffffff, 0x29, 0x23, &(0x7f00000005c0)={{{@in=@local, @in6=@empty, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}}, {{@in=@dev}, 0x0, @in=@local}}, &(0x7f0000000540)=0xe8) sendmsg$netlink(r0, &(0x7f00000007c0)={&(0x7f00000001c0)=@proc={0x10, 0x0, 0x25dfdbfe, 0x800000}, 0xc, &(0x7f0000000240)=[{&(0x7f0000000200)={0x1c, 0x3b, 0x200, 0x70bd29, 0x25dfdbfd, "", [@typed={0xc, 0x14e, 0x0, 0x0, @str='ethtool\x00'}]}, 0x1c}], 0x1, &(0x7f00000006c0)=[@rights={{0x14, 0x1, 0x1, [r0]}}, @cred={{0x1c, 0x1, 0x2, {r1, 0xffffffffffffffff, r2}}}, @rights={{0x24, 0x1, 0x1, [r0, r0, r0, r0, r3]}}, @cred={{0x1c, 0x1, 0x2, {r4, r5, r7}}}, @rights={{0x20, 0x1, 0x1, [r8, r0, r0, r0]}}, @rights={{0x1c, 0x1, 0x1, [r0, r0, r0]}}, @cred={{0x1c, 0x1, 0x2, {r9, r10}}}], 0xe0, 0x48040}, 0x40080) r11 = socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) (async) r12 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r11, &(0x7f00000002c0)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000000)={0x34, r12, 0x1, 0x0, 0x0, {0x10}, [@ETHTOOL_A_COALESCE_HEADER={0x18, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0\x00'}]}, @ETHTOOL_A_COALESCE_USE_ADAPTIVE_RX={0x5}]}, 0x34}}, 0x0) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x1, "9595f429ae08"}]}}}}}}, 0x0) (async) syz_emit_ethernet(0x66, &(0x7f00000003c0)={@random="e33110495bfd", @dev, @void, {@ipv6={0x86dd, @icmpv6={0x0, 0x6, "cb653e", 0x30, 0x3a, 0xff, @dev, @local, {[], @ndisc_redir={0x89, 0x0, 0x0, '\x00', @rand_addr=' \x01\x00', @private1, [{0x4, 0x1, "9595f429ae08"}]}}}}}}, 0x0) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r12, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX={0x8}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40090}, 0x8804) (async) sendmsg$ETHTOOL_MSG_RINGS_SET(r0, &(0x7f0000000140)={&(0x7f0000000040)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000100)={&(0x7f0000000080)={0x24, r12, 0x200, 0x70bd29, 0x25dfdbfe, {}, [@ETHTOOL_A_RINGS_RX={0x8}, @ETHTOOL_A_RINGS_RX_MINI={0x8, 0x7, 0x5}]}, 0x24}, 0x1, 0x0, 0x0, 0x40090}, 0x8804) sendmsg$netlink(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000580)=[{&(0x7f0000000800)={0x614, 0x56, 0x601, 0xffffffff, 0x0, "", [@generic="3ea68ab9a57376b26d85f3a5ffec350a34a7a52defdfdf412649ae5e014ba32be20a47546a97148a438ebacda734cbcffd4cefb7b383e9d2d427ac154b911e", @nested={0x4b9, 0xec, 0x0, 0x1, [@typed={0x8, 0x106, 0x0, 0x0, @u32=0xfffff2ce}, @nested={0x167, 0xd, 0x0, 0x1, [@generic="da57dc539a77be1fc5bf2750e7ab4327d3eef49bdbe650da29d511237b3fc05be311916446135c9b6f61ed464c04900c9d11381a8130b517f8ae0dccb72600501f6495e06abd7787ae3548ca6d22b5f06896693370a010e67ea8f58a8fbf2ba2cdbe0bfdf536", @generic="d6d763d23c2dce936184b0d17a9f8104c293bb45bb2d70784bac9fa48f32e9ccb01caaa1bce7dde4a91f3973fdd4a512da85917c88839fdeeca2ded63066ea357be46519c0f6e96a7bc501d0a268925103f316e780e2a66b6df9f6a6a40b2af8eb3ab36ee9b30085fc833ff7d19f0de26d8f37b20852b84f55a2edb457576341ca08a0624b6b2a6feea4f915321df47e452cc33c40772abae570f9abdc0a28defb0ac5e8fc089bf308a9b3ecf1a685527bf04f717b01910db79ad3cb5308248346cdd06470212e00163fe1f9b7290e2a9db14744f8b3c9e742da759164cf6dcacf33ddfe57dbff2e64a0bc725676d19c9cea22e2abaa6a1690", @nested={0x4, 0x96}]}, @generic="594ecd54ee4d5a237a2f57fb893012d82506835c5b2cc153e0251af76b3f2f4deb62e8ace343227fcdb6a766e40d26437889b5fd2bffddfc7a623dca87aa334fac73de2959da076f0ef2442ae4e491b398b83d48f3ff8b7028b620c95c4d494831a6", @nested={0x141, 0xfc, 0x0, 0x1, [@generic="4774744b32864ac0d6d9a311354c91f6f5e05b9228ce0ad1c7bead9f4f81755e1794d2e9f4115e1bc8f48bc588e3a20dc42cc56342f1946c6cb6d86d1cc7d7993ff7606770db79597a27059b029aa626f22ee1cdd295bb1c6c712e41098060fd10841bba5f7f76f89923ebb5b833acdb1f2586146dda83", @generic="86a51fbeb5570bb83a3330763b91c4ecd2ce25d37e590b2bc23160b4b97e1ed50b9238e7f765bfc79f6229f05dae4869c633e80727414af3a637397354dace20984b1a478aa4c42e5520603492786a493ad95d574ca38f76e829c5e4a9a8d2870a22696c55683f4da2aa433252b0ded3e12f72f8784616646a32ddcaf8c21f2c6d714e3ad499f5e7d635824cc9ed6e089d7883728d6f9781e7711fd898244667562b95d52b7e99d4b78bf9130486b52dd86e9638ecf124186574518763610ededc0ba72e4e10"]}, @generic="ea7fa62024c1211d4dd31c7fee31077ebde6e9b1d90eedbbe9fbc8dfe3392436d786240cd37aad33f04fa1099a4dd754fdbb245d5f2b2ce2ee914c19d1631e96b87f2f9baf82adbab1be00bea42cdab5c8b782145d4dcfb7e036f3def7153a8438004bee3a7bb366e80da4a0c0", @generic="1bfa608faebfe6b1ef691cc0840b06a63e230dac1ff0261975ee4481a0ac9631d02e638d2ce583c76ddc8ada86c3ba6ef15c3825ff9636", @generic="c28e1af699908c762a0e2addb9a20a506b1de7c68e098b4ca2444664dc8d69228558d08319c66e49ba24b0045c9099d0e82036e59d1fb5959ea9a520b33f087a2a0db2e1e5d31a7394a87102537bcaa08add56ad685113d489c4ffa667f5779742ac0b3567acbf487b62bbba6ae794954890ca21b8513f94c08cc30f5a7fb2dfdc24720c072f079f44d2ac23fc229207e473f38e5f356fc6afaf22e70ecfefb3be117d1354b30224350709cc4a8454f1b561251507540e", @nested={0x43, 0x87, 0x0, 0x1, [@typed={0x8, 0x23, 0x0, 0x0, @u32=0x1}, @typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x8, 0x9e, 0x0, 0x0, @pid=r6}, @generic="355b51b8022178084c0ce67873ed0f3243b7387d2e21597f61f043", @nested={0x4, 0x10b}, @nested={0x4, 0x137}]}]}, @typed={0x8, 0x106, 0x0, 0x0, @ipv4=@private=0xa010101}, @typed={0xc, 0x205f, 0x0, 0x0, @u64=0xd}, @generic="133884f94776d7e3fbcbc1e004f410337860133201f7364de03c8f6d7e18e28d8131992d5118da3e2cf7572b162f02eafa517585fc16b858e486fd4bb393b06b1f0cb5bccc1d41435ce814b72049e84416c2977ea48cbaca165ddff66e917ced813e33a9445ac92ae998587070a4932c93c53af7f5b8969d1bd172a6b3480dd0ff827cc5b145f5dd78eb6205012c0d3174d3be54127d767149e125d8286006f3889e09fab09a16fff85f9a71404bab9086eb8944a979832b0999381457ff62466bb07439fd6cbf6a9f653cc6fa3fb87d7b02f19e648eb028c4d3490015c81e5bc67806f1078c2bb67b225576aff1870f6188d9a266"]}, 0x614}], 0x1}, 0x0) 2.0738285s ago: executing program 0 (id=2374): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) bind$inet6(r0, &(0x7f0000000040)={0xa, 0x4e22, 0x0, @empty, 0x7}, 0x1c) listen(r0, 0xfffffffc) r1 = socket$inet_mptcp(0x2, 0x1, 0x106) connect$inet(r1, &(0x7f0000000000)={0x2, 0x4e22, @local}, 0x10) r2 = socket$nl_generic(0x10, 0x3, 0x10) r3 = syz_genetlink_get_family_id$mptcp(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$MPTCP_PM_CMD_DEL_ADDR(r2, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000280)=ANY=[@ANYBLOB='(\x00\x00\x00', @ANYRES16=r3, @ANYBLOB="000200000000000000000200000014000180060001000200000008000300ac1414aae4a3976861dcb02f775c89880112f50be9dd44850e2226a54e1d2ca5c68a868fa6b169d892e4457880db97929d6b00b0617908d954ccdac1daac167896f35c31c37ae04d30c13b5da6d03e3e1d5f3b6704c79d3690161b86ab0da390ff7e9305ecc75b7825132aa874a93ee20466cffd2c84b862910a3e37cabb93ea3e3a578ab304b438013a029f8b8886225e7b87c9348ac16f9d9f1749c5ad71bf"], 0x28}}, 0x0) r4 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r4, &(0x7f0000000e00)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@ipmr_delroute={0x30, 0x19, 0x1, 0x0, 0x0, {0x80, 0x20, 0x0, 0x0, 0x0, 0x11, 0x0, 0x5}, [@RTA_MULTIPATH={0xc, 0x9, {0x8}}, @RTA_PREFSRC={0x8, 0x7, @multicast2}]}, 0x30}}, 0x0) sendmmsg$sock(r1, &(0x7f00000010c0)=[{{0x0, 0x0, &(0x7f00000006c0)=[{&(0x7f0000001200)="9f1d5e88616ef9edeb4e98e2cfbb07e844126e36b1ea5d75fcad45ac379cd3ba33f3fe4a858e4a42b23e4ef70a1a80ac567ee1fd4609bd58ffb08bd11d8656d2d32336e0fad5626da4c212d011d527", 0x4f}, {&(0x7f0000000500)}], 0x2}}, {{0x0, 0x0, &(0x7f0000000380)=[{&(0x7f0000004200)="8c4d092a", 0x4}], 0x1}}], 0x2, 0xc0) 1.903944675s ago: executing program 5 (id=2375): r0 = socket$nl_generic(0x10, 0x3, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000780)={0x0, 0x0, &(0x7f0000000740)={&(0x7f0000000280)={0x1c, 0x33, 0x1, 0x70bd2a, 0x25dbdbff, {0x2}, [@typed={0x8, 0x4, 0x0, 0x0, @u32=0x24}]}, 0x1c}, 0x1, 0x0, 0x0, 0x24001}, 0x4000000) syz_genetlink_get_family_id$ethtool(&(0x7f0000000000), r0) r1 = socket$nl_netfilter(0x10, 0x3, 0xc) r2 = bpf$MAP_CREATE(0x1900000000000000, &(0x7f0000000040)=@base={0x1b, 0x0, 0x0, 0x2000}, 0x48) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000280)={0x18, 0x18, &(0x7f00000000c0)=@ringbuf={{0x18, 0x6}, {{0x18, 0x1, 0x1, 0x0, r2}}, {}, [@ringbuf_output={{0x18, 0x1, 0x1, 0x0, r2}, {}, {0x3, 0x3, 0x3, 0x9}, {}, {}, {}, {}, {0x85, 0x0, 0x0, 0x24}}]}, &(0x7f0000000240)='GPL\x00'}, 0x90) sendmsg$IPSET_CMD_GET_BYNAME(0xffffffffffffffff, &(0x7f00000003c0)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x4}, 0xc, &(0x7f00000001c0)={&(0x7f0000000340)={0x48, 0xe, 0x6, 0x401, 0x0, 0x0, {0x2, 0x0, 0x2}, [@IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_PROTOCOL={0x5}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}, @IPSET_ATTR_SETNAME={0x9, 0x2, 'syz2\x00'}]}, 0x48}, 0x1, 0x0, 0x0, 0x4040}, 0x800) sendmsg$NFT_BATCH(r1, &(0x7f000000c2c0)={0x0, 0x0, &(0x7f0000000200)={&(0x7f00000002c0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a28000000000a0101000000005e1affd5020000000900010073797a300000000008000240000000032c000000030a01030000e6ff00000000020000000900010073797a30000000000900030073797a320000000014000000110001"], 0x7c}}, 0x0) sendmsg$NFT_BATCH(r1, &(0x7f0000000a80)={0x0, 0x0, &(0x7f0000000280)={&(0x7f0000000ac0)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a14000000020a010800000000000000000a00000034000000140a010800000000cefab5c20200000008000340000000000900010073797a30000000000c0006400000000000000000140000001100010000000000000000000000000a"], 0x70}}, 0x0) 1.903195467s ago: executing program 3 (id=2376): r0 = socket$netlink(0x10, 0x3, 0x0) socket(0x10, 0x803, 0x0) (async) r1 = socket(0x10, 0x803, 0x0) sendmsg$nl_route_sched(r1, &(0x7f0000000300)={0x0, 0x0, &(0x7f0000000240)={0x0, 0x24}}, 0x0) getsockname$packet(r1, &(0x7f00000000c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @broadcast}, &(0x7f0000000440)=0xfe3b) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x52) (async) sendmsg$nl_route(r0, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000080)=ANY=[@ANYBLOB="480000001000050700"/20, @ANYRES32=r2, @ANYBLOB="0000000000000000280012000900010076657468"], 0x48}}, 0x52) sendmsg$nl_route_sched(r1, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000003c0)=@newqdisc={0x40, 0x24, 0xf0b, 0x70bd2a, 0x0, {0x0, 0x0, 0x0, r2, {0x0, 0xfff1}, {0xffff, 0xffff}, {0xa}}, [@qdisc_kind_options=@q_pfifo_head_drop={{0x14}, {0x8, 0x2, 0xd}}]}, 0x40}, 0x1, 0x0, 0x0, 0x4040001}, 0x4000004) sendmsg$nl_route_sched(r0, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000200)={&(0x7f0000000380)=@delchain={0x24, 0x25, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, r2, {}, {0x0, 0xfff1}, {0xe, 0xd}}}, 0x24}}, 0x4040840) 1.896350358s ago: executing program 5 (id=2377): r0 = socket(0x10, 0x3, 0x0) setsockopt$netlink_NETLINK_TX_RING(r0, 0x10e, 0xc, &(0x7f0000000040)={0x802}, 0x10) sendmsg$nl_generic(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000080)={&(0x7f0000000100)=ANY=[@ANYBLOB="200000005200010000000000000000001c0000000c00070000"], 0x20}}, 0x0) r1 = socket$inet_udp(0x2, 0x2, 0x0) setsockopt$inet_int(r1, 0x0, 0x1, 0x0, 0x0) r2 = syz_init_net_socket$nl_rdma(0x10, 0x3, 0x10) sendmsg$netlink(r2, &(0x7f0000000040)={0x0, 0x0, &(0x7f0000000000)=[{&(0x7f00000001c0)={0x114, 0x2b, 0x1, 0x0, 0x25dfdbff, "", [@nested={0x104, 0x0, 0x0, 0x1, [@typed={0xc, 0x0, 0x0, 0x0, @u64}, @typed={0x14, 0x1, 0x0, 0x0, @ipv6=@loopback={0x100000000000000}}, @generic="50bb2d6f67d29d6fabadb107d0def49c88ea04abde1d5e8d3fb22a1b5046778bdafefc46b0449ade68bf84b36ec72dd71265fc2e882348c26c2126237dd5b37f5ae655b1086cda40e00aec58754734be31d750351dc076eb43d9621dc08c029d1608a487f26fbe816b89f7cb81bff81a8b9482565856555ee923c65973deb0a99b962bc0fe94a3fcae3697bd7b85b3a682167c43dbf137115a40ebddcad74875ec58e9a3ddb9ad02a078cf0d972df9e99f079767734f69ce475f55ac64337803f5eb4e5842f4d98fe3fa370d47eb640dc5061dc35817c8a66c29be82fd3f8cd1"]}]}, 0x114}], 0x1}, 0x0) r3 = socket$nl_route(0x10, 0x3, 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000480)={0xffffffffffffffff, 0x0, 0x3c, 0x55, &(0x7f00000001c0)="ac204a4953f12a430310ab8be8c592a8c018c724dbbc388c01256c2cbe03ec289110dedfb9c1e6e502028afeca96f6066cec068a1c52a96ba90c9fc8", &(0x7f0000000200)=""/85, 0x1007, 0x0, 0xd8, 0xf1, &(0x7f0000000280)="1075bd41bb5bddef01b6346f7f1439c44b6fbff3f6731f1546b9a220c8d0ebe3991c2f0f97bd1f5aa5d65cd88e92b0547d0ca338b0bd8e38f5f9d1b4dcafb42183b62bd02cf8d860d67dd9206220c7d78f32635ce11fd8b6c59da0e055fbdc005b7eb393f6ad375f0222044f69e0741cdeb46673f2040e2b0bec36aa854d2f3a95ed11540fe7706e28e21b1ab5d20bbb09b3126ef9b19c55f5c42ddf4235e6d4eec05fe2d660477277e93c30c1d4e42d9ec20de073484c77cd7ec4e60186720c81b28a4c485b32f0056e6e781c3de0cd063cb97227f3ad62", &(0x7f0000000380)="6f8ea2ae56befd77d93b7d0b4a1fa7bc7b9a2ddfbdfd7fcfa5be25988bee926a6e9f4c7dd96d9e4673901a808b4a455061d044c65ae17d91af7faf4801a56e1c09ce7d97fd92c9cadba11da94ba73eaa96fb3b65973fc13ce1f974c1ddbb94119d45bc72e3004b6b04e9b1070250275d46c3d9f6b4a5d463f4327f30ad957e46fae7ac730b2e5a82b8b5604a5621616f38e58c3e89487358d53405821efb5ced973245cb67daf4b6e3577656a73ec004c8ab252e71263a9ce24fc734de8ea05c9072e176a1fed119d64c4ebaa36d0f96c6df5fe2737017e143dba75ddf2be90fd9fa9409a400db22dcdd305680c316354c", 0x1, 0x0, 0x6}, 0x50) sendmsg$nl_route_sched(r3, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000080)=@newtaction={0x12c, 0x30, 0x1, 0x0, 0x0, {}, [{0x118, 0x1, [@m_vlan={0x114, 0x11, 0x0, 0x0, {{0x9}, {0x24, 0x2, 0x0, 0x1, [@TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x4}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}, @TCA_VLAN_PUSH_VLAN_PRIORITY={0x5, 0x6, 0x7}, @TCA_VLAN_PUSH_VLAN_PROTOCOL={0x6, 0x4, 0x8100}]}, {0xc7, 0x6, "cd7d5b1cae26352c92f7f1f3db7394ac5c2820b1e9dd04bd60ef3b416c2de032acce5e60b0014a74183163750efc46008351acc8625238d435a7c921c649524456ca4f55597f2b7d6a9bd297043643ac4818da22a10fd5e69b5acb92e3dceaf2be16017ce383529912b5189200a0e041eca5afd1fbb74d6d1f777a74572ba49543c865c3dd550906181ad199ff1dad8c9b2821e4f9d1fc98b972259cc9d234c0d23c5fcffcbc0e334b49b6870178ccef916844e8edc9e5340266ba6e9f25c5636e79bf"}, {0xc, 0x7, {0x1, 0x1}}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x12c}}, 0x0) 790.110732ms ago: executing program 0 (id=2378): bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f0000000300)=@bpf_lsm={0xb, 0x4, &(0x7f0000000040)=@framed={{0x66, 0xa, 0x0, 0x0, 0x0, 0x61, 0x11, 0x4c}, [@call={0x85, 0x0, 0x0, 0x1c}]}, &(0x7f0000000000)='GPL\x00', 0x7}, 0x94) 671.859239ms ago: executing program 5 (id=2379): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000000)={&(0x7f0000000100)=ANY=[@ANYBLOB="140000001000010000000000000000000000000a20000000000a01010000000000000000010000000900010073797a30000000003c000000090a010400000000000000000100000008000a40000000000900020073797a32000000000900010073797a30000000000800054000000002600000000c0a670300000000000000000100000008000440000000000900010073797a300000000038000380340000000400018004000680140007800c000100636f756e746572000400028014000180060001"], 0xe4}}, 0x0) socket$inet6_sctp(0xa, 0x5, 0x84) (async) r1 = socket$inet6_sctp(0xa, 0x5, 0x84) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000200)={0x0, 0x8, 0x30, 0x5, 0x200}, &(0x7f0000000240)=0x18) (async) getsockopt$inet_sctp6_SCTP_PR_ASSOC_STATUS(0xffffffffffffffff, 0x84, 0x73, &(0x7f0000000200)={0x0, 0x8, 0x30, 0x5, 0x200}, &(0x7f0000000240)=0x18) setsockopt$inet_sctp6_SCTP_SET_PEER_PRIMARY_ADDR(r1, 0x84, 0x5, &(0x7f0000000280)={r2, @in={{0x2, 0x4e24, @multicast2}}}, 0x84) r3 = socket$inet6_sctp(0xa, 0x801, 0x84) setsockopt$sock_int(r3, 0x1, 0x7, &(0x7f0000000000)=0x1820, 0x4) getsockopt$inet_sctp6_SCTP_EVENTS(r3, 0x84, 0xb, &(0x7f0000000040), &(0x7f0000000080)=0xe) 670.50657ms ago: executing program 3 (id=2380): r0 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r0, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x20000}, 0xc, &(0x7f0000000080)={&(0x7f0000001340)={{0x14}, [@NFT_MSG_DELSET={0x24, 0xb, 0xa, 0x201, 0x0, 0x0, {0x0, 0x0, 0x7}, [@NFTA_SET_EXPR={0x10, 0x11, 0x0, 0x1, @payload={{0xc}, @void}}]}, @NFT_MSG_DELRULE={0x3c0, 0x8, 0xa, 0x301, 0x0, 0x0, {0x5, 0x0, 0x8}, [@NFTA_RULE_EXPRESSIONS={0x324, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x18, 0x1, 0x0, 0x1, @rt={{0x7}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_RT_DREG={0x8, 0x1, 0x1, 0x0, 0x2}]}}}, {0x2e8, 0x1, 0x0, 0x1, @immediate={{0xe}, @val={0x2d4, 0x2, 0x0, 0x1, [@NFTA_IMMEDIATE_DATA={0x4}, @NFTA_IMMEDIATE_DREG={0x8, 0x1, 0x1, 0x0, 0x15}, @NFTA_IMMEDIATE_DATA={0x2c4, 0x2, 0x0, 0x1, [@NFTA_DATA_VERDICT={0x44, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffd}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffe}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}]}, @NFTA_DATA_VALUE={0xe0, 0x1, "1307e70dd541da0ea3de2a951027df248f762c915af6e7ba68344b6cfd64c7123dba0d155d86943e4ead29cfe9aa16dadf88ee0622b76dbd5205779f5057c9cf3bea1dbf10c4c22696e97f36530a13d819d72d1e7f2c08a8bb1b77903281302ac54d849ff4831c0960a777fcaeeff855607b80fa24e48ad8e8e7b26e838a5fd208926570ba26f7e60ebabb19ecb79095f987c1fbaf23ea2949cf815cc47e04f4b731a0331bd0cbbe73c75c83135a1545d2d6874579076848014acf37551e5c1d3f85fb986267c65146f7c6da21f62b9b6bd5070cbb1a1621bbd6017c"}, @NFTA_DATA_VERDICT={0x4c, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x4}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz0\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x27}]}, @NFTA_DATA_VERDICT={0x24, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xffffffffffffffff}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffb}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x2}]}, @NFTA_DATA_VERDICT={0x34, 0x2, 0x0, 0x1, [@NFTA_VERDICT_CODE={0x8, 0x1, 0x0, 0x1, 0xfffffffffffffffc}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x3}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz1\x00'}, @NFTA_VERDICT_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_VERDICT_CHAIN_ID={0x8, 0x3, 0x1, 0x0, 0x1}]}, @NFTA_DATA_VALUE={0x88, 0x1, "2a9c7a967e6f5f6553491dec1a6eaaffeeaf7d5b83f27030652559b5cf41f3c11404a55830052969348b023154cb177919a70132e891d394de796a0e4f8ffeb6c8c6e7a78abae52fd0937ad4bcbd055981eb999c1d927244ac365dc11406f403941747c884a00d988d6b57bd8bc309cec94ff42b635403e0165191e0e2a61d997219bbec"}, @NFTA_DATA_VALUE={0x4}, @NFTA_DATA_VALUE={0x13, 0x1, "99e1e2f051bd978c4ef06c43aad04f"}, @NFTA_DATA_VALUE={0x57, 0x1, "2bdea41424f277cb5a9737a31d98632e5d6dc2e66e53343e203c1be4257d9d4d697f9f4d20a757a285eea5994ec9a957e844d9751023f154b5027244f794cca2ed6a6deb6d557b4330fc7bc7ae9d071bc9ab3a"}]}]}}}, {0x10, 0x1, 0x0, 0x1, @tunnel={{0xb}, @void}}]}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x5}, @NFTA_RULE_EXPRESSIONS={0x54, 0x4, 0x0, 0x1, [{0x10, 0x1, 0x0, 0x1, @match={{0xa}, @void}}, {0x10, 0x1, 0x0, 0x1, @target={{0xb}, @void}}, {0x30, 0x1, 0x0, 0x1, @osf={{0x8}, @val={0x24, 0x2, 0x0, 0x1, [@NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x13}, @NFTA_OSF_FLAGS={0x8}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0x1}, @NFTA_OSF_DREG={0x8, 0x1, 0x1, 0x0, 0xa}]}}}]}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x4}, @NFTA_RULE_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x2}, @NFTA_RULE_CHAIN={0x9, 0x2, 'syz2\x00'}, @NFTA_RULE_HANDLE={0xc, 0x3, 0x1, 0x0, 0x3}]}, @NFT_MSG_DELSET={0x1094, 0xb, 0xa, 0x300, 0x0, 0x0, {0x3, 0x0, 0xa}, [@NFTA_SET_EXPRESSIONS={0x1044, 0x12, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, @immediate={{0xe}, @void}}, {0x1020, 0x1, 0x0, 0x1, @target={{0xb}, @val={0x1010, 0x2, 0x0, 0x1, [@NFTA_TARGET_NAME={0x7, 0x1, 'CT\x00'}, @NFTA_TARGET_INFO={0x1004, 0x3, "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"}]}}}, {0xc, 0x1, 0x0, 0x1, @osf={{0x8}, @void}}]}, @NFTA_SET_OBJ_TYPE={0x8, 0xf, 0x1, 0x0, 0x8}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x4a}, @NFTA_SET_POLICY={0x8, 0x8, 0x1, 0x0, 0x1}, @NFTA_SET_GC_INTERVAL={0x8, 0xc, 0x1, 0x0, 0x4130}, @NFTA_SET_FLAGS={0x8, 0x3, 0x1, 0x0, 0x44}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x38}, @NFTA_SET_HANDLE={0xc, 0x10, 0x1, 0x0, 0x5}]}, @NFT_MSG_NEWSET={0x168, 0x9, 0xa, 0x201, 0x0, 0x0, {0x5, 0x0, 0x2}, [@NFTA_SET_USERDATA={0x9e, 0xd, 0x1, 0x0, "0f338b510cf037e485ff4707e142ddb64d1061a363cc69ffc005364c3df1dfa9b58fab5ba3e885748a34bdca8ed23662971a48ef5498fe125efe8ce2aabd1b56125bf33a229f62cebaf3c074dd544d135085bf046d6a07e4b0d8395f815631adecbf34d405e616470f6952f13d3cfda2e11bd13ea592deff0dbcaf84113a47085661e68d8c0f7be62cd2c88277242f310f34374a748566ba2cdd"}, @NFTA_SET_POLICY={0x8}, @NFTA_SET_DATA_LEN={0x8, 0x7, 0x1, 0x0, 0x28}, @NFTA_SET_USERDATA={0x94, 0xd, 0x1, 0x0, "cfaf69ae92f53553d45b65a37e4cf7c656328cc283b72be8cf486fac9ef4958ad096b2454b488e8a1343d7076b6d97f62bba63b4ec1e2aaf6586e897b7056793168ddf927e3355a6d850b43058cacb2eedc7e57842969621ccf9e118f78511caab6550c72a5f0995b56199d099c9dcb3e06c4554f8940a85adb08acd37dbbc69a2e5f82c5014c1e6147f1711107bbef2"}, @NFTA_SET_KEY_TYPE={0x8, 0x4, 0x1, 0x0, 0x2}, @NFTA_SET_DATA_TYPE={0x8, 0x6, 0x1, 0x0, 0xffffff00}]}, @NFT_MSG_DELCHAIN={0xe4, 0x5, 0xa, 0x801, 0x0, 0x0, {0x3, 0x0, 0x5}, [@NFTA_CHAIN_TABLE={0x9, 0x1, 'syz1\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_CHAIN_TYPE={0x8, 0x7, 'nat\x00'}, @NFTA_CHAIN_TYPE={0xa, 0x7, 'route\x00'}, @NFTA_CHAIN_USERDATA={0x8f, 0xc, "4d2b874473b7bf83e0704821cd8314fdb6cc6900605668cb34fb838652aa7773b4bd6b90a0ccaae76af63fdce4517374744bbc7d2ae011f3d609bc0f05d802357fc2913dfd1619eb4fc60438ede588eefc7d2504f8cf4e1bed8fa4a7186c56f28baf100dc80992bb40e4b0419923af00fd312efa6feffe0bc86f3a5a7b0190ad379c25ef5a8c0c36772606"}, @NFTA_CHAIN_ID={0x8, 0xb, 0x1, 0x0, 0x1}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x8}}}, 0x16ec}, 0x1, 0x0, 0x0, 0x1814}, 0x800) r1 = socket$inet_smc(0x2b, 0x1, 0x0) sendto$inet(r1, &(0x7f0000000140)="f3f9fe30c6f6740846b05aaf7c552725db74a1442aa016862e414e65f928075be2888023c1d5647d83c9e3b865b0254cc8338062aa92e51d70cae9132eab7ff7bdc496351e08d302233671e4112fa12bb551b5343f", 0x55, 0x2, &(0x7f00000001c0)={0x2, 0x4e20, @dev={0xac, 0x14, 0x14, 0x3c}}, 0x10) (async) sendmsg$NFT_BATCH(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000001280)={{0x14}, [@NFT_MSG_NEWTABLE={0x20, 0x0, 0xa, 0x3, 0x0, 0x0, {0x7}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}, @NFT_MSG_NEWSET={0x3c, 0x9, 0xa, 0x801, 0x0, 0x0, {0x7}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz1\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x84}}, 0x0) 670.228723ms ago: executing program 0 (id=2381): bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x1, 0xb, &(0x7f0000000340)=ANY=[@ANYBLOB="18000000000000000000000000000000180100002020732500000000002020207b1ef8ff00000000bfa100000000000007010000f8ffffffb702000008000000b703000000000000850000007100000095"], &(0x7f0000000200)='GPL\x00', 0x2, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r0 = socket$inet6_udplite(0xa, 0x2, 0x88) r1 = socket$inet6(0xa, 0x2, 0x0) setsockopt$inet6_MCAST_MSFILTER(r1, 0x29, 0x30, &(0x7f0000000a80)=ANY=[@ANYBLOB="0b000000000000000a00000000000000ff0200000000000000000000000000010000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000000020000000a"], 0x190) setsockopt$inet6_int(r0, 0x29, 0x3e, &(0x7f0000000040), 0x4) r2 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r2, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000000c0)=@newlink={0x40, 0x10, 0x1, 0x0, 0x0, {0x0, 0x0, 0x0, 0x0, 0x0, 0x100}, [@IFLA_VFINFO_LIST={0x18, 0x16, 0x0, 0x1, [{0x14, 0x1, 0x0, 0x1, [@IFLA_VF_RATE={0x10, 0x6, {0x45d7, 0x34c, 0x1}}]}]}, @IFLA_GROUP={0x8}]}, 0x40}, 0x1, 0x0, 0x0, 0x20044000}, 0x0) r3 = socket$inet_udplite(0x2, 0x2, 0x88) recvmsg$can_raw(0xffffffffffffffff, &(0x7f00000008c0)={&(0x7f00000006c0)=@caif=@dgm, 0x80, &(0x7f00000002c0)=[{&(0x7f0000000740)=""/230, 0xe6}, {&(0x7f0000000840)=""/112, 0x70}], 0x2}, 0x2) ioctl$sock_inet_SIOCSIFADDR(r3, 0x8953, &(0x7f0000000c40)={'wg1\x00', {0x2, 0x0, @empty}}) r4 = bpf$BPF_BTF_LOAD(0x12, &(0x7f0000000280)={&(0x7f0000000000)={{0xeb9f, 0x1, 0x0, 0x18, 0x0, 0x3c, 0x3c, 0x2, [@struct={0x0, 0x2, 0x0, 0x4, 0x0, 0x8, [{0x0, 0x3}, {0x0, 0x2}]}, @ptr, @restrict={0x0, 0x0, 0x0, 0x4, 0x4}]}}, 0x0, 0x56}, 0x20) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f00000017c0)={0x2, 0x4, 0x8, 0x1, 0x80, 0x1, 0x0, '\x00', 0x0, r4, 0x0, 0x1}, 0x48) r5 = bpf$MAP_CREATE(0x0, &(0x7f00000001c0)=@base={0x1, 0x2, 0x4, 0x4, 0x1, 0xffffffffffffffff, 0x1000}, 0x50) bpf$BPF_GET_PROG_INFO(0xf, &(0x7f0000000580)={0xffffffffffffffff, 0xe0, &(0x7f0000000480)={0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x4, &(0x7f0000000080)=[0x0, 0x0, 0x0, 0x0], ""/16, 0x0, 0x0, 0x0, 0x0, 0x5, 0x5, &(0x7f0000000140)=[0x0, 0x0, 0x0, 0x0, 0x0], &(0x7f0000000180)=[0x0, 0x0, 0x0, 0x0, 0x0], 0x0, 0x8e, &(0x7f0000000240)=[{}, {}, {}, {}], 0x20, 0x10, &(0x7f00000003c0), &(0x7f0000000400), 0x8, 0xd7, 0x8, 0x8, &(0x7f0000000440)}}, 0x10) bpf$TOKEN_CREATE(0x24, &(0x7f00000005c0)={0x0, r5}, 0x8) bpf$BPF_PROG_RAW_TRACEPOINT_LOAD(0x5, &(0x7f0000000600)={0x18, 0xcedd8a050aed2305, &(0x7f0000000300)=@framed, &(0x7f0000000100)='syzkaller\x00', 0x2, 0x0, 0x0, 0x40f00, 0x19}, 0x94) 576.560335ms ago: executing program 5 (id=2382): r0 = socket$inet6_sctp(0xa, 0x5, 0x84) r1 = syz_init_net_socket$bt_l2cap(0x1f, 0x1, 0x3) bind$bt_l2cap(r1, &(0x7f0000000040)={0x1f, 0x0, @fixed}, 0xe) listen(r1, 0x0) close(0x4) setsockopt$inet_sctp6_SCTP_DISABLE_FRAGMENTS(r0, 0x84, 0x8, &(0x7f0000000180)=0x8001, 0x4) r2 = bpf$PROG_LOAD(0x5, &(0x7f00000000c0)={0x11, 0x4, &(0x7f0000000040)=ANY=[@ANYBLOB="1800000000000000000000000000000085000000d20000009500000000000000317053c0051e3346b7ab06fca562822c1c92c98130f01856bf94315f8250cf5192f6c28e41517e6f29a6b200de3525921356a58c09200e0eb7"], &(0x7f0000000000)='GPL\x00', 0x0, 0x0, 0x0, 0x40e00, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) r3 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r3, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000080)={&(0x7f00000003c0)={{0x14, 0x10, 0x1, 0x0, 0x0, {0x7}}, [@NFT_MSG_DELTABLE={0x14, 0x2, 0xa, 0xa00, 0x0, 0x0, {0x3, 0x0, 0x7}}, @NFT_MSG_NEWOBJ={0x20, 0x12, 0xa, 0x201, 0x0, 0x0, {0x2}, @NFT_OBJECT_CONNLIMIT=@NFTA_OBJ_HANDLE={0xc, 0x6, 0x1, 0x0, 0x2}}, @NFT_MSG_DELTABLE={0x20, 0x2, 0xa, 0x801, 0x0, 0x0, {0x5, 0x0, 0x9}, [@NFTA_TABLE_NAME={0x9, 0x1, 'syz0\x00'}]}], {0x14, 0x11, 0x1, 0x0, 0x0, {0x5}}}, 0x7c}, 0x1, 0x0, 0x0, 0x20044004}, 0x8050) bpf$PROG_LOAD(0x5, &(0x7f0000000940)={0x18, 0xe, &(0x7f0000000200)=ANY=[@ANYRESDEC=r2], &(0x7f00000001c0)='GPL\x00', 0x7, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000)={0x0, 0xfffffffc}, 0x8, 0x10, &(0x7f0000000000), 0x10}, 0x94) 491.410617ms ago: executing program 0 (id=2383): r0 = socket$inet6_mptcp(0xa, 0x1, 0x106) connect$inet6(r0, &(0x7f0000000200)={0xa, 0x0, 0x9000000, @ipv4={'\x00', '\xff\xff', @broadcast}}, 0x1c) 415.945878ms ago: executing program 3 (id=2384): r0 = socket$nl_route(0x10, 0x3, 0x0) (async) r1 = socket$nl_generic(0x10, 0x3, 0x10) (async) r2 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r2, &(0x7f00000000c0)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f0000000100)={{0x14}, [@NFT_MSG_NEWSET={0x58, 0x9, 0xa, 0x201, 0x0, 0x0, {}, [@NFTA_SET_ID={0x8}, @NFTA_SET_NAME={0x9, 0x2, 'syz2\x00'}, @NFTA_SET_TABLE={0x9, 0x1, 'syz0\x00'}, @NFTA_SET_KEY_LEN={0x8, 0x5, 0x1, 0x0, 0x21}, @NFTA_SET_EXPR={0x1c, 0x9, 0x0, 0x1, @tproxy={{0xb}, @val={0xc, 0x2, 0x0, 0x1, [@NFTA_TPROXY_REG_PORT={0x8, 0x3, 0x1, 0x0, 0xc}]}}}]}], {0x14, 0x10, 0x1, 0x0, 0x0, {0x0, 0x84}}}, 0x80}}, 0x0) (async) r3 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), 0xffffffffffffffff) sendmsg$ETHTOOL_MSG_COALESCE_SET(r1, &(0x7f0000000100)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400000}, 0xc, &(0x7f00000000c0)={&(0x7f0000000080)={0x34, r3, 0x100, 0x70bd25, 0x25dfdbfc, {}, [@ETHTOOL_A_COALESCE_RX_USECS_IRQ={0x8, 0x4, 0x7}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}, @ETHTOOL_A_COALESCE_RX_USECS={0x8, 0x2, 0x7fffffff}, @ETHTOOL_A_COALESCE_USE_CQE_MODE_RX={0x5, 0x19, 0x1}]}, 0x34}, 0x1, 0x0, 0x0, 0x10}, 0x4004000) sendmsg$nl_route(r0, &(0x7f00000001c0)={0x0, 0x0, &(0x7f0000000180)={&(0x7f00000005c0)=@mpls_delroute={0xa0, 0x19, 0x1, 0x0, 0x1, {0x1c, 0x14, 0x0, 0x0, 0xfe, 0x0, 0x0, 0x1}, [@RTA_NEWDST={0x84, 0x13, [{0x3ff}, {0x5}, {}, {0x2, 0x0, 0x1}, {0x6}, {0x4, 0x0, 0x1}, {0x2}, {0x1fdc}, {0xff, 0x0, 0x1}, {0xfff, 0x0, 0x1}, {}, {0x9, 0x0, 0x1}, {0x5f5}, {0x7, 0x0, 0x1}, {0xffffc, 0x0, 0x1}, {0x101, 0x0, 0x1}, {0x4}, {0x4, 0x0, 0x1}, {0xe}, {0xe2}, {0x1, 0x0, 0x1}, {0x2}, {0x101, 0x0, 0x1}, {0x1000}, {0xf30b}, {0xe1e3, 0x0, 0x1}, {0x1}, {0xffc00, 0x0, 0x1}, {0x40, 0x0, 0x1}, {0x2}, {0xf2e}, {0x5, 0x0, 0x1}]}]}, 0xa0}}, 0x0) 415.580298ms ago: executing program 5 (id=2385): syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r0 = socket$nl_generic(0x10, 0x3, 0x10) bpf$LINK_DETACH(0x22, 0x0, 0x0) r1 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000040), r0) bpf$PROG_LOAD(0x5, &(0x7f00000002c0)={0xe, 0x5, &(0x7f0000000500)=ANY=[@ANYBLOB="180200000000010000000000000000008500000054000000850000000800000095"], &(0x7f0000000380)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_skb, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x90) sendmsg$ETHTOOL_MSG_LINKMODES_SET(r0, &(0x7f0000000240)={0x0, 0x0, &(0x7f00000001c0)={&(0x7f00000000c0)=ANY=[@ANYBLOB='8\x00\x00\x00', @ANYRES16=r1, @ANYBLOB="0700000000000000000005000000180001801400020073797a5f74756e0000000000000000000c00038004000380040005000ecb8c2c53cad9be09211b55becbe9b16f958a362e668beea2a14aa38bc641bfa0d4f21ce1eecd1063c7064307e2290a1dbf06d64535f5a9d00b849f580b544da1316dea46be763561c6672a64fda3f1bf3ecac95c3fa351c1967e578fe584bde3aa13444c9dff4668732c0372683568a1169d2d030000000000009f4beb8a0fa7184ad0e561f463"], 0x38}}, 0x0) r2 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x2, 0x0) ioctl$TUNSETIFF(r2, 0x400454ca, &(0x7f0000000500)={'syzkaller0\x00', 0x7101}) r3 = openat$tun(0xffffffffffffff9c, &(0x7f0000000240), 0x12842, 0x0) recvmmsg$unix(0xffffffffffffffff, &(0x7f0000000000)=[{{0x0, 0x0, &(0x7f0000000300)}}], 0x1, 0x10000, 0x0) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[@ANYBLOB="1800000002000000000000000000000095"], 0x0, 0x0, 0x0, 0x0, 0x0, 0x43}, 0x94) r4 = bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000480)={0x6, 0x3, &(0x7f0000000680)=ANY=[], &(0x7f00000002c0)='syzkaller\x00'}, 0x94) syz_emit_ethernet(0x4a, &(0x7f0000000000)=ANY=[@ANYBLOB="aaaaaaaaaaaa01800300000186dd60000000001406"], 0x0) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000600)={r4, 0x5, 0xb68, 0xf5ffffff, &(0x7f0000000000)='%', 0x0, 0xd01, 0xbe02, 0x0, 0x0, 0x0, 0x0, 0x2}, 0x48) r5 = socket$nl_netfilter(0x10, 0x3, 0xc) sendmsg$NFT_BATCH(r5, &(0x7f0000000200)={0x0, 0x0, &(0x7f0000000000)={&(0x7f00000002c0)=ANY=[@ANYBLOB="14000000100001000000000000dfff000000000a20000000000a01020000000000000000010000000900010073797a30000000006c000000160a0101000b000000000000010000000900020073797a30000000000900010073797a30000000004000038008000140000000002c0003801400010067656e65766530000000000000000000140001006c6f0000000000000000000000000000080002"], 0xb4}, 0x1, 0x0, 0x0, 0x801}, 0x40000a4) close(r3) socket$netlink(0x10, 0x3, 0x0) ioctl$SIOCSIFHWADDR(r3, 0x8914, &(0x7f00000000c0)={'syzkaller0\x00', @broadcast}) r6 = socket$unix(0x1, 0x5, 0x0) ioctl$sock_SIOCGIFINDEX(r6, 0x8933, &(0x7f0000000100)={'syzkaller0\x00', 0x0}) r8 = socket$netlink(0x10, 0x3, 0x0) sendmsg$nl_route_sched(r8, &(0x7f0000000280)={0x0, 0x0, &(0x7f0000000140)={&(0x7f00000001c0)=@gettclass={0xfffffe79, 0x2a, 0x129, 0x0, 0x25dfdbfd, {0x0, 0x0, 0x0, r7, {0xb, 0xd}, {}, {0x8, 0xfff1}}}, 0x24}, 0x1, 0x0, 0x0, 0x48050}, 0x40004) recvmmsg(r8, &(0x7f0000005140)=[{{0x0, 0x0, &(0x7f0000001a80)=[{&(0x7f0000000640)=""/216, 0xd8}, {&(0x7f00000052c0)=""/235, 0xeb}, {&(0x7f0000003080)=""/4096, 0x1000}], 0x3}, 0x3}], 0x1b00, 0x0, 0x0) r9 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) syz_genetlink_get_family_id$netlbl_unlabel(&(0x7f00000001c0), r9) r10 = socket$kcm(0x10, 0x2, 0x0) writev(r10, &(0x7f0000000000)=[{&(0x7f0000000080)="390000001000090468fe0700000000000000ff3f02000000480100100000000019002b000a0003002000000000000072000000000000000000", 0x39}], 0x1) socket(0x15, 0x5, 0x0) 354.623305ms ago: executing program 0 (id=2386): r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f0000000140)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000180)=@newlink={0x34, 0x10, 0x801, 0x0, 0x0, {0x0, 0x0, 0x300, 0x0, 0x150}, [@IFLA_XDP={0xc, 0x2b, 0x0, 0x1, [@IFLA_XDP_FLAGS={0x8, 0x2}]}, @IFLA_GROUP={0x8}]}, 0x34}}, 0x0) r1 = socket(0x1d, 0x3, 0x1) getsockopt$inet_sctp_SCTP_PEER_ADDR_PARAMS(r1, 0x84, 0x9, 0x0, 0x0) r2 = syz_genetlink_get_family_id$ethtool(&(0x7f0000000200), 0xffffffffffffffff) getpeername$packet(0xffffffffffffffff, &(0x7f0000000240)={0x11, 0x0, 0x0}, &(0x7f0000000280)=0x14) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14) (async) getpeername$packet(0xffffffffffffffff, &(0x7f00000002c0)={0x11, 0x0, 0x0, 0x1, 0x0, 0x6, @local}, &(0x7f0000000300)=0x14) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'erspan0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x700, 0x1, 0x8f, 0x2, {{0x6, 0x4, 0x3, 0x4, 0x18, 0x68, 0x0, 0x5, 0x29, 0x0, @empty, @multicast2, {[@noop]}}}}}) (async) ioctl$sock_ipv4_tunnel_SIOCDELTUNNEL(0xffffffffffffffff, 0x89f2, &(0x7f0000000380)={'erspan0\x00', &(0x7f0000000340)={'sit0\x00', 0x0, 0x700, 0x1, 0x8f, 0x2, {{0x6, 0x4, 0x3, 0x4, 0x18, 0x68, 0x0, 0x5, 0x29, 0x0, @empty, @multicast2, {[@noop]}}}}}) bpf$PROG_LOAD_XDP(0x5, &(0x7f0000000840)={0x6, 0x0, 0x0, 0x0, 0x6f, 0x0, 0x0, 0x0, 0x20, '\x00', 0x0, 0x25, 0xffffffffffffffff, 0x8, 0x0, 0x0, 0x10, 0x0, 0x0, 0x0, 0x0, 0x2, 0x0, &(0x7f0000000780)=[{0x3, 0x4, 0x1, 0x7}, {0x1, 0x2, 0xc, 0x3}], 0x10, 0x80000000}, 0x94) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000140)={0xffffffffffffffff}) shutdown(r6, 0x0) recvmsg$unix(r6, &(0x7f0000000500)={0x0, 0x0, 0x0, 0x0, &(0x7f0000000780)=[@cred={{0x1c, 0x1, 0x2, {0x0}}}], 0x20}, 0x0) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='8\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000003000000ffffffff0000ff00"/28], 0x50) (async) bpf$MAP_CREATE_CONST_STR(0x0, &(0x7f0000000540)=ANY=[@ANYBLOB="0200000004000000080000000100000080000000", @ANYRES32=0x1, @ANYBLOB='8\x00'/20, @ANYRES32=0x0, @ANYRES32, @ANYBLOB="0100000003000000ffffffff0000ff00"/28], 0x50) syz_open_procfs$namespace(r7, 0x0) (async) syz_open_procfs$namespace(r7, 0x0) sendmsg$ETHTOOL_MSG_EEE_GET(r1, &(0x7f00000004c0)={&(0x7f00000001c0)={0x10, 0x0, 0x0, 0x80}, 0xc, &(0x7f0000000480)={&(0x7f00000003c0)={0x9c, r2, 0x8, 0x70bd2b, 0x25dfdbfd, {}, [@HEADER={0x88, 0x1, 0x0, 0x1, [@ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r3}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'bond_slave_0\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'wg1\x00'}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r4}, @ETHTOOL_A_HEADER_FLAGS={0x8, 0x3, 0x5}, @ETHTOOL_A_HEADER_DEV_INDEX={0x8, 0x1, r5}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth0_to_batadv\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'veth1_to_hsr\x00'}, @ETHTOOL_A_HEADER_DEV_NAME={0x14, 0x2, 'netpci0\x00'}]}]}, 0x9c}, 0x1, 0x0, 0x0, 0x800}, 0x10) socket$can_j1939(0x1d, 0x2, 0x7) (async) r8 = socket$can_j1939(0x1d, 0x2, 0x7) setsockopt$SO_J1939_FILTER(r8, 0x6b, 0x1, &(0x7f0000000000)=[{0x1, 0x2, {0x2, 0x1, 0x1}, {0x1, 0x1, 0x3}, 0x2, 0xff}, {0x1, 0x2, {0x2, 0xf0, 0x4}, {0x1}, 0xfd, 0x2}, {0x1, 0x3, {0x0, 0x0, 0x2}, {0x2, 0x0, 0x3}, 0x0, 0xfe}, {0x1, 0x0, {0x0, 0xf0, 0x2}, {0x1, 0x0, 0x1}, 0x2}, {0x0, 0x3, {0x2, 0xf0, 0x2}, {0x0, 0x0, 0x1}, 0xfe, 0x1}, {0x1, 0x1, {0x2, 0xff, 0x2}, {0x1, 0x0, 0x1}, 0x0, 0x1}, {0x1, 0x3, {0x2, 0xe}, {0x1, 0x0, 0x1}, 0xfe, 0xfd}, {0x2, 0x1, {0x1, 0x1, 0x1}, {0x0, 0x1, 0x2}, 0x1}], 0x100) 310.899821ms ago: executing program 3 (id=2387): socket$packet(0x11, 0xa, 0x300) r0 = socket$nl_route(0x10, 0x3, 0x0) sendmsg$nl_route(r0, &(0x7f00000001c0)={&(0x7f0000000000)={0x10, 0x0, 0x0, 0x400}, 0xc, &(0x7f0000000140)={&(0x7f0000000080)=@ipv4_getroute={0x1c, 0x1a, 0x400, 0x70bd2c, 0x25dfdbff, {0x2, 0x0, 0x20, 0xef, 0xfe, 0x0, 0xfe, 0x7, 0x1900}, ["", "", ""]}, 0x1c}, 0x1, 0x0, 0x0, 0x20000080}, 0x40804) r1 = socket$inet_udp(0x2, 0x2, 0x0) bind$inet(r1, &(0x7f0000000040)={0x2, 0x0, @dev={0xac, 0x14, 0x14, 0x2d}}, 0x10) setsockopt$packet_fanout(0xffffffffffffffff, 0x107, 0x12, 0x0, 0x0) setsockopt$sock_int(r1, 0x1, 0x3c, &(0x7f00000000c0)=0x1, 0x4) sendto$inet(r1, 0x0, 0x0, 0xc806, &(0x7f0000000180)={0x2, 0x4e21, @multicast1}, 0x10) sendto$inet(r1, &(0x7f0000000100)='J', 0xfdbe, 0x4004084, 0x0, 0x11000a00) 67.89355ms ago: executing program 3 (id=2388): r0 = syz_init_net_socket$bt_hci(0x1f, 0x3, 0x1) bind$bt_hci(r0, &(0x7f0000000340)={0x1f, 0xffff, 0x3}, 0x6) pipe(&(0x7f0000000a00)={0xffffffffffffffff}) close(r1) getsockopt$IPT_SO_GET_ENTRIES(r1, 0x0, 0x41, &(0x7f0000001300)={'security\x00', 0x5, "9927292550"}, &(0x7f0000001440)=0x29) bpf$PROG_LOAD(0x5, &(0x7f0000000400)={0x5, 0x0, 0x0, &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback=0x1d, 0xffffffffffffffff, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0, 0x0}, 0x94) r2 = socket$inet6_tcp(0xa, 0x1, 0x0) setsockopt$inet6_tcp_TLS_TX(r2, 0x6, 0x1, &(0x7f00000000c0)=@gcm_256={{0x303}, '\x00', "5171bb67298688ac68cb126474cd3660dab9e20800", '\x00', "1202000000040030"}, 0x38) setsockopt$inet6_tcp_TCP_MD5SIG(r2, 0x6, 0xe, &(0x7f0000000200)={@in6={{0xa, 0x4e24, 0x8, @dev={0xfe, 0x80, '\x00', 0x1b}, 0x9}}, 0x0, 0x0, 0x1e, 0x0, "00a2c797a4a8123ba24a32f598dd083906571772e5a9e00d562540b20c9d4a30579bfb6141c62dd021f62d1bce37d6640146b60b65c72984ecd0b7df04a4346bcdc640a7d26da48bceed13f654cc147d"}, 0xd8) setsockopt$inet6_tcp_int(r2, 0x6, 0x2000000000000020, &(0x7f0000000040)=0xa, 0x1959cc36) connect$inet6(r2, &(0x7f00000001c0)={0xa, 0x0, 0x0, @loopback}, 0x1c) write(r0, &(0x7f0000000040)="05000000010097", 0x7) syz_init_net_socket$rose(0xb, 0x5, 0x0) r3 = socket$pppoe(0x18, 0x1, 0x0) connect$pppoe(r3, &(0x7f00000003c0)={0x18, 0x0, {0x4, @random="e9e165625ac2", 'wlan0\x00'}}, 0x1e) sendmmsg(r3, &(0x7f0000000080)=[{{0x0, 0x0, 0x0}}, {{0x0, 0x0, &(0x7f00000018c0)=[{&(0x7f0000000dc0)="5e563da42800619c6e0c4d61bbab8106c614adee1a2deee4492ae8e300d0351da69760c4c947e1c1860c9242b22f14f79d35c03ba5aee9d6205f1f9f34b99d8bf675d5419f5b002396361da9a1582af98b7cab39e4c96d7044db710b4d7ed27ec1878ab6bfdab0e70b85dc337850cd8bcab6fa409486218c8b79218c73543e5fb0e7d875ebd7df9326f53cc08198713b5e6d7f267d3f7a5f7dae01ddb59f3d3a3b0d55cb1435c2fb88b2041465f34b781418cc3347f80a3784ce3e60f93f2719301948c976a4f800f0cd39755bc9de2341920420541e66a64f18caa9ec9a34afe629cf184ab07e554867f67c405be575662722eea3220fefecb7ab72f4dd5a6eddb4ff212db2d7c28e9453c2e42b68f377aafb2ef2bcc9eb7ec2183c4e8f1e25c4f4eac3cae993c1928d5b3c8584ff211a6ee143c6520f945576f04020d144604ad9a52906562d20b0598a8f19e275e023b076a69d7bb8adf51ecc272e5852a1efb54f2c0d9e5983361392ee897ac48ea5da8c286079caac7ed1220a629031b7cd46a0549c32b227f74b334128e0a14f661ecf3a58b9b70cb0461e3f5d413d73a4163ea4da62a5c6f22f2419506814b003702c6b44aa60afdea84539f26e842ee9f4fc49e5c771d48204787a508fd7caa5e3c25e60dc3e515ae89e98276358916595919227e2a53f0398b0381152a9be7ce5b82366460c98334bbbbde2fc28a0c669495a4e1ca5aff6c3b215edc0244827bf4baa41e48fc53690811cdea6fee254c1a27e1983c3e37d4e4dd28719d3b695415091f369d3ef1aed516e81f9df99fbe807edec17a3601c9bc40877105419aba476ed7b45bcb122e12d810cc417d33661559ea7fe1827ba438087d2af5e18b59ca4695afc82a3ad1ff793bfbe986a25069f5570423a50b81113d43a7787ceec8e8245038508d28716ea68fac56b98c43c5f6e9658dd4d42cdefbf97873bc8ef504f236e47d3eaa1643a719723e6d6378d26ec45f4916b34bbdbbd89bffa4ee5e33491cf0654fc4da490ebce8fee87b17e58ae36406f654696a82031999eb6ffe5bb0fd1a24122ee057566d74e8de5cbd1b1cc592841944a386020b12d743db9939c91535953297e3424ab5414da54616f89c14f3ae47f926f06dce5bcca3f7458e2f69d7f2a13fc47f7396dbcc9badf655a9b4271bf1c57106992ca676e46c11ed7ab0ffb079018c70eb9e5d27e31cdaac6a49f52084a4575a312ac74b88e7e318f485b70ea97e9d27fcf17f1d5230d9f606e52eebe1530095b7d17bee0b3d8064a65a780d790c6a85233a67fd8d1a791b8899c31a6b92c11a6044a70a68f483ae2fcea4e06d26c0ef51e17e9282a7d3e7d5dc1c7ca09fd3353c4eb5bb18cb0c4b686660fa0103d57c53e4eba77c7958538d1c3822e4b4881e5b9cc70de54a580b8b067ee4d1fab64d605626e0d43cd3e89967177683451131ec6ceebfe9155f83cf576b9d7203d9071528f355c5e32b6dd8259c42dd62ef6ae743b2cdf7f3823ceea9e8e8b3e6830082e403d4e30d506eb09d842bf2dacad7f098c167a459f9889c0e14e0af26712ce4c8ef30835af0b7826c7b4abfd54cbdcfc7a091aa6f1195507882e173edbc69181b8aa560c5020b0a9cb1f5467e636a507e8eba76b645e3153d826ded8028277dd76f758db9ce0f3377d4be0f32c8bb0ca43fa9883761e7f33ce58e2c89a5a92b2c86244dcf19ed88afb0375c015ec96c7ce7602ddc721a8d759446b7828f4c7128284c5d6934f1926c9a0605921502cffb6d689645618cb3c57cc54b56233e9e07f3808a29005ef4f09443c90ed9a246e8d9d36fc941c61f7dd446209998c84b6e9b5c2361e7ce482ea08250cdb194dfb12898442416747ac89adc17b7bbee27d032ab391fd90d2052a0df3d2d5105139c8dff44e159115bdab1a65ad33211356581afc46175065e2e823e2552bc7327f790330c2c94b9ccc7f1ade293178773110545e7c167adba5416daeaaaee1a3773e82eacb6532174d28f53251aede7012c3b1a587d0bff973c5974235e96c144145e53d1af9738b023385dbf9ba3a44969cc22c662e3cc31f86d7a2273d3e6c3e2780f0c20e81e634fae69a5f9395bcadb8a3990f7d2890fbc617599c818472", 0x5eb}], 0x1}}], 0x2, 0x20008800) bpf$PROG_LOAD(0x5, &(0x7f00000017c0)={0x1, 0xe, &(0x7f0000001880)=ANY=[@ANYBLOB="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"], &(0x7f00000001c0)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @fallback, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000000), 0xffa3}, 0x48) 25.583054ms ago: executing program 0 (id=2389): socket$nl_route(0x10, 0x3, 0x0) r0 = socket$nl_route(0x10, 0x3, 0x0) r1 = syz_init_net_socket$nl_generic(0x10, 0x3, 0x10) r2 = syz_genetlink_get_family_id$nl802154(&(0x7f0000000080), r1) ioctl$sock_SIOCGIFINDEX_802154(r1, 0x8933, &(0x7f0000000140)={'wpan0\x00', 0x0}) r4 = bpf$BPF_PROG_WITH_BTFID_LOAD(0x5, &(0x7f00000003c0)=@bpf_lsm={0x1e, 0x3, &(0x7f0000000080)=ANY=[@ANYBLOB="1800000001000000000000000000000095"], &(0x7f0000000280)='GPL\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, 0x24}, 0x94) bpf$BPF_PROG_TEST_RUN(0xa, &(0x7f0000000440)={r4, 0x0, 0x0, 0x0, 0x0, 0x0, 0x600, 0x0, 0x48, 0x0, &(0x7f0000000000)='\x00', 0x0}, 0x48) sendmsg$NL802154_CMD_DEL_SEC_DEVKEY(r1, &(0x7f0000000e40)={0x0, 0x0, &(0x7f0000000100)={&(0x7f0000000200)=ANY=[@ANYBLOB="1c000000", @ANYRES16=r2, @ANYBLOB="010022bd7000fedbdf252300000008000300", @ANYRES32=r3], 0x1c}, 0x1, 0x0, 0x0, 0x20000041}, 0xc890) sendmsg$nl_route_sched(r0, &(0x7f00000000c0)={0x0, 0x0, &(0x7f0000000040)={&(0x7f0000000440)=@newtaction={0x68, 0x30, 0x8, 0x0, 0x0, {0x0, 0x0, 0x1300}, [{0x54, 0x1, [@m_mirred={0x50, 0x1, 0x0, 0x0, {{0xb}, {0x24, 0x2, 0x0, 0x1, [@TCA_MIRRED_PARMS={0x20, 0x2, {{0x1, 0x0, 0x1, 0x400, 0xfffffff7}, 0x2}}]}, {0x4}, {0xc}, {0xc, 0x8, {0x1, 0x2}}}}]}]}, 0x68}, 0x1, 0x0, 0x0, 0x8000}, 0x811) r5 = socket$xdp(0x2c, 0x3, 0x0) bpf$PROG_LOAD(0x5, &(0x7f00000006c0)={0x15, 0xe, &(0x7f0000000400)=ANY=[@ANYBLOB="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"], &(0x7f0000000040)='syzkaller\x00', 0x0, 0x0, 0x0, 0x0, 0x0, '\x00', 0x0, @sk_reuseport, 0xffffffffffffffff, 0x8, &(0x7f0000000000), 0x0, 0x10, &(0x7f0000000340), 0xfffffe49}, 0x42) r6 = openat$tun(0xffffffffffffff9c, &(0x7f0000000100), 0x4000, 0x0) ioctl$TUNSETLINK(r6, 0x400454cd, 0x33a) setsockopt$XDP_TX_RING(r5, 0x11b, 0x3, &(0x7f00000003c0)=0x800, 0x4) sendmsg$NL802154_CMD_NEW_SEC_KEY(r1, &(0x7f0000000240)={&(0x7f0000000180)={0x10, 0x0, 0x0, 0x80000000}, 0xc, &(0x7f00000001c0)={&(0x7f00000008c0)={0x13c, r2, 0x20, 0x70bd29, 0x25dfdbfd, {}, [@NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_SEC_KEY={0x88, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_ID={0x44, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_IMPLICIT={0xc, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x1}]}, @NL802154_KEY_ID_ATTR_INDEX={0x5}, @NL802154_KEY_ID_ATTR_SOURCE_SHORT={0x8}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x1}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x40}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}, @NL802154_KEY_ID_ATTR_INDEX={0x5, 0x2, 0x3}]}, @NL802154_KEY_ATTR_ID={0x40, 0x1, 0x0, 0x1, [@NL802154_KEY_ID_ATTR_MODE={0x8}, @NL802154_KEY_ID_ATTR_SOURCE_EXTENDED={0xc, 0x5, 0x2}, @NL802154_KEY_ID_ATTR_IMPLICIT={0x28, 0x3, 0x0, 0x1, [@NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x2}, @NL802154_DEV_ADDR_ATTR_EXTENDED={0xc, 0x4, {0xaaaaaaaaaaaa0302}}, @NL802154_DEV_ADDR_ATTR_MODE={0x8, 0x2, 0x1}, @NL802154_DEV_ADDR_ATTR_PAN_ID={0x6, 0x1, 0x2}]}]}]}, @NL802154_ATTR_SEC_KEY={0x74, 0x30, 0x0, 0x1, [@NL802154_KEY_ATTR_BYTES={0x14, 0x4, "6af1dca7fb6e8cc7bb433b014848c2a8"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "349118457dc349dcbe2743c9d00534ba023e6737cca0f9d47d5987f9640ed89e"}, @NL802154_KEY_ATTR_BYTES={0x14, 0x4, "bbe262375132f76d6292dfaebef6a252"}, @NL802154_KEY_ATTR_USAGE_CMDS={0x24, 0x3, "459ebaeefcabbc8651b93bae515189603361158ba191812a881094d2948c91f2"}]}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_IFINDEX={0x8, 0x3, r3}, @NL802154_ATTR_WPAN_DEV={0xc, 0x6, 0x2}]}, 0x13c}, 0x1, 0x0, 0x0, 0x10}, 0x1000) socket$qrtr(0x2a, 0x2, 0x0) r7 = socket$rxrpc(0x21, 0x2, 0x2) connect$rxrpc(r7, &(0x7f0000000000)=@in4={0x21, 0x0, 0x2, 0x10, {0x2, 0x0, @dev}}, 0x24) setsockopt$RXRPC_SECURITY_KEY(r7, 0x110, 0x1, 0x0, 0x0) close(0x3) socketpair$unix(0x1, 0x5, 0x0, &(0x7f0000000080)) 0s ago: executing program 3 (id=2390): r0 = socket$netlink(0x10, 0x3, 0x0) socketpair$unix(0x1, 0x1, 0x0, &(0x7f0000001480)={0xffffffffffffffff, 0xffffffffffffffff}) ioctl$sock_SIOCGIFINDEX(r1, 0x8933, &(0x7f0000000340)={'bridge_slave_0\x00', 0x0}) sendmsg$nl_route(r0, &(0x7f0000000000)={0x0, 0x0, &(0x7f0000000140)={&(0x7f0000000480)=ANY=[@ANYBLOB="2c00000011000100000000000000000007000000", @ANYRES32=r2, @ANYBLOB="100a0600090901000c001a800800048004000580"], 0x2c}, 0x1, 0x0, 0x0, 0xc0c0}, 0x14) syz_emit_ethernet(0x46, &(0x7f0000000b00)={@local, @local, @void, {@ipv6={0x86dd, @generic={0x0, 0x6, "4a00a6", 0x10, 0x0, 0x0, @private0, @remote, {[@dstopts={0x0, 0x1, '\x00', [@ra, @ra={0x31}]}]}}}}}, 0x0) kernel console output (not intermixed with test programs): d from eth1 [ 214.598316][T10975] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 214.616054][T10975] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 214.767824][T10975] 8021q: adding VLAN 0 to HW filter on device bond0 [ 214.793931][T10975] 8021q: adding VLAN 0 to HW filter on device team0 [ 214.807613][ T9342] bridge0: port 1(bridge_slave_0) entered blocking state [ 214.814880][ T9342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 214.832533][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 214.839757][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 214.893293][T10975] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 215.055264][T10975] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 215.103179][T10975] veth0_vlan: entered promiscuous mode [ 215.125748][T10975] veth1_vlan: entered promiscuous mode [ 215.173587][T10975] veth0_macvtap: entered promiscuous mode [ 215.187639][T10975] veth1_macvtap: entered promiscuous mode [ 215.212448][T10975] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 215.227338][T10975] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 215.240961][T10975] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.250116][T10975] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.258893][T10975] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.268877][T10975] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 215.383477][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.414265][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.464924][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 215.500455][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 215.925771][T11194] tipc: Started in network mode [ 215.931658][T11194] tipc: Node identity 9ad514040399, cluster identity 4711 [ 215.939350][T11194] tipc: Enabled bearer , priority 0 [ 215.951945][T11193] tipc: Disabling bearer [ 216.088608][T11200] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 216.226520][T11207] IPVS: Scheduler module ip_vs_sip not found [ 217.107220][ T9344] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.448044][T11277] __nla_validate_parse: 3 callbacks suppressed [ 218.448063][T11277] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1522'. [ 218.472803][ T9344] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.620104][T11273] netlink: 232 bytes leftover after parsing attributes in process `syz.0.1520'. [ 218.661363][T11277] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1522'. [ 218.703747][ T9344] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.838851][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 218.859885][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 218.868260][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 218.878267][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 218.888556][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 218.933328][ T9344] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 218.999293][T11302] netlink: 40 bytes leftover after parsing attributes in process `syz.1.1529'. [ 219.188171][ T9344] bridge_slave_1: left allmulticast mode [ 219.199888][ T9344] bridge_slave_1: left promiscuous mode [ 219.207871][ T9344] bridge0: port 2(bridge_slave_1) entered disabled state [ 219.221276][ T9344] bridge_slave_0: left allmulticast mode [ 219.227067][ T9344] bridge_slave_0: left promiscuous mode [ 219.233378][ T9344] bridge0: port 1(bridge_slave_0) entered disabled state [ 219.310105][T11319] netlink: 64 bytes leftover after parsing attributes in process `syz.5.1533'. [ 219.344747][T11319] netlink: 80 bytes leftover after parsing attributes in process `syz.5.1533'. [ 219.424751][T11324] netlink: 'syz.5.1533': attribute type 1 has an invalid length. [ 219.454188][T11324] netlink: 236 bytes leftover after parsing attributes in process `syz.5.1533'. [ 219.754787][ T9344] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 219.766384][ T9344] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 219.776886][ T9344] bond0 (unregistering): Released all slaves [ 219.801032][T11323] netlink: 'syz.0.1534': attribute type 29 has an invalid length. [ 219.810254][T11323] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1534'. [ 219.810430][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 219.852933][T11324] vlan2: entered promiscuous mode [ 219.865722][T11324] bridge0: entered promiscuous mode [ 219.904616][T11336] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1536'. [ 220.022901][T11343] netlink: 'syz.1.1536': attribute type 2 has an invalid length. [ 220.027112][T11344] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1538'. [ 220.413756][T11362] sctp: [Deprecated]: syz.5.1542 (pid 11362) Use of int in maxseg socket option. [ 220.413756][T11362] Use struct sctp_assoc_value instead [ 220.515232][ T9344] hsr_slave_0: left promiscuous mode [ 220.541092][ T9344] hsr_slave_1: left promiscuous mode [ 220.552446][ T9344] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 220.583872][ T9344] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 220.633603][ T9344] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 220.647833][ T9344] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 220.695724][ T9344] veth1_macvtap: left promiscuous mode [ 220.701628][ T9344] veth0_macvtap: left promiscuous mode [ 220.707897][ T9344] veth1_vlan: left promiscuous mode [ 220.713877][ T9344] veth0_vlan: left promiscuous mode [ 220.724683][T11385] tipc: Can't bind to reserved service type 0 [ 220.933563][ T5842] Bluetooth: hci4: command tx timeout [ 221.288452][ T9344] team0 (unregistering): Port device team_slave_1 removed [ 221.327502][ T9344] team0 (unregistering): Port device team_slave_0 removed [ 221.708683][T11290] chnl_net:caif_netlink_parms(): no params data found [ 221.910511][ T5893] hid-generic 0005:046D:FFF9.0001: item fetching failed at offset 0/1 [ 221.940411][ T5893] hid-generic 0005:046D:FFF9.0001: probe with driver hid-generic failed with error -22 [ 222.013589][T11290] bridge0: port 1(bridge_slave_0) entered blocking state [ 222.041007][T11290] bridge0: port 1(bridge_slave_0) entered disabled state [ 222.057779][T11290] bridge_slave_0: entered allmulticast mode [ 222.072690][T11290] bridge_slave_0: entered promiscuous mode [ 222.113074][T11290] bridge0: port 2(bridge_slave_1) entered blocking state [ 222.138862][T11290] bridge0: port 2(bridge_slave_1) entered disabled state [ 222.154452][T11290] bridge_slave_1: entered allmulticast mode [ 222.168650][T11290] bridge_slave_1: entered promiscuous mode [ 222.364034][T11290] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 222.394644][T11290] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 222.482829][T11290] team0: Port device team_slave_0 added [ 222.491159][T11439] netlink: 'syz.3.1563': attribute type 2 has an invalid length. [ 222.521085][T11290] team0: Port device team_slave_1 added [ 222.647961][T11290] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 222.677478][T11290] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.734101][T11290] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 222.757082][T11290] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 222.799542][T11290] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 222.881216][T11290] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 223.020897][ T5842] Bluetooth: hci4: command tx timeout [ 223.047371][T11290] hsr_slave_0: entered promiscuous mode [ 223.062235][T11290] hsr_slave_1: entered promiscuous mode [ 223.074246][T11290] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 223.100112][T11290] Cannot create hsr debugfs directory [ 223.280969][T11475] sctp: [Deprecated]: syz.0.1574 (pid 11475) Use of int in max_burst socket option. [ 223.280969][T11475] Use struct sctp_assoc_value instead [ 223.389063][T11472] (unnamed net_device) (uninitialized): down delay (33554432) is not a multiple of miimon (640), value rounded to 33553920 ms [ 223.819161][T11502] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 223.831864][T11502] __nla_validate_parse: 6 callbacks suppressed [ 223.831881][T11502] netlink: 416 bytes leftover after parsing attributes in process `syz.1.1580'. [ 223.856050][T11502] openvswitch: netlink: Flow get message rejected, Key attribute missing. [ 223.871213][T11504] netlink: 'syz.3.1581': attribute type 13 has an invalid length. [ 223.888748][T11506] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 224.045414][T11511] netlink: 4 bytes leftover after parsing attributes in process `syz.5.1585'. [ 224.064413][T11511] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1585'. [ 224.168340][T11518] netdevsim netdevsim0: Direct firmware load for failed with error -2 [ 224.199704][T11518] netdevsim netdevsim0: Falling back to sysfs fallback for: [ 224.273489][T11523] netlink: 56 bytes leftover after parsing attributes in process `syz.5.1588'. [ 224.296283][T11521] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1586'. [ 224.309228][T11290] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 224.328276][T11525] netdevsim netdevsim1 ÿÿÿÿÿÿ: renamed from netdevsim0 [ 224.348482][T11290] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 224.388947][T11290] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 224.412876][T11290] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 224.536580][T11539] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1593'. [ 224.561726][T11539] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1593'. [ 224.575611][T11542] netlink: 'syz.3.1592': attribute type 1 has an invalid length. [ 224.589721][T11542] netlink: 'syz.3.1592': attribute type 2 has an invalid length. [ 224.597497][T11542] netlink: 1172 bytes leftover after parsing attributes in process `syz.3.1592'. [ 224.706472][T11290] 8021q: adding VLAN 0 to HW filter on device bond0 [ 224.743051][T11290] 8021q: adding VLAN 0 to HW filter on device team0 [ 224.780936][ T9342] bridge0: port 1(bridge_slave_0) entered blocking state [ 224.788146][ T9342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 224.850493][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 224.857730][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 225.018597][T11564] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 225.038564][T11567] syzkaller1: entered promiscuous mode [ 225.045928][T11567] syzkaller1: entered allmulticast mode [ 225.052643][T11564] netlink: 84 bytes leftover after parsing attributes in process `syz.5.1600'. [ 225.066216][T11567] syzkaller1: left promiscuous mode [ 225.081897][T11567] syzkaller1: left allmulticast mode [ 225.090284][ T5842] Bluetooth: hci4: command tx timeout [ 225.125999][T11570] netlink: 'syz.1.1603': attribute type 11 has an invalid length. [ 225.168907][T11570] netlink: 'syz.1.1603': attribute type 11 has an invalid length. [ 225.199811][T11570] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1603'. [ 225.392609][T11290] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 225.463673][T11586] syz.5.1607 uses old SIOCAX25GETINFO [ 225.510019][T11290] veth0_vlan: entered promiscuous mode [ 225.552854][T11290] veth1_vlan: entered promiscuous mode [ 225.652354][T11290] veth0_macvtap: entered promiscuous mode [ 225.679645][T11290] veth1_macvtap: entered promiscuous mode [ 225.758503][T11290] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 225.807171][T11290] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 225.838694][T11290] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.861947][T11290] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.880653][T11290] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 225.891411][T11290] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 226.079753][ T9344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.098387][ T9344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.172079][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 226.196821][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 226.463968][T11642] !: renamed from dummy0 [ 226.473489][T11642] IPv6: NLM_F_CREATE should be specified when creating new route [ 226.624962][T11653] syzkaller0: entered promiscuous mode [ 226.633113][T11653] syzkaller0: entered allmulticast mode [ 226.850568][T11655] syzkaller0: entered promiscuous mode [ 226.856214][T11655] syzkaller0: entered allmulticast mode [ 228.451766][T11661] tipc: Enabled bearer , priority 0 [ 228.522293][T11657] tipc: Disabling bearer [ 228.647348][ T3451] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 228.858417][T11693] __nla_validate_parse: 4 callbacks suppressed [ 228.858436][T11693] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1639'. [ 228.965320][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 228.975404][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 228.978813][ T3451] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.000032][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 229.017106][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 229.027546][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 229.259606][T11716] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1644'. [ 229.303663][T11716] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1644'. [ 229.314178][T11720] netlink: 8 bytes leftover after parsing attributes in process `syz.1.1646'. [ 229.321698][T11716] bridge0: port 1(vlan2) entered blocking state [ 229.330006][T11716] bridge0: port 1(vlan2) entered disabled state [ 229.336546][T11716] vlan2: entered allmulticast mode [ 229.342595][T11716] bridge0: entered allmulticast mode [ 229.350679][T11716] vlan2: left allmulticast mode [ 229.355538][T11716] bridge0: left allmulticast mode [ 229.408876][ T3451] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.493055][ T3451] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 229.498737][T11727] netlink: 'syz.3.1649': attribute type 8 has an invalid length. [ 229.567522][T11731] netlink: 'syz.1.1648': attribute type 1 has an invalid length. [ 229.581208][T11731] netlink: 'syz.1.1648': attribute type 11 has an invalid length. [ 229.589171][T11731] netlink: 224 bytes leftover after parsing attributes in process `syz.1.1648'. [ 229.851088][ T3451] bridge_slave_1: left allmulticast mode [ 229.856791][ T3451] bridge_slave_1: left promiscuous mode [ 229.875398][T11731] syz.1.1648 (11731) used greatest stack depth: 17992 bytes left [ 229.890334][ T3451] bridge0: port 2(bridge_slave_1) entered disabled state [ 229.927207][ T3451] bridge_slave_0: left allmulticast mode [ 229.943412][ T3451] bridge_slave_0: left promiscuous mode [ 229.949455][ T3451] bridge0: port 1(bridge_slave_0) entered disabled state [ 230.105840][T11757] sctp: [Deprecated]: syz.5.1656 (pid 11757) Use of int in max_burst socket option. [ 230.105840][T11757] Use struct sctp_assoc_value instead [ 230.124919][T11758] sctp: [Deprecated]: syz.5.1656 (pid 11758) Use of int in max_burst socket option. [ 230.124919][T11758] Use struct sctp_assoc_value instead [ 230.140134][T11759] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1657'. [ 230.140168][T11759] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1657'. [ 230.140356][T11760] netlink: 28 bytes leftover after parsing attributes in process `syz.1.1657'. [ 230.140375][T11760] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1657'. [ 230.148694][T11759] netlink: 'syz.1.1657': attribute type 2 has an invalid length. [ 230.154649][T11758] netlink: 16178 bytes leftover after parsing attributes in process `syz.5.1656'. [ 230.254009][T11764] netlink: 'syz.1.1658': attribute type 1 has an invalid length. [ 230.262648][T11764] netlink: 'syz.1.1658': attribute type 1 has an invalid length. [ 230.271797][T11764] netlink: 'syz.1.1658': attribute type 1 has an invalid length. [ 230.280072][T11764] netlink: 'syz.1.1658': attribute type 2 has an invalid length. [ 230.292611][T11764] netlink: 'syz.1.1658': attribute type 1 has an invalid length. [ 230.301106][T11764] netlink: 'syz.1.1658': attribute type 2 has an invalid length. [ 230.527472][ T3451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 230.539552][ T3451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 230.549956][ T3451] bond0 (unregistering): Released all slaves [ 230.567468][T11698] chnl_net:caif_netlink_parms(): no params data found [ 230.846837][T11778] sock: sock_set_timeout: `syz.5.1663' (pid 11778) tries to set negative timeout [ 231.021473][T11698] bridge0: port 1(bridge_slave_0) entered blocking state [ 231.029136][T11698] bridge0: port 1(bridge_slave_0) entered disabled state [ 231.036617][T11698] bridge_slave_0: entered allmulticast mode [ 231.046124][T11698] bridge_slave_0: entered promiscuous mode [ 231.092184][ T5833] Bluetooth: hci4: command tx timeout [ 231.128571][T11698] bridge0: port 2(bridge_slave_1) entered blocking state [ 231.143589][T11698] bridge0: port 2(bridge_slave_1) entered disabled state [ 231.159755][T11698] bridge_slave_1: entered allmulticast mode [ 231.183037][T11698] bridge_slave_1: entered promiscuous mode [ 231.261220][T11698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 231.289361][T11698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 231.367046][ T3451] hsr_slave_0: left promiscuous mode [ 231.404407][ T3451] hsr_slave_1: left promiscuous mode [ 231.420753][ T3451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 231.430917][ T3451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 231.447623][ T3451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 231.469942][ T3451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 231.531260][ T3451] veth1_macvtap: left promiscuous mode [ 231.536874][ T3451] veth0_macvtap: left promiscuous mode [ 231.551511][ T3451] veth1_vlan: left promiscuous mode [ 231.556952][ T3451] veth0_vlan: left promiscuous mode [ 232.465316][ T3451] team0 (unregistering): Port device team_slave_1 removed [ 232.505063][ T3451] team0 (unregistering): Port device team_slave_0 removed [ 232.941839][T11822] bond0: (slave bond_slave_0): Releasing backup interface [ 232.967461][T11822] bond0: (slave bond_slave_1): Releasing backup interface [ 232.994050][T11822] team0: Port device team_slave_0 removed [ 233.024644][T11822] team0: Port device team_slave_1 removed [ 233.033943][T11822] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 233.043229][T11822] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 233.052995][T11822] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 233.060674][T11822] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 233.121578][T11698] team0: Port device team_slave_0 added [ 233.172420][ T5833] Bluetooth: hci4: command tx timeout [ 233.257779][T11698] team0: Port device team_slave_1 added [ 233.358693][T11859] (unnamed net_device) (uninitialized): option use_carrier: invalid value (4) [ 233.461660][T11698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 233.468654][T11698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.506806][T11698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 233.535714][T11872] netlink: 'syz.5.1687': attribute type 1 has an invalid length. [ 233.570832][T11698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 233.580505][T11698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 233.607180][T11698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 233.863111][T11698] hsr_slave_0: entered promiscuous mode [ 233.875277][T11698] hsr_slave_1: entered promiscuous mode [ 233.886725][T11698] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 233.896954][T11698] Cannot create hsr debugfs directory [ 234.810727][T11939] syzkaller1: entered promiscuous mode [ 234.816765][T11939] syzkaller1: entered allmulticast mode [ 234.877671][T11946] __nla_validate_parse: 9 callbacks suppressed [ 234.877691][T11946] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1706'. [ 235.054827][T11954] netlink: 'syz.0.1709': attribute type 2 has an invalid length. [ 235.063751][T11698] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 235.071470][T11954] netlink: 1184 bytes leftover after parsing attributes in process `syz.0.1709'. [ 235.086012][T11698] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 235.106985][T11698] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 235.135827][T11698] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 235.147652][T11954] openvswitch: netlink: Flow actions attr not present in new flow. [ 235.250413][ T5833] Bluetooth: hci4: command tx timeout [ 235.269918][T11698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 235.295585][T11698] 8021q: adding VLAN 0 to HW filter on device team0 [ 235.308424][ T9345] bridge0: port 1(bridge_slave_0) entered blocking state [ 235.315673][ T9345] bridge0: port 1(bridge_slave_0) entered forwarding state [ 235.338017][ T9345] bridge0: port 2(bridge_slave_1) entered blocking state [ 235.345254][ T9345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 235.650442][T11698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 235.763354][T11980] netlink: 16186 bytes leftover after parsing attributes in process `syz.3.1715'. [ 235.764531][T11984] netlink: 36 bytes leftover after parsing attributes in process `syz.1.1717'. [ 235.782232][T11698] veth0_vlan: entered promiscuous mode [ 235.808864][T11980] netlink: 76 bytes leftover after parsing attributes in process `syz.3.1715'. [ 235.870191][T11986] netdevsim netdevsim5 netdevsim0: entered promiscuous mode [ 235.913562][T11698] veth1_vlan: entered promiscuous mode [ 236.002667][T11698] veth0_macvtap: entered promiscuous mode [ 236.028309][T11698] veth1_macvtap: entered promiscuous mode [ 236.096105][T11698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 236.116460][T11698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 236.132882][T11698] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.156851][T11698] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.167679][T11998] netlink: 'syz.5.1720': attribute type 1 has an invalid length. [ 236.175724][T11698] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.185392][T11698] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 236.194626][T11998] netlink: 'syz.5.1720': attribute type 2 has an invalid length. [ 236.205709][T11998] netlink: 1172 bytes leftover after parsing attributes in process `syz.5.1720'. [ 236.316206][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.345342][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.382779][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805b849400: rx timeout, send abort [ 236.422789][ T9345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 236.432086][ T9345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 236.519018][T12013] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1724'. [ 236.546766][T12013] netlink: 12 bytes leftover after parsing attributes in process `syz.3.1724'. [ 236.561380][T12013] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1724'. [ 236.576112][T12013] netlink: 'syz.3.1724': attribute type 3 has an invalid length. [ 236.598004][T12013] netlink: 'syz.3.1724': attribute type 2 has an invalid length. [ 236.620320][T12013] netlink: 31 bytes leftover after parsing attributes in process `syz.3.1724'. [ 236.699370][T12023] dvmrp0: entered allmulticast mode [ 236.805738][T12027] openvswitch: netlink: Missing key (keys=40, expected=2000) [ 236.878791][T12035] 8021q: VLANs not supported on ip_vti0 [ 236.892313][ C1] vcan0: j1939_tp_rxtimer: 0xffff88805b849400: abort rx timeout. Force session deactivation [ 236.940459][T12033] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 237.905188][T12071] xt_CT: No such helper "syz1" [ 238.003734][T12075] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 238.387607][ T3451] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.646995][ T3451] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.706388][ T3451] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.774861][ T3451] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 239.899689][ T3451] bridge_slave_1: left allmulticast mode [ 239.905490][ T3451] bridge_slave_1: left promiscuous mode [ 239.921113][T12100] xt_ipcomp: unknown flags B [ 239.936608][ T3451] bridge0: port 2(bridge_slave_1) entered disabled state [ 239.956733][ T3451] bridge_slave_0: left allmulticast mode [ 239.970117][ T3451] bridge_slave_0: left promiscuous mode [ 239.984858][ T3451] bridge0: port 1(bridge_slave_0) entered disabled state [ 240.006645][T12107] xt_addrtype: ipv6 BLACKHOLE matching not supported [ 240.072835][T12113] openvswitch: netlink: VXLAN extension 173 out of range max 1 [ 240.487466][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 240.498262][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 240.515219][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 240.525753][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 240.535858][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 240.695365][ T3451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 240.707109][ T3451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 240.718220][ T3451] bond0 (unregistering): Released all slaves [ 240.965345][T12135] IPVS: nq: UDP 224.0.0.2:20004 - no destination available [ 241.302908][T12133] netdevsim netdevsim3 netdevsim0: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.313542][T12133] netdevsim netdevsim3 netdevsim1: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.322994][T12133] netdevsim netdevsim3 netdevsim2: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.334060][T12133] netdevsim netdevsim3 netdevsim3: unset [1, 0] type 2 family 0 port 6081 - 0 [ 241.487064][T12165] __nla_validate_parse: 2 callbacks suppressed [ 241.487082][T12165] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1764'. [ 241.548245][T12165] nft_compat: unsupported protocol 0 [ 241.895838][ T3451] hsr_slave_0: left promiscuous mode [ 241.908039][ T3451] hsr_slave_1: left promiscuous mode [ 241.927537][ T3451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 241.939904][ T3451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 241.946693][T12197] netlink: 12 bytes leftover after parsing attributes in process `syz.0.1769'. [ 241.962811][ T3451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 241.979542][ T3451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 242.016624][ T3451] veth1_macvtap: left promiscuous mode [ 242.025665][ T3451] veth0_macvtap: left promiscuous mode [ 242.033479][ T3451] veth1_vlan: left promiscuous mode [ 242.038945][ T3451] veth0_vlan: left promiscuous mode [ 242.610006][ T5842] Bluetooth: hci4: command tx timeout [ 242.745437][ T3451] team0 (unregistering): Port device team_slave_1 removed [ 242.788191][ T3451] team0 (unregistering): Port device team_slave_0 removed [ 243.334674][T12130] chnl_net:caif_netlink_parms(): no params data found [ 243.465677][T12224] netlink: 'syz.5.1777': attribute type 4 has an invalid length. [ 243.480663][T12226] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1778'. [ 243.512954][T12230] netlink: 68 bytes leftover after parsing attributes in process `syz.3.1780'. [ 243.527904][T12229] sctp: [Deprecated]: syz.0.1779 (pid 12229) Use of int in max_burst socket option. [ 243.527904][T12229] Use struct sctp_assoc_value instead [ 243.597633][T12226] 8021q: adding VLAN 0 to HW filter on device bond6 [ 243.651535][T12226] dvmrp1: entered allmulticast mode [ 243.761880][T12242] netlink: 'syz.5.1783': attribute type 1 has an invalid length. [ 243.859756][T12242] 8021q: adding VLAN 0 to HW filter on device bond2 [ 243.867912][T12130] bridge0: port 1(bridge_slave_0) entered blocking state [ 243.879817][T12130] bridge0: port 1(bridge_slave_0) entered disabled state [ 243.887135][T12130] bridge_slave_0: entered allmulticast mode [ 243.901102][T12130] bridge_slave_0: entered promiscuous mode [ 243.910747][T12130] bridge0: port 2(bridge_slave_1) entered blocking state [ 243.918827][T12130] bridge0: port 2(bridge_slave_1) entered disabled state [ 243.926928][T12130] bridge_slave_1: entered allmulticast mode [ 243.935785][T12130] bridge_slave_1: entered promiscuous mode [ 244.069119][T12130] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 244.098310][T12260] netlink: 'syz.0.1787': attribute type 21 has an invalid length. [ 244.107826][T12130] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 244.116968][T12260] netlink: 152 bytes leftover after parsing attributes in process `syz.0.1787'. [ 244.236723][T12130] team0: Port device team_slave_0 added [ 244.292413][T12130] team0: Port device team_slave_1 added [ 244.426793][T12130] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 244.444363][T12130] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.480173][T12130] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 244.498023][T12130] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 244.525260][T12130] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 244.594828][T12130] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 244.634057][T12291] netlink: 92 bytes leftover after parsing attributes in process `syz.1.1797'. [ 244.690708][ T5842] Bluetooth: hci4: command tx timeout [ 244.797687][T12130] hsr_slave_0: entered promiscuous mode [ 244.816166][T12295] x_tables: duplicate underflow at hook 2 [ 244.827457][T12130] hsr_slave_1: entered promiscuous mode [ 244.843425][T12130] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 244.860552][T12130] Cannot create hsr debugfs directory [ 244.991658][T12306] IPVS: set_ctl: invalid protocol: 41 172.30.1.6:20004 [ 245.084740][T12314] syzkaller1: entered promiscuous mode [ 245.091268][T12314] syzkaller1: entered allmulticast mode [ 245.255338][T12328] openvswitch: netlink: Tunnel attr 0 has unexpected len 16 expected 8 [ 245.722885][T12345] syzkaller1: entered promiscuous mode [ 245.728588][T12345] syzkaller1: entered allmulticast mode [ 245.748850][T12349] netlink: 56 bytes leftover after parsing attributes in process `syz.3.1814'. [ 245.749043][T12350] netlink: 16 bytes leftover after parsing attributes in process `syz.1.1815'. [ 245.758846][T12349] xt_socket: unknown flags 0x3c [ 245.871603][T12356] netlink: 24 bytes leftover after parsing attributes in process `syz.1.1817'. [ 246.134495][T12130] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 246.158838][T12130] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 246.191970][T12130] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 246.245091][T12130] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 246.372412][T12384] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1821'. [ 246.437348][T12385] netlink: 'syz.0.1821': attribute type 2 has an invalid length. [ 246.660420][T12130] 8021q: adding VLAN 0 to HW filter on device bond0 [ 246.710386][T12401] IPVS: set_ctl: invalid protocol: 98 172.20.20.170:20000 [ 246.748196][T12130] 8021q: adding VLAN 0 to HW filter on device team0 [ 246.775038][ T194] bridge0: port 1(bridge_slave_0) entered blocking state [ 246.778115][ T5842] Bluetooth: hci4: command tx timeout [ 246.782261][ T194] bridge0: port 1(bridge_slave_0) entered forwarding state [ 246.798208][T12404] netlink: 'syz.0.1828': attribute type 13 has an invalid length. [ 246.809716][T12404] netlink: 'syz.0.1828': attribute type 17 has an invalid length. [ 246.824262][ T9344] bridge0: port 2(bridge_slave_1) entered blocking state [ 246.831487][ T9344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 247.022675][T12414] netlink: 'syz.3.1833': attribute type 58 has an invalid length. [ 247.048855][T12414] netlink: 20 bytes leftover after parsing attributes in process `syz.3.1833'. [ 247.124558][T12404] 8021q: adding VLAN 0 to HW filter on device bond1 [ 247.162864][T12404] veth3: left promiscuous mode [ 247.173198][T12404] veth5: left allmulticast mode [ 247.184975][T12404] 8021q: adding VLAN 0 to HW filter on device bond3 [ 247.217283][T12404] netdevsim netdevsim0 netdevsim0: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.226817][T12404] netdevsim netdevsim0 netdevsim1: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.235874][T12404] netdevsim netdevsim0 netdevsim2: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.244785][T12404] netdevsim netdevsim0 netdevsim3: set [0, 0] type 1 family 0 port 8472 - 0 [ 247.286123][T12412] netlink: 'syz.5.1832': attribute type 33 has an invalid length. [ 247.401946][ T9344] bond2: (slave veth3): link status definitely up, 10000 Mbps full duplex [ 247.437369][ T9344] bond2: (slave veth3): making interface the new active one [ 247.459682][ T9344] veth3: entered allmulticast mode [ 247.467930][ T9344] bond2: active interface up! [ 247.643772][T12432] tap0: tun_chr_ioctl cmd 1074025672 [ 247.690941][T12432] tap0: ignored: set checksum disabled [ 247.839052][T12130] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 247.987369][T12452] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1842'. [ 248.007798][T12130] veth0_vlan: entered promiscuous mode [ 248.038132][T12130] veth1_vlan: entered promiscuous mode [ 248.103193][T12130] veth0_macvtap: entered promiscuous mode [ 248.128968][T12130] veth1_macvtap: entered promiscuous mode [ 248.178512][T12130] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 248.207151][T12130] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 248.227484][T12130] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.244575][T12130] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.265193][T12130] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.282131][T12130] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 248.337590][T12460] IPVS: nq: UDP 224.0.0.2:20004 - no destination available [ 248.530311][ T9344] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.542116][T12470] xt_TPROXY: Can be used only with -p tcp or -p udp [ 248.553301][ T9344] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.620128][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 248.675506][T12483] netlink: 12 bytes leftover after parsing attributes in process `syz.5.1847'. [ 248.684835][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 248.851914][ T5842] Bluetooth: hci4: command tx timeout [ 249.116238][ T59] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 249.136976][ T59] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 249.209260][T12511] netlink: 'syz.3.1859': attribute type 1 has an invalid length. [ 249.265148][T12515] netlink: 68 bytes leftover after parsing attributes in process `syz.5.1862'. [ 249.383656][ T3451] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.489718][T12524] x_tables: duplicate underflow at hook 1 [ 249.551886][ T3451] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 249.827259][ T3451] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.295251][ T3451] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 250.508233][ T3451] bridge_slave_1: left allmulticast mode [ 250.515667][ T3451] bridge_slave_1: left promiscuous mode [ 250.522871][ T3451] bridge0: port 2(bridge_slave_1) entered disabled state [ 250.534251][ T3451] bridge_slave_0: left allmulticast mode [ 250.540361][ T3451] bridge_slave_0: left promiscuous mode [ 250.547389][ T3451] bridge0: port 1(bridge_slave_0) entered disabled state [ 250.856690][ T3451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 250.868311][ T3451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 250.881269][ T3451] bond0 (unregistering): Released all slaves [ 250.996627][T12534] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1866'. [ 251.011804][T12535] netlink: 44 bytes leftover after parsing attributes in process `syz.3.1866'. [ 251.036626][T12529] bridge0: port 1(bridge_slave_0) entered disabled state [ 251.053756][T12529] bridge0: port 2(bridge_slave_1) entered disabled state [ 251.143587][T12538] netlink: 'syz.0.1864': attribute type 16 has an invalid length. [ 251.174289][T12538] netlink: 'syz.0.1864': attribute type 17 has an invalid length. [ 251.190603][T12528] tipc: Enabling of bearer rejected, failed to enable media [ 251.454045][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 251.455025][T12538] bridge0: port 1(bridge_slave_0) entered blocking state [ 251.468401][T12538] bridge0: port 1(bridge_slave_0) entered forwarding state [ 251.477469][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 251.479356][T12538] bridge0: port 2(bridge_slave_1) entered blocking state [ 251.491745][T12538] bridge0: port 2(bridge_slave_1) entered forwarding state [ 251.501134][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 251.518043][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 251.528209][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 251.709742][T12557] IPVS: sync thread started: state = MASTER, mcast_ifn = veth0_virt_wifi, syncid = 33554432, id = 0 [ 251.792015][T12562] netlink: 16 bytes leftover after parsing attributes in process `syz.5.1875'. [ 251.814377][ T9342] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 251.906726][ T3451] hsr_slave_0: left promiscuous mode [ 251.920358][ T3451] hsr_slave_1: left promiscuous mode [ 251.930090][ T3451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 251.941125][ T3451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 251.951263][ T3451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 251.965991][ T3451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 252.006961][ T3451] veth1_macvtap: left promiscuous mode [ 252.016249][T12575] xt_hashlimit: size too large, truncated to 1048576 [ 252.022280][ T3451] veth0_macvtap: left promiscuous mode [ 252.036365][ T3451] veth1_vlan: left promiscuous mode [ 252.038266][T12576] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1876'. [ 252.048061][ T3451] veth0_vlan: left promiscuous mode [ 252.683623][ T3451] team0 (unregistering): Port device team_slave_1 removed [ 252.726375][ T3451] team0 (unregistering): Port device team_slave_0 removed [ 253.266437][T12589] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1881'. [ 253.327908][T12593] netlink: 18 bytes leftover after parsing attributes in process `syz.3.1881'. [ 253.510456][T12551] chnl_net:caif_netlink_parms(): no params data found [ 253.570065][ T5833] Bluetooth: hci4: command tx timeout [ 253.878652][T12615] netlink: 11562 bytes leftover after parsing attributes in process `syz.3.1888'. [ 253.941190][T12551] bridge0: port 1(bridge_slave_0) entered blocking state [ 253.952925][T12551] bridge0: port 1(bridge_slave_0) entered disabled state [ 253.965789][T12551] bridge_slave_0: entered allmulticast mode [ 253.974230][T12551] bridge_slave_0: entered promiscuous mode [ 254.005737][T12551] bridge0: port 2(bridge_slave_1) entered blocking state [ 254.030907][T12551] bridge0: port 2(bridge_slave_1) entered disabled state [ 254.038286][T12551] bridge_slave_1: entered allmulticast mode [ 254.082726][T12551] bridge_slave_1: entered promiscuous mode [ 254.243352][T12551] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 254.277434][T12551] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 254.424480][T12551] team0: Port device team_slave_0 added [ 254.458756][T12551] team0: Port device team_slave_1 added [ 254.673082][T12551] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 254.687353][T12551] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.718374][T12551] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 254.730791][T12658] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1896'. [ 254.788591][T12551] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 254.799996][T12655] netlink: 12 bytes leftover after parsing attributes in process `syz.1.1896'. [ 254.809415][T12551] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 254.837709][T12551] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 254.917504][T12657] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1897'. [ 254.950381][T12671] netlink: 'syz.3.1900': attribute type 1 has an invalid length. [ 255.005162][T12551] hsr_slave_0: entered promiscuous mode [ 255.015791][T12551] hsr_slave_1: entered promiscuous mode [ 255.024052][T12551] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 255.034961][T12551] Cannot create hsr debugfs directory [ 255.444956][T12696] vcan0: tx drop: invalid sa for name 0x0000000000000001 [ 255.491758][T12699] netlink: 348 bytes leftover after parsing attributes in process `syz.1.1911'. [ 255.652338][ T5833] Bluetooth: hci4: command tx timeout [ 255.820701][T12717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1916'. [ 255.832980][T12717] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1916'. [ 255.947977][T12723] IPv6: NLM_F_CREATE should be specified when creating new route [ 256.006778][T12729] netlink: 'syz.5.1918': attribute type 11 has an invalid length. [ 256.052140][T12731] netlink: 8 bytes leftover after parsing attributes in process `syz.3.1921'. [ 256.077035][T12733] xt_TCPMSS: Only works on TCP SYN packets [ 256.081440][T12731] sch_fq: defrate 0 ignored. [ 256.114134][T12551] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 256.145996][T12551] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 256.183704][T12551] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 256.237931][T12551] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 256.547579][T12551] 8021q: adding VLAN 0 to HW filter on device bond0 [ 256.588830][T12760] bridge0: port 2(bridge_slave_1) entered disabled state [ 256.596800][T12760] bridge0: port 1(bridge_slave_0) entered disabled state [ 256.642838][T12551] 8021q: adding VLAN 0 to HW filter on device team0 [ 256.678634][ T9344] bridge0: port 1(bridge_slave_0) entered blocking state [ 256.685922][ T9344] bridge0: port 1(bridge_slave_0) entered forwarding state [ 256.721146][ T9344] bridge0: port 2(bridge_slave_1) entered blocking state [ 256.728403][ T9344] bridge0: port 2(bridge_slave_1) entered forwarding state [ 256.918520][T12768] veth0: entered promiscuous mode [ 257.006175][T12773] veth0: left promiscuous mode [ 257.079351][T12779] netlink: 'syz.0.1934': attribute type 10 has an invalid length. [ 257.253955][T12779] team0: Port device geneve0 added [ 257.417804][T12788] xt_TPROXY: Can be used only with -p tcp or -p udp [ 257.500289][T12793] openvswitch: netlink: VXLAN extension message has 4 unknown bytes. [ 257.546748][T12551] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 257.650281][T12798] xt_TPROXY: Can be used only with -p tcp or -p udp [ 257.700616][T12551] veth0_vlan: entered promiscuous mode [ 257.730945][ T5833] Bluetooth: hci4: command tx timeout [ 257.748341][T12551] veth1_vlan: entered promiscuous mode [ 257.867248][T12551] veth0_macvtap: entered promiscuous mode [ 257.918674][T12551] veth1_macvtap: entered promiscuous mode [ 257.966238][T12551] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 258.020190][T12551] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 258.087406][T12551] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.107034][T12551] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.129653][T12551] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.148666][T12551] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 258.367038][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.430067][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 258.506022][ T9345] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 258.523948][ T9345] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 259.337611][ T59] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.368779][T12859] __nla_validate_parse: 5 callbacks suppressed [ 259.368797][T12859] netlink: 20 bytes leftover after parsing attributes in process `syz.5.1958'. [ 259.396058][T12859] netlink: 8 bytes leftover after parsing attributes in process `syz.5.1958'. [ 259.593366][T12861] team0 (unregistering): Port device team_slave_0 removed [ 259.624953][T12861] team0 (unregistering): Port device team_slave_1 removed [ 259.678191][T12861] team0 (unregistering): Port device geneve0 removed [ 259.749353][ T59] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 259.858953][ T59] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.283563][ T59] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 260.474923][ T59] bridge_slave_1: left allmulticast mode [ 260.485451][ T59] bridge_slave_1: left promiscuous mode [ 260.491282][ T59] bridge0: port 2(bridge_slave_1) entered disabled state [ 260.501861][ T59] bridge_slave_0: left allmulticast mode [ 260.507531][ T59] bridge_slave_0: left promiscuous mode [ 260.521987][ T59] bridge0: port 1(bridge_slave_0) entered disabled state [ 260.905010][ T59] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 260.916579][ T59] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 260.929276][ T59] bond0 (unregistering): Released all slaves [ 261.204158][T12874] netlink: 'syz.1.1962': attribute type 3 has an invalid length. [ 261.205375][T12875] netlink: 'syz.3.1963': attribute type 1 has an invalid length. [ 261.227902][T12874] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.233598][T12875] netlink: 184 bytes leftover after parsing attributes in process `syz.3.1963'. [ 261.253504][T12875] netlink: 40 bytes leftover after parsing attributes in process `syz.3.1963'. [ 261.282916][ T59] hsr_slave_0: left promiscuous mode [ 261.289294][ T59] hsr_slave_1: left promiscuous mode [ 261.299138][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 261.315831][T12881] netlink: 72 bytes leftover after parsing attributes in process `syz.0.1961'. [ 261.326677][T12872] netlink: 8 bytes leftover after parsing attributes in process `syz.0.1961'. [ 261.339669][T12872] netlink: 4 bytes leftover after parsing attributes in process `syz.0.1961'. [ 261.350171][T12872] netlink: 52 bytes leftover after parsing attributes in process `syz.0.1961'. [ 261.362676][ T59] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 261.433887][ T59] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 261.458283][ T59] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 261.553474][ T59] veth1_macvtap: left promiscuous mode [ 261.567142][ T59] veth0_macvtap: left promiscuous mode [ 261.579774][ T59] veth1_vlan: left promiscuous mode [ 261.586612][ T59] veth0_vlan: left promiscuous mode [ 261.649806][T12895] openvswitch: netlink: Duplicate or invalid key (type 0). [ 261.667088][T12895] openvswitch: netlink: Flow actions may not be safe on all matching packets. [ 261.701020][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 261.711558][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 261.720567][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 261.729996][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 261.739339][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 261.771432][T12900] sctp: [Deprecated]: syz.0.1967 (pid 12900) Use of int in maxseg socket option. [ 261.771432][T12900] Use struct sctp_assoc_value instead [ 262.156828][ T59] team0 (unregistering): Port device team_slave_1 removed [ 262.197447][ T59] team0 (unregistering): Port device team_slave_0 removed [ 262.612704][T12898] workqueue: Failed to create a rescuer kthread for wq "bond4": -EINTR [ 263.007196][T12916] vlan1: left allmulticast mode [ 263.026614][T12925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1972'. [ 263.037251][T12925] netlink: 4 bytes leftover after parsing attributes in process `syz.1.1972'. [ 263.051003][T12916] veth0_vlan: left allmulticast mode [ 263.250049][T12897] chnl_net:caif_netlink_parms(): no params data found [ 263.258085][T12937] x_tables: ip6_tables: TCPOPTSTRIP target: only valid in mangle table, not raw [ 263.475207][T12897] bridge0: port 1(bridge_slave_0) entered blocking state [ 263.486374][T12897] bridge0: port 1(bridge_slave_0) entered disabled state [ 263.495039][T12897] bridge_slave_0: entered allmulticast mode [ 263.503064][T12897] bridge_slave_0: entered promiscuous mode [ 263.512048][T12897] bridge0: port 2(bridge_slave_1) entered blocking state [ 263.519323][T12897] bridge0: port 2(bridge_slave_1) entered disabled state [ 263.531064][T12897] bridge_slave_1: entered allmulticast mode [ 263.612999][T12897] bridge_slave_1: entered promiscuous mode [ 263.807613][T12897] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 263.820099][ T5842] Bluetooth: hci4: command tx timeout [ 263.872440][T12897] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 263.968807][T12897] team0: Port device team_slave_0 added [ 264.001502][T12897] team0: Port device team_slave_1 added [ 264.112409][T12897] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 264.119411][T12897] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.206292][T12897] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 264.233542][T12897] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 264.269075][T12897] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 264.301112][T12897] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 264.427186][T12897] hsr_slave_0: entered promiscuous mode [ 264.457263][T12897] hsr_slave_1: entered promiscuous mode [ 264.465578][T12897] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 264.478189][T12897] Cannot create hsr debugfs directory [ 264.520086][T13013] netlink: 'syz.3.1998': attribute type 13 has an invalid length. [ 264.528134][T13013] netlink: 'syz.3.1998': attribute type 17 has an invalid length. [ 264.634432][T13013] 0ªX¹¦D: left allmulticast mode [ 264.669520][T13013] 8021q: adding VLAN 0 to HW filter on device bond0 [ 264.678318][T13013] 8021q: adding VLAN 0 to HW filter on device team0 [ 264.688170][T13013] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 265.043442][T13036] __nla_validate_parse: 7 callbacks suppressed [ 265.043460][T13036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2005'. [ 265.103734][T13036] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2005'. [ 265.204985][T13048] netlink: 104 bytes leftover after parsing attributes in process `syz.1.2008'. [ 265.225554][T13048] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2008'. [ 265.238590][T13048] netlink: 32 bytes leftover after parsing attributes in process `syz.1.2008'. [ 265.336660][T12897] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 265.378151][T12897] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 265.406466][T12897] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 265.428280][T12897] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 265.493887][T13062] netlink: 'syz.5.2012': attribute type 1 has an invalid length. [ 265.536343][T13062] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2012'. [ 265.547683][T13071] netlink: 8 bytes leftover after parsing attributes in process `syz.1.2013'. [ 265.596624][T13073] tipc: Enabled bearer , priority 10 [ 265.618374][T12897] 8021q: adding VLAN 0 to HW filter on device bond0 [ 265.627668][T13073] tipc: Enabled bearer , priority 0 [ 265.685269][T12897] 8021q: adding VLAN 0 to HW filter on device team0 [ 265.732800][ T12] bridge0: port 1(bridge_slave_0) entered blocking state [ 265.740234][ T12] bridge0: port 1(bridge_slave_0) entered forwarding state [ 265.793227][ T2970] bridge0: port 2(bridge_slave_1) entered blocking state [ 265.800423][ T2970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 265.889628][ T5842] Bluetooth: hci4: command tx timeout [ 265.958542][T13091] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2023'. [ 265.968340][T13091] netlink: 32 bytes leftover after parsing attributes in process `syz.0.2023'. [ 266.193787][T13109] openvswitch: netlink: Unexpected mask (mask=20040, allowed=10048) [ 266.493215][T12897] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 266.635273][T12897] veth0_vlan: entered promiscuous mode [ 266.692322][T12897] veth1_vlan: entered promiscuous mode [ 266.720053][ T5853] tipc: Node number set to 2548108460 [ 266.748088][T12897] veth0_macvtap: entered promiscuous mode [ 266.787927][T12897] veth1_macvtap: entered promiscuous mode [ 266.875535][T12897] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 266.914131][T12897] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 266.952610][T12897] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.980500][T12897] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 266.998874][T12897] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.019896][T12897] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 267.065049][T13143] netlink: 22 bytes leftover after parsing attributes in process `syz.1.2039'. [ 267.247481][ T3521] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.290897][ T3521] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.414252][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 267.448979][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 267.988352][T13175] netlink: 'syz.5.2050': attribute type 1 has an invalid length. [ 268.869088][ T3521] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.196659][ T3521] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.404873][ T3521] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.464776][ T3521] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 269.565497][ T3521] bridge_slave_1: left allmulticast mode [ 269.571495][ T3521] bridge_slave_1: left promiscuous mode [ 269.577189][ T3521] bridge0: port 2(bridge_slave_1) entered disabled state [ 269.587171][ T3521] bridge_slave_0: left allmulticast mode [ 269.593985][ T3521] bridge_slave_0: left promiscuous mode [ 269.600154][ T3521] bridge0: port 1(bridge_slave_0) entered disabled state [ 269.903384][ T3521] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 269.914385][ T3521] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 269.926600][ T3521] bond0 (unregistering): Released all slaves [ 270.147167][ T3521] hsr_slave_0: left promiscuous mode [ 270.154533][ T3521] hsr_slave_1: left promiscuous mode [ 270.161523][ T3521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 270.168956][ T3521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 270.177313][ T3521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 270.184931][ T3521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 270.207934][ T3521] veth1_macvtap: left promiscuous mode [ 270.215459][ T3521] veth0_macvtap: left promiscuous mode [ 270.221862][ T3521] veth1_vlan: left promiscuous mode [ 270.227181][ T3521] veth0_vlan: left promiscuous mode [ 270.500788][T13232] __nla_validate_parse: 4 callbacks suppressed [ 270.500808][T13232] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2063'. [ 270.558078][T13232] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2063'. [ 270.730805][T13246] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2069'. [ 270.765567][T13246] nft_compat: unsupported protocol 0 [ 271.122538][T13268] x_tables: duplicate underflow at hook 3 [ 271.303196][ T5833] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 271.321874][ T5833] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 271.333792][ T5833] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 271.369101][ T5833] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 271.396057][ T5833] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 271.443653][T13278] netlink: 'syz.5.2075': attribute type 21 has an invalid length. [ 271.524173][ T3521] team0 (unregistering): Port device team_slave_1 removed [ 271.566169][ T3521] team0 (unregistering): Port device team_slave_0 removed [ 271.968302][T13278] netlink: 132 bytes leftover after parsing attributes in process `syz.5.2075'. [ 272.172119][T13284] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2077'. [ 272.570375][T13288] netlink: 'syz.3.2080': attribute type 21 has an invalid length. [ 272.597121][T13313] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2084'. [ 272.626209][T13313] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2084'. [ 272.644703][T13288] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2080'. [ 272.686899][T13315] netlink: 40 bytes leftover after parsing attributes in process `syz.0.2084'. [ 272.852081][T13324] netlink: 56 bytes leftover after parsing attributes in process `syz.3.2087'. [ 272.926543][T13272] chnl_net:caif_netlink_parms(): no params data found [ 272.971498][T13330] xt_hashlimit: Unknown mode mask 115, kernel too old? [ 273.474035][T13272] bridge0: port 1(bridge_slave_0) entered blocking state [ 273.484479][T13272] bridge0: port 1(bridge_slave_0) entered disabled state [ 273.492035][ T5833] Bluetooth: hci4: command tx timeout [ 273.498406][T13272] bridge_slave_0: entered allmulticast mode [ 273.506691][T13272] bridge_slave_0: entered promiscuous mode [ 273.515223][T13272] bridge0: port 2(bridge_slave_1) entered blocking state [ 273.522852][T13272] bridge0: port 2(bridge_slave_1) entered disabled state [ 273.530421][T13272] bridge_slave_1: entered allmulticast mode [ 273.538317][T13272] bridge_slave_1: entered promiscuous mode [ 274.093882][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 274.115310][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 274.132551][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 274.142973][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 274.152007][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 275.244500][T13272] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 275.262733][T13272] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 275.412580][T13272] team0: Port device team_slave_0 added [ 275.437989][T13272] team0: Port device team_slave_1 added [ 275.542401][T13272] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 275.549383][T13272] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.575823][T13378] __nla_validate_parse: 1 callbacks suppressed [ 275.575850][T13378] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2099'. [ 275.601336][ T5842] Bluetooth: hci4: command tx timeout [ 275.607672][T13272] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 275.670845][T13272] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 275.677887][T13272] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 275.705709][T13272] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 275.886880][T13272] hsr_slave_0: entered promiscuous mode [ 275.893572][T13272] hsr_slave_1: entered promiscuous mode [ 275.899973][T13272] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 275.907707][T13272] Cannot create hsr debugfs directory [ 276.209627][ T5842] Bluetooth: hci3: command tx timeout [ 276.253298][T13397] A link change request failed with some changes committed already. Interface caif0 may have been left with an inconsistent configuration, please check. [ 276.292304][ T2970] bridge_slave_1: left allmulticast mode [ 276.298181][ T2970] bridge_slave_1: left promiscuous mode [ 276.304276][ T2970] bridge0: port 2(bridge_slave_1) entered disabled state [ 276.314177][ T2970] bridge_slave_0: left allmulticast mode [ 276.320064][ T2970] bridge_slave_0: left promiscuous mode [ 276.326016][ T2970] bridge0: port 1(bridge_slave_0) entered disabled state [ 276.610427][ T2970] erspan0 (unregistering): left promiscuous mode [ 276.635488][ T2970] gretap0 (unregistering): left promiscuous mode [ 276.706613][ T2970] dvmrp1 (unregistering): left allmulticast mode [ 277.147291][ T2970] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 277.157253][ T2970] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 277.167291][ T2970] bond0 (unregistering): (slave wlan1): Releasing backup interface [ 277.177544][ T2970] bond0 (unregistering): Released all slaves [ 277.190869][ T2970] bond1 (unregistering): Released all slaves [ 277.288024][ T2970] bond2 (unregistering): Released all slaves [ 277.383203][ T2970] bond3 (unregistering): Released all slaves [ 277.481985][ T2970] bond4 (unregistering): Released all slaves [ 277.496784][ T2970] bond5 (unregistering): Released all slaves [ 277.596703][ T2970] bond6 (unregistering): Released all slaves [ 277.649801][ T5842] Bluetooth: hci4: command tx timeout [ 277.818675][ T2970] tipc: Disabling bearer [ 277.831775][ T2970] tipc: Left network mode [ 277.842636][T13365] chnl_net:caif_netlink_parms(): no params data found [ 277.879010][T13413] tipc: Enabled bearer , priority 0 [ 277.940778][T13413] syzkaller0: entered promiscuous mode [ 277.946363][T13413] syzkaller0: entered allmulticast mode [ 277.953693][T13413] tipc: Resetting bearer [ 277.990604][T13412] tipc: Resetting bearer [ 278.293959][ T5842] Bluetooth: hci3: command tx timeout [ 279.385279][T13412] tipc: Disabling bearer [ 279.541822][T13422] netlink: 'syz.5.2108': attribute type 1 has an invalid length. [ 279.696947][ T2970] mac80211_hwsim hwsim9 wlan0 (unregistering): left promiscuous mode [ 279.730054][ T5842] Bluetooth: hci4: command tx timeout [ 279.818826][T13365] bridge0: port 1(bridge_slave_0) entered blocking state [ 279.847342][T13365] bridge0: port 1(bridge_slave_0) entered disabled state [ 279.877777][T13365] bridge_slave_0: entered allmulticast mode [ 279.891722][T13365] bridge_slave_0: entered promiscuous mode [ 279.917177][T13365] bridge0: port 2(bridge_slave_1) entered blocking state [ 279.925203][T13365] bridge0: port 2(bridge_slave_1) entered disabled state [ 279.937710][T13365] bridge_slave_1: entered allmulticast mode [ 279.955321][T13365] bridge_slave_1: entered promiscuous mode [ 280.370255][ T5842] Bluetooth: hci3: command tx timeout [ 280.551942][ T2970] batadv_slave_1: left promiscuous mode [ 280.568403][ T2970] hsr_slave_0: left promiscuous mode [ 280.583557][ T2970] hsr_slave_1: left promiscuous mode [ 280.592925][ T2970] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 280.603405][ T2970] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 280.657064][ T2970] pimreg3 (unregistering): left allmulticast mode [ 281.112910][ T2970] team0 (unregistering): Port device team_slave_1 removed [ 281.161404][ T2970] team0 (unregistering): Port device team_slave_0 removed [ 281.659065][T13448] tipc: Enabling of bearer rejected, failed to enable media [ 281.727078][T13365] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 281.776546][T13365] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 281.865996][T13459] netlink: 16 bytes leftover after parsing attributes in process `syz.5.2116'. [ 281.889956][T13461] netlink: 14 bytes leftover after parsing attributes in process `syz.3.2117'. [ 281.937778][T13365] team0: Port device team_slave_0 added [ 281.974520][T13365] team0: Port device team_slave_1 added [ 282.078551][T13471] SET target dimension over the limit! [ 282.094525][T13469] netlink: 'syz.0.2120': attribute type 9 has an invalid length. [ 282.096051][T13365] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 282.118405][T13365] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.148167][T13365] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 282.168764][T13365] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 282.183938][T13365] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 282.243340][T13365] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 282.347027][T13482] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2123'. [ 282.369969][T13482] erspan0: entered promiscuous mode [ 282.394663][ T2970] IPVS: stop unused estimator thread 0... [ 282.451584][ T5842] Bluetooth: hci3: command tx timeout [ 282.478536][T13365] hsr_slave_0: entered promiscuous mode [ 282.486159][T13365] hsr_slave_1: entered promiscuous mode [ 282.497038][T13365] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 282.507752][T13365] Cannot create hsr debugfs directory [ 282.561992][T13272] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 282.623689][T13272] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 282.656890][T13496] netlink: 48 bytes leftover after parsing attributes in process `syz.0.2128'. [ 282.666507][T13272] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 282.740398][T13272] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 282.749036][T13498] netlink: 20 bytes leftover after parsing attributes in process `syz.0.2129'. [ 282.772734][T13498] rdma_rxe: rxe_newlink: rxe creation allowed on top of a real device only [ 283.216003][T13272] 8021q: adding VLAN 0 to HW filter on device bond0 [ 283.259739][T13521] openvswitch: netlink: Message has -1 unknown bytes. [ 283.277813][T13272] 8021q: adding VLAN 0 to HW filter on device team0 [ 283.315458][ T3451] bridge0: port 1(bridge_slave_0) entered blocking state [ 283.322665][ T3451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 283.371319][T13526] netlink: 'syz.0.2134': attribute type 28 has an invalid length. [ 283.379579][T13526] netlink: 'syz.0.2134': attribute type 3 has an invalid length. [ 283.390028][T13526] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2134'. [ 283.411292][ T3521] bridge0: port 2(bridge_slave_1) entered blocking state [ 283.418466][ T3521] bridge0: port 2(bridge_slave_1) entered forwarding state [ 283.431017][T13526] netlink: 'syz.0.2134': attribute type 21 has an invalid length. [ 283.438863][T13526] netlink: 128 bytes leftover after parsing attributes in process `syz.0.2134'. [ 283.476554][T13526] netlink: 'syz.0.2134': attribute type 4 has an invalid length. [ 283.489198][T13526] netlink: 'syz.0.2134': attribute type 5 has an invalid length. [ 283.503354][T13526] netlink: 3 bytes leftover after parsing attributes in process `syz.0.2134'. [ 283.567164][T13365] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 283.581687][T13533] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2137'. [ 283.624755][T13365] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 283.643512][T13365] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 283.668491][T13365] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 283.702918][T13537] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2138'. [ 283.813576][ T12] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 283.856873][T13556] netlink: 'syz.0.2141': attribute type 27 has an invalid length. [ 284.224539][T13365] 8021q: adding VLAN 0 to HW filter on device bond0 [ 284.297034][T13365] 8021q: adding VLAN 0 to HW filter on device team0 [ 284.345819][ T3451] bridge0: port 1(bridge_slave_0) entered blocking state [ 284.353139][ T3451] bridge0: port 1(bridge_slave_0) entered forwarding state [ 284.404518][ T12] bridge0: port 2(bridge_slave_1) entered blocking state [ 284.411740][ T12] bridge0: port 2(bridge_slave_1) entered forwarding state [ 284.469169][T13272] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 284.684605][T13272] veth0_vlan: entered promiscuous mode [ 284.791191][T13272] veth1_vlan: entered promiscuous mode [ 285.092359][T13272] veth0_macvtap: entered promiscuous mode [ 285.143015][T13612] netlink: 'syz.5.2156': attribute type 1 has an invalid length. [ 285.152203][T13272] veth1_macvtap: entered promiscuous mode [ 285.223855][T13272] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 285.286046][T13365] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 285.448447][T13272] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 285.471243][T13272] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.500620][T13272] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.528190][T13272] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.540005][T13272] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 285.713374][T13365] veth0_vlan: entered promiscuous mode [ 285.756380][T13365] veth1_vlan: entered promiscuous mode [ 285.787564][ T194] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 285.817930][ T194] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 285.878153][T13365] veth0_macvtap: entered promiscuous mode [ 285.920929][T13639] netlink: 'syz.0.2166': attribute type 2 has an invalid length. [ 285.944958][T13365] veth1_macvtap: entered promiscuous mode [ 285.956555][T13642] netlink: 'syz.0.2166': attribute type 2 has an invalid length. [ 285.982295][ T59] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.005060][ T59] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.106428][T13365] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 286.135880][T13365] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 286.266056][T13653] netlink: 'syz.5.2169': attribute type 4 has an invalid length. [ 286.327551][T13365] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.339029][T13649] netlink: 'syz.5.2169': attribute type 4 has an invalid length. [ 286.345191][T13365] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.358505][T13365] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.368002][T13365] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 286.669627][ T12] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.677584][ T12] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.816490][ T3521] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 286.907802][ T2970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 286.917132][ T2970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 286.993981][ T3521] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.207899][ T3521] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.310485][ T3521] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 287.463936][ T3521] bridge_slave_1: left allmulticast mode [ 287.470439][ T3521] bridge_slave_1: left promiscuous mode [ 287.476261][ T3521] bridge0: port 2(bridge_slave_1) entered disabled state [ 287.493650][ T3521] bridge_slave_0: left allmulticast mode [ 287.499337][ T3521] bridge_slave_0: left promiscuous mode [ 287.505475][ T3521] bridge0: port 1(bridge_slave_0) entered disabled state [ 287.919298][T13688] openvswitch: netlink: IP tunnel TTL not specified. [ 288.173631][T13694] __nla_validate_parse: 7 callbacks suppressed [ 288.173652][T13694] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2182'. [ 288.267964][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 288.290759][ T51] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 288.304787][ T5840] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 288.317647][ T51] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 288.329297][ T51] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 288.338042][ T5840] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 288.348009][ T5840] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 288.359077][ T51] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 288.385274][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 288.395406][T13696] openvswitch: netlink: Message has 4 unknown bytes. [ 288.407600][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 288.554016][ T3521] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 288.567238][ T3521] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 288.580079][ T3521] bond0 (unregistering): Released all slaves [ 288.607151][T13692] bridge: RTM_NEWNEIGH with invalid state 0x8 [ 289.136034][T13735] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2187'. [ 289.155992][T13734] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2188'. [ 289.196008][T13732] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2187'. [ 289.208704][T13732] erspan0: entered promiscuous mode [ 289.209177][T13740] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2188'. [ 289.418976][ T3521] hsr_slave_0: left promiscuous mode [ 289.426201][ T3521] hsr_slave_1: left promiscuous mode [ 289.432597][ T3521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 289.440172][ T3521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 289.448792][ T3521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 289.458753][ T3521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 289.494697][ T3521] veth1_macvtap: left promiscuous mode [ 289.500469][ T3521] veth0_macvtap: left promiscuous mode [ 289.510902][ T3521] veth1_vlan: left promiscuous mode [ 289.516381][ T3521] veth0_vlan: left promiscuous mode [ 289.964975][ T3521] team0 (unregistering): Port device team_slave_1 removed [ 290.007314][ T3521] team0 (unregistering): Port device team_slave_0 removed [ 290.452102][ T5833] Bluetooth: hci3: command tx timeout [ 290.458435][ T5842] Bluetooth: hci4: command tx timeout [ 290.729350][T13700] chnl_net:caif_netlink_parms(): no params data found [ 291.162845][T13698] chnl_net:caif_netlink_parms(): no params data found [ 291.192523][T13700] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.210212][T13700] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.219706][T13700] bridge_slave_0: entered allmulticast mode [ 291.241712][T13700] bridge_slave_0: entered promiscuous mode [ 291.259710][T13700] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.279141][T13700] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.309741][T13700] bridge_slave_1: entered allmulticast mode [ 291.317551][T13700] bridge_slave_1: entered promiscuous mode [ 291.395184][T13810] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2204'. [ 291.410683][T13811] netlink: 'syz.0.2203': attribute type 6 has an invalid length. [ 291.452974][T13700] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 291.486661][T13810] (unnamed net_device) (uninitialized): option xmit_hash_policy: invalid value (64) [ 291.542810][T13700] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 291.821349][T13835] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2211'. [ 291.835689][T13836] lo speed is unknown, defaulting to 1000 [ 291.845821][T13700] team0: Port device team_slave_0 added [ 291.859392][T13700] team0: Port device team_slave_1 added [ 291.865959][T13698] bridge0: port 1(bridge_slave_0) entered blocking state [ 291.873337][T13698] bridge0: port 1(bridge_slave_0) entered disabled state [ 291.880964][T13698] bridge_slave_0: entered allmulticast mode [ 291.891417][T13698] bridge_slave_0: entered promiscuous mode [ 291.899460][T13835] vlan0: entered promiscuous mode [ 291.910864][T13698] bridge0: port 2(bridge_slave_1) entered blocking state [ 291.919731][T13698] bridge0: port 2(bridge_slave_1) entered disabled state [ 291.927126][T13698] bridge_slave_1: entered allmulticast mode [ 291.943755][T13698] bridge_slave_1: entered promiscuous mode [ 291.995063][T13836] lo speed is unknown, defaulting to 1000 [ 292.038785][T13700] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.046148][T13700] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.077952][T13700] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.090667][T13700] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.097647][T13700] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.124813][T13700] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 292.141116][T13836] lo speed is unknown, defaulting to 1000 [ 292.149903][T13698] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 292.225729][ T3521] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.282083][T13698] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 292.416541][ T3521] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.446808][T13700] hsr_slave_0: entered promiscuous mode [ 292.458754][T13700] hsr_slave_1: entered promiscuous mode [ 292.465411][T13700] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 292.468008][T13836] infiniband syz0: set active [ 292.477930][T13836] infiniband syz0: added lo [ 292.482181][T13700] Cannot create hsr debugfs directory [ 292.485109][T13836] syz0: rxe_create_cq: returned err = -12 [ 292.498088][T13698] team0: Port device team_slave_0 added [ 292.504352][T13836] infiniband syz0: Couldn't create ib_mad CQ [ 292.513334][ T5893] lo speed is unknown, defaulting to 1000 [ 292.520934][T13836] infiniband syz0: Couldn't open port 1 [ 292.530171][ T5842] Bluetooth: hci4: command tx timeout [ 292.536273][ T5833] Bluetooth: hci3: command tx timeout [ 292.565782][ T3521] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.571865][T13836] RDS/IB: syz0: added [ 292.581303][T13836] smc: adding ib device syz0 with port count 1 [ 292.589394][T13836] smc: ib device syz0 port 1 has pnetid [ 292.591645][T13698] team0: Port device team_slave_1 added [ 292.645657][ T5909] lo speed is unknown, defaulting to 1000 [ 292.677629][T13851] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2214'. [ 292.682937][T13836] lo speed is unknown, defaulting to 1000 [ 292.752490][ T3521] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 292.816092][T13851] 8021q: adding VLAN 0 to HW filter on device bond4 [ 292.862618][T13852] vlan2: entered allmulticast mode [ 292.867768][T13852] bond4: entered allmulticast mode [ 292.927091][T13698] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 292.934550][T13698] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 292.963085][T13698] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 292.977888][T13698] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 292.985152][T13698] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 293.014010][T13698] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 293.055304][T13836] lo speed is unknown, defaulting to 1000 [ 293.188021][T13857] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2216'. [ 293.228643][T13698] hsr_slave_0: entered promiscuous mode [ 293.240346][T13698] hsr_slave_1: entered promiscuous mode [ 293.254812][T13698] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 293.262522][T13698] Cannot create hsr debugfs directory [ 293.277517][T13855] netdevsim netdevsim0 netdevsim0: set [1, 1] type 2 family 0 port 19999 - 0 [ 293.286785][T13855] netdevsim netdevsim0 netdevsim1: set [1, 1] type 2 family 0 port 19999 - 0 [ 293.295948][T13855] netdevsim netdevsim0 netdevsim2: set [1, 1] type 2 family 0 port 19999 - 0 [ 293.305067][T13855] netdevsim netdevsim0 netdevsim3: set [1, 1] type 2 family 0 port 19999 - 0 [ 293.317747][T13855] geneve2: entered promiscuous mode [ 293.324551][T13855] geneve2: entered allmulticast mode [ 293.534969][T13836] lo speed is unknown, defaulting to 1000 [ 293.663478][ T3521] bridge_slave_1: left allmulticast mode [ 293.672606][ T3521] bridge_slave_1: left promiscuous mode [ 293.683898][ T3521] bridge0: port 2(bridge_slave_1) entered disabled state [ 293.695794][ T3521] bridge_slave_0: left allmulticast mode [ 293.703253][ T3521] bridge_slave_0: left promiscuous mode [ 293.709223][ T3521] bridge0: port 1(bridge_slave_0) entered disabled state [ 294.142743][ T3521] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 294.165518][ T3521] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 294.185270][ T3521] bond0 (unregistering): Released all slaves [ 294.277260][T13836] lo speed is unknown, defaulting to 1000 [ 294.369388][T13874] netlink: 'syz.0.2221': attribute type 10 has an invalid length. [ 294.557141][T13883] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2223'. [ 294.612828][ T5833] Bluetooth: hci4: command tx timeout [ 294.619835][ T5833] Bluetooth: hci3: command tx timeout [ 294.788360][T13836] lo speed is unknown, defaulting to 1000 [ 294.930660][T13894] Bluetooth: MGMT ver 1.23 [ 295.015429][T13894] bond3: entered promiscuous mode [ 295.035118][T13894] bond3: entered allmulticast mode [ 295.054708][T13894] 8021q: adding VLAN 0 to HW filter on device bond3 [ 295.159058][T13903] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 295.176087][T13700] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 295.217617][T13904] openvswitch: netlink: IP tunnel attribute has 16 unknown bytes. [ 295.227557][T13700] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 295.245132][T13700] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 295.260894][T13836] lo speed is unknown, defaulting to 1000 [ 295.290188][T13903] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2226'. [ 295.290735][T13904] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2226'. [ 295.346907][T13700] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 295.567285][T13920] netlink: 28 bytes leftover after parsing attributes in process `syz.0.2228'. [ 295.723892][T13698] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 295.746593][T13698] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 295.769107][T13700] 8021q: adding VLAN 0 to HW filter on device bond0 [ 295.782108][T13836] lo speed is unknown, defaulting to 1000 [ 295.789085][T13698] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 295.815150][T13698] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 295.884089][T13700] 8021q: adding VLAN 0 to HW filter on device team0 [ 295.922823][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 295.931062][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 295.972640][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 295.979864][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.123631][T13698] 8021q: adding VLAN 0 to HW filter on device bond0 [ 296.202169][T13698] 8021q: adding VLAN 0 to HW filter on device team0 [ 296.242314][ T59] bridge0: port 1(bridge_slave_0) entered blocking state [ 296.249541][ T59] bridge0: port 1(bridge_slave_0) entered forwarding state [ 296.314594][ T59] bridge0: port 2(bridge_slave_1) entered blocking state [ 296.321818][ T59] bridge0: port 2(bridge_slave_1) entered forwarding state [ 296.455864][T13698] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 296.690639][ T5833] Bluetooth: hci3: command tx timeout [ 296.690707][ T5842] Bluetooth: hci4: command tx timeout [ 296.714375][T13700] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 296.902977][T13972] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2236'. [ 296.957175][ T3521] hsr_slave_0: left promiscuous mode [ 297.048235][ T3521] hsr_slave_1: left promiscuous mode [ 297.066319][ T3521] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 297.095317][ T3521] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 297.114175][ T3521] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 297.126483][ T3521] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 297.165556][ T3521] veth1_macvtap: left promiscuous mode [ 297.172239][ T3521] veth0_macvtap: left promiscuous mode [ 297.177839][ T3521] veth1_vlan: left promiscuous mode [ 297.183791][ T3521] veth0_vlan: left promiscuous mode [ 297.413627][T13987] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2240'. [ 297.713406][ T3521] team0 (unregistering): Port device team_slave_1 removed [ 297.753346][ T3521] team0 (unregistering): Port device team_slave_0 removed [ 298.147014][T13978] netlink: 340 bytes leftover after parsing attributes in process `syz.0.2239'. [ 298.264185][T13700] veth0_vlan: entered promiscuous mode [ 298.336816][T13700] veth1_vlan: entered promiscuous mode [ 298.402031][T13698] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 298.514248][T13700] veth0_macvtap: entered promiscuous mode [ 298.577538][T13700] veth1_macvtap: entered promiscuous mode [ 298.678258][T13700] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 298.709223][T13698] veth0_vlan: entered promiscuous mode [ 298.735326][T13700] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 298.783784][T13698] veth1_vlan: entered promiscuous mode [ 298.798622][T13700] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.826171][T13700] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.842624][T13700] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 298.854553][T13700] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.036188][T13698] veth0_macvtap: entered promiscuous mode [ 299.065277][T14025] vlan2: entered promiscuous mode [ 299.071631][T14025] vlan2: entered allmulticast mode [ 299.076762][T14025] hsr_slave_1: entered allmulticast mode [ 299.222202][T13698] veth1_macvtap: entered promiscuous mode [ 299.230921][ T978] lo speed is unknown, defaulting to 1000 [ 299.257271][T14039] netlink: 'syz.3.2252': attribute type 3 has an invalid length. [ 299.269713][T14039] netlink: 766 bytes leftover after parsing attributes in process `syz.3.2252'. [ 299.296334][ T3451] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.318890][ T3451] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.386124][T13698] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 299.441917][ T3451] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.446495][T13698] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 299.466906][ T3451] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.534967][T13698] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.548296][T13698] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.555825][T14049] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2257'. [ 299.562252][T13698] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.578388][T13698] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 299.848578][T14065] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 299.918663][T14068] netlink: 'syz.5.2263': attribute type 1 has an invalid length. [ 299.951755][ T2970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 299.966492][ T2970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 299.994416][T14068] 8021q: adding VLAN 0 to HW filter on device bond4 [ 300.088703][ T3451] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.163261][ T9342] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 300.194592][ T9342] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 300.255379][ T3451] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.394482][ T3451] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.593158][ T3451] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 300.768739][ T3451] bridge_slave_1: left allmulticast mode [ 300.774986][ T3451] bridge_slave_1: left promiscuous mode [ 300.824684][ T3451] bridge0: port 2(bridge_slave_1) entered disabled state [ 300.859134][ T3451] bridge_slave_0: left allmulticast mode [ 300.876522][ T3451] bridge_slave_0: left promiscuous mode [ 300.894632][ T3451] bridge0: port 1(bridge_slave_0) entered disabled state [ 301.310040][ T5833] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 301.324200][ T5833] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 301.338832][ T5833] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 301.364110][ T5833] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 301.373344][ T5833] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 301.453961][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 301.465664][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 301.475112][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 301.485870][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 301.494490][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 301.607878][ T3451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 301.620738][ T3451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 301.634598][ T3451] bond0 (unregistering): Released all slaves [ 301.727106][T14091] lo speed is unknown, defaulting to 1000 [ 301.997847][T14104] ip6gre2: entered allmulticast mode [ 302.022481][T14108] netlink: 'syz.3.2274': attribute type 2 has an invalid length. [ 302.171917][T14113] netlink: 12 bytes leftover after parsing attributes in process `syz.0.2277'. [ 302.194911][T14115] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2276'. [ 302.364723][T14093] lo speed is unknown, defaulting to 1000 [ 302.987962][T14091] chnl_net:caif_netlink_parms(): no params data found [ 303.014238][T14154] netlink: 'syz.5.2286': attribute type 1 has an invalid length. [ 303.038905][T14154] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2286'. [ 303.132106][T14157] bond_slave_1: entered allmulticast mode [ 303.330698][T14162] netlink: 'syz.5.2288': attribute type 1 has an invalid length. [ 303.419408][ T5833] Bluetooth: hci3: command tx timeout [ 303.569787][ T5833] Bluetooth: hci4: command tx timeout [ 303.847339][ T3451] hsr_slave_0: left promiscuous mode [ 303.855150][ T3451] hsr_slave_1: left promiscuous mode [ 303.862897][ T3451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 303.870622][ T3451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 303.878568][ T3451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 303.886866][ T3451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 303.912842][ T3451] veth1_macvtap: left promiscuous mode [ 303.918375][ T3451] veth0_macvtap: left promiscuous mode [ 303.924471][ T3451] veth1_vlan: left promiscuous mode [ 303.929880][ T3451] veth0_vlan: left promiscuous mode [ 304.390302][ T3451] team0 (unregistering): Port device team_slave_1 removed [ 304.436588][ T3451] team0 (unregistering): Port device team_slave_0 removed [ 304.846781][T14162] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 304.853836][T14166] workqueue: Failed to create a rescuer kthread for wq "bond5": -EINTR [ 304.886852][T14155] bond_slave_1: left allmulticast mode [ 305.066682][T14091] bridge0: port 1(bridge_slave_0) entered blocking state [ 305.100738][T14091] bridge0: port 1(bridge_slave_0) entered disabled state [ 305.118336][T14091] bridge_slave_0: entered allmulticast mode [ 305.151419][T14091] bridge_slave_0: entered promiscuous mode [ 305.265471][T14091] bridge0: port 2(bridge_slave_1) entered blocking state [ 305.289481][T14091] bridge0: port 2(bridge_slave_1) entered disabled state [ 305.296766][T14091] bridge_slave_1: entered allmulticast mode [ 305.314954][T14091] bridge_slave_1: entered promiscuous mode [ 305.358874][T14196] netlink: 24 bytes leftover after parsing attributes in process `syz.5.2296'. [ 305.442102][T14091] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 305.456683][T14091] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 305.489675][ T5833] Bluetooth: hci3: command tx timeout [ 305.592185][T14091] team0: Port device team_slave_0 added [ 305.613216][T14091] team0: Port device team_slave_1 added [ 305.650500][ T5833] Bluetooth: hci4: command tx timeout [ 305.687012][T14212] xt_cgroup: path and classid specified [ 305.689169][T14093] chnl_net:caif_netlink_parms(): no params data found [ 305.740840][T14091] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 305.755534][T14091] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.787028][T14091] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 305.794865][T14216] netlink: 24 bytes leftover after parsing attributes in process `syz.0.2301'. [ 305.802129][T14091] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 305.817357][T14091] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 305.871777][T14091] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 305.952354][ T3451] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 305.991430][T14214] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 306.097703][ T3451] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.177098][T14091] hsr_slave_0: entered promiscuous mode [ 306.204279][T14091] hsr_slave_1: entered promiscuous mode [ 306.235416][T14091] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 306.269583][T14091] Cannot create hsr debugfs directory [ 306.324227][ T3451] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.368967][T14234] nbd: must specify a size in bytes for the device [ 306.386458][T14093] bridge0: port 1(bridge_slave_0) entered blocking state [ 306.394367][T14093] bridge0: port 1(bridge_slave_0) entered disabled state [ 306.406995][T14236] netlink: 32 bytes leftover after parsing attributes in process `syz.5.2304'. [ 306.416927][T14093] bridge_slave_0: entered allmulticast mode [ 306.431415][T14093] bridge_slave_0: entered promiscuous mode [ 306.494481][ T3451] netdevsim netdevsim1 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 306.518123][T14242] netlink: 8 bytes leftover after parsing attributes in process `syz.5.2305'. [ 306.528127][T14093] bridge0: port 2(bridge_slave_1) entered blocking state [ 306.537582][T14093] bridge0: port 2(bridge_slave_1) entered disabled state [ 306.545235][T14093] bridge_slave_1: entered allmulticast mode [ 306.556817][T14093] bridge_slave_1: entered promiscuous mode [ 306.644537][T14093] bond0: (slave bond_slave_0): Enslaving as an active interface with an up link [ 306.716597][T14093] bond0: (slave bond_slave_1): Enslaving as an active interface with an up link [ 306.984033][T14093] team0: Port device team_slave_0 added [ 307.015719][T14093] team0: Port device team_slave_1 added [ 307.018459][T14262] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2310'. [ 307.157114][T14267] netlink: 16 bytes leftover after parsing attributes in process `syz.0.2312'. [ 307.360933][T14093] batman_adv: batadv0: Adding interface: batadv_slave_0 [ 307.367923][T14093] batman_adv: batadv0: The MTU of interface batadv_slave_0 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.429527][T14093] batman_adv: batadv0: Not using interface batadv_slave_0 (retrying later): interface not active [ 307.452565][T14093] batman_adv: batadv0: Adding interface: batadv_slave_1 [ 307.469477][T14093] batman_adv: batadv0: The MTU of interface batadv_slave_1 is too small (1500) to handle the transport of batman-adv packets. Packets going over this interface will be fragmented on layer2 which could impact the performance. Setting the MTU to 1560 would solve the problem. [ 307.515523][T14093] batman_adv: batadv0: Not using interface batadv_slave_1 (retrying later): interface not active [ 307.579646][ T5833] Bluetooth: hci3: command tx timeout [ 307.605242][T14272] veth1_macvtap: left promiscuous mode [ 307.729678][ T5833] Bluetooth: hci4: command tx timeout [ 307.744608][ T3451] bridge_slave_1: left allmulticast mode [ 307.760434][ T3451] bridge_slave_1: left promiscuous mode [ 307.772958][ T3451] bridge0: port 2(bridge_slave_1) entered disabled state [ 307.820885][ T3451] bridge_slave_0: left allmulticast mode [ 307.826581][ T3451] bridge_slave_0: left promiscuous mode [ 307.850496][ T3451] bridge0: port 1(bridge_slave_0) entered disabled state [ 307.935710][T14282] netlink: 12 bytes leftover after parsing attributes in process `syz.3.2316'. [ 308.279790][ T3451] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 308.294381][ T3451] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 308.305450][ T3451] bond0 (unregistering): Released all slaves [ 308.460494][T14295] netlink: 'syz.0.2319': attribute type 12 has an invalid length. [ 308.468553][T14295] netlink: 132 bytes leftover after parsing attributes in process `syz.0.2319'. [ 308.487461][T14093] hsr_slave_0: entered promiscuous mode [ 308.501415][T14093] hsr_slave_1: entered promiscuous mode [ 308.508244][T14093] debugfs: Directory 'hsr0' with parent 'hsr' already present! [ 308.521029][T14093] Cannot create hsr debugfs directory [ 308.634550][T14303] xt_hashlimit: size too large, truncated to 1048576 [ 308.652473][T14303] syz.0.2321: vmalloc error: size 10485760, failed to allocated page array size 20480, mode:0xcc2(GFP_KERNEL|__GFP_HIGHMEM), nodemask=(null),cpuset=/,mems_allowed=0-1 [ 308.670515][T14303] CPU: 0 UID: 0 PID: 14303 Comm: syz.0.2321 Not tainted 6.16.0-rc3-syzkaller-00144-gbd475eeaaf3c #0 PREEMPT(full) [ 308.670542][T14303] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 308.670557][T14303] Call Trace: [ 308.670565][T14303] [ 308.670574][T14303] dump_stack_lvl+0x189/0x250 [ 308.670608][T14303] ? __pfx_dump_stack_lvl+0x10/0x10 [ 308.670634][T14303] ? __pfx__printk+0x10/0x10 [ 308.670655][T14303] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 308.670676][T14303] ? cpuset_print_current_mems_allowed+0x1f/0x360 [ 308.670698][T14303] ? cpuset_print_current_mems_allowed+0x2ee/0x360 [ 308.670722][T14303] warn_alloc+0x214/0x310 [ 308.670749][T14303] ? __pfx_warn_alloc+0x10/0x10 [ 308.670780][T14303] ? __get_vm_area_node+0x28f/0x300 [ 308.670800][T14303] ? htable_create+0xfc/0x7a0 [ 308.670830][T14303] __vmalloc_node_range_noprof+0x67e/0x12f0 [ 308.670881][T14303] ? __pfx___vmalloc_node_range_noprof+0x10/0x10 [ 308.670909][T14303] ? rcu_is_watching+0x15/0xb0 [ 308.670937][T14303] ? htable_create+0xfc/0x7a0 [ 308.670959][T14303] ? htable_create+0xfc/0x7a0 [ 308.670979][T14303] __kvmalloc_node_noprof+0x3b8/0x5f0 [ 308.670999][T14303] ? htable_create+0xfc/0x7a0 [ 308.671019][T14303] ? hashlimit_pernet+0x23/0x240 [ 308.671050][T14303] htable_create+0xfc/0x7a0 [ 308.671080][T14303] hashlimit_mt_check_common+0x719/0xa10 [ 308.671113][T14303] xt_check_match+0x3d1/0xab0 [ 308.671137][T14303] ? __pfx___mutex_lock+0x10/0x10 [ 308.671167][T14303] ? __pfx_xt_check_match+0x10/0x10 [ 308.671192][T14303] ? pcpu_alloc_noprof+0xfdd/0x16b0 [ 308.671223][T14303] ? xt_find_match+0x1f7/0x250 [ 308.671257][T14303] translate_table+0x1553/0x2040 [ 308.671304][T14303] ? __pfx_translate_table+0x10/0x10 [ 308.671334][T14303] ? __might_fault+0xb0/0x130 [ 308.671372][T14303] ? _copy_from_user+0x94/0xb0 [ 308.671398][T14303] do_ip6t_set_ctl+0x970/0xce0 [ 308.671427][T14303] ? rcu_is_watching+0x15/0xb0 [ 308.671451][T14303] ? __pfx_do_ip6t_set_ctl+0x10/0x10 [ 308.671494][T14303] ? __pfx___mutex_lock+0x10/0x10 [ 308.671519][T14303] ? __pfx___mutex_unlock_slowpath+0x10/0x10 [ 308.671552][T14303] ? __pfx_futex_wait+0x10/0x10 [ 308.671585][T14303] nf_setsockopt+0x26f/0x290 [ 308.671615][T14303] rawv6_setsockopt+0x23b/0x5b0 [ 308.671639][T14303] ? __lock_acquire+0xab9/0xd20 [ 308.671665][T14303] ? __pfx_rawv6_setsockopt+0x10/0x10 [ 308.671689][T14303] ? aa_sock_opt_perm+0x74/0x110 [ 308.671714][T14303] ? sock_common_setsockopt+0x36/0xc0 [ 308.671733][T14303] ? __pfx_sock_common_setsockopt+0x10/0x10 [ 308.671762][T14303] do_sock_setsockopt+0x257/0x3e0 [ 308.671786][T14303] ? __pfx_do_sock_setsockopt+0x10/0x10 [ 308.671813][T14303] ? __fget_files+0x2a/0x420 [ 308.671842][T14303] __x64_sys_setsockopt+0x18b/0x220 [ 308.671870][T14303] do_syscall_64+0xfa/0x3b0 [ 308.671886][T14303] ? lockdep_hardirqs_on+0x9c/0x150 [ 308.671909][T14303] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.671928][T14303] ? clear_bhb_loop+0x60/0xb0 [ 308.671950][T14303] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 308.671967][T14303] RIP: 0033:0x7f68f6d8e929 [ 308.671988][T14303] Code: ff ff c3 66 2e 0f 1f 84 00 00 00 00 00 0f 1f 40 00 48 89 f8 48 89 f7 48 89 d6 48 89 ca 4d 89 c2 4d 89 c8 4c 8b 4c 24 08 0f 05 <48> 3d 01 f0 ff ff 73 01 c3 48 c7 c1 a8 ff ff ff f7 d8 64 89 01 48 [ 308.672005][T14303] RSP: 002b:00007f68f7c8b038 EFLAGS: 00000246 ORIG_RAX: 0000000000000036 [ 308.672026][T14303] RAX: ffffffffffffffda RBX: 00007f68f6fb5fa0 RCX: 00007f68f6d8e929 [ 308.672039][T14303] RDX: 0000000000000040 RSI: 0000000000000029 RDI: 0000000000000005 [ 308.672052][T14303] RBP: 00007f68f6e10b39 R08: 00000000000005c0 R09: 0000000000000000 [ 308.672064][T14303] R10: 0000200000000580 R11: 0000000000000246 R12: 0000000000000000 [ 308.672075][T14303] R13: 0000000000000000 R14: 00007f68f6fb5fa0 R15: 00007fff247c6048 [ 308.672107][T14303] [ 308.672211][T14303] Mem-Info: [ 309.046246][T14303] active_anon:3813 inactive_anon:0 isolated_anon:0 [ 309.046246][T14303] active_file:1363 inactive_file:39951 isolated_file:0 [ 309.046246][T14303] unevictable:768 dirty:50 writeback:0 [ 309.046246][T14303] slab_reclaimable:11154 slab_unreclaimable:190130 [ 309.046246][T14303] mapped:28845 shmem:1364 pagetables:941 [ 309.046246][T14303] sec_pagetables:0 bounce:0 [ 309.046246][T14303] kernel_misc_reclaimable:0 [ 309.046246][T14303] free:1226884 free_pcp:14860 free_cma:0 [ 309.092425][T14303] Node 0 active_anon:15252kB inactive_anon:0kB active_file:5452kB inactive_file:159604kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:115380kB dirty:200kB writeback:0kB shmem:3920kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:12100kB pagetables:3632kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 309.131726][T14303] Node 1 active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB isolated(anon):0kB isolated(file):0kB mapped:0kB dirty:0kB writeback:0kB shmem:1536kB shmem_thp:0kB shmem_pmdmapped:0kB anon_thp:0kB writeback_tmp:0kB kernel_stack:48kB pagetables:132kB sec_pagetables:0kB all_unreclaimable? no Balloon:0kB [ 309.164620][T14303] Node 0 DMA free:15360kB boost:0kB min:204kB low:252kB high:300kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:0kB unevictable:0kB writepending:0kB present:15992kB managed:15360kB mlocked:0kB bounce:0kB free_pcp:0kB local_pcp:0kB free_cma:0kB [ 309.203659][T14303] lowmem_reserve[]: 0 2500 2502 2502 2502 [ 309.249971][T14303] Node 0 DMA32 free:985412kB boost:0kB min:34264kB low:42828kB high:51392kB reserved_highatomic:0KB free_highatomic:0KB active_anon:15204kB inactive_anon:0kB active_file:5452kB inactive_file:157760kB unevictable:1536kB writepending:196kB present:3129332kB managed:2561004kB mlocked:0kB bounce:0kB free_pcp:42232kB local_pcp:19036kB free_cma:0kB [ 309.317834][T14303] lowmem_reserve[]: 0 0 1 1 1 [ 309.323265][T14303] Node 0 Normal free:0kB boost:0kB min:24kB low:28kB high:32kB reserved_highatomic:0KB free_highatomic:0KB active_anon:48kB inactive_anon:0kB active_file:0kB inactive_file:1844kB unevictable:0kB writepending:4kB present:1048580kB managed:1900kB mlocked:0kB bounce:0kB free_pcp:8kB local_pcp:0kB free_cma:0kB [ 309.371492][T14303] lowmem_reserve[]: 0 0 0 0 0 [ 309.376354][T14303] Node 1 Normal free:3906508kB boost:0kB min:55612kB low:69512kB high:83412kB reserved_highatomic:0KB free_highatomic:0KB active_anon:0kB inactive_anon:0kB active_file:0kB inactive_file:200kB unevictable:1536kB writepending:0kB present:4194300kB managed:4111164kB mlocked:0kB bounce:0kB free_pcp:17696kB local_pcp:9248kB free_cma:0kB [ 309.415721][T14303] lowmem_reserve[]: 0 0 0 0 0 [ 309.424930][T14303] Node 0 DMA: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 1*1024kB (U) 1*2048kB (M) 3*4096kB (M) = 15360kB [ 309.448167][T14303] Node 0 DMA32: 693*4kB (UM) 94*8kB (UME) 42*16kB (UM) 100*32kB (UME) 106*64kB (UME) 61*128kB (UM) 113*256kB (UME) 97*512kB (UME) 54*1024kB (UM) 40*2048kB (UM) 183*4096kB (UM) = 987364kB [ 309.520853][T14303] Node 0 Normal: 0*4kB 0*8kB 0*16kB 0*32kB 0*64kB 0*128kB 0*256kB 0*512kB 0*1024kB 0*2048kB 0*4096kB = 0kB [ 309.545230][T14303] Node 1 Normal: 169*4kB (UME) 47*8kB (UME) 41*16kB (UME) 95*32kB (UME) 33*64kB (UME) 6*128kB (UM) 4*256kB (UM) 5*512kB (UME) 2*1024kB (UM) 1*2048kB (U) 950*4096kB (M) = 3906508kB [ 309.570867][T14303] Node 0 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 309.586501][T14303] Node 0 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 309.595983][T14303] Node 1 hugepages_total=0 hugepages_free=0 hugepages_surp=0 hugepages_size=1048576kB [ 309.641126][T14303] Node 1 hugepages_total=2 hugepages_free=2 hugepages_surp=0 hugepages_size=2048kB [ 309.651412][ T5833] Bluetooth: hci3: command tx timeout [ 309.659805][ T3451] hsr_slave_0: left promiscuous mode [ 309.665651][T14303] 42677 total pagecache pages [ 309.670554][T14303] 0 pages in swap cache [ 309.674723][T14303] Free swap = 124996kB [ 309.674802][ T3451] hsr_slave_1: left promiscuous mode [ 309.678946][T14303] Total swap = 124996kB [ 309.678975][T14303] 2097051 pages RAM [ 309.691972][ T3451] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 309.692417][T14303] 0 pages HighMem/MovableOnly [ 309.703589][ T3451] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 309.704448][T14303] 424694 pages reserved [ 309.715833][T14303] 0 pages cma reserved [ 309.716886][ T3451] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 309.736318][ T3451] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 309.778318][ T3451] veth1_macvtap: left promiscuous mode [ 309.784841][ T3451] veth0_macvtap: left promiscuous mode [ 309.798439][ T3451] veth1_vlan: left promiscuous mode [ 309.804650][ T3451] veth0_vlan: left promiscuous mode [ 309.810352][ T5833] Bluetooth: hci4: command tx timeout [ 310.257013][ T3451] team0 (unregistering): Port device team_slave_1 removed [ 310.298062][ T3451] team0 (unregistering): Port device team_slave_0 removed [ 310.683208][T14317] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2325'. [ 310.699078][T14319] netlink: 20 bytes leftover after parsing attributes in process `syz.5.2325'. [ 310.978310][T14336] Freezing with imperfect legacy cgroup freezer. See cgroup.freeze of cgroup v2 [ 310.979617][T14091] netdevsim netdevsim2 netdevsim0: renamed from eth0 [ 311.016022][T14091] netdevsim netdevsim2 netdevsim1: renamed from eth1 [ 311.045734][T14091] netdevsim netdevsim2 netdevsim2: renamed from eth2 [ 311.098822][T14091] netdevsim netdevsim2 netdevsim3: renamed from eth3 [ 311.205031][T14354] netlink: 'syz.3.2335': attribute type 11 has an invalid length. [ 311.272536][T14356] netlink: 'syz.0.2334': attribute type 3 has an invalid length. [ 311.324892][T14359] bond0: entered promiscuous mode [ 311.365637][T14359] netlink: 68 bytes leftover after parsing attributes in process `syz.5.2336'. [ 311.516628][T14365] netlink: 12 bytes leftover after parsing attributes in process `syz.5.2338'. [ 311.624930][T14091] 8021q: adding VLAN 0 to HW filter on device bond0 [ 311.674372][T14093] netdevsim netdevsim1 netdevsim0: renamed from eth0 [ 311.711621][T14093] netdevsim netdevsim1 netdevsim1: renamed from eth1 [ 311.745843][T14091] 8021q: adding VLAN 0 to HW filter on device team0 [ 311.776543][ T9342] bridge0: port 1(bridge_slave_0) entered blocking state [ 311.783727][ T9342] bridge0: port 1(bridge_slave_0) entered forwarding state [ 311.830843][T14093] netdevsim netdevsim1 netdevsim2: renamed from eth2 [ 311.856352][T14093] netdevsim netdevsim1 netdevsim3: renamed from eth3 [ 311.924020][ T9345] bridge0: port 2(bridge_slave_1) entered blocking state [ 311.931261][ T9345] bridge0: port 2(bridge_slave_1) entered forwarding state [ 311.940349][T14386] netlink: 'syz.3.2344': attribute type 21 has an invalid length. [ 311.948184][T14386] netlink: 156 bytes leftover after parsing attributes in process `syz.3.2344'. [ 311.958249][T14369] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 311.965619][T14369] IPv6: NLM_F_CREATE should be set when creating new route [ 311.972930][T14369] IPv6: NLM_F_CREATE should be set when creating new route [ 311.980193][T14369] IPv6: NLM_F_CREATE should be set when creating new route [ 312.011208][T14378] IPv6: RTM_NEWROUTE with no NLM_F_CREATE or NLM_F_REPLACE [ 312.042766][T14372] syzkaller0: entered promiscuous mode [ 312.048399][T14372] syzkaller0: entered allmulticast mode [ 312.253108][T14091] hsr0: Slave A (hsr_slave_0) is not up; please bring it up to get a fully working HSR network [ 312.266986][T14091] hsr0: Slave B (hsr_slave_1) is not up; please bring it up to get a fully working HSR network [ 312.965318][T14403] xt_TCPMSS: path-MTU clamping only supported in FORWARD, OUTPUT and POSTROUTING hooks [ 313.049633][T14404] netlink: 'syz.5.2346': attribute type 21 has an invalid length. [ 314.146086][T14404] netlink: 4 bytes leftover after parsing attributes in process `syz.5.2346'. [ 314.274520][T14093] 8021q: adding VLAN 0 to HW filter on device bond0 [ 314.324526][T14408] openvswitch: netlink: Flow actions attr not present in new flow. [ 314.326440][T14412] netlink: 8 bytes leftover after parsing attributes in process `syz.0.2348'. [ 314.347775][T14412] netlink: 4 bytes leftover after parsing attributes in process `syz.0.2348'. [ 314.374249][T14093] 8021q: adding VLAN 0 to HW filter on device team0 [ 314.426599][ T2970] bridge0: port 1(bridge_slave_0) entered blocking state [ 314.433931][ T2970] bridge0: port 1(bridge_slave_0) entered forwarding state [ 314.456168][T14091] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 314.489142][ T2970] bridge0: port 2(bridge_slave_1) entered blocking state [ 314.496365][ T2970] bridge0: port 2(bridge_slave_1) entered forwarding state [ 314.521631][T14414] netlink: 4 bytes leftover after parsing attributes in process `syz.3.2350'. [ 314.622830][T14091] veth0_vlan: entered promiscuous mode [ 314.643937][T14091] veth1_vlan: entered promiscuous mode [ 314.717493][T14091] veth0_macvtap: entered promiscuous mode [ 314.736447][T14091] veth1_macvtap: entered promiscuous mode [ 314.796632][T14091] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 314.850818][T14091] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 314.874374][T14426] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 314.943487][T14091] netdevsim netdevsim2 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 314.982938][T14091] netdevsim netdevsim2 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.008626][T14091] netdevsim netdevsim2 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.018752][T14091] netdevsim netdevsim2 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.037894][T14437] bond0: Device is already in use. [ 315.264936][T14093] 8021q: adding VLAN 0 to HW filter on device batadv0 [ 315.281398][T14451] netlink: 'syz.0.2360': attribute type 4 has an invalid length. [ 315.282777][ T2970] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.298186][ T2970] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.321505][T14451] openvswitch: netlink: IPv6 tunnel dst address is zero [ 315.440561][ T12] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 315.445609][T14453] netlink: 'syz.5.2361': attribute type 1 has an invalid length. [ 315.466389][T14093] veth0_vlan: entered promiscuous mode [ 315.475108][ T12] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 315.514121][T14093] veth1_vlan: entered promiscuous mode [ 315.616153][T14093] veth0_macvtap: entered promiscuous mode [ 315.644813][T14464] netlink: 'syz.0.2364': attribute type 1 has an invalid length. [ 315.663084][T14093] veth1_macvtap: entered promiscuous mode [ 315.773633][T14467] xt_hashlimit: size too large, truncated to 1048576 [ 315.786663][T14093] batman_adv: batadv0: Interface activated: batadv_slave_0 [ 315.811765][ T2970] wlan1: No active IBSS STAs - trying to scan for other IBSS networks with same SSID (merge) [ 315.826663][T14093] batman_adv: batadv0: Interface activated: batadv_slave_1 [ 315.842764][T14093] netdevsim netdevsim1 netdevsim0: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.859558][T14093] netdevsim netdevsim1 netdevsim1: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.868308][T14093] netdevsim netdevsim1 netdevsim2: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.899894][T14093] netdevsim netdevsim1 netdevsim3: set [1, 0] type 2 family 0 port 6081 - 0 [ 315.979956][T14471] netlink: 20 bytes leftover after parsing attributes in process `syz.3.2366'. [ 316.108866][T14473] dvmrp1: entered allmulticast mode [ 316.128453][ T9343] wlan0: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.158520][ T9343] wlan0: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.202126][T14476] netlink: 9 bytes leftover after parsing attributes in process `syz.3.2369'. [ 316.254014][T14480] sctp: [Deprecated]: syz.3.2369 (pid 14480) Use of int in max_burst socket option. [ 316.254014][T14480] Use struct sctp_assoc_value instead [ 316.304558][ T9345] netdevsim netdevsim2 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.356476][T14482] netlink: 5 bytes leftover after parsing attributes in process `syz.3.2369'. [ 316.389116][T14476] 0ªX¹¦D: entered promiscuous mode [ 316.420687][T14482] 1ªX¹¦D: renamed from 30ªX¹¦D [ 316.439205][T14482] 1ªX¹¦D: left promiscuous mode [ 316.447102][T14482] 1ªX¹¦D: entered allmulticast mode [ 316.462291][T14482] A link change request failed with some changes committed already. Interface 31ªX¹¦D may have been left with an inconsistent configuration, please check. [ 316.524074][ T9345] netdevsim netdevsim2 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.551564][ T2970] wlan1: Created IBSS using preconfigured BSSID 50:50:50:50:50:50 [ 316.559699][ T2970] wlan1: Creating new IBSS network, BSSID 50:50:50:50:50:50 [ 316.619065][ T9345] netdevsim netdevsim2 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.863860][ T9345] netdevsim netdevsim2 netdevsim0 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 316.944463][ T9345] bridge_slave_1: left allmulticast mode [ 316.950483][ T9345] bridge_slave_1: left promiscuous mode [ 316.956677][ T9345] bridge0: port 2(bridge_slave_1) entered disabled state [ 316.966451][ T9345] bridge_slave_0: left allmulticast mode [ 316.973036][ T9345] bridge_slave_0: left promiscuous mode [ 316.978764][ T9345] bridge0: port 1(bridge_slave_0) entered disabled state [ 317.291301][ T9345] bond0 (unregistering): (slave bond_slave_0): Releasing backup interface [ 317.302983][ T9345] bond0 (unregistering): (slave bond_slave_1): Releasing backup interface [ 317.313927][ T9345] bond0 (unregistering): Released all slaves [ 317.677780][T14485] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2371'. [ 317.710436][T14485] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2371'. [ 317.785651][T14486] netlink: 68 bytes leftover after parsing attributes in process `syz.0.2371'. [ 317.786466][T14487] netlink: 76 bytes leftover after parsing attributes in process `syz.0.2371'. [ 317.904659][ T9345] hsr_slave_0: left promiscuous mode [ 317.922474][ T9345] hsr_slave_1: left promiscuous mode [ 317.928718][ T9345] batman_adv: batadv0: Interface deactivated: batadv_slave_0 [ 317.949844][ T9345] batman_adv: batadv0: Removing interface: batadv_slave_0 [ 317.958188][ T9345] batman_adv: batadv0: Interface deactivated: batadv_slave_1 [ 317.972480][ T9345] batman_adv: batadv0: Removing interface: batadv_slave_1 [ 318.009111][ T9345] veth1_macvtap: left promiscuous mode [ 318.010351][ T5842] Bluetooth: hci3: unexpected cc 0x0c03 length: 249 > 1 [ 318.015005][ T9345] veth0_macvtap: left promiscuous mode [ 318.028523][ T9345] veth1_vlan: left promiscuous mode [ 318.035081][ T5842] Bluetooth: hci3: unexpected cc 0x1003 length: 249 > 9 [ 318.041162][ T9345] veth0_vlan: left promiscuous mode [ 318.060564][ T5842] Bluetooth: hci3: unexpected cc 0x1001 length: 249 > 9 [ 318.080246][ T5842] Bluetooth: hci3: unexpected cc 0x0c23 length: 249 > 4 [ 318.089875][ T5842] Bluetooth: hci3: unexpected cc 0x0c38 length: 249 > 2 [ 318.274106][T14508] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2376'. [ 318.284747][T14509] netlink: 24 bytes leftover after parsing attributes in process `syz.3.2376'. [ 318.326220][T14510] netlink: 'syz.5.2377': attribute type 1 has an invalid length. [ 318.352774][T14510] netlink: 224 bytes leftover after parsing attributes in process `syz.5.2377'. [ 318.544312][ T5842] Bluetooth: hci4: unexpected cc 0x0c03 length: 249 > 1 [ 318.554954][ T5842] Bluetooth: hci4: unexpected cc 0x1003 length: 249 > 9 [ 318.564709][ T5842] Bluetooth: hci4: unexpected cc 0x1001 length: 249 > 9 [ 318.581591][ T5842] Bluetooth: hci4: unexpected cc 0x0c23 length: 249 > 4 [ 318.595372][ T5842] Bluetooth: hci4: unexpected cc 0x0c38 length: 249 > 2 [ 318.866617][ T9345] team0 (unregistering): Port device team_slave_1 removed [ 318.908106][ T9345] team0 (unregistering): Port device team_slave_0 removed [ 319.398513][T14513] lo speed is unknown, defaulting to 1000 [ 319.488807][T14520] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 319.720414][T14531] netlink: 'syz.3.2384': attribute type 1 has an invalid length. [ 319.795140][T14536] lo: entered promiscuous mode [ 319.824984][T14536] netlink: 'syz.0.2386': attribute type 2 has an invalid length. [ 319.843606][T14536] A link change request failed with some changes committed already. Interface lo may have been left with an inconsistent configuration, please check. [ 319.959954][T14488] lo speed is unknown, defaulting to 1000 [ 320.007226][ T9345] netdevsim netdevsim1 netdevsim3 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.077433][T14538] tunl0: entered promiscuous mode [ 320.101105][T14538] netlink: 'syz.5.2385': attribute type 3 has an invalid length. [ 320.130117][ T5842] Bluetooth: hci3: command tx timeout [ 320.185996][ T9345] netdevsim netdevsim1 netdevsim2 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.289682][ T31] INFO: task syz.4.1019:9502 blocked for more than 143 seconds. [ 320.304111][ T31] Not tainted 6.16.0-rc3-syzkaller-00144-gbd475eeaaf3c #0 [ 320.327378][ T31] Blocked by coredump. SYZFAIL: failed to recv rpc fd=3 want=4 recv=0 n=0 (errno 9: Bad file descriptor) [ 320.337683][ T31] "echo 0 > /proc/sys/kernel/hung_task_timeout_secs" disables this message. [ 320.365310][ T31] task:syz.4.1019 state:D stack:26632 pid:9502 tgid:9495 ppid:5836 task_flags:0x40054c flags:0x00004000 [ 320.378228][ T31] Call Trace: [ 320.382267][ T31] [ 320.385236][ T31] __schedule+0x16f5/0x4d00 [ 320.390153][ T31] ? __lock_acquire+0xab9/0xd20 [ 320.419789][ T31] ? schedule+0x165/0x360 [ 320.424205][ T31] ? __pfx___schedule+0x10/0x10 [ 320.429189][ T31] ? schedule+0x91/0x360 [ 320.473339][ T31] schedule+0x165/0x360 [ 320.477572][ T31] schedule_preempt_disabled+0x13/0x30 [ 320.483326][ T31] rwsem_down_write_slowpath+0xbec/0x1030 [ 320.489681][ T31] ? rwsem_down_write_slowpath+0x7ec/0x1030 [ 320.495620][ T31] ? __pfx_rwsem_down_write_slowpath+0x10/0x10 [ 320.502131][ T31] ? __lock_acquire+0xab9/0xd20 [ 320.507126][ T31] ? exit_mmap+0x28e/0xb50 [ 320.512567][ T31] down_write+0x1ab/0x1f0 [ 320.516944][ T31] ? __pfx_down_write+0x10/0x10 [ 320.535245][ T31] exit_mmap+0x28e/0xb50 [ 320.539630][ T31] ? uprobe_clear_state+0x20f/0x290 [ 320.545023][ T31] ? __pfx_exit_mmap+0x10/0x10 [ 320.552649][ T31] ? __mutex_unlock_slowpath+0x1cd/0x700 [ 320.558319][ T31] ? __pfx_exit_aio+0x10/0x10 [ 320.563226][ T31] ? uprobe_clear_state+0x274/0x290 [ 320.568441][ T31] __mmput+0x118/0x420 [ 320.572756][ T31] exit_mm+0x1da/0x2c0 [ 320.576852][ T31] ? __pfx_exit_mm+0x10/0x10 [ 320.581557][ T31] ? rcu_is_watching+0x15/0xb0 [ 320.586317][ T31] do_exit+0x648/0x22e0 [ 320.591024][ T31] ? do_raw_spin_lock+0x121/0x290 [ 320.596085][ T31] ? __pfx_do_exit+0x10/0x10 [ 320.600754][ T31] do_group_exit+0x21c/0x2d0 [ 320.605350][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 320.611348][ T5842] Bluetooth: hci4: command tx timeout [ 320.617423][ T31] get_signal+0x1286/0x1340 [ 320.622185][ T31] arch_do_signal_or_restart+0x9a/0x750 [ 320.627739][ T31] ? __pfx_arch_do_signal_or_restart+0x10/0x10 [ 320.633945][ T31] ? exit_to_user_mode_loop+0x40/0x110 [ 320.639763][ T31] exit_to_user_mode_loop+0x75/0x110 [ 320.645082][ T31] do_syscall_64+0x2bd/0x3b0 [ 320.650110][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 320.655345][ T31] ? entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.661483][ T31] ? clear_bhb_loop+0x60/0xb0 [ 320.666154][ T31] entry_SYSCALL_64_after_hwframe+0x77/0x7f [ 320.672075][ T31] RIP: 0033:0x7fce8578e929 [ 320.676492][ T31] RSP: 002b:00007fce865200e8 EFLAGS: 00000246 ORIG_RAX: 00000000000000ca [ 320.685203][ T31] RAX: fffffffffffffe00 RBX: 00007fce859b6088 RCX: 00007fce8578e929 [ 320.694764][ T31] RDX: 0000000000000000 RSI: 0000000000000080 RDI: 00007fce859b6088 [ 320.702844][ T31] RBP: 00007fce859b6080 R08: 0000000000000000 R09: 0000000000000000 [ 320.711093][ T31] R10: 0000000000000000 R11: 0000000000000246 R12: 00007fce859b608c [ 320.719057][ T31] R13: 0000000000000000 R14: 00007fff39b8ad00 R15: 00007fff39b8ade8 [ 320.727100][ T31] [ 320.732234][ T31] [ 320.732234][ T31] Showing all locks held in the system: [ 320.744578][ T31] 1 lock held by khungtaskd/31: [ 320.756853][ T9345] netdevsim netdevsim1 netdevsim1 (unregistering): unset [1, 0] type 2 family 0 port 6081 - 0 [ 320.767465][ T31] #0: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: debug_show_all_locks+0x2e/0x180 [ 320.782436][ T31] 3 locks held by kworker/u8:9/3521: [ 320.787781][ T31] #0: ffff88801a489148 ((wq_completion)events_unbound){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 320.800622][ T31] #1: ffffc9000cc47bc0 ((linkwatch_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 320.811707][ T31] #2: ffffffff8f50ff48 (rtnl_mutex){+.+.}-{4:4}, at: linkwatch_event+0xe/0x60 [ 320.820904][ T31] 2 locks held by getty/5594: [ 320.825594][ T31] #0: ffff88803134f0a0 (&tty->ldisc_sem){++++}-{0:0}, at: tty_ldisc_ref_wait+0x25/0x70 [ 320.835733][ T31] #1: ffffc9000332b2f0 (&ldata->atomic_read_lock){+.+.}-{4:4}, at: n_tty_read+0x43e/0x1400 [ 320.846041][ T31] 3 locks held by kworker/1:5/5923: [ 320.851671][ T31] #0: ffff88801a480d48 ((wq_completion)events){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 320.863055][ T31] #1: ffffc900044ffbc0 ((fqdir_free_work).work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 320.874691][ T31] #2: ffffffff8e144840 (rcu_state.barrier_mutex){+.+.}-{4:4}, at: rcu_barrier+0x4c/0x570 [ 320.885628][ T31] 5 locks held by kworker/u8:10/9342: [ 320.891368][ T31] #0: ffff8880b8639f98 (&rq->__lock){-.-.}-{2:2}, at: raw_spin_rq_lock_nested+0x2a/0x140 [ 320.901964][ T31] #1: ffff8880b8623f08 (&per_cpu_ptr(group->pcpu, cpu)->seq){-.-.}-{0:0}, at: psi_task_switch+0x39a/0x6d0 [ 320.913651][ T31] #2: ffff8880b8625958 (&base->lock){-.-.}-{2:2}, at: __mod_timer+0x1ae/0xf30 [ 320.925159][ T31] #3: ffffffff99d50298 (&obj_hash[i].lock){-.-.}-{2:2}, at: debug_object_activate+0xbb/0x420 [ 320.937267][ T31] #4: ffffffff8e13ee60 (rcu_read_lock){....}-{1:3}, at: unwind_next_frame+0xa5/0x2390 [ 320.947331][ T31] 2 locks held by kworker/u8:11/9343: [ 320.953165][ T31] 7 locks held by kworker/u8:13/9345: [ 320.958550][ T31] #0: ffff88801b2fe148 ((wq_completion)netns){+.+.}-{0:0}, at: process_scheduled_works+0x9b4/0x17b0 [ 320.969565][ T31] #1: ffffc9000436fbc0 (net_cleanup_work){+.+.}-{0:0}, at: process_scheduled_works+0x9ef/0x17b0 [ 320.980498][ T31] #2: ffffffff8f503350 (pernet_ops_rwsem){++++}-{4:4}, at: cleanup_net+0xf7/0x800 [ 320.990021][ T31] #3: ffff88805a4a50e8 (&dev->mutex){....}-{4:4}, at: devlink_pernet_pre_exit+0x10a/0x3d0 [ 321.000632][ T31] #4: ffff888027e12250 (&devlink->lock_key#26){+.+.}-{4:4}, at: devlink_pernet_pre_exit+0x11c/0x3d0 [ 321.011896][ T31] #5: ffffffff8f50ff48 (rtnl_mutex){+.+.}-{4:4}, at: nsim_destroy+0xdb/0x670 [ 321.021021][ T31] #6: ffffffff8e144978 (rcu_state.exp_mutex){+.+.}-{4:4}, at: synchronize_rcu_expedited+0x3b9/0x730 [ 321.032029][ T31] 1 lock held by syz.4.1019/9502: [ 321.037072][ T31] #0: ffff88807c57cd20 (&mm->mmap_lock){++++}-{4:4}, at: exit_mmap+0x28e/0xb50 [ 321.046504][ T31] 2 locks held by syz-executor/14488: [ 321.051927][ T31] #0: ffffffff8f503350 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 321.061387][ T31] #1: ffffffff8f50ff48 (rtnl_mutex){+.+.}-{4:4}, at: ip_tunnel_init_net+0x2ab/0x800 [ 321.071670][ T31] 2 locks held by syz-executor/14513: [ 321.077047][ T31] #0: ffffffff8f503350 (pernet_ops_rwsem){++++}-{4:4}, at: copy_net_ns+0x304/0x4d0 [ 321.086482][ T31] #1: ffffffff8f50ff48 (rtnl_mutex){+.+.}-{4:4}, at: wg_netns_pre_exit+0x1c/0x1d0 [ 321.095839][ T31] 4 locks held by syz.5.2385/14533: [ 321.101812][ T31] #0: ffff888058200dc0 (&hdev->req_lock){+.+.}-{4:4}, at: hci_unregister_dev+0x212/0x510 [ 321.111834][ T31] #1: ffff8880582000b8 (&hdev->lock){+.+.}-{4:4}, at: hci_dev_close_sync+0x66a/0x1330 [ 321.121654][ T31] #2: ffffffff8f678048 (hci_cb_list_lock){+.+.}-{4:4}, at: hci_conn_hash_flush+0xa1/0x230 [ 321.132153][ T31] #3: ffff88806ce0bb38 (&conn->lock#2){+.+.}-{4:4}, at: l2cap_conn_del+0x70/0x680 [ 321.141649][ T31] 1 lock held by syz.0.2389/14549: [ 321.146741][ T31] #0: ffffffff8f50ff48 (rtnl_mutex){+.+.}-{4:4}, at: tun_chr_close+0x3e/0x1c0 [ 321.155922][ T31] 3 locks held by syz.3.2391/14553: [ 321.161467][ T31] #0: ffffffff8f5760f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 321.170345][ T31] #1: ffffffff8f575f08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 321.179555][ T31] #2: ffffffff8f50ff48 (rtnl_mutex){+.+.}-{4:4}, at: wg_set_device+0x15b/0x1fe0 [ 321.188727][ T31] 2 locks held by syz.3.2391/14554: [ 321.194099][ T31] #0: ffffffff8f5760f0 (cb_lock){++++}-{4:4}, at: genl_rcv+0x19/0x40 [ 321.202617][ T31] #1: ffffffff8f575f08 (genl_mutex){+.+.}-{4:4}, at: genl_rcv_msg+0x10d/0x790 [ 321.211712][ T31] [ 321.214074][ T31] ============================================= [ 321.214074][ T31] [ 321.251899][ T31] NMI backtrace for cpu 1 [ 321.251922][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00144-gbd475eeaaf3c #0 PREEMPT(full) [ 321.251944][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 321.251955][ T31] Call Trace: [ 321.251963][ T31] [ 321.251971][ T31] dump_stack_lvl+0x189/0x250 [ 321.252000][ T31] ? __wake_up_klogd+0xd9/0x110 [ 321.252023][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 321.252048][ T31] ? __pfx__printk+0x10/0x10 [ 321.252080][ T31] nmi_cpu_backtrace+0x39e/0x3d0 [ 321.252107][ T31] ? __pfx_nmi_cpu_backtrace+0x10/0x10 [ 321.252131][ T31] ? _printk+0xcf/0x120 [ 321.252154][ T31] ? __pfx__printk+0x10/0x10 [ 321.252175][ T31] ? __pfx_nmi_raise_cpu_backtrace+0x10/0x10 [ 321.252202][ T31] nmi_trigger_cpumask_backtrace+0x17a/0x300 [ 321.252226][ T31] watchdog+0xfee/0x1030 [ 321.252251][ T31] ? watchdog+0x1de/0x1030 [ 321.252281][ T31] kthread+0x70e/0x8a0 [ 321.252305][ T31] ? __pfx_watchdog+0x10/0x10 [ 321.252326][ T31] ? __pfx_kthread+0x10/0x10 [ 321.252345][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 321.252367][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 321.252388][ T31] ? __pfx_kthread+0x10/0x10 [ 321.252407][ T31] ret_from_fork+0x3fc/0x770 [ 321.252434][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 321.252463][ T31] ? __switch_to_asm+0x39/0x70 [ 321.252479][ T31] ? __switch_to_asm+0x33/0x70 [ 321.252495][ T31] ? __pfx_kthread+0x10/0x10 [ 321.252515][ T31] ret_from_fork_asm+0x1a/0x30 [ 321.252549][ T31] [ 321.252556][ T31] Sending NMI from CPU 1 to CPUs 0: [ 321.412618][ C0] NMI backtrace for cpu 0 [ 321.412634][ C0] CPU: 0 UID: 0 PID: 0 Comm: swapper/0 Not tainted 6.16.0-rc3-syzkaller-00144-gbd475eeaaf3c #0 PREEMPT(full) [ 321.412653][ C0] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 321.412663][ C0] RIP: 0010:update_irq_load_avg+0xa4/0xe50 [ 321.412688][ C0] Code: 92 4d 03 65 00 4c 89 e0 48 c1 e8 03 49 bd 00 00 00 00 00 fc ff df 42 80 3c 28 00 74 08 4c 89 e7 e8 e1 d9 8b 00 4d 0f af 34 24 <49> c1 ee 0a 42 0f b6 44 2d 00 84 c0 0f 85 8b 09 00 00 8b bb 28 0c [ 321.412701][ C0] RSP: 0018:ffffc90000007d90 EFLAGS: 00000006 [ 321.412716][ C0] RAX: 1ffff110170c45ff RBX: ffff8880b8639f80 RCX: dffffc0000000000 [ 321.412728][ C0] RDX: 0000000000010000 RSI: 000000000000db59 RDI: ffff8880b8639f80 [ 321.412738][ C0] RBP: 1ffff110170c7575 R08: 0000000000000003 R09: 0000000000000004 [ 321.412748][ C0] R10: dffffc0000000000 R11: fffff52000000fb0 R12: ffff8880b8622ff8 [ 321.412760][ C0] R13: dffffc0000000000 R14: 00000000036d6400 R15: ffff8880b863aba8 [ 321.412771][ C0] FS: 0000000000000000(0000) GS:ffff888125c50000(0000) knlGS:0000000000000000 [ 321.412785][ C0] CS: 0010 DS: 0000 ES: 0000 CR0: 0000000080050033 [ 321.412795][ C0] CR2: 00007f24025c8d58 CR3: 000000000df38000 CR4: 00000000003526f0 [ 321.412809][ C0] DR0: 0000000000000000 DR1: 0000000000000000 DR2: 0000000000000000 [ 321.412818][ C0] DR3: 0000000000000000 DR6: 00000000fffe0ff0 DR7: 0000000000000400 [ 321.412828][ C0] Call Trace: [ 321.412834][ C0] [ 321.412846][ C0] update_rq_clock+0x284/0x5b0 [ 321.412870][ C0] sched_ttwu_pending+0x1e4/0x6e0 [ 321.412889][ C0] ? __pfx_sched_clock_idle_wakeup_event+0x10/0x10 [ 321.412914][ C0] ? __pfx_sched_ttwu_pending+0x10/0x10 [ 321.412929][ C0] ? kvm_sched_clock_read+0x11/0x20 [ 321.412948][ C0] ? sched_clock+0x3f/0x60 [ 321.412965][ C0] ? sched_clock_cpu+0x74/0x430 [ 321.412986][ C0] ? rcu_is_watching+0x15/0xb0 [ 321.413009][ C0] __flush_smp_call_function_queue+0x86d/0xaa0 [ 321.413036][ C0] __sysvec_call_function_single+0xa8/0x3d0 [ 321.413056][ C0] sysvec_call_function_single+0x9e/0xc0 [ 321.413075][ C0] [ 321.413080][ C0] [ 321.413086][ C0] asm_sysvec_call_function_single+0x1a/0x20 [ 321.413102][ C0] RIP: 0010:pv_native_safe_halt+0x13/0x20 [ 321.413121][ C0] Code: cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 90 f3 0f 1e fa 66 90 0f 00 2d e3 75 21 00 f3 0f 1e fa fb f4 cc cc cc cc cc cc cc cc cc cc cc cc 90 90 90 90 90 90 90 90 90 [ 321.413134][ C0] RSP: 0018:ffffffff8de07d80 EFLAGS: 000002c6 [ 321.413146][ C0] RAX: 868b3bb870331a00 RBX: ffffffff81974d58 RCX: 868b3bb870331a00 [ 321.413158][ C0] RDX: 0000000000000001 RSI: ffffffff8d9822f0 RDI: ffffffff8be28d40 [ 321.413169][ C0] RBP: ffffffff8de07ea8 R08: ffff8880b8632f5b R09: 1ffff110170c65eb [ 321.413180][ C0] R10: dffffc0000000000 R11: ffffed10170c65ec R12: ffffffff8fa10cf0 [ 321.413192][ C0] R13: 0000000000000000 R14: 0000000000000000 R15: 1ffffffff1bd2a50 [ 321.413204][ C0] ? do_idle+0x1e8/0x510 [ 321.413222][ C0] default_idle+0x13/0x20 [ 321.413236][ C0] default_idle_call+0x74/0xb0 [ 321.413250][ C0] do_idle+0x1e8/0x510 [ 321.413266][ C0] ? __pfx_do_idle+0x10/0x10 [ 321.413288][ C0] cpu_startup_entry+0x44/0x60 [ 321.413301][ C0] rest_init+0x2de/0x300 [ 321.413316][ C0] ? __pfx_x86_late_time_init+0x10/0x10 [ 321.413337][ C0] start_kernel+0x47d/0x500 [ 321.413360][ C0] x86_64_start_reservations+0x24/0x30 [ 321.413378][ C0] x86_64_start_kernel+0x143/0x1c0 [ 321.413396][ C0] common_startup_64+0x13e/0x147 [ 321.413420][ C0] [ 321.415565][ T31] Kernel panic - not syncing: hung_task: blocked tasks [ 321.766098][ T31] CPU: 1 UID: 0 PID: 31 Comm: khungtaskd Not tainted 6.16.0-rc3-syzkaller-00144-gbd475eeaaf3c #0 PREEMPT(full) [ 321.777898][ T31] Hardware name: Google Google Compute Engine/Google Compute Engine, BIOS Google 05/07/2025 [ 321.787947][ T31] Call Trace: [ 321.791219][ T31] [ 321.794146][ T31] dump_stack_lvl+0x99/0x250 [ 321.798740][ T31] ? __asan_memcpy+0x40/0x70 [ 321.803332][ T31] ? __pfx_dump_stack_lvl+0x10/0x10 [ 321.808531][ T31] ? __pfx__printk+0x10/0x10 [ 321.813124][ T31] panic+0x2db/0x790 [ 321.817023][ T31] ? __pfx_panic+0x10/0x10 [ 321.821444][ T31] ? nmi_backtrace_stall_check+0x433/0x440 [ 321.827254][ T31] ? preempt_schedule_thunk+0x16/0x30 [ 321.832646][ T31] ? nmi_trigger_cpumask_backtrace+0x2b6/0x300 [ 321.838830][ T31] watchdog+0x102d/0x1030 [ 321.843174][ T31] ? watchdog+0x1de/0x1030 [ 321.847606][ T31] kthread+0x70e/0x8a0 [ 321.851791][ T31] ? __pfx_watchdog+0x10/0x10 [ 321.856769][ T31] ? __pfx_kthread+0x10/0x10 [ 321.861372][ T31] ? _raw_spin_unlock_irq+0x23/0x50 [ 321.866582][ T31] ? lockdep_hardirqs_on+0x9c/0x150 [ 321.871784][ T31] ? __pfx_kthread+0x10/0x10 [ 321.876391][ T31] ret_from_fork+0x3fc/0x770 [ 321.881002][ T31] ? __pfx_ret_from_fork+0x10/0x10 [ 321.886211][ T31] ? __switch_to_asm+0x39/0x70 [ 321.890965][ T31] ? __switch_to_asm+0x33/0x70 [ 321.895769][ T31] ? __pfx_kthread+0x10/0x10 [ 321.900366][ T31] ret_from_fork_asm+0x1a/0x30 [ 321.905133][ T31] [ 321.908406][ T31] Kernel Offset: disabled [ 321.912734][ T31] Rebooting in 86400 seconds..